last executing test programs: 47.694827763s ago: executing program 3 (id=40): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000100)="660fadf466b8d4000f00d0ea312b2baa030066b898000f00d00f09b8367100000f23d80f21f835800000d00f23f8c4e1fd2bb42500800000260fc7af00000000c4c19dd5080f01f6", 0x48}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0x3}, @any, 0x0, 0x0, 0xff, 0x100, 0x12, 0x3}) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79", @ANYRESDEC=r0], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x5c}}, 0x48090) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r3, @ANYBLOB="010525bd7000fdfbdf2503004001f40f19006c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x75000bb342388016) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0xc, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000240)="6adfae28", 0x4, 0x0) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 46.344625856s ago: executing program 3 (id=49): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 44.964166181s ago: executing program 3 (id=56): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 44.963202974s ago: executing program 3 (id=58): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='e:my_read_msr2 msr/', 0x13) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x12000, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf18000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x96887000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x100, @multicast, 'wg2\x00'}}, 0x1e) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x38f}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x10}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB="561eccfa00c0ada6559d", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) 44.864654126s ago: executing program 3 (id=59): r0 = socket(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) getsockopt$sock_int(r0, 0x1, 0x4d, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x69f86341250393b}, {0xffff, 0xffff}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004854}, 0x44804) 44.564699932s ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x40000, 0x4) r1 = open$dir(&(0x7f0000000200)='./sys/../file0\x00', 0x20000, 0x30) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./sys/devices/system/cpu/smt/control\x00', 0x3) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000007c0)=0x3, 0x4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x7fff, {0x0, 0x0, 0x0, r7, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}]}]}]}}]}, 0x54}}, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0xd, @sliced={0x1ff, [0x0, 0xe, 0x8, 0xad31, 0xfff, 0x6, 0x8001, 0x10, 0x3a, 0x3, 0x5, 0x75, 0xfffd, 0x5, 0xffff, 0x9, 0x7, 0x7, 0x40, 0x3ff, 0x1ff0, 0xfffe, 0x1ff, 0x0, 0x9, 0x768, 0x9fd4, 0x0, 0x0, 0x7, 0xf, 0x7800, 0x91a, 0x2, 0x5, 0xbc, 0xfffb, 0x2, 0x8, 0x4, 0x79e, 0x1, 0x5, 0x1, 0x0, 0xff, 0xb1d4, 0xf], 0xca2}}) write(r2, &(0x7f0000000140)='off\n', 0x4) write(r2, &(0x7f0000000180)='on', 0x2) 44.49612454s ago: executing program 32 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x40000, 0x4) r1 = open$dir(&(0x7f0000000200)='./sys/../file0\x00', 0x20000, 0x30) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./sys/devices/system/cpu/smt/control\x00', 0x3) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000007c0)=0x3, 0x4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b525, 0x7fff, {0x0, 0x0, 0x0, r7, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}]}]}]}}]}, 0x54}}, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0xd, @sliced={0x1ff, [0x0, 0xe, 0x8, 0xad31, 0xfff, 0x6, 0x8001, 0x10, 0x3a, 0x3, 0x5, 0x75, 0xfffd, 0x5, 0xffff, 0x9, 0x7, 0x7, 0x40, 0x3ff, 0x1ff0, 0xfffe, 0x1ff, 0x0, 0x9, 0x768, 0x9fd4, 0x0, 0x0, 0x7, 0xf, 0x7800, 0x91a, 0x2, 0x5, 0xbc, 0xfffb, 0x2, 0x8, 0x4, 0x79e, 0x1, 0x5, 0x1, 0x0, 0xff, 0xb1d4, 0xf], 0xca2}}) write(r2, &(0x7f0000000140)='off\n', 0x4) write(r2, &(0x7f0000000180)='on', 0x2) 37.219664115s ago: executing program 0 (id=130): getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x17c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x64d6e3ae, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xbb5, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x18, @rand_addr=' \x01\x00', 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2000800}, 0x1) (async) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x67}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xdffb3aa0f195a41a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x1, 0x1ff, 0x80, 0x8, 0x800, 0x101, 0x9, 0x8]}]}]}, 0x8c}}, 0x40080) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000005c0), 0x400602, 0x0) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000600)={0x0, 0x29, "ae96881946e5e1dbe40aad4cbeb0bedf307f12e1ecc7107b5db715bf81789559ca48c444c042572f8e"}, &(0x7f0000000640)=0x31) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc2c}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040044) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbc9, 0x43}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x40488c0}, 0x2080) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r7, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x0, 0x5, 0x9, 0x5000, 0x8]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x0, 0xa, 0xfff, 0x8, 0x0, 0x3, 0x1000, 0xd8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1253}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b00)=0x0) bind$nfc_llcp(r1, &(0x7f0000000b40)={0x27, r9, 0x0, 0x6, 0x4, 0x4, "97c8df5613b5cd20b012331af07ecae39eceff066f2d9c8b19698326a4188f0bc07d7400fd3d6c0b3165977f2399ae44c5e80cb94f5aaa3d3f07ca22fb09fd", 0xb}, 0x60) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r7, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x20, 0x34, @random="118a67af9a699d49c179ac81a45ee4407cf0571368c0315ac6792196"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f3aa7043b8a8c55595697abd200d7e4d"}]}, 0x68}}, 0x48880) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1) (async, rerun: 64) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000d40)={@empty, @local}, 0x8) (rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa8, r6, 0x4, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x20) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000f00)={0xe, {{0xa, 0x4e24, 0x101, @mcast1, 0x6}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x3ff, @mcast1, 0x7a}}, {{0xa, 0x4e22, 0x6, @local, 0x10000}}, {{0xa, 0x4e22, 0x8, @mcast2, 0x8}}, {{0xa, 0x4e20, 0x3, @mcast1, 0x7}}, {{0xa, 0x4e21, 0xffff9d05, @private1, 0x8e7a}}, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x2766, @loopback, 0x3}}, {{0xa, 0x4e23, 0xc6a2, @empty}}]}, 0x510) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001440)={r5, 0x2228}, 0x8) (async, rerun: 64) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001480), &(0x7f00000014c0)=0xc) (rerun: 64) 37.124439116s ago: executing program 0 (id=133): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) setns(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x6f}, 0x94) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = syz_open_procfs(r3, &(0x7f0000000100)='smaps\x00') fchdir(r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000340)="2438e82f", &(0x7f0000000380)=@tcp6=r6}, 0x20) creat(&(0x7f0000000040)='./bus\x00', 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20000000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0xa, 0xbffffff8) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES64=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 37.075815523s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000022480)={0x3a, 0x2e000000, 0x0, {0x3, 0x0, 0x7, 0x5}}, 0x20) r2 = getpgid(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xa, 0x4cc, 0x5c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x100, 0x7, 0x7fef3c82, 0x5}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r3, 0x25, 0x18, @val=@uprobe_multi={&(0x7f0000000500)='./config/file0\x00', &(0x7f0000000480)=[0x7fffffff, 0xc], 0x0, 0x7, 0x2, 0x0, r2}}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x204080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r4, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.066137922s ago: executing program 0 (id=137): capset(0x0, &(0x7f0000000080)={0x9, 0x8, 0x3, 0x2400082, 0xffffff7f, 0x7196}) r0 = syz_io_uring_setup(0x68d7, &(0x7f0000000180)={0x0, 0xf4b8, 0x200, 0x1, 0xcc}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x18da, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x3, 0xb9, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000240)={0x7fffffff, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) write(r2, &(0x7f0000000400)='!', 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$DVD_WRITE_STRUCT(r5, 0x2284, &(0x7f0000000f80)=@type=0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_io_uring_setup(0x34b8, 0x0, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f00000027c0)={0x2020}, 0x2020) 37.004606968s ago: executing program 0 (id=139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) ioctl(r3, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r5 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1ff) write(r5, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) close(r5) ioctl(r3, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000000000000000007465737400") r6 = openat(0xffffffffffffff9c, 0x0, 0x22c983, 0x48) pwrite64(r6, &(0x7f0000005000)='\"\"\"\"\"\"\"\"', 0x8, 0x1000) 36.644790318s ago: executing program 0 (id=144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0', 0x1) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) listen(r1, 0xda8d) accept$inet(r1, 0x0, 0x0) 36.608048553s ago: executing program 33 (id=144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0', 0x1) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) listen(r1, 0xda8d) accept$inet(r1, 0x0, 0x0) 34.924276896s ago: executing program 4 (id=165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x37) close(r2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00', 0x5e) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000500)='0x40\n\x00', 0x5) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='WIN', 0x3) close(r4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x922c0, 0x4) close(r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xfdba, 0x0, 0x0}) dup3(r1, r0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000001c0)="240000001a005f0400f9f407000904018020200000000000000000000800020000000045", 0x24) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 34.87458859s ago: executing program 4 (id=166): syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) userfaultfd(0x1) (async) userfaultfd(0x1) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x0) (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket(0x1d, 0x6, 0x14) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3) write(r1, &(0x7f0000000400)='!', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) accept4$phonet_pipe(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80800) 34.804224719s ago: executing program 4 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x42070080) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xc0800) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000080)={0x6, "dc0cbd5dda782d147f723a795ce4272fde58162eca8890d4a498adac2ebcb6e0d992a995c15b97eec0649cca59cf2a0146f47efe139d2b1c9ac897eb9a2f444c", {0x1, 0x5}}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x44890, &(0x7f0000000000)={0xa, 0x4e24, 0xe, @mcast2={0xff, 0x5}, 0xfffffff9}, 0x1c) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x180000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioperm(0x0, 0x80, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r4, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x1000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./config\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./config\x00', 0xf0) 31.76217684s ago: executing program 4 (id=216): r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async, rerun: 64) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4010, 0x0, 0xfffffffffffffefa) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x9, 0x3, 0x0, 0xfffffffe, 'syz0\x00'}) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405515, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000200)=0x6) (async) ptrace(0x10, r3) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) (async, rerun: 32) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async, rerun: 32) ptrace$pokeuser(0x6, r3, 0x0, 0x40) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r5, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) 30.970768139s ago: executing program 4 (id=227): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c"], 0x30}}, 0x48010) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x7, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000580000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4], 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x37, 0x37, 0x0, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233c56266748899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x37, 0x37, 0x0, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233c56266748899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x65, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) syz_clone3(&(0x7f0000000240)={0x23800000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000240)={0x23800000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) (async) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1, 0x1, 0x61, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x803c}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x803c}, 0x48, r3) 30.665014443s ago: executing program 4 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="cc0000002100010000000a00040000007f000001000002000000000000000000030000000000000000000000000a0000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e0000000000500011"], 0xcc}, 0x1, 0x0, 0x0, 0xc020}, 0x40800) 15.602816473s ago: executing program 34 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="cc0000002100010000000a00040000007f000001000002000000000000000000030000000000000000000000000a0000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e0000000000500011"], 0xcc}, 0x1, 0x0, 0x0, 0xc020}, 0x40800) 8.246691189s ago: executing program 5 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000040900010073797a31000000000900020073797a32"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) (async) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") (async) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000040900010073797a31000000000900020073797a32"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) (async) listen(r1, 0x1000) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) 8.184059413s ago: executing program 5 (id=445): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'macvlan0\x00', 0x1010}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x220848c4) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) write(r4, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) 8.034102326s ago: executing program 5 (id=447): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b0805"], 0xe) 7.508645731s ago: executing program 5 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$netlink(0x10, 0x3, 0xf) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x2}, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 7.506641476s ago: executing program 5 (id=456): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0xffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000350005007e0500003003000000000000000000000600ff0901a101150026ff007508951f852009018102850600018102852209018102851609019102851709019102851509019102c02da98b4d2e75237b473a3868e59e493410596c5209ea3c2ab84dba531f9a3c917610734d595a33ebaa53dcaab2d3a7b81707508a48796d516eaa71a96bb5c06191064eadf1aa44b819dd1b24eddde0d5f788148ddd962e2762dbdca7eb9bcb96bcdd88d31b764a8bd5a0d72272928fb32d524c063810fc550ef14af96f66e88173c78c8d4003410509572b5e2deb3e241fc0d3a008399339b64f505067e5187c81e1d78de1b939f6b744f381076144353a2393"], 0x14d) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000200)={0xc, {0x5, "2200001500"}}, 0xb) 2.273448345s ago: executing program 2 (id=506): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x81, 0x8, 0x0, 0x200, 0x10, 0xd4, 0x9, 0x5, 0x1, 0x0, 0xff, 0x0, 0x2, 0xa, 0xe, 0x8, 0x5, 0x0, '\x00', 0xb0, 0x80}) ioctl$BINDER_CTL_ADD(r7, 0xc1086201, &(0x7f0000002f00)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r11, 0xa006}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r13, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.552644439s ago: executing program 2 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000340)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x82002, 0x0) write(r1, &(0x7f00000007c0)="729afcd1a30e24696c319a879e36b30f00000e60bedf92f246292fadc023a02af8e28e64b969b252c81c0000d7a344154fd47656169565400f32cfeb96e71cfe1bc424b5ee0ae65436f421447fbc91aad417eee4bd19c3de1b90fd69c601980fceabf4ac3247eb5c90c895495869cd6ea6b6570025745ca548b9b979370df50e36834a79b2306baa5d23320ca6f7908c2773e4e5c938391839c7339204097bd341093c742d8960152ce297b98c710f36cb547336fe47578b5bb8515d2d6e8b6d0cf6ed1b7f8912f2a2e7107b899c791ec91ea7bb7d2cf7f0f3c01e22510725ae08bad94ca877b30f57ed2cf77a6516e05a9d8456ac43bcdd6c2fb138b64975d2afb691661b63be8bc8a549ffdcd5081e18dc54a15780ecfe61", 0x119) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x8}) (async) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x100) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.2\x00', 0x0) 1.518508224s ago: executing program 1 (id=512): socket$nl_generic(0x10, 0x3, 0x10) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@mpls_getnetconf={0x14, 0x52, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000000000000}, 0x0) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000040)={0x18, r2, 0x1, 0x0, &(0x7f0000000100)=[{0x3, 0x8}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x5425, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfd}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='nu', 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r6, 0xffffffffffffffff, 0x0) connect$phonet_pipe(r5, &(0x7f0000000080)={0x23, 0x37, 0x7, 0x8}, 0x10) 1.374170878s ago: executing program 1 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) 1.144672285s ago: executing program 6 (id=517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x9) fcntl$notify(r0, 0x402, 0xd) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0xffda011734cf0729}, 