last executing test programs: 1m11.573211548s ago: executing program 0 (id=68): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m10.651566585s ago: executing program 0 (id=77): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1m10.579719183s ago: executing program 0 (id=83): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x84) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) 1m10.50221087s ago: executing program 0 (id=85): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0xffffffffffffffff, 0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x49, 0x1, 0x2, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x1e, '\x00', @st={0x4, [{0x3, @svalue=0x8001}, {0x1, @svalue=0xc}, {0x1, @uvalue=0x8}, {0x3, @uvalue=0x2}]}, 0x8000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', &(0x7f0000001440), 0x800, 0x0) 1m10.441319221s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./sys\x00', 0x0, &(0x7f0000000140)="d45e3dd5e1ce9e4b14bf8f6dc9458a99653032483b70b28efeaf5dadc6b494e6a87aa06de0c378f5432ff159afd1002f801f99538ce3a5e8558234755bb21c6cf5982698f245cc8b", 0x48, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) r2 = getpgid(0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x100) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m10.440384607s ago: executing program 0 (id=90): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 55.274981045s ago: executing program 32 (id=90): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 46.738410888s ago: executing program 3 (id=372): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) capset(&(0x7f0000000500)={0x20071026, r0}, &(0x7f0000000000)={0x200022, 0x200003, 0x801, 0x4, 0xbee7, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 46.661317357s ago: executing program 3 (id=373): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044800}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64", 0x1e, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = socket(0xa, 0x3, 0x87) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000007a0400000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write(r0, &(0x7f0000000280)="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", 0x598) 46.589090706s ago: executing program 3 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000110005000200"/20, @ANYRES32=0x0, @ANYBLOB="000001000000000014000300620f7461647630000000ec89602a0000e0c5f884432ec2"], 0x34}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) 46.587993857s ago: executing program 3 (id=376): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x2, 0x43, 0x9, @time={0x61, 0x9}, {0x45}, {0x5, 0x4}, @raw8={"543b6810d07fa666698e0539"}}, {0x7, 0xb8, 0x9, 0x3, @time={0xc, 0x1}, {0x7, 0xfb}, {0x1, 0xe}, @quote={{0xc, 0x4}, 0x2, &(0x7f00000000c0)={0x3, 0x1, 0xcc, 0x3, @time={0x40, 0x1}, {0x3, 0x7}, {0x4, 0x73}, @quote={{0x86, 0xb9}, 0x1e48, &(0x7f0000000040)={0x3, 0x9, 0xff, 0xf1, @tick, {0x17, 0xa}, {0x40, 0x81}, @note={0x45, 0x2, 0x7, 0x72, 0x3e}}}}}}], 0x38) (async) close(r0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 46.529552764s ago: executing program 3 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1) (async) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0xa9, {0x6, 0x1}, {0x0, 0x3e}, @cond=[{0x7, 0x208, 0x7, 0xffff, 0x5, 0x3}, {0x7, 0x1000, 0x1, 0x72, 0x9, 0xd}]}) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0xac2781) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x0, 0x8, 0x8001, {0x0, 0x1}, {0x0, 0x2}, @cond=[{0x2007, 0x2, 0x9, 0x1, 0x5864, 0x2}, {0xdf62, 0xfffe, 0x3ff, 0x101, 0x9767, 0x6}]}) (async) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000600)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\f\x01\x00\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\x1b5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5\xf8\x8aOI\b\x87\xd6\xa9\x96\x82\xab\x86g\xdbr\xcdhT\xbc\xe8@\xfb\xc7<\x19\xb9dmo^}\b\xa3\xbe\xc6\xb8\xa1\xcc\xb0\xf3eDn<%;\x88(\x14\xc1)\xa4+\n\xce\x87?:\xb2\x03\xf0\xed\xb3\xd4Wr\xbd\x1c\x12\xa8\fl\xed-\"\xc2l5\xe7y\x89\xd7\xb3\xe1\xbd\x05\xc5\\\x83\f\x19\x96o\xa1\x0f)\xe7r@C\x9e([\xf4WH\xb4\xd1n\x88\t\x8e\xc9gg\x94\"\xe4\xfe\xdb\xb5\x84\xeeq\x9b\\L>\x96\x96\x8f\x1a_\xe2\xe0m:\n\xd1_\x8a\x94\x88\xa5', 0x3a, './file2'}, 0x1a2) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x80010, r2, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, 0x0, 0xfffffffb, 0x0, 0x3}}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap(0x0, 0x1012, 0x3, 0x11, r0, 0xf000) 46.401528866s ago: executing program 3 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000084c0)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x4040840) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.210459693s ago: executing program 1 (id=459): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x1500, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 35.19532832s ago: executing program 1 (id=461): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0xc, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0xa, 0x4}, {0x6}, {0x0, 0x3}, {0xa, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0xc, 0x4}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x8, 0x1}, {0x1}, {0x10}, {0x9, 0x2}, {0xc, 0x5}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x8, 0x2}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x8}, {0x10, 0x2}]}, @volatile={0xb}, @union={0xb, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x8, 0x0, 0xc3e0}, {0x7, 0x1, 0x100}, {0x4, 0x3, 0x8}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x64, 0x1}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x2e, 0x5f, 0x0, 0x5f, 0x30, 0x0]}}, &(0x7f00000006c0)=""/4096, 0x13c, 0x1000, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x81, '\x00', 0x0, r4, 0x1, 0x4, 0x3}, 0x50) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x4) syz_pidfd_open(r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='e:my_read_msr2 msr/', 0x13) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000001940)=@ready={0x0, 0x0, 0x8, "ce4188a3", {0x1, 0x2, 0x0, 0x1, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e000008001e000002"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) listen(r8, 0x100) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback=0xa00020f}], 0x18}, 0x8050) 34.53125196s ago: executing program 1 (id=476): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 31.700846307s ago: executing program 1 (id=482): fanotify_init(0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) setreuid(0xee01, 0xffffffffffffffff) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xbcf7, 0x6, 0x33ba, 0x8001, 0x2, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xb8da, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x100, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xfffffffc, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0xc71], [0x2, 0x3, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x3, 0x491, 0x9, 0x200026, 0x7f, 0x3fd, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x6, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x2, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00f2ffff"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 31.641110685s ago: executing program 1 (id=486): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/26, &(0x7f0000000100)=0x1a) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000080)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x39, 0x65]}}]}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000100)) setuid(0xee01) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0xe, 0x2, {{0x18, 0x4, 0x2, 0x3, 0x60, 0x67, 0x0, 0xdd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xa, "401a016c8c962170"}, @timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0xe, [{@multicast1, 0x14fc}, {@multicast1, 0x2}, {@multicast2, 0x4}]}, @end, @cipso={0x86, 0x23, 0x0, [{0x7, 0x4, "d78b"}, {0x2, 0x2}, {0x0, 0xe, "efd5d94bb83bb80ec5a39f56"}, {0x2, 0x9, "992d103872fb75"}]}]}}}}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xe4000, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000180)=[0x9, 0x4], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x21002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xa, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 31.359668808s ago: executing program 33 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000084c0)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x4040840) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.311439978s ago: executing program 1 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x59) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) 31.298157004s ago: executing program 34 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x59) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) 11.27117411s ago: executing program 2 (id=663): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095", @ANYBLOB="d50813a8cfa8a64fb5555c08b010c3015df4febeb82e75ced50d4e7a2c3d44e134a9eaf7ecf60530cdddd94d32494da5b79675"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095", @ANYBLOB="d50813a8cfa8a64fb5555c08b010c3015df4febeb82e75ced50d4e7a2c3d44e134a9eaf7ecf60530cdddd94d32494da5b79675"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) 11.211270124s ago: executing program 2 (id=664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x2004, @fd=r0, 0x240000000000, &(0x7f0000002640)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/172, 0xac}, {&(0x7f0000002600)=""/22, 0x16}], 0x4, 0x0, 0x1, {0x1, 0x0, 0xa4, '\x00', &(0x7f0000002780)={0x465, 0x1, 0xca, &(0x7f0000002680)="1639aa5e4cf7b57f985cc291d77a9f2436d8f31828de0773e11c92b105a96432da92cfb4bb69f3c7553d97d4f37cd01803f91f485a316d8e528695d85231d12fcf48e0b8050fb83b0869680dcfa7cd87d374cfbe26e0074eb987258b361ba74ebad07531c6d5bc829a122602adc874c88cd5528c1c0aab3eb9f7058e4bd78c2c87117db899a9a7ccbd2f48046aded11520673adb7abce8780a5fa4c357a2fb49509e92e0ee89d512962b203a1f2c8e9623e80f67f7bee87465a0664de9250753dd9801bba07a6ee6936d"}, 0x9}}) io_uring_enter(r1, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) write(r1, &(0x7f0000000240)="f17c634ba30aa41a4702bdf0748be02e6a1b1e2592d0406206a8354890f5879b1aa28f3c0112cc3f07854b0f6185eaf4c0868796b1468967c77ebafec64590f584321158482e6de00b96003c543a8fc16baca3147668698e5dc57025cb2a60ae4e6a17b1c7fcd99a465430f06400bc0be19aad0595e0d8db29", 0x79) 11.151126248s ago: executing program 2 (id=666): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000a80)={0x896c, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d400)=[{0x0}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f00000005c0)=[{0x0, '\x00', @buffer={"3a0da16e502061322cb63cf412e78687e1ba844313d6e66a45dc89b8c10fb5ec", 0x20}, 0x4db6}, {0xc, '\x00', @buffer={"3af0eea55b74ee7584f91b6801d14e73e3967e9c2b70a035fa5268e1a4e0413e", 0x20}}, {0xf, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x6}, {0x2, @svalue=0x1}, {0x2, @svalue=0xfffffffffffffffd}]}, 0x80000000}, {0x27, '\x00', @data=0xd, 0x4}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)=')&,\x00', &(0x7f00000001c0)='./file0\x00', r1) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000064010102000000000000000000000000000103934e230005000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c000000ac1414bb000000000000000000000000000000000000000009800000000000000600000000000000ffff00000000000018250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f000000000000000b000000000000000200000005000000000000002abd7000000000000a0002fd2000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000719a00"/240], 0x138}, 0x1, 0x0, 0x0, 0xc885}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f0000000000)={0x4, 0x800, "772908cd231a8e637d030520aca4aace47898b3043efe26b", {0x9}, 0xfffffff8}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 11.149779694s ago: executing program 2 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x2fe, &(0x7f00002f4000/0x1000)=nil, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace(0x10, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000080), 0x81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x80a0a124016018bc) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_ublk_setup_queues(r5, r3, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000300)={0x1a}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f00000003c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_PDEATHSIG(0x35, 0x2) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) cachestat(r8, &(0x7f0000000040), &(0x7f000009de80), 0x0) syz_clone(0x10a0100, &(0x7f0000000080)="62ec63d1bb40e5cad7a3927fe30f3a26351d24720bdde7782876a854c054eb91b31d730db112c187dd86cd9f32dbaea8f11672ed629cc8199f829752d1ae4087b9e6e0c8dde35b9a3fd732daed5224a64e9c3f51f20a11ac4028c0af9cb15bb8ae17799ba6fbeffb747ed1d1159e", 0x6e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="d4522d4ce74653639904b5f6a4acd02bd19e6ffcada4cc786743eadc6aa2beb5a26425ef97aefa2f4b7eb1523d6119fa123251f92ce43b21ad6316f14c9b148729b952a0ec01ea3eeaa328974113a511e133d816a84eb8b07c64fa144d8e3444ba8df3a0b5c7034d55b2ddd21e8427ff259906ef54855c1c0c7092864e14d175423e28a1f09b5fdeed92098cb5863b20e1e5d99fadec52430391e988c1fa4a56cb84abfc2c9e958a0bfa5bd1a220f2d5521bfcf20ff35cb6") 10.887159536s ago: executing program 2 (id=672): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf25010000000000000008410000004c00180000005675647000"/92], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r4, 0x101) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@security={'security\x00', 0x64, 0x4, 0x2e8, 0x100000c, 0x0, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0x0, 0x0, 'veth0_vlan\x00', 'macvlan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) prctl$PR_SET_THP_DISABLE(0x41, 0x3) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) shutdown(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(r7, &(0x7f0000000300)={'syz0\x00', {0x100, 0x6, 0x1, 0x1}, 0x9, [0xfffffffa, 0x8, 0x9, 0x8001, 0x8, 0x9, 0xfffffffd, 0x5, 0x1, 0x1, 0x1, 0x10000, 0x6a8, 0x401, 0x0, 0x0, 0x9, 0xfffffff8, 0xfffffffa, 0x7823, 0x4, 0x6, 0x7f, 0xa7d6, 0x1c02, 0x9, 0x3, 0x7ff, 0x2, 0xc, 0x9, 0x3, 0x1, 0x5, 0x5, 0xffffffca, 0x10000, 0x0, 0x7f, 0x6, 0x9, 0x486, 0x9, 0xff, 0x10000, 0x6, 0x42cc, 0x4c, 0x5, 0x8001, 0x5, 0x80000000, 0xcacc, 0x7, 0x1, 0x7f, 0x31e, 0x27, 0x6, 0xa3, 0x2, 0x3, 0x2000000, 0x8], [0x94b, 0x100, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3, 0xa, 0x8, 0xfff, 0xe, 0x2, 0x2, 0x3, 0x25919ca7, 0x6, 0x1, 0x7fff, 0x6, 0x1, 0x4404e61a, 0x6, 0xa13, 0x80000000, 0xdac, 0x2, 0x7, 0x2, 0x7, 0xe, 0x401, 0x19, 0xab3, 0x2, 0x7fff, 0x1, 0x10001, 0xc4dd, 0x400, 0x0, 0x8, 0xfffffff9, 0x9, 0xffff, 0x7fffffff, 0x101, 0xfff, 0x8, 0x8, 0x6, 0x3c58, 0x401, 0x5, 0x2, 0xfffffff8, 0x7ff, 0x8, 0x6, 0x3, 0x6, 0xeb, 0x8, 0xffffffff], [0x7, 0x7, 0x81, 0xe, 0xffffffff, 0x7fff, 0x5, 0x6, 0x1, 0xb, 0x2, 0x0, 0x800, 0x3, 0x6, 0x1000, 0xfffff91f, 0x2, 0x1ed1f0f4, 0x1, 0x80, 0x8, 0xc61, 0x4, 0x9, 0x40, 0x0, 0x14, 0x2, 0x2, 0x5, 0x8, 0x6, 0x1000, 0x0, 0x7, 0x8000, 0x6, 0x7, 0x3, 0x5, 0x5b06, 0x1, 0x9, 0x814c, 0x7, 0x7, 0x200, 0x7fffffff, 0x101, 0x7, 0x1, 0x9, 0xfff, 0xa, 0x2, 0x9, 0x80000000, 0x7, 0x1ff, 0x6, 0xffffff01, 0xc], [0xc, 0x40, 0xffff8000, 0x4, 0xe516, 0xa13, 0x3, 0x6, 0x48e, 0x674, 0x37, 0x9e02, 0x2, 0x6, 0xb27, 0x9, 0x2, 0x2, 0x5, 0x2, 0x8, 0x1, 0x0, 0x0, 0x2517, 0x9, 0x10001, 0x9d, 0x4, 0x4, 0xfb9, 0x9, 0x0, 0x19, 0x2, 0x7, 0x0, 0x0, 0x5, 0x6, 0x3, 0x2, 0x671f, 0x200, 0x1000, 0x7, 0x4, 0x6, 0x4, 0xffffffe5, 0x7, 0xa, 0x3, 0x0, 0xffffffff, 0x9, 0x603ca26a, 0x2, 0x800, 0x401, 0xfffffff9, 0x2, 0x2, 0xfcfd]}, 0x45c) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.331411092s ago: executing program 2 (id=678): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}}) (async) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x200000d, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, &(0x7f0000002080)=[{0x0}, {&(0x7f0000000180)="c9edc668922493667938ad63bc077c124dcd1220d80884f5d61b23b640b29a0166f2211cc327dbece4441c6368a60806302a87969f2b9a93e0cbf265f0826ff8439e73521675b5d8041c0b02891714e443c230a9e96ee0c1a9", 0x59}, {&(0x7f0000000f80)="c45ab5189fd71ebe4c9d8409b898765948d4b2460b95dbfdfdeb6c9f9872f9e1e6f4a7200d3130b46f3585085fbd53727dbb699de40f2253369dedd5e832ac2477955ee41e2a2e3ae0a89dd3e17cd9d4f03507a194f5fe311e52fcb0950d76b40891f8ef7a6c514c1bc0cef5a67e3ef699df482ba5e6d3f390f627d7f83563cd1181967b1c829312fd430e33d7d8ad8d0a206cd412d5047d2cb0c72f1b98be07f045b680e509fc99f81af37e4b9566f10d21c6391a7b3bdab614e35da3b7770a02c458e97a07745ea8de5f85b93cf8d5d57ef0abd59547f3696cfd003a983c92cfc6f17c747493d7ffefc5bdccdbbe39c6b9bb07776eec197887e96d92334d7038e4d8c404ab798db58f93aeaed87851d67b6c29559db2a27c0c9011c6c6ab839c1b07f292dd5dfdbf86281fa5d2f91bfcc09f450de29f8d5d831f94efe81c28a9649f29d502c62fd67a4ce873aaa5266fb6e0a12705fb9e2b0bd6fec8502ab1d4f106c8ba76232b8d76b75c95afba51380ef8fca0c30acf652dc0cf3a446942345f77a087e17634594f53c59887956930c654f8d0f750922bc9a9fcfc002590cf24fdc8070f6517a76ce147854e882526cd1da379f43b9f99b1d06a35c3722b34a65e299d2481cdaea41abd95605f02060a7f7c9d201e7ce9439319299643617f50e98ff2f8f1c66e188261190b55e4a19f777ce2f4d8c66233610d1c95c985a258dd4f6ef1a69a7c358f6680df00609111ed5dbadac69d44f5412eb015ca9a6d9aa3471639e2ce05e4b29817f7f133193c47a28572a95062af089818e8706c6e1235551e11feab8fe79b337832aa4dd293d37feb7f075d3aeb61a93976256a8025cf7f7946c3483caf148f973eaa73858638125e96732116fa1550ce8e90a046df2e062ed1777904eb361f8c8eb6e7fd9efc5cb0aa34acd246243bf745ab0cff8eab7223ff32303bc89c8b78d6d516c5d6c592be05418469a31c7654fb0390b71fbc9710cb40565f67a777e873b90c0a7cd2030f701812c3d67c13f2f82d71839c859cfe31321bc0f7766af2d6234d82eb24fb65f6751e7636489df9d7124629581f5d86de8dd0e155b1aca38287d6a66892f8caaacc5dae5f92321df8e90324e9fa68642f396e7ba37afb6aa9ea9f185e4578dc5d2d4b3b03e5ed315389c0f90bb8bb16194aa93f276dd574d62237262a1aadc40b2a773279552d66c6a2e332aa58d72a640cbceccd9a0f81b2c7fce5ec4f241c2be83f54ccc1db5542c1478e8d79cbefbb9433a73f1abb22c8aa8c60e6243be8ce5ed4fd237f2507a9b6604b9dc7d25f76d90b261e2e98e69d6b1ac3df30d3781f9d5e3b12c764dba387a908cc9f8008e131cffb21ffb2260f4d3b9faf1c5d5b1a9aa6832036e1bb52b6ee6b821c5ae586a47161179b159a88625e38d89555944fc45ee569f3726b1766f2727fb42c0acb0d1c8a577dceec82fd391447fb9951c17e2782b1c0e77016aebb7d04912f1c4c777a01c91d28927dfaf00da466988882ac22b20fbda391ae0b6af002ed3870ce239b64bd65fef987382a5f70889aafeee0acdca0358a6b3d5cc4900379899e6ba5a7acc2e0d50d662633f41f0712b1f10151b12efc4b244c4c35968834655dfefaee240765d8d24675db83d530ff3d990bf6e2b0d732a49335199f963b434de679eebc9957f857b2f688f31e1cb25167d314f788c7680e0c07ec40925ea9193b67d90d50a15ea386160d3040defd177c0348c91171ce41b6b0931acdb54b2ed2949f91ba3fc36f7239b48c68dfcd041a3276b88653925a469461ece34ab955c67fff2781f56c48402e2bc9381272324b5077c0a7ced2caf012b559d1df0b649118dd8e2929a85b2922b9384f08a19f355e3b507ddc0f21c0ee7d8d934064c9ba9e6c1a2879af79b4fb8d5615fd532ee6ed99d2ad5b5ed60bcd62837fcd0f793dbfc1028e4dd90df213022c22fb43336bc853073ff4fdcdf66a4b1def876c41eb607df42c2966f40feb6593dc0011c28a4a35f20af5972c5c076ee73b91461987424b1e50854b09c6ca5b43ba44004f775dac6811c7bdbffa9528334bf647175e23c0e29197491ad608ecd98fb67bd5017bbca6cf2bf7a165cda49aaa0cceb8abafaa87e3cc9497ec4211793f099d198da792c211df476c26d28551543b3e43de265995e61e392fc56058411db6c2d8f224bb11eee6d010d0e936f868b91a54631a4b99c059f4e2182bb264752f3a26ff379cfec50be5fb12188e3c54a9ee2744a6bf52eb927798831e265622e9d4b38e1883d60e9be5c6dfa76d0d0b41081f3c0377f1507c48e1d445e2a97e181ed1f7644173c275bdefbbae9007bd52188fabe5ca1c2467867ac7e778ef84870feeed0d128cb1cfba14ff7adc67811471e0e526aff35708ee1e648767de70d64035fa341feb53daf188658a5a5fbd43e36cf41f0a6e48e7d424e62e8a483b5ea73819afd5efdeddbc95670c9e750df4137acff09fc40ca8fe3e1640507acaa94968c4a2925b5e157028cc05e2a8b5835684937c632c190a37f962afc6a46d078ca617f31de15d4f2d4636b2a0eaa0c7cffe3fcc320cb34d8a5626dd1a77d765d09757ace35c0a8e9bab92ab467f1ac05e0dbb9ec9563d897b5735c6a4f61b22ae095abb5e45a67eedbd2de50b0aa0db3e9b338d3f05cb7be425f50b71a61f7d73546fb3c31fc0224638f4899eb3898a7db0e9d5f36b9c6bd1e71175e6e00f5ef14deee63647f93489466945740b30e951ca8c5a283b0660486f108dd1f165d54257cd7ff85c4eb6defaecc70ae6ac7f4f7ef5bc37ad392ce7e39c67b67d5b00774e354826496346b5cb8e314c79d0a7a0939997a3011845d1cc81cda07a761fb69ec405e3a9b9a3d45a4585288c0b11c3d1aa0fc0e2e1aa1f36f228499cecb6d2cee240e575f3d7c9318f8be3129ab41eebc9d8d5af79a66a034e238b30a01b9cd179fb730137aaefef24cb78c483a51e7c460233c7289f2687eea3258589b8daebb44d61da3585f5a22aba18f8315a658d2fb4504564e0aeb31e852728c063b431c0ef9f2eeb9b8bb40e2b04d95f3ad2d76eba4c8378b5055f64a6ed14e2c3b07ce785d3b9768267e3ffa0b13b89fe8536f4ad3922da71cc0d64909c97f4059cdfe30f3036d6eb2728177e9adc326df47f5a447148d89697b340ce7088ffca5046e3362ffa23f61ca3912c6e74cf74902234ff654ab1e9c17db20721d000e0968da0ab2455d1d35ad1475d34228fe7ff9cc574f83ab2a8c239e1ac6498634c47bd06c9fb14bcd23284c14d8806e0cf22c7eeecaf2d5dc7fbb06019d41e7042ed389a9fc7b48c363cd110ed989824b4966cc219c080aa36e906307546436dcc0de21fd85e92dd99c7f38dd04bdb08df3c6d6818797ae56d7e5851f05e85ffbe007d804d96ae949126e465bf6fc7ef9061f3fef2fb537c75f2b29129a2db3f30d12a83521657121460970aaa2507d440d06c1bb1db1142f1d99ca9a396cd5d3807e0f153f3dfa0c72ff9f3709a3c7333a0d06d2314fbb2bb101c348824b959a6c163331e63316b1fcf8b3cde81f9137d7a3a1cd6a2cc65f5de2d18770c7ed3c1c27f096a475e7f3b302ac2261251b952ab22e7c9e72ab619436a5e184e9af7d23ecc1cbdd047f191a3ae00eb931018b3cb3c793d773441a3b6ceec78cbe307571e580f1436127312928ae2ac92a4c610d586cf3ea0e0f95e03bd9eb0680fb7db525b71a5c379237e902e8b58025154319eb8f2dfba3f3cfccfba1bd66d3892dbae1eae4d8e6d52af9f0ee43503f93a1ea9ca5556fc0f54fe957508f0ef10e28c61dbef71f433fe6c65167d0aed26815dad172cb71a3ff6389c4f3b3030aec0ae2c85ba7c8c119637930456c29cc828c2c63694429958bf4e7a4d7e1a985aa0276460bf0d5200963d6f1f48386283f32c7d301d80a1dce6707e33322af363bdc4fa62bfef90184eccd8ddcdcab2967c58f7b62c428c21d04b4895ba5fbe075656318f321800be16dd425ae8f8f48108eb5199118d06a9dd8944e37d717493da68faae73a9379b2b5d4647fb5bec9a57987a5257745fe7fc348f4491037d93855c9e7632f39371b453304a1bd3d2f7f6b67718cf69e07522e6b872dbeff1659e9ceea482edf377126f819007a3dd4d08b5a29c0a5d7beb344e5fff27b854733b285643691d0a894690d0a562a18914c478f824f4aff19e69e772958cc34d5bf38f40ccf08b49f7d8be2c291f870c388efc1c949e34f6717f1590e5f5b5489b87284046842af02de9e633e00dede188eb021a6353bb60cf7689ef0148eb14a1b4c556008334d7b4f1470889dd5731c7a48e3015139b00d20a28698281649710cf8439e90a20222ce9ff453b05549b313bf7279eb24713b27927fa77e30db24e27c94f84b774bf72c8ad1580c2fe6b871055a2168515769d90098a5fbf08dabf5b191783bc9ed3de232d5f526ba45537e6307f863f1a1d4a8bf8be8e63696ecac9358394d69fb0d106c594b95d6fff091869d868e1fa22341bc83e6e09d287e4a5260db1b04170eefdc6d841acba5d1a8411ae25820afe04e8494e6f56cbb041ef17d46ac9b729151dfa15fdee8e15a18c914832ababca86f4a87847008cbf9e143d1bcae22ca149201e23741af8ae82b930f3969d813a452c7e5b3bd0fdfec4154cdd0ad448ee5e3bdba06d0b361195ff61dd83b79d74ceed8d9743ba0e06f176d014ea91a0ad970a9e2cbf441d2dc0d295bbcd2ca378e17b644dc3559eaf3c589f58e7ac0547aaefe84742af4591a67aa4fa6d045951a6e347e147aab562294b0ab86205152ec46a68e75829729e571853d043c649c0a42a6bc219b129acac8d17bfb19e3fd83427ce53a78757ea76b61bce9421dc488e5b4ba9122ad202da7213184c1219954d9262103ac9f56dde7c2079642610296c238c0b6a452a4ee2772288e118167cb3571894694329c3a6f8672fa3d3a92d4cfcd66cf1eddff3b43e7b36ca209f22ddf675397febdddac754b6d926285d17d5977f1d4b2c6e6beaaa0f745db3a70a80d6fc24bedd5a11c23d0d70d2b9c6e65745ad712c31589104243f2dcd0e01954c8c19b6b6cac64795ee9365b21e88112cac9a8421758cb8b4e813dc3ff71cd062c8ae445ab137279a3f7203aba20cd4be33dfea902dc4e7456bd1a57da1dc0d42edebd0be9fdc7d06b77c1fccfe06e839edd3eb68bdc1826ddb513cda64e876a9a36fa6c86e4d5ae7a4b4b672f8b1f2525b224536b43aa5124005a08509e04f113c70cb6b10965a123015299e6288b626571dc1cf42a4b5c8f893a33503faee4c9a83de760f9b613413f6a9c8fb366008ab15a7f7d2b1f38ddc7bfb0542847b3411908fca60ede90c1d16e417c542d43da534e4425272c17fee61688a67984c159b70c1ca068989effc5935f668b2abf3ca246b7a8a8d9b01da11773a8ae3dc04525bab5fba47fa1d956c72d978d98889f50561b6438a655bd2095d47debfd1324ad00e9e19240f72e4dca979c03262fce123ea1557affb3ce71d7dd7f3916a109ad44df5c63f59e6a649545d1b16abfbd0842f8bcda6cef3d7cb67b16cab9df3d719932f86eb815502961f687eddcaf10ef133fb661e89b287fc9c6278405ce13ba365f57c45e020b63a72a4df5a86", 0xfa8}], 0x3}}], 0x1, 0x2400c042) 10.262842737s ago: executing program 35 (id=678): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f964000000000000000000000000000200", [0x800]}}) (async) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x200000d, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, &(0x7f0000002080)=[{0x0}, {&(0x7f0000000180)="c9edc668922493667938ad63bc077c124dcd1220d80884f5d61b23b640b29a0166f2211cc327dbece4441c6368a60806302a87969f2b9a93e0cbf265f0826ff8439e73521675b5d8041c0b02891714e443c230a9e96ee0c1a9", 0x59}, {&(0x7f0000000f80)="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", 0xfa8}], 0x3}}], 0x1, 0x2400c042) 3.6473364s ago: executing program 7 (id=708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffd, [0x92e, 0x746ffec1], 0x4}, 0x10) 3.569859737s ago: executing program 7 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695f93d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) getsockname(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000180)=0x80) 3.511347627s ago: executing program 7 (id=710): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.485724701s ago: executing program 7 (id=712): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0xa, 0x1, 0x0, 0x7fffffff}]}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r0, 0x7d942000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.046874195s ago: executing program 4 (id=723): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x40008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000080)={0x2}, 0x10}, 0x94) 2.979090635s ago: executing program 4 (id=724): r0 = dup(0xffffffffffffffff) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0xf, 0x1, 0x7}) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0\x00', 0x80) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000000c0)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000180)) (async) r3 = inotify_init1(0x100000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r3, &(0x7f00000001c0)='.\x00', 0x18000, &(0x7f0000000200)={@_ha_fsid={[0x4, 0x1]}, {0x2, 0x5, 0x3, 0x2}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x5}, {[0xb69, 0x9, 0xfffffc00, 0x1]}, 0x8000, 0x99, &(0x7f00000002c0)=""/153}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) (rerun: 64) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80048}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}}, 0x8000) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000540)) (async) ioctl$CDROMPAUSE(r4, 0x5301) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000000c00)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) (async) read$FUSE(r0, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r4, 0xffffffffffffffff}, &(0x7f0000002cc0), &(0x7f0000002d00)='%pS \x00'}, 0x20) (async, rerun: 32) r12 = getpid() fstat(r3, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002e00)={0x0, 0x0, 0x0}, &(0x7f0000002e40)=0xc) sendmsg$unix(r7, &(0x7f0000002f80)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000640)="4dadc4d140247f0f5f965f5dff792d50ad21acc1b68381e5b560ebfc09840cf5510307562aa5a795ec1f753fe791a5e1a1c67a26e4571a927d30102908125761787d80a715ebf84521d6be321aa61abfe5c0304c52e8d0a04885fe10da8e8d4272b020ae9403d94922722a546f6cec26086edb2a2ee38884378a07beb14b6966a42983c740df3aad519e91adf38e3d010abf45a191a7472b0e1684fa0152d485b0e7d0e4a8a446cbfa975e112158f01e0cd80b6b0564b0f423d7684ffa426bbb89295b5faf035e0b66ba67cd87cb06f6ab0814734c71e1656170850299136bba1221106534739edd663555da00d856edb30ee05f", 0xf4}, {&(0x7f0000000740)="ac62c7617f195854e3cf6649150025ed7a3cf7875bf112b6dd4e192c0c99f46e9e88ccce586559ce2b526ad9b9065768fb2bc804232bb9ad364b82bc0df5c8637c", 0x41}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="2919b5bbabbdc962ac6058aa29ddb398c2d6599f376ebdcdc4f1c00c1708c2a19c1153fb5e56bfd9dcdd8ace24c35b228fb18243227ea6d0ebab105735c90ecf66c7edd36eab44a1aa24a0e435064324ccef7d0854e5bacc6155d528b48eba53e3c896a6b0bf79791498199a704ae269ae6b9b793ce6c99a552075c43112d217d44c620869593c7b4e9e638b714d7a01a0d2a6892884b1c55a2e8dfcdaa1c4b7c1e488ca514270c93a7f2a4bf13a47a330052c956596b95d1b6a9006d3bf0a701eb7e58e372f7eb0a198dc89355b2e34914f7136484afd8492d1106b54db2b9566fd63269e806456ab2f4098f5", 0xed}, {&(0x7f0000000900)="ee06c273e405ac80a4b5c06b5800ba3edbf45263879b6edcb3479ba7723e11aa96b61631c7c9c5b14add761e413d41028d0f831e7078923cdc23871f6a1681eff24933ffbd14d940bf913d75cb2d476818e1b489994d234d65d7ca86961c5ab4b1078d67f952035f332854b10e3e189b85446dfdb06ad1b311822c945ace35d412c888c7f202a74a195d1d17ab4ad970ab201cbc28d1e9a2e478939f18a17ebf3edcba3d32973dc50085296b492398e46845fc2a506963ec73accd1eaace3001b8cba4cd6ce3eab8f44996ae46f28c1b28", 0xd1}, {&(0x7f0000000a00)="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", 0xfd}, {&(0x7f0000000b00)="8de65cfe500ee306f9295c3a86c45a2ae343a990219fda3301ea0ceb47f034f94a35b9e2cd084fe19253313e6b96a4a15047bda8891df56718fd93691713dc57ba0bb32cc5e6599100e232e53ab9968d69927794", 0x54}], 0x7, &(0x7f0000002e80)=[@rights={{0x38, 0x1, 0x1, [r0, r1, r0, r8, r1, r3, r4, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r4, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r3]}}, @rights={{0x30, 0x1, 0x1, [r3, r1, r1, r0, r0, r4, 0xffffffffffffffff, r1]}}], 0xe8}, 0x4814) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000002fc0)) (async) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r4, 0x80207501, &(0x7f0000003040)={0x0, 0xffff, 0x8, &(0x7f0000003000)}) (async) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000d, 0x10010, r4, 0x7) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f00000030c0)={0xf, 0x3}) (async) epoll_create(0x2) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000003100)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000003b80)) 2.887980883s ago: executing program 5 (id=725): r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r2, &(0x7f0000000300)='base=0x0 size=0x40000000 type=write-back', 0x28) fsopen(&(0x7f0000000140)='rootfs\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xdd8}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x44}}, 0x0) 2.8845811s ago: executing program 4 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6a, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r5) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@private, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x827, 0x20009, r5, 0x5, '\x00', r6, r7, 0x5, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r8) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000a00)={0x1, 0x0, &(0x7f0000000780)={0x8000000, 0x2, [0x191, 0xf, 0x3, 0x101, 0x7, 0x1], [0x0, 0x6, 0x2, 0x8, 0x1ff, 0x8], [0x171, 0x8, 0x3, 0x2, 0x100000000, 0x3fe00000000], '\x00', {0x8, 0x0, [{0xd, 0xf41, 0x2, 0xfffff800, 0x9, 0x800, 0x4}, {0x8000000c, 0x4, 0x7, 0xb1, 0x7, 0x1ff, 0x6}, {0x7, 0xcc9, 0x2, 0x4, 0xa, 0x1, 0x4}, {0x80000001, 0x2, 0x7, 0x3, 0x115, 0x7, 0xd}, {0xb, 0xfffffffb, 0x3, 0xf8ed, 0xc0, 0x1, 0x4}, {0x505236b387d49a04, 0x10001, 0x5, 0x2, 0x7, 0x4, 0x4}, {0x40000000, 0x7, 0x2, 0x31e, 0x8, 0x2, 0x5}, {0x80000019, 0x9, 0x0, 0x101, 0x3, 0x3ff, 0xd9}]}}}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.730463053s ago: executing program 5 (id=727): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_auto}, {@nfs_export_off}, {@nfs_export_off}, {@xino_on}], [], 0x2c}) lsm_list_modules(&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=0x10, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000280)={"13020016", 0x0, 0x6, 0x2, 0x0, 0x1, "f40021000000000000deffffff00", "2800f669", '\x00', "ff0f00", ["50dea3a01e619cb7540000f6", "0040008100", '\x00', "00000000000002dd00100100"]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x307283, 0x0) 2.730231555s ago: executing program 7 (id=728): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="e109f5b4a89302c90eb3d8b4378998a4404889b036dd1a83b8a6dd41a3bd3eee1d4c8fb96290cc4b3feeca6890405f8febabb950c6c44b03d4503306e7b9c167ccf333655d553d1dc129ccdcba87145cb76c432b1ad4a9050655df99fe696a43c9db52f5a0bf54da13627f835710744342d6b416650deaee0e44273b7a440014c86b9a226f84454b06265ce48a519dd7a1ebcac252ce2770bf5b325818f4596f3cfae2dce2b7851670508fab69215066", 0xb0}, {&(0x7f0000000280)="427c7fff4be464304b709be4780725c079e5", 0x12}, {&(0x7f00000002c0)="86d5b25b82f31667ba26607bad9ef16ac7dd9e2931bfb40bfe8e6648f889143a032a5d1177c3c2811df34e2fef16c39ce2002159155df6b552fe36a533f7220a9f185f48f058b6feb3e8620509c4f65504c0708869746b4a1e5fb20bef9dc7c47fde9364d75c529b4da665fe52d4213d2198673e88d2a35f072d71c699a6d23b7315dee79bed8f4b5e0c9c3d4418d6b0dd8f8764c16517e06e445f6ab53c320b451e9c9019da6ce51f544075df70a7b09b335c295f31985500999fff33106b04e3552dd23f0e21223952438c56", 0xcd}, {&(0x7f0000000400)="59087d54051f652565112a4f478163c677535f4702df96061dd7583c1d4117e5d43b64d438e095", 0x27}, {&(0x7f0000000440)="0ba136ba371f48db574ca70304845879fd9bf33dcc36423602ec3aa6ac6e1c2073d515d01db38cfb3ca72be151e2b1958a666f86d52496cd4cf689a1c38475343a158022f6d088e626f4194ddb40834901290fb9b4a7f9a5f3f563b345f735ffd5848a74ac07e78b25", 0x69}, {&(0x7f00000004c0)="304dda3b6abf5ca36d4716d0327287794da70bc591c145e4525a5a4dc94e95bb48a409f0db30281bd494f0bf2b11c0089e715454c045d146e1e463b544bfee59095729f7f59547cfc0ebb2235f3f4d58c88932ae0da205acbce79e669ced69bec18301b9ea65c37f134055165b148c0076ed166db7a1e1930ae95026e437dc197c1c92a83c4424f0876a1b57ed5eb16c235fe26fcdf9fb721c2b4753bebce4ac23d8741d8071af21a845637017d290", 0xaf}, {&(0x7f0000000680)="eff39c6d1f3888d25d9e1b8c3dd87d4d59e6e3c5a33c40dc0ebe54549c84518edd93716c1df49d45752678b517da0762998777b7957f6dda34b9319790fdc6e26544c2e73caa873b7dab0076e87a1a001d967a82227cdf73e485b4566060bb2fdb4084634870de707173e2aa354afb6a9a5af580d70981355a7ca6dfab8c709aa23f960f274a2674ac50071b697707515ab65ac909c79be5a4d43dad3359a328b7db03e5320f9440ca4587379ba0f3163097ac5f7727eadd8005a524bf0d1ec8b07280840c96bb875533fef701", 0xcd}], 0x7}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) 2.681309722s ago: executing program 5 (id=729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac14141d}}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000040)={0x0, [0x4e3, 0x9a, 0x7, 0x3, 0x400, 0x0, 0x67c, 0x2, 0x3e73, 0x9, 0x4, 0x8, 0x1, 0x10, 0x50, 0x8, 0x4, 0x1, 0x922, 0x1, 0x6, 0x3, 0x7ff, 0x2, 0x400, 0x6, 0x6, 0x1c, 0x7, 0xb91, 0x4, 0x7, 0x379b, 0x9, 0x4, 0x1, 0x9, 0xfc00, 0x243, 0x8, 0xc8d6, 0x2, 0x2, 0x3, 0x2, 0x5, 0xd56, 0x39be], 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010034bd7000fbdbdf250900020073797a3000000000080041006a69770014003300776730"], 0x38}, 0x1, 0x0, 0x0, 0x3db5ef462cb09b24}, 0x4c840) ioctl(r2, 0x8b32, &(0x7f0000000040)) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='.\x00', 0x0, 0x111401, 0x0) 2.596440751s ago: executing program 5 (id=730): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.541491249s ago: executing program 5 (id=731): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001a0001000000ff7f0000000080"], 0x24}}, 0x0) r3 = semget$private(0x0, 0x4000000009, 0xa0) semctl$GETPID(r3, 0x3, 0xb, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$revoke(0x3, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r7, &(0x7f0000000000)="ff", 0x4f200, 0x52000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xcc}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) 2.451994723s ago: executing program 5 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x17, 0x2}}, @nested_load_syzos={0x136, 0xb8, {0x2, 0x8000000000000001, [@nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x2, 0x5, 0xa3a0, 0x4096}}, @nested_create_vm={0x12d, 0x18, 0x1}, @uexit={0x0, 0x18, 0x1}]}}, @uexit={0x0, 0x18, 0x6}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x76, {"b9c70a0000b804000000ba000000000f30c4816df2bd7346000066470f38f82147982e470f2047c744240001010000c7442402a2fd4e82ff1c24420f2097410f55f2b9860400000f32c7442400544b09e4c744240205000000c7442406000000000f011424"}}, @out_dx={0x6a, 0x28, {0x1d1, 0x2, 0x6}}, @uexit={0x0, 0x18, 0x81}, @nested_load_code={0x12e, 0x67, {0x2, "c7442400af000000c744240200000000c7442406000000000f0114240f01c5c4e3e96fd504c4430d7df1fa66b829018ec0410f08f3f00fb04bba66460f3803510af30fc7349af2460f00910000c0fe"}}, @cpuid={0x64, 0x18, {0x1}}, @in_dx={0x69, 0x20, {0x4f0}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x7, 0x22c}}], 0x29d}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000480)={0x7, 0x0, [{0xb11}, {0xa61, 0x0, 0x56}, {0x828, 0x0, 0xfff}, {0x40000098, 0x0, 0xfffffffffffffffa}, {0x82c, 0x0, 0x1}, {0xa31, 0x0, 0x1}, {0x571}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000604005fc9"], 0xd) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f00000003c0)='0', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x200}}]}) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) read(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioprio_get$pid(0x1, 0x0) write$snddsp(r4, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000680)) r12 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x494500) sendto(r0, &(0x7f0000000100)="9274beb25facdd1d462d04008503529ffc54e4768acd79c7a3e5b6ee70e227a6f4adb51cb0ff406d5d218f48e0444442dcba5c58e379b5a1a6876ab0b25374b2d7ee30aafb8792e27ebee4b2932deb145bd809f03a93de8c61c0", 0x5a, 0x8004, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'ip6_vti0\x00'}}, 0x80) ioctl$NBD_DO_IT(r12, 0xab03) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000853d000007000000950000000000000095000000000000002401ba8d7e8290bc1598401fb65e84c0027ba001fcabfcec229de4fba87255c40c31cbe958772dcd9c3c4694d347ddaf03047dcb01ab4237f4b240b436a37b5dd8abd98c8e55bf6192972fd115b840e17a864ffa0de14f1ad85e4013a34616679a64bea38215d6e8bde88a147f0ebb0313e32bded4bb2e83264eb17b215fc541a30329d6a57b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605001c00128009000100b491cb626f6e64000000000c0002800800070005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40060880}, 0x240408c0) 2.000408234s ago: executing program 4 (id=736): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x25800}) (async, rerun: 64) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0x3f00, 0xfffffff8, 'syz1\x00', 0x8}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24010004}, 0x1048) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) 1.857064012s ago: executing program 7 (id=738): r0 = syz_usb_connect$uac2(0x0, 0xff, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x4, 0x80, 0xff, {0x8, 0xb, 0x1, 0x0, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x6, 0x29, 0x9}, [@mixer_unit={0x8, 0x24, 0x4, 0x5, 0x3, "7ef0d6"}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x202, 0x2, 0x6, 0x28, 0x0, 0x7, 0x4}, @source_unit={0x8, 0x24, 0xa, 0x7, 0x0, 0x7, 0x1b, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x2, 0x7, 0x9a, 0x8}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0xff7f, 0x9, "71837f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb2, 0xf1, 0x8, 0x1a, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x4, {0x8, 0x25, 0x1, 0x0, 0x30, 0x8, 0x210}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfeeb, 0x6, 0x7, 0x6}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x4, "b29b01044693a2c8"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7ff, 0x3, 0xc}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x2, "92", "d0a144"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xcf}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x7, 0x9, {0x8, 0x25, 0x1, 0x2, 0x30, 0xa, 0x5c86}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x5, 0x1, 0x5, 0x8, 0xf4}, 0x15, &(0x7f0000000200)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x5, 0xf0f, 0x8bc, [0xffc000]}]}, 