last executing test programs: 38.330853955s ago: executing program 3 (id=106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = dup(r0) write$FUSE_INTERRUPT(r3, &(0x7f0000002800)={0x10, 0x3d0dcbb955c47d23}, 0x10) 38.250708499s ago: executing program 3 (id=107): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200040600000e8100400088"], 0x4a) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) read(r2, &(0x7f0000001600)=""/233, 0xe9) sendto(r1, &(0x7f0000000040)="a873e12536fb84238cb4a9eb04644c87ab6fd5d60b84da189dfd7ab36df09a098c05eda7bed4364578f214353eca34ec19a136e8da75f3218abb5ea1180316276f15097574573924530e23653a9cf48fdd347871e0c901bbf9252c4e747b6dcb94e64b9ebbbeb8940f36caacbedcf628d74334f448cc42e1bd0054d0dffaffa93e891a7a0ba653c5775992081742a90a73b389e72534e21d87325712a5a4edd1066148d62bae15b311cf4c9f1a50f585d139e974bbba414d738fe93380e01facf72c6b48e205fa3ac4da5808450a146ec9d0f9ca955f210baf9fe806307288ea4377dac4f520137f895eaef7", 0xec, 0x885, 0x0, 0x0) 37.320090746s ago: executing program 3 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r4, 0x7}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r6, 0xf}, 0x8) r7 = syz_clone(0x2028000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7ef1, &(0x7f0000000500)={0x0, 0xe367, 0x200, 0x2, 0x2b5}) prctl$PR_SET_PTRACER(0x59616d61, r7) ptrace(0x10, r7) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @private}, &(0x7f0000000180)=0xc) r8 = open$dir(&(0x7f00000002c0)='./sys\x00', 0x40, 0x43) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x545d, &(0x7f0000000200)=0x3) r10 = openat(r8, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r10, &(0x7f0000000400)='typec_fusb302 0', 0xf) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "0e986f085c777e7521d7bb9cc6319b14", 0x8}}}, 0x1a) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000040)=0x4) 36.800121484s ago: executing program 3 (id=116): r0 = socket$kcm(0x10, 0x7, 0x4) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) read$FUSE(r1, &(0x7f0000002e00)={0x2020}, 0x2020) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 36.369872681s ago: executing program 3 (id=122): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 36.020314047s ago: executing program 3 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4003, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f00000003c0)={@void, @void, @ipv6=@tcp={0xa, 0x6, "c558cb", 0x94, 0x6, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, {[@fragment={0xff, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}], {{0x4e23, 0x4e24, 0x41424344, r3, 0x1, 0x0, 0x12, 0x0, 0x3, 0x0, 0x6e3, {[@fastopen={0x22, 0x6, '2H`$'}, @sack={0x5, 0x1a, [0xcfa0, 0x0, 0x7, 0x9, 0x2, 0x0]}, @md5sig={0x13, 0x12, "0ef8f276f2eeb6bdc78b9e78995da663"}]}}, {"43356d76976f4f3bcd6d924714f922e705743e77de1ead21145541911e8cafd0ddc563bf73f97a8c868f864817513626a49bb8477e8f4a3e06c5af16d16a4c2ed90a7cf4"}}}}}, 0xbc) r4 = socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000180), 0xb, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040804}, 0x8040) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x188, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x15c, 0x2, [@TCA_U32_POLICE={0x88, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x7ab4, 0x8, {0x4, 0x0, 0x5, 0xb660, 0xfff8, 0x50}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x152}, 0x2, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x2, 0xf, 0x1, {0x5, 0x0, 0x5, 0x3c, 0x9a}, {0xc, 0x2, 0x9, 0xfff, 0x7, 0x2}, 0x6, 0x8d4, 0x60cc}}]}, @TCA_U32_MARK={0x10, 0xa, {0xaa, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x1b}, @TCA_U32_ACT={0xb8, 0x7, [@m_ife={0xb4, 0x17, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x72, 0x6, "b2bea8350dbbdff1081024b9252328cbccd8ab7e725b79f9e61e971f9232d53d41c2072fd5d7db919d39de250795626b416d04aa5b10ecd4e364edee8ced50141da7a8befa438a92cd1b3ef195b23a24d27b0df31a91cda3bcb1635649558549e6c92145d561145124bbaf17948c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x188}}, 0x4040004) 36.012257705s ago: executing program 32 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4003, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f00000003c0)={@void, @void, @ipv6=@tcp={0xa, 0x6, "c558cb", 0x94, 0x6, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, {[@fragment={0xff, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}], {{0x4e23, 0x4e24, 0x41424344, r3, 0x1, 0x0, 0x12, 0x0, 0x3, 0x0, 0x6e3, {[@fastopen={0x22, 0x6, '2H`$'}, @sack={0x5, 0x1a, [0xcfa0, 0x0, 0x7, 0x9, 0x2, 0x0]}, @md5sig={0x13, 0x12, "0ef8f276f2eeb6bdc78b9e78995da663"}]}}, {"43356d76976f4f3bcd6d924714f922e705743e77de1ead21145541911e8cafd0ddc563bf73f97a8c868f864817513626a49bb8477e8f4a3e06c5af16d16a4c2ed90a7cf4"}}}}}, 0xbc) r4 = socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000180), 0xb, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040804}, 0x8040) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x188, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x15c, 0x2, [@TCA_U32_POLICE={0x88, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x7ab4, 0x8, {0x4, 0x0, 0x5, 0xb660, 0xfff8, 0x50}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x152}, 0x2, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x2, 0xf, 0x1, {0x5, 0x0, 0x5, 0x3c, 0x9a}, {0xc, 0x2, 0x9, 0xfff, 0x7, 0x2}, 0x6, 0x8d4, 0x60cc}}]}, @TCA_U32_MARK={0x10, 0xa, {0xaa, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x1b}, @TCA_U32_ACT={0xb8, 0x7, [@m_ife={0xb4, 0x17, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x72, 0x6, "b2bea8350dbbdff1081024b9252328cbccd8ab7e725b79f9e61e971f9232d53d41c2072fd5d7db919d39de250795626b416d04aa5b10ecd4e364edee8ced50141da7a8befa438a92cd1b3ef195b23a24d27b0df31a91cda3bcb1635649558549e6c92145d561145124bbaf17948c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x188}}, 0x4040004) 29.590516999s ago: executing program 0 (id=192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x700000000000000}, 0x0) 29.58834008s ago: executing program 0 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r1, &(0x7f0000000000)=""/166, 0xfb) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 29.531668956s ago: executing program 0 (id=195): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r0, &(0x7f00000001c0)=0x7, 0x12) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) 29.530280986s ago: executing program 0 (id=197): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0xc0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimes(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7, 0x8, 0x10, 0xffffffffffffffff, 0x20000000) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000009, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x20) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000000)={0x0, 0x0}) 29.428730063s ago: executing program 0 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x2c31a975, @loopback, 0x687}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 29.130670031s ago: executing program 0 (id=200): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x6, 0x5, 0x72dc, 0x6, 0x1, {0x800000000000000, 0x40000000009, 0x7, 0x1, 0x89, 0xd615, 0x9, 0x5, 0x7ffffffe, 0x8000, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0xb}}, {0x0, 0x13}}}, 0xa0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x349}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e04023c20", @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES64=r1], 0x7) listen(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x20) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r6, 0x0, 0x3f) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xfff, 0x3, 0x1, 0x80000000, 0x101, 0x2]}, &(0x7f0000000280)=0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r9, 0xfffff000) 29.112984792s ago: executing program 33 (id=200): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x6, 0x5, 0x72dc, 0x6, 0x1, {0x800000000000000, 0x40000000009, 0x7, 0x1, 0x89, 0xd615, 0x9, 0x5, 0x7ffffffe, 0x8000, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0xb}}, {0x0, 0x13}}}, 0xa0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x349}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e04023c20", @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES64=r1], 0x7) listen(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x20) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r6, 0x0, 0x3f) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xfff, 0x3, 0x1, 0x80000000, 0x101, 0x2]}, &(0x7f0000000280)=0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r9, 0xfffff000) 1.801568084s ago: executing program 4 (id=538): r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x40002022}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.708502361s ago: executing program 4 (id=539): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c50)=0xfd) 1.411723596s ago: executing program 4 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev(r0, &(0x7f0000000080)=[{}], 0x1, 0x7ff, 0x2) 1.348667797s ago: executing program 4 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x9c221) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newtclass={0x8c, 0x28, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0xb}, {0xfff3}, {0xf, 0xfff3}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x81, 0x1}}]}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x78, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x8c}}, 0x0) (async) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0xa}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x100, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x101, 0xe0000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) (async) listen(r7, 0x5) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x11, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) (async) ioctl$FIBMAP(r10, 0x1, &(0x7f00000002c0)=0x3) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) sendto$inet(r8, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) accept4(r7, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 868.579552ms ago: executing program 5 (id=563): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000900)=0x15) ioctl(0xffffffffffffffff, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c50)=0xfd) 799.751698ms ago: executing program 5 (id=565): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000bf030000000000002500000006000000be91000000000000b5020000020000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 799.704309ms ago: executing program 5 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev(r0, &(0x7f0000000080)=[{}], 0x1, 0x7ff, 0x2) 700.785502ms ago: executing program 5 (id=567): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x4, 0x2}, 0x8) mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x43, 0x138, &(0x7f00000001c0)={0xfffffffffffffff9, 0x9, 0x9, 0x2}) 700.509287ms ago: executing program 2 (id=568): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) (async) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) (async) r2 = add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {0x6, 0x3}, {0x4, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="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", 0x1000, r2) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 700.359849ms ago: executing program 5 (id=569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x4, 0x5, 0x6, @lba=0x6, @lba=0x15300276}) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100c010, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 698.755755ms ago: executing program 2 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x90, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4468b5ea9480227418c313b6db2234f4"}, @NL80211_ATTR_SSID={0xb, 0x34, @random="7d1e7a4f24c689"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="a77b904dfb82137cb833049b8eb60efa915508e22b704b7093f7a5"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x13}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1e}]}, 0x90}}, 0x20004090) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x2) 601.453112ms ago: executing program 5 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000000200000000000000000005000400010000000900020073797a32000000000500050002000000050001000600000013000300686173683a6e65742c69668c2b5a7dea9e6f61636500"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r2, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x20, 0x70bd29, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10001}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2a76}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x35) listen(r1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) syz_usb_connect(0x0, 0xb6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r6, 0x1, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r5, 0x0, 0x0, 0x200480f5) close(r4) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, &(0x7f00000003c0)='0', 0x1) write(r4, &(0x7f0000000480)="cdf3d6", 0x3) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) accept4(r1, 0x0, 0x0, 0x80800) 527.198187ms ago: executing program 2 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="e005f90192819f42206c62", 0xb}], 0x1, 0x7ff, 0x2) 480.405547ms ago: executing program 4 (id=577): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x1, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@chain={'key_or_keyring:', r6}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r5) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000000040)={0xd, 0x7, 0x9}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$char_usb(r9, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000924000/0x1000)=nil, 0x1000}, 0x1}) read(r0, &(0x7f00000002c0)=""/153, 0x99) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x700, 0x80, 0x3, 0x3ff, {{0x52, 0x4, 0x0, 0x3a, 0x148, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x3e, [@remote, @empty, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x3, '9'}, @ssrr={0x89, 0x1b, 0x4, [@dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0x5, [{@loopback, 0x3}]}, @timestamp={0x44, 0x10, 0xce, 0x0, 0x3, [0x0, 0x80000000, 0x3]}, @cipso={0x86, 0x73, 0x3, [{0x5, 0x10, "739f0652a63cf2f8083c3e29efb7"}, {0x0, 0xa, "b78668b17ac5975a"}, {0x0, 0x10, "33087a41d882c7e54e14aed452be"}, {0x2, 0xc, "bbd8228d5b8e472c2294"}, {0xa, 0xc, "2204950cf22188906b09"}, {0x1, 0xf, "dee2bfa1efbb7012713783588f"}, {0x2, 0xd, "755c0c815e31fded03e304"}, {0x1, 0xc, "675cc2b196985139b543"}, {0x1, 0x3, "bc"}]}, @lsrr={0x83, 0x17, 0xd1, [@rand_addr=0x64010100, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1]}, @cipso={0x86, 0x30, 0x1, [{0x6, 0x5, "f6de15"}, {0x5, 0x8, "d84af71f2ffc"}, {0x0, 0x7, "589c7b01b8"}, {0x6, 0xd, "10bc7e99100a0013605ab7"}, {0x2, 0x9, "ed9937ad953dad"}]}, @timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x9, [{@remote, 0xdc}, {@remote, 0x6}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x92}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @alu={0x4, 0x0, 0x6, 0x9, 0x8, 0x2, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000200)='GPL\x00', 0x34506a05, 0xa4, &(0x7f0000000380)=""/164, 0x41000, 0x30, '\x00', r10, 0x0, r9, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0x9, 0x86}, 0x10, 0x2cc32, r9, 0x5, &(0x7f0000000680)=[r9, r9], &(0x7f00000006c0)=[{0x4, 0x2, 0x8, 0x8}, {0x2, 0x4, 0x7, 0x9}, {0x1, 0x5, 0x8}, {0x1, 0x2, 0x1, 0xc}, {0x4, 0x1, 0x9, 0x9}], 0x10, 0x3}, 0x94) 479.96637ms ago: executing program 2 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/dax0.0/namespace\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x4}}) write(r0, &(0x7f00000003c0)='namespace0.0', 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x106, 0x2}}, 0x20) 401.46725ms ago: executing program 2 (id=580): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="136b89f8639c89b87ebdbcffce2fd47d12b0b0b3acfd7bbcb209a90dd935de982b9d0b5dd0008a1fcd1d4f44e86cbe1701ef1630fffa860ce57a6b2d31bbd777c7dd063d1b7495bd696877387d7ce5ca3513d154eaffffffff8e4526d93875767f878399971d6bf73dfbe653576272586503631d4b77b935fa5db012161c6fb0749958e9880b0c3ab2b5f67d700e49", @ANYRES64=0x0], 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000500)={0xf000000, 0x7, 0x7, r1, 0x0, &(0x7f0000000400)={0x98090f, 0x9, '\x00', @ptr=0x5}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) syz_open_dev$vcsu(&(0x7f0000000300), 0x3, 0x800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00009de84eca0a4c0030ebffff03000000", @ANYRES32=r2, @ANYRES64=r0], 0x20) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='oom_adj\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) close_range(r5, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000440)=0xffffffff, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10) 394.414096ms ago: executing program 2 (id=581): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x469f822bc591df1d, &(0x7f0000000080), 0x2, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x7, 0x1, 0x4000}, 0x7d, 0x0, 0x4, 0x0, 0x4, 0xf, 0x10, 0x17, 0x0, 0x0, {0x6, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}}}}]}, 0x78}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r5], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0, 0xffc0}], 0x2, &(0x7f0000000280)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f00000001c0)={r7, &(0x7f00000000c0)=':\xbf\x00', 0x606040, &(0x7f0000000100)={@align=0x700000000000000, {0x3, 0xff, 0x4, 0x4}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x18d}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "8a5cd6", 0x1}}}, 0xd) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x3c0d3550, 0x4) 250.919739ms ago: executing program 4 (id=582): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x8, 0x6, 0xfffffffffffffffd, 0x2, 0x1ff}, {0x84, 0xc, 0x9, 0x1, 0x7fffffff, 0x9a30}], ['\x00', '\x00']}) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x0, @remote}) close_range(r0, r0, 0x2) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f00000021c0)=[{}], 0x1, 0xfffffffe, &(0x7f0000002200)={[0x80000001]}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002240)={0x11e, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) shutdown(r0, 0x0) sendmsg$sock(r0, &(0x7f00000040c0)={&(0x7f0000003d40)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003dc0)="552ce63f458d537ea1d8cb09894f772cc2d1586034048b442a06b5bacf431df7970ad83da2b5591581d3394d6c6d7daf6ae3ada85f69ca49ea57a8dbcd9203795d1241e89b6c892090b2a6a7bb16e1415d982d40b653500c04fb2802e44e4d631cdb4aa161f398fc1ff57b614338578595687b", 0x73}, {&(0x7f0000003e40)="9704817d3c5f2f05440047a1a590fa94dda43c801df669d5545c952f56ed8a2671188da94bf8dd00087d17a354a9913a0ba69fd4d780b88ca7555576e76fc7a9d5e0a0acaae31dab594e45a69930c504103d4ac28c9f56d09f5a5e542d231f7ed555361baf4e468a35f99e2bb46c1a85fd675f1589c59c9349b80cf1a7ce2d4929742bd9f5e37ffe675a833cc751d71018dd8932b7e9788bb20f1469b5353b6db96f811c5ad776ae32d290177e3abc2c8d417d04e5853ea6d22c9d2b3c277a11410fa8108c5f8a72525e3f2dd0079592b3034acba15cd2450c4abfd1d11c5ff411a95c056b63cc1ba883717f8818da", 0xef}, {&(0x7f0000003f40)="4e24936a4b9c3abc9bf1fc882a135247b91f7c9bafc85aa508b09acec6f446f714f656cf0f26af859af442574da86a97b3749b7e5cd2047cfe2a491a8c7ee77e4ddec61668b94704d7fe6066e35c587b9eeab9cab1dd0ea6bbcef65089e5a81ad36921ba202db68a26ee7ebff7cfd2bfa06b526ca7c586bbcb8123007ab944d1402e89bfc4a78a144f3dc021037d", 0x8e}, {&(0x7f0000004000)="da4d2fcc369a89d36c1d351f4952dc9d08a1d3e2c34d85bbebee4b98fc4aaf037b63394a3c47e8f2b355f54ad64a233cd56d7c739f4df3f2fbe444ab31ef8c36e6f977a2682e297114eee071c2079b12f981fc", 0x53}], 0x4}, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004100)='./file0\x00', 0x8000, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000004140)) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000004240)={0x8f, 0x0, 0x1}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000042c0)='./file0\x00', 0x46000, 0x49) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000004300)=0x3) execve(&(0x7f0000004340)='./file0\x00', &(0x7f0000004440)={[&(0x7f0000004380)='.