last executing test programs: 3m19.76254727s ago: executing program 3 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='b', 0x1) 3m19.679972648s ago: executing program 3 (id=54): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 3m19.620031911s ago: executing program 3 (id=57): openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) 3m19.549258763s ago: executing program 3 (id=58): unshare(0x62040200) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m18.078226957s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='1\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000c00), 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) 3m17.740816918s ago: executing program 3 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.0', 0xb) 3m2.859067772s ago: executing program 1 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)={0x28, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings]}, 0x28}, 0x1, 0x0, 0x0, 0x14004040}, 0x810) 3m2.858693756s ago: executing program 1 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000140)='1\x00', 0x2) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x1008, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="dfc8f05f2c114d7f8e71c7ae5f3bce1b8165feb61412fd83447ba16a64993089691240e21fda5c0a47325ac5e825e1b55ab32cd7c14815b76aba39ed0f8da16c00562d55582d20bbde6b86715e9073630bb01d4913b9cc74efe13cdf2266f2d0bc2651d589592c55a57730f744b28636f7d6635e898ee3795b749e8c23ca705f7c197bdefa54ba6615e939813716fdc0c92369684747ec5ba8d18d7843fecf77d85a2febbaa0fa1a45f2a8e6c0ca87"]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 3m2.780838933s ago: executing program 1 (id=274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000009, 0x102000, 0x1cc5, 0x8001, 0x400c9, 0xb, 0x0, 0x0, 0x1, 0x759}}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000080)="7cf94d", 0x3}, {&(0x7f0000002740)="fe1334963b86c1b24494af2b78d38d", 0xf}], 0x2, 0x0, 0x0, 0x200480c0}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300c010fe00fff1c55adeb48b"], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 3m2.742532846s ago: executing program 32 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.0', 0xb) 3m2.698498169s ago: executing program 1 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = socket$inet(0x2, 0x800, 0x8001) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000001a00)={{0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'ovf\x00', 0x4, 0x7, 0x1}, {@multicast2, 0x4e23, 0x10000, 0x3f800, 0x6, 0x8000}}, 0x44) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000280)={0x1, {{0xa, 0x4e20, 0x1, @remote, 0x589a2e52}}, {{0xa, 0xef, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x108) sendmmsg$inet(r3, &(0x7f00000019c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000140)="86536376fd33a6e5b15936da6af510365b1d77447c4a17e13be20b08f803243e0e8e0b3c080578a539ab50141a102ce79476fcac0114708b1f69912a5bdf53b5e75815a5c52b7aafe8402e", 0x4b}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6d60ce992894f2cf56f864371f", 0xd}, {&(0x7f0000001400)="ac75b48e2bad49fe1da5b3f790a615d6affd69811226837c526b166b6c1c620b2bfa6e13b3426260d7c654b32cb5ea3671ecb02fde81b0fe658ca88fcf506daf8c4d3ecd84d368935434bacfd9e4b4083fb1dc0ba9534cdea5", 0x59}, {&(0x7f0000001480)="14fd9f2d13f4429112db26b3ccb11f08ccee23630535624798c8f8bb6c3377e6f92f070f69ce9ba71f7e9db531fd4e5f0ad7bd6095a238c594f175427a4d0bf6dd6d6d1a6857ee3f6ab8d4e1b6f808d18b2ad0576278e01a14d9bd6a2747d54f8a75fd893fc02c7ac51349e1049a51980d64bd33a5cdd8e238c4cdb25fd42ff657459bf2707aa954df1f5e3296b9d1e43063ecfdb2ff8fbcc539316f5b0e08edadddd08863625194e5b0a7669ac4bf0cd8a5ad0ef912d225defc6a5749267f12edeb1ac70999117a20575497039b99fba82416", 0xd3}, {&(0x7f0000001580)="feb9c3b018fcb0c17c7335d6d017d9b73a0bf375c7027c59048165651c98abc81e5bb6add9a3ad5d22d4041f296119d3bf45dda3a3ea9786542aaf2c4eff324f52fd2608bdac0d24091fba42474fa4b3f25d7270e5e95e9af891d393ec3b7285abf2dd495e72d1000d1d601e67cbd44e37a4cc485dcdaacbb79c116e863a71671fea13994419a6246ce035505bb4c75eb2ff62c1295295c090e32290f88a8aa471412275921a07d25c", 0xa9}, {&(0x7f0000001640)="7a810542c3922c13df08b4af279ecd21fc568fe2cbb6db22896c7642d374e33075bf323c93eb6805f894e3968ff8ee1ffc52dc4c857373d8db3055b9e23a12d6c5708b8edd4847b44e71a35318ce5b6f215e5804d2951977d71c374da547b46a8fddf113c92894f38fa5e0daf7fe1380", 0x70}, {&(0x7f00000016c0)="a75063a0e5451dfae091243412bfc90e6057490800abf6496055b27b19f5d85f8354d16b6120f656adf2c147113879f9a06205408969947361d736d4a479b93c55e3d0df236f4b760729c8e141427988b1532fc646dcb3a68cd0e6011526a77db059e1f7192602cee89ecc99b09c9a2eb4f932c63a4d10ca", 0x78}, {&(0x7f0000001740)="cf58b461ea2aa54ac85a7d95860da78a13299f6259254c91c0bf2ac3185531667d72d110243e085883a2565956bfa5040c3a3b65ad7d22366e", 