0x1, [{0x32, &(0x7f0000000240)=@string={0x32, 0x3, "1067c484f4f93289a874de8b0e11e4af1e95f95bac6e0bbc898a1c30cf6fbf256d155f795606a0991e2bd6b5c93ca83f"}}]}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) preadv(r1, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x20, 0x9, 0x49, {0x49, 0x31, "2f222d3a34b0dee34d3d80cbc281ad8af8910df2b3a856ad0491c27cddb7f11cf56715f8a3a1680f1f309c81ffc607a6d14918524ce943af9cf545d0dcc125c856c6072fdf1fa0"}}, &(0x7f0000000340)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "3a8d273c15f7940ef44566f5d14593204c5b5c75c1c0532410496cbfc2d4ce65ea3853ad72dcfd0bbcf479a540211821c8c04e51e2c62f23aa2344e8955f1257ce7de0a352802627b2781716c70889605a43d1563072b336f918"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x18, 0x7e, "330c73537d760cc4353b25fe4bbdc1842d27f805ccf1a59ab681bc84cc4c1b848670504a19f75d02c61bed2c76c505075816f8e334fcba8b1b9874ed3ad5f7d58581e99ac69dc849ffbcc80257d7d230bb5dafa96f692dde223bd6eb51c26528d37c3b99975078e26d8c073037b8728363a71e7180f99a76e4236463742c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x81, 0x3, "b7b58f"}, &(0x7f0000000580)={0x20, 0x82, 0x2, "4ab9"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "c56b"}, &(0x7f0000000640)={0x20, 0x84, 0x1, 'G'}, &(0x7f0000000680)={0x20, 0x85, 0x3, "bc7b29"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9d1df2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.480447874s ago: executing program 6 (id=743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) (async) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0xd091, 0x88800) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f00000000c0)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) r7 = fanotify_init(0x8, 0x40000) fanotify_mark(r7, 0x202, 0x8100018, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f00000000c0)='mnt\x00', 0x1ab) (async) mount(0x0, &(0x7f0000000280)='mnt\x00', &(0x7f0000000300)='devtmpfs\x00', 0x440, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x2) ioctl$TCSETSF2(r8, 0x402c542d, 0x0) (async) write$vhost_msg_v2(r8, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x6}}, 0x48) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x8, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, 0x0, &(0x7f0000001400)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100030000000000000f00000000000000a39b0000000000006f630000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff0000000000000000ff01000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844) 1.100533846s ago: executing program 4 (id=744): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x3039, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) 228.943017ms ago: executing program 4 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 228.646587ms ago: executing program 6 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) preadv2(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/137, 0x89}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/11, 0xb}, {&(0x7f0000002340)=""/220, 0xdc}], 0x7, 0x8, 0x8, 0x3) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x62, 0x65, 0x14, 0x34, 0x63, 0x38, 0x63, 0x61, 0x32, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff0011223344ddeebf000011688e0346d524b29db601e5ddeeff800000000000000000000000000200", 0x3d}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x38, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x65, 0x63, 0x30, 0x39, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x35, 0x63, 0x34, 0x30, 0x37, 0x30, 0x30, 0x62, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) r3 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1ca3, 0x80, 0xfffffffd, 0x36b}) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x63, 0x66, 0x30, 0x30, 0x31, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1408}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000000c0)={0x8, r4}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x39, 0x33, 0x30, 0x30, 0x30, 0x64]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) keyctl$unlink(0x9, r1, r2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f0000000040)) 130.961094ms ago: executing program 6 (id=747): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x202000) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000240)=""/193) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1208000, 0x800, 0x9fd, 0x1}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r0, &(0x7f0000000200), 0x10) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0x6, 0x202000) (async) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000240)=""/193) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1208000, 0x800, 0x9fd, 0x1}, 0x20) (async) 130.758265ms ago: executing program 6 (id=748): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x20000) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000001200)={0x34, r2, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 50.714974ms ago: executing program 6 (id=749): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, 0x0, 0x0) 0s ago: executing program 6 (id=750): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0xb, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0xa, 0x4}, {0x4, 0x4}, {0x6}, {0x0, 0x3}, {0xa, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0xc, 0x4}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x8, 0x1}, {0x1}, {0x10}, {0x9, 0x2}, {0xc, 0x5}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x8, 0x2}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x8}, {0x10, 0x2}]}, @volatile={0xb}, @union={0xb, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x8, 0x0, 0xc3e0}, {0x7, 0x1, 0x100}, {0x4, 0x3, 0x8}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x64, 0x1}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x2e, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f00000006c0)=""/4096, 0x143, 0x1000, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x81, '\x00', 0x0, r4, 0x1, 0x4, 0x3}, 0x50) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x4) syz_pidfd_open(r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='e:my_read_msr2 msr/', 0x13) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000001940)=@ready={0x0, 0x0, 0x8, "ce4188a3", {0x1, 0x2, 0x0, 0x1, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e000008001e000002"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) listen(r8, 0x100) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback=0xa00020f}], 0x18}, 0x8050) kernel console output (not intermixed with test programs): d_internal+0x2c8/0x930 [ 78.050512][ T7137] kobject_init_and_add+0x121/0x180 [ 78.050523][ T7137] ? __pfx_kobject_init_and_add+0x10/0x10 [ 78.050536][ T7137] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 78.050553][ T7137] ? lockdep_init_map_type+0x5c/0x250 [ 78.050569][ T7137] swnode_register+0x5c9/0x750 [ 78.050582][ T7137] fwnode_create_software_node+0x1c8/0x3f0 [ 78.050594][ T7137] device_create_managed_software_node+0x103/0x270 [ 78.050608][ T7137] iommufd_test+0x3007/0x6600 [ 78.050621][ T7137] ? __lock_acquire+0x5c0/0x1f40 [ 78.050633][ T7137] ? __lock_acquire+0x5c0/0x1f40 [ 78.050643][ T7137] ? __pfx_iommufd_test+0x10/0x10 [ 78.050654][ T7137] ? tomoyo_path_number_perm+0x188/0x580 [ 78.050674][ T7137] ? lock_acquire+0x1d1/0x380 [ 78.050685][ T7137] ? __might_fault+0xc5/0x140 [ 78.050700][ T7137] ? find_held_lock+0x2b/0x80 [ 78.050716][ T7137] ? __might_fault+0xc5/0x140 [ 78.050736][ T7137] iommufd_fops_ioctl+0x358/0x520 [ 78.050751][ T7137] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 78.050763][ T7137] ? __fget_files+0x34/0x3d0 [ 78.050782][ T7137] ? selinux_file_ioctl+0x13b/0x290 [ 78.050793][ T7137] ? selinux_file_ioctl+0xb6/0x290 [ 78.050805][ T7137] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 78.050819][ T7137] __x64_sys_ioctl+0x18e/0x210 [ 78.050831][ T7137] do_syscall_64+0x123/0x790 [ 78.050846][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.050858][ T7137] RIP: 0033:0x7ffb8099e159 [ 78.050868][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.050878][ T7137] RSP: 002b:00007ffb817ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.050889][ T7137] RAX: ffffffffffffffda RBX: 00007ffb80c25fa0 RCX: 00007ffb8099e159 [ 78.050896][ T7137] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 78.050902][ T7137] RBP: 00007ffb80a3503b R08: 0000000000000000 R09: 0000000000000000 [ 78.050909][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.050915][ T7137] R13: 00007ffb80c26038 R14: 00007ffb80c25fa0 R15: 00007fff648af348 [ 78.050929][ T7137] [ 78.051775][ T7137] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 78.051818][ T7137] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 78.080760][ T7143] SELinux: DCCP has been removed, pid=7143 comm=syz.1.309 [ 78.082618][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.082813][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.156247][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.168735][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.635402][ T7165] tipc: Started in network mode [ 78.635430][ T7165] tipc: Node identity ac141441, cluster identity 4711 [ 78.637443][ T7165] tipc: Enabled bearer , priority 10 [ 78.692371][ T7167] IPVS: length: 18 != 8 [ 78.764266][ T7169] XFS (nbd1): SB validate failed with error -5. [ 78.765115][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 78.765125][ T43] audit: type=1400 audit(1789099684.239:576): avc: denied { ioctl } for pid=7177 comm="syz.3.316" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.907646][ T7184] veth0_to_bond: entered allmulticast mode [ 79.061591][ T43] audit: type=1400 audit(1789099684.529:577): avc: denied { bind } for pid=7193 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.115378][ T7194] random: crng reseeded on system resumption [ 79.119499][ T7194] FAULT_INJECTION: forcing a failure. [ 79.119499][ T7194] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.119530][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.3.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.119557][ T7194] Tainted: [L]=SOFTLOCKUP [ 79.119565][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.119576][ T7194] Call Trace: [ 79.119582][ T7194] [ 79.119590][ T7194] dump_stack_lvl+0x100/0x190 [ 79.119621][ T7194] should_fail_ex.cold+0x5/0xa [ 79.119651][ T7194] ? prepare_alloc_pages+0x16d/0x5b0 [ 79.119677][ T7194] should_fail_alloc_page+0xeb/0x140 [ 79.119704][ T7194] prepare_alloc_pages+0x1f0/0x5b0 [ 79.119727][ T7194] ? unwind_get_return_address+0x59/0xa0 [ 79.119756][ T7194] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 79.119790][ T7194] ? stack_trace_save+0x8e/0xc0 [ 79.119816][ T7194] ? __pfx_stack_trace_save+0x10/0x10 [ 79.119844][ T7194] ? stack_depot_save_flags+0x27/0x9f0 [ 79.119871][ T7194] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 79.119903][ T7194] ? kasan_save_stack+0x3f/0x50 [ 79.119924][ T7194] ? kasan_save_track+0x14/0x30 [ 79.119943][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 79.119962][ T7194] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 79.119987][ T7194] ? memory_bm_create+0x12c/0xcf0 [ 79.120009][ T7194] ? create_basic_memory_bitmaps+0xbd/0x350 [ 79.120032][ T7194] ? snapshot_open+0x23b/0x2b0 [ 79.120047][ T7194] ? misc_open+0x26d/0x450 [ 79.120063][ T7194] ? chrdev_open+0x234/0x6a0 [ 79.120082][ T7194] ? do_dentry_open+0x6ab/0x14d0 [ 79.120100][ T7194] ? vfs_open+0x82/0x3f0 [ 79.120122][ T7194] ? path_openat+0x19fa/0x2440 [ 79.120143][ T7194] ? do_file_open+0x20e/0x430 [ 79.120162][ T7194] ? do_sys_openat2+0x10f/0x1e0 [ 79.120184][ T7194] ? __x64_sys_openat+0x12d/0x210 [ 79.120206][ T7194] ? do_syscall_64+0x123/0x790 [ 79.120228][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.120260][ T7194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.120281][ T7194] ? policy_nodemask+0xed/0x4f0 [ 79.120307][ T7194] alloc_pages_mpol+0x201/0x550 [ 79.120331][ T7194] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.120355][ T7194] ? kasan_save_track+0x14/0x30 [ 79.120373][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 79.120395][ T7194] alloc_pages_noprof+0x1a/0x160 [ 79.120420][ T7194] get_zeroed_page_noprof+0x18/0xb0 [ 79.120441][ T7194] get_image_page+0x18/0x1a0 [ 79.120464][ T7194] memory_bm_create+0x66a/0xcf0 [ 79.120496][ T7194] create_basic_memory_bitmaps+0xbd/0x350 [ 79.120525][ T7194] snapshot_open+0x23b/0x2b0 [ 79.120541][ T7194] ? __pfx_snapshot_open+0x10/0x10 [ 79.120559][ T7194] misc_open+0x26d/0x450 [ 79.120576][ T7194] ? __pfx_misc_open+0x10/0x10 [ 79.120593][ T7194] chrdev_open+0x234/0x6a0 [ 79.120614][ T7194] ? __pfx_chrdev_open+0x10/0x10 [ 79.120636][ T7194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 79.120676][ T7194] do_dentry_open+0x6ab/0x14d0 [ 79.120695][ T7194] ? __pfx_chrdev_open+0x10/0x10 [ 79.120723][ T7194] vfs_open+0x82/0x3f0 [ 79.120749][ T7194] path_openat+0x19fa/0x2440 [ 79.120774][ T7194] ? __pfx_path_openat+0x10/0x10 [ 79.120802][ T7194] do_file_open+0x20e/0x430 [ 79.120824][ T7194] ? __pfx_do_file_open+0x10/0x10 [ 79.120862][ T7194] ? _raw_spin_unlock+0x28/0x50 [ 79.120880][ T7194] ? alloc_fd+0x471/0x7a0 [ 79.120909][ T7194] do_sys_openat2+0x10f/0x1e0 [ 79.120933][ T7194] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.120959][ T7194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.120997][ T7194] __x64_sys_openat+0x12d/0x210 [ 79.121023][ T7194] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.121059][ T7194] do_syscall_64+0x123/0x790 [ 79.121085][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.121105][ T7194] RIP: 0033:0x7ffb8099e159 [ 79.121121][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.121137][ T7194] RSP: 002b:00007ffb817ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.121158][ T7194] RAX: ffffffffffffffda RBX: 00007ffb80c25fa0 RCX: 00007ffb8099e159 [ 79.121172][ T7194] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 79.121184][ T7194] RBP: 00007ffb80a3503b R08: 0000000000000000 R09: 0000000000000000 [ 79.121195][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.121205][ T7194] R13: 00007ffb80c26038 R14: 00007ffb80c25fa0 R15: 00007fff648af348 [ 79.121231][ T7194] [ 79.167274][ T43] audit: type=1400 audit(1789099684.639:578): avc: denied { accept } for pid=7197 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.231195][ T43] audit: type=1400 audit(1789099684.699:579): avc: denied { mounton } for pid=7201 comm="syz.3.323" path="/106/config" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.233879][ T43] audit: type=1400 audit(1789099684.699:580): avc: denied { write } for pid=7201 comm="syz.3.323" name="usb_gadget" dev="configfs" ino=6363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.236791][ T43] audit: type=1400 audit(1789099684.709:581): avc: denied { add_name } for pid=7201 comm="syz.3.323" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.237507][ T43] audit: type=1400 audit(1789099684.709:582): avc: denied { create } for pid=7201 comm="syz.3.323" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 79.352928][ T7212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.362800][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7212 comm=syz.2.325 [ 79.523581][ T7218] __nla_validate_parse: 3 callbacks suppressed [ 79.523607][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 79.597261][ T7220] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 79.631042][ T7224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 79.647438][ T1042] tipc: Node number set to 2886997057 [ 79.672691][ T43] audit: type=1400 audit(1789099685.139:583): avc: denied { read } for pid=7223 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.744240][ T5744] Bluetooth: hci4: command tx timeout [ 79.903407][ T5744] Bluetooth: hci1: command 0x1003 tx timeout [ 79.903428][ T5741] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 80.024584][ T7231] netlink: 'syz.1.331': attribute type 19 has an invalid length. [ 80.135970][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.136115][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.137145][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.137354][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.137605][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.137826][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.138011][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.163894][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 80.179515][ T7245] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 80.191100][ T43] audit: type=1400 audit(1789099685.659:584): avc: denied { read } for pid=7240 comm="syz.2.335" name="ptp0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.195465][ T43] audit: type=1400 audit(1789099685.669:585): avc: denied { ioctl } for pid=7240 comm="syz.2.335" path="/dev/ptp0" dev="devtmpfs" ino=726 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.252129][ T7253] ceph: No mds server is up or the cluster is laggy [ 80.337458][ T7262] FAULT_INJECTION: forcing a failure. [ 80.337458][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 80.337492][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.4.