\x00', &(0x7f00000043c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000004400)='\x00']}, &(0x7f0000004540)={[&(0x7f0000004480)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000044c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000004500)='(\x00']}) connect$inet6(r0, &(0x7f0000004580)={0xa, 0x4e22, 0x3, @local, 0x80}, 0x1c) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f00000045c0), &(0x7f0000004600)=0x4) mkdirat(r3, &(0x7f0000004640)='./file0\x00', 0x23) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000046c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000004700)={0x48, 0xa, 0x0, 0x0, r5}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$sock(r6, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004780)="1c0a809431fd039ca8af7f93d1e4a752f85b5b8cb6f15abdee8cec9488fcf019a4686f5c5fde69f73dd2d6802601b6bde8723ec084e19d43458d456bda0f0de02b479e71b854dcaacad5adc31397eeb4fbc55caf6b55a905856a8617ff20eedfd7776eebc8f36e24cb21be6c2883db3cbe8e46782046343cfb2b0f6a1faf40a28f2106d0fda1180bcaaf", 0x8a}, {&(0x7f0000004840)="818ef50ce3cb1a47bef60b65ca870ffd5caa010ced34c63880a91313822267da01c5fbc27f90a561265f21512fb8f16db0c9aae85b91bde929dfc96b7dc0a9ec29efef78cca575f4a7394f02657b77d33b15dbbfc44848daec15a4161616f98ddb81cb513c6549d88021222623cf865eca3c587226f2d809d36717afcdd836dd3500f12d8538a90646ece30d6ab71aa6cb65a3aebcd7461de33415ef9a62d66ea58482c87a21d1d305ef80a0f14689014e11ab702db9a9154dc15960aa5f48ffdeed", 0xc2}, {&(0x7f0000004940)="db70382c837be74efe81de0604d7be283d203921aea33d15a8b766bcf31242ea177b83a4d04ce8a2ebb9b781a031d2fba1a78d4cb134abd8b6fae49490eb07443e6ab01e41da6546092dfcdccd8bf716466f297e7d6c4a85b5b0a70d24fbc1721b32f104fe2267e7f731a79863813dbfa2ac9083950d483c018a6cf9d7306ab48134748d1131257aa1577d1783f5abec599675", 0x93}, {&(0x7f0000004a00)="2ef7906e001b27d55afbd6da742e07c9f5bf50ac6c1cf63bd53ad30b85f8", 0x1e}, {&(0x7f0000004a40)="474f50c54aeef05f1bbfdef7b03b67e1586727d89de196fc19a673c52029080ca9a1e98faea8669e72dbd86d76624fe03924c2f400ac85a02960ed9d00e13b0403133b58dd4e97505644922ce9515d420a51ae4e79690a7a0d280d6e3bc92b2b67e2cf658658fc3219b5f41293df9c302aaa30b457d6987ab246775aed9b0e1fbe2211bb6e3f89a410bc26882b8ff6c2f1449109f274", 0x96}, {&(0x7f0000004b00)="b6f7bf8cc80cb0120a1cc5ea91c95154c5b1c4d38402d6d19db4d195edfc73305de3265f28ca4325541fb582d5220f8338c3f2c4c0913957a7203aad9c665171857ed58d99dbe0da0464d90c0c90d97607a1556cb9e7e9b6078dcaaa1d33c28fc20f5a1e421b4b17272aad3117b8bb65df3532e519a8c64e38bd018ef5d64cf1d8a808d679a6e4a1015350c78d5a63a28e9a1afe702c6e88207525a58a672be6bbb5c4821a79", 0xa6}, {&(0x7f0000004bc0)="b29e75ccfdc20672386dbe22075ed48a71069435c1bd422f4e669300002b1a402fe44e6a9690b3b72f535a1ed696e282889a", 0x32}, {&(0x7f0000004c00)="b90a60d2d847a9", 0x7}, {&(0x7f0000004c40)="0018d539da9e129c831a7c496d3cff6548245fcc19b0b65ebad2744a84efa02139436ff763024f0e17ee244207b05aae94e822cac24ff28f74fed27276c1187e890470c4a72fe68babe187f6ac116d2edf0ca055b4a71db12bc50fa3f96b6af0528bb5ca99a3aa90db359c1667fe22e9080140a69804a61fe63020d2d8046d9e67ae9befa6dea6ddc2b3135940a9034349ce", 0x92}], 0x9, &(0x7f0000004dc0)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}, 0x8010) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000004e80)={0x2, 0x1, 0x4, 0xae, 0xd, 0xfffe}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000004fc0)={r3, &(0x7f0000004ec0)='/selinux/mls\x00', 0x8c400, &(0x7f0000004f00)={@_ha_fsid={[0x805b5d98, 0x1]}, {0x81, 0x8000, 0x439, 0x3}}, 0x1ff, &(0x7f0000004f40)={@_ha_fsid}, &(0x7f0000004f80)=0x7}) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000005000)={0x5a8, 0x7, 0x5, 0x0, 0x3, 0x4, 0x3}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000005080)=@generic={&(0x7f0000005040)='./file1\x00', 0x0, 0x20}, 0x18) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) 187.596199ms ago: executing program 1 (id=585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x700000000000000) 141.803835ms ago: executing program 1 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020096620eae61bdcde6b7fc08a14e58cd242b2f5ce8b38b5df6729e6a"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 141.696797ms ago: executing program 1 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="e005f9019281", 0x6}], 0x1, 0x7ff, 0x2) 60.394069ms ago: executing program 1 (id=588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_open_dev$usbmon(&(0x7f0000000080), 0x2000000008, 0x4480) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000000000000700000007000004"], 0x18}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x4040058) close_range(r2, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000240), 0x2008000, &(0x7f0000000500)={[{@cpuset_v2_mode}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r11, r11, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRESOCT=r11, @ANYRESOCT=r8], 0xb4}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000680)={0x68, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x68}}, 0x48040) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setregid(0x0, 0xee01) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800480000340000000000059078ac1414bb0a0101008907ccac1414bb83034a000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="98abd915e61139ce4a6e3974b074252ce69ef84cc579a37ee37ee303936b01208d4146a9dabf0ae9ffd295d3ace6ca724091b89bd0c8572e7c840d3d788131b0cbd6802dea6ae4ec049ca1a16cf36014795bbf60629c8509d1c15e685ee9e69ae123c890ec307b91df6958e931e2e89c4bd489cf439e39567d5d07b1bee1a0"], 0x0) 748.165µs ago: executing program 1 (id=589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000bf030000000000002500000006000000be91000000000000b5020000020000008500000005000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 0s ago: executing program 1 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x601, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}]}, 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x19e) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000100)='./unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) r10 = openat(r9, &(0x7f0000000280)='./driver_override\x00', 0x1, 0x0) write(r10, &(0x7f0000000300)='ccp\x00', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/drivers/ccp\x00', 0x0, 0x0) r12 = openat(r11, &(0x7f0000000400)='./bind\x00', 0x1, 0x0) write(r12, &(0x7f0000000480)='0000:00:02.0\x00', 0xd) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004040)=@newtfilter={0x1cc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x2}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c90, 0x2, [@TCA_MATCHALL_ACT={0x1c8c, 0x2, [@m_pedit={0x1c88, 0x1, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x1, 0x2, [{0x54356f7f, 0xfffffc00, 0x0, 0xe18e, 0x3, 0x7}]}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x1, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x2, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x6, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x3, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x101, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x671f, 0x1, 0x8000, 0x3}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x3ff, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x23ffc, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x4}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0x7, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x3, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0xc, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x1, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x7ef49f37}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x2000, 0x2}, {0x100, 0x8, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x401}, {0x3, 0x7, 0x3, 0x9, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x8000, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0xdb05f263f454d6c3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x6}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x800, 0x8, 0x4, 0xd1c}, 0x18, 0xff}, [{0x3, 0xfffffffb, 0xed2d, 0x2, 0xa832, 0x9}, {0x2, 0x2, 0x5, 0xffff62d4, 0x9, 0xeb486087}, {0x7, 0x6545, 0x7, 0x876, 0x12, 0xfffffff7}, {0x4, 0xb06, 0x40, 0xffffffff, 0x7, 0x200}, {0x6, 0x8d8, 0x6, 0x8001, 0x8, 0x10}, {0x1, 0x44, 0x28, 0x82, 0x1, 0x9}, {0xfffffff6, 0x401, 0x9, 0x4, 0xa, 0x7}, {0x4, 0x6, 0x9, 0x0, 0x40}, {0x5, 0xa77, 0x1, 0x4f, 0x7f, 0x100}, {0x850, 0x0, 0x3, 0x9, 0x5, 0x4a25}, {0x3, 0x6, 0x9, 0x200, 0x800, 0xffffffff}, {0x7, 0x0, 0x33d, 0x3, 0x5, 0x3}, {0x1f0, 0xf, 0xbae8, 0xfffffff7, 0x78, 0x5}, {0x7, 0x6, 0x30000, 0x1ff, 0x1}, {0x87c, 0x1ff, 0x9, 0x3, 0x9, 0xff}, {0x6, 0x1000, 0x8, 0x84, 0x3, 0x9}, {0x9, 0x4, 0x5, 0xfffffff9, 0xb0, 0xed}, {0x3, 0x9, 0x0, 0x40, 0x9, 0x6}, {0x2a0a3ef3, 0x0, 0x1, 0x40, 0x3, 0xfffffff8}, {0x0, 0x60, 0x5, 0x3, 0xeac7, 0x2}, {0x4, 0x1, 0x5, 0x10001, 0xd, 0x3}, {0xfff, 0x3, 0x6, 0x3, 0x7, 0xf}, {0x0, 0xadf8, 0x5, 0x6, 0x81, 0x4}, {0x3ff, 0x6f6, 0xffff5c13, 0xfffffc01, 0x8000, 0x478f}, {0x4, 0x1, 0x5, 0x7, 0xffff9ef9, 0x868}, {0x4, 0x0, 0xa026, 0x4, 0x5, 0x4}, {0x9, 0xbe, 0xb, 0x400, 0xffff1524, 0x8}, {0xa, 0x0, 0x400, 0xffffffff, 0x7f, 0x1}, {0xb, 0x8, 0xfffffffc, 0x401, 0x8}, {0x9, 0x7fff, 0x6, 0xc40, 0x401}, {0x5, 0x1, 0x1ff, 0xf, 0x200, 0x8b29}, {0x7f, 0x3b61a683, 0x7, 0xd7, 0x2, 0xcf}, {0x2, 0x5, 0x6, 0x291a1c64, 0x889, 0x9}, {0x5, 0x10, 0x7, 0x2, 0x0, 0x3}, {0x8, 0x340, 0x4, 0x1, 0x364b, 0x9}, {0xffffffff, 0x2, 0x4, 0x1, 0xfffffffb, 0x1}, {0x72, 0x200000, 0x5, 0x388e4804, 0x3, 0x100}, {0x7, 0xfffffffc, 0x4, 0x101, 0x81, 0x80000000}, {0x4cec, 0x7, 0x3, 0x2, 0x4, 0xfffffff4}, {0x93, 0x66, 0xf, 0x2, 0x7, 0x7f}, {0x9, 0x1, 0x5, 0x1, 0xba, 0x5}, {0x4, 0x3ff, 0xf4, 0x8, 0x6, 0x3ff}, {0x57, 0x1, 0x9, 0x2e8, 0xfffffff7, 0xc42b}, {0x2ccc, 0x4, 0x0, 0x1, 0x0, 0xc7ca}, {0x4, 0x0, 0x872f, 0xffffffff, 0x7, 0x4}, {0x5, 0x5, 0x9, 0x7, 0x6, 0x7}, {0x5, 0x7, 0x5, 0x6, 0x8001, 0x6}, {0x4, 0x2, 0xf, 0x1, 0x5, 0x2}, {0x9, 0x7, 0x9, 0x2, 0xe, 0x7}, {0x9, 0xe, 0x6, 0x81, 0x82, 0x3}, {0x4, 0xfffff67c, 0x4, 0xfffffc00, 0x400, 0x3}, {0xbc4, 0x7, 0xb70, 0x81, 0x3ff, 0x9}, {0x4, 0x8bd, 0x6279, 0x2, 0x1000, 0x1}, {0xd, 0x5, 0x7, 0x10, 0x7, 0x6}, {0x9, 0x5, 0x40, 0x8, 0x7, 0x6}, {0x5, 0x5, 0x4, 0x7, 0xf, 0x8}, {0x5, 0x5, 0x8000, 0x0, 0x8, 0x2}, {0x7, 0xc, 0x2, 0x1, 0x10001, 0x6}, {0x7, 0x1e6d, 0x80000000, 0x2, 0x4, 0x10}, {0x7, 0x8, 0x1000, 0x8, 0x1, 0x8}, {0xd91d, 0x1, 0x1, 0x5, 0x0, 0x4}, {0x0, 0xd, 0x9, 0xd, 0x0, 0x1370}, {0x101, 0x800, 0x9, 0x3, 0x3ff, 0x1c51}, {0x8, 0x4, 0xfff, 0x5, 0x0, 0x2000000}, {0x4, 0xd15, 0x7, 0x2, 0x7, 0x7}, {0x4, 0x7, 0x248e, 0x1, 0x7, 0x9}, {0x5, 0xe, 0x1, 0xd, 0x6, 0x1}, {0x9, 0x2, 0x7, 0x3, 0x1000, 0x24000}, {0xbe, 0x5, 0xca69, 0x8, 0x7ff, 0x366}, {0x4, 0x1, 0x81, 0x6, 0x3, 0xc}, {0xfffffff0, 0x5c, 0x7, 0xfffff43b, 0x4, 0x5}, {0x5, 0x4, 0x2, 0x401, 0x5d1, 0x2a}, {0x4, 0x2, 0xe98f, 0x6, 0x2, 0x1}, {0x1, 0xf65, 0x2, 0xd, 0x8, 0x1}, {0x2, 0x7, 0xb, 0x5, 0xff, 0x6}, {0xff, 0x401, 0x1000, 0x40, 0x2, 0x2}, {0xb, 0x5, 0x4, 0xfe1f, 0xfffff12d, 0x3}, {0x80000001, 0x7, 0x4, 0x1, 0xffffffc0, 0x6}, {0x4, 0x5, 0x4, 0x0, 0x8001, 0x5}, {0xffff, 0x400, 0x6, 0x3, 0xffff, 0x3}, {0xf, 0x5, 0x3, 0x8, 0x10001, 0xfffff19f}, {0x0, 0xe, 0x2, 0x3f, 0xc0, 0x6}, {0x80000000, 0x1737, 0x6, 0x3, 0x9, 0x998}, {0x3, 0x5b32, 0x2, 0x8, 0x6, 0xfffffff2}, {0x4, 0x4, 0x9, 0x3ff, 0xc, 0x5}, {0x6, 0xfffffffc, 0x3, 0x7800, 0xa, 0x6}, {0x0, 0x101, 0x4, 0x3, 0xfff, 0x4}, {0x800, 0x8001, 0x6, 0x7fffffff, 0x2, 0x5}, {0x17, 0x7, 0x9, 0x7, 0xca, 0x82}, {0x7f, 0x7, 0x9, 0x2, 0x401, 0x1}, {0xe8f3, 0x7f, 0x401, 0x4, 0x8, 0x9}, {0x9, 0x639, 0x5, 0x7fff, 0x2800000, 0x7b7}, {0x5, 0xfffff9e9, 0x0, 0x1, 0xbc72, 0x6a}, {0x800, 0x9, 0x400, 0x2, 0x9, 0x7}, {0x7, 0x2, 0x8, 0x22, 0x7, 0x4}, {0xe6, 0xd81e, 0x3, 0x9, 0x4, 0xd}, {0x1, 0x400, 0x80, 0x7, 0x9, 0x79b}, {0x28000, 0x4, 0x701, 0x0, 0x4, 0x9}, {0x5, 0xe, 0x59a, 0x3, 0x1, 0x55d}, {0xf, 0x2, 0x1, 0x507f, 0x3, 0x2}, {0x9, 0x8, 0x7b, 0x40a6, 0x5, 0x5}, {0xfffffeff, 0xf72, 0x7fffffff, 0x6c, 0x0, 0x7}, {0x2, 0x0, 0xcd, 0x1, 0x5, 0x5}, {0xd50, 0x6, 0x0, 0x9, 0xff, 0x8}, {0xf, 0x8, 0xfffffffc, 0x1, 0x6, 0x1}, {0x9, 0x7, 0xf, 0x9, 0x200, 0x86}, {0x9, 0x401, 0x4, 0x8, 0xda, 0x1}, {0xfff, 0x7, 0x5621, 0x2, 0x9, 0x1}, {0xff, 0x7, 0x4, 0x40, 0x7, 0xd7d}, {0x35c2ac80, 0x100, 0x3, 0x1, 0x7f, 0x4}, {0x1, 0x63, 0x0, 0x22a839a, 0x7, 0x68f}, {0x3, 0x7, 0x93d, 0xd, 0xfff, 0xfffff5dc}, {0x5, 0x8, 0x7, 0x1ff80, 0x4, 0x5}, {0x3ff, 0xa8, 0x7e, 0x800, 0x8}, {0x8, 0x1c0000, 0x4, 0x4, 0xfffffffb, 0x7ff}, {0x1, 0x324, 0x5, 0x5, 0x9f0, 0x6}, {0x8000, 0x100, 0xf0a, 0x1, 0x40c6, 0xd}, {0x8, 0x3, 0x8, 0x2, 0x9, 0x8}, {0x9, 0x3, 0x5, 0x8000, 0x3, 0x4}, {0x7, 0x8, 0x400, 0xae4, 0x2, 0x6}, {0x8, 0x1ff, 0x80000000, 0x6, 0x7, 0x81}, {0x2, 0xd0, 0x2, 0x333f, 0x22dd, 0x8a}, {0x400, 0x5, 0xf387, 0x2, 0x7, 0xfffffff6}, {0x2, 0x6, 0x10001, 0x4, 0x1d, 0x200}, {0xe, 0x9, 0x3, 0x4, 0x5}, {0x1058, 0x4, 0x7, 0x200, 0x5}, {0x3b0, 0x1, 0x3, 0xc, 0xb62f, 0xfffff0a2}, {0x4, 0x4e, 0x6, 0x2, 0x9, 0x80000000}], [{0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1a1334685247db1e}, {0x0, 0x1}, {0x3, 0x8e674e73e52bd15c}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x43f78e8d43a7d389}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x6}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x5}, {0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1cc4}, 0x1, 0x0, 0x0, 0x10}, 0x800) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) 0s ago: executing program 2 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xa5, &(0x7f0000000500)={@local, @local, @void, {@generic={0x8847, "9e181b25614d41976fc9663c8eb9861d60331e48eb45704ee7af24bd1b50a74ea7b7e95793580bffcf97940c29a0a015790e338cf899075a254953a58c977d7d2bec386a7d8d35cba6ce5dd84668b380edbc270314ab5461213d39467598b0b43b9810d56f60b8a0a0a99a244a8ff0abc7d99cfd2ef78b54a2dc58f8ed0bac628536902aa8cde2cf5dde3727c9fae6fda0865da8867dc3"}}}, 0x0) fchdir(r3) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9362, 0x0) close(r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0a0000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): etdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471510][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471527][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471544][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471560][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471577][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471594][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471611][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471628][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471644][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471661][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.471914][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.550232][ T5880] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET) [ 40.612452][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.765708][ T5898] FAULT_INJECTION: forcing a failure. [ 40.765708][ T5898] name failslab, interval 1, probability 0, space 0, times 1 [ 40.765728][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) [ 40.765742][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.765749][ T5898] Call Trace: [ 40.765753][ T5898] [ 40.765758][ T5898] dump_stack_lvl+0x100/0x190 [ 40.765779][ T5898] should_fail_ex.cold+0x5/0xa [ 40.765795][ T5898] should_failslab+0xc2/0x120 [ 40.765811][ T5898] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.765825][ T5898] ? __asan_memcpy+0x3c/0x60 [ 40.765835][ T5898] ? __kernfs_new_node+0xd2/0xa10 [ 40.765855][ T5898] __kernfs_new_node+0xd2/0xa10 [ 40.765873][ T5898] ? __pfx___kernfs_new_node+0x10/0x10 [ 40.765891][ T5898] ? lock_acquire+0x1d1/0x380 [ 40.765903][ T5898] ? kernfs_root+0x23/0x2a0 [ 40.765918][ T5898] ? find_held_lock+0x2b/0x80 [ 40.765933][ T5898] ? kernfs_root+0xee/0x2a0 [ 40.765948][ T5898] ? kernfs_root+0xee/0x2a0 [ 40.765966][ T5898] kernfs_new_node+0x117/0x150 [ 40.765987][ T5898] __kernfs_create_file+0x53/0x350 [ 40.766002][ T5898] cgroup_addrm_files+0x4ef/0xdb0 [ 40.766024][ T5898] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 40.766043][ T5898] ? idr_replace+0xfa/0x170 [ 40.766062][ T5898] css_populate_dir+0x161/0x590 [ 40.766079][ T5898] cgroup_apply_control_enable+0x441/0xdd0 [ 40.766102][ T5898] cgroup_mkdir+0x57f/0x1330 [ 40.766117][ T5898] ? __pfx_cgroup_mkdir+0x10/0x10 [ 40.766130][ T5898] kernfs_iop_mkdir+0x111/0x190 [ 40.766146][ T5898] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 40.766160][ T5898] vfs_mkdir+0x364/0x850 [ 40.766174][ T5898] filename_mkdirat+0x48b/0x5e0 [ 40.766192][ T5898] ? __pfx_filename_mkdirat+0x10/0x10 [ 40.766207][ T5898] ? strncpy_from_user+0x19d/0x2d0 [ 40.766222][ T5898] ? do_getname+0x191/0x390 [ 40.766240][ T5898] __x64_sys_mkdirat+0x89/0xc0 [ 40.766255][ T5898] do_syscall_64+0x123/0x790 [ 40.766272][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.766283][ T5898] RIP: 0033:0x7f02b299e159 [ 40.766293][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.766304][ T5898] RSP: 002b:00007f02b382c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 40.766316][ T5898] RAX: ffffffffffffffda RBX: 00007f02b2c25fa0 RCX: 00007f02b299e159 [ 40.766323][ T5898] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 40.766331][ T5898] RBP: 00007f02b2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 40.766338][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.766345][ T5898] R13: 00007f02b2c26038 R14: 00007f02b2c25fa0 R15: 00007ffe0c6e36b8 [ 40.766360][ T5898] [ 40.766372][ T5898] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 40.773326][ T5900] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 40.837795][ T5906] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 40.854047][ T5910] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 40.921130][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 40.929525][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 41.003200][ T5929] mtrr: base(0x75d7dd4e000) is not aligned on a size(0x2c47bbd1000) boundary [ 41.007873][ T5929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17'. [ 41.034865][ T5932] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 41.041996][ T5934] netlink: 'syz.1.19': attribute type 32 has an invalid length. [ 41.042009][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 41.052724][ T5934] bond1: Setting coupled_control to off (0) [ 41.053111][ T5934] Zero length message leads to an empty skb [ 41.073674][ T5937] comedi comedi4: comedi_config --init_data is deprecated [ 41.078305][ T9] hid (null): invalid report_count 62105 [ 41.079034][ T9] hid (null): report_id 46028 is invalid [ 41.079067][ T9] hid (null): unknown global tag 0xc [ 41.083437][ T9] hid-generic 0000:0004:0000.0002: invalid report_count 62105 [ 41.083456][ T9] hid-generic 0000:0004:0000.0002: item 0 2 1 9 parsing failed [ 41.084603][ T9] hid-generic 0000:0004:0000.0002: probe with driver hid-generic failed with error -22 [ 41.220566][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.350626][ T58] usb 5-1: device descriptor read/64, error -71 [ 41.437416][ T5951] erspan0: entered promiscuous mode [ 41.437747][ T5951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48785 sclass=netlink_route_socket pid=5951 comm=syz.2.24 [ 41.590698][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.616234][ T5964] CIFS: VFS: bad security option: krb5i [ 41.722210][ T58] usb 5-1: device descriptor read/64, error -71 [ 41.802525][ T5972] netlink: 'syz.1.30': attribute type 2 has an invalid length. [ 41.831724][ T58] usb usb5-port1: attempt power cycle [ 41.960163][ T5980] batman_adv: batadv0: Adding interface: syzkaller0 [ 41.960173][ T5980] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.960189][ T5980] batman_adv: batadv0: Interface activated: syzkaller0 [ 41.975394][ T5979] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 41.984507][ T65] Bluetooth: hci3: command tx timeout [ 41.984527][ T5084] Bluetooth: hci0: command tx timeout [ 41.985958][ T5979] batman_adv: batadv0: Removing interface: syzkaller0 [ 41.991210][ T5084] Bluetooth: hci2: command tx timeout [ 41.991229][ T5084] Bluetooth: hci1: command tx timeout [ 42.023951][ T5973] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 42.023968][ T5973] device-mapper: ioctl: error adding target to table [ 42.170561][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.194607][ T58] usb 5-1: device descriptor read/8, error -71 [ 42.259861][ T38] nvmet: connect request for invalid subsystem t! [ 42.260210][ T6000] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 42.383123][ T6013] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 42.430514][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.451552][ T58] usb 5-1: device descriptor read/8, error -71 [ 42.571921][ T58] usb usb5-port1: unable to enumerate USB device [ 42.671231][ T65] Bluetooth: hci2: Malformed LE Event: 0x1b [ 42.671434][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 42.677608][ T43] kauditd_printk_skb: 124 callbacks suppressed [ 42.677621][ T43] audit: type=1400 audit(1789723995.860:295): avc: denied { mount } for pid=6023 comm="syz.1.43" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.682753][ T65] Bluetooth: hci2: Malformed LE Event: 0x1b [ 42.683617][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 42.684764][ T43] audit: type=1400 audit(1789723995.870:296): avc: denied { mounton } for pid=6023 comm="syz.1.43" path="/7/my_sysfs" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 42.989549][ T43] audit: type=1400 audit(1789723996.170:297): avc: denied { write } for pid=6037 comm="syz.2.46" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 43.027203][ T43] audit: type=1400 audit(1789723996.210:298): avc: denied { write } for pid=6039 comm="syz.2.47" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.037936][ T6040] hub 8-0:1.0: USB hub found [ 43.038121][ T6040] hub 8-0:1.0: 1 port detected [ 43.198348][ T43] audit: type=1400 audit(1789723996.380:299): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.349881][ T43] audit: type=1400 audit(1789723996.530:300): avc: denied { getopt } for pid=6050 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.458629][ T6053] netlink: 'syz.1.52': attribute type 10 has an invalid length. [ 43.459250][ T6053] macvlan1: entered promiscuous mode [ 43.459264][ T6053] macvlan1: entered allmulticast mode [ 43.462961][ T6053] veth1_vlan: entered allmulticast mode [ 43.464837][ T6053] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 43.605357][ T43] audit: type=1400 audit(1789723996.790:301): avc: denied { accept } for pid=6061 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.605982][ T6062] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 43.607635][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 43.607653][ T6062] veth0_virt_wifi: entered promiscuous mode [ 43.607662][ T6062] veth0_virt_wifi: entered allmulticast mode [ 43.621385][ T43] audit: type=1400 audit(1789723996.810:302): avc: denied { create } for pid=6063 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.621888][ T43] audit: type=1400 audit(1789723996.810:303): avc: denied { ioctl } for pid=6063 comm="syz.1.57" path="socket:[10748]" dev="sockfs" ino=10748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.710525][ T43] audit: type=1400 audit(1789723996.890:304): avc: denied { create } for pid=6068 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.820056][ T6077] trusted_key: encrypted_key: insufficient parameters specified [ 43.990722][ T6095] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 43.993386][ T6097] ======================================================= [ 43.993386][ T6097] WARNING: The mand mount option has been deprecated and [ 43.993386][ T6097] and is ignored by this kernel. Remove the mand [ 43.993386][ T6097] option from the mount to silence this warning. [ 43.993386][ T6097] ======================================================= [ 44.017368][ T6095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.026240][ T6095] bond1: entered promiscuous mode [ 44.026258][ T6095] bond1: entered allmulticast mode [ 44.033817][ T6095] macvlan2: entered promiscuous mode [ 44.033835][ T6095] macvlan2: entered allmulticast mode [ 44.035990][ T6095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.062181][ T65] Bluetooth: hci3: command tx timeout [ 44.062211][ T65] Bluetooth: hci1: command tx timeout [ 44.062229][ T65] Bluetooth: hci2: command tx timeout [ 44.062247][ T65] Bluetooth: hci0: command tx timeout [ 44.291354][ T6117] jffs2: notice: (6117) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 44.331758][ T6120] xt_hashlimit: max too large, truncated to 1048576 [ 44.333567][ T6120] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.339269][ T6121] overlay: Unknown parameter '/aw' [ 44.343899][ T6120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.429142][ T6126] sctp: [Deprecated]: syz.2.75 (pid 6126) Use of int in maxseg socket option. [ 44.429142][ T6126] Use struct sctp_assoc_value instead [ 44.642845][ T6134] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 44.769990][ T6136] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 44.810538][ T2135] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.981304][ T2135] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 44.983494][ T2135] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 44.983511][ T2135] usb 7-1: config 0 has no interface number 0 [ 44.983540][ T2135] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.985964][ T2135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.985983][ T2135] usb 7-1: Product: syz [ 44.985994][ T2135] usb 7-1: Manufacturer: syz [ 44.986005][ T2135] usb 7-1: SerialNumber: syz [ 44.989404][ T2135] usb 7-1: config 0 descriptor?? [ 45.002728][ T2135] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 45.050567][ T5520] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.201714][ T5520] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 45.202671][ T5520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 45.202696][ T5520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.202715][ T5520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 45.202734][ T5520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 45.204850][ T5520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.204869][ T5520] usb 6-1: Product: syz [ 45.204881][ T5520] usb 6-1: Manufacturer: syz [ 45.204894][ T5520] usb 6-1: SerialNumber: syz [ 45.207791][ T5520] usb 6-1: config 0 descriptor?? [ 45.417273][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 45.417293][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 45.417683][ T5520] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 45.617653][ T5598] usb 6-1: USB disconnect, device number 2 [ 45.995920][ T6192] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 46.091067][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.96'. [ 46.141343][ T65] Bluetooth: hci2: command tx timeout [ 46.141367][ T5735] Bluetooth: hci1: command tx timeout [ 46.141374][ T65] Bluetooth: hci3: command tx timeout [ 46.141410][ T5084] Bluetooth: hci0: command tx timeout [ 46.149832][ T6206] xt_hashlimit: size too large, truncated to 1048576 [ 46.333935][ T6230] jffs2: notice: (6230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 46.541034][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.690526][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 46.691186][ T30] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.691979][ T30] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.691992][ T30] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.692002][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.692021][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.692032][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.692044][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.692062][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.693474][ T30] usb 6-1: config 0 descriptor?? [ 46.898882][ T30] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.152330][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 47.272930][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 47.274910][ T5942] usb 7-1: USB disconnect, device number 2 [ 47.280724][ T5730] usb 6-1: USB disconnect, device number 3 [ 47.286764][ T5942] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 47.320673][ T5730] usblp1: removed [ 47.446152][ T6267] ptrace attach of "/syz-executor exec"[6269] was attempted by "/syz-executor exec"[6267] [ 47.811341][ T6283] jffs2: notice: (6283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 47.845066][ T43] kauditd_printk_skb: 138 callbacks suppressed [ 47.845079][ T43] audit: type=1400 audit(1789724001.030:443): avc: denied { create } for pid=6285 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.847552][ T43] audit: type=1400 audit(1789724001.030:444): avc: denied { setopt } for pid=6285 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.860666][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 47.872820][ T6288] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.114'. [ 47.970611][ T43] audit: type=1400 audit(1789724001.150:445): avc: denied { write } for pid=6294 comm="syz.1.115" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.011926][ T6297] gadgetfs: bound to dummy_udc driver [ 48.084036][ T43] audit: type=1400 audit(1789724001.270:446): avc: denied { ioctl } for pid=6312 comm="syz.1.118" path="socket:[12351]" dev="sockfs" ino=12351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.125785][ T43] audit: type=1800 audit(1789724001.310:447): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.118" name="/asound/card2/oss_mixer" dev="proc" ino=4026532675 res=0 errno=0 [ 48.255323][ T6298] cgroup: fork rejected by pids controller in /syz3 [ 48.260765][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.261038][ C1] gadgetfs: connected [ 48.261614][ T30] gadgetfs: disconnected [ 48.272848][ T43] audit: type=1400 audit(1789724001.460:448): avc: denied { connect } for pid=6339 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.277507][ T43] audit: type=1400 audit(1789724001.460:449): avc: denied { write } for pid=6339 comm="syz.1.120" path="socket:[12356]" dev="sockfs" ino=12356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.376013][ T43] audit: type=1400 audit(1789724001.550:450): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 48.405205][ T6338] gadgetfs: suspended from state 2 [ 48.422731][ T30] usb 5-1: device descriptor read/all, error -71 [ 48.463370][ T6359] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 48.482500][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b30b4a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 48.482530][ C0] Call Trace: [ 48.482534][ C0] [ 48.482539][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 48.482553][ C0] ? sched_clock_cpu+0x6c/0x570 [ 48.482563][ C0] ? handle_softirqs+0x7ee/0x9d0 [ 48.482576][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 48.482588][ C0] mce_cpu_restart+0xd5/0x1f0 [ 48.482600][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 48.482615][ C0] __sysvec_call_function+0x81/0x420 [ 48.482626][ C0] sysvec_call_function+0x9e/0xc0 [ 48.482639][ C0] [ 48.482642][ C0] [ 48.482646][ C0] asm_sysvec_call_function+0x1a/0x20 [ 48.482657][ C0] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 48.482670][ C0] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 73 8c fc 09 e8 be 29 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 48.482679][ C0] RSP: 0018:ffffc9000164f8e8 EFLAGS: 00000202 [ 48.482688][ C0] RAX: 0000000000000623 RBX: ffff888056e30000 RCX: 0000000000000000 [ 48.482694][ C0] RDX: 0000000000000001 RSI: ffffffff8e38bc92 RDI: ffff888056e31710 [ 48.482700][ C0] RBP: ffffc9000164f940 R08: 0000000000000001 R09: 0000000000000000 [ 48.482706][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056e32580 [ 48.482712][ C0] R13: 0000000000000000 R14: ffffffff91455f04 R15: ffff88806a43bf00 [ 48.482724][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 48.482738][ C0] __schedule+0x1261/0x6920 [ 48.482750][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 48.482766][ C0] ? lock_acquire+0x1d1/0x380 [ 48.482776][ C0] ? __pfx___schedule+0x10/0x10 [ 48.482787][ C0] ? find_held_lock+0x2b/0x80 [ 48.482801][ C0] ? schedule+0x225/0x2c0 [ 48.482815][ C0] schedule+0xdd/0x2c0 [ 48.482826][ C0] futex_do_wait+0x88/0x180 [ 48.482842][ C0] __futex_wait+0x1c4/0x300 [ 48.482853][ C0] ? __pfx___futex_wait+0x10/0x10 [ 48.482861][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 48.482873][ C0] ? futex_hash+0x311/0x400 [ 48.482890][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 48.482908][ C0] ? find_held_lock+0x2b/0x80 [ 48.482921][ C0] ? futex_wake+0x4ea/0x5e0 [ 48.482939][ C0] futex_wait+0xe6/0x370 [ 48.482949][ C0] ? __pfx_futex_wait+0x10/0x10 [ 48.482964][ C0] do_futex+0x265/0x440 [ 48.482979][ C0] ? __pfx_do_futex+0x10/0x10 [ 48.482995][ C0] __x64_sys_futex+0x34f/0x4d0 [ 48.483010][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 48.483029][ C0] do_syscall_64+0x123/0x790 [ 48.483043][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.483053][ C0] RIP: 0033:0x7f3240b9e159 [ 48.483062][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.483070][ C0] RSP: 002b:00007f3241a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.483079][ C0] RAX: ffffffffffffffda RBX: 00007f3240e25fa8 RCX: 00007f3240b9e159 [ 48.483085][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3240e25fa8 [ 48.483091][ C0] RBP: 00007f3240e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 48.483097][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.483102][ C0] R13: 00007f3240e26038 R14: 00007fffdcb6cf10 R15: 00007fffdcb6cff8 [ 48.483114][ C0] [ 48.489278][ T43] audit: type=1400 audit(1789724001.670:451): avc: denied { mount } for pid=6355 comm="syz.0.125" name="/" dev="autofs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 48.522561][ T43] audit: type=1400 audit(1789724001.710:452): avc: denied { mounton } for pid=6361 comm="syz.2.126" path="/36/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.582199][ T6369] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 48.714894][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.813691][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.849733][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.850610][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.853367][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.854502][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.855508][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.874956][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.963787][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.084217][ T12] bridge_slave_1: left allmulticast mode [ 49.084253][ T12] bridge_slave_1: left promiscuous mode [ 49.085101][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.094087][ T12] bridge_slave_0: left allmulticast mode [ 49.094107][ T12] bridge_slave_0: left promiscuous mode [ 49.094256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.188015][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.190740][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.200863][ T12] bond0 (unregistering): Released all slaves [ 49.420234][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.469372][ T6376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.469944][ T6414] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 49.544224][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.544375][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.544488][ T6385] bridge_slave_0: entered allmulticast mode [ 49.545910][ T6385] bridge_slave_0: entered promiscuous mode [ 49.550950][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.551076][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.551179][ T6385] bridge_slave_1: entered allmulticast mode [ 49.552635][ T6385] bridge_slave_1: entered promiscuous mode [ 49.567300][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 49.567331][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.595901][ T6421] Bluetooth: MGMT ver 1.23 [ 49.603765][ T12] hsr_slave_0: left promiscuous mode [ 49.604486][ T12] hsr_slave_1: left promiscuous mode [ 49.605229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.605263][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.607319][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.607331][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.614854][ T12] veth1_macvtap: left promiscuous mode [ 49.614884][ T12] veth0_macvtap: left promiscuous mode [ 49.614958][ T12] veth1_vlan: left promiscuous mode [ 49.614996][ T12] veth0_vlan: left promiscuous mode [ 49.870308][ T12] team0 (unregistering): Port device team_slave_1 removed [ 49.879046][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.970077][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.971869][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.980056][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.998557][ T6385] team0: Port device team_slave_0 added [ 50.004629][ T6385] team0: Port device team_slave_1 added [ 50.008323][ T6436] jffs2: notice: (6436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.036940][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.036956][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.036975][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.040306][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.040315][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.040327][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.067009][ T6440] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 50.086983][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.093410][ T6385] hsr_slave_0: entered promiscuous mode [ 50.094163][ T6385] hsr_slave_1: entered promiscuous mode [ 50.094701][ T6385] debugfs: 'hsr0' already exists in 'hsr' [ 50.094720][ T6385] Cannot create hsr debugfs directory [ 50.104646][ T6440] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 50.167109][ T6452] FAULT_INJECTION: forcing a failure. [ 50.167109][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 50.167131][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.0.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.167146][ T6452] Tainted: [L]=SOFTLOCKUP [ 50.167150][ T6452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.167156][ T6452] Call Trace: [ 50.167160][ T6452] [ 50.167165][ T6452] dump_stack_lvl+0x100/0x190 [ 50.167186][ T6452] should_fail_ex.cold+0x5/0xa [ 50.167203][ T6452] should_failslab+0xc2/0x120 [ 50.167217][ T6452] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 50.167231][ T6452] ? sock_alloc_inode+0x26/0x2c0 [ 50.167248][ T6452] ? __pfx_sock_alloc_inode+0x10/0x10 [ 50.167264][ T6452] sock_alloc_inode+0x26/0x2c0 [ 50.167279][ T6452] ? __pfx_sock_alloc_inode+0x10/0x10 [ 50.167294][ T6452] alloc_inode+0x68/0x250 [ 50.167305][ T6452] sock_alloc+0x44/0x280 [ 50.167318][ T6452] ? security_socket_create+0x7f/0x250 [ 50.167339][ T6452] __sock_create+0xc2/0x860 [ 50.167359][ T6452] __sys_socket+0x14d/0x260 [ 50.167391][ T6452] ? __pfx___sys_socket+0x10/0x10 [ 50.167407][ T6452] __x64_sys_socket+0x72/0xb0 [ 50.167417][ T6452] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.167434][ T6452] do_syscall_64+0x123/0x790 [ 50.167452][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.167464][ T6452] RIP: 0033:0x7f3240b9e159 [ 50.167475][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.167486][ T6452] RSP: 002b:00007f3241a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 50.167497][ T6452] RAX: ffffffffffffffda RBX: 00007f3240e25fa0 RCX: 00007f3240b9e159 [ 50.167504][ T6452] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 000000000000000a [ 50.167511][ T6452] RBP: 00007f3240c3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.167517][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.167524][ T6452] R13: 00007f3240e26038 R14: 00007f3240e25fa0 R15: 00007fffdcb6cff8 [ 50.167538][ T6452] [ 50.167568][ T6452] socket: no more sockets [ 50.170302][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 50.170324][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 50.205737][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 50.338193][ T6462] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 50.341861][ T6462] bond2: (slave lo): Enslaving as an active interface with an up link [ 50.343043][ T6462] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 50.425948][ T6471] jffs2: notice: (6471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.434553][ T6385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.447911][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.448439][ T6385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.453639][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.454020][ T6385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.464851][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.467682][ T6385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.473082][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.489465][ T6494] random: crng reseeded on system resumption [ 50.496935][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.529033][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.538755][ T6385] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.543742][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.543785][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.544683][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.544775][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.545828][ T6497] tmpfs: Bad value for 'mpol' [ 50.576142][ T6385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.796989][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.798729][ T6532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52608 sclass=netlink_route_socket pid=6532 comm=syz.0.155 [ 50.798747][ T6530] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 50.808328][ T6530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.836046][ T6537] jffs2: notice: (6537) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 50.871116][ T5084] Bluetooth: hci1: command tx timeout [ 50.926705][ T6385] veth0_vlan: entered promiscuous mode [ 50.933637][ T6385] veth1_vlan: entered promiscuous mode [ 50.957501][ T6385] veth0_macvtap: entered promiscuous mode [ 50.961558][ T6385] veth1_macvtap: entered promiscuous mode [ 50.963781][ T6549] tmpfs: Bad value for 'nr_inodes' [ 50.975186][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.978413][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.006024][ T5774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.006047][ T5774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.006065][ T5774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.020013][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.020025][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.041253][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.041267][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.050628][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.131048][ T6558] bridge0: port 3(syz_tun) entered blocking state [ 51.131121][ T6558] bridge0: port 3(syz_tun) entered disabled state [ 51.131911][ T6558] syz_tun: entered allmulticast mode [ 51.133902][ T6558] syz_tun: entered promiscuous mode [ 51.134542][ T6558] bridge0: port 3(syz_tun) entered blocking state [ 51.134609][ T6558] bridge0: port 3(syz_tun) entered forwarding state [ 51.371875][ T6562] syzkaller0: entered promiscuous mode [ 51.371889][ T6562] syzkaller0: entered allmulticast mode [ 51.377560][ T6562] ip_tables: iptables: counters copy to user failed while replacing table [ 51.481629][ T6564] process 'syz.2.160' launched '/dev/fd/5' with NULL argv: empty string added [ 51.594606][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 51.824392][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.824429][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.825198][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.825209][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.170569][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.321321][ T30] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 52.322181][ T30] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 52.322194][ T30] usb 7-1: config 0 has no interface number 0 [ 52.322211][ T30] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.323872][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.323884][ T30] usb 7-1: Product: syz [ 52.323891][ T30] usb 7-1: Manufacturer: syz [ 52.323898][ T30] usb 7-1: SerialNumber: syz [ 52.326828][ T30] usb 7-1: config 0 descriptor?? [ 52.335983][ T30] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 52.941414][ T5084] Bluetooth: hci1: command tx timeout [ 53.136548][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 53.136561][ T43] audit: type=1400 audit(1789724006.320:501): avc: denied { setopt } for pid=6624 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.139838][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 53.164353][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 53.164381][ T6626] nbd: nbd64 already in use [ 54.133477][ T43] audit: type=1400 audit(1789724007.320:502): avc: denied { append } for pid=6639 comm="syz.4.176" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 54.141601][ T6605] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 54.147004][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 54.147022][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 54.163860][ T43] audit: type=1400 audit(1789724007.350:503): avc: denied { mounton } for pid=6639 comm="syz.4.176" path="/1/config" dev="configfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.256453][ T43] audit: type=1400 audit(1789724007.440:504): avc: denied { mount } for pid=6649 comm="syz.1.178" name="/" dev="hugetlbfs" ino=12835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 54.267515][ T6650] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 54.322546][ T43] audit: type=1400 audit(1789724007.510:505): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 54.340046][ T43] audit: type=1400 audit(1789724007.520:506): avc: denied { append } for pid=6651 comm="syz.4.179" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.386068][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 54.423738][ T6657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.181'. [ 54.424910][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 54.427349][ T43] audit: type=1400 audit(1789724007.610:507): avc: denied { write } for pid=6656 comm="syz.4.181" name="configs" dev="configfs" ino=12031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.427838][ T43] audit: type=1400 audit(1789724007.610:508): avc: denied { create } for pid=6656 comm="syz.4.181" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 54.428380][ T43] audit: type=1400 audit(1789724007.610:509): avc: denied { write } for pid=6656 comm="syz.4.181" name="functions" dev="configfs" ino=12030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.431262][ T43] audit: type=1400 audit(1789724007.610:510): avc: denied { write } for pid=6656 comm="syz.4.181" name="c.1" dev="configfs" ino=12856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.542833][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 54.546527][ T5730] usb 7-1: USB disconnect, device number 3 [ 54.554267][ T5730] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 54.817265][ T6671] netlink: 'syz.0.188': attribute type 63 has an invalid length. [ 54.817279][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'. [ 54.830551][ T5598] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 54.980571][ T5598] usb 9-1: Using ep0 maxpacket: 8 [ 54.981035][ T5598] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.993821][ T5598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.993847][ T5598] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.995699][ T5598] usb 9-1: config 0 descriptor?? [ 55.007580][ T6730] kvm: pic: non byte read [ 55.007590][ T6730] kvm: pic: non byte read [ 55.007594][ T6730] kvm: pic: non byte read [ 55.007598][ T6730] kvm: pic: non byte read [ 55.007601][ T6730] kvm: pic: non byte read [ 55.007605][ T6730] kvm: pic: non byte read [ 55.007608][ T6730] kvm: pic: non byte read [ 55.007612][ T6730] kvm: pic: non byte read [ 55.007615][ T6730] kvm: pic: non byte read [ 55.007619][ T6730] kvm: pic: non byte read [ 55.020979][ T5736] Bluetooth: hci1: command tx timeout [ 55.208135][ T5598] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 55.222455][ T6749] rnbd_client L213: map_device: Parameters missing [ 55.258192][ T6754] FAULT_INJECTION: forcing a failure. [ 55.258192][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 55.258215][ T6754] CPU: 3 UID: 0 PID: 6754 Comm: syz.0.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.258232][ T6754] Tainted: [L]=SOFTLOCKUP [ 55.258236][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.258243][ T6754] Call Trace: [ 55.258248][ T6754] [ 55.258253][ T6754] dump_stack_lvl+0x100/0x190 [ 55.258275][ T6754] should_fail_ex.cold+0x5/0xa [ 55.258291][ T6754] should_failslab+0xc2/0x120 [ 55.258307][ T6754] __kmalloc_noprof+0xfc/0x840 [ 55.258321][ T6754] ? asymmetric_key_generate_id+0x7e/0x180 [ 55.258340][ T6754] asymmetric_key_generate_id+0x7e/0x180 [ 55.258366][ T6754] x509_cert_parse+0x5c1/0x910 [ 55.258380][ T6754] x509_key_preparse+0x65/0x9c0 [ 55.258395][ T6754] asymmetric_key_preparse+0xce/0x1d0 [ 55.258412][ T6754] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 55.258430][ T6754] __key_create_or_update+0x463/0xe30 [ 55.258465][ T6754] ? __pfx___key_create_or_update+0x10/0x10 [ 55.258481][ T6754] ? lookup_user_key+0x3f3/0x1300 [ 55.258501][ T6754] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 55.258518][ T6754] key_create_or_update+0x42/0x60 [ 55.258534][ T6754] __do_sys_add_key+0x2e8/0x460 [ 55.258552][ T6754] ? __pfx___do_sys_add_key+0x10/0x10 [ 55.258575][ T6754] do_syscall_64+0x123/0x790 [ 55.258594][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.258605][ T6754] RIP: 0033:0x7f3240b9e159 [ 55.258615][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.258625][ T6754] RSP: 002b:00007f3241a3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 55.258637][ T6754] RAX: ffffffffffffffda RBX: 00007f3240e25fa0 RCX: 00007f3240b9e159 [ 55.258645][ T6754] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 55.258651][ T6754] RBP: 00007f3240c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 55.258658][ T6754] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 55.258664][ T6754] R13: 00007f3240e26038 R14: 00007f3240e25fa0 R15: 00007fffdcb6cff8 [ 55.258679][ T6754] [ 55.550659][ T2135] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 55.700985][ T2135] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 55.701772][ T2135] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 55.701786][ T2135] usb 7-1: config 0 has no interface number 0 [ 55.701804][ T2135] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.703337][ T2135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.703349][ T2135] usb 7-1: Product: syz [ 55.703357][ T2135] usb 7-1: Manufacturer: syz [ 55.703364][ T2135] usb 7-1: SerialNumber: syz [ 55.705258][ T2135] usb 7-1: config 0 descriptor?? [ 55.711623][ T2135] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 55.741503][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.743469][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.745165][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.745794][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.746253][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.849652][ T5730] usb 9-1: USB disconnect, device number 2 [ 56.205917][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.205994][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.206058][ T6761] bridge_slave_0: entered allmulticast mode [ 56.206772][ T6761] bridge_slave_0: entered promiscuous mode [ 56.211834][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.211894][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.211973][ T6761] bridge_slave_1: entered allmulticast mode [ 56.213108][ T6761] bridge_slave_1: entered promiscuous mode [ 56.239406][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.240921][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.255933][ T6761] team0: Port device team_slave_0 added [ 56.257157][ T6761] team0: Port device team_slave_1 added [ 56.269256][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.269267][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.269280][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.270100][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.270108][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.270120][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.300364][ T6761] hsr_slave_0: entered promiscuous mode [ 56.301505][ T6761] hsr_slave_1: entered promiscuous mode [ 56.301851][ T6761] debugfs: 'hsr0' already exists in 'hsr' [ 56.301868][ T6761] Cannot create hsr debugfs directory [ 56.380754][ T5736] Bluetooth: hci4: command 0x1003 tx timeout [ 56.381277][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 56.439139][ T6761] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.442423][ T6761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.442896][ T6761] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.447472][ T6761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.447875][ T6761] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.452510][ T6761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.453007][ T6761] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.464164][ T6761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.486776][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.487270][ T6761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.487380][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.487423][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.498845][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 56.537386][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.548121][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.548725][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.562861][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.566609][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.566651][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.569570][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.569645][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.603650][ T6798] netlink: 'syz.1.202': attribute type 49 has an invalid length. [ 56.607076][ T6798] bond0: (slave bond_slave_0): Releasing backup interface [ 56.645175][ T6798] bond_slave_0: entered promiscuous mode [ 56.645191][ T6798] bond_slave_0: entered allmulticast mode [ 56.663170][ T6803] batadv_slave_1: entered promiscuous mode [ 56.669883][ T6803] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.669931][ T6803] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.671275][ T6803] warning: `syz.4.