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x4e}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x11ddr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00'], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200004, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.076128601s ago: executing program 6 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x10, 0xffffffffffffffff, 0xf51ba000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x11, 0x0, &(0x7f0000001540)) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1, 0x0) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file0'}, 0xb) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fa) close_range(r8, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) epoll_create1(0x0) 943.456133ms ago: executing program 6 (id=519): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000b80)={r1, &(0x7f00000009c0), 0x0, 0x4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) 882.945964ms ago: executing program 6 (id=520): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 6) 881.998205ms ago: executing program 6 (id=521): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x28103, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000f80)={{0x3, 0x6}, 0x100, './file0\x00'}) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) creat(&(0x7f0000000180)='./file0/file0\x00', 0x2b) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0140, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2d, 0x2, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) (async) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 673.998631ms ago: executing program 2 (id=522): pipe2$9p(&(0x7f0000000080), 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @remote}}}, 0x108) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001a00010000000000000000000a000020000000000200000004000880"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 673.668163ms ago: executing program 6 (id=523): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2007c4, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x4043}, {r0, 0x8002}, {r1, 0x6802651fa420da66}, {r0, 0x7247}], 0x4, 0x0, 0x0, 0x0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) (rerun: 32) r2 = signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000002ffffffffffff0806fffe8806070800010180c2000002ddfc0000000000000080fffffffff1ffde5fca69e42160e4314ef8000000"], 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r5]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010009000000000000000e0000000c00018008000100", @ANYRES32=0x6, @ANYBLOB="aad37460f4922daa67602f2a78284333f2ea68b9b64f69aff51f24a9c7c02188e6f43f0cf3a2e6516c9d03b6a743e0091aacae1e"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000054) (async, rerun: 32) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000100)='./file5\x00', &(0x7f0000000140)='omfs\x00', 0x40020, &(0x7f0000000180)='ethtool\x00') (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a010100000000000000000200400909000100737939123f0b00002c000000050a03000000000000000000020000010900010073797a30000000000900030073797a32"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) ioctl$CDROMRESET(r2, 0x5312) (async) r7 = socket(0x2d, 0x2, 0x0) bind(r7, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x800000000000001, 0x80) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000240)=""/207) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000080)={0x7, 'geneve0\x00', {0x8}, 0xf}) (async) socket(0x2d, 0x2, 0x0) 503.477986ms ago: executing program 1 (id=524): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cf1ffff0f00056d26000000000000000000004aaaaec274b91bb0dd6203611eee2953049452315697c2c9255063db2dbc63be09073146fa15133d3c3ed8cb3629ee0b7aa83aa3fcba4bb5910bcede5031f84dbaf7b99f183fcc8149632a8a770725bf12c35eca131212eb8289f6225e3ad71c945302f40aa3c2e3307f5102020021f5e9a0322b4eab21efd61cd7b9cec101cd18e8d15e44333408702500fd2a9b4fd6b7395f3003c17ebbddc16a2ffa001b0767cf3682b0290c77f3e9e862f37872b7e5dd812cc8020db6bee75d8d4fd2d5aeae", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0xab9a3a3bb563c551, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0x4}, {0x5, 0xb}, {0x6, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x140, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x180000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff658}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r5, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0xd, 0x7, 0x0, 0x3518, 0xe, 0x1a, 0x7, 0x7e, 0x5, 0x8, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0xe, '\x00', 0x7, 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000600030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000a08000440000000250500020007000000340001800c0001006269747769736500240002800800034000000002080001400000000e0800024000000012081b68a4c20000040900010073797a30"], 0x108}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000280)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0106d4", 0x9c, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x7}, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "6b7ac7b7f905de84e308cbbf4039e6293aa6e9294d347b307b6961ce944c4baf", "f2f354edfd78ba9f80c19a10fce938140abd6edaa8d9bf9eb3d7b457dc647ea182b71472a380fa740be820a9593e9d2d", "aa82d14dfbacf4743b5fa80da8098972005133bf48ef9874486968c0", {"f376a80422fe8dee8db3ce3a69d2ed2b", "257731e5217b881efdb7ee2808027261"}}}}}}}}, 0x0) 502.533512ms ago: executing program 2 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000740)={0x0, 0xfb, 0xe6, 0x1, 0x7, "19067ee3cbe4b5bce0e96c8bcd36c603", "a213ccc9bbebb3e4db32ce3db0483d0f364ae9a31a8c474a33ac1666d176082db132ed31857aa5197094ae4a1527e0de7a0df691ddfe0a3d4c32d11630aec0158e46fbd61ba05310bf1cd0da154a780030df6d9725c5f679e50d3de3cecf92713d42fc4a9212632348ec86509707d6dcc161029c97926df6674108a7260d9c71951ee80c439b50e2a8af868b911e15063c57fb8898e889bff36a21e095f113a9f5000c20da62aa896562bb9faefcf97c171e3a0d14c1d4efa848cce7e9e97319e779bb6e9b4a0a203d6921c1cd8fc0782c"}, 0xe6, 0x3) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x6c, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {0x2, 0x5}, {0xa, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x7}}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @float={0xb, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x2e, 0x61, 0x0]}}, &(0x7f00000004c0)=""/180, 0x8e, 0xb4, 0x0, 0x7}, 0x28) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) read(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 354.556101ms ago: executing program 2 (id=526): r0 = syz_open_dev$video(&(0x7f00000001c0), 0x10001, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000005c0)={0x0, "1898efe12600050000000000400000000000000000000200", 0x0, 0x2, 0x5, 0xb700, 0x410, 0x2}) 354.339661ms ago: executing program 1 (id=527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x14c, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x200, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) 284.284034ms ago: executing program 2 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e1050000008848000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) listen(0xffffffffffffffff, 0xfffffff8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x985, 0x1000000, 0x100010, r6, 0x324939de) preadv(r5, &(0x7f0000002880), 0x0, 0x40000009, 0x5) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r7, 0x40047452, 0x0) r8 = dup(r4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) write$tun(r3, &(0x7f0000004000)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x2}, @ipv4=@gre={{0x6, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1, {[@noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe6d, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f4638c933955acd65926a12ea9e3614bc59e86bae2a14a83f"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7fb}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xe0002, 0x0) close(r10) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_usb_connect$lan78xx(0x2, 0xfffffffffffffe0e, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b05b5, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VM(r10, 0x4004550e, 0x80000023) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3cfff6fa00", @ANYRES32=0x0, @ANYBLOB="1517000098b704001c0012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 284.082861ms ago: executing program 1 (id=529): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, r1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r2, 0x4, r2}, 0x10) 193.405975ms ago: executing program 1 (id=530): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000003c0)={{0x0, 0xc16, 0x800, 0xffffffff7fffffff, 0x9, 0x9, 0xffffffffffffff89, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x4, 0x41a, 0xdd77}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000480)={{r3, 0x8, 0xffffffffffffff3e, 0x5, 0x4, 0x10f9, 0x3, 0x474, 0x1000, 0x40, 0x81, 0x4, 0x7, 0x3, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0x7ff, 0xffffffffffffff8d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0xcf}, 0x14) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0x30) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0xa00, 0x4) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x2000}, 0x50) write(r9, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 5 (id=531): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44}) r4 = socket(0x2d, 0x2, 0x0) bind(r4, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) r5 = socket(0x2d, 0x2, 0x0) sendto(r5, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) kernel console output (not intermixed with test programs): 758282][ T5874] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 70.761058][ T5874] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 70.764236][ T5874] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 70.766316][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.766336][ T5874] usb 10-1: Product: syz [ 70.766348][ T5874] usb 10-1: Manufacturer: syz [ 70.766360][ T5874] usb 10-1: SerialNumber: syz [ 70.798385][ T5099] sd 0:0:0:0: [sda] tag#20 sd_setup_read_write_cmnd: block=1050374, count=16 [ 70.798432][ T5099] sd 0:0:0:0: [sda] tag#20 writing 16/16 512 byte blocks. [ 70.798477][ T5099] sd 0:0:0:0: [sda] tag#20 Send: scmd 0xffff88802b6e7010 [ 70.798515][ T5099] sd 0:0:0:0: [sda] tag#20 CDB: Write(10) 2a 00 00 10 07 06 00 00 10 00 [ 70.799073][ C2] sd 0:0:0:0: [sda] tag#20 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.799126][ C2] sd 0:0:0:0: [sda] tag#20 CDB: Write(10) 2a 00 00 10 07 06 00 00 10 00 [ 70.799177][ C2] sd 0:0:0:0: [sda] tag#20 scsi host busy 1 failed 0 [ 70.799221][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.799265][ C2] sd 0:0:0:0: [sda] tag#20 sd_done: completed 8192 of 8192 bytes [ 70.799311][ C2] sd 0:0:0:0: [sda] tag#20 16 sectors total, 8192 bytes done. [ 70.799636][ T5101] sd 0:0:0:0: [sda] tag#21 Send: scmd 0xffff888023ce5110 [ 70.799675][ T5101] sd 0:0:0:0: [sda] tag#21 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 70.799978][ C2] sd 0:0:0:0: [sda] tag#21 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.800026][ C2] sd 0:0:0:0: [sda] tag#21 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 70.800071][ C2] sd 0:0:0:0: [sda] tag#21 scsi host busy 1 failed 0 [ 70.800162][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.800203][ C2] sd 0:0:0:0: [sda] tag#21 sd_done: completed 0 of 0 bytes [ 70.800245][ C2] sd 0:0:0:0: [sda] tag#21 0 sectors total, 0 bytes done. [ 70.800389][ T1301] sd 0:0:0:0: [sda] tag#22 sd_setup_read_write_cmnd: block=1050390, count=8 [ 70.800430][ T1301] sd 0:0:0:0: [sda] tag#22 writing 8/8 512 byte blocks. [ 70.800468][ T1301] sd 0:0:0:0: [sda] tag#22 Send: scmd 0xffff88802b6e7310 [ 70.800501][ T1301] sd 0:0:0:0: [sda] tag#22 CDB: Write(10) 2a 00 00 10 07 16 00 00 08 00 [ 70.800910][ C2] sd 0:0:0:0: [sda] tag#22 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.800957][ C2] sd 0:0:0:0: [sda] tag#22 CDB: Write(10) 2a 00 00 10 07 16 00 00 08 00 [ 70.800998][ C2] sd 0:0:0:0: [sda] tag#22 scsi host busy 1 failed 0 [ 70.801039][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.801078][ C2] sd 0:0:0:0: [sda] tag#22 sd_done: completed 4096 of 4096 bytes [ 70.801117][ C2] sd 0:0:0:0: [sda] tag#22 8 sectors total, 4096 bytes done. [ 70.801228][ T1301] sd 0:0:0:0: [sda] tag#23 Send: scmd 0xffff888023ce5110 [ 70.801267][ T1301] sd 0:0:0:0: [sda] tag#23 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 70.801563][ C2] sd 0:0:0:0: [sda] tag#23 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.801613][ C2] sd 0:0:0:0: [sda] tag#23 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 70.801661][ C2] sd 0:0:0:0: [sda] tag#23 scsi host busy 1 failed 0 [ 70.801700][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.801743][ C2] sd 0:0:0:0: [sda] tag#23 sd_done: completed 0 of 0 bytes [ 70.801793][ C2] sd 0:0:0:0: [sda] tag#23 0 sectors total, 0 bytes done. [ 70.803372][ T5744] sd 0:0:0:0: [sda] tag#22 sd_setup_read_write_cmnd: block=75590, count=1960 [ 70.803402][ T5744] sd 0:0:0:0: [sda] tag#22 reading 1960/1960 512 byte blocks. [ 70.803494][ T5744] sd 0:0:0:0: [sda] tag#22 Send: scmd 0xffff88802b6e7610 [ 70.803539][ T5744] sd 0:0:0:0: [sda] tag#22 CDB: Read(10) 28 00 00 01 27 46 00 07 a8 00 [ 70.804640][ C2] sd 0:0:0:0: [sda] tag#22 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.804648][ T5744] sd 0:0:0:0: [sda] tag#23 sd_setup_read_write_cmnd: block=78062, count=128 [ 70.804689][ C2] sd 0:0:0:0: [sda] tag#22 CDB: Read(10) 28 00 00 01 27 46 00 07 a8 00 [ 70.804732][ C2] sd 0:0:0:0: [sda] tag#22 scsi host busy 1 failed 0 [ 70.804779][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.804819][ C2] sd 0:0:0:0: [sda] tag#22 sd_done: completed 1003520 of 1003520 bytes [ 70.804861][ C2] sd 0:0:0:0: [sda] tag#22 1960 sectors total, 1003520 bytes done. [ 70.808183][ T5744] sd 0:0:0:0: [sda] tag#23 reading 128/128 512 byte blocks. [ 70.808294][ T5744] sd 0:0:0:0: [sda] tag#23 Send: scmd 0xffff88802b6e7910 [ 70.808337][ T5744] sd 0:0:0:0: [sda] tag#23 CDB: Read(10) 28 00 00 01 30 ee 00 00 80 00 [ 70.808860][ C2] sd 0:0:0:0: [sda] tag#23 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.808910][ C2] sd 0:0:0:0: [sda] tag#23 CDB: Read(10) 28 00 00 01 30 ee 00 00 80 00 [ 70.808955][ C2] sd 0:0:0:0: [sda] tag#23 scsi host busy 1 failed 0 [ 70.808994][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.809046][ C2] sd 0:0:0:0: [sda] tag#23 sd_done: completed 65536 of 65536 bytes [ 70.809092][ C2] sd 0:0:0:0: [sda] tag#23 128 sectors total, 65536 bytes done. [ 70.817448][ T7297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7297 comm=syz.1.342 [ 70.820936][ T7297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'. [ 70.825181][ T5744] sd 0:0:0:0: [sda] tag#31 sd_setup_read_write_cmnd: block=78574, count=3456 [ 70.825228][ T5744] sd 0:0:0:0: [sda] tag#31 reading 3456/3456 512 byte blocks. [ 70.825506][ T5744] sd 0:0:0:0: [sda] tag#31 Send: scmd 0xffff88802b6e7c10 [ 70.825549][ T5744] sd 0:0:0:0: [sda] tag#31 CDB: Read(10) 28 00 00 01 32 ee 00 0d 80 00 [ 70.826873][ C2] sd 0:0:0:0: [sda] tag#31 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.826924][ C2] sd 0:0:0:0: [sda] tag#31 CDB: Read(10) 28 00 00 01 32 ee 00 0d 80 00 [ 70.826971][ C2] sd 0:0:0:0: [sda] tag#31 scsi host busy 1 failed 0 [ 70.827011][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.827055][ C2] sd 0:0:0:0: [sda] tag#31 sd_done: completed 1769472 of 1769472 bytes [ 70.827119][ C2] sd 0:0:0:0: [sda] tag#31 3456 sectors total, 1769472 bytes done. [ 70.828029][ T5744] sd 0:0:0:0: [sda] tag#0 sd_setup_read_write_cmnd: block=82158, count=640 [ 70.828066][ T5744] sd 0:0:0:0: [sda] tag#0 reading 640/640 512 byte blocks. [ 70.828109][ T5744] sd 0:0:0:0: [sda] tag#0 Send: scmd 0xffff88802b6e7f10 [ 70.828148][ T5744] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 01 40 ee 00 02 80 00 [ 70.828794][ C2] sd 0:0:0:0: [sda] tag#0 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.828841][ C2] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 01 40 ee 00 02 80 00 [ 70.828885][ C2] sd 0:0:0:0: [sda] tag#0 scsi host busy 1 failed 0 [ 70.828923][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.828966][ C2] sd 0:0:0:0: [sda] tag#0 sd_done: completed 327680 of 327680 bytes [ 70.829008][ C2] sd 0:0:0:0: [sda] tag#0 640 sectors total, 327680 bytes done. [ 70.830645][ T7302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7302 comm=syz.1.342 [ 70.831009][ T5744] sd 0:0:0:0: [sda] tag#1 sd_setup_read_write_cmnd: block=83054, count=128 [ 70.831051][ T5744] sd 0:0:0:0: [sda] tag#1 reading 128/128 512 byte blocks. [ 70.831093][ T5744] sd 0:0:0:0: [sda] tag#1 Send: scmd 0xffff88802b6e8210 [ 70.831134][ T5744] sd 0:0:0:0: [sda] tag#1 CDB: Read(10) 28 00 00 01 44 6e 00 00 80 00 [ 70.831605][ C2] sd 0:0:0:0: [sda] tag#1 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.831646][ C2] sd 0:0:0:0: [sda] tag#1 CDB: Read(10) 28 00 00 01 44 6e 00 00 80 00 [ 70.831685][ C2] sd 0:0:0:0: [sda] tag#1 scsi host busy 1 failed 0 [ 70.831718][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.831761][ C2] sd 0:0:0:0: [sda] tag#1 sd_done: completed 65536 of 65536 bytes [ 70.831799][ C2] sd 0:0:0:0: [sda] tag#1 128 sectors total, 65536 bytes done. [ 70.832190][ T5744] sd 0:0:0:0: [sda] tag#2 sd_setup_read_write_cmnd: block=83566, count=256 [ 70.832227][ T5744] sd 0:0:0:0: [sda] tag#2 reading 256/256 512 byte blocks. [ 70.832296][ T5744] sd 0:0:0:0: [sda] tag#2 Send: scmd 0xffff88802b6e8510 [ 70.832330][ T5744] sd 0:0:0:0: [sda] tag#2 CDB: Read(10) 28 00 00 01 46 6e 00 01 00 00 [ 70.832823][ C2] sd 0:0:0:0: [sda] tag#2 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.832871][ C2] sd 0:0:0:0: [sda] tag#2 CDB: Read(10) 28 00 00 01 46 6e 00 01 00 00 [ 70.832917][ C2] sd 0:0:0:0: [sda] tag#2 scsi host busy 1 failed 0 [ 70.832957][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.833000][ C2] sd 0:0:0:0: [sda] tag#2 sd_done: completed 131072 of 131072 bytes [ 70.833043][ C2] sd 0:0:0:0: [sda] tag#2 256 sectors total, 131072 bytes done. [ 70.834847][ T7298] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'. [ 70.834966][ T5744] sd 0:0:0:0: [sda] tag#3 sd_setup_read_write_cmnd: block=84078, count=256 [ 70.835011][ T5744] sd 0:0:0:0: [sda] tag#3 reading 256/256 512 byte blocks. [ 70.835123][ T5744] sd 0:0:0:0: [sda] tag#3 Send: scmd 0xffff88802b6e8810 [ 70.835165][ T5744] sd 0:0:0:0: [sda] tag#3 CDB: Read(10) 28 00 00 01 48 6e 00 01 00 00 [ 70.835847][ C2] sd 0:0:0:0: [sda] tag#3 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.835889][ C2] sd 0:0:0:0: [sda] tag#3 CDB: Read(10) 28 00 00 01 48 6e 00 01 