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.337518][ T7262] Tainted: [L]=SOFTLOCKUP [ 80.337525][ T7262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.337538][ T7262] Call Trace: [ 80.337545][ T7262] [ 80.337552][ T7262] dump_stack_lvl+0x100/0x190 [ 80.337588][ T7262] should_fail_ex.cold+0x5/0xa [ 80.337616][ T7262] should_failslab+0xc2/0x120 [ 80.337642][ T7262] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.337677][ T7262] ? sctp_association_new+0xbb/0x2990 [ 80.337713][ T7262] sctp_association_new+0xbb/0x2990 [ 80.337740][ T7262] sctp_connect_new_asoc+0x1a8/0x770 [ 80.337765][ T7262] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 80.337797][ T7262] sctp_sendmsg+0x1743/0x22e0 [ 80.337825][ T7262] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.337846][ T7262] ? sock_has_perm+0x25a/0x2f0 [ 80.337876][ T7262] ? __pfx_sock_has_perm+0x10/0x10 [ 80.337911][ T7262] ? __might_fault+0xc5/0x140 [ 80.337943][ T7262] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.337966][ T7262] inet_sendmsg+0x11c/0x140 [ 80.337995][ T7262] __sys_sendto+0x453/0x4e0 [ 80.338014][ T7262] ? __pfx_inet_sendmsg+0x10/0x10 [ 80.338048][ T7262] ? __pfx___sys_sendto+0x10/0x10 [ 80.338075][ T7262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.338112][ T7262] ? xfd_validate_state+0x129/0x190 [ 80.338139][ T7262] __x64_sys_sendto+0xe0/0x1c0 [ 80.338160][ T7262] ? do_syscall_64+0xae/0x790 [ 80.338183][ T7262] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.338208][ T7262] do_syscall_64+0x123/0x790 [ 80.338235][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.338255][ T7262] RIP: 0033:0x7f19f459e159 [ 80.338271][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.338290][ T7262] RSP: 002b:00007f19f53ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.338310][ T7262] RAX: ffffffffffffffda RBX: 00007f19f4825fa0 RCX: 00007f19f459e159 [ 80.338323][ T7262] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 80.338335][ T7262] RBP: 00007f19f463503b R08: 000020000005ffe4 R09: 000000000000001c [ 80.338348][ T7262] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000 [ 80.338360][ T7262] R13: 00007f19f4826038 R14: 00007f19f4825fa0 R15: 00007ffc78226658 [ 80.338412][ T7262] [ 80.439745][ T7270] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 80.442185][ T7275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.500875][ T7279] comedi comedi3: mpc624: I/O base address not correctly aligned [ 80.623423][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.700202][ T7289] netlink: NAT attribute has 5 unknown bytes [ 80.700221][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.761565][ T7292] macvlan0: entered promiscuous mode [ 80.773685][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 80.774240][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 80.777305][ T10] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 80.777325][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.777340][ T10] usb 7-1: config 0 has no interface number 0 [ 80.777388][ T10] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.779392][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.779412][ T10] usb 7-1: Product: syz [ 80.779425][ T10] usb 7-1: Manufacturer: syz [ 80.779437][ T10] usb 7-1: SerialNumber: syz [ 80.783075][ T10] usb 7-1: config 0 descriptor?? [ 80.794986][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input10 [ 80.831433][ T7311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 80.851725][ T7308] Bluetooth: hci0: unsupported parameter 255 [ 80.851739][ T7308] Bluetooth: hci0: unsupported parameter 255 [ 80.894045][ T7304] kvm: kvm [7303]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 81.050187][ T7320] netlink: 'syz.3.353': attribute type 7 has an invalid length. [ 81.063350][ T7320] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.181768][ T7326] netlink: Only one type of NAT may be specified [ 81.181793][ T7326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.183545][ T5835] usb 7-1: USB disconnect, device number 4 [ 81.329436][ T7339] Bluetooth: hci0: unsupported parameter 255 [ 81.329459][ T7339] Bluetooth: hci0: unsupported parameter 255 [ 81.858531][ T7365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7365 comm=syz.3.367 [ 81.926994][ T7368] Bluetooth: hci0: unsupported parameter 255 [ 81.927013][ T7368] Bluetooth: hci0: unsupported parameter 255 [ 81.957627][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 82.013279][ T5835] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.052508][ T7379] '|d: renamed from lo (while UP) [ 82.076238][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.076561][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.104317][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.105529][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 82.105568][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.105587][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 82.107659][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.107679][ T10] usb 9-1: Product: syz [ 82.107694][ T10] usb 9-1: Manufacturer: syz [ 82.107706][ T10] usb 9-1: SerialNumber: syz [ 82.110011][ T10] usb 9-1: config 0 descriptor?? [ 82.114549][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 82.114569][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 82.121901][ T10] usb 9-1: selecting invalid altsetting 0 [ 82.174766][ T5835] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 82.175746][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.175769][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 82.175799][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.189982][ T5835] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 82.388229][ T7363] XFS (loop2): SB validate failed with error -5. [ 82.718255][ T850] usb 9-1: USB disconnect, device number 2 [ 82.923285][ T850] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 83.073991][ T850] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.074972][ T850] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 83.075016][ T850] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.075035][ T850] usb 9-1: config 0 interface 0 has no altsetting 0 [ 83.076849][ T850] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.076868][ T850] usb 9-1: Product: syz [ 83.076880][ T850] usb 9-1: Manufacturer: syz [ 83.076891][ T850] usb 9-1: SerialNumber: syz [ 83.080376][ T850] usb 9-1: config 0 descriptor?? [ 83.082507][ T850] hub 9-1:0.0: bad descriptor, ignoring hub [ 83.082527][ T850] hub 9-1:0.0: probe with driver hub failed with error -5 [ 83.084637][ T850] usb 9-1: selecting invalid altsetting 0 [ 83.284872][ T7355] file system registered [ 83.404067][ T850] usb 9-1: USB disconnect, device number 3 [ 83.774871][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 83.774888][ T43] audit: type=1400 audit(1789099689.249:603): avc: denied { ioctl } for pid=7423 comm="syz.1.383" path="socket:[16304]" dev="sockfs" ino=16304 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.809416][ T43] audit: type=1400 audit(1789099689.279:604): avc: denied { unmount } for pid=6868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 83.811213][ T6868] ffs_data_put(): freeing [ 83.848703][ T43] audit: type=1400 audit(1789099689.319:605): avc: denied { accept } for pid=7427 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.886965][ T43] audit: type=1400 audit(1789099689.359:606): avc: denied { shutdown } for pid=7427 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.887094][ T43] audit: type=1400 audit(1789099689.359:607): avc: denied { setopt } for pid=7427 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.022694][ T43] audit: type=1400 audit(1789099689.489:608): avc: denied { append } for pid=7435 comm="syz.4.386" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 84.039599][ T43] audit: type=1400 audit(1789099689.509:609): avc: denied { mounton } for pid=7435 comm="syz.4.386" path="/19/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 84.041080][ T7436] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.2037675055.13139), cmd(7) [ 84.651056][ T7457] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.690672][ T43] audit: type=1400 audit(1789099690.159:610): avc: denied { mount } for pid=7458 comm="syz.1.391" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 84.695844][ T43] audit: type=1807 audit(1789099690.169:611): action=measure uid>1 res=1 [ 84.698804][ T7458] ima: policy update completed [ 84.698917][ T43] audit: type=1802 audit(1789099690.169:612): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.1.391" res=1 errno=0 [ 84.789458][ T5835] usb 7-1: USB disconnect, device number 5 [ 84.794036][ T5835] idmouse 7-1:1.0: disconnected [ 84.834913][ T7464] __nla_validate_parse: 33 callbacks suppressed [ 84.834926][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 84.912111][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 84.957332][ T7478] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 84.957762][ T7478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.078607][ T7490] Bluetooth: MGMT ver 1.23 [ 85.165492][ T7470] ima: policy update completed [ 85.284676][ T7501] kernel read not supported for file /policy (pid: 7501 comm: syz.4.401) [ 85.307772][ T7393] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 85.309033][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 85.517868][ T7393] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 85.940181][ T7519] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 85.973834][ T7521] netlink: 'syz.1.407': attribute type 16 has an invalid length. [ 86.182491][ T7542] geneve1: entered allmulticast mode [ 86.527574][ T7553] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 86.732024][ T5806] nci: nci_rx_work: unknown MT 0x1 [ 86.991653][ T7588] FAULT_INJECTION: forcing a failure. [ 86.991653][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 86.991674][ T7588] CPU: 2 UID: 0 PID: 7588 Comm: syz.1.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.991689][ T7588] Tainted: [L]=SOFTLOCKUP [ 86.991693][ T7588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.991700][ T7588] Call Trace: [ 86.991705][ T7588] [ 86.991709][ T7588] dump_stack_lvl+0x100/0x190 [ 86.991729][ T7588] should_fail_ex.cold+0x5/0xa [ 86.991745][ T7588] should_failslab+0xc2/0x120 [ 86.991759][ T7588] kmem_cache_alloc_noprof+0x92/0x6a0 [ 86.991770][ T7588] ? __pfx_map_id_range_down+0x10/0x10 [ 86.991782][ T7588] ? rcu_is_watching+0x13/0xc0 [ 86.991797][ T7588] ? security_inode_alloc+0x3b/0x2c0 [ 86.991817][ T7588] security_inode_alloc+0x3b/0x2c0 [ 86.991834][ T7588] inode_init_always_gfp+0xc6f/0xfb0 [ 86.991853][ T7588] alloc_inode+0x8e/0x250 [ 86.991868][ T7588] sock_alloc+0x44/0x280 [ 86.991887][ T7588] ? security_socket_create+0x7f/0x250 [ 86.991910][ T7588] __sock_create+0xc2/0x860 [ 86.991933][ T7588] __sys_socket+0x14d/0x260 [ 86.991949][ T7588] ? __pfx___sys_socket+0x10/0x10 [ 86.991969][ T7588] __x64_sys_socket+0x72/0xb0 [ 86.991985][ T7588] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.991998][ T7588] do_syscall_64+0x123/0x790 [ 86.992014][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.992025][ T7588] RIP: 0033:0x7f47ccf9e159 [ 86.992035][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.992045][ T7588] RSP: 002b:00007f47cde0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 86.992057][ T7588] RAX: ffffffffffffffda RBX: 00007f47cd225fa0 RCX: 00007f47ccf9e159 [ 86.992063][ T7588] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 86.992070][ T7588] RBP: 00007f47cd03503b R08: 0000000000000000 R09: 0000000000000000 [ 86.992076][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.992083][ T7588] R13: 00007f47cd226038 R14: 00007f47cd225fa0 R15: 00007ffc3a6d1178 [ 86.992097][ T7588] [ 86.992111][ T7588] socket: no more sockets [ 87.121952][ T7593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 87.122534][ T7593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 87.130550][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 87.130735][ T7598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 87.153061][ T7601] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.209551][ T7604] ceph: No mds server is up or the cluster is laggy [ 87.229496][ T7604] netlink: 68 bytes leftover after parsing attributes in process `syz.2.427'. [ 87.342250][ T7610] binder_alloc: binder_alloc_mmap_handler: 7608 200000ffe000-200001000000 already mapped failed -16 [ 89.338730][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 89.338750][ T43] audit: type=1400 audit(1789099694.809:684): avc: denied { write } for pid=7626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.383182][ T43] audit: type=1400 audit(1789099694.849:685): avc: denied { write } for pid=7629 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.461288][ T43] audit: type=1400 audit(1789099694.929:686): avc: denied { write } for pid=7632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.509699][ T43] audit: type=1400 audit(1789099694.979:687): avc: denied { write } for pid=7635 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.644739][ T7569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.683974][ T7639] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 89.687324][ T7639] xt_time: unknown flags 0x78 [ 89.687544][ T43] audit: type=1800 audit(1789099695.159:688): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 89.699937][ T43] audit: type=1800 audit(1789099695.169:689): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 89.716826][ T43] audit: type=1800 audit(1789099695.189:690): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 89.738909][ T43] audit: type=1800 audit(1789099695.209:691): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 89.739427][ T7641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.742895][ T43] audit: type=1400 audit(1789099695.209:692): avc: denied { mounton } for pid=7640 comm="syz.1.429" path="/134/proc/437/task/438/fail-nth" dev="proc" ino=18095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 89.751265][ T43] audit: type=1800 audit(1789099695.219:693): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 89.799317][ T7641] bridge0: port 3(syz_tun) entered disabled state [ 89.804479][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.804768][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.868900][ T7656] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 89.929261][ T7641] veth0_to_bond: left allmulticast mode [ 89.957780][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.965122][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.014931][ T7641] v: left promiscuous mode [ 90.018727][ T7641] macvlan0: left promiscuous mode [ 90.104686][ T7641] team1: left promiscuous mode [ 90.104705][ T7641] team1: left allmulticast mode [ 90.134755][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 90.134773][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 90.203672][ T5806] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.203694][ T5806] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.203713][ T5806] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.203727][ T5806] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.203745][ T5806] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.203758][ T5806] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.203775][ T5806] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.203788][ T5806] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.342000][ T5741] Bluetooth: hci0: unexpected subevent 0x37 length: 25 > 13 [ 90.530856][ T7726] fuse: Unknown parameter '184467440737095516150x0000000000000004' [ 90.658328][ T7735] program syz.4.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.920292][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 91.928289][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 92.018233][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 92.018292][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 93.411726][ T7710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.456106][ T7790] netlink: 'syz.2.457': attribute type 5 has an invalid length. [ 93.471149][ T7792] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 93.471585][ T7790] ip6erspan0: entered promiscuous mode [ 93.577933][ T7798] ip_tables: iptables: counters copy to user failed while replacing table [ 93.627102][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627116][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.646680][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 93.701334][ T5741] Bluetooth: hci0: Unexpected cc 0x0000 with no status [ 93.798365][ T7823] netlink: 'syz.2.468': attribute type 2 has an invalid length. [ 93.841682][ T7828] kernel read not supported for file /sg0 (pid: 7828 comm: syz.4.470) [ 94.024306][ T5806] nci: nci_rx_work: unknown MT 0x1 [ 94.123361][ T1350] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.273297][ T1350] usb 7-1: Using ep0 maxpacket: 16 [ 94.275621][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.277248][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.279246][ T5741] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 94.279259][ T5741] Bluetooth: hci0: adv larger than maximum supported [ 94.279266][ T5741] Bluetooth: hci0: Malformed LE Event: 0x0d [ 94.284024][ T1350] usb 7-1: unable to get BOS descriptor or descriptor too short [ 94.284047][ T1350] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 94.284647][ T1350] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 94.284662][ T1350] usb 7-1: can't read configurations, error -71 [ 94.805992][ T43] kauditd_printk_skb: 94 callbacks suppressed [ 94.806003][ T43] audit: type=1800 audit(1789099700.279:788): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 94.825243][ T43] audit: type=1400 audit(1789099700.299:789): avc: denied { mount } for pid=7845 comm="syz.2.477" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 94.861067][ T43] audit: type=1800 audit(1789099700.329:790): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 94.896817][ T43] audit: type=1800 audit(1789099700.369:791): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 94.906541][ T7853] jffs2: notice: (7853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 94.910003][ T43] audit: type=1400 audit(1789099700.379:792): avc: denied { append } for pid=7851 comm="syz.2.479" name="comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.910462][ T7854] comedi: No check for data length of config insn id 1919954734 is implemented [ 94.910473][ T7854] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 94.910480][ T7854] comedi: Assuming n=15 is correct [ 95.901757][ T43] audit: type=1800 audit(1789099701.369:793): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 95.929549][ T43] audit: type=1800 audit(1789099701.399:794): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 95.938237][ T7861] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 96.965041][ T7837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.965570][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 97.002645][ T43] audit: type=1800 audit(1789099702.459:795): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 97.010255][ T43] audit: type=1800 audit(1789099702.479:796): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 97.018301][ T43] audit: type=1800 audit(1789099702.489:797): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 97.071222][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 97.113511][ T5828] usb 6-1: USB disconnect, device number 2 [ 97.145661][ T5828] usblp0: removed [ 97.230708][ T7191] syz_tun (unregistering): left allmulticast mode [ 97.230725][ T7191] syz_tun (unregistering): left promiscuous mode [ 97.230766][ T7191] bridge0: port 3(syz_tun) entered disabled state [ 97.440418][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.443007][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.445141][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.445539][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.445795][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.503735][ T7252] bridge0: port 3(syz_tun) entered disabled state [ 97.511859][ T7252] syz_tun (unregistering): left allmulticast mode [ 97.511875][ T7252] syz_tun (unregistering): left promiscuous mode [ 97.511926][ T7252] bridge0: port 3(syz_tun) entered disabled state [ 97.523643][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.536337][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.538236][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.541740][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.543035][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.888844][ T5806] bridge_slave_1: left allmulticast mode [ 97.888867][ T5806] bridge_slave_1: left promiscuous mode [ 97.889102][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.891492][ T5806] bridge_slave_0: left allmulticast mode [ 97.891509][ T5806] bridge_slave_0: left promiscuous mode [ 97.891656][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.048192][ T7909] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 98.048362][ T7909] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 98.072223][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.085423][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.087702][ T5806] bond0 (unregistering): Released all slaves [ 98.153143][ T5806] tipc: Disabling bearer [ 98.154631][ T5806] tipc: Left network mode [ 98.336605][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.336745][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.336853][ T7874] bridge_slave_0: entered allmulticast mode [ 98.338210][ T7874] bridge_slave_0: entered promiscuous mode [ 98.343040][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 98.348334][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.348416][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.348551][ T7874] bridge_slave_1: entered allmulticast mode [ 98.351929][ T7874] bridge_slave_1: entered promiscuous mode [ 98.363344][ T5807] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 98.412582][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.425580][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.452377][ T5806] hsr_slave_0: left promiscuous mode [ 98.453887][ T5806] hsr_slave_1: left promiscuous mode [ 