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.671442][ T6802] batadv_slave_1: left promiscuous mode [ 56.889029][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.033415][ T6761] veth0_vlan: entered promiscuous mode [ 57.036681][ T6761] veth1_vlan: entered promiscuous mode [ 57.051659][ T6761] veth0_macvtap: entered promiscuous mode [ 57.054565][ T6761] veth1_macvtap: entered promiscuous mode [ 57.061858][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.068093][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.090561][ T5808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.090589][ T5808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.090607][ T5808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.090624][ T5808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.110562][ T5084] Bluetooth: hci1: command tx timeout [ 57.124021][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.124069][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.144317][ T6713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.144330][ T6713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.282746][ T5810] usb 7-1: USB disconnect, device number 4 [ 57.289322][ T5810] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 57.570591][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 57.741002][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 57.741450][ T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.742244][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.742265][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.743686][ T9] usb 10-1: config 0 descriptor?? [ 57.820865][ T5084] Bluetooth: hci3: command tx timeout [ 57.855813][ T6861] ipt_ah: unknown flags FF [ 57.909979][ T6726] nvmet: connect request for invalid subsystem t! [ 57.911370][ T6866] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 57.937491][ T6870] fuse: Bad value for 'fd' [ 57.939764][ T6871] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.949698][ T6871] netlink: 'syz.4.218': attribute type 11 has an invalid length. [ 57.949710][ T6871] __nla_validate_parse: 3 callbacks suppressed [ 57.949716][ T6871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.218'. [ 57.952699][ T9] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 58.052632][ T6726] IPVS: starting estimator thread 0... [ 58.150735][ T6884] IPVS: using max 42 ests per chain, 100800 per kthread [ 58.282022][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 58.282036][ T43] audit: type=1400 audit(1789724011.470:535): avc: denied { create } for pid=6899 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.282668][ T43] audit: type=1400 audit(1789724011.470:536): avc: denied { sys_admin } for pid=6899 comm="syz.2.226" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.350592][ T5809] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 58.459031][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 58.459071][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 58.514511][ T5809] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 58.517437][ T5809] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 58.517453][ T5809] usb 9-1: config 0 has no interface number 0 [ 58.517470][ T5809] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.523538][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.523552][ T5809] usb 9-1: Product: syz [ 58.523560][ T5809] usb 9-1: Manufacturer: syz [ 58.523566][ T5809] usb 9-1: SerialNumber: syz [ 58.553630][ T5809] usb 9-1: config 0 descriptor?? [ 58.564324][ T5809] yurex 9-1:0.50: USB YUREX device now attached to Yurex #1 [ 58.606712][ T6918] loop6: detected capacity change from 0 to 2640 [ 58.607401][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607479][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607494][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607508][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607522][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607544][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607564][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607617][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607626][ T6918] ldm_validate_partition_table(): Disk read failed. [ 58.607639][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607653][ T6918] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.607674][ T6918] Dev loop6: unable to read RDB block 0 [ 58.607801][ T6918] loop6: unable to read partition table [ 58.607931][ T6918] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 58.684424][ T5810] usb 10-1: USB disconnect, device number 2 [ 58.784183][ T43] audit: type=1400 audit(1789724011.970:537): avc: denied { bind } for pid=6923 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.784916][ T43] audit: type=1400 audit(1789724011.970:538): avc: denied { setopt } for pid=6923 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.341557][ T43] audit: type=1400 audit(1789724012.520:539): avc: denied { write } for pid=6928 comm="syz.5.234" name="sched_switch" dev="tracefs" ino=15037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.342532][ T43] audit: type=1400 audit(1789724012.530:540): avc: denied { add_name } for pid=6928 comm="syz.5.234" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.343441][ T43] audit: type=1400 audit(1789724012.530:541): avc: denied { create } for pid=6928 comm="syz.5.234" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 59.344376][ T6930] macvtap1: entered allmulticast mode [ 59.344388][ T6930] bond0: entered allmulticast mode [ 59.344395][ T6930] bond_slave_0: entered allmulticast mode [ 59.344404][ T6930] bond_slave_1: entered allmulticast mode [ 59.344453][ T6930] bond_slave_0: entered promiscuous mode [ 59.345045][ T6930] bond_slave_1: entered promiscuous mode [ 59.347461][ T6930] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 59.348752][ T6930] bond0: left allmulticast mode [ 59.348762][ T6930] bond_slave_0: left allmulticast mode [ 59.348770][ T6930] bond_slave_1: left allmulticast mode [ 59.372592][ T5810] bond_slave_0: left promiscuous mode [ 59.372610][ T5810] bond_slave_1: left promiscuous mode [ 59.444277][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 59.553722][ T6939] No source specified [ 59.610322][ T6943] vlan2: entered promiscuous mode [ 59.610345][ T6943] bridge0: entered promiscuous mode [ 59.624634][ T6943] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 59.625297][ T6943] batman_adv: batadv0: Adding interface: gretap1 [ 59.625309][ T6943] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 59.625332][ T6943] batman_adv: batadv0: Interface activated: gretap1 [ 59.668596][ T6946] netlink: 156 bytes leftover after parsing attributes in process `syz.2.241'. [ 59.670072][ T6946] openvswitch: netlink: VLAN attribute unexpected. [ 59.710577][ T5809] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 59.715367][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 59.715380][ T6950] openvswitch: netlink: ufid size 4580 bytes exceeds the range (1, 16) [ 59.715387][ T6950] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 59.816520][ T43] audit: type=1400 audit(1789724013.000:542): avc: denied { setattr } for pid=6957 comm="syz.2.246" name="/" dev="9p" ino=75785871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.861887][ T5809] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 59.862748][ T5809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.864329][ T5809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.864341][ T5809] usb 10-1: Product: syz [ 59.864348][ T5809] usb 10-1: Manufacturer: syz [ 59.864356][ T5809] usb 10-1: SerialNumber: syz [ 59.868372][ T5809] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 59.868504][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 59.868534][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 59.870086][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 59.870122][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 59.870198][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 59.870230][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 59.870267][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 59.870334][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 59.873166][ T5809] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 59.875623][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 59.875658][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 59.875726][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 59.875760][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 59.875790][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 59.875861][ T5809] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 59.878263][ T5809] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 59.901233][ T5084] Bluetooth: hci3: command tx timeout [ 59.923099][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.023435][ T6961] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 60.023651][ T6961] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 60.066988][ T5730] usb 9-1: USB disconnect, device number 3 [ 60.069823][ T43] audit: type=1400 audit(1789724013.250:543): avc: denied { mount } for pid=6936 comm="syz.5.237" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.070112][ T5730] yurex 9-1:0.50: USB YUREX #1 now disconnected [ 60.080951][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 60.081527][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.083003][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.083046][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.086399][ T9] usb 6-1: config 0 descriptor?? [ 60.141001][ T6963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.248'. [ 60.189962][ T5810] usb 10-1: USB disconnect, device number 3 [ 60.198211][ T5810] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 60.200624][ T5810] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 60.200942][ T5810] keyspan 10-1:1.0: device disconnected [ 60.291957][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 60.410921][ T852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 60.581234][ T852] usb 7-1: Using ep0 maxpacket: 8 [ 60.581821][ T852] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 60.584996][ T852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.585014][ T852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.587050][ T852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.587063][ T852] usb 7-1: Product: syz [ 60.587070][ T852] usb 7-1: Manufacturer: syz [ 60.587077][ T852] usb 7-1: SerialNumber: syz [ 60.589249][ T6966] No source specified [ 60.632399][ T6970] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.734895][ T43] audit: type=1400 audit(1789724013.920:544): avc: denied { unmount } for pid=6761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.854747][ T852] usb 7-1: USB disconnect, device number 5 [ 60.886911][ T6978] netlink: 88 bytes leftover after parsing attributes in process `syz.5.252'. [ 60.923993][ T6772] udevd[6772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.009483][ T6982] usb 6-1: USB disconnect, device number 4 [ 61.324898][ T6996] netlink: 'syz.5.255': attribute type 1 has an invalid length. [ 61.423410][ T7000] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 61.429387][ T7000] cramfs: wrong magic [ 61.436219][ T7004] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 61.447528][ T7004] cramfs: wrong magic [ 61.572755][ T7014] No source specified [ 61.591870][ T7016] netlink: 'syz.5.260': attribute type 1 has an invalid length. [ 61.592691][ T7016] netlink: 'syz.5.260': attribute type 1 has an invalid length. [ 61.682324][ T7023] /dev/sg0: Can't lookup blockdev [ 61.780585][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.932280][ T58] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 61.933080][ T58] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 61.933093][ T58] usb 7-1: config 0 has no interface number 0 [ 61.933110][ T58] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.934604][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.934616][ T58] usb 7-1: Product: syz [ 61.934623][ T58] usb 7-1: Manufacturer: syz [ 61.934630][ T58] usb 7-1: SerialNumber: syz [ 61.937643][ T58] usb 7-1: config 0 descriptor?? [ 61.942242][ T58] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 62.277620][ T7062] netlink: 'syz.5.274': attribute type 1 has an invalid length. [ 62.376731][ T7070] binder: 7065:7070 ioctl c0306201 200000000080 returned -14 [ 62.379093][ T7070] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 62.391012][ T7069] FAULT_INJECTION: forcing a failure. [ 62.391012][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 62.391033][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.5.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.391049][ T7069] Tainted: [L]=SOFTLOCKUP [ 62.391054][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.391061][ T7069] Call Trace: [ 62.391065][ T7069] [ 62.391070][ T7069] dump_stack_lvl+0x100/0x190 [ 62.391106][ T7069] should_fail_ex.cold+0x5/0xa [ 62.391124][ T7069] should_failslab+0xc2/0x120 [ 62.391143][ T7069] __kmalloc_noprof+0xfc/0x840 [ 62.391155][ T7069] ? aes_set_key_common+0x78/0xc0 [ 62.391177][ T7069] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 62.391198][ T7069] init_skcipher_req.constprop.0+0x9c/0x180 [ 62.391215][ T7069] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 62.391236][ T7069] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 62.391256][ T7069] ? kasan_quarantine_put+0x104/0x240 [ 62.391269][ T7069] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.391290][ T7069] ? __kasan_check_byte+0x13/0x50 [ 62.391306][ T7069] ? get_derived_key+0x11b/0x140 [ 62.391324][ T7069] encrypted_read+0x389/0x850 [ 62.391341][ T7069] ? lock_acquire+0x1d1/0x380 [ 62.391352][ T7069] ? keyctl_read_key+0x227/0x510 [ 62.391370][ T7069] ? __pfx_encrypted_read+0x10/0x10 [ 62.391387][ T7069] ? __pfx___might_resched+0x10/0x10 [ 62.391403][ T7069] ? down_read+0x13b/0x4c0 [ 62.391421][ T7069] ? __pfx_down_read+0x10/0x10 [ 62.391437][ T7069] ? keyctl_read_key+0x2ac/0x510 [ 62.391453][ T7069] ? keyctl_read_key+0x2ac/0x510 [ 62.391469][ T7069] ? keyctl_read_key+0x427/0x510 [ 62.391488][ T7069] keyctl_read_key+0x29a/0x510 [ 62.391507][ T7069] __do_sys_keyctl+0x36d/0x5a0 [ 62.391518][ T7069] do_syscall_64+0x123/0x790 [ 62.391535][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.391547][ T7069] RIP: 0033:0x7f4fbf59e159 [ 62.391557][ T7069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.391568][ T7069] RSP: 002b:00007f4fc04e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 62.391580][ T7069] RAX: ffffffffffffffda RBX: 00007f4fbf825fa0 RCX: 00007f4fbf59e159 [ 62.391587][ T7069] RDX: 0000200000000240 RSI: 0000000005833aee RDI: 000000000000000b [ 62.391593][ T7069] RBP: 00007f4fbf63506b R08: 0000000000000000 R09: 0000000000000000 [ 62.391600][ T7069] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 62.391607][ T7069] R13: 00007f4fbf826038 R14: 00007f4fbf825fa0 R15: 00007ffe5e9edc78 [ 62.391621][ T7069] [ 62.391626][ T7069] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 62.503829][ T7076] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 62.534547][ T7076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.549521][ T7076] bond2: (slave gretap2): making interface the new active one [ 62.554098][ T7076] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 62.713756][ T7093] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 62.950528][ T7119] netlink: 'syz.5.290': attribute type 14 has an invalid length. [ 62.954997][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.290'. [ 62.958426][ T7122] mmap: syz.5.290 (7122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.092322][ T7136] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 63.092332][ T7136] device-mapper: raid: Choosing default region size of 4MiB [ 63.167599][ T7143] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 63.303702][ T7154] netlink: 'syz.5.299': attribute type 7 has an invalid length. [ 63.303763][ T7154] netlink: 'syz.5.299': attribute type 8 has an invalid length. [ 63.380266][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 