00 00 [ 70.835924][ C2] sd 0:0:0:0: [sda] tag#3 scsi host busy 1 failed 0 [ 70.835954][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.835989][ C2] sd 0:0:0:0: [sda] tag#3 sd_done: completed 131072 of 131072 bytes [ 70.836024][ C2] sd 0:0:0:0: [sda] tag#3 256 sectors total, 131072 bytes done. [ 70.837584][ T5744] sd 0:0:0:0: [sda] tag#4 sd_setup_read_write_cmnd: block=84462, count=640 [ 70.837630][ T5744] sd 0:0:0:0: [sda] tag#4 reading 640/640 512 byte blocks. [ 70.837663][ T5744] sd 0:0:0:0: [sda] tag#4 Send: scmd 0xffff88802b6e8b10 [ 70.837705][ T5744] sd 0:0:0:0: [sda] tag#4 CDB: Read(10) 28 00 00 01 49 ee 00 02 80 00 [ 70.838340][ C2] sd 0:0:0:0: [sda] tag#4 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.838386][ C2] sd 0:0:0:0: [sda] tag#4 CDB: Read(10) 28 00 00 01 49 ee 00 02 80 00 [ 70.838433][ C2] sd 0:0:0:0: [sda] tag#4 scsi host busy 1 failed 0 [ 70.838472][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.838516][ C2] sd 0:0:0:0: [sda] tag#4 sd_done: completed 327680 of 327680 bytes [ 70.838559][ C2] sd 0:0:0:0: [sda] tag#4 640 sectors total, 327680 bytes done. [ 70.838900][ T5744] sd 0:0:0:0: [sda] tag#5 sd_setup_read_write_cmnd: block=85358, count=256 [ 70.838945][ T5744] sd 0:0:0:0: [sda] tag#5 reading 256/256 512 byte blocks. [ 70.838979][ T5744] sd 0:0:0:0: [sda] tag#5 Send: scmd 0xffff88802b6e8e10 [ 70.839019][ T5744] sd 0:0:0:0: [sda] tag#5 CDB: Read(10) 28 00 00 01 4d 6e 00 01 00 00 [ 70.839502][ C2] sd 0:0:0:0: [sda] tag#5 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.839551][ C2] sd 0:0:0:0: [sda] tag#5 CDB: Read(10) 28 00 00 01 4d 6e 00 01 00 00 [ 70.839649][ C2] sd 0:0:0:0: [sda] tag#5 scsi host busy 1 failed 0 [ 70.839694][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.839743][ C2] sd 0:0:0:0: [sda] tag#5 sd_done: completed 131072 of 131072 bytes [ 70.839791][ C2] sd 0:0:0:0: [sda] tag#5 256 sectors total, 131072 bytes done. [ 70.840460][ T5744] sd 0:0:0:0: [sda] tag#6 sd_setup_read_write_cmnd: block=85742, count=384 [ 70.840497][ T5744] sd 0:0:0:0: [sda] tag#6 reading 384/384 512 byte blocks. [ 70.840542][ T5744] sd 0:0:0:0: [sda] tag#6 Send: scmd 0xffff88802b6ebe10 [ 70.840583][ T5744] sd 0:0:0:0: [sda] tag#6 CDB: Read(10) 28 00 00 01 4e ee 00 01 80 00 [ 70.841120][ C2] sd 0:0:0:0: [sda] tag#6 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.841166][ C2] sd 0:0:0:0: [sda] tag#6 CDB: Read(10) 28 00 00 01 4e ee 00 01 80 00 [ 70.841211][ C2] sd 0:0:0:0: [sda] tag#6 scsi host busy 1 failed 0 [ 70.841250][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.841303][ C2] sd 0:0:0:0: [sda] tag#6 sd_done: completed 196608 of 196608 bytes [ 70.841346][ C2] sd 0:0:0:0: [sda] tag#6 384 sectors total, 196608 bytes done. [ 70.841766][ T5744] sd 0:0:0:0: [sda] tag#7 sd_setup_read_write_cmnd: block=87406, count=256 [ 70.841801][ T5744] sd 0:0:0:0: [sda] tag#7 reading 256/256 512 byte blocks. [ 70.841848][ T5744] sd 0:0:0:0: [sda] tag#7 Send: scmd 0xffff88802b6e0110 [ 70.841889][ T5744] sd 0:0:0:0: [sda] tag#7 CDB: Read(10) 28 00 00 01 55 6e 00 01 00 00 [ 70.842396][ C2] sd 0:0:0:0: [sda] tag#7 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.842439][ C2] sd 0:0:0:0: [sda] tag#7 CDB: Read(10) 28 00 00 01 55 6e 00 01 00 00 [ 70.842480][ C2] sd 0:0:0:0: [sda] tag#7 scsi host busy 1 failed 0 [ 70.842514][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.842552][ C2] sd 0:0:0:0: [sda] tag#7 sd_done: completed 131072 of 131072 bytes [ 70.842593][ C2] sd 0:0:0:0: [sda] tag#7 256 sectors total, 131072 bytes done. [ 70.846505][ T5744] sd 0:0:0:0: [sda] tag#8 sd_setup_read_write_cmnd: block=87790, count=128 [ 70.846551][ T5744] sd 0:0:0:0: [sda] tag#8 reading 128/128 512 byte blocks. [ 70.846596][ T5744] sd 0:0:0:0: [sda] tag#8 Send: scmd 0xffff88802b6e0410 [ 70.846631][ T5744] sd 0:0:0:0: [sda] tag#8 CDB: Read(10) 28 00 00 01 56 ee 00 00 80 00 [ 70.847155][ C2] sd 0:0:0:0: [sda] tag#8 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.847208][ C2] sd 0:0:0:0: [sda] tag#8 CDB: Read(10) 28 00 00 01 56 ee 00 00 80 00 [ 70.847257][ C2] sd 0:0:0:0: [sda] tag#8 scsi host busy 1 failed 0 [ 70.847308][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.847355][ C2] sd 0:0:0:0: [sda] tag#8 sd_done: completed 65536 of 65536 bytes [ 70.847444][ C2] sd 0:0:0:0: [sda] tag#8 128 sectors total, 65536 bytes done. [ 70.856146][ T5744] sd 0:0:0:0: [sda] tag#9 sd_setup_read_write_cmnd: block=88686, count=1536 [ 70.856202][ T5744] sd 0:0:0:0: [sda] tag#9 reading 1536/1536 512 byte blocks. [ 70.856238][ T5744] sd 0:0:0:0: [sda] tag#9 Send: scmd 0xffff88802b6e0710 [ 70.856281][ T5744] sd 0:0:0:0: [sda] tag#9 CDB: Read(10) 28 00 00 01 5a 6e 00 06 00 00 [ 70.857172][ C2] sd 0:0:0:0: [sda] tag#9 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.857221][ C2] sd 0:0:0:0: [sda] tag#9 CDB: Read(10) 28 00 00 01 5a 6e 00 06 00 00 [ 70.857264][ C2] sd 0:0:0:0: [sda] tag#9 scsi host busy 1 failed 0 [ 70.857309][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.857349][ C2] sd 0:0:0:0: [sda] tag#9 sd_done: completed 786432 of 786432 bytes [ 70.857420][ C2] sd 0:0:0:0: [sda] tag#9 1536 sectors total, 786432 bytes done. [ 70.857517][ T5744] sd 0:0:0:0: [sda] tag#10 sd_setup_read_write_cmnd: block=90350, count=256 [ 70.857554][ T5744] sd 0:0:0:0: [sda] tag#10 reading 256/256 512 byte blocks. [ 70.857597][ T5744] sd 0:0:0:0: [sda] tag#10 Send: scmd 0xffff88802b6e0a10 [ 70.857637][ T5744] sd 0:0:0:0: [sda] tag#10 CDB: Read(10) 28 00 00 01 60 ee 00 01 00 00 [ 70.858091][ C2] sd 0:0:0:0: [sda] tag#10 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.858136][ C2] sd 0:0:0:0: [sda] tag#10 CDB: Read(10) 28 00 00 01 60 ee 00 01 00 00 [ 70.858175][ C2] sd 0:0:0:0: [sda] tag#10 scsi host busy 1 failed 0 [ 70.858210][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.858272][ C2] sd 0:0:0:0: [sda] tag#10 sd_done: completed 131072 of 131072 bytes [ 70.858318][ C2] sd 0:0:0:0: [sda] tag#10 256 sectors total, 131072 bytes done. [ 70.858883][ T5744] sd 0:0:0:0: [sda] tag#11 sd_setup_read_write_cmnd: block=90734, count=256 [ 70.858934][ T5744] sd 0:0:0:0: [sda] tag#11 reading 256/256 512 byte blocks. [ 70.858977][ T5744] sd 0:0:0:0: [sda] tag#11 Send: scmd 0xffff88802b6e0d10 [ 70.859011][ T5744] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 62 6e 00 01 00 00 [ 70.859515][ C2] sd 0:0:0:0: [sda] tag#11 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.859556][ C2] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 62 6e 00 01 00 00 [ 70.859597][ C2] sd 0:0:0:0: [sda] tag#11 scsi host busy 1 failed 0 [ 70.859632][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 70.859672][ C2] sd 0:0:0:0: [sda] tag#11 sd_done: completed 131072 of 131072 bytes [ 70.859704][ C2] sd 0:0:0:0: [sda] tag#11 256 sectors total, 131072 bytes done. [ 70.875530][ T10] sr 2:0:0:0: [sr0] tag#12 Send: scmd 0xffff88802b730110 [ 70.875562][ T10] sr 2:0:0:0: [sr0] tag#12 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 70.875947][ C2] sr 2:0:0:0: [sr0] tag#12 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.875996][ C2] sr 2:0:0:0: [sr0] tag#12 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 70.876042][ C2] sr 2:0:0:0: [sr0] tag#12 scsi host busy 1 failed 0 [ 70.876080][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 70.876120][ C2] sr 2:0:0:0: [sr0] tag#12 0 sectors total, 8 bytes done. [ 71.127660][ T1346] cfg80211: failed to load regulatory.db [ 71.223195][ T7310] tmpfs: Bad value for 'mpol' [ 71.585622][ T7325] sd 0:0:0:0: [sda] tag#24 Send: scmd 0xffff88802b6e1c10 [ 71.585732][ T7325] sd 0:0:0:0: [sda] tag#24 CDB: Mode Select(10) [ 71.585789][ T7325] sd 0:0:0:0: [sda] tag#24 CDB[00]: 55 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.585839][ T7325] sd 0:0:0:0: [sda] tag#24 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.585896][ C2] sd 0:0:0:0: [sda] tag#24 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 71.585916][ C2] sd 0:0:0:0: [sda] tag#24 CDB: Mode Select(10) [ 71.585926][ C2] sd 0:0:0:0: [sda] tag#24 CDB[00]: 55 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.585961][ C2] sd 0:0:0:0: [sda] tag#24 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.585982][ C2] sd 0:0:0:0: [sda] tag#24 Sense Key : Illegal Request [current] [ 71.586002][ C2] sd 0:0:0:0: [sda] tag#24 Add. Sense: Invalid field in cdb [ 71.586023][ C2] sd 0:0:0:0: [sda] tag#24 scsi host busy 1 failed 0 [ 71.586038][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 402) [ 71.586056][ C2] sd 0:0:0:0: [sda] tag#24 0 sectors total, 0 bytes done. [ 71.630662][ T7327] random: crng reseeded on system resumption [ 71.717301][ T7332] overlayfs: failed to resolve 'debugfs': -2 [ 72.462998][ T7347] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 72.463023][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.472785][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 72.494573][ T7347] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 72.494590][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.494617][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 72.504914][ T7354] vhci_hcd: connection closed [ 72.508307][ T13] vhci_hcd vhci_hcd.1: stop threads [ 72.508670][ T13] vhci_hcd vhci_hcd.1: release socket [ 72.508852][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 72.535781][ T7349] vhci_hcd: connection closed [ 72.536856][ T13] vhci_hcd vhci_hcd.1: stop threads [ 72.536881][ T13] vhci_hcd vhci_hcd.1: release socket [ 72.536898][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 72.956197][ T10] sr 2:0:0:0: [sr0] tag#13 Send: scmd 0xffff88802b730410 [ 72.956248][ T10] sr 2:0:0:0: [sr0] tag#13 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 72.956594][ C2] sr 2:0:0:0: [sr0] tag#13 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 72.956621][ C2] sr 2:0:0:0: [sr0] tag#13 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 72.956646][ C2] sr 2:0:0:0: [sr0] tag#13 scsi host busy 1 failed 0 [ 72.956666][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 72.956686][ C2] sr 2:0:0:0: [sr0] tag#13 0 sectors total, 8 bytes done. [ 73.224349][ T7359] FAULT_INJECTION: forcing a failure. [ 73.224349][ T7359] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.224379][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.2.358 Not tainted syzkaller #0 PREEMPT(full) [ 73.224399][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.224411][ T7359] Call Trace: [ 73.224418][ T7359] [ 73.224425][ T7359] dump_stack_lvl+0x100/0x190 [ 73.224458][ T7359] should_fail_ex.cold+0x5/0xa [ 73.224487][ T7359] should_fail_futex+0x4c/0x60 [ 73.224513][ T7359] futex_lock_pi_atomic+0xea/0xb80 [ 73.224562][ T7359] futex_lock_pi+0x278/0x7e0 [ 73.224599][ T7359] ? __pfx_futex_lock_pi+0x10/0x10 [ 73.224630][ T7359] ? __pfx___futex_wait+0x10/0x10 [ 73.224647][ T7359] ? __pfx_try_to_wake_up+0x10/0x10 [ 73.224694][ T7359] ? __pfx_futex_wake_mark+0x10/0x10 [ 73.224731][ T7359] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.224758][ T7359] ? find_held_lock+0x2b/0x80 [ 73.224785][ T7359] ? ksys_write+0x190/0x250 [ 73.224810][ T7359] do_futex+0x371/0x440 [ 73.224835][ T7359] ? __pfx_do_futex+0x10/0x10 [ 73.224866][ T7359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.224902][ T7359] __x64_sys_futex+0x34f/0x4d0 [ 73.224929][ T7359] ? fput+0x7c/0x100 [ 73.224953][ T7359] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.224976][ T7359] ? ksys_write+0x1ac/0x250 [ 73.224993][ T7359] ? __pfx_ksys_write+0x10/0x10 [ 73.225016][ T7359] do_syscall_64+0x123/0x790 [ 73.225044][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.225061][ T7359] RIP: 0033:0x7fcc7839e159 [ 73.225076][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.225093][ T7359] RSP: 002b:00007fcc791d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.225109][ T7359] RAX: ffffffffffffffda RBX: 00007fcc78625fa0 RCX: 00007fcc7839e159 [ 73.225120][ T7359] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 73.225130][ T7359] RBP: 00007fcc7843506b R08: 0000000000000000 R09: 0000000000000000 [ 73.225139][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.225150][ T7359] R13: 00007fcc78626038 R14: 00007fcc78625fa0 R15: 00007ffc6254d058 [ 73.225174][ T7359] [ 73.297576][ T10] usb 10-1: USB disconnect, device number 2 [ 73.374183][ T7366] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 73.459969][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.361'. [ 73.586906][ T7376] xt_CONNSECMARK: invalid mode: 0 [ 73.863189][ T7388] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.863189][ T7388] The task syz.5.363 (7388) triggered the difference, watch for misbehavior. [ 73.877936][ T7388] netlink: 'syz.5.363': attribute type 4 has an invalid length. [ 73.923186][ T44] kauditd_printk_skb: 21 callbacks suppressed [ 73.923206][ T44] audit: type=1400 audit(1790254213.276:803): avc: denied { write } for pid=7389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.971469][ T44] audit: type=1400 audit(1790254213.326:804): avc: denied { write } for pid=7392 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.087877][ T44] audit: type=1400 audit(1790254213.446:805): avc: denied { write } for pid=7398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.171218][ T44] audit: type=1400 audit(1790254213.526:806): avc: denied { write } for pid=7404 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.381485][ T7411] lo: entered allmulticast mode [ 74.383662][ T7412] sd 0:0:0:0: [sda] tag#29 sd_setup_read_write_cmnd: block=532790, count=64 [ 74.383714][ T7412] sd 0:0:0:0: [sda] tag#29 reading 64/64 512 byte blocks. [ 74.383764][ T7412] sd 0:0:0:0: [sda] tag#29 Send: scmd 0xffff88802b6e3a10 [ 74.383811][ T7412] sd 0:0:0:0: [sda] tag#29 CDB: Read(10) 28 00 00 08 21 36 00 00 40 00 [ 74.385215][ C2] sd 0:0:0:0: [sda] tag#29 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.385380][ C2] sd 0:0:0:0: [sda] tag#29 CDB: Read(10) 28 00 00 08 21 36 00 00 40 00 [ 74.385430][ C2] sd 0:0:0:0: [sda] tag#29 scsi host busy 1 failed 0 [ 74.385471][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.385518][ C2] sd 0:0:0:0: [sda] tag#29 sd_done: completed 32768 of 32768 bytes [ 74.385562][ C2] sd 0:0:0:0: [sda] tag#29 64 sectors total, 32768 bytes done. [ 74.392809][ T7412] sd 0:0:0:0: [sda] tag#30 sd_setup_read_write_cmnd: block=534294, count=1344 [ 74.392862][ T7412] sd 0:0:0:0: [sda] tag#30 reading 1344/1344 512 byte blocks. [ 74.392912][ T7412] sd 0:0:0:0: [sda] tag#30 Send: scmd 0xffff88802b6e3d10 [ 74.392960][ T7412] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 08 27 16 00 05 40 00 [ 74.394187][ T7412] sd 0:0:0:0: [sda] tag#0 sd_setup_read_write_cmnd: block=535638, count=864 [ 74.394260][ T7412] sd 0:0:0:0: [sda] tag#0 reading 864/864 512 byte blocks. [ 74.394307][ T7412] sd 0:0:0:0: [sda] tag#0 Send: scmd 0xffff88802b6e4010 [ 74.394352][ T7412] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 08 2c 56 00 03 60 00 [ 74.395339][ C2] sd 0:0:0:0: [sda] tag#0 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.395390][ C2] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 08 2c 56 00 03 60 00 [ 74.395433][ C2] sd 0:0:0:0: [sda] tag#0 scsi host busy 2 failed 0 [ 74.395468][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.395507][ C2] sd 0:0:0:0: [sda] tag#0 sd_done: completed 442368 of 442368 bytes [ 74.395546][ C2] sd 0:0:0:0: [sda] tag#0 864 sectors total, 442368 bytes done. [ 74.395670][ C2] sd 0:0:0:0: [sda] tag#30 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.395711][ C2] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 08 27 16 00 05 40 00 [ 74.395752][ C2] sd 0:0:0:0: [sda] tag#30 scsi host busy 1 failed 0 [ 74.395786][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.395825][ C2] sd 0:0:0:0: [sda] tag#30 sd_done: completed 688128 of 688128 bytes [ 74.395857][ C2] sd 0:0:0:0: [sda] tag#30 1344 sectors total, 688128 bytes done. [ 74.400243][ T7412] sd 0:0:0:0: [sda] tag#1 sd_setup_read_write_cmnd: block=536790, count=1056 [ 74.400294][ T7412] sd 0:0:0:0: [sda] tag#1 reading 1056/1056 512 byte blocks. [ 74.400341][ T7412] sd 0:0:0:0: [sda] tag#1 Send: scmd 0xffff88802b6e4310 [ 74.400386][ T7412] sd 0:0:0:0: [sda] tag#1 CDB: Read(10) 28 00 00 08 30 d6 00 04 20 00 [ 74.407104][ C2] sd 0:0:0:0: [sda] tag#1 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.407141][ C2] sd 0:0:0:0: [sda] tag#1 CDB: Read(10) 28 00 00 08 30 d6 00 04 20 00 [ 74.407179][ C2] sd 0:0:0:0: [sda] tag#1 scsi host busy 1 failed 0 [ 74.407206][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.407238][ C2] sd 0:0:0:0: [sda] tag#1 sd_done: completed 540672 of 540672 bytes [ 74.407266][ C2] sd 0:0:0:0: [sda] tag#1 1056 sectors total, 540672 bytes done. [ 74.421246][ T7411] lo: left allmulticast mode [ 74.421707][ T44] audit: type=1400 audit(1790254213.776:807): avc: denied { accept } for pid=7413 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.422145][ T44] audit: type=1400 audit(1790254213.776:808): avc: denied { write } for pid=7413 