98.454426][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.456290][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.512214][ T5744] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 98.512232][ T5744] CPU: 1 UID: 0 PID: 5744 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.512248][ T5744] Tainted: [L]=SOFTLOCKUP [ 98.512252][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.512260][ T5744] Workqueue: hci4 hci_rx_work [ 98.512276][ T5744] Call Trace: [ 98.512280][ T5744] [ 98.512286][ T5744] dump_stack_lvl+0x100/0x190 [ 98.512305][ T5744] sysfs_warn_dup.cold+0x1c/0x28 [ 98.512322][ T5744] sysfs_create_dir_ns+0x24b/0x2b0 [ 98.512338][ T5744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 98.512352][ T5744] ? find_held_lock+0x2b/0x80 [ 98.512386][ T5744] ? kobject_add_internal+0x25f/0x930 [ 98.512404][ T5744] ? kobject_add_internal+0x25f/0x930 [ 98.512424][ T5744] ? do_raw_spin_unlock+0x145/0x1e0 [ 98.512440][ T5744] kobject_add_internal+0x2c8/0x930 [ 98.512460][ T5744] kobject_add+0x16a/0x1e0 [ 98.512472][ T5744] ? __pfx_kobject_add+0x10/0x10 [ 98.512481][ T5744] ? class_to_subsys+0x10f/0x150 [ 98.512499][ T5744] ? kobject_put+0xb9/0x640 [ 98.512517][ T5744] ? _raw_spin_unlock+0x28/0x50 [ 98.512532][ T5744] device_add+0x294/0x1970 [ 98.512546][ T5744] ? __pfx_dev_set_name+0x10/0x10 [ 98.512562][ T5744] ? __pfx_device_add+0x10/0x10 [ 98.512576][ T5744] ? mgmt_send_event_skb+0x2fb/0x460 [ 98.512598][ T5744] hci_conn_add_sysfs+0x1a3/0x260 [ 98.512620][ T5744] le_conn_complete_evt+0x122f/0x2130 [ 98.512643][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 98.512662][ T5744] ? hci_event_packet+0x186/0xcd0 [ 98.512680][ T5744] ? hci_event_packet+0x186/0xcd0 [ 98.512705][ T5744] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 98.512728][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 98.512756][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 98.512779][ T5744] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 98.512805][ T5744] hci_event_packet+0x51c/0xcd0 [ 98.512827][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 98.512850][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 98.512876][ T5744] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.512905][ T5744] hci_rx_work+0x451/0xfc0 [ 98.512930][ T5744] process_one_work+0xac7/0x1b10 [ 98.512970][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 98.513000][ T5744] ? lock_acquire+0x1d1/0x380 [ 98.513033][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 98.513056][ T5744] worker_thread+0x5ef/0xe50 [ 98.513091][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 98.513120][ T5744] ? kthread+0x13a/0x450 [ 98.513143][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 98.513168][ T5744] kthread+0x373/0x450 [ 98.513192][ T5744] ? __pfx_kthread+0x10/0x10 [ 98.513220][ T5744] ret_from_fork+0x730/0xd60 [ 98.513243][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 98.513266][ T5744] ? __switch_to+0x800/0x10f0 [ 98.513291][ T5744] ? __pfx_kthread+0x10/0x10 [ 98.513317][ T5744] ret_from_fork_asm+0x1a/0x30 [ 98.513350][ T5744] [ 98.513878][ T5744] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.513911][ T5744] Bluetooth: hci4: failed to register connection device [ 98.536512][ T5807] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 98.538197][ T5807] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.538220][ T5807] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 98.538250][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.578858][ T5807] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 98.671096][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 98.679068][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 98.757252][ T7914] XFS (loop2): SB validate failed with error -5. [ 98.787026][ T7874] team0: Port device team_slave_0 added [ 98.789818][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 98.791523][ T7874] team0: Port device team_slave_1 added [ 98.832868][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.832880][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.832893][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.844058][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.844141][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.844198][ T7879] bridge_slave_0: entered allmulticast mode [ 98.844928][ T7879] bridge_slave_0: entered promiscuous mode [ 98.846470][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.846483][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.846504][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.853475][ T7937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.853573][ T7937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.882113][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.882173][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.882251][ T7879] bridge_slave_1: entered allmulticast mode [ 98.886214][ T7879] bridge_slave_1: entered promiscuous mode [ 98.902392][ T7937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.909264][ T7937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.909322][ T7937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.923151][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.925924][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.932299][ T7937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.949928][ T7874] hsr_slave_0: entered promiscuous mode [ 98.950741][ T7874] hsr_slave_1: entered promiscuous mode [ 98.961777][ T7937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.969576][ T7879] team0: Port device team_slave_0 added [ 98.971667][ T7879] team0: Port device team_slave_1 added [ 98.975167][ T7937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.975248][ T7937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.990227][ T7937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.012247][ T7937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.013289][ T7937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.020874][ T7937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.035076][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.035092][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.035111][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.042419][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.042434][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.042455][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.106839][ T7954] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 99.108757][ T7879] hsr_slave_0: entered promiscuous mode [ 99.109328][ T7879] hsr_slave_1: entered promiscuous mode [ 99.109642][ T7879] debugfs: 'hsr0' already exists in 'hsr' [ 99.109654][ T7879] Cannot create hsr debugfs directory [ 99.136641][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 99.221677][ T5806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.221700][ T5806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.236491][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 99.327452][ T5806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.327486][ T5806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.404875][ T5806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.404907][ T5806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.410136][ T7874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.413129][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.414781][ T7874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.425270][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.428815][ T7874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.436513][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.438453][ T7874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.444249][ T7874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.462285][ T5806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.462336][ T5806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.495631][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 99.546536][ T7879] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.548675][ T7879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.549179][ T7879] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.552454][ T7879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.588745][ T7879] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.594794][ T7879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.595197][ T7879] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.598392][ T7879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.642509][ T5806] bridge_slave_1: left allmulticast mode [ 99.642533][ T5806] bridge_slave_1: left promiscuous mode [ 99.643268][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.650423][ T5806] bridge_slave_0: left allmulticast mode [ 99.650445][ T5806] bridge_slave_0: left promiscuous mode [ 99.650675][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.827722][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.829200][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.830065][ T5806] bond0 (unregistering): Released all slaves [ 99.832969][ T5806] bond1 (unregistering): Released all slaves [ 99.839290][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 99.839305][ T43] audit: type=1400 audit(1789099705.309:888): avc: denied { write } for pid=7988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.867307][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.892259][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.908462][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.908533][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.925821][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.925899][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.943114][ T43] audit: type=1400 audit(1789099705.409:889): avc: denied { write } for pid=7990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.962017][ T43] audit: type=1800 audit(1789099705.429:890): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 99.984332][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.007740][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.011718][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.011765][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.019276][ T7995] Bluetooth: hci0: unsupported parameter 255 [ 100.019294][ T7995] Bluetooth: hci0: unsupported parameter 255 [ 100.025169][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.039256][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.039340][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.068223][ T43] audit: type=1800 audit(1789099705.539:891): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 100.072760][ T43] audit: type=1400 audit(1789099705.539:892): avc: denied { write } for pid=7998 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.162586][ T43] audit: type=1800 audit(1789099705.629:893): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 100.181898][ T43] audit: type=1400 audit(1789099705.649:894): avc: denied { write } for pid=8004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.188013][ T43] audit: type=1400 audit(1789099705.659:895): avc: denied { setopt } for pid=8007 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.190821][ T43] audit: type=1400 audit(1789099705.659:896): avc: denied { bpf } for pid=8007 comm="syz.4.499" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.196844][ T43] audit: type=1400 audit(1789099705.669:897): avc: denied { perfmon } for pid=8007 comm="syz.4.499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.410025][ T5806] hsr_slave_0: left promiscuous mode [ 100.412537][ T5806] hsr_slave_1: left promiscuous mode [ 100.412946][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.412957][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.423133][ T5806] veth1_macvtap: left promiscuous mode [ 100.423155][ T5806] veth0_macvtap: left promiscuous mode [ 100.424189][ T5806] veth1_vlan: left promiscuous mode [ 100.424296][ T5806] veth0_vlan: left promiscuous mode [ 100.576388][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 100.586913][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 100.606036][ T5876] usb 7-1: USB disconnect, device number 8 [ 100.617716][ T5876] idmouse 7-1:1.0: disconnected [ 100.662344][ T5806] team0 (unregistering): Port device veth0 removed [ 100.743680][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.778790][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.841758][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.878162][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.926256][ T7874] veth0_vlan: entered promiscuous mode [ 100.930408][ T7874] veth1_vlan: entered promiscuous mode [ 100.943595][ T5744] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.955803][ T7874] veth0_macvtap: entered promiscuous mode [ 100.970357][ T7874] veth1_macvtap: entered promiscuous mode [ 100.986106][ T7879] veth0_vlan: entered promiscuous mode [ 100.991763][ T5806] IPVS: stop unused estimator thread 0... [ 100.992768][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.002522][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.005169][ T7879] veth1_vlan: entered promiscuous mode [ 101.035281][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 101.035924][ T5741] Bluetooth: hci1: command 0x041b tx timeout [ 101.068066][ T5781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.068130][ T5781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.068165][ T5781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.068195][ T5781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.072612][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 101.082721][ T7879] veth0_macvtap: entered promiscuous mode [ 101.088288][ T7879] veth1_macvtap: entered promiscuous mode [ 101.095902][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.102867][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.125656][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.125670][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.136387][ T5781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.136428][ T5781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.136447][ T5781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.136475][ T5781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.172734][ T8067] dlm: no locking on control device [ 101.221217][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.221232][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.274307][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.274325][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.302896][ T8072] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.315171][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.315185][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.364174][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 101.417599][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 101.564009][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 101.918170][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.510'. [ 101.933361][ T2086] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 101.988001][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.6.512'. [ 102.095622][ T8129] ip6t_rt: unknown flags D [ 102.105990][ T2086] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 102.106888][ T2086] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.106908][ T2086] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 102.106935][ T2086] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.138807][ T2086] idmouse 10-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 102.291994][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 102.292453][ T8141] xt_cgroup: path and classid specified [ 102.321114][ T8109] XFS (loop5): SB validate failed with error -5. [ 102.430356][ T8150] netlink: 84 bytes leftover after parsing attributes in process `syz.2.520'. [ 102.430382][ T8150] nbd: must specify at least one socket [ 102.546804][ T8167] FAULT_INJECTION: forcing a failure. [ 102.546804][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 102.546826][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.6.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.546841][ T8167] Tainted: [L]=SOFTLOCKUP [ 102.546845][ T8167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.546852][ T8167] Call Trace: [ 102.546856][ T8167] [ 102.546861][ T8167] dump_stack_lvl+0x100/0x190 [ 102.546881][ T8167] should_fail_ex.cold+0x5/0xa [ 102.546915][ T8167] should_failslab+0xc2/0x120 [ 102.546930][ T8167] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 102.546943][ T8167] ? sock_alloc_inode+0x26/0x2c0 [ 102.546959][ T8167] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.546974][ T8167] sock_alloc_inode+0x26/0x2c0 [ 102.546989][ T8167] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.547002][ T8167] alloc_inode+0x68/0x250 [ 102.547012][ T8167] sock_alloc+0x44/0x280 [ 102.547024][ T8167] ? security_socket_create+0x7f/0x250 [ 102.547044][ T8167] __sock_create+0xc2/0x860 [ 102.547062][ T8167] __sys_socket+0x14d/0x260 [ 102.547077][ T8167] ? __pfx___sys_socket+0x10/0x10 [ 102.547097][ T8167] __x64_sys_socket+0x72/0xb0 [ 102.547112][ T8167] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.547126][ T8167] do_syscall_64+0x123/0x790 [ 102.547141][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.547153][ T8167] RIP: 0033:0x7f9c7119e159 [ 102.547162][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.547173][ T8167] RSP: 002b:00007f9c6f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.547184][ T8167] RAX: ffffffffffffffda RBX: 00007f9c71425fa0 RCX: 00007f9c7119e159 [ 102.547192][ T8167] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 102.547198][ T8167] RBP: 00007f9c7123503b R08: 0000000000000000 R09: 0000000000000000 [ 102.547206][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.547213][ T8167] R13: 00007f9c71426038 R14: 00007f9c71425fa0 R15: 00007fffe46f5c48 [ 102.547228][ T8167] [ 102.547261][ T8167] socket: no more sockets [ 102.550592][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.553666][ T13] nci: nci_rx_work: unknown MT 0x1 [ 102.639499][ T8171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.648968][ T8171] xt_NFQUEUE: number of total queues is 0 [ 102.953320][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.023471][ T5744] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.103514][ T5744] Bluetooth: hci1: command 0x041b tx timeout [ 103.113435][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 103.541702][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888053b92000: rx timeout, send abort [ 104.043360][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888053b92000: abort rx timeout. Force session deactivation [ 104.118964][ T25] usb 10-1: USB disconnect, device number 2 [ 104.121925][ T25] idmouse 10-1:1.0: disconnected [ 105.023349][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.103468][ T5744] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.184718][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 105.184752][ T5744] Bluetooth: hci1: command 0x041b tx timeout [ 105.500149][ T8162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.531864][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 105.531877][ T43] audit: type=1800 audit(1789099710.999:982): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 105.549166][ T8211] jffs2: notice: (8211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 105.552873][ T43] audit: type=1326 audit(1789099711.019:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.5.538" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ec0b9e159 code=0x0 [ 105.554682][ T43] audit: type=1800 audit(1789099711.029:984): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 105.565620][ T43] audit: type=1800 audit(1789099711.039:985): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 105.598866][ T43] audit: type=1800 audit(1789099711.069:986): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 105.609340][ T8218] FAULT_INJECTION: forcing a failure. [ 105.609340][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 105.609364][ T8218] CPU: 0 UID: 0 PID: 8218 Comm: syz.2.