0x39}], 0x9, &(0x7f0000001840)=[@ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x36, 0x0, 0x2}, @ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x97, [@rand_addr=0x64010102, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xa9, 0x0, 0x9, [0x1, 0x9, 0x10, 0xc, 0x1, 0x6]}, @ssrr={0x89, 0x13, 0xe9, [@private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @ssrr={0x89, 0x17, 0x8f, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x87}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x60, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x3, [{@local, 0x9}, {@rand_addr=0x64010101, 0x4}]}, @generic={0x94, 0xb, "25729284e43ea55e5c"}, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x0, [{@multicast1, 0x71555573}, {@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x128}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xff}]}, @noop]}}}, @ip_tos_int={{0x14}}], 0x168}}], 0x1, 0x20000000) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r5, &(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8) 3m2.620067858s ago: executing program 1 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f7031203132382030", 0x45) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0100003801000001") 3m2.310384712s ago: executing program 1 (id=280): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, &(0x7f0000000400), 0xb, 0x1, 0x10cf, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 3m2.206762532s ago: executing program 33 (id=280): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, &(0x7f0000000400), 0xb, 0x1, 0x10cf, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 2m36.790623469s ago: executing program 5 (id=692): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000005040)={0x2020}, 0x2020) 2m36.730472669s ago: executing program 5 (id=693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r3) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05", 0x1, 0x24000091, &(0x7f0000000140)={0x11, 0xf5, r5, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m35.239403986s ago: executing program 5 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f703120313238", 0x43) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e0100003801000001") 2m35.238933966s ago: executing program 5 (id=708): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2m35.16045304s ago: executing program 5 (id=709): r0 = socket(0x11, 0xa, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x174, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xb}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20048010}, 0xc000) (async) fsopen(&(0x7f0000000240)='autofs\x00', 0x1) (async, rerun: 64) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'tunl0\x00', 0x6}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x804) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000440)={@loopback}, 0x14) (async, rerun: 32) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x8080, 0x36, 0x22}, 0x18) (rerun: 32) r4 = openat(r3, &(0x7f0000000500)='./file0\x00', 0x90180, 0x1) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/current\x00') sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x71c, 0x4c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x1000, 0x1000, 0x5, 0x8, 0x2, 0x100]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xf, 0x40, 0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x4000) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r5, 0x20, &(0x7f0000001980)={&(0x7f00000008c0)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/192, 0xc0}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1b, 0xe, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x9, 0x3, 0xb, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xa, 0x8, 0x8, 0x40, 0x4}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xa, r4, 0x8, &(0x7f0000000840)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x0, 0xa, 0x8}, 0x10, r6, r5, 0x2, &(0x7f0000001a00)=[r5, r5, r5, r4, 0xffffffffffffffff, r5, r4], &(0x7f0000001a40)=[{0x1, 0x2, 0x4, 0x4}, {0x1, 0x3, 0x5, 0xc}]}, 0x94) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000001b40)={0x1, 0x80000001}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001b80), 0x151400, 0x0) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000001bc0)={0x4, "a38adbdf642dfa1d2a7f9de47e664af7c5dda790a3c31fc6156bb574177bd2c8", 0x2, 0x10, 0x6, 0x6, 0x4, 0x1, 0xda3, 0x1}) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001c40)={0x0, 0x3}, &(0x7f0000001c80)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001cc0)={r8, 0x9, 0x7ef}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001d00)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001d40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}, 