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.525585][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.525668][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.525733][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.525817][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.525889][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.525960][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526028][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526095][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526161][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526223][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526317][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526382][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526446][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526511][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526580][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526633][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526669][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526705][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526740][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526781][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526850][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526918][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.526987][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527059][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527127][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527195][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527264][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527331][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527398][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527468][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527535][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.527603][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529419][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529499][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529569][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529633][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529698][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529761][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529830][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529869][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529905][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529940][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.529975][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530010][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530045][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530080][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530115][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530153][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530188][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530222][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530283][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530319][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530357][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530392][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530428][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530463][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530497][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530533][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530567][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530603][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530637][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530675][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530710][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530745][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.530780][ T5731] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 74.536373][ T5731] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.543523][ T5731] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.544062][ T5731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.544591][ T5731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.544914][ T5731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.582073][ T50] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 74.582099][ T50] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 74.582117][ T50] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 74.587803][ T50] wiimote 0005:057E:0330.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 74.589313][ T50] wiimote 0005:057E:0330.0004: New device registered [ 74.624418][ T7430] sd 0:0:0:0: [sda] tag#2 sd_setup_read_write_cmnd: block=189030, count=16 [ 74.624450][ T7430] sd 0:0:0:0: [sda] tag#2 reading 16/16 512 byte blocks. [ 74.624475][ T7430] sd 0:0:0:0: [sda] tag#2 Send: scmd 0xffff88802b6e6710 [ 74.624500][ T7430] sd 0:0:0:0: [sda] tag#2 CDB: Read(10) 28 00 00 02 e2 66 00 00 10 00 [ 74.625996][ C2] sd 0:0:0:0: [sda] tag#2 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.626033][ C2] sd 0:0:0:0: [sda] tag#2 CDB: Read(10) 28 00 00 02 e2 66 00 00 10 00 [ 74.626063][ C2] sd 0:0:0:0: [sda] tag#2 scsi host busy 1 failed 0 [ 74.626090][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.626121][ C2] sd 0:0:0:0: [sda] tag#2 sd_done: completed 8192 of 8192 bytes [ 74.626150][ C2] sd 0:0:0:0: [sda] tag#2 16 sectors total, 8192 bytes done. [ 74.640343][ T7430] sd 0:0:0:0: [sda] tag#3 sd_setup_read_write_cmnd: block=229870, count=48 [ 74.640375][ T7430] sd 0:0:0:0: [sda] tag#3 reading 48/48 512 byte blocks. [ 74.640402][ T7430] sd 0:0:0:0: [sda] tag#3 Send: scmd 0xffff88802b6e6a10 [ 74.640426][ T7430] sd 0:0:0:0: [sda] tag#3 CDB: Read(10) 28 00 00 03 81 ee 00 00 30 00 [ 74.641277][ C2] sd 0:0:0:0: [sda] tag#3 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.641328][ C2] sd 0:0:0:0: [sda] tag#3 CDB: Read(10) 28 00 00 03 81 ee 00 00 30 00 [ 74.641381][ C2] sd 0:0:0:0: [sda] tag#3 scsi host busy 1 failed 0 [ 74.641425][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.641473][ C2] sd 0:0:0:0: [sda] tag#3 sd_done: completed 24576 of 24576 bytes [ 74.641513][ C2] sd 0:0:0:0: [sda] tag#3 48 sectors total, 24576 bytes done. [ 74.646093][ T7430] sd 0:0:0:0: [sda] tag#4 sd_setup_read_write_cmnd: block=232350, count=1280 [ 74.646145][ T7430] sd 0:0:0:0: [sda] tag#4 reading 1280/1280 512 byte blocks. [ 74.646193][ T7430] sd 0:0:0:0: [sda] tag#4 Send: scmd 0xffff88802b6e4610 [ 74.646265][ T7430] sd 0:0:0:0: [sda] tag#4 CDB: Read(10) 28 00 00 03 8b 9e 00 05 00 00 [ 74.647488][ T7430] sd 0:0:0:0: [sda] tag#5 sd_setup_read_write_cmnd: block=234654, count=128 [ 74.647538][ T7430] sd 0:0:0:0: [sda] tag#5 reading 128/128 512 byte blocks. [ 74.647584][ T7430] sd 0:0:0:0: [sda] tag#5 Send: scmd 0xffff88802b6e4910 [ 74.647628][ T7430] sd 0:0:0:0: [sda] tag#5 CDB: Read(10) 28 00 00 03 94 9e 00 00 80 00 [ 74.647791][ C2] sd 0:0:0:0: [sda] tag#4 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.647831][ C2] sd 0:0:0:0: [sda] tag#4 CDB: Read(10) 28 00 00 03 8b 9e 00 05 00 00 [ 74.647869][ C2] sd 0:0:0:0: [sda] tag#4 scsi host busy 2 failed 0 [ 74.647901][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.648152][ C2] sd 0:0:0:0: [sda] tag#4 sd_done: completed 655360 of 655360 bytes [ 74.648194][ C2] sd 0:0:0:0: [sda] tag#4 1280 sectors total, 655360 bytes done. [ 74.648391][ C2] sd 0:0:0:0: [sda] tag#5 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.648428][ C2] sd 0:0:0:0: [sda] tag#5 CDB: Read(10) 28 00 00 03 94 9e 00 00 80 00 [ 74.648462][ C2] sd 0:0:0:0: [sda] tag#5 scsi host busy 1 failed 0 [ 74.648493][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.648528][ C2] sd 0:0:0:0: [sda] tag#5 sd_done: completed 65536 of 65536 bytes [ 74.648561][ C2] sd 0:0:0:0: [sda] tag#5 128 sectors total, 65536 bytes done. [ 74.654730][ T7430] sd 0:0:0:0: [sda] tag#6 sd_setup_read_write_cmnd: block=234910, count=128 [ 74.654783][ T7430] sd 0:0:0:0: [sda] tag#6 reading 128/128 512 byte blocks. [ 74.654834][ T7430] sd 0:0:0:0: [sda] tag#6 Send: scmd 0xffff88802b6e4c10 [ 74.654880][ T7430] sd 0:0:0:0: [sda] tag#6 CDB: Read(10) 28 00 00 03 95 9e 00 00 80 00 [ 74.656881][ T7430] sd 0:0:0:0: [sda] tag#7 sd_setup_read_write_cmnd: block=235294, count=256 [ 74.656927][ T7430] sd 0:0:0:0: [sda] tag#7 reading 256/256 512 byte blocks. [ 74.656973][ T7430] sd 0:0:0:0: [sda] tag#7 Send: scmd 0xffff88802b6e4f10 [ 74.657019][ T7430] sd 0:0:0:0: [sda] tag#7 CDB: Read(10) 28 00 00 03 97 1e 00 01 00 00 [ 74.657941][ T7430] sd 0:0:0:0: [sda] tag#12 sd_setup_read_write_cmnd: block=236446, count=128 [ 74.657990][ T7430] sd 0:0:0:0: [sda] tag#12 reading 128/128 512 byte blocks. [ 74.658036][ T7430] sd 0:0:0:0: [sda] tag#12 Send: scmd 0xffff88802b6e5210 [ 74.658081][ T7430] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 03 9b 9e 00 00 80 00 [ 74.660807][ C2] sd 0:0:0:0: [sda] tag#6 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.660852][ C2] sd 0:0:0:0: [sda] tag#6 CDB: Read(10) 28 00 00 03 95 9e 00 00 80 00 [ 74.660895][ C2] sd 0:0:0:0: [sda] tag#6 scsi host busy 3 failed 0 [ 74.660931][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.660970][ C2] sd 0:0:0:0: [sda] tag#6 sd_done: completed 65536 of 65536 bytes [ 74.661010][ C2] sd 0:0:0:0: [sda] tag#6 128 sectors total, 65536 bytes done. [ 74.661140][ C2] sd 0:0:0:0: [sda] tag#7 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.661180][ C2] sd 0:0:0:0: [sda] tag#7 CDB: Read(10) 28 00 00 03 97 1e 00 01 00 00 [ 74.661220][ C2] sd 0:0:0:0: [sda] tag#7 scsi host busy 2 failed 0 [ 74.661252][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.661280][ C2] sd 0:0:0:0: [sda] tag#7 sd_done: completed 131072 of 131072 bytes [ 74.661312][ C2] sd 0:0:0:0: [sda] tag#7 256 sectors total, 131072 bytes done. [ 74.661421][ C2] sd 0:0:0:0: [sda] tag#12 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.661450][ C2] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 03 9b 9e 00 00 80 00 [ 74.661478][ C2] sd 0:0:0:0: [sda] tag#12 scsi host busy 1 failed 0 [ 74.661502][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.661529][ C2] sd 0:0:0:0: [sda] tag#12 sd_done: completed 65536 of 65536 bytes [ 74.661556][ C2] sd 0:0:0:0: [sda] tag#12 128 sectors total, 65536 bytes done. [ 74.664178][ T7430] sd 0:0:0:0: [sda] tag#13 sd_setup_read_write_cmnd: block=236958, count=1024 [ 74.664229][ T7430] sd 0:0:0:0: [sda] tag#13 reading 1024/1024 512 byte blocks. [ 74.664275][ T7430] sd 0:0:0:0: [sda] tag#13 Send: scmd 0xffff88802b6e5510 [ 74.664319][ T7430] sd 0:0:0:0: [sda] tag#13 CDB: Read(10) 28 00 00 03 9d 9e 00 04 00 00 [ 74.666844][ T7430] sd 0:0:0:0: [sda] tag#14 sd_setup_read_write_cmnd: block=237998, count=320 [ 74.666894][ T7430] sd 0:0:0:0: [sda] tag#14 reading 320/320 512 byte blocks. [ 74.667057][ T7430] sd 0:0:0:0: [sda] tag#14 Send: scmd 0xffff88802b6e5810 [ 74.667104][ T7430] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 a1 ae 00 01 40 00 [ 74.673194][ T7430] sd 0:0:0:0: [sda] tag#15 sd_setup_read_write_cmnd: block=238510, count=272 [ 74.673247][ T7430] sd 0:0:0:0: [sda] tag#15 reading 272/272 512 byte blocks. [ 74.673293][ T7430] sd 0:0:0:0: [sda] tag#15 Send: scmd 0xffff88802b6e5b10 [ 74.673339][ T7430] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 03 a3 ae 00 01 10 00 [ 74.676325][ C2] sd 0:0:0:0: [sda] tag#13 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.676371][ C2] sd 0:0:0:0: [sda] tag#13 CDB: Read(10) 28 00 00 03 9d 9e 00 04 00 00 [ 74.676415][ C2] sd 0:0:0:0: [sda] tag#13 scsi host busy 3 failed 0 [ 74.676450][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.676487][ C2] sd 0:0:0:0: [sda] tag#13 sd_done: completed 524288 of 524288 bytes [ 74.676524][ C2] sd 0:0:0:0: [sda] tag#13 1024 sectors total, 524288 bytes done. [ 74.676678][ C2] sd 0:0:0:0: [sda] tag#14 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.676716][ C2] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 a1 ae 00 01 40 00 [ 74.676756][ C2] sd 0:0:0:0: [sda] tag#14 scsi host busy 2 failed 0 [ 74.676790][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.676832][ C2] sd 0:0:0:0: [sda] tag#14 sd_done: completed 163840 of 163840 bytes [ 74.676870][ C2] sd 0:0:0:0: [sda] tag#14 320 sectors total, 163840 bytes done. [ 74.677023][ C2] sd 0:0:0:0: [sda] tag#15 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 74.677062][ C2] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 03 a3 ae 00 01 10 00 [ 74.677098][ C2] sd 0:0:0:0: [sda] tag#15 scsi host busy 1 failed 0 [ 74.677132][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 74.677169][ C2] sd 0:0:0:0: [sda] tag#15 sd_done: completed 139264 of 139264 bytes [ 74.677204][ C2] sd 0:0:0:0: [sda] tag#15 272 sectors total, 139264 bytes done. [ 74.691890][ T7425] wiimote 0005:057E:0330.0004: Device removed [ 74.695667][ T7430] fido_id[7430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.829092][ T44] audit: type=1400 audit(1790254214.186:809): avc: denied { setattr } for pid=7443 comm="syz.5.373" name="video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.045491][ T9] sr 2:0:0:0: [sr0] tag#14 Send: scmd 0xffff88802b730710 [ 75.045523][ T9] sr 2:0:0:0: [sr0] tag#14 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 75.048853][ C2] sr 2:0:0:0: [sr0] tag#14 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 75.048902][ C2] sr 2:0:0:0: [sr0] tag#14 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 75.048948][ C2] sr 2:0:0:0: [sr0] tag#14 scsi host busy 1 failed 0 [ 75.048984][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 75.049020][ C2] sr 2:0:0:0: [sr0] tag#14 0 sectors total, 8 bytes done. [ 75.167312][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.167395][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.167498][ T7423] bridge_slave_0: entered allmulticast mode [ 75.173918][ T7423] bridge_slave_0: entered promiscuous mode [ 75.176258][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.176344][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.176440][ T7423] bridge_slave_1: entered allmulticast mode [ 75.178320][ T7423] bridge_slave_1: entered promiscuous mode [ 75.189222][ T7465] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.189252][ T7465] overlayfs: overlapping lowerdir path [ 75.212390][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.212423][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.236328][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.240276][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.262581][ T7469] netlink: 44 bytes leftover after parsing attributes in process `syz.5.379'. [ 75.278382][ T7423] team0: Port device team_slave_0 added [ 75.280774][ T7423] team0: Port device team_slave_1 added [ 75.344790][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.344808][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.344829][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.347984][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.347998][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.348019][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.352643][ T44] audit: type=1400 audit(1790254214.706:810): avc: denied { name_connect } for pid=7476 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.361424][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.361443][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.420230][ T7423] hsr_slave_0: entered promiscuous mode [ 75.420673][ T7423] hsr_slave_1: entered promiscuous mode [ 75.422507][ T7423] debugfs: 'hsr0' already exists in 'hsr' [ 75.422527][ T7423] Cannot create hsr debugfs directory [ 75.447151][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.447182][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.515951][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.515973][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.535853][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.5.387'. [ 75.572547][ T44] audit: type=1400 audit(1790254214.926:811): avc: denied { search } for pid=7490 comm="syz.5.388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.572743][ T44] audit: type=1400 audit(1790254214.926:812): avc: denied { append } for pid=7490 comm="syz.5.388" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 75.597696][ T50] wiimote 0005:057E:0330.0004: detected device: Nintendo Wii Remote Plus (Gen 2) [ 75.624047][ T50] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input11 [ 75.640662][ T50] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input12 [ 75.646316][ T50] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0004/input/input10 [ 75.693791][ T7502] netlink: 'syz.5.390': attribute type 16 has an invalid length. [ 75.693810][ T7502] netlink: 'syz.5.390': attribute type 17 has an invalid length. [ 75.697327][ T5733] Bluetooth: Frame is too long (len 10, expected len 8) [ 75.697348][ T5733] Bluetooth: Wrong link type (-71) [ 75.725431][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.755222][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.758433][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.850681][ T7423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.854137][ T7423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.861683][ T13] bridge_slave_1: left allmulticast mode [ 75.861705][ T13] bridge_slave_1: left promiscuous mode [ 75.862844][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.864864][ T13] bridge_slave_0: left allmulticast mode [ 75.864877][ T13] bridge_slave_0: left promiscuous mode [ 75.864986][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.876160][ T25] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 75.878110][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 53729, setting to 1024 [ 75.878137][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 75.880204][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.880226][ T25] usb 6-1: Product: syz [ 75.880241][ T25] usb 6-1: Manufacturer: syz [ 75.880255][ T25] usb 6-1: SerialNumber: syz [ 75.973796][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.975760][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.983397][ T13] bond0 (unregistering): Released all slaves [ 75.989227][ T7423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.992925][ T7423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.995038][ T7423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.997863][ T7423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.998721][ T7423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.003106][ T7423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.092642][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.107505][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.130094][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.130141][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.130995][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.131069][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.153199][ T13] hsr_slave_0: left promiscuous mode [ 76.153770][ T13] hsr_slave_1: left promiscuous mode [ 76.154148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.154160][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.154597][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.154607][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.160071][ T13] veth1_macvtap: left promiscuous mode [ 76.160090][ T13] veth0_macvtap: left promiscuous mode [ 76.160133][ T13] veth1_vlan: left promiscuous mode [ 76.160636][ T13] veth0_vlan: left promiscuous mode [ 76.312992][ T5099] sd 0:0:0:0: [sda] tag#12 sd_setup_read_write_cmnd: block=1050398, count=80 [ 76.313038][ T5099] sd 0:0:0:0: [sda] tag#12 writing 80/80 512 byte blocks. [ 76.313078][ T5099] sd 0:0:0:0: [sda] tag#12 Send: scmd 0xffff88802b6e1f10 [ 76.313114][ T5099] sd 0:0:0:0: [sda] tag#12 CDB: Write(10) 2a 00 00 10 07 1e 00 00 50 00 [ 76.313772][ T13] team0 (unregistering): Port device team_slave_1 removed [ 76.313780][ C2] sd 0:0:0:0: [sda] tag#12 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 76.313825][ C2] sd 0:0:0:0: [sda] tag#12 CDB: Write(10) 2a 00 00 10 07 1e 00 00 50 00 [ 76.313864][ C2] sd 0:0:0:0: [sda] tag#12 scsi host busy 1 