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.609378][ T8218] Tainted: [L]=SOFTLOCKUP [ 105.609382][ T8218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.609389][ T8218] Call Trace: [ 105.609392][ T8218] [ 105.609397][ T8218] dump_stack_lvl+0x100/0x190 [ 105.609417][ T8218] should_fail_ex.cold+0x5/0xa [ 105.609435][ T8218] should_failslab+0xc2/0x120 [ 105.609456][ T8218] __kmalloc_cache_noprof+0x91/0x6d0 [ 105.609474][ T8218] ? alloc_ucounts+0x13d/0x5c0 [ 105.609493][ T8218] alloc_ucounts+0x13d/0x5c0 [ 105.609509][ T8218] ? __pfx_alloc_ucounts+0x10/0x10 [ 105.609529][ T8218] set_cred_ucounts+0xcd/0x200 [ 105.609542][ T8218] __sys_setreuid+0x4a0/0xb00 [ 105.609556][ T8218] do_syscall_64+0x123/0x790 [ 105.609572][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.609584][ T8218] RIP: 0033:0x7ffa7939e159 [ 105.609594][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.609604][ T8218] RSP: 002b:00007ffa7a317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 105.609616][ T8218] RAX: ffffffffffffffda RBX: 00007ffa79625fa0 RCX: 00007ffa7939e159 [ 105.609623][ T8218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 105.609629][ T8218] RBP: 00007ffa7943503b R08: 0000000000000000 R09: 0000000000000000 [ 105.609635][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.609642][ T8218] R13: 00007ffa79626038 R14: 00007ffa79625fa0 R15: 00007ffd06b1c468 [ 105.609656][ T8218] [ 105.613304][ T43] audit: type=1800 audit(1789099711.079:987): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 105.614261][ T43] audit: type=1400 audit(1789099711.089:988): avc: denied { mac_admin } for pid=8207 comm="syz.5.538" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.616690][ T8219] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.618855][ T43] audit: type=1400 audit(1789099711.089:989): avc: denied { write } for pid=8207 comm="syz.5.538" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.621913][ T43] audit: type=1400 audit(1789099711.089:990): avc: denied { create } for pid=8207 comm="syz.5.538" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 105.622786][ T43] audit: type=1400 audit(1789099711.089:991): avc: denied { write } for pid=8207 comm="syz.5.538" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.820098][ T8234] team0: No ports can be present during mode change [ 105.858709][ T8236] binder: 8235:8236 ioctl 4018620d 0 returned -22 [ 106.008105][ T13] nci: nci_rx_work: unknown MT 0x1 [ 106.468657][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 106.468826][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 107.185598][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.189009][ T8260] netlink: 52 bytes leftover after parsing attributes in process `syz.4.550'. [ 107.189011][ T8261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.550'. [ 107.273630][ T5741] Bluetooth: hci1: command 0x041b tx timeout [ 107.273655][ T5741] Bluetooth: hci2: command 0x041b tx timeout [ 107.427621][ T8273] i2c i2c-1: dtv_property_process_set: SET cmd 0x00001880 undefined [ 107.490955][ T8275] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 107.507841][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.507940][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.546306][ T8272] block nbd2: Cannot add socket to a running device [ 107.548401][ T8275] block nbd2: Cannot add socket to a running device [ 107.548513][ T8278] block nbd2: Cannot add socket to a running device [ 108.218152][ T67] block nbd2: Receive control failed (result -32) [ 108.225007][ T8276] block nbd2: shutting down sockets [ 108.426829][ T8289] xfrm1: entered allmulticast mode [ 108.935472][ T8240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.996950][ T8300] binder_alloc: 8299: binder_alloc_buf, no vma [ 109.028215][ T8302] trusted_key: encrypted_key: insufficient parameters specified [ 109.030875][ T8302] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 109.095059][ T5744] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 109.171616][ T8326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.171672][ T8327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.209978][ T8328] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.567'. [ 109.278131][ T8332] syz.4.568 (8332): /proc/8324/oom_adj is deprecated, please use /proc/8324/oom_score_adj instead. [ 109.322393][ T8332] can0: slcan on ttynull. [ 109.334595][ T8336] netlink: 64 bytes leftover after parsing attributes in process `syz.5.571'. [ 109.348742][ T8336] hfs: can't find a HFS filesystem on dev sr0 [ 109.353275][ T5741] Bluetooth: hci1: command 0x041b tx timeout [ 109.353330][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 109.394721][ T8336] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 109.485771][ T8344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.572'. [ 109.704492][ T8352] 9p: Bad value for 'rfdno' [ 109.758041][ T8356] binder: 8354:8356 ioctl c0d05605 200000000140 returned -22 [ 110.545974][ T43] kauditd_printk_skb: 80 callbacks suppressed [ 110.545990][ T43] audit: type=1800 audit(1789099716.019:1072): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 110.563593][ T8324] can0 (unregistered): slcan off ttynull. [ 110.571796][ T43] audit: type=1800 audit(1789099716.039:1073): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 110.588026][ T43] audit: type=1400 audit(1789099716.059:1074): avc: denied { write } for pid=8381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.596584][ T43] audit: type=1800 audit(1789099716.069:1075): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 110.656345][ T43] audit: type=1800 audit(1789099716.129:1076): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 110.674745][ T43] audit: type=1800 audit(1789099716.149:1077): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146114 res=0 errno=0 [ 110.679590][ T43] audit: type=1800 audit(1789099716.149:1078): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146124 res=0 errno=0 [ 110.680467][ T43] audit: type=1400 audit(1789099716.149:1079): avc: denied { read } for pid=8386 comm="syz.4.580" dev="nsfs" ino=4026533297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.682759][ T43] audit: type=1400 audit(1789099716.149:1080): avc: denied { open } for pid=8386 comm="syz.4.580" path="net:[4026533297]" dev="nsfs" ino=4026533297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.686673][ T43] audit: type=1400 audit(1789099716.159:1081): avc: denied { mount } for pid=8390 comm="syz.5.581" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.742562][ T5806] nci: nci_rx_work: unknown MT 0x1 [ 110.775051][ T8403] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 110.795903][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 110.870037][ T38] IPVS: starting estimator thread 0... [ 110.938267][ T8422] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.938282][ T8423] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.938549][ T8422] netlink: 'syz.6.587': attribute type 1 has an invalid length. [ 110.950649][ T8422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.964330][ T8418] IPVS: using max 43 ests per chain, 103200 per kthread [ 111.067130][ T8427] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 111.069528][ T8427] netlink: 'syz.6.587': attribute type 10 has an invalid length. [ 111.069548][ T8427] netlink: 40 bytes leftover after parsing attributes in process `syz.6.587'. [ 111.070755][ T8427] dummy0: entered promiscuous mode [ 111.073014][ T8427] bond1: (slave dummy0): Releasing backup interface [ 111.379907][ T8434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8434 comm=syz.2.590 [ 111.380062][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 111.380903][ T8434] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 111.433560][ T5741] Bluetooth: hci1: command 0x041b tx timeout [ 111.433604][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 111.627676][ T8440] cgroup: fork rejected by pids controller in /syz2 [ 113.624871][ T8389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.713048][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713112][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713166][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713322][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713382][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713441][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713503][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713574][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713643][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713709][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713776][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713846][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.713926][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714001][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714072][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714139][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714203][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714299][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714369][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714437][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714510][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714582][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714647][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714710][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714779][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714849][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714928][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.714996][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.715064][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.715144][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.715216][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727559][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727643][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727718][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727793][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727870][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.727953][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728031][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728107][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728183][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728258][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728337][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728412][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728484][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728573][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728647][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728719][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728794][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728867][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.728956][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729028][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729091][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729157][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729214][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729272][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729327][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729381][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729438][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729496][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729552][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.729610][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.738723][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.738811][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.738885][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.738965][ T8549] binder: 8548:8549 ioctl 4018620d 0 returned -22 [ 113.742717][ T8557] usb usb8: usbfs: process 8557 (syz.5.595) did not claim interface 0 before use [ 113.895112][ T8578] netlink: 'syz.6.600': attribute type 12 has an invalid length. [ 113.913388][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.913426][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.913457][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.913492][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.101417][ T8590] netlink: 'syz.5.604': attribute type 8 has an invalid length. [ 114.146846][ T8594] program syz.5.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.157937][ T8595] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 114.158909][ T8595] bond1 (unregistering): Released all slaves [ 114.252833][ T8603] FAULT_INJECTION: forcing a failure. [ 114.252833][ T8603] name failslab, interval 1, probability 0, space 0, times 0 [ 114.252866][ T8603] CPU: 2 UID: 0 PID: 8603 Comm: syz.6.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.252890][ T8603] Tainted: [L]=SOFTLOCKUP [ 114.252896][ T8603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.252906][ T8603] Call Trace: [ 114.252913][ T8603] [ 114.252920][ T8603] dump_stack_lvl+0x100/0x190 [ 114.252949][ T8603] should_fail_ex.cold+0x5/0xa [ 114.252976][ T8603] should_failslab+0xc2/0x120 [ 114.252999][ T8603] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.253026][ T8603] ? ceph_alloc_options+0xb6/0x310 [ 114.253044][ T8603] ? ceph_init_fs_context+0xc8/0x530 [ 114.253073][ T8603] ceph_init_fs_context+0xc8/0x530 [ 114.253102][ T8603] alloc_fs_context+0x60c/0xf40 [ 114.253132][ T8603] __x64_sys_fsopen+0xed/0x220 [ 114.253150][ T8603] do_syscall_64+0x123/0x790 [ 114.253173][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.253217][ T8603] RIP: 0033:0x7f9c7119e159 [ 114.253234][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.253252][ T8603] RSP: 002b:00007f9c6f3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 114.253272][ T8603] RAX: ffffffffffffffda RBX: 00007f9c71425fa0 RCX: 00007f9c7119e159 [ 114.253285][ T8603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 114.253296][ T8603] RBP: 00007f9c7123503b R08: 0000000000000000 R09: 0000000000000000 [ 114.253307][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.253318][ T8603] R13: 00007f9c71426038 R14: 00007f9c71425fa0 R15: 00007fffe46f5c48 [ 114.253345][ T8603] [ 114.501655][ T8612] netlink: 108 bytes leftover after parsing attributes in process `syz.2.611'. [ 114.502069][ T8613] netlink: 108 bytes leftover after parsing attributes in process `syz.2.611'. [ 114.993675][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.617'. [ 115.174536][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.618'. [ 115.448201][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.615'. [ 115.546618][ T8649] could not open pipe file descriptor [ 115.547372][ T8649] program syz.6.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.569642][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 115.577625][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 115.577636][ T43] audit: type=1800 audit(1789099721.049:1172): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 115.606174][ T43] audit: type=1800 audit(1789099721.079:1173): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.622" name="add_local_port" dev="sysfs" ino=23017 res=0 errno=0 [ 115.608905][ T43] audit: type=1800 audit(1789099721.079:1174): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.622" name="add_remote_port" dev="sysfs" ino=23019 res=0 errno=0 [ 115.627607][ T43] audit: type=1800 audit(1789099721.089:1175): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 115.671955][ T43] audit: type=1800 audit(1789099721.139:1176): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 115.713863][ T8657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=8657 comm=syz.6.625 [ 115.788784][ T43] audit: type=1800 audit(1789099721.259:1177): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 115.843693][ T43] audit: type=1800 audit(1789099721.319:1178): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 115.865750][ T43] audit: type=1800 audit(1789099721.339:1179): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147960 res=0 errno=0 [ 116.032652][ T43] audit: type=1800 audit(1789099721.499:1180): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 116.062804][ T43] audit: type=1800 audit(1789099721.529:1181): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 116.187059][ T8677] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 116.187195][ T8677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.631'. [ 116.270167][ T8685] 9pnet_fd: p9_fd_create_unix (8685): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.319621][ T8689] jffs2: notice: (8689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 116.552945][ T8719] /dev/nullb0: Can't open blockdev [ 116.790076][ T8741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.980364][ T8766] SELinux: failed to load policy [ 117.140666][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.656'. [ 117.297508][ T8795] xt_ecn: cannot match TCP bits for non-tcp packets [ 117.506358][ T8809] befs: (nbd2): No write support. Marking filesystem read-only [ 117.507633][ T8809] befs: (nbd2): unable to read superblock [ 117.568748][ T8815] bridge_slave_0: left allmulticast mode [ 117.568773][ T8815] bridge_slave_0: left promiscuous mode [ 117.569049][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.572697][ T8815] bridge_slave_1: left allmulticast mode [ 117.572717][ T8815] bridge_slave_1: left promiscuous mode [ 117.572879][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.587065][ T5744] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.588025][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.591840][ T8815] bond0: (slave bond_slave_0): Releasing backup interface [ 117.602404][ T8815] bond0: (slave bond_slave_1): Releasing backup interface [ 117.613565][ T8815] team0: Port device team_slave_0 removed [ 117.618143][ T8815] team0: Port device team_slave_1 removed [ 117.618590][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.618605][ T8815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.619573][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.619583][ T8815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.620581][ T8815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.631335][ T8818] team0: Mode changed to "loadbalance" [ 117.647090][ T8817] bond1: Removing last ns target with arp_interval on [ 117.664724][ T8817] overlayfs: statfs failed on './file0' [ 117.716458][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 117.761632][ T8826] xt_hashlimit: size too large, truncated to 1048576 [ 117.769534][ T8828] 9p: Invalid gid '0x00000000ffffffff' [ 117.992919][ T8837] fuse: Bad value for 'fd' [ 118.083761][ T8791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.083883][ T8791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.083968][ T8791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.155866][ T8841] vcan0: tx address claim with broadcast sa [ 118.157762][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.676'. [ 118.229456][ T12] nci: nci_rx_work: unknown MT 0x1 [ 118.333602][ T2086] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 