0x14) r10 = getpid() move_pages(r10, 0x1, &(0x7f0000001d80)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001dc0)=[0x4, 0xe1, 0x80000001, 0x3], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) sendfile(r4, r7, &(0x7f0000001e40)=0x82f, 0x8) (async) bpf$LINK_DETACH(0x22, &(0x7f0000001e80)=r5, 0x4) openat(r5, &(0x7f0000001ec0)='./file1\x00', 0xe8400, 0x2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001f00)={r5, r5}) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001f40)={r8, 0x6, 0x401, 0x0, 0x9d, 0xc127}, 0x14) 2m34.828705899s ago: executing program 5 (id=711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, 0x0, 0x2400c040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e22, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2m34.751095172s ago: executing program 34 (id=711): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, 0x0, 0x2400c040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e22, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 6.339639474s ago: executing program 2 (id=2355): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) close(r0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) (async) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x206001) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x84}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x40) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x4a) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000340)={0x2, 0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000240)=""/93, 0x5d}], &(0x7f0000000300)=[0x1bd5]}, 0x20) (async) r3 = fspick(r2, &(0x7f0000000380)='./file0\x00', 0x0) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$setown(r3, 0x8, r4) (async) r5 = syz_open_dev$media(&(0x7f0000000440), 0x7fff, 0x48000) close(r5) (async) connect$rxrpc(r1, &(0x7f0000000480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc2}, [@ringbuf_query, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xe, 0x7, 0x1, 0x2, 0x6}]}, &(0x7f0000000540)='syzkaller\x00', 0x4, 0x90, &(0x7f0000000580)=""/144, 0x40f00, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x4, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r2, r2, r2], &(0x7f0000000700)=[{0x4, 0x2, 0x4, 0xc}, {0x0, 0x4, 0x10, 0xd}, {0x4, 0x2, 0x1, 0x8}, {0x3, 0x5, 0xd, 0x9}, {0x0, 0x4, 0xc, 0x6}, {0x4, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xd, 0x2}], 0x10, 0x316}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f00000009c0)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000880)=@loop={'/dev/loop', 0x0}, r9, &(0x7f0000000a00)='./file0\x00') (async) capset(&(0x7f0000000a40)={0x20071026, r4}, &(0x7f0000000a80)={0x0, 0x240, 0x9, 0x1000, 0xfff, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000d80)={0x9, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/173, 0xad}, {&(0x7f0000000b80)=""/101, 0x65}, {&(0x7f0000000c00)=""/228, 0xe4}], &(0x7f0000000d40)=[0xfa4], 0x3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {r6}}, './file0\x00'}) ioctl$XFS_IOC_GETPARENTS(r10, 0xc028583e, &(0x7f0000000e80)={{[0x6, 0x2, 0xe, 0x1]}, 0x0, 0x2, 0x9, 0x0, &(0x7f0000000e00)=[{{@_ha_fsid={[0x7, 0x5]}, {0x0, 0x4, 0xa}}, 0x0, 0x0, '/dev/audio#\x00'}, {{@align=0x3, {0xff, 0xfff7, 0x10000, 0xfc09}}, 0xe84f, 0x0, '${\x00'}, {{@align=0x8, {0x7, 0x8d6b, 0x8}}, 0x1000, 0x0, '\\-!@(\x00'}]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000ec0)=""/23) (async) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000f00)={0xffffffffffffffff, 0x1, 0xf3, r8, 0x2}, 0xc) r11 = socket$inet(0x2, 0x3, 0xd8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@o_path={&(0x7f0000000f40)='./file0\x00', 0x0, 0x0, r11}, 0x18) (async) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000fc0)=@sr0, r9, &(0x7f0000001000)) (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x8, 0x1) (async) splice(r7, &(0x7f0000001100)=0x2, r6, &(0x7f0000001140)=0xffffffff00000000, 0x387, 0x1c) 6.339375277s ago: executing program 2 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x86dd, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) 6.268010976s ago: executing program 2 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) pwrite64(r0, &(0x7f0000001000)="4e5644494d4d5f50464e5f494e464f000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10000000000100040000002000000000000000000000000000020000000000000000000000000020000010000040000000", 0x100, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) write(r1, &(0x7f0000000240)='namespace0.0\x00', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xc) close(r2) 5.046517616s ago: executing program 2 (id=2367): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000180)={@val={0x70, 0x201}, @void, @eth={@link_local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xf, 0x2a, 0x64, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xff, 0x0, 0x1}, {"59e0"}}}}}}}, 0x3c) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f40000000102030000000000000000000200000708000540000006e1060f0740000200006000018006000340000400001400018008000100e000000108000200ac141436060080000300fe80000003000000000000000000001714000400ff02000000eaff0000000000000000012c00028005000100060000006800038086000340000100000c000280050001003a0000000c00028005000100110000000c00028d050001003a00000006000340000400009cd0cc4e050001000600000006000340000100001400018008000100ac1414bbde169d80dd068d7408000200ac14143c0600010000000000080004407fffffff00"/252], 0xf4}}, 0x8001) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) 3.785091768s ago: executing program 2 (id=2373): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12f901, 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000700)) (async) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff67, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) (async) write(r6, 0x0, 0x0) (async) write(r6, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back', 0x28) (async) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f00000061c0)=""/4096) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xc, 0x1, 0x2, 0xd, 0x3, 0xb, 0x0, 0x5, 0x2, 0xa, 0xc, 0xf, 0x2, 0x5, 0x1, 0x6], 0x1, [0x2, 0x10, 0xf9b, 0x400, 0x1, 0x5, 0x81, 0xd, 0x5, 0xf, 0x0, 0x400, 0x3, 0x81, 0x2, 0x53], [0x80, 0x6, 0x8000, 0x3, 0xfffd, 0x200, 0x5, 0x4, 0x0, 0x6, 0x7, 0x1, 0x0, 0x8a9f, 0xbef, 0x3]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) rmdir(&(0x7f0000000100)='./cgroup/../file0\x00') 2.678768317s ago: executing program 0 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x44}}, 0x0) 2.598199754s ago: executing program 0 (id=2388): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket(0x23, 0x80805, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, 0x0, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4883}, 0x400c890) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xabb5, 0x2}, 0xe) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000000)={@lba=0x2, 0x2, 0x0, 0x0}) 2.499415734s ago: executing program 0 (id=2389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000001007e0100003801000001") 2.498796949s ago: executing program 0 (id=2390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040015}, 0x1) r4 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000000)) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000480)={0x4, 0x0, @ioapic={0x0, 0x4000007, 0x40000006, 0x385, 0x0, [{0x80, 0x1, 0x1, '\x00', 0xe6}, {0xf6, 0x5, 0x6, '\x00', 0x8}, {0x5, 0xff, 0x4, '\x00', 0x9}, {0x4, 0xc0, 0x4, '\x00', 0xd}, {0x4, 0x5, 0x1, '\x00', 0x5}, {0xa, 0x2, 0x0, '\x00', 0x2}, {0x3, 0x6, 0x1, '\x00', 0x4}, {0x40, 0x1, 0x9, '\x00', 0x1}, {0x40, 0x8c, 0x5f, '\x00', 0x80}, {0x1, 0x4, 0x4}, {0xf1, 0x80, 0x1, '\x00', 0x7}, {0x0, 0x1, 0x6}, {0x7, 0x8, 0x84, '\x00', 0x5}, {0xd, 0x6, 0x9, '\x00', 0x1}, {0x6, 0x4, 0x3, '\x00', 0x5}, {0x7, 0x1, 0xfa, '\x00', 0x6}, {0xb, 0xd, 0x9, '\x00', 0x4}, {0x3, 0x3, 0x5, '\x00', 0x4e}, {0x3, 0xd, 0x81, '\x00', 0x7}, {0x3, 0x82, 0x1, '\x00', 0x81}, {0x3, 0x10, 0x1, '\x00', 0x9}, {0x67, 0x5a, 0x0, '\x00', 0x9}, {0x4, 0x7, 0x1, '\x00', 0x9}, {0x17, 0xb, 0x4, '\x00', 0x9}]}}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r6], 0x84}}, 0x20008040) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r10}, 0x18) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x3, r4, 0x3a, {0x5, 0x3}, 0x7}, 0x1) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) write(r0, 0x0, 0x0) syz_io_uring_setup(0x698, &(0x7f0000000200)={0x0, 0x548f, 0x400, 0x3, 0x1b7, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000480)={0x0, 0x8334, 0x40, 0x3, 0xa1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9201, 0x0, 0x2, 0x3c1, 0x0, r4}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1c0, 0x100, 0x3, 0x2a2, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7bc6, 0x2000, 0x1, 0x26e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x208b, 0x1000, 0x1, 0x3d2, 0x0, r1}}], 0x4, &(0x7f0000002000)={0x2e, 0x44, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfb56}, 0x0, 0x0, '\x00', {0x4, 0xe3d, 0x0, &(0x7f0000001000)=@buf_1k="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"}}, &(0x7f0000002080)) syz_io_uring_submit$UBLK(r11, r5, r12, &(0x7f00000030c0)=@ublk_io_cmd_sqes={0x2e, 0x2f, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x2, 0xbc9, 