failed 0 [ 76.313901][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 76.313938][ C2] sd 0:0:0:0: [sda] tag#12 sd_done: completed 40960 of 40960 bytes [ 76.313959][ C2] sd 0:0:0:0: [sda] tag#12 80 sectors total, 40960 bytes done. [ 76.314490][ T5101] sd 0:0:0:0: [sda] tag#13 Send: scmd 0xffff888023ce5110 [ 76.314534][ T5101] sd 0:0:0:0: [sda] tag#13 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 76.314826][ C2] sd 0:0:0:0: [sda] tag#13 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 76.314852][ C2] sd 0:0:0:0: [sda] tag#13 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 76.314878][ C2] sd 0:0:0:0: [sda] tag#13 scsi host busy 1 failed 0 [ 76.314899][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 76.314923][ C2] sd 0:0:0:0: [sda] tag#13 sd_done: completed 0 of 0 bytes [ 76.314944][ C2] sd 0:0:0:0: [sda] tag#13 0 sectors total, 0 bytes done. [ 76.315025][ T1301] sd 0:0:0:0: [sda] tag#25 sd_setup_read_write_cmnd: block=1050478, count=8 [ 76.315048][ T1301] sd 0:0:0:0: [sda] tag#25 writing 8/8 512 byte blocks. [ 76.315069][ T1301] sd 0:0:0:0: [sda] tag#25 Send: scmd 0xffff88802b6e2210 [ 76.315089][ T1301] sd 0:0:0:0: [sda] tag#25 CDB: Write(10) 2a 00 00 10 07 6e 00 00 08 00 [ 76.316617][ C2] sd 0:0:0:0: [sda] tag#25 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 76.316645][ C2] sd 0:0:0:0: [sda] tag#25 CDB: Write(10) 2a 00 00 10 07 6e 00 00 08 00 [ 76.316667][ C2] sd 0:0:0:0: [sda] tag#25 scsi host busy 1 failed 0 [ 76.316686][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 76.316706][ C2] sd 0:0:0:0: [sda] tag#25 sd_done: completed 4096 of 4096 bytes [ 76.316726][ C2] sd 0:0:0:0: [sda] tag#25 8 sectors total, 4096 bytes done. [ 76.316799][ T1301] sd 0:0:0:0: [sda] tag#26 Send: scmd 0xffff888023ce5110 [ 76.316830][ T1301] sd 0:0:0:0: [sda] tag#26 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 76.317143][ C2] sd 0:0:0:0: [sda] tag#26 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 76.317203][ C2] sd 0:0:0:0: [sda] tag#26 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 76.317226][ C2] sd 0:0:0:0: [sda] tag#26 scsi host busy 1 failed 0 [ 76.317243][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 76.317262][ C2] sd 0:0:0:0: [sda] tag#26 sd_done: completed 0 of 0 bytes [ 76.317279][ C2] sd 0:0:0:0: [sda] tag#26 0 sectors total, 0 bytes done. [ 76.333313][ T13] team0 (unregistering): Port device team_slave_0 removed [ 76.442752][ T5441] 8021q: adding VLAN 0 to HW filter on device eth10 [ 76.635430][ T5733] Bluetooth: hci4: command tx timeout [ 76.687554][ T7529] netlink: 'syz.5.392': attribute type 12 has an invalid length. [ 76.705201][ T5441] 8021q: adding VLAN 0 to HW filter on device eth11 [ 76.776739][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.882832][ T5441] 8021q: adding VLAN 0 to HW filter on device eth12 [ 76.941843][ T7423] veth0_vlan: entered promiscuous mode [ 76.945125][ T7423] veth1_vlan: entered promiscuous mode [ 76.958930][ T7423] veth0_macvtap: entered promiscuous mode [ 76.961142][ T7423] veth1_macvtap: entered promiscuous mode [ 76.968938][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.978680][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.035526][ T5774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.036695][ T5774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.036718][ T5774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.036735][ T5774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.044962][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.044976][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.068304][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.068316][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.071849][ T5441] 8021q: adding VLAN 0 to HW filter on device eth13 [ 77.115505][ T9] sr 2:0:0:0: [sr0] tag#15 Send: scmd 0xffff88802b730a10 [ 77.115588][ T9] sr 2:0:0:0: [sr0] tag#15 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 77.115888][ C2] sr 2:0:0:0: [sr0] tag#15 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 77.115919][ C2] sr 2:0:0:0: [sr0] tag#15 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 77.115946][ C2] sr 2:0:0:0: [sr0] tag#15 scsi host busy 1 failed 0 [ 77.115968][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 77.115990][ C2] sr 2:0:0:0: [sr0] tag#15 0 sectors total, 8 bytes done. [ 77.400798][ T7576] netlink: 'syz.5.394': attribute type 2 has an invalid length. [ 77.400812][ T7576] netlink: 48 bytes leftover after parsing attributes in process `syz.5.394'. [ 77.408334][ T7576] : entered promiscuous mode [ 77.409931][ T7577] netlink: 'syz.5.394': attribute type 2 has an invalid length. [ 77.409942][ T7577] netlink: 48 bytes leftover after parsing attributes in process `syz.5.394'. [ 77.446466][ T7581] netlink: 44 bytes leftover after parsing attributes in process `syz.5.395'. [ 78.498271][ T5818] usb 6-1: USB disconnect, device number 3 [ 78.530791][ T7609] FAULT_INJECTION: forcing a failure. [ 78.530791][ T7609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 78.530820][ T7609] CPU: 0 UID: 0 PID: 7609 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) [ 78.530839][ T7609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.530850][ T7609] Call Trace: [ 78.530856][ T7609] [ 78.530862][ T7609] dump_stack_lvl+0x100/0x190 [ 78.530908][ T7609] should_fail_ex.cold+0x5/0xa [ 78.530932][ T7609] get_futex_key+0x1d0/0x14f0 [ 78.530958][ T7609] ? __pfx_get_futex_key+0x10/0x10 [ 78.530979][ T7609] ? find_held_lock+0x2b/0x80 [ 78.531001][ T7609] ? futex_wake+0x4ea/0x5e0 [ 78.531024][ T7609] futex_wake+0xf4/0x5e0 [ 78.531043][ T7609] ? __pfx_futex_wake+0x10/0x10 [ 78.531059][ T7609] ? lock_acquire+0x1d1/0x380 [ 78.531080][ T7609] ? find_held_lock+0x2b/0x80 [ 78.531101][ T7609] ? __fget_files+0x215/0x3d0 [ 78.531128][ T7609] ? __fget_files+0x215/0x3d0 [ 78.531152][ T7609] do_futex+0x2b2/0x440 [ 78.531176][ T7609] ? __pfx_do_futex+0x10/0x10 [ 78.531201][ T7609] ? fdget+0x18b/0x210 [ 78.531223][ T7609] __x64_sys_futex+0x34f/0x4d0 [ 78.531258][ T7609] ? __pfx___x64_sys_futex+0x10/0x10 [ 78.531290][ T7609] do_syscall_64+0x123/0x790 [ 78.531338][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.531358][ T7609] RIP: 0033:0x7f7b2e99e159 [ 78.531378][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.531394][ T7609] RSP: 002b:00007f7b2f7f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.531411][ T7609] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa8 RCX: 00007f7b2e99e159 [ 78.531423][ T7609] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b2ec25fac [ 78.531433][ T7609] RBP: 00007f7b2ec25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 78.531443][ T7609] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.531454][ T7609] R13: 00007f7b2ec26038 R14: 00007ffe5a4312c0 R15: 00007ffe5a4313a8 [ 78.531476][ T7609] [ 78.663241][ T5733] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 78.715795][ T5733] Bluetooth: hci4: command tx timeout [ 78.790380][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 78.790704][ T7617] syzkaller0: entered promiscuous mode [ 78.790721][ T7617] syzkaller0: entered allmulticast mode [ 78.996276][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.6.409'. [ 79.022533][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.023520][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.023657][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.023749][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.023828][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.023901][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.024027][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.024160][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.024267][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.024340][ T7632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 79.024714][ T7634] overlayfs: cannot append lower layer [ 79.048347][ T44] kauditd_printk_skb: 16 callbacks suppressed [ 79.048361][ T44] audit: type=1400 audit(1790254218.406:829): avc: denied { read write } for pid=7636 comm="syz.6.410" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.048385][ T44] audit: type=1400 audit(1790254218.406:830): avc: denied { open } for pid=7636 comm="syz.6.410" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 79.068305][ T44] audit: type=1400 audit(1790254218.426:831): avc: denied { name_bind } for pid=7636 comm="syz.6.410" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 79.068887][ T7639] tmpfs: Unknown parameter './file0' [ 79.205406][ T9] sr 2:0:0:0: [sr0] tag#16 Send: scmd 0xffff88802b730d10 [ 79.205435][ T9] sr 2:0:0:0: [sr0] tag#16 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.205753][ C2] sr 2:0:0:0: [sr0] tag#16 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.205783][ C2] sr 2:0:0:0: [sr0] tag#16 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.205820][ C2] sr 2:0:0:0: [sr0] tag#16 scsi host busy 1 failed 0 [ 79.205857][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 79.205881][ C2] sr 2:0:0:0: [sr0] tag#16 0 sectors total, 8 bytes done. [ 79.239960][ T7645] sr 2:0:0:0: [sr0] tag#1 Send: scmd 0xffff88802b734610 [ 79.239994][ T7645] sr 2:0:0:0: [sr0] tag#1 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.240384][ C2] sr 2:0:0:0: [sr0] tag#1 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.240429][ C2] sr 2:0:0:0: [sr0] tag#1 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.240472][ C2] sr 2:0:0:0: [sr0] tag#1 scsi host busy 1 failed 0 [ 79.240506][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 79.240540][ C2] sr 2:0:0:0: [sr0] tag#1 0 sectors total, 8 bytes done. [ 79.241632][ T7645] sr 2:0:0:0: [sr0] tag#9 Send: scmd 0xffff88802b73be10 [ 79.241663][ T7645] sr 2:0:0:0: [sr0] tag#9 CDB: Test Unit Ready 00 00 00 00 00 00 [ 79.241889][ C2] sr 2:0:0:0: [sr0] tag#9 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.241918][ C2] sr 2:0:0:0: [sr0] tag#9 CDB: Test Unit Ready 00 00 00 00 00 00 [ 79.241947][ C2] sr 2:0:0:0: [sr0] tag#9 scsi host busy 1 failed 0 [ 79.241972][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 79.241998][ C2] sr 2:0:0:0: [sr0] tag#9 0 sectors total, 0 bytes done. [ 79.242262][ T7508] sr 2:0:0:0: [sr0] tag#2 Send: scmd 0xffff88802b734910 [ 79.242288][ T7508] sr 2:0:0:0: [sr0] tag#2 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.242562][ C2] sr 2:0:0:0: [sr0] tag#2 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.242588][ C2] sr 2:0:0:0: [sr0] tag#2 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 79.242609][ C2] sr 2:0:0:0: [sr0] tag#2 scsi host busy 1 failed 0 [ 79.242627][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 79.242645][ C2] sr 2:0:0:0: [sr0] tag#2 0 sectors total, 8 bytes done. [ 79.242792][ T7508] sr 2:0:0:0: [sr0] tag#3 Send: scmd 0xffff88802b734c10 [ 79.242817][ T7508] sr 2:0:0:0: [sr0] tag#3 CDB: Test Unit Ready 00 00 00 00 00 00 [ 79.243013][ C2] sr 2:0:0:0: [sr0] tag#3 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.243038][ C2] sr 2:0:0:0: [sr0] tag#3 CDB: Test Unit Ready 00 00 00 00 00 00 [ 79.243061][ C2] sr 2:0:0:0: [sr0] tag#3 scsi host busy 1 failed 0 [ 79.243081][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 79.243102][ C2] sr 2:0:0:0: [sr0] tag#3 0 sectors total, 0 bytes done. [ 79.297366][ T44] audit: type=1400 audit(1790254218.656:832): avc: denied { ioctl } for pid=7644 comm="syz.1.412" path="socket:[20775]" dev="sockfs" ino=20775 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.675093][ T44] audit: type=1400 audit(1790254219.026:833): avc: denied { nosuid_transition } for pid=7653 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 79.676258][ T44] audit: type=1400 audit(1790254219.026:834): avc: denied { transition } for pid=7653 comm="syz.5.414" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 79.676593][ T44] audit: type=1400 audit(1790254219.036:835): avc: denied { entrypoint } for pid=7653 comm="syz.5.414" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3099 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.676639][ T44] audit: type=1400 audit(1790254219.036:836): avc: denied { share } for pid=7653 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 79.676748][ T44] audit: type=1400 audit(1790254219.036:837): avc: denied { noatsecure } for pid=7653 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 79.799206][ T7661] netlink: 'syz.5.417': attribute type 11 has an invalid length. [ 79.846890][ T7666] lo: entered allmulticast mode [ 79.847296][ T7666] bond0: entered allmulticast mode [ 79.847753][ T7666] dummy0: entered allmulticast mode [ 79.848297][ T7666] eql: entered allmulticast mode [ 79.849310][ T7666] ifb0: entered allmulticast mode [ 79.849666][ T7666] ifb1: entered allmulticast mode [ 79.853039][ T7666] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 79.862722][ T7666] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 79.866231][ T7666] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 79.866593][ T7666] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 79.867082][ T7666] hwsim0: entered allmulticast mode [ 79.867183][ T7666] ieee802154 phy0 wpan0: entered allmulticast mode [ 79.867330][ T7666] ieee802154 phy1 wpan1: entered allmulticast mode [ 79.867471][ T7666] teql0: entered allmulticast mode [ 79.867565][ T7666] tunl0: entered allmulticast mode [ 79.867661][ T7666] gre0: entered allmulticast mode [ 79.867732][ T7666] gretap0: entered allmulticast mode [ 79.867801][ T7666] erspan0: entered allmulticast mode [ 79.867874][ T7666] ip_vti0: entered allmulticast mode [ 79.867966][ T7666] ip6_vti0: entered allmulticast mode [ 79.868036][ T7666] sit0: entered allmulticast mode [ 79.868108][ T7666] ip6tnl0: entered allmulticast mode [ 79.868178][ T7666] ip6gre0: entered allmulticast mode [ 79.868249][ T7666] lapb0: entered allmulticast mode [ 79.868399][ T7666] lapb1: entered allmulticast mode [ 79.868531][ T7666] lapb2: entered allmulticast mode [ 79.868665][ T7666] lapb3: entered allmulticast mode [ 79.868793][ T7666] lapb4: entered allmulticast mode [ 79.868923][ T7666] lapb5: entered allmulticast mode [ 79.869058][ T7666] lapb6: entered allmulticast mode [ 79.869422][ T7666] lowpan0: entered allmulticast mode [ 79.869543][ T7666] bond1: entered allmulticast mode [ 79.869900][ T7666] lapb7: entered allmulticast mode [ 79.870067][ T7666] netdevsim netdevsim3 eth2: entered allmulticast mode [ 79.871412][ T7666] netdevsim netdevsim3 eth3: entered allmulticast mode [ 79.871885][ T7666] netdevsim netdevsim3 eth4: entered allmulticast mode [ 79.872345][ T7666] netdevsim netdevsim3 eth5: entered allmulticast mode [ 79.872965][ T7666] lapb8: entered allmulticast mode [ 79.873158][ T7666] netdevsim netdevsim0 eth6: entered allmulticast mode [ 79.873628][ T7666] netdevsim netdevsim0 eth7: entered allmulticast mode [ 79.874078][ T7666] netdevsim netdevsim0 eth8: entered allmulticast mode [ 79.874551][ T7666] netdevsim netdevsim0 eth9: entered allmulticast mode [ 79.875611][ T7666] netdevsim netdevsim4 eth10: entered allmulticast mode [ 79.877167][ T7666] netdevsim netdevsim4 eth11: entered allmulticast mode [ 79.878465][ T7666] netdevsim netdevsim4 eth12: entered allmulticast mode [ 79.878916][ T7666] netdevsim netdevsim4 eth13: entered allmulticast mode [ 79.977238][ T7670] FAULT_INJECTION: forcing a failure. [ 79.977238][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 79.977403][ T7670] CPU: 2 UID: 0 PID: 7670 Comm: syz.5.420 Not tainted syzkaller #0 PREEMPT(full) [ 79.977423][ T7670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.977435][ T7670] Call Trace: [ 79.977441][ T7670] [ 79.977448][ T7670] dump_stack_lvl+0x100/0x190 [ 79.977478][ T7670] should_fail_ex.cold+0x5/0xa [ 79.977504][ T7670] should_failslab+0xc2/0x120 [ 79.977527][ T7670] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.977548][ T7670] ? security_file_alloc+0x34/0x2c0 [ 79.977574][ T7670] security_file_alloc+0x34/0x2c0 [ 79.977597][ T7670] init_file+0x95/0x480 [ 79.977621][ T7670] alloc_empty_file+0x79/0x1c0 [ 79.977646][ T7670] path_openat+0xdb/0x2440 [ 79.977673][ T7670] ? __pfx_path_openat+0x10/0x10 [ 79.977703][ T7670] do_file_open+0x20e/0x430 [ 79.977728][ T7670] ? __pfx_do_file_open+0x10/0x10 [ 79.977767][ T7670] ? _raw_spin_unlock+0x28/0x50 [ 79.977792][ T7670] ? alloc_fd+0x471/0x7a0 [ 79.977821][ T7670] do_sys_openat2+0x10f/0x1e0 [ 79.977844][ T7670] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.977870][ T7670] ? fput+0x7c/0x100 [ 79.977898][ T7670] __x64_sys_openat+0x12d/0x210 [ 79.977923][ T7670] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.977957][ T7670] do_syscall_64+0x123/0x790 [ 79.977985][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.978004][ T7670] RIP: 0033:0x7f381e95e98e [ 79.978019][ T7670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.978037][ T7670] RSP: 002b:00007f381f808ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.978055][ T7670] RAX: ffffffffffffffda RBX: 00007f381f8096c0 RCX: 00007f381e95e98e [ 79.978068][ T7670] RDX: 0000000000000002 RSI: 00007f381f808f90 RDI: ffffffffffffff9c [ 79.978078][ T7670] RBP: 00007f381ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 79.978089][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.978100][ T7670] R13: 00007f381ec26038 R14: 00007f381ec25fa0 R15: 00007fff7fd1a098 [ 79.978128][ T7670] [ 80.083664][ T7674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.152273][ T44] audit: type=1400 audit(1790254219.506:838): avc: denied { mmap_zero } for pid=7676 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 80.216364][ T5733] Bluetooth: hci0: unexpected event for opcode 0x0105 [ 80.887819][ T5733] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 80.887899][ T5733] Bluetooth: hci1: Injecting HCI hardware error event [ 80.888961][ T5733] Bluetooth: hci1: hardware error 0x00 [ 80.933186][ T7696] IPVS: length: 86 != 8 [ 80.962077][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 81.036344][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'. [ 81.122035][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0105 [ 81.149023][ T5731] Bluetooth: hci4: unexpected cc 0x200b length: 2 > 1 [ 81.243561][ T7720] random: crng reseeded on system resumption [ 81.275404][ T50] sr 2:0:0:0: [sr0] tag#4 Send: scmd 0xffff88802b734f10 [ 81.275433][ T50] sr 2:0:0:0: [sr0] tag#4 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 81.275795][ C2] sr 2:0:0:0: [sr0] tag#4 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 81.275841][ C2] sr 2:0:0:0: [sr0] tag#4 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 81.275884][ C2] sr 2:0:0:0: [sr0] tag#4 scsi host busy 1 