118.363089][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.404107][ T5835] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.470051][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.493806][ T2086] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.496893][ T2086] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.496919][ T2086] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.496937][ T2086] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.496968][ T2086] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.500352][ T2086] usb 11-1: config 0 descriptor?? [ 118.535480][ T5835] usb 9-1: device descriptor read/64, error -71 [ 118.553559][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.557083][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.573350][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.576144][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.576606][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.577474][ T12] team0: Port device netdevsim1 removed [ 118.580176][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.706934][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.770441][ T8859] ./file0: Can't lookup blockdev [ 118.773330][ T5835] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 118.877136][ T12] bridge_slave_1: left promiscuous mode [ 118.877401][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.882244][ T12] bridge_slave_0: left allmulticast mode [ 118.882264][ T12] bridge_slave_0: left promiscuous mode [ 118.883151][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.903329][ T5835] usb 9-1: device descriptor read/64, error -71 [ 119.011112][ T2086] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 119.017918][ T5835] usb usb9-port1: attempt power cycle [ 119.030173][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.032986][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.042530][ T12] bond0 (unregistering): Released all slaves [ 119.045678][ T12] bond1 (unregistering): Released all slaves [ 119.301808][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.301856][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.301918][ T8850] bridge_slave_0: entered allmulticast mode [ 119.302752][ T8850] bridge_slave_0: entered promiscuous mode [ 119.306130][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.306227][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.306324][ T8850] bridge_slave_1: entered allmulticast mode [ 119.307838][ T8850] bridge_slave_1: entered promiscuous mode [ 119.322327][ T12] hsr_slave_0: left promiscuous mode [ 119.324453][ T12] hsr_slave_1: left promiscuous mode [ 119.325949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.325966][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.328651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.328668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.334248][ T12] veth1_macvtap: left promiscuous mode [ 119.334374][ T12] veth1_vlan: left promiscuous mode [ 119.334423][ T12] veth0_vlan: left promiscuous mode [ 119.343444][ T5744] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.353604][ T5835] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 119.376642][ T5835] usb 9-1: device descriptor read/8, error -71 [ 119.521988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.529473][ T12] team0 (unregistering): Port device team_slave_0 removed [ 119.611772][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.614515][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.623329][ T5835] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 119.639264][ T8850] team0: Port device team_slave_0 added [ 119.641348][ T8850] team0: Port device team_slave_1 added [ 119.649991][ T5835] usb 9-1: device descriptor read/8, error -71 [ 119.664370][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.664384][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.664455][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.665879][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.665892][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.665913][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.702169][ T8850] hsr_slave_0: entered promiscuous mode [ 119.702978][ T8850] hsr_slave_1: entered promiscuous mode [ 119.703574][ T8850] debugfs: 'hsr0' already exists in 'hsr' [ 119.703592][ T8850] Cannot create hsr debugfs directory [ 119.755224][ T5835] usb usb9-port1: unable to enumerate USB device [ 120.143403][ T5741] Bluetooth: hci1: command 0x041b tx timeout [ 120.143437][ T5744] Bluetooth: hci2: command 0x041b tx timeout [ 120.623409][ T5744] Bluetooth: hci0: command tx timeout [ 120.935663][ T10] usb 11-1: USB disconnect, device number 2 [ 120.959666][ T43] kauditd_printk_skb: 148 callbacks suppressed [ 120.959683][ T43] audit: type=1800 audit(1789099726.429:1330): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 121.034131][ T43] audit: type=1800 audit(1789099726.509:1331): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 121.074563][ T43] audit: type=1800 audit(1789099726.539:1332): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 121.098904][ T43] audit: type=1800 audit(1789099726.569:1333): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 121.151580][ T8843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.154396][ T8850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 121.160481][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.162266][ T8850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 121.172521][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.174664][ T8850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 121.186441][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.187227][ T8850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 121.203765][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.204408][ T43] audit: type=1800 audit(1789099726.669:1334): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.220402][ T43] audit: type=1800 audit(1789099726.689:1335): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 121.220936][ T8889] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 121.262955][ T43] audit: type=1804 audit(1789099726.729:1336): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.685" name="/newroot/dev/kvm" dev="devtmpfs" ino=2920 res=1 errno=0 [ 121.263977][ T43] audit: type=1800 audit(1789099726.739:1337): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 121.268939][ T8904] jffs2: notice: (8904) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 121.274659][ T43] audit: type=1400 audit(1789099726.739:1338): avc: denied { write } for pid=8903 comm="syz.6.685" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.280000][ T43] audit: type=1400 audit(1789099726.749:1339): avc: denied { ioctl } for pid=8903 comm="syz.6.685" path="/61/mnt/fillfile" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.285149][ T8889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.307792][ T8889] bond1: (slave bond2): making interface the new active one [ 121.309971][ T8889] bond1: (slave bond2): Enslaving as an active interface with an up link [ 121.360583][ T8910] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 121.376240][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.387705][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.390833][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.390919][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.390996][ T8910] __nla_validate_parse: 2 callbacks suppressed [ 121.391011][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'. [ 121.394035][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.394078][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.408661][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 121.462224][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 121.463128][ T8919] futex_wake_op: syz.4.689 tries to shift op by 144; fix this program [ 121.463434][ T8919] futex_wake_op: syz.4.689 tries to shift op by 144; fix this program [ 121.524025][ T25] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 121.596756][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15 [ 121.639807][ T8936] md: md0 stopped. [ 121.684263][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 121.684983][ T25] usb 11-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.40 [ 121.686719][ T25] usb 11-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 206, changing to 11 [ 121.686741][ T25] usb 11-1: config 1 interface 0 has no altsetting 0 [ 121.691697][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.691716][ T25] usb 11-1: Product: 佘蹋초摕㮛〸ᨚᔂ沐詊杋鏜퀡ㅑ㋌ྸ陹핗赞⦪苗鱕䱍㓮伆脯ⱓ콌첷雱ꗬၩ꜈ᡰ菎量ㅖ柄䃕佻䡋뢥惚獤쓜띠쌼퍩紳꡿汁쮎跷㞙㸙꺱Ꞧ㵑뫔⑧ƾ휜修잔 [ 121.691736][ T25] usb 11-1: Manufacturer: Ъ [ 121.691747][ T25] usb 11-1: SerialNumber: щ [ 121.700890][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.742616][ T8946] trusted_key: encrypted_key: insufficient parameters specified [ 121.837403][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 121.883866][ T8850] veth0_vlan: entered promiscuous mode [ 121.888276][ T8850] veth1_vlan: entered promiscuous mode [ 121.906123][ T8850] veth0_macvtap: entered promiscuous mode [ 121.909583][ T8850] veth1_macvtap: entered promiscuous mode [ 121.923284][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.930390][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.954214][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.954416][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.954569][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.954588][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.289531][ T25] usbhid 11-1:1.0: can't add hid device: -71 [ 122.289581][ T25] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 122.290940][ T25] usb 11-1: USB disconnect, device number 3 [ 122.703819][ T5744] Bluetooth: hci0: command tx timeout [ 122.918927][ T8978] 9p: p9: multiple sources not supported [ 124.769623][ T8950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.794693][ T5744] Bluetooth: hci0: command tx timeout [ 124.798817][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.798837][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.839440][ T8986] FAULT_INJECTION: forcing a failure. [ 124.839440][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 124.839462][ T8986] CPU: 2 UID: 0 PID: 8986 Comm: syz.4.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.839477][ T8986] Tainted: [L]=SOFTLOCKUP [ 124.839481][ T8986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.839487][ T8986] Call Trace: [ 124.839492][ T8986] [ 124.839496][ T8986] dump_stack_lvl+0x100/0x190 [ 124.839517][ T8986] should_fail_ex.cold+0x5/0xa [ 124.839533][ T8986] should_failslab+0xc2/0x120 [ 124.839550][ T8986] __kmalloc_noprof+0xfc/0x840 [ 124.839563][ T8986] ? lsm_blob_alloc+0x68/0x90 [ 124.839580][ T8986] lsm_blob_alloc+0x68/0x90 [ 124.839594][ T8986] security_bpf_map_create+0x31/0x2d0 [ 124.839607][ T8986] map_create+0x143a/0x30d0 [ 124.839623][ T8986] ? find_held_lock+0x2b/0x80 [ 124.839638][ T8986] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 124.839652][ T8986] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 124.839670][ T8986] ? __pfx_map_create+0x10/0x10 [ 124.839685][ T8986] ? avc_has_perm+0x135/0x1e0 [ 124.839699][ T8986] ? __pfx_avc_has_perm+0x10/0x10 [ 124.839713][ T8986] ? __might_fault+0xc5/0x140 [ 124.839729][ T8986] ? __might_fault+0xc5/0x140 [ 124.839747][ T8986] ? selinux_bpf+0xfb/0x150 [ 124.839773][ T8986] __sys_bpf+0x12a0/0x4a30 [ 124.839790][ T8986] ? __pfx___sys_bpf+0x10/0x10 [ 124.839800][ T8986] ? find_held_lock+0x2b/0x80 [ 124.839816][ T8986] ? futex_wake+0x4ea/0x5e0 [ 124.839842][ T8986] ? rcu_read_lock_any_held+0x6a/0x90 [ 124.839859][ T8986] ? find_held_lock+0x2b/0x80 [ 124.839874][ T8986] ? ksys_write+0x190/0x250 [ 124.839884][ T8986] ? ksys_write+0x190/0x250 [ 124.839902][ T8986] ? __x64_sys_futex+0x34f/0x4d0 [ 124.839915][ T8986] ? __x64_sys_futex+0x358/0x4d0 [ 124.839931][ T8986] ? xfd_validate_state+0x129/0x190 [ 124.839946][ T8986] ? __x64_sys_bpf+0xce/0x140 [ 124.839955][ T8986] __x64_sys_bpf+0xce/0x140 [ 124.839966][ T8986] ? do_syscall_64+0xae/0x790 [ 124.839981][ T8986] do_syscall_64+0x123/0x790 [ 124.839996][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.840007][ T8986] RIP: 0033:0x7f19f459e159 [ 124.840017][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.840027][ T8986] RSP: 002b:00007f19f53ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.840038][ T8986] RAX: ffffffffffffffda RBX: 00007f19f4825fa0 RCX: 00007f19f459e159 [ 124.840046][ T8986] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 124.840054][ T8986] RBP: 00007f19f463503b R08: 0000000000000000 R09: 0000000000000000 [ 124.840060][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.840067][ T8986] R13: 00007f19f4826038 R14: 00007f19f4825fa0 R15: 00007ffc78226658 [ 124.840082][ T8986] [ 124.865393][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.865411][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.886836][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.899080][ T8991] Bluetooth: MGMT ver 1.23 [ 124.990964][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 125.059199][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.7.706'. [ 125.059872][ T9015] netlink: 'syz.7.706': attribute type 1 has an invalid length. [ 125.062932][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=77 sclass=netlink_route_socket pid=9015 comm=syz.7.706 [ 125.147986][ T9025] netlink: 'syz.7.709': attribute type 12 has an invalid length. [ 125.197136][ T9030] random: crng reseeded on system resumption [ 125.201157][ T9030] Restarting kernel threads ... [ 125.201527][ T9030] Done restarting kernel threads. [ 125.208124][ T9030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9030 comm=syz.4.711 [ 125.279438][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 125.279907][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9038 comm=syz.4.713 [ 125.515745][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.719'. [ 125.967142][ T9106] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.983906][ T43] kauditd_printk_skb: 91 callbacks suppressed [ 125.983918][ T43] audit: type=1800 audit(1789099731.459:1431): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.019580][ T43] audit: type=1800 audit(1789099731.489:1432): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 126.098550][ T43] audit: type=1800 audit(1789099731.569:1433): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 126.150997][ T43] audit: type=1800 audit(1789099731.619:1434): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 126.186506][ T43] audit: type=1800 audit(1789099731.659:1435): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.731" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="tmpfs" ino=297 res=0 errno=0 [ 126.229334][ T43] audit: type=1800 audit(1789099731.699:1436): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 126.405971][ T43] audit: type=1800 audit(1789099731.879:1437): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 126.449249][ T43] audit: type=1800 audit(1789099731.919:1438): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 126.471971][ T9123] FAULT_INJECTION: forcing a failure. [ 126.471971][ T9123] name fail_futex, interval 1, probability 0, space 0, times 1 [ 126.471994][ T9123] CPU: 2 UID: 0 PID: 9123 Comm: syz.6.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.472011][ T9123] Tainted: [L]=SOFTLOCKUP [ 126.472016][ T9123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.472023][ T9123] Call Trace: [ 126.472027][ T9123] [ 126.472032][ T9123] dump_stack_lvl+0x100/0x190 [ 126.472070][ T9123] should_fail_ex.cold+0x5/0xa [ 126.472088][ T9123] get_futex_key+0x1d0/0x14f0 [ 126.472105][ T9123] ? __pfx_get_futex_key+0x10/0x10 [ 126.472123][ T9123] futex_wake+0xf4/0x5e0 [ 126.472142][ T9123] ? __pfx_futex_wake+0x10/0x10 [ 126.472158][ T9123] ? kasan_quarantine_put+0x104/0x240 [ 126.472173][ T9123] ? putname+0xb1/0x110 [ 126.472187][ T9123] ? kmem_cache_free+0x127/0x6c0 [ 126.472207][ T9123] do_futex+0x2b2/0x440 [ 126.472222][ T9123] ? __pfx_do_futex+0x10/0x10 [ 126.472236][ T9123] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.472251][ T9123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.472269][ T9123] __x64_sys_futex+0x34f/0x4d0 [ 126.472284][ T9123] ? __x64_sys_openat+0x12d/0x210 [ 126.472299][ T9123] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.472321][ T9123] do_syscall_64+0x123/0x790 [ 126.472337][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.472348][ T9123] RIP: 0033:0x7f9c7119e159 [ 126.472358][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.472368][ T9123] RSP: 002b:00007f9c6f3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.472379][ T9123] RAX: ffffffffffffffda RBX: 00007f9c71425fa8 RCX: 00007f9c7119e159 [ 126.472386][ T9123] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c71425fac [ 126.472392][ T9123] RBP: 00007f9c71425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 126.472399][ T9123] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 126.472405][ T9123] R13: 00007f9c71426038 R14: 00007fffe46f5b60 R15: 00007fffe46f5c48 [ 126.472420][ T9123] [ 126.523275][ T8175] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 126.523967][ T43] audit: type=1800 audit(1789099731.999:1439): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.734" name="d3cold_allowed" dev="sysfs" ino=2368 res=0 errno=0 [ 126.591545][ T43] audit: type=1800 audit(1789099732.059:1440): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 126.626854][ T9126] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 126.680120][ T5101] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5cab835f-0270-4ffe-9133-ba4bb86cbbe0. [ 126.693709][ T8175] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 126.694582][ T8175] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 126.694595][ T8175] usb 10-1: config 0 has no interface number 0 [ 126.694613][ T8175] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.696199][ T8175] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.696212][ T8175] usb 10-1: Product: syz [ 126.696219][ T8175] usb 10-1: Manufacturer: syz [ 126.696226][ T8175] usb 10-1: SerialNumber: syz [ 126.698234][ T8175] usb 10-1: config 0 descriptor?? [ 126.708819][ T9126] nvme nvme0: creating 4 I/O queues. [ 126.717697][ T8175] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 126.752479][ T9126] nvme nvme0: mapped 4/0/0 default/read/poll queues. [ 126.800705][ T9126] nvme nvme0: new ctrl: NQN "testsubsys", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:5cab835f-0270-4ffe-9133-ba4bb86cbbe0 [ 