63.380278][ T43] audit: type=1400 audit(1789724016.560:563): avc: denied { read write } for pid=7155 comm="syz.5.300" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 63.380995][ T43] audit: type=1400 audit(1789724016.570:564): avc: denied { open } for pid=7155 comm="syz.5.300" path="/30/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 63.447029][ T43] audit: type=1400 audit(1789724016.630:565): avc: denied { ioctl } for pid=7155 comm="syz.5.300" path="/30/proc/kmsg" dev="proc" ino=4026532047 ioctlcmd=0x5644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 63.485938][ T7136] device-mapper: table: 248:1: raid: Component device(s) too small (-EINVAL) [ 63.485961][ T7136] device-mapper: ioctl: error adding target to table [ 63.548494][ T43] audit: type=1400 audit(1789724016.730:566): avc: denied { ioctl } for pid=7158 comm="syz.5.301" path="socket:[16939]" dev="sockfs" ino=16939 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.661359][ T5084] Bluetooth: hci3: command tx timeout [ 63.790519][ T30] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 63.825442][ T43] audit: type=1400 audit(1789724017.010:567): avc: denied { block_suspend } for pid=7182 comm="syz.4.303" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.942337][ T30] usb 10-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 63.943773][ T30] usb 10-1: config index 0 descriptor too short (expected 50, got 32) [ 63.943787][ T30] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.943806][ T30] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.943816][ T30] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.943827][ T30] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.945676][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.945688][ T30] usb 10-1: Product: syz [ 63.945696][ T30] usb 10-1: Manufacturer: syz [ 63.945703][ T30] usb 10-1: SerialNumber: syz [ 63.949529][ T30] usb_debug 10-1:1.0: debug converter detected [ 63.952814][ T30] usb 10-1: debug converter now attached to ttyUSB0 [ 64.087209][ T7211] netlink: 'syz.1.308': attribute type 12 has an invalid length. [ 64.111609][ T5774] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.111694][ T5774] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.111713][ T5774] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.111732][ T5774] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.150071][ T7165] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 64.153299][ T43] audit: type=1400 audit(1789724017.340:568): avc: denied { read } for pid=7158 comm="syz.5.301" dev="sockfs" ino=16939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.172054][ T7221] bridge1: entered promiscuous mode [ 64.172067][ T7221] bridge1: entered allmulticast mode [ 64.221452][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 64.223344][ T5809] usb 7-1: USB disconnect, device number 6 [ 64.225900][ T5598] usb 10-1: USB disconnect, device number 4 [ 64.242660][ T5809] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 64.248488][ T5598] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 64.248787][ T5598] usb_debug 10-1:1.0: device disconnected [ 64.321620][ T43] audit: type=1400 audit(1789724017.510:569): avc: denied { read } for pid=7225 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.418929][ T43] audit: type=1400 audit(1789724017.600:570): avc: denied { audit_write } for pid=7230 comm="syz.1.311" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.557720][ T7242] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.312:7242 [ 64.557745][ T43] audit: type=1400 audit(1789724017.740:571): avc: denied { ioctl } for pid=7241 comm="syz.1.312" path="socket:[17743]" dev="sockfs" ino=17743 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 64.593997][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 64.639593][ T7247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.785688][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 64.865103][ T43] audit: type=1400 audit(1789724018.050:572): avc: denied { bind } for pid=7267 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.047474][ T6726] IPVS: starting estimator thread 0... [ 65.072230][ T7291] FAULT_INJECTION: forcing a failure. [ 65.072230][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 65.072252][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.5.322 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.072268][ T7291] Tainted: [L]=SOFTLOCKUP [ 65.072272][ T7291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.072279][ T7291] Call Trace: [ 65.072283][ T7291] [ 65.072287][ T7291] dump_stack_lvl+0x100/0x190 [ 65.072317][ T7291] should_fail_ex.cold+0x5/0xa [ 65.072334][ T7291] should_failslab+0xc2/0x120 [ 65.072352][ T7291] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.072364][ T7291] ? __pfx_map_id_range_down+0x10/0x10 [ 65.072376][ T7291] ? rcu_is_watching+0x13/0xc0 [ 65.072391][ T7291] ? security_inode_alloc+0x3b/0x2c0 [ 65.072404][ T7291] security_inode_alloc+0x3b/0x2c0 [ 65.072416][ T7291] inode_init_always_gfp+0xc6f/0xfb0 [ 65.072432][ T7291] alloc_inode+0x8e/0x250 [ 65.072443][ T7291] sock_alloc+0x44/0x280 [ 65.072460][ T7291] ? security_socket_create+0x7f/0x250 [ 65.072479][ T7291] __sock_create+0xc2/0x860 [ 65.072498][ T7291] __sys_socket+0x14d/0x260 [ 65.072508][ T7291] ? __pfx___sys_socket+0x10/0x10 [ 65.072522][ T7291] __x64_sys_socket+0x72/0xb0 [ 65.072531][ T7291] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.072550][ T7291] do_syscall_64+0x123/0x790 [ 65.072567][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.072578][ T7291] RIP: 0033:0x7f4fbf59e159 [ 65.072589][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.072599][ T7291] RSP: 002b:00007f4fc04e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.072611][ T7291] RAX: ffffffffffffffda RBX: 00007f4fbf825fa0 RCX: 00007f4fbf59e159 [ 65.072618][ T7291] RDX: 00000000fffffffd RSI: 0000000000000803 RDI: 0000000000000001 [ 65.072646][ T7291] RBP: 00007f4fbf63506b R08: 0000000000000000 R09: 0000000000000000 [ 65.072652][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.072659][ T7291] R13: 00007f4fbf826038 R14: 00007f4fbf825fa0 R15: 00007ffe5e9edc78 [ 65.072673][ T7291] [ 65.072687][ T7291] socket: no more sockets [ 65.132092][ T7295] IPVS: using max 43 ests per chain, 103200 per kthread [ 65.280640][ T5598] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.443673][ T5598] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 65.444176][ T5598] usb 6-1: config 0 has no interfaces? [ 65.444583][ T5598] usb 6-1: config 0 has no interfaces? [ 65.446320][ T5598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.446333][ T5598] usb 6-1: Product: syz [ 65.446342][ T5598] usb 6-1: Manufacturer: syz [ 65.446350][ T5598] usb 6-1: SerialNumber: syz [ 65.449835][ T5598] usb 6-1: config 0 descriptor?? [ 65.482697][ T852] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 65.642098][ T7335] ubi0: attaching mtd0 [ 65.643355][ T7335] ubi0: scanning is finished [ 65.643396][ T7335] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 65.651303][ T852] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 65.652900][ T852] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 65.652916][ T852] usb 10-1: config 0 has no interface number 0 [ 65.652935][ T852] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.656853][ T852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.656875][ T852] usb 10-1: Product: syz [ 65.656888][ T852] usb 10-1: Manufacturer: syz [ 65.656899][ T852] usb 10-1: SerialNumber: syz [ 65.660710][ T852] usb 10-1: config 0 descriptor?? [ 65.683064][ T852] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 65.779158][ T7335] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 65.802791][ T7347] jffs2: notice: (7347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 65.823987][ T58] usb 6-1: USB disconnect, device number 5 [ 65.863572][ T5084] Bluetooth: hci2: Unexpected cc 0x762f with no status [ 65.875020][ T7358] xt_hashlimit: size too large, truncated to 1048576 [ 66.016126][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 66.017999][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 66.070653][ T7371] overlayfs: failed to resolve './bus': -2 [ 66.208587][ T7376] loop0: detected capacity change from 0 to 1 [ 66.212940][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213037][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213123][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213206][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213289][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213366][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213450][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213528][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213610][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.213681][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7382 comm=syz.4.337 [ 66.259143][ T7377] ldm_validate_privheads(): Disk read failed. [ 66.259194][ T7377] loop0: [ 66.259210][ T7377] loop0: partition table partially beyond EOD, truncated [ 66.480236][ T7390] jffs2: notice: (7390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.048805][ T5136] ldm_validate_privheads(): Disk read failed. [ 67.048857][ T5136] loop0: [ 67.048866][ T5136] loop0: partition table partially beyond EOD, truncated [ 67.068994][ T7416] jffs2: notice: (7416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.226674][ T7430] lo speed is unknown, defaulting to 1000 [ 67.233120][ T7430] lo speed is unknown, defaulting to 1000 [ 67.239001][ T7430] lo speed is unknown, defaulting to 1000 [ 67.324130][ T7432] gfs2: gfs2 mount does not exist [ 67.330726][ T5809] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 67.469932][ T5810] lo speed is unknown, defaulting to 1000 [ 67.469990][ T7430] infiniband syz0: set active [ 67.469999][ T7430] infiniband syz0: added lo [ 67.480715][ T7430] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 67.480739][ T7430] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 67.480762][ T7430] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 67.481253][ T5809] usb 9-1: Using ep0 maxpacket: 8 [ 67.481774][ T5809] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.482868][ T5809] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.482887][ T5809] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.482904][ T5809] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 56 [ 67.484697][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.484709][ T5809] usb 9-1: Product: syz [ 67.484716][ T5809] usb 9-1: Manufacturer: syz [ 67.484723][ T5809] usb 9-1: SerialNumber: syz [ 67.508474][ T7430] RDS/IB: syz0: added [ 67.508636][ T7430] smc: adding ib device syz0 with port count 1 [ 67.508701][ T7430] smc: ib device syz0 port 1 has no pnetid [ 67.512050][ T5810] lo speed is unknown, defaulting to 1000 [ 67.517210][ T7430] lo speed is unknown, defaulting to 1000 [ 67.603973][ T7440] netlink: 'syz.1.358': attribute type 9 has an invalid length. [ 67.613508][ T7441] netlink: 'syz.1.358': attribute type 9 has an invalid length. [ 67.663279][ T7430] lo speed is unknown, defaulting to 1000 [ 67.775282][ T7430] lo speed is unknown, defaulting to 1000 [ 67.845994][ T5809] cdc_ncm 9-1:1.0: bind() failure [ 67.849033][ T5809] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 67.849055][ T5809] cdc_ncm 9-1:1.1: bind() failure [ 67.854288][ T5809] usb 9-1: USB disconnect, device number 4 [ 67.900659][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 67.902365][ T6982] usb 10-1: USB disconnect, device number 5 [ 67.905400][ T6982] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 67.924979][ T7430] lo speed is unknown, defaulting to 1000 [ 68.039612][ T7430] lo speed is unknown, defaulting to 1000 [ 68.344013][ T7479] jffs2: notice: (7479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 68.381553][ T43] kauditd_printk_skb: 120 callbacks suppressed [ 68.381565][ T43] audit: type=1400 audit(1789724021.570:693): avc: denied { execute } for pid=7481 comm="syz.4.362" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 68.389751][ T43] audit: type=1400 audit(1789724021.570:694): avc: denied { create } for pid=7481 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.390238][ T43] audit: type=1400 audit(1789724021.570:695): avc: denied { connect } for pid=7481 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.391921][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.362'. [ 68.407869][ T43] audit: type=1400 audit(1789724021.600:696): avc: denied { load_policy } for pid=7481 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.408687][ T7482] SELinux: policydb magic number 0x10018 does not match expected magic number 0xf97cff8c [ 68.408822][ T7482] SELinux: failed to load policy [ 68.411060][ T43] audit: type=1400 audit(1789724021.600:697): avc: denied { execmem } for pid=7483 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.412817][ T43] audit: type=1400 audit(1789724021.610:698): avc: denied { create } for pid=7481 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 68.416863][ T43] audit: type=1400 audit(1789724021.610:699): avc: denied { ioctl } for pid=7483 comm="syz.1.363" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19640 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.437309][ T43] audit: type=1400 audit(1789724021.630:700): avc: denied { unmount } for pid=6761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 68.576934][ T43] audit: type=1400 audit(1789724021.760:701): avc: denied { create } for pid=7495 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.577466][ T43] audit: type=1400 audit(1789724021.760:702): avc: denied { bind } for pid=7495 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.818227][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.371'. [ 68.907676][ T7529] jffs2: notice: (7529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.195919][ T7546] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 69.220583][ T30] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 69.381181][ T30] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 69.382061][ T30] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 69.382080][ T30] usb 10-1: config 0 has no interface number 0 [ 69.382110][ T30] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.383691][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.383703][ T30] usb 10-1: Product: syz [ 69.383711][ T30] usb 10-1: Manufacturer: syz [ 69.383718][ T30] usb 10-1: SerialNumber: syz [ 69.388536][ T30] usb 10-1: config 0 descriptor?? [ 69.394735][ T30] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 69.698466][ T7567] overlay: filesystem on ./file0 not supported as upperdir [ 69.816264][ T7576] jffs2: notice: (7576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.933311][ T7590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.390'. [ 70.047312][ T7612] jffs2: notice: (7612) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 71.091621][ T7635] loop5: detected capacity change from 0 to 7 [ 71.094908][ T7635] Dev loop5: unable to read RDB block 7 [ 71.094926][ T7635] loop5: AHDI p2 [ 71.094937][ T7635] loop5: partition table partially beyond EOD, truncated [ 71.183736][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.183784][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.186924][ T25] cfg80211: failed to load regulatory.db [ 71.284867][ T7640] bridge_slave_0: left allmulticast mode [ 71.284884][ T7640] bridge_slave_0: left promiscuous mode [ 71.284994][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.287884][ T7640] bridge_slave_1: left allmulticast mode [ 71.287902][ T7640] bridge_slave_1: left promiscuous mode [ 71.288092][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.296373][ T7640] bond0: (slave bond_slave_1): Releasing backup interface [ 71.310972][ T7640] team0: Port device team_slave_0 removed [ 71.313697][ T7640] team0: Port device team_slave_1 removed [ 71.314044][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.314054][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.314761][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.314771][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.315573][ T7640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.333335][ T7639] vlan0: entered promiscuous mode [ 71.337774][ T7639] team0: Port device vlan0 added [ 71.638430][ T7647] jffs2: notice: (7647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 71.661823][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 71.662891][ T25] usb 10-1: USB disconnect, device number 6 [ 71.666851][ T25] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 71.715519][ T7652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.715538][ T7652] IPv6: NLM_F_CREATE should be set when creating new route [ 71.715549][ T7652] IPv6: NLM_F_CREATE should be set when creating new route [ 71.717520][ T7652] netlink: Unknown conntrack attr (type=3335, max=9) [ 71.717536][ T7652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.345726][ T7664] selinux_netlink_send: 24 callbacks suppressed [ 72.345807][ T7664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7664 comm=syz.2.412 [ 72.636797][ T7673] jffs2: notice: (7673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 72.966133][ T7595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.003430][ T7683] FAT-fs (nullb0): bogus number of reserved sectors [ 73.003443][ T7683] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 73.005180][ T7686] FAT-fs (nullb0): bogus number of reserved sectors [ 73.005191][ T7686] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 73.016419][ T7688] devpts: Bad value for 'uid' [ 73.016431][ T7688] devpts: Bad value for 'uid' [ 73.031119][ T5942] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 73.038247][ T7692] sctp: [Deprecated]: syz.1.422 (pid 7692) Use of int in max_burst socket option deprecated. [ 73.038247][ T7692] Use struct sctp_assoc_value instead [ 73.182329][ T5942] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 73.183451][ T5942] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 73.183472][ T5942] usb 10-1: config 0 has no interface number 0 [ 73.183505][ T5942] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.185514][ T5942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.185534][ T5942] usb 10-1: Product: syz [ 73.185545][ T5942] usb 10-1: Manufacturer: syz [ 73.185556][ T5942] usb 10-1: SerialNumber: syz [ 73.192973][ T5942] usb 10-1: config 0 descriptor?? [ 73.216411][ T5942] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 73.254798][ T7704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7704 comm=syz.4.424 [ 73.364957][ T7708] jffs2: notice: (7708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 73.423000][ T43] kauditd_printk_skb: 73 callbacks suppressed [ 73.423013][ T43] audit: type=1400 audit(1789724026.610:776): avc: denied { mounton } for pid=7710 comm="syz.4.427" path="/proc/199/cgroup" dev="proc" ino=20583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 73.423800][ T43] audit: type=1400 audit(1789724026.610:777): avc: denied { create } for pid=7710 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 73.441279][ T43] audit: type=1400 audit(1789724026.630:778): avc: denied { sys_admin } for pid=7710 comm="syz.4.427" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 73.445316][ T7711] VFS: Mount too revealing [ 73.762198][ T7722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.764376][ T7722] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 73.764387][ T7722] overlayfs: missing 'lowerdir' [ 73.769912][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.914484][ T43] audit: type=1400 audit(1789724027.100:779): avc: denied { append } for pid=7727 comm="syz.1.432" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.938781][ T7726] cdrom: dropping to single frame dma [ 73.994676][ T43] audit: type=1400 audit(1789724027.180:780): avc: denied { read } for pid=7733 comm="syz.4.434" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.994989][ T43] audit: type=1400 audit(1789724027.180:781): avc: denied { open } for pid=7733 comm="syz.4.434" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.995995][ T43] audit: type=1400 audit(1789724027.180:782): avc: denied { ioctl } for pid=7733 comm="syz.4.434" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.033360][ T7736] jffs2: notice: (7736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.038389][ T43] audit: type=1400 audit(1789724027.220:783): avc: denied { write } for pid=7735 comm="syz.1.435" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.065360][ T7739] syzkaller0: entered promiscuous mode [ 74.065374][ T7739] syzkaller0: entered allmulticast mode [ 74.143115][ T7739] tmpfs: Bad value for 'mpol' [ 74.250651][ T5809] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 74.348553][ T43] audit: type=1400 audit(1789724027.530:784): avc: denied { read write } for pid=7744 comm="syz.1.438" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.348720][ T43] audit: type=1400 audit(1789724027.530:785): avc: denied { open } for pid=7744 comm="syz.1.438" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.400666][ T5809] usb 9-1: Using ep0 maxpacket: 16 [ 74.402094][ T5809] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 74.402922][ T5809] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 74.404511][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.404523][ T5809] usb 9-1: Product: 饦 [ 74.404530][ T5809] usb 9-1: Manufacturer: 䄑삲篿쏖䧯丑뛦鑯 [ 74.404538][ T5809] usb 9-1: SerialNumber: syz [ 74.624179][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 74.624201][ T7755] netlink: 'syz.1.439': attribute type 7 has an invalid length. [ 74.624208][ T7755] netlink: 'syz.1.439': attribute type 8 has an invalid length. [ 74.624214][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 74.899185][ T7769] Cannot find add_set index 0 as target [ 74.988752][ T7775] jffs2: notice: (7775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.990165][ T7771] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 75.005924][ T7771] bond3: entered promiscuous mode [ 75.006208][ T7771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.027871][ T7771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.028123][ T7771] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 75.028135][ T7771] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 75.035956][ T7771] bond3: (slave ip6gre1): making interface the new active one [ 75.035971][ T7771] ip6gre1: entered promiscuous mode [ 75.041576][ T7771] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 75.196755][ T5809] usb 9-1: failed waiting for Axe-Fx III to boot: -71 [ 75.196774][ T5809] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 75.205791][ T5809] usb 9-1: USB disconnect, device number 5 [ 75.420840][ C3] usb 10-1: yurex_control_callback - control failed: -2 [ 75.424697][ T852] usb 10-1: USB disconnect, device number 7 [ 75.435182][ T852] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 75.514868][ T7802] jffs2: notice: (7802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 75.608330][ T7809] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.455'. [ 75.608383][ T7810] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.455'. [ 75.651557][ T7812] loop5: detected capacity change from 0 to 7 [ 75.654970][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655038][ C2] buffer_io_error: 6 callbacks suppressed [ 75.655050][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.655262][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655317][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.655447][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655503][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.655594][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655644][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.655763][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655814][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.655924][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.655976][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.656078][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.656154][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.656188][ T7812] ldm_validate_partition_table(): Disk read failed. [ 75.656282][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.656332][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.656433][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.656476][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.656592][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.656641][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 75.656784][ T7812] Dev loop5: unable to read RDB block 0 [ 75.657342][ T7812] loop5: unable to read partition table [ 75.657492][ T7812] loop5: partition table beyond EOD, truncated [ 75.657537][ T7812] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 76.039213][ T7830] jffs2: notice: (7830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 76.128419][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 76.433916][ T5809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.581118][ T5809] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 76.582036][ T5809] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 76.582050][ T5809] usb 7-1: config 0 has no interface number 0 [ 76.582067][ T5809] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.585448][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.585461][ T5809] usb 7-1: Product: syz [ 76.585469][ T5809] usb 7-1: Manufacturer: syz [ 76.585478][ T5809] usb 7-1: SerialNumber: syz [ 76.609079][ T5809] usb 7-1: config 0 descriptor?? [ 76.643554][ T5809] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 76.880331][ T7863] jffs2: notice: (7863) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 76.963182][ T7867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.986926][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.037679][ T7877] netlink: 'syz.5.475': attribute type 11 has an invalid length. [ 77.037839][ T7875] ima: policy update failed [ 77.131491][ T5598] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.136887][ T7883] (syz.5.476,7883,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.137237][ T7883] (syz.5.476,7883,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 77.280541][ T5598] usb 6-1: Using ep0 maxpacket: 32 [ 77.281051][ T5598] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 77.282520][ T5598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.284393][ T5598] usb 6-1: config 0 descriptor?? [ 77.303707][ T5598] as10x_usb: device has been detected [ 77.304120][ T5598] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 77.321039][ T5598] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 77.340286][ T5598] as10x_usb: error during firmware upload part1 [ 77.342870][ T5598] Registered device nBox DVB-T Dongle [ 77.448452][ T7894] jffs2: notice: (7894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 77.497563][ T5809] usb 6-1: USB disconnect, device number 6 [ 77.550971][ T7898] netlink: 'syz.5.482': attribute type 5 has an invalid length. [ 77.711087][ T5809] Unregistered device nBox DVB-T Dongle [ 78.004748][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 78.004765][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 78.260713][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.485'. [ 78.264206][ T7905] geneve2: entered promiscuous mode [ 78.317141][ T7912] netlink: 'syz.4.488': attribute type 1 has an invalid length. [ 78.333842][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.378577][ T7912] gretap1: entered promiscuous mode [ 78.383426][ T7912] bond1: (slave gretap1): making interface the new active one [ 78.384105][ T7912] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 78.418362][ T7919] jffs2: notice: (7919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 78.860928][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 78.863181][ T5942] usb 7-1: USB disconnect, device number 7 [ 78.863590][ T5809] as10x_usb: device has been disconnected [ 78.869328][ T5942] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 79.417827][ T7944] pim6reg: entered allmulticast mode [ 79.419806][ T7944] team0: entered allmulticast mode [ 79.419818][ T7944] team_slave_0: entered allmulticast mode [ 79.419828][ T7944] team_slave_1: entered allmulticast mode [ 79.436373][ T7931] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.472291][ T7951] jffs2: notice: (7951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 79.473468][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 79.473477][ T43] audit: type=1400 audit(1789724032.660:840): avc: denied { write } for pid=7950 comm="syz.5.499" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.523974][ T7953] pim6reg: left allmulticast mode [ 79.541848][ T5810] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.563523][ T7944] lo speed is unknown, defaulting to 1000 [ 79.572496][ T7963] lo: entered promiscuous mode [ 79.619722][ T7963] tunl0: entered promiscuous mode [ 79.624669][ T7963] gre0: entered promiscuous mode [ 79.633493][ T7963] gretap0: entered promiscuous mode [ 79.637689][ T7963] erspan0: entered promiscuous mode [ 79.638982][ T7963] ip_vti0: entered promiscuous mode [ 79.639763][ T7963] ip6_vti0: entered promiscuous mode [ 79.642628][ T7963] sit0: entered promiscuous mode [ 79.648007][ T7963] ip6tnl0: entered promiscuous mode [ 79.649016][ T7963] ip6gre0: entered promiscuous mode [ 79.653379][ T7963] syz_tun: entered promiscuous mode [ 79.657819][ T7963] bridge0: entered promiscuous mode [ 79.659561][ T7963] vcan0: entered promiscuous mode [ 79.660136][ T7963] bond0: entered promiscuous mode [ 79.663621][ T7963] team0: entered promiscuous mode [ 79.665139][ T7963] dummy0: entered promiscuous mode [ 79.669167][ T7963] nlmon0: entered promiscuous mode [ 79.669905][ T7963] batadv0: entered promiscuous mode [ 79.672651][ T7963] vxcan0: entered promiscuous mode [ 79.673005][ T7963] vxcan1: entered promiscuous mode [ 79.674847][ T7963] veth0: entered promiscuous mode [ 79.677304][ T7963] veth1: entered promiscuous mode [ 79.683540][ T7963] wg0: entered promiscuous mode [ 79.685703][ T7963] wg1: entered promiscuous mode [ 79.687292][ T7963] wg2: entered promiscuous mode [ 79.687983][ T7963] veth0_to_bridge: entered promiscuous mode [ 79.689638][ T7963] bridge_slave_0: entered promiscuous mode [ 79.690370][ T7963] veth1_to_bridge: entered promiscuous mode [ 79.692139][ T7963] bridge_slave_1: entered promiscuous mode [ 79.693423][ T7963] veth0_to_bond: entered promiscuous mode [ 79.696769][ T7963] veth1_to_bond: entered promiscuous mode [ 79.697785][ T7963] bond_slave_1: entered promiscuous mode [ 79.698769][ T7963] veth0_to_team: entered promiscuous mode [ 79.699881][ T7963] team_slave_0: entered promiscuous mode [ 79.701609][ T7963] veth1_to_team: entered promiscuous mode [ 79.702693][ T7963] team_slave_1: entered promiscuous mode [ 79.702816][ T7963] veth0_to_batadv: entered promiscuous mode [ 79.703828][ T7963] batadv_slave_0: entered promiscuous mode [ 79.704897][ T7963] veth1_to_batadv: entered promiscuous mode [ 79.708156][ T7963] batadv_slave_1: entered promiscuous mode [ 79.709211][ T7963] xfrm0: entered promiscuous mode [ 79.710112][ T7963] veth0_to_hsr: entered promiscuous mode [ 79.712467][ T7963] veth1_to_hsr: entered promiscuous mode [ 79.714342][ T7963] hsr0: entered promiscuous mode [ 79.715393][ T7963] veth1_virt_wifi: entered promiscuous mode [ 79.716440][ T7963] veth0_virt_wifi: entered promiscuous mode [ 79.718002][ T7963] virt_wifi0: entered promiscuous mode [ 79.723215][ T7963] vlan1: entered promiscuous mode [ 79.725248][ T7963] macvlan0: entered promiscuous mode [ 79.726390][ T7963] veth1_vlan: left allmulticast mode [ 79.728544][ T7963] ipvlan0: entered promiscuous mode [ 79.728654][ T7963] ipvlan1: entered promiscuous mode [ 79.736522][ T7963] macvtap0: entered promiscuous mode [ 79.737692][ T7963] macsec0: entered promiscuous mode [ 79.738640][ T7963] geneve0: entered promiscuous mode [ 79.739778][ T7963] geneve1: entered promiscuous mode [ 79.746899][ T7963] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 79.750302][ T7963] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 79.753924][ T7963] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 79.755082][ T7963] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 79.761489][ T7963] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 79.771981][ T7963] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 79.775953][ T7963] bond1: entered promiscuous mode [ 79.776302][ T7963] gretap1: entered promiscuous mode [ 79.776847][ T7963] bond2: entered promiscuous mode [ 79.776857][ T7963] gretap2: entered promiscuous mode [ 79.779353][ T7963] vxlan0: entered promiscuous mode [ 79.782221][ T7963] bond4: entered promiscuous mode [ 79.830566][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.830591][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.830611][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.830625][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.830642][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.830655][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.830672][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.830686][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.834088][ T43] audit: type=1400 audit(1789724033.020:841): avc: denied { write } for pid=7970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.895742][ T43] audit: type=1400 audit(1789724033.080:842): avc: denied { write } for pid=7975 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.963056][ T43] audit: type=1400 audit(1789724033.150:843): avc: denied { write } for pid=7977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.011495][ T7973] team0: left allmulticast mode [ 80.011510][ T7973] team_slave_0: left allmulticast mode [ 80.011521][ T7973] team_slave_1: left allmulticast mode [ 80.016509][ T43] audit: type=1400 audit(1789724033.200:844): avc: denied { write } for pid=7980 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.112929][ T43] audit: type=1400 audit(1789724033.300:845): avc: denied { write } for pid=7982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.188518][ T43] audit: type=1400 audit(1789724033.370:846): avc: denied { write } for pid=7985 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.577025][ T7993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7993 comm=syz.1.505 [ 80.585481][ T43] audit: type=1400 audit(1789724033.770:847): avc: denied { append } for pid=7990 comm="syz.1.505" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.644232][ T8005] jffs2: notice: (8005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 80.658206][ T43] audit: type=1400 audit(1789724033.840:848): avc: denied { write } for pid=8004 comm="syz.2.509" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.692578][ T43] audit: type=1400 audit(1789724033.880:849): avc: denied { mount } for pid=8008 comm="syz.4.510" name="/" dev="9p" ino=75785871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.858057][ T8015] vivid-000: disconnect [ 80.858468][ T8015] vivid-000: reconnect [ 80.867188][ T8015] nfs: Unknown parameter '' [ 80.900786][ T852] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 80.940397][ T8026] tmpfs: Bad value for 'mpol' [ 80.942465][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 81.061137][ T852] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 81.061903][ T852] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 81.061916][ T852] usb 10-1: config 0 has no interface number 0 [ 81.061934][ T852] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.064384][ T852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.064396][ T852] usb 10-1: Product: syz [ 81.064404][ T852] usb 10-1: Manufacturer: syz [ 81.064411][ T852] usb 10-1: SerialNumber: syz [ 81.067498][ T852] usb 10-1: config 0 descriptor?? [ 81.072971][ T852] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 81.091033][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 81.092063][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.257925][ T8040] bond2: entered allmulticast mode [ 81.267323][ T8041] syzkaller0: entered promiscuous mode [ 81.267336][ T8041] syzkaller0: entered allmulticast mode [ 81.301956][ T10] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 