failed 0 [ 81.275920][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 81.275963][ C2] sr 2:0:0:0: [sr0] tag#4 0 sectors total, 8 bytes done. [ 81.652437][ T5099] sd 0:0:0:0: [sda] tag#27 sd_setup_read_write_cmnd: block=1050486, count=72 [ 81.652483][ T5099] sd 0:0:0:0: [sda] tag#27 writing 72/72 512 byte blocks. [ 81.652528][ T5099] sd 0:0:0:0: [sda] tag#27 Send: scmd 0xffff88802b6e2510 [ 81.652564][ T5099] sd 0:0:0:0: [sda] tag#27 CDB: Write(10) 2a 00 00 10 07 76 00 00 48 00 [ 81.653235][ C2] sd 0:0:0:0: [sda] tag#27 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 81.653260][ C2] sd 0:0:0:0: [sda] tag#27 CDB: Write(10) 2a 00 00 10 07 76 00 00 48 00 [ 81.653290][ C2] sd 0:0:0:0: [sda] tag#27 scsi host busy 1 failed 0 [ 81.653308][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 81.653329][ C2] sd 0:0:0:0: [sda] tag#27 sd_done: completed 36864 of 36864 bytes [ 81.653349][ C2] sd 0:0:0:0: [sda] tag#27 72 sectors total, 36864 bytes done. [ 81.653717][ T1301] sd 0:0:0:0: [sda] tag#28 Send: scmd 0xffff888023ce5110 [ 81.653740][ T1301] sd 0:0:0:0: [sda] tag#28 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 81.654119][ C2] sd 0:0:0:0: [sda] tag#28 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 81.654146][ C2] sd 0:0:0:0: [sda] tag#28 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 81.654172][ C2] sd 0:0:0:0: [sda] tag#28 scsi host busy 1 failed 0 [ 81.654211][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 81.654242][ C2] sd 0:0:0:0: [sda] tag#28 sd_done: completed 0 of 0 bytes [ 81.654264][ C2] sd 0:0:0:0: [sda] tag#28 0 sectors total, 0 bytes done. [ 81.654333][ T1301] sd 0:0:0:0: [sda] tag#31 sd_setup_read_write_cmnd: block=1050558, count=8 [ 81.654355][ T1301] sd 0:0:0:0: [sda] tag#31 writing 8/8 512 byte blocks. [ 81.654376][ T1301] sd 0:0:0:0: [sda] tag#31 Send: scmd 0xffff88802b6e2810 [ 81.654396][ T1301] sd 0:0:0:0: [sda] tag#31 CDB: Write(10) 2a 00 00 10 07 be 00 00 08 00 [ 81.654681][ C2] sd 0:0:0:0: [sda] tag#31 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 81.654704][ C2] sd 0:0:0:0: [sda] tag#31 CDB: Write(10) 2a 00 00 10 07 be 00 00 08 00 [ 81.654730][ C2] sd 0:0:0:0: [sda] tag#31 scsi host busy 1 failed 0 [ 81.654748][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 81.654769][ C2] sd 0:0:0:0: [sda] tag#31 sd_done: completed 4096 of 4096 bytes [ 81.654788][ C2] sd 0:0:0:0: [sda] tag#31 8 sectors total, 4096 bytes done. [ 81.654851][ T1301] sd 0:0:0:0: [sda] tag#0 Send: scmd 0xffff888023ce5110 [ 81.654873][ T1301] sd 0:0:0:0: [sda] tag#0 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 81.655129][ C2] sd 0:0:0:0: [sda] tag#0 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 81.655152][ C2] sd 0:0:0:0: [sda] tag#0 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 81.655174][ C2] sd 0:0:0:0: [sda] tag#0 scsi host busy 1 failed 0 [ 81.655192][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 81.655216][ C2] sd 0:0:0:0: [sda] tag#0 sd_done: completed 0 of 0 bytes [ 81.655236][ C2] sd 0:0:0:0: [sda] tag#0 0 sectors total, 0 bytes done. [ 81.656214][ T7723] netlink: 44 bytes leftover after parsing attributes in process `syz.5.439'. [ 81.734476][ T7734] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 81.742561][ T7738] device-mapper: ioctl: Target spec extends beyond end of parameters [ 81.742574][ T7738] device-mapper: ioctl: unable to find target [ 81.788969][ T7745] netlink: 48 bytes leftover after parsing attributes in process `syz.6.444'. [ 81.952096][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0105 [ 82.075882][ T7496] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 82.227221][ T7496] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 82.228007][ T7496] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.228031][ T7496] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.228043][ T7496] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 82.228054][ T7496] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.228072][ T7496] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.245777][ T7763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.451'. [ 82.323045][ T5731] Bluetooth: hci0: Unable to find connection with handle 0x00c8 [ 82.326628][ T7768] netlink: Invalid conntrack timeout [ 82.326644][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.558357][ T5818] wiimote 0005:057E:0330.0005: unknown main item tag 0x0 [ 82.558386][ T5818] wiimote 0005:057E:0330.0005: unknown main item tag 0x0 [ 82.558406][ T5818] wiimote 0005:057E:0330.0005: unknown main item tag 0x0 [ 82.565505][ T5818] wiimote 0005:057E:0330.0005: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 82.565838][ T5818] wiimote 0005:057E:0330.0005: New device registered [ 82.658800][ T7781] wiimote 0005:057E:0330.0005: Device removed [ 82.845389][ T1380] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.955528][ T5733] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 83.005398][ T1380] usb 7-1: Using ep0 maxpacket: 8 [ 83.014794][ T1380] usb 7-1: unable to get BOS descriptor or descriptor too short [ 83.014821][ T1380] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 83.014841][ T1380] usb 7-1: no configurations [ 83.014847][ T1380] usb 7-1: can't read configurations, error -22 [ 83.205408][ T5733] Bluetooth: hci4: command tx timeout [ 83.355577][ T7496] sr 2:0:0:0: [sr0] tag#5 Send: scmd 0xffff88802b735210 [ 83.355610][ T7496] sr 2:0:0:0: [sr0] tag#5 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 83.357001][ C2] sr 2:0:0:0: [sr0] tag#5 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.357051][ C2] sr 2:0:0:0: [sr0] tag#5 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 83.357089][ C2] sr 2:0:0:0: [sr0] tag#5 scsi host busy 1 failed 0 [ 83.357111][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 83.357130][ C2] sr 2:0:0:0: [sr0] tag#5 0 sectors total, 8 bytes done. [ 83.485569][ T10] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 83.596703][ T5818] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2) [ 83.611049][ T5818] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input15 [ 83.621484][ T5818] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input16 [ 83.625523][ T10] usb 6-1: device descriptor read/64, error -71 [ 83.631886][ T5818] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input14 [ 83.853370][ T7821] sd 0:0:0:0: [sg0] sg_open: flags=0x8002 [ 83.853405][ T7821] sd 0:0:0:0: [sg0] sg_add_sfp: sfp=0xffff88802cb10000 [ 83.853424][ T7821] sd 0:0:0:0: [sg0] sg_build_reserve: req_size=32768 [ 83.853443][ T7821] sd 0:0:0:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768 [ 83.853483][ T7821] sd 0:0:0:0: [sg0] sg_build_indirect: k=0, num=32768, ret_sz=32768 [ 83.853502][ T7821] sd 0:0:0:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=0 [ 83.853520][ T7821] sd 0:0:0:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1 [ 83.853880][ T7821] sd 0:0:0:0: [sg0] sg_ioctl: cmd=0x5393 [ 83.853930][ T7821] sd 0:0:0:0: [sda] tag#14 Send: scmd 0xffff88802b6e2b10 [ 83.853954][ T7821] sd 0:0:0:0: [sda] tag#14 CDB: Security protocol out b5 00 00 00 0c 00 00 00 00 00 00 00 [ 83.854011][ C3] sd 0:0:0:0: [sda] tag#14 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.854032][ C3] sd 0:0:0:0: [sda] tag#14 CDB: Security protocol out b5 00 00 00 0c 00 00 00 00 00 00 00 [ 83.854052][ C3] sd 0:0:0:0: [sda] tag#14 Sense Key : Illegal Request [current] [ 83.854070][ C3] sd 0:0:0:0: [sda] tag#14 Add. Sense: Invalid command operation code [ 83.854090][ C3] sd 0:0:0:0: [sda] tag#14 scsi host busy 1 failed 0 [ 83.854106][ C3] sd 0:0:0:0: Notifying upper driver of completion (result 402) [ 83.854124][ C3] sd 0:0:0:0: [sda] tag#14 0 sectors total, 0 bytes done. [ 83.854372][ T7820] sd 0:0:0:0: [sg0] sg_release [ 83.857123][ T5988] sd 0:0:0:0: [sg0] sg_remove_sfp: bufflen=32768, k_use_sg=1 [ 83.857158][ T5988] sd 0:0:0:0: [sg0] sg_remove_scat: k_use_sg=1 [ 83.857189][ T5988] sd 0:0:0:0: [sg0] sg_remove_scat: k=0, pg=0xffffea000145ae00 [ 83.857244][ T5988] sd 0:0:0:0: [sg0] sg_remove_sfp: sfp=0xffff88802cb10000 [ 83.875385][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 84.005400][ T10] usb 6-1: device descriptor read/64, error -71 [ 84.036674][ T7826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.037186][ T7826] block device autoloading is deprecated and will be removed. [ 84.038119][ T7825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.038133][ T7825] block device autoloading is deprecated and will be removed. [ 84.101879][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 84.101897][ T44] audit: type=1400 audit(1790254223.456:848): avc: denied { name_bind } for pid=7827 comm="syz.2.466" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.102152][ T44] audit: type=1400 audit(1790254223.456:849): avc: denied { node_bind } for pid=7827 comm="syz.2.466" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.116880][ T10] usb usb6-port1: attempt power cycle [ 84.293635][ T7837] x_tables: duplicate underflow at hook 1 [ 84.475451][ T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 84.495868][ T10] usb 6-1: device descriptor read/8, error -71 [ 84.538701][ T7852] openvswitch: netlink: Missing key (keys=40, expected=100) [ 84.538748][ T44] audit: type=1400 audit(1790254223.896:850): avc: denied { create } for pid=7849 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.539005][ T44] audit: type=1400 audit(1790254223.896:851): avc: denied { setopt } for pid=7849 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.745540][ T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 84.776269][ T10] usb 6-1: device descriptor read/8, error -71 [ 84.834971][ T5498] usb 11-1: USB disconnect, device number 2 [ 84.865783][ T7855] overlayfs: failed to resolve './file1': -2 [ 84.885778][ T10] usb usb6-port1: unable to enumerate USB device [ 85.108731][ T7864] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 85.201060][ T7869] FAULT_INJECTION: forcing a failure. [ 85.201060][ T7869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.201088][ T7869] CPU: 3 UID: 0 PID: 7869 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) [ 85.201106][ T7869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.201133][ T7869] Call Trace: [ 85.201146][ T7869] [ 85.201154][ T7869] dump_stack_lvl+0x100/0x190 [ 85.201193][ T7869] should_fail_ex.cold+0x5/0xa [ 85.201218][ T7869] _copy_from_user+0x2e/0xd0 [ 85.201243][ T7869] __sys_bpf+0x2f5/0x4a30 [ 85.201269][ T7869] ? __pfx___sys_bpf+0x10/0x10 [ 85.201286][ T7869] ? find_held_lock+0x2b/0x80 [ 85.201311][ T7869] ? get_pid_task+0xfc/0x250 [ 85.201334][ T7869] ? get_pid_task+0xfc/0x250 [ 85.201366][ T7869] ? find_held_lock+0x2b/0x80 [ 85.201401][ T7869] ? rcu_read_lock_any_held+0x6a/0x90 [ 85.201427][ T7869] ? find_held_lock+0x2b/0x80 [ 85.201451][ T7869] ? ksys_write+0x190/0x250 [ 85.201469][ T7869] ? ksys_write+0x190/0x250 [ 85.201487][ T7869] ? lock_acquire+0x1d1/0x380 [ 85.201523][ T7869] ? fput+0x7c/0x100 [ 85.201546][ T7869] ? ksys_write+0x1ac/0x250 [ 85.201567][ T7869] ? __x64_sys_bpf+0xce/0x140 [ 85.201583][ T7869] __x64_sys_bpf+0xce/0x140 [ 85.201601][ T7869] ? do_syscall_64+0xae/0x790 [ 85.201633][ T7869] do_syscall_64+0x123/0x790 [ 85.201660][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.201677][ T7869] RIP: 0033:0x7fcc7839e159 [ 85.201690][ T7869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.201705][ T7869] RSP: 002b:00007fcc791d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.201727][ T7869] RAX: ffffffffffffffda RBX: 00007fcc78625fa0 RCX: 00007fcc7839e159 [ 85.201738][ T7869] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 85.201747][ T7869] RBP: 00007fcc791d9090 R08: 0000000000000000 R09: 0000000000000000 [ 85.201759][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.201770][ T7869] R13: 00007fcc78626038 R14: 00007fcc78625fa0 R15: 00007ffc6254d058 [ 85.201794][ T7869] [ 85.242155][ T7871] netlink: 'syz.6.481': attribute type 15 has an invalid length. [ 85.243510][ T7873] macvlan0: entered promiscuous mode [ 85.252638][ T7871] netlink: 'syz.6.481': attribute type 15 has an invalid length. [ 85.252789][ T5774] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.252916][ T5774] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.252943][ T5774] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.252961][ T5774] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 85.279208][ T7880] netlink: 96 bytes leftover after parsing attributes in process `syz.6.484'. [ 85.286737][ T44] audit: type=1400 audit(1790254224.646:852): avc: denied { write } for pid=7879 comm="syz.2.483" name="ip_vs" dev="proc" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.291521][ T7881] FAULT_INJECTION: forcing a failure. [ 85.291521][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 85.291585][ T7881] CPU: 1 UID: 0 PID: 7881 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) [ 85.291605][ T7881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.291615][ T7881] Call Trace: [ 85.291622][ T7881] [ 85.291628][ T7881] dump_stack_lvl+0x100/0x190 [ 85.291658][ T7881] should_fail_ex.cold+0x5/0xa [ 85.291683][ T7881] should_failslab+0xc2/0x120 [ 85.291706][ T7881] __kmalloc_noprof+0xfc/0x840 [ 85.291724][ T7881] ? rcu_is_watching+0x13/0xc0 [ 85.291749][ T7881] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.291777][ T7881] tomoyo_realpath_from_path+0xb6/0x690 [ 85.291805][ T7881] tomoyo_path_number_perm+0x23c/0x580 [ 85.291823][ T7881] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.291843][ T7881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.291864][ T7881] ? __pfx_futex_wait+0x10/0x10 [ 85.291886][ T7881] ? __lock_acquire+0x5c0/0x1f40 [ 85.291917][ T7881] ? __fget_files+0x34/0x3d0 [ 85.291938][ T7881] ? find_held_lock+0x2b/0x80 [ 85.291977][ T7881] ? hook_file_ioctl_common+0x140/0x440 [ 85.292008][ T7881] ? __fget_files+0x21f/0x3d0 [ 85.292036][ T7881] security_file_ioctl+0xd3/0x230 [ 85.292058][ T7881] __x64_sys_ioctl+0xb7/0x210 [ 85.292078][ T7881] do_syscall_64+0x123/0x790 [ 85.292106][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.292125][ T7881] RIP: 0033:0x7fcc7839e159 [ 85.292141][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.292158][ T7881] RSP: 002b:00007fcc791d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.292177][ T7881] RAX: ffffffffffffffda RBX: 00007fcc78625fa0 RCX: 00007fcc7839e159 [ 85.292187][ T7881] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000004 [ 85.292198][ T7881] RBP: 00007fcc7843506b R08: 0000000000000000 R09: 0000000000000000 [ 85.292208][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.292219][ T7881] R13: 00007fcc78626038 R14: 00007fcc78625fa0 R15: 00007ffc6254d058 [ 85.292242][ T7881] [ 85.292334][ T7881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.316222][ T44] audit: type=1400 audit(1790254224.676:853): avc: denied { module_request } for pid=7882 comm="syz.6.485" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.445591][ T5831] sr 2:0:0:0: [sr0] tag#6 Send: scmd 0xffff88802b735510 [ 85.445639][ T5831] sr 2:0:0:0: [sr0] tag#6 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 85.446035][ C2] sr 2:0:0:0: [sr0] tag#6 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 85.446065][ C2] sr 2:0:0:0: [sr0] tag#6 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 85.446098][ C2] sr 2:0:0:0: [sr0] tag#6 scsi host busy 1 failed 0 [ 85.446120][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 85.446143][ C2] sr 2:0:0:0: [sr0] tag#6 0 sectors total, 8 bytes done. [ 85.468725][ T44] audit: type=1400 audit(1790254224.826:854): avc: denied { read } for pid=7898 comm="syz.6.489" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.468756][ T44] audit: type=1400 audit(1790254224.826:855): avc: denied { open } for pid=7898 comm="syz.6.489" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.527661][ T44] audit: type=1400 audit(1790254224.886:856): avc: denied { ioctl } for pid=7898 comm="syz.6.489" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 85.545353][ T44] audit: type=1400 audit(1790254224.896:857): avc: denied { transfer } for pid=7896 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.545609][ T7904] binder: 7896:7904 ioctl 4188aec6 2000000040c0 returned -22 [ 85.785393][ T5831] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 85.935455][ T5831] usb 11-1: Using ep0 maxpacket: 16 [ 85.936531][ T5831] usb 11-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=12.66 [ 85.937479][ T5831] usb 11-1: config 6 has an invalid interface number: 139 but max is 3 [ 85.937499][ T5831] usb 11-1: config 6 has an invalid interface number: 144 but max is 3 [ 85.937516][ T5831] usb 11-1: config 6 has an invalid interface number: 4 but max is 3 [ 85.937532][ T5831] usb 11-1: config 6 has an invalid interface number: 30 but max is 3 [ 85.937547][ T5831] usb 11-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 85.937562][ T5831] usb 11-1: config 6 has no interface number 0 [ 85.937575][ T5831] usb 11-1: config 6 has no interface number 1 [ 85.937588][ T5831] usb 11-1: config 6 has no interface number 2 [ 85.937600][ T5831] usb 11-1: config 6 has no interface number 3 [ 85.937654][ T5831] usb 11-1: config 6 interface 139 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 85.937675][ T5831] usb 11-1: config 6 interface 139 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 85.937721][ T5831] usb 11-1: config 6 interface 139 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 85.937740][ T5831] usb 11-1: config 6 interface 139 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 85.937768][ T5831] usb 11-1: config 6 interface 144 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 85.937789][ T5831] usb 11-1: config 6 interface 144 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 85.937805][ T5831] usb 11-1: config 6 interface 144 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 85.937823][ T5831] usb 11-1: config 6 interface 144 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 85.937844][ T5831] usb 11-1: config 6 interface 144 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 85.937862][ T5831] usb 11-1: config 6 interface 144 altsetting 5 endpoint 0x4 has an invalid bInterval 182, changing to 7 [ 85.937891][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 85.937908][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 85.937925][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 85.937943][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 85.937960][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 85.937975][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 85.937992][ T5831] usb 11-1: config 6 interface 4 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 85.938009][ T5831] usb 11-1: config 6 interface 4 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 85.938037][ T5831] usb 11-1: config 6 interface 30 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 85.938055][ T5831] usb 11-1: config 6 interface 30 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 85.938071][ T5831] usb 11-1: config 6 interface 30 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 85.938090][ T5831] usb 11-1: config 6 interface 30 altsetting 3 bulk endpoint 0xE has invalid maxpacket 32 [ 85.938109][ T5831] usb 11-1: config 6 interface 30 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 85.938126][ T5831] usb 11-1: config 6 interface 139 has no altsetting 0 [ 85.938141][ T5831] usb 11-1: config 6 interface 144 has no altsetting 0 [ 85.938154][ T5831] usb 11-1: config 6 interface 4 has no altsetting 0 [ 85.938169][ T5831] usb 11-1: config 6 interface 30 has no altsetting 0 [ 85.940068][ T5831] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.940086][ T5831] usb 11-1: Product: syz [ 85.940097][ T5831] usb 11-1: Manufacturer: ꥥ䉬ⱷꍊ谘꒳챏敱༲衛箠풂콚驈ᙑ捑鬫䧝㊢㵿눹˵衇䀶 [ 85.940113][ T5831] usb 11-1: SerialNumber: syz [ 86.280056][ T7907] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 86.353272][ T7911] FAULT_INJECTION: forcing a failure. [ 86.353272][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 86.353300][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 86.353318][ T7911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.353328][ T7911] Call Trace: [ 86.353334][ T7911] [ 86.353341][ T7911] dump_stack_lvl+0x100/0x190 [ 86.353369][ T7911] should_fail_ex.cold+0x5/0xa [ 86.353392][ T7911] should_failslab+0xc2/0x120 [ 86.353413][ T7911] __kmalloc_cache_node_noprof+0x94/0x720 [ 86.353434][ T7911] ? __get_vm_area_node+0x124/0x350 [ 86.353458][ T7911] __get_vm_area_node+0x124/0x350 [ 86.353481][ T7911] __vmalloc_node_range_noprof+0x268/0x1420 [ 86.353503][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.353527][ T7911] ? up_write+0x2dc/0x5b0 [ 86.353551][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.353574][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.353591][ T7911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.353616][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.353636][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.353656][ T7911] __vmalloc_node_noprof+0xad/0xf0 [ 86.353677][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.353699][ T7911] __vmalloc_noprof+0xa3/0x120 [ 86.353720][ T7911] ? __pfx___vmalloc_noprof+0x10/0x10 [ 86.353740][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.353758][ T7911] ? rcu_is_watching+0x13/0xc0 [ 86.353779][ T7911] ? cap_capable+0x107/0x430 [ 86.353806][ T7911] bpf_prog_alloc_no_stats+0x59/0x690 [ 86.353826][ T7911] ? security_capable+0xbd/0x260 [ 86.353852][ T7911] bpf_prog_alloc+0x3b/0x200 [ 86.353876][ T7911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.353897][ T7911] bpf_prog_load+0x49e/0x2a80 [ 86.353923][ T7911] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.353963][ T7911] __sys_bpf+0x1f46/0x4a30 [ 86.353985][ T7911] ? __pfx___sys_bpf+0x10/0x10 [ 86.354000][ T7911] ? find_held_lock+0x2b/0x80 [ 86.354021][ T7911] ? get_pid_task+0xfc/0x250 [ 86.354042][ T7911] ? get_pid_task+0xfc/0x250 [ 86.354069][ T7911] ? find_held_lock+0x2b/0x80 [ 86.354094][ T7911] ? rcu_read_lock_any_held+0x6a/0x90 [ 86.354117][ T7911] ? find_held_lock+0x2b/0x80 [ 86.354137][ T7911] ? ksys_write+0x190/0x250 [ 86.354153][ T7911] ? ksys_write+0x190/0x250 [ 86.354169][ T7911] ? lock_acquire+0x1d1/0x380 [ 86.354229][ T7911] ? fput+0x7c/0x100 [ 86.354250][ T7911] ? ksys_write+0x1ac/0x250 [ 86.354268][ T7911] ? __x64_sys_bpf+0xce/0x140 [ 86.354284][ T7911] __x64_sys_bpf+0xce/0x140 [ 86.354301][ T7911] ? do_syscall_64+0xae/0x790 [ 86.354326][ T7911] do_syscall_64+0x123/0x790 [ 86.354351][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.354367][ T7911] RIP: 0033:0x7f7b2e99e159 [ 86.354380][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.354394][ T7911] RSP: 002b:00007f7b2f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.354411][ T7911] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 86.354421][ T7911] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 86.354431][ T7911] RBP: 00007f7b2f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.354441][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.354451][ T7911] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 86.354472][ T7911] [ 86.354481][ T7911] syz.1.492: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 86.354531][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(full) [ 86.354548][ T7911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.354557][ T7911] Call Trace: [ 86.354562][ T7911] [ 86.354568][ T7911] dump_stack_lvl+0x100/0x190 [ 86.354591][ T7911] warn_alloc.cold+0x9e/0xb2 [ 86.354609][ T7911] ? __pfx_warn_alloc+0x10/0x10 [ 86.354624][ T7911] ? __kasan_kmalloc+0x8a/0xb0 [ 86.354651][ T7911] ? __get_vm_area_node+0x22b/0x350 [ 86.354677][ T7911] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 86.354701][ T7911] ? up_write+0x2dc/0x5b0 [ 86.354723][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.354746][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.354762][ T7911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.354788][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.354807][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.354827][ T7911] __vmalloc_node_noprof+0xad/0xf0 [ 86.354847][ T7911] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 86.354870][ T7911] __vmalloc_noprof+0xa3/0x120 [ 86.354896][ T7911] ? __pfx___vmalloc_noprof+0x10/0x10 [ 86.354916][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 86.354934][ T7911] ? rcu_is_watching+0x13/0xc0 [ 86.354955][ T7911] ? cap_capable+0x107/0x430 [ 86.354981][ T7911] bpf_prog_alloc_no_stats+0x59/0x690 [ 86.355001][ T7911] ? security_capable+0xbd/0x260 [ 86.355026][ T7911] bpf_prog_alloc+0x3b/0x200 [ 86.355044][ T7911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.355064][ T7911] bpf_prog_load+0x49e/0x2a80 [ 86.355090][ T7911] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.355128][ T7911] __sys_bpf+0x1f46/0x4a30 [ 86.355150][ T7911] ? __pfx___sys_bpf+0x10/0x10 [ 86.355165][ T7911] ? find_held_lock+0x2b/0x80 [ 86.355186][ T7911] ? get_pid_task+0xfc/0x250 [ 86.355206][ T7911] ? get_pid_task+0xfc/0x250 [ 86.355234][ T7911] ? find_held_lock+0x2b/0x80 [ 86.355278][ T7911] ? rcu_read_lock_any_held+0x6a/0x90 [ 86.355301][ T7911] ? find_held_lock+0x2b/0x80 [ 86.355321][ T7911] ? ksys_write+0x190/0x250 [ 86.355337][ T7911] ? ksys_write+0x190/0x250 [ 86.355353][ T7911] ? lock_acquire+0x1d1/0x380 [ 86.355384][ T7911] ? fput+0x7c/0x100 [ 86.355404][ T7911] ? ksys_write+0x1ac/0x250 [ 86.355423][ T7911] ? __x64_sys_bpf+0xce/0x140 [ 86.355438][ T7911] __x64_sys_bpf+0xce/0x140 [ 86.355455][ T7911] ? do_syscall_64+0xae/0x790 [ 86.355479][ T7911] do_syscall_64+0x123/0x790 [ 86.355504][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.355520][ T7911] RIP: 0033:0x7f7b2e99e159 [ 86.355532][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.355546][ T7911] RSP: 002b:00007f7b2f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.355561][ T7911] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 86.355571][ T7911] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 86.355581][ T7911] RBP: 00007f7b2f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.355590][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.355599][ T7911] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 86.355636][ T7911] [ 86.355831][ T7911] Mem-Info: [ 86.355840][ T7911] active_anon:39824 inactive_anon:5 isolated_anon:0 [ 86.355840][ T7911] active_file:1619 inactive_file:41261 isolated_file:0 [ 86.355840][ T7911] unevictable:1000 dirty:272 writeback:0 [ 86.355840][ T7911] slab_reclaimable:8926 slab_unreclaimable:69702 [ 86.355840][ T7911] mapped:25636 shmem:28246 pagetables:3974 [ 86.355840][ T7911] sec_pagetables:299 bounce:0 [ 86.355840][ T7911] kernel_misc_reclaimable:0 [ 86.355840][ T7911] free:436669 free_pcp:14853 free_cma:0 [ 86.355885][ T7911] Node 0 active_anon:159224kB inactive_anon:20kB active_file:6476kB inactive_file:164736kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98448kB dirty:1084kB writeback:0kB shmem:110968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:6812kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 86.355926][ T7911] Node 1 active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:4kB writeback:0kB shmem:2016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:9084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 86.355965][ T7911] Node 0 DMA free:15320kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.356008][ T7911] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 86.356036][ T7911] Node 0 DMA32 free:146108kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:159224kB inactive_anon:20kB active_file:6476kB inactive_file:164736kB unevictable:2000kB writepending:1084kB zspages:644kB present:2080628kB managed:1253220kB mlocked:0kB bounce:0kB free_pcp:22672kB local_pcp:2052kB free_cma:0kB [ 86.356080][ T7911] lowmem_reserve[]: 0 0 0 0 0 [ 86.356106][ T7911] Node 1 Normal free:1585248kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:36740kB local_pcp:9548kB free_cma:0kB [ 86.356148][ T7911] lowmem_reserve[]: 0 0 0 0 0 [ 86.356173][ T7911] Node 0 DMA: 10*4kB (U) 8*8kB (U) 9*16kB (U) 7*32kB (U) 8*64kB (U) 6*128kB (U) 7*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (M) 0*4096kB = 15320kB [ 86.356289][ T7911] Node 0 DMA32: 0*4kB 1*8kB (E) 301*16kB (UM) 535*32kB (UME) 274*64kB (UME) 125*128kB (UME) 92*256kB (UME) 81*512kB (UM) 9*1024kB (M) 2*2048kB (UM) 3*4096kB (U) = 146104kB [ 86.356464][ T7911] Node 1 Normal: 293*4kB (UM) 242*8kB (UM) 222*16kB (UM) 205*32kB (UM) 199*64kB (UM) 180*128kB (UM) 175*256kB (UM) 147*512kB (UM) 119*1024kB (U) 2*2048kB (UM) 315*4096kB (UM) = 1585252kB [ 86.356588][ T7911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.356600][ T7911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.356612][ T7911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.356624][ T7911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.356636][ T7911] 71126 total pagecache pages [ 86.356668][ T7911] 4 pages in swap cache [ 86.356675][ T7911] Free swap = 124712kB [ 86.356680][ T7911] Total swap = 124996kB [ 86.356686][ T7911] 1048443 pages RAM [ 86.356691][ T7911] 0 pages HighMem/MovableOnly [ 86.356696][ T7911] 285828 pages reserved [ 86.356702][ T7911] 0 pages cma reserved [ 86.403819][ T7915] overlayfs: overlapping lowerdir path [ 86.405913][ T7914] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 86.405941][ T7914] overlayfs: overlapping lowerdir path [ 86.431316][ T7917] syzkaller1: entered promiscuous mode [ 86.431343][ T7917] syzkaller1: entered allmulticast mode [ 87.057098][ T5099] sd 0:0:0:0: [sda] tag#16 sd_setup_read_write_cmnd: block=1050566, count=80 [ 87.057148][ T5099] sd 0:0:0:0: [sda] tag#16 writing 80/80 512 byte blocks. [ 87.057191][ T5099] sd 0:0:0:0: [sda] tag#16 Send: scmd 0xffff88802b6e5e10 [ 87.057233][ T5099] sd 0:0:0:0: [sda] tag#16 CDB: Write(10) 2a 00 00 10 07 c6 00 00 50 00 [ 87.058009][ C2] sd 0:0:0:0: [sda] tag#16 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.058035][ C2] sd 0:0:0:0: [sda] tag#16 CDB: Write(10) 2a 00 00 10 07 c6 00 00 50 00 [ 87.058065][ C2] sd 0:0:0:0: [sda] tag#16 scsi host busy 1 failed 0 [ 87.058084][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 87.058104][ C2] sd 0:0:0:0: [sda] tag#16 sd_done: completed 40960 of 40960 bytes [ 87.058124][ C2] sd 0:0:0:0: [sda] tag#16 80 sectors total, 40960 bytes done. [ 87.058645][ T5102] sd 0:0:0:0: [sda] tag#17 Send: scmd 0xffff888023ce5110 [ 87.058686][ T5102] sd 0:0:0:0: [sda] tag#17 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 87.059155][ C2] sd 0:0:0:0: [sda] tag#17 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.059179][ C2] sd 0:0:0:0: [sda] tag#17 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 87.059201][ C2] sd 0:0:0:0: [sda] tag#17 scsi host busy 1 failed 0 [ 87.059222][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 87.059241][ C2] sd 0:0:0:0: [sda] tag#17 sd_done: completed 0 of 0 bytes [ 87.059259][ C2] sd 0:0:0:0: [sda] tag#17 0 sectors total, 0 bytes done. [ 87.059348][ T1301] sd 0:0:0:0: [sda] tag#1 sd_setup_read_write_cmnd: block=1050646, count=8 [ 87.059371][ T1301] sd 0:0:0:0: [sda] tag#1 writing 8/8 512 byte blocks. [ 87.059392][ T1301] sd 0:0:0:0: [sda] tag#1 Send: scmd 0xffff88802b6e6110 [ 87.059412][ T1301] sd 0:0:0:0: [sda] tag#1 CDB: Write(10) 2a 00 00 10 08 16 00 00 08 00 [ 87.059707][ C2] sd 0:0:0:0: [sda] tag#1 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.059728][ C2] sd 0:0:0:0: [sda] tag#1 CDB: Write(10) 2a 00 00 10 08 16 00 00 08 00 [ 87.059748][ C2] sd 0:0:0:0: [sda] tag#1 scsi host busy 1 failed 0 [ 87.059765][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 87.059783][ C2] sd 0:0:0:0: [sda] tag#1 sd_done: completed 4096 of 4096 bytes [ 87.059801][ C2] sd 0:0:0:0: [sda] tag#1 8 sectors total, 4096 bytes done. [ 87.059867][ T1301] sd 0:0:0:0: [sda] tag#2 Send: scmd 0xffff888023ce5110 [ 87.059888][ T1301] sd 0:0:0:0: [sda] tag#2 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 87.060088][ C2] sd 0:0:0:0: [sda] tag#2 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.060109][ C2] sd 0:0:0:0: [sda] tag#2 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00 [ 87.060130][ C2] sd 0:0:0:0: [sda] tag#2 scsi host busy 1 failed 0 [ 87.060146][ C2] sd 0:0:0:0: Notifying upper driver of completion (result 0) [ 87.060164][ C2] sd 0:0:0:0: [sda] tag#2 sd_done: completed 0 of 0 bytes [ 87.060182][ C2] sd 0:0:0:0: [sda] tag#2 0 sectors total, 0 bytes done. [ 87.342346][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 87.375657][ T7938] FAULT_INJECTION: forcing a failure. [ 87.375657][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 87.375690][ T7938] CPU: 3 UID: 0 PID: 7938 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT(full) [ 87.375714][ T7938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.375726][ T7938] Call Trace: [ 87.375733][ T7938] [ 87.375741][ T7938] dump_stack_lvl+0x100/0x190 [ 87.375776][ T7938] should_fail_ex.cold+0x5/0xa [ 87.375804][ T7938] should_failslab+0xc2/0x120 [ 87.375831][ T7938] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.375850][ T7938] ? __alloc_skb+0x4e9/0x710 [ 87.375882][ T7938] ? __alloc_skb+0x5b7/0x710 [ 87.375905][ T7938] ? sctp_chunkify+0x51/0x2f0 [ 87.375938][ T7938] sctp_chunkify+0x51/0x2f0 [ 87.375967][ T7938] _sctp_make_chunk+0x148/0x270 [ 87.375997][ T7938] sctp_make_control+0x2f/0x2d0 [ 87.376027][ T7938] sctp_make_init+0x6d0/0xda0 [ 87.376063][ T7938] ? __pfx_sctp_make_init+0x10/0x10 [ 87.376093][ T7938] ? ip_route_output_flow+0x8b/0x150 [ 87.376122][ T7938] ? sctp_sm_lookup_event+0x10e/0x520 [ 87.376151][ T7938] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 87.376183][ T7938] sctp_sf_do_prm_asoc+0xbf/0x360 [ 87.376207][ T7938] ? __pfx_sctp_pname+0x10/0x10 [ 87.376234][ T7938] sctp_do_sm+0x17a/0x5c30 [ 87.376260][ T7938] ? find_held_lock+0x2b/0x80 [ 87.376289][ T7938] ? sctp_ulpevent_notify_peer_addr_change+0xf3/0xb70 [ 87.376315][ T7938] ? sctp_ulpevent_notify_peer_addr_change+0xf3/0xb70 [ 87.376346][ T7938] ? __pfx_sctp_do_sm+0x10/0x10 [ 87.376399][ T7938] ? sctp_connect_new_asoc+0x41e/0x770 [ 87.376425][ T7938] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 87.376455][ T7938] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 87.376485][ T7938] __sctp_connect+0x9fc/0xc70 [ 87.376511][ T7938] ? lock_acquire+0x1d1/0x380 [ 87.376537][ T7938] ? __pfx___sctp_connect+0x10/0x10 [ 87.376567][ T7938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.376594][ T7938] sctp_inet_connect+0x15f/0x220 [ 87.376623][ T7938] __sys_connect_file+0x146/0x1a0 [ 87.376648][ T7938] __sys_connect+0x141/0x170 [ 87.376670][ T7938] ? __pfx___sys_connect+0x10/0x10 [ 87.376709][ T7938] __x64_sys_connect+0x72/0xb0 [ 87.376730][ T7938] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.376760][ T7938] do_syscall_64+0x123/0x790 [ 87.376792][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.376812][ T7938] RIP: 0033:0x7fcc7839e159 [ 87.376829][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.376847][ T7938] RSP: 002b:00007fcc791d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 87.376867][ T7938] RAX: ffffffffffffffda RBX: 00007fcc78625fa0 RCX: 00007fcc7839e159 [ 87.376879][ T7938] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 000000000000000a [ 87.376891][ T7938] RBP: 00007fcc7843506b R08: 0000000000000000 R09: 0000000000000000 [ 87.376902][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.376915][ T7938] R13: 00007fcc78626038 R14: 00007fcc78625fa0 R15: 00007ffc6254d058 [ 87.376942][ T7938] [ 87.525513][ T7496] sr 2:0:0:0: [sr0] tag#7 Send: scmd 0xffff88802b735810 [ 87.525563][ T7496] sr 2:0:0:0: [sr0] tag#7 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 87.525949][ C2] sr 2:0:0:0: [sr0] tag#7 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.525996][ C2] sr 2:0:0:0: [sr0] tag#7 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 87.526043][ C2] sr 2:0:0:0: [sr0] tag#7 scsi host busy 1 failed 0 [ 87.526085][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 87.526123][ C2] sr 2:0:0:0: [sr0] tag#7 0 sectors total, 8 bytes done. [ 87.544652][ T7953] FAULT_INJECTION: forcing a failure. [ 87.544652][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 87.544680][ T7953] CPU: 3 UID: 0 PID: 7953 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT(full) [ 87.544701][ T7953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.544712][ T7953] Call Trace: [ 87.544718][ T7953] [ 87.544726][ T7953] dump_stack_lvl+0x100/0x190 [ 87.544758][ T7953] should_fail_ex.cold+0x5/0xa [ 87.544784][ T7953] should_failslab+0xc2/0x120 [ 87.544808][ T7953] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 87.544831][ T7953] ? alloc_vmap_area+0x640/0x2bb0 [ 87.544857][ T7953] alloc_vmap_area+0x640/0x2bb0 [ 87.544887][ T7953] ? kasan_save_track+0x14/0x30 [ 87.544907][ T7953] ? __kasan_kmalloc+0xaa/0xb0 [ 87.544928][ T7953] ? __pfx_alloc_vmap_area+0x10/0x10 [ 87.544952][ T7953] ? __get_vm_area_node+0x124/0x350 [ 87.544978][ T7953] __get_vm_area_node+0x1ed/0x350 [ 87.545006][ T7953] __vmalloc_node_range_noprof+0x268/0x1420 [ 87.545032][ T7953] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 