126.806091][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806162][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806243][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806299][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806357][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806415][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806473][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806531][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806590][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806647][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806703][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806858][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806918][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.806974][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807031][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807088][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807146][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807202][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807258][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807314][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807371][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807428][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807484][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807549][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807609][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807667][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807724][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807789][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807920][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.807978][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808044][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808103][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808161][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808217][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808277][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808335][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808394][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808450][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808506][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808563][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808620][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808677][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808734][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808798][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808855][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.808913][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809455][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809517][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809575][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809632][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809690][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809751][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809812][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809869][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809926][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.809983][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810039][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810096][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810153][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810236][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810295][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.810352][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.821658][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.821766][ T9130] snd_dummy snd_dummy.0: control 1:16128:-8:syz1:8 is already present [ 126.866614][ T9135] gfs2: Unknown parameter 'u' [ 126.873725][ T5744] Bluetooth: hci0: command tx timeout [ 126.901427][ T5744] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 127.004171][ T9144] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 127.022698][ T9144] input: syz0 as /devices/virtual/input/input13 [ 127.135527][ T5876] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 127.251184][ T9160] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.743'. [ 127.251718][ T9156] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.743'. [ 127.252043][ T9157] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.743'. [ 127.293313][ T5876] usb 12-1: Using ep0 maxpacket: 16 [ 127.295719][ T5876] usb 12-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 127.298039][ T5876] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.298052][ T5876] usb 12-1: Product: syz [ 127.298059][ T5876] usb 12-1: Manufacturer: syz [ 127.298066][ T5876] usb 12-1: SerialNumber: syz [ 127.299538][ T5876] usb 12-1: rejected 1 configuration due to insufficient available bus power [ 127.299551][ T5876] usb 12-1: no configuration chosen from 1 choice [ 127.493274][ T50] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 127.611808][ T9181] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.612646][ T9181] CIFS: Attempting to mount //127.0.0.1/test [ 127.644445][ T50] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 127.645261][ T50] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.645284][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.650569][ T50] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 127.650712][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 127.650742][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 127.651626][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 127.651700][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 127.656009][ T50] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 127.658391][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 127.658426][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 127.659532][ T50] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 127.854241][ T5814] usb 11-1: USB disconnect, device number 4 [ 127.871687][ T5814] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 127.881259][ T5814] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 127.881760][ T5814] keyspan 11-1:1.0: device disconnected [ 128.446602][ T9181] CIFS: VFS: cifs_mount failed w/return code = -112 [ 128.733289][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 128.734859][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.750'. [ 128.883293][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 128.883813][ T35] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 128.884617][ T35] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 128.884635][ T35] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 128.884655][ T35] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 128.884670][ T35] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 128.884683][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 128.886508][ T35] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 128.886520][ T35] usb 9-1: Product: syz [ 128.886527][ T35] usb 9-1: Manufacturer: syz [ 128.886534][ T35] usb 9-1: SerialNumber: syz [ 128.887804][ T35] usb 9-1: config 0 descriptor?? [ 128.889823][ T35] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 128.891875][ T35] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 128.955270][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 128.962697][ T25] usb 10-1: USB disconnect, device number 3 [ 128.967017][ T25] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 129.094182][ T35] usb 9-1: USB disconnect, device number 8 [ 129.100334][ T35] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 129.185357][ T1350] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 129.185374][ T1350] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 129.193246][ C1] ------------[ cut here ]------------ [ 129.193256][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 129.193272][ C1] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#1: syz.6.750/9210 [ 129.204283][ C1] Modules linked in: [ 129.205567][ C1] CPU: 1 UID: 0 PID: 9210 Comm: syz.6.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.208787][ C1] Tainted: [L]=SOFTLOCKUP [ 129.210820][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.213881][ C1] RIP: 0010:__queue_work+0xdbb/0x1370 [ 129.215567][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 67 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 129.221419][ C1] RSP: 0018:ffffc900006b0b68 EFLAGS: 00010046 [ 129.223315][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff110067e914e [ 129.225817][ C1] RDX: ffff88802759a970 RSI: ffffffff8ac2a110 RDI: ffffffff914808f0 [ 129.228311][ C1] RBP: ffff888033f48a58 R08: 0000000000000007 R09: 0000000000000000 [ 129.230805][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802759a800 [ 129.233282][ C1] R13: 1ffff920000d6177 R14: 0000000000000000 R15: ffffffff81d0a6f0 [ 129.235784][ C1] FS: 0000000000000000(0000) GS:ffff8880d5c5c000(0000) knlGS:0000000000000000 [ 129.238626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.240703][ C1] CR2: 00007f9c715524c0 CR3: 000000000eb96000 CR4: 0000000000352ef0 [ 129.243218][ C1] Call Trace: [ 129.244282][ C1] [ 129.245210][ C1] ? lock_acquire+0x1d1/0x380 [ 129.246741][ C1] ? call_timer_fn+0x11d/0x5f0 [ 129.248263][ C1] ? __pfx___queue_work+0x10/0x10 [ 129.249869][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.251708][ C1] call_timer_fn+0x198/0x5f0 [ 129.253343][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 129.255009][ C1] ? lock_acquire+0x1d1/0x380 [ 129.256497][ C1] ? __run_timers+0x560/0xb00 [ 129.257926][ C1] ? __run_timers+0x560/0xb00 [ 129.259370][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.261126][ C1] __run_timers+0x570/0xb00 [ 129.262535][ C1] ? __pfx___run_timers+0x10/0x10 [ 129.264077][ C1] ? clockevents_program_event+0x1bf/0x820 [ 129.265864][ C1] ? lock_acquire+0x1d1/0x380 [ 129.267313][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 129.268864][ C1] run_timer_base+0x114/0x190 [ 129.270303][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 129.271892][ C1] run_timer_softirq+0x1a/0x50 [ 129.273366][ C1] handle_softirqs+0x1e6/0x9d0 [ 129.274870][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.276538][ C1] ? _raw_spin_unlock+0x28/0x50 [ 129.278077][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 129.279846][ C1] __irq_exit_rcu+0x16a/0x210 [ 129.281336][ C1] irq_exit_rcu+0x9/0x30 [ 129.282693][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 129.284446][ C1] [ 129.285393][ C1] [ 129.286379][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.288275][ C1] RIP: 0010:lock_release+0x8b/0x310 [ 129.289930][ C1] Code: 00 00 65 4c 8b 25 ad f1 a4 12 41 8b b4 24 a4 0b 00 00 85 f6 0f 85 23 01 00 00 48 81 3b 40 09 91 94 0f 84 16 01 00 00 9c 41 5e 48 c7 c7 97 53 4e 8e e8 88 3b e9 09 65 ff 05 39 38 a5 12 8b 0d [ 129.295967][ C1] RSP: 0018:ffffc90003fc7450 EFLAGS: 00000202 [ 129.297872][ C1] RAX: 0000000000000000 RBX: ffffffff8edec420 RCX: 0000000000000000 [ 129.300360][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 129.302856][ C1] RBP: ffffffff8287cde7 R08: 0000000000000000 R09: fffffbfff228a44b [ 129.305332][ C1] R10: ffffffff9145225f R11: 0000000000000001 R12: ffff88802f85cb00 [ 129.307841][ C1] R13: 0000000000000012 R14: 0000000000000202 R15: ffffea0001780ef0 [ 129.310318][ C1] ? rcu_read_unlock+0x17/0x60 [ 129.311853][ C1] rcu_read_unlock+0x1c/0x60 [ 129.313330][ C1] lruvec_stat_mod_folio+0x251/0x2e0 [ 129.315020][ C1] folio_remove_rmap_ptes+0x79a/0xdd0 [ 129.316732][ C1] __zap_vma_range+0x1fe7/0x48e0 [ 129.318336][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 129.320000][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 129.321729][ C1] ? lock_acquire+0x1d1/0x380 [ 129.323234][ C1] ? unmap_vmas+0x1ca/0x5f0 [ 129.324680][ C1] ? find_held_lock+0x2b/0x80 [ 129.326212][ C1] ? unmap_vmas+0x239/0x5f0 [ 129.327659][ C1] unmap_vmas+0x299/0x5f0 [ 129.329044][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 129.330596][ C1] ? mas_next_slot+0xc05/0x13a0 [ 129.332147][ C1] exit_mmap+0x1ef/0xa00 [ 129.333497][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 129.335019][ C1] ? rcu_is_watching+0x13/0xc0 [ 129.336556][ C1] ? find_held_lock+0x2b/0x80 [ 129.338055][ C1] ? uprobe_clear_state+0x5f/0x250 [ 129.339682][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 129.341478][ C1] __mmput+0x12a/0x410 [ 129.342787][ C1] mmput+0x67/0x80 [ 129.343974][ C1] do_exit+0x8b1/0x2ae0 [ 129.345288][ C1] ? __pfx_map_id_range_up+0x10/0x10 [ 129.346987][ C1] ? __pfx_do_exit+0x10/0x10 [ 129.348461][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 129.350354][ C1] do_group_exit+0xd5/0x2a0 [ 129.351789][ C1] get_signal+0x1ec7/0x21e0 [ 129.353236][ C1] ? __pfx_get_signal+0x10/0x10 [ 129.354777][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 129.356503][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 129.358258][ C1] ? get_timespec64+0x147/0x240 [ 129.359799][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.361751][ C1] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 129.363606][ C1] exit_to_user_mode_loop+0x139/0x700 [ 129.365296][ C1] ? rcu_is_watching+0x13/0xc0 [ 129.366842][ C1] do_syscall_64+0x661/0x790 [ 129.368304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.370167][ C1] RIP: 0033:0x0 [ 129.371282][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 129.373566][ C1] RSP: 002b:00007f9c6f3f5f58 EFLAGS: 00000346 ORIG_RAX: 0000000000000000 [ 129.376205][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.378710][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.381181][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.383672][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 129.386188][ C1] R13: 0000000000000000 R14: 007963696c6f702f R15: 78756e696c65732f [ 129.388676][ C1] [ 129.389680][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.391978][ C1] CPU: 1 UID: 0 PID: 9210 Comm: syz.6.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.395302][ C1] Tainted: [L]=SOFTLOCKUP [ 129.396693][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.399845][ C1] Call Trace: [ 129.400919][ C1] [ 129.401860][ C1] dump_stack_lvl+0x100/0x190 [ 129.403324][ C1] vpanic+0x553/0x970 [ 129.404590][ C1] ? __pfx_vpanic+0x10/0x10 [ 129.406044][ C1] panic+0xd1/0xe0 [ 129.407241][ C1] ? __pfx_panic+0x10/0x10 [ 129.408655][ C1] check_panic_on_warn.cold+0x19/0x34 [ 129.410353][ C1] ? __queue_work+0xdb7/0x1370 [ 129.411868][ C1] __warn.cold+0x191/0x318 [ 129.413255][ C1] __report_bug+0x30f/0x440 [ 129.414665][ C1] ? __queue_work+0xdb7/0x1370 [ 129.416196][ C1] ? __pfx___report_bug+0x10/0x10 [ 129.417780][ C1] ? debug_object_activate+0x343/0x4b0 [ 129.419521][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 129.421190][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 129.423045][ C1] ? debug_object_activate+0x343/0x4b0 [ 129.424750][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.426482][ C1] report_bug_entry+0xe2/0x290 [ 129.428002][ C1] ? __queue_work+0xdbb/0x1370 [ 129.429521][ C1] handle_bug+0x1cd/0x2a0 [ 129.430913][ C1] exc_invalid_op+0x17/0x50 [ 129.432354][ C1] asm_exc_invalid_op+0x1a/0x20 [ 129.433889][ C1] RIP: 0010:__queue_work+0xdbb/0x1370 [ 129.435580][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 67 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 129.441507][ C1] RSP: 0018:ffffc900006b0b68 EFLAGS: 00010046 [ 129.443342][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff110067e914e [ 129.445808][ C1] RDX: ffff88802759a970 RSI: ffffffff8ac2a110 RDI: ffffffff914808f0 [ 129.448288][ C1] RBP: ffff888033f48a58 R08: 0000000000000007 R09: 0000000000000000 [ 129.450755][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802759a800 [ 129.453233][ C1] R13: 1ffff920000d6177 R14: 0000000000000000 R15: ffffffff81d0a6f0 [ 129.455710][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.457557][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 129.459259][ C1] ? __queue_work+0xd89/0x1370 [ 129.460778][ C1] ? lock_acquire+0x1d1/0x380 [ 129.462261][ C1] ? call_timer_fn+0x11d/0x5f0 [ 129.463741][ C1] ? __pfx___queue_work+0x10/0x10 [ 129.465287][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.467163][ C1] call_timer_fn+0x198/0x5f0 [ 129.468635][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 129.470273][ C1] ? lock_acquire+0x1d1/0x380 [ 129.471765][ C1] ? __run_timers+0x560/0xb00 [ 129.473259][ C1] ? __run_timers+0x560/0xb00 [ 129.474768][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 129.476622][ C1] __run_timers+0x570/0xb00 [ 129.478072][ C1] ? __pfx___run_timers+0x10/0x10 [ 129.479676][ C1] ? clockevents_program_event+0x1bf/0x820 [ 129.481530][ C1] ? lock_acquire+0x1d1/0x380 [ 129.483052][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 129.484644][ C1] run_timer_base+0x114/0x190 [ 129.486184][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 129.487848][ C1] run_timer_softirq+0x1a/0x50 [ 129.489365][ C1] handle_softirqs+0x1e6/0x9d0 [ 129.490896][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.492555][ C1] ? _raw_spin_unlock+0x28/0x50 [ 129.494096][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 129.495882][ C1] __irq_exit_rcu+0x16a/0x210 [ 129.497371][ C1] irq_exit_rcu+0x9/0x30 [ 129.498743][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 129.500508][ C1] [ 129.501442][ C1] [ 129.502401][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.504224][ C1] RIP: 0010:lock_release+0x8b/0x310 [ 129.505912][ C1] Code: 00 00 65 4c 8b 25 ad f1 a4 12 41 8b b4 24 a4 0b 00 00 85 f6 0f 85 23 01 00 00 48 81 3b 40 09 91 94 0f 84 16 01 00 00 9c 41 5e 48 c7 c7 97 53 4e 8e e8 88 3b e9 09 65 ff 05 39 38 a5 12 8b 0d [ 129.511912][ C1] RSP: 0018:ffffc90003fc7450 EFLAGS: 00000202 [ 129.513827][ C1] RAX: 0000000000000000 RBX: ffffffff8edec420 RCX: 0000000000000000 [ 129.516330][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 129.518820][ C1] RBP: ffffffff8287cde7 R08: 0000000000000000 R09: fffffbfff228a44b [ 129.521285][ C1] R10: ffffffff9145225f R11: 0000000000000001 R12: ffff88802f85cb00 [ 129.523754][ C1] R13: 0000000000000012 R14: 0000000000000202 R15: ffffea0001780ef0 [ 129.526255][ C1] ? rcu_read_unlock+0x17/0x60 [ 129.527777][ C1] rcu_read_unlock+0x1c/0x60 [ 129.529247][ C1] lruvec_stat_mod_folio+0x251/0x2e0 [ 129.530941][ C1] folio_remove_rmap_ptes+0x79a/0xdd0 [ 129.532639][ C1] __zap_vma_range+0x1fe7/0x48e0 [ 129.534260][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 129.535969][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 129.537688][ C1] ? lock_acquire+0x1d1/0x380 [ 129.539207][ C1] ? unmap_vmas+0x1ca/0x5f0 [ 129.540649][ C1] ? find_held_lock+0x2b/0x80 [ 129.542104][ C1] ? unmap_vmas+0x239/0x5f0 [ 129.543510][ C1] unmap_vmas+0x299/0x5f0 [ 129.544815][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 129.546301][ C1] ? mas_next_slot+0xc05/0x13a0 [ 129.547777][ C1] exit_mmap+0x1ef/0xa00 [ 129.549095][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 129.550553][ C1] ? rcu_is_watching+0x13/0xc0 [ 129.552078][ C1] ? find_held_lock+0x2b/0x80 [ 129.553571][ C1] ? uprobe_clear_state+0x5f/0x250 [ 129.555206][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 129.557013][ C1] __mmput+0x12a/0x410 [ 129.558342][ C1] mmput+0x67/0x80 [ 129.559535][ C1] do_exit+0x8b1/0x2ae0 [ 129.560858][ C1] ? __pfx_map_id_range_up+0x10/0x10 [ 129.562514][ C1] ? __pfx_do_exit+0x10/0x10 [ 129.563979][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 129.565877][ C1] do_group_exit+0xd5/0x2a0 [ 129.567344][ C1] get_signal+0x1ec7/0x21e0 [ 129.568784][ C1] ? __pfx_get_signal+0x10/0x10 [ 129.570333][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 129.572055][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 129.573797][ C1] ? get_timespec64+0x147/0x240 [ 129.575345][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.577300][ C1] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 129.579158][ C1] exit_to_user_mode_loop+0x139/0x700 [ 129.580844][ C1] ? rcu_is_watching+0x13/0xc0 [ 129.582379][ C1] do_syscall_64+0x661/0x790 [ 129.583844][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.585693][ C1] RIP: 0033:0x0 [ 129.586846][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 129.589143][ C1] RSP: 002b:00007f9c6f3f5f58 EFLAGS: 00000346 ORIG_RAX: 0000000000000000 [ 129.591774][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.594254][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.596742][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.599214][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 129.601682][ C1] R13: 0000000000000000 R14: 007963696c6f702f R15: 78756e696c65732f [ 129.604200][ C1] [ 129.605745][ C1] Kernel Offset: disabled [ 129.607135][ C1] Rebooting in 86400 seconds..