81.554219][ T8044] overlay: ./file0 is not a directory [ 81.556388][ T852] usb 7-1: USB disconnect, device number 8 [ 81.649615][ T8048] overlay: Unknown parameter './file0/file2' [ 81.652436][ T8048] overlay: Unknown parameter './file0/file2' [ 81.652880][ T8048] overlay: Unknown parameter './file0/file2' [ 81.653159][ T8048] overlay: Unknown parameter './file0/file2' [ 81.653441][ T8048] overlay: Unknown parameter './file0/file2' [ 81.653643][ T8048] overlay: Unknown parameter './file0/file2' [ 81.654230][ T8048] overlay: Unknown parameter './file0/file2' [ 81.654517][ T8048] overlay: Unknown parameter './file0/file2' [ 81.654778][ T8048] overlay: Unknown parameter './file0/file2' [ 81.655098][ T8048] overlay: Unknown parameter './file0/file2' [ 81.655396][ T8048] overlay: Unknown parameter './file0/file2' [ 81.655637][ T8048] overlay: Unknown parameter './file0/file2' [ 81.655932][ T8048] overlay: Unknown parameter './file0/file2' [ 81.656230][ T8048] overlay: Unknown parameter './file0/file2' [ 81.656463][ T8048] overlay: Unknown parameter './file0/file2' [ 81.656691][ T8048] overlay: Unknown parameter './file0/file2' [ 81.656961][ T8048] overlay: Unknown parameter './file0/file2' [ 81.657234][ T8048] overlay: Unknown parameter './file0/file2' [ 81.657517][ T8048] overlay: Unknown parameter './file0/file2' [ 81.657761][ T8048] overlay: Unknown parameter './file0/file2' [ 81.658055][ T8048] overlay: Unknown parameter './file0/file2' [ 81.658461][ T8048] overlay: Unknown parameter './file0/file2' [ 81.658686][ T8048] overlay: Unknown parameter './file0/file2' [ 81.658953][ T8048] overlay: Unknown parameter './file0/file2' [ 81.659206][ T8048] overlay: Unknown parameter './file0/file2' [ 81.659428][ T8048] overlay: Unknown parameter './file0/file2' [ 81.659716][ T8048] overlay: Unknown parameter './file0/file2' [ 81.659988][ T8048] overlay: Unknown parameter './file0/file2' [ 81.660252][ T8048] overlay: Unknown parameter './file0/file2' [ 81.662423][ T8048] overlay: Unknown parameter './file0/file2' [ 81.662859][ T8048] overlay: Unknown parameter './file0/file2' [ 81.666848][ T8048] overlay: Unknown parameter './file0/file2' [ 81.668482][ T8048] overlay: Unknown parameter './file0/file2' [ 81.871613][ T8058] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.114379][ T8047] cgroup: fork rejected by pids controller in /syz4 [ 82.326065][ T8101] jffs2: notice: (8101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 82.536673][ T8112] kAFS: No cell specified [ 82.852276][ T8124] overlayfs: missing 'lowerdir' [ 82.899826][ T8127] jffs2: notice: (8127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 83.335839][ T8149] input: syz0 as /devices/virtual/input/input9 [ 83.339098][ T8152] jffs2: notice: (8152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 83.346969][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 83.348712][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 83.351820][ T852] usb 10-1: USB disconnect, device number 8 [ 83.354233][ T852] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 83.411163][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 83.476282][ T8166] overlayfs: failed lookup in lower (newroot/154, name='file0', err=-40): overlapping layers [ 83.477623][ T8166] overlayfs: failed lookup in lower (newroot/154, name='file0', err=-40): overlapping layers [ 83.620188][ T8179] bridge0: port 3(syz_tun) entered blocking state [ 83.620330][ T8179] bridge0: port 3(syz_tun) entered disabled state [ 83.620576][ T8179] syz_tun: entered allmulticast mode [ 83.623189][ T8179] syz_tun: entered promiscuous mode [ 83.623796][ T8179] bridge0: port 3(syz_tun) entered blocking state [ 83.623875][ T8179] bridge0: port 3(syz_tun) entered forwarding state [ 83.629786][ T8182] jffs2: notice: (8182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 83.691818][ T8189] PKCS7: Unsupported SignerInfo version [ 83.692884][ T8189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.884733][ T5808] nvme nvme0: rdma_resolve_route failed (-110). [ 83.886971][ T8195] nvme nvme0: rdma connection establishment failed (-19) [ 83.998205][ T8211] jffs2: notice: (8211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 84.054250][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 84.054271][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.568'. [ 84.070622][ T5808] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.070651][ T5808] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.070674][ T5808] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.070691][ T5808] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.093461][ T8223] tipc: Started in network mode [ 84.093478][ T8223] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.094839][ T8223] tipc: New replicast peer: 172.20.20.187 [ 84.096638][ T8223] tipc: Enabled bearer , priority 10 [ 84.119010][ T8221] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.119024][ T8221] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.120131][ T8221] overlayfs: conflicting lowerdir path [ 84.188041][ T8233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.572'. [ 84.264482][ T8243] jffs2: notice: (8243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 84.490603][ T852] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 84.535773][ T8265] netlink: 160 bytes leftover after parsing attributes in process `syz.1.583'. [ 84.568472][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 84.568485][ T43] audit: type=1400 audit(1789724037.750:892): avc: denied { create } for pid=8262 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.568818][ T43] audit: type=1400 audit(1789724037.750:893): avc: denied { write } for pid=8262 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.569120][ T43] audit: type=1400 audit(1789724037.750:894): avc: denied { ioctl } for pid=8262 comm="syz.4.582" path="socket:[22680]" dev="sockfs" ino=22680 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.642211][ T852] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 84.644082][ T852] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 84.644097][ T852] usb 10-1: config 0 has no interface number 0 [ 84.644114][ T852] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.644349][ T8274] jffs2: notice: (8274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 84.646025][ T852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.646038][ T852] usb 10-1: Product: syz [ 84.646046][ T852] usb 10-1: Manufacturer: syz [ 84.646053][ T852] usb 10-1: SerialNumber: syz [ 84.646240][ T43] audit: type=1400 audit(1789724037.830:895): avc: denied { write } for pid=8273 comm="syz.1.587" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.648846][ T852] usb 10-1: config 0 descriptor?? [ 84.653324][ T852] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 84.690015][ T43] audit: type=1400 audit(1789724037.870:896): avc: denied { append } for pid=8276 comm="syz.1.588" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.693327][ T43] audit: type=1400 audit(1789724037.880:897): avc: denied { listen } for pid=8276 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.726417][ T8279] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 84.841811][ T8283] e1000e 0000:00:02.0 eth1: removed PHC [ 84.873821][ T43] audit: type=1400 audit(1789724038.060:898): avc: denied { write } for pid=8284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.922670][ T43] audit: type=1400 audit(1789724038.110:899): avc: denied { write } for pid=8288 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.923941][ T43] audit: type=1400 audit(1789724038.110:900): avc: denied { mount } for pid=8290 comm="syz.2.591" name="/" dev="autofs" ino=22706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.925786][ T8291] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.950016][ T8291] [ 84.950841][ T8291] ====================================================== [ 84.953047][ T8291] WARNING: possible circular locking dependency detected [ 84.955221][ T8291] syzkaller #0 Tainted: G L [ 84.957224][ T8291] ------------------------------------------------------ [ 84.959444][ T8291] syz.2.591/8291 is trying to acquire lock: [ 84.961332][ T8291] ffff888057c8f138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 84.964465][ T8291] [ 84.964465][ T8291] but task is already holding lock: [ 84.966788][ T8291] ffff8880271e6480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 84.969746][ T8291] [ 84.969746][ T8291] which lock already depends on the new lock. [ 84.969746][ T8291] [ 84.973006][ T8291] [ 84.973006][ T8291] the existing dependency chain (in reverse order) is: [ 84.975820][ T8291] [ 84.975820][ T8291] -> #3 (&of->mutex){+.+.}-{4:4}: [ 84.978139][ T8291] lock_acquire+0x1d1/0x380 [ 84.979725][ T8291] __mutex_lock+0x1a4/0x1bd0 [ 84.981392][ T8291] kernfs_seq_start+0x4f/0x2a0 [ 84.981436][ T8283] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 84.984808][ T8291] seq_read_iter+0x2c1/0x1270 [ 84.986391][ T8291] kernfs_fop_read_iter+0x46c/0x610 [ 84.988129][ T8291] copy_splice_read+0x4ba/0xbb0 [ 84.989796][ T8291] do_splice_read+0x285/0x370 [ 84.991460][ T8291] splice_file_to_pipe+0x82/0x120 [ 84.993223][ T8291] do_sendfile+0x366/0xe20 [ 84.994827][ T8291] __x64_sys_sendfile64+0x1d8/0x220 [ 84.996661][ T8291] do_syscall_64+0x123/0x790 [ 84.998266][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.000275][ T8291] [ 85.000275][ T8291] -> #2 (&p->lock){+.+.}-{4:4}: [ 85.002538][ T8291] lock_acquire+0x1d1/0x380 [ 85.004136][ T8291] __mutex_lock+0x1a4/0x1bd0 [ 85.005709][ T8291] seq_read_iter+0xe1/0x1270 [ 85.007247][ T8291] kernfs_fop_read_iter+0x46c/0x610 [ 85.009063][ T8291] copy_splice_read+0x4ba/0xbb0 [ 85.010724][ T8291] do_splice_read+0x285/0x370 [ 85.012293][ T8291] splice_file_to_pipe+0x82/0x120 [ 85.013954][ T8291] do_sendfile+0x366/0xe20 [ 85.015513][ T8291] __x64_sys_sendfile64+0x1d8/0x220 [ 85.017314][ T8291] do_syscall_64+0x123/0x790 [ 85.018907][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.020825][ T8291] [ 85.020825][ T8291] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 85.023054][ T8291] lock_acquire+0x1d1/0x380 [ 85.024734][ T8291] __mutex_lock+0x1a4/0x1bd0 [ 85.026465][ T8291] anon_pipe_prefill_and_lock+0x16c/0x580 [ 85.028663][ T8291] anon_pipe_write+0x164/0x1b50 [ 85.030550][ T8291] __kernel_write_iter+0x6bb/0x930 [ 85.032405][ T8291] __kernel_write+0xf6/0x140 [ 85.033988][ T8291] autofs_notify_daemon+0x50d/0xd90 [ 85.035715][ T8291] autofs_wait+0x10fd/0x1b50 [ 85.037272][ T8291] autofs_mount_wait+0x132/0x3b0 [ 85.038876][ T8291] autofs_d_automount+0x490/0x950 [ 85.040519][ T8291] __traverse_mounts+0x1b9/0x8a0 [ 85.042256][ T8291] step_into_slowpath+0xb7e/0xf90 [ 85.043975][ T8291] path_lookupat+0x58b/0xc40 [ 85.045551][ T8291] filename_lookup+0x202/0x590 [ 85.047150][ T8291] user_path_at+0x3c/0x60 [ 85.048664][ T8291] __x64_sys_mount+0x1fb/0x310 [ 85.050456][ T8291] do_syscall_64+0x123/0x790 [ 85.052084][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.054092][ T8291] [ 85.054092][ T8291] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 85.056543][ T8291] check_prev_add+0xeb/0xe60 [ 85.058166][ T8291] __lock_acquire+0x1528/0x1f40 [ 85.059872][ T8291] lock_acquire+0x1d1/0x380 [ 85.062268][ T8291] __mutex_lock+0x1a4/0x1bd0 [ 85.063881][ T8291] autofs_notify_daemon+0x4f8/0xd90 [ 85.065691][ T8291] autofs_wait+0x10fd/0x1b50 [ 85.067311][ T8291] autofs_mount_wait+0x132/0x3b0 [ 85.069022][ T8291] autofs_d_automount+0x490/0x950 [ 85.070703][ T8291] __traverse_mounts+0x1b9/0x8a0 [ 85.072356][ T8291] step_into_slowpath+0xb7e/0xf90 [ 85.074016][ T8291] path_lookupat+0x58b/0xc40 [ 85.075535][ T8291] filename_lookup+0x202/0x590 [ 85.077169][ T8291] kern_path+0x37/0x50 [ 85.078622][ T8291] lookup_bdev+0xd8/0x2a0 [ 85.080160][ T8291] resume_store+0x1d6/0x460 [ 85.081782][ T8291] kobj_attr_store+0x58/0x80 [ 85.083400][ T8291] sysfs_kf_write+0xf2/0x150 [ 85.085017][ T8291] kernfs_fop_write_iter+0x3e0/0x5f0 [ 85.086842][ T8291] vfs_write+0x6af/0x1050 [ 85.088361][ T8291] ksys_write+0x12a/0x250 [ 85.089906][ T8291] do_syscall_64+0x123/0x790 [ 85.091536][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.093534][ T8291] [ 85.093534][ T8291] other info that might help us debug this: [ 85.093534][ T8291] [ 85.096680][ T8291] Chain exists of: [ 85.096680][ T8291] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 85.096680][ T8291] [ 85.100368][ T8291] Possible unsafe locking scenario: [ 85.100368][ T8291] [ 85.102707][ T8291] CPU0 CPU1 [ 85.104386][ T8291] ---- ---- [ 85.106082][ T8291] lock(&of->mutex); [ 85.107354][ T8291] lock(&p->lock); [ 85.109330][ T8291] lock(&of->mutex); [ 85.111396][ T8291] lock(&sbi->pipe_mutex); [ 85.112852][ T8291] [ 85.112852][ T8291] *** DEADLOCK *** [ 85.112852][ T8291] [ 85.115353][ T8291] locks held by syz.2.591/8291: 4, last CPU#1: [ 85.117291][ T8291] #0: ffff88801c7b7eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 85.120084][ T8291] #1: ffff88802d894460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 85.122900][ T8291] #2: ffff8880271e6480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 85.125905][ T8291] #3: ffff88801cf4dd28 (kn->active#88){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 85.129006][ T8291] [ 85.129006][ T8291] stack backtrace: [ 85.130846][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.134142][ T8291] Tainted: [L]=SOFTLOCKUP [ 85.135489][ T8291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.138571][ T8291] Call Trace: [ 85.139598][ T8291] [ 85.140540][ T8291] dump_stack_lvl+0x100/0x190 [ 85.141974][ T8291] print_circular_bug.cold+0x178/0x1be [ 85.143643][ T8291] check_noncircular+0x146/0x160 [ 85.145154][ T8291] check_prev_add+0xeb/0xe60 [ 85.146563][ T8291] __lock_acquire+0x1528/0x1f40 [ 85.148032][ T8291] lock_acquire+0x1d1/0x380 [ 85.149404][ T8291] ? autofs_notify_daemon+0x4f8/0xd90 [ 85.151040][ T8291] ? __pfx___might_resched+0x10/0x10 [ 85.152679][ T8291] __mutex_lock+0x1a4/0x1bd0 [ 85.154120][ T8291] ? autofs_notify_daemon+0x4f8/0xd90 [ 85.155805][ T8291] ? autofs_notify_daemon+0x4f8/0xd90 [ 85.157507][ T8291] ? find_held_lock+0x2b/0x80 [ 85.158993][ T8291] ? autofs_notify_daemon+0x4a0/0xd90 [ 85.160700][ T8291] ? autofs_notify_daemon+0x4a0/0xd90 [ 85.162417][ T8291] ? __pfx___mutex_lock+0x10/0x10 [ 85.163986][ T8291] ? __mutex_unlock_slowpath+0x35d/0x930 [ 85.165699][ T8291] ? from_kgid_munged+0xab/0x130 [ 85.167225][ T8291] ? __pfx_from_kgid_munged+0x10/0x10 [ 85.168842][ T8291] ? path_lookupat+0x58b/0xc40 [ 85.170346][ T8291] ? autofs_notify_daemon+0x4f8/0xd90 [ 85.172049][ T8291] autofs_notify_daemon+0x4f8/0xd90 [ 85.173700][ T8291] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 85.175495][ T8291] ? lockdep_init_map_type+0x5c/0x250 [ 85.177202][ T8291] ? lockdep_init_map_type+0x5c/0x250 [ 85.178874][ T8291] autofs_wait+0x10fd/0x1b50 [ 85.180302][ T8291] ? __pfx_autofs_wait+0x10/0x10 [ 85.181830][ T8291] ? find_held_lock+0x2b/0x80 [ 85.183293][ T8291] ? path_has_submounts+0xcf/0x120 [ 85.184862][ T8291] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.186445][ T8291] ? find_held_lock+0x2b/0x80 [ 85.187900][ T8291] autofs_mount_wait+0x132/0x3b0 [ 85.189470][ T8291] autofs_d_automount+0x490/0x950 [ 85.191002][ T8291] __traverse_mounts+0x1b9/0x8a0 [ 85.192507][ T8291] step_into_slowpath+0xb7e/0xf90 [ 85.194077][ T8291] ? rcu_is_watching+0x13/0xc0 [ 85.195537][ T8291] ? __pfx_step_into_slowpath+0x10/0x10 [ 85.197244][ T8291] ? lookup_slow+0x5b/0x70 [ 85.198625][ T8291] ? lookup_slow+0x5b/0x70 [ 85.199992][ T8291] path_lookupat+0x58b/0xc40 [ 85.201436][ T8291] filename_lookup+0x202/0x590 [ 85.202895][ T8291] ? __pfx_filename_lookup+0x10/0x10 [ 85.204477][ T8291] ? do_getname_kernel+0x5d/0x250 [ 85.205967][ T8291] ? __asan_memcpy+0x3c/0x60 [ 85.207327][ T8291] kern_path+0x37/0x50 [ 85.208599][ T8291] lookup_bdev+0xd8/0x2a0 [ 85.209899][ T8291] ? __pfx_lookup_bdev+0x10/0x10 [ 85.211462][ T8291] ? __asan_memcpy+0x3c/0x60 [ 85.212855][ T8291] resume_store+0x1d6/0x460 [ 85.214206][ T8291] ? __pfx_resume_store+0x10/0x10 [ 85.215709][ T8291] ? lock_acquire+0x1d1/0x380 [ 85.217146][ T8291] ? sysfs_file_kobj+0x21/0x290 [ 85.218602][ T8291] ? find_held_lock+0x2b/0x80 [ 85.220026][ T8291] ? sysfs_file_kobj+0xe4/0x290 [ 85.221518][ T8291] ? sysfs_file_kobj+0xe4/0x290 [ 85.222937][ T8291] ? __pfx_resume_store+0x10/0x10 [ 85.224455][ T8291] kobj_attr_store+0x58/0x80 [ 85.225911][ T8291] ? __pfx_kobj_attr_store+0x10/0x10 [ 85.227496][ T8291] sysfs_kf_write+0xf2/0x150 [ 85.228904][ T8291] kernfs_fop_write_iter+0x3e0/0x5f0 [ 85.230465][ T8291] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.232011][ T8291] vfs_write+0x6af/0x1050 [ 85.233328][ T8291] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 85.235045][ T8291] ? __pfx_vfs_write+0x10/0x10 [ 85.236496][ T8291] ? find_held_lock+0x2b/0x80 [ 85.237926][ T8291] ksys_write+0x12a/0x250 [ 85.239242][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 85.240711][ T8291] do_syscall_64+0x123/0x790 [ 85.242198][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.244067][ T8291] RIP: 0033:0x7f641319e159 [ 85.245468][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.251825][ T8291] RSP: 002b:00007f6413f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.254509][ T8291] RAX: ffffffffffffffda RBX: 00007f6413425fa0 RCX: 00007f641319e159 [ 85.257046][ T8291] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 000000000000000b [ 85.259501][ T8291] RBP: 00007f641323506b R08: 0000000000000000 R09: 0000000000000000 [ 85.261999][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.264469][ T8291] R13: 00007f6413426038 R14: 00007f6413425fa0 R15: 00007ffcc6b1d1e8 [ 85.266946][ T8291] [ 85.273131][ T8291] PM: Image not found (code -6) [ 85.278782][ T5942] tipc: Node number set to 2886997162 [ 85.300888][ T43] audit: type=1400 audit(1789724038.490:901): avc: denied { write } for pid=8296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.368615][ T8287] ccp 0000:00:02.0: missing driver data [ 85.368627][ T8287] ccp 0000:00:02.0: initialization failed [ 86.860619][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 86.861405][ T10] usb 10-1: USB disconnect, device number 9 [ 86.861960][ T10] yurex 10-1:0.50: USB YUREX #0 now disconnected