87.545059][ T7953] ? up_write+0x2dc/0x5b0 [ 87.545086][ T7953] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 87.545114][ T7953] ? __lock_acquire+0x5c0/0x1f40 [ 87.545134][ T7953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.545164][ T7953] ? __lock_acquire+0x5c0/0x1f40 [ 87.545186][ T7953] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 87.545209][ T7953] __vmalloc_node_noprof+0xad/0xf0 [ 87.545233][ T7953] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 87.545279][ T7953] __vmalloc_noprof+0xa3/0x120 [ 87.545304][ T7953] ? __pfx___vmalloc_noprof+0x10/0x10 [ 87.545328][ T7953] ? __lock_acquire+0x5c0/0x1f40 [ 87.545353][ T7953] ? rcu_is_watching+0x13/0xc0 [ 87.545379][ T7953] ? cap_capable+0x107/0x430 [ 87.545409][ T7953] bpf_prog_alloc_no_stats+0x59/0x690 [ 87.545432][ T7953] ? security_capable+0xbd/0x260 [ 87.545462][ T7953] bpf_prog_alloc+0x3b/0x200 [ 87.545484][ T7953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.545507][ T7953] bpf_prog_load+0x49e/0x2a80 [ 87.545538][ T7953] ? __pfx_bpf_prog_load+0x10/0x10 [ 87.545584][ T7953] __sys_bpf+0x1f46/0x4a30 [ 87.545610][ T7953] ? __pfx___sys_bpf+0x10/0x10 [ 87.545629][ T7953] ? find_held_lock+0x2b/0x80 [ 87.545654][ T7953] ? get_pid_task+0xfc/0x250 [ 87.545691][ T7953] ? get_pid_task+0xfc/0x250 [ 87.545723][ T7953] ? find_held_lock+0x2b/0x80 [ 87.545754][ T7953] ? rcu_read_lock_any_held+0x6a/0x90 [ 87.545780][ T7953] ? find_held_lock+0x2b/0x80 [ 87.545804][ T7953] ? ksys_write+0x190/0x250 [ 87.545822][ T7953] ? ksys_write+0x190/0x250 [ 87.545840][ T7953] ? lock_acquire+0x1d1/0x380 [ 87.545876][ T7953] ? fput+0x7c/0x100 [ 87.545900][ T7953] ? ksys_write+0x1ac/0x250 [ 87.545923][ T7953] ? __x64_sys_bpf+0xce/0x140 [ 87.545941][ T7953] __x64_sys_bpf+0xce/0x140 [ 87.545961][ T7953] ? do_syscall_64+0xae/0x790 [ 87.545989][ T7953] do_syscall_64+0x123/0x790 [ 87.546019][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.546038][ T7953] RIP: 0033:0x7f7b2e99e159 [ 87.546053][ T7953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.546070][ T7953] RSP: 002b:00007f7b2f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.546088][ T7953] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 87.546100][ T7953] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 87.546111][ T7953] RBP: 00007f7b2f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.546122][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.546132][ T7953] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 87.546157][ T7953] [ 87.696118][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.783189][ T5733] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 88.009863][ T7971] syz_tun: entered allmulticast mode [ 88.309721][ T7986] xt_CT: No such helper "pptp" [ 88.319317][ T7986] FAULT_INJECTION: forcing a failure. [ 88.319317][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 88.319346][ T7986] CPU: 2 UID: 0 PID: 7986 Comm: syz.1.510 Not tainted syzkaller #0 PREEMPT(full) [ 88.319366][ T7986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.319377][ T7986] Call Trace: [ 88.319383][ T7986] [ 88.319391][ T7986] dump_stack_lvl+0x100/0x190 [ 88.319423][ T7986] should_fail_ex.cold+0x5/0xa [ 88.319450][ T7986] should_failslab+0xc2/0x120 [ 88.319499][ T7986] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.319522][ T7986] ? __mt_dup+0x61e/0xce0 [ 88.319545][ T7986] __mt_dup+0x61e/0xce0 [ 88.319568][ T7986] ? __pfx___mt_dup+0x10/0x10 [ 88.319595][ T7986] ? lock_acquire+0x1d1/0x380 [ 88.319614][ T7986] ? get_mm_exe_file+0x25/0x1a0 [ 88.319649][ T7986] dup_mmap+0x3d0/0x2370 [ 88.319676][ T7986] ? do_raw_spin_lock+0x128/0x260 [ 88.319706][ T7986] ? __pfx_dup_mmap+0x10/0x10 [ 88.319729][ T7986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.319756][ T7986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.319785][ T7986] ? __lock_acquire+0x5c0/0x1f40 [ 88.319816][ T7986] ? lock_acquire+0x1d1/0x380 [ 88.319835][ T7986] ? copy_process+0x4806/0x8370 [ 88.319867][ T7986] copy_process+0x4811/0x8370 [ 88.319901][ T7986] ? __pfx_copy_process+0x10/0x10 [ 88.319923][ T7986] ? futex_wake+0x4ea/0x5e0 [ 88.319946][ T7986] kernel_clone+0x176/0x9d0 [ 88.319969][ T7986] ? __pfx_kernel_clone+0x10/0x10 [ 88.320004][ T7986] __do_sys_clone+0xd9/0x120 [ 88.320025][ T7986] ? __pfx___do_sys_clone+0x10/0x10 [ 88.320067][ T7986] do_syscall_64+0x123/0x790 [ 88.320096][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.320115][ T7986] RIP: 0033:0x7f7b2e99e159 [ 88.320130][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.320147][ T7986] RSP: 002b:00007f7b2f7f6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 88.320165][ T7986] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 88.320179][ T7986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 88.320191][ T7986] RBP: 00007f7b2ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 88.320202][ T7986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.320213][ T7986] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 88.320246][ T7986] [ 88.380362][ C0] Illegal XDP return value 16128 on prog (id 56) dev veth1, expect packet loss! [ 88.397599][ T7986] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 88.413214][ T7991] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 88.444769][ T7986] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:15360 [ 88.491114][ T5988] usb 11-1: USB disconnect, device number 3 [ 88.753435][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.6.514'. [ 88.753510][ T8008] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 89.152293][ T44] kauditd_printk_skb: 17 callbacks suppressed [ 89.152312][ T44] audit: type=1400 audit(1790254228.506:875): avc: denied { create } for pid=8028 comm="syz.6.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 89.158277][ T44] audit: type=1400 audit(1790254228.516:876): avc: denied { ioctl } for pid=8028 comm="syz.6.521" path="socket:[20442]" dev="sockfs" ino=20442 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.208064][ T8030] syzkaller1: entered promiscuous mode [ 89.208088][ T8030] syzkaller1: entered allmulticast mode [ 89.213770][ T44] audit: type=1400 audit(1790254228.566:877): avc: denied { mount } for pid=8028 comm="syz.6.521" name="/" dev="ramfs" ino=22570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.321211][ T44] audit: type=1400 audit(1790254228.676:878): avc: denied { remount } for pid=8035 comm="syz.6.523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.338418][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 89.338533][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 89.338636][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 89.338742][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 89.338848][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 89.340301][ T44] audit: type=1400 audit(1790254228.696:879): avc: denied { bind } for pid=8035 comm="syz.6.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.340618][ T44] audit: type=1400 audit(1790254228.696:880): avc: denied { read } for pid=8035 comm="syz.6.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.524165][ T44] audit: type=1400 audit(1790254228.876:881): avc: denied { mounton } for pid=8044 comm="syz.2.525" path="/120/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.542534][ T8046] overlay: filesystem on ./file0 not supported as upperdir [ 89.581968][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 89.596764][ T50] sr 2:0:0:0: [sr0] tag#8 Send: scmd 0xffff88802b735b10 [ 89.596832][ T50] sr 2:0:0:0: [sr0] tag#8 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 89.597241][ C2] sr 2:0:0:0: [sr0] tag#8 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 89.597300][ C2] sr 2:0:0:0: [sr0] tag#8 CDB: Get event status notification 4a 01 00 00 10 00 00 00 08 00 [ 89.597367][ C2] sr 2:0:0:0: [sr0] tag#8 scsi host busy 1 failed 0 [ 89.597412][ C2] sr 2:0:0:0: Notifying upper driver of completion (result 0) [ 89.597461][ C2] sr 2:0:0:0: [sr0] tag#8 0 sectors total, 8 bytes done. [ 89.706700][ T8054] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 89.826327][ T8060] Console: switching to colour dummy device 80x25 [ 90.005390][ T30] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 90.173647][ T30] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.173684][ T30] usb 7-1: too many configurations: 181, using maximum allowed: 8 ** replaying previous printk message ** [ 90.173684][ T30] usb 7-1: too many configurations: 181, using maximum allowed: 8 [ 90.174506][ T30] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 90.174529][ T30] usb 7-1: can't read configurations, error -71 [ 90.181662][ T8060] ------------[ cut here ]------------ [ 90.181673][ T8060] Memory manager not clean during takedown. [ 90.181678][ T8060] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.1.530/8060 [ 90.198953][ T8060] Modules linked in: [ 90.200479][ T8060] CPU: 3 UID: 0 PID: 8060 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 90.203754][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.207952][ T8060] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 90.210252][ T8060] Code: 8b 43 38 48 39 c5 75 16 e8 9b 64 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 1a 09 01 06 e8 85 64 38 fc 48 8d 3d ce ea 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 a4 65 8e 48 ba 00 00 00 00 00 fc ff df [ 90.217700][ T8060] RSP: 0018:ffffc9000697f798 EFLAGS: 00010287 [ 90.219675][ T8060] RAX: 000000000002714d RBX: ffff888027b9b468 RCX: ffffc90006009000 [ 90.222023][ T8060] RDX: 0000000000080000 RSI: ffffffff85d3be0b RDI: ffffffff9150a8e0 [ 90.224438][ T8060] RBP: ffff888027b9b4a0 R08: 0000000000000007 R09: 0000000000000000 [ 90.227260][ T8060] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888027aaf500 [ 90.229803][ T8060] R13: ffff888027aaf518 R14: ffffffff85d29050 R15: 0000000000000000 [ 90.232440][ T8060] FS: 00007f7b2f7f76c0(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 90.235477][ T8060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.237458][ T8060] CR2: 00007f7b2f7f6ff8 CR3: 000000003e9bf000 CR4: 0000000000352ef0 [ 90.239867][ T8060] Call Trace: [ 90.240906][ T8060] [ 90.241792][ T8060] ? __pfx_drm_gem_init_release+0x10/0x10 [ 90.243634][ T8060] drm_managed_release+0x1bb/0x540 [ 90.245486][ T8060] ? __pfx_virtio_gpu_release+0x10/0x10 [ 90.247194][ T8060] drm_dev_put.part.0+0xca/0x140 [ 90.248757][ T8060] drm_dev_put+0x1f/0x30 [ 90.250187][ T8060] virtio_dev_remove+0xb8/0x170 [ 90.251703][ T8060] ? __pfx_virtio_dev_remove+0x10/0x10 [ 90.253393][ T8060] device_remove+0xcb/0x180 [ 90.254809][ T8060] device_release_driver_internal+0x44e/0x620 [ 90.256815][ T8060] bus_remove_device+0x2bc/0x560 [ 90.258393][ T8060] ? __pfx_bus_remove_device+0x10/0x10 [ 90.260193][ T8060] ? __pfx_device_remove_attrs+0x10/0x10 [ 90.262066][ T8060] device_del+0x376/0x9b0 [ 90.263606][ T8060] ? __pfx_device_del+0x10/0x10 [ 90.265752][ T8060] ? __pfx___might_resched+0x10/0x10 [ 90.267433][ T8060] ? __pfx_pci_device_is_present+0x10/0x10 [ 90.269305][ T8060] device_unregister+0x1d/0xe0 [ 90.270852][ T8060] unregister_virtio_device+0x39/0x60 [ 90.272566][ T8060] virtio_pci_remove+0x7c/0x110 [ 90.274017][ T8060] pci_device_remove+0xb2/0x1d0 [ 90.275633][ T8060] ? __pfx_pci_device_remove+0x10/0x10 [ 90.277407][ T8060] device_remove+0xcb/0x180 [ 90.278843][ T8060] device_release_driver_internal+0x44e/0x620 [ 90.280811][ T8060] pci_stop_bus_device+0x120/0x160 [ 90.282500][ T8060] pci_stop_and_remove_bus_device+0x58/0xa0 [ 90.284554][ T8060] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 90.286727][ T8060] remove_store+0x123/0x140 [ 90.288236][ T8060] ? __pfx_remove_store+0x10/0x10 [ 90.289861][ T8060] ? find_held_lock+0x2b/0x80 [ 90.291346][ T8060] ? sysfs_file_kobj+0xe4/0x290 [ 90.292975][ T8060] ? sysfs_file_kobj+0xe4/0x290 [ 90.294599][ T8060] ? __pfx_remove_store+0x10/0x10 [ 90.296574][ T8060] dev_attr_store+0x58/0x80 [ 90.298310][ T8060] ? __pfx_dev_attr_store+0x10/0x10 [ 90.299781][ T44] audit: type=1400 audit(1790254229.656:882): avc: denied { write } for pid=8063 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.306368][ T8060] sysfs_kf_write+0xf2/0x150 [ 90.307848][ T8060] kernfs_fop_write_iter+0x3e0/0x5f0 [ 90.309498][ T8060] ? __pfx_sysfs_kf_write+0x10/0x10 [ 90.311155][ T8060] vfs_write+0x6af/0x1050 [ 90.312541][ T8060] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 90.314398][ T8060] ? __pfx_vfs_write+0x10/0x10 [ 90.316780][ T8060] ? find_held_lock+0x2b/0x80 [ 90.318992][ T8060] ksys_write+0x12a/0x250 [ 90.320542][ T8060] ? __pfx_ksys_write+0x10/0x10 [ 90.322320][ T8060] do_syscall_64+0x123/0x790 [ 90.324091][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.326316][ T8060] RIP: 0033:0x7f7b2e99e159 [ 90.327958][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.334504][ T8060] RSP: 002b:00007f7b2f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.337433][ T8060] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 90.339987][ T8060] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.342621][ T8060] RBP: 00007f7b2ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 90.345570][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.348293][ T8060] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 90.350911][ T8060] [ 90.352056][ T8060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.354730][ T8060] CPU: 3 UID: 0 PID: 8060 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 90.358090][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.361199][ T8060] Call Trace: [ 90.362472][ T8060] [ 90.363521][ T8060] dump_stack_lvl+0x100/0x190 [ 90.365048][ T8060] vpanic+0x553/0x970 [ 90.366404][ T8060] ? __pfx_vpanic+0x10/0x10 [ 90.367812][ T8060] panic+0xd1/0xe0 [ 90.369424][ T8060] ? __pfx_panic+0x10/0x10 [ 90.370895][ T8060] check_panic_on_warn.cold+0x19/0x34 [ 90.372629][ T8060] ? drm_mm_takedown+0x62/0x280 [ 90.374334][ T8060] __warn.cold+0x191/0x318 [ 90.375850][ T8060] __report_bug+0x30f/0x440 [ 90.377441][ T8060] ? drm_mm_takedown+0x62/0x280 [ 90.379083][ T8060] ? __pfx___report_bug+0x10/0x10 [ 90.380698][ T8060] ? device_remove+0xcb/0x180 [ 90.382304][ T8060] ? device_release_driver_internal+0x44e/0x620 [ 90.384270][ T8060] ? pci_stop_bus_device+0x120/0x160 [ 90.385980][ T8060] ? drm_mm_takedown+0x5b/0x280 [ 90.387539][ T8060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.389497][ T8060] report_bug_entry+0xe2/0x290 [ 90.391047][ T8060] ? drm_mm_takedown+0x62/0x280 [ 90.392667][ T8060] handle_bug+0x1cd/0x2a0 [ 90.394127][ T8060] exc_invalid_op+0x17/0x50 [ 90.395675][ T8060] asm_exc_invalid_op+0x1a/0x20 [ 90.397371][ T8060] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 90.399284][ T8060] Code: 8b 43 38 48 39 c5 75 16 e8 9b 64 38 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 1a 09 01 06 e8 85 64 38 fc 48 8d 3d ce ea 7c 0b <67> 48 0f b9 3a 48 c7 c0 00 a4 65 8e 48 ba 00 00 00 00 00 fc ff df [ 90.405706][ T8060] RSP: 0018:ffffc9000697f798 EFLAGS: 00010287 [ 90.407632][ T8060] RAX: 000000000002714d RBX: ffff888027b9b468 RCX: ffffc90006009000 [ 90.410201][ T8060] RDX: 0000000000080000 RSI: ffffffff85d3be0b RDI: ffffffff9150a8e0 [ 90.412639][ T8060] RBP: ffff888027b9b4a0 R08: 0000000000000007 R09: 0000000000000000 [ 90.415150][ T8060] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888027aaf500 [ 90.417865][ T8060] R13: ffff888027aaf518 R14: ffffffff85d29050 R15: 0000000000000000 [ 90.420579][ T8060] ? __pfx_drm_gem_init_release+0x10/0x10 [ 90.422437][ T8060] ? drm_mm_takedown+0x5b/0x280 [ 90.424030][ T8060] ? drm_mm_takedown+0x5b/0x280 [ 90.425535][ T8060] ? __pfx_drm_gem_init_release+0x10/0x10 [ 90.427292][ T8060] drm_managed_release+0x1bb/0x540 [ 90.428907][ T8060] ? __pfx_virtio_gpu_release+0x10/0x10 [ 90.430621][ T8060] drm_dev_put.part.0+0xca/0x140 [ 90.432283][ T8060] drm_dev_put+0x1f/0x30 [ 90.433710][ T8060] virtio_dev_remove+0xb8/0x170 [ 90.435386][ T8060] ? __pfx_virtio_dev_remove+0x10/0x10 [ 90.437275][ T8060] device_remove+0xcb/0x180 [ 90.438805][ T8060] device_release_driver_internal+0x44e/0x620 [ 90.440797][ T8060] bus_remove_device+0x2bc/0x560 [ 90.442329][ T8060] ? __pfx_bus_remove_device+0x10/0x10 [ 90.444000][ T8060] ? __pfx_device_remove_attrs+0x10/0x10 [ 90.445790][ T8060] device_del+0x376/0x9b0 [ 90.447172][ T8060] ? __pfx_device_del+0x10/0x10 [ 90.448629][ T8060] ? __pfx___might_resched+0x10/0x10 [ 90.450287][ T8060] ? __pfx_pci_device_is_present+0x10/0x10 [ 90.452127][ T8060] device_unregister+0x1d/0xe0 [ 90.453649][ T8060] unregister_virtio_device+0x39/0x60 [ 90.455474][ T8060] virtio_pci_remove+0x7c/0x110 [ 90.457229][ T8060] pci_device_remove+0xb2/0x1d0 [ 90.458933][ T8060] ? __pfx_pci_device_remove+0x10/0x10 [ 90.460894][ T8060] device_remove+0xcb/0x180 [ 90.462538][ T8060] device_release_driver_internal+0x44e/0x620 [ 90.464776][ T8060] pci_stop_bus_device+0x120/0x160 [ 90.466982][ T8060] pci_stop_and_remove_bus_device+0x58/0xa0 [ 90.469513][ T8060] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 90.472150][ T8060] remove_store+0x123/0x140 [ 90.473997][ T8060] ? __pfx_remove_store+0x10/0x10 [ 90.476038][ T8060] ? find_held_lock+0x2b/0x80 [ 90.477938][ T8060] ? sysfs_file_kobj+0xe4/0x290 [ 90.479925][ T8060] ? sysfs_file_kobj+0xe4/0x290 [ 90.481899][ T8060] ? __pfx_remove_store+0x10/0x10 [ 90.483865][ T8060] dev_attr_store+0x58/0x80 [ 90.485843][ T8060] ? __pfx_dev_attr_store+0x10/0x10 [ 90.488100][ T8060] sysfs_kf_write+0xf2/0x150 [ 90.490185][ T8060] kernfs_fop_write_iter+0x3e0/0x5f0 [ 90.492423][ T8060] ? __pfx_sysfs_kf_write+0x10/0x10 [ 90.494657][ T8060] vfs_write+0x6af/0x1050 [ 90.496501][ T8060] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 90.498868][ T8060] ? __pfx_vfs_write+0x10/0x10 [ 90.500794][ T8060] ? find_held_lock+0x2b/0x80 [ 90.502821][ T8060] ksys_write+0x12a/0x250 [ 90.504680][ T8060] ? __pfx_ksys_write+0x10/0x10 [ 90.507106][ T8060] do_syscall_64+0x123/0x790 [ 90.509495][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.512568][ T8060] RIP: 0033:0x7f7b2e99e159 [ 90.514482][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.521210][ T8060] RSP: 002b:00007f7b2f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.523886][ T8060] RAX: ffffffffffffffda RBX: 00007f7b2ec25fa0 RCX: 00007f7b2e99e159 [ 90.526451][ T8060] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.528904][ T8060] RBP: 00007f7b2ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 90.531395][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.534051][ T8060] R13: 00007f7b2ec26038 R14: 00007f7b2ec25fa0 R15: 00007ffe5a4313a8 [ 90.536663][ T8060] [ 90.538409][ T8060] Kernel Offset: disabled [ 90.540393][ T8060] Rebooting in 86400 seconds..