0x12000000, &(0x7f00000020c0)=@buf_4k="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"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.232269926s ago: executing program 0 (id=2391): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20008800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r7 = memfd_create(&(0x7f0000000080)='test\x00', 0x0) ftruncate(r7, 0x1000) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x183, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x46545187}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x11) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x800448d2, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f00000000c0)="280000000600000001000000040000000000000000000000001000"/40) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r13, 0x6, 0x2f082d499725f80c, &(0x7f0000000000)=0x1, 0x4) 2.201442001s ago: executing program 0 (id=2392): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128820807, 0x0, {[0x7, 0xb000000000, 0x4000000000010020, 0xfffffffffffffff6, 0x4009, 0xa3, 0x3c]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r6, 0x121, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x40, r6, 0x405, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) 1.240218276s ago: executing program 4 (id=2395): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)="00000000000000000004", 0xa) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000001007e0100003801000001") 1.238878441s ago: executing program 4 (id=2396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x44}}, 0x0) 1.23845742s ago: executing program 4 (id=2397): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r2}, &(0x7f0000001e40), &(0x7f0000001e80)=r3}, 0x20) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 1.238133894s ago: executing program 6 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x90000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) 1.238036703s ago: executing program 6 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) (fail_nth: 9) 1.237889698s ago: executing program 4 (id=2400): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000002140)=0x20) ppoll(&(0x7f00000003c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r1, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b0, 0x0, 0x1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3b) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x2, 0x80000000, 0x4, 0x5274ef30, 0x80000002, 0x7ff, 0x90b4, 0x9, 0x26], 0x0, 0x1}) 1.069596855s ago: executing program 6 (id=2401): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="008100000000000000", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 939.61363ms ago: executing program 6 (id=2402): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x38, 0x0, 0x40010}, 0x88c0) r5 = memfd_create(&(0x7f0000000080)='test\x00', 0x0) ftruncate(r5, 0x1000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x183, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r0}) ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f00000000c0)="280000000600000001000000040000000000000000000000001000"/40) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x200013, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x2f082d499725f80c, &(0x7f0000000000)=0x1, 0x4) 869.196987ms ago: executing program 6 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) pipe2$watch_queue(0x0, 0x80) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40086806, 0x21) ppoll(&(0x7f00000000c0)=[{r1, 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x6801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)={0x28, r3, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0xfffffffe, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x4040) 69.65029ms ago: executing program 6 (id=2404): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7) pwrite64(r0, &(0x7f0000001000)="4e5644494d4d5f50464e5f494e464f000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10000000000100040000002000000000000000000000000000020000000000000000000000000020000010000040000000", 0x100, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) write(r1, &(0x7f0000000240)='namespace0.0\x00', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xc) close(r2) 69.440829ms ago: executing program 2 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x1880004, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000006d00)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 69.294782ms ago: executing program 4 (id=2406): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=2407): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0xfffff000, 0x0, 0x2}) kernel console output (not intermixed with test programs): 18] ? __pfx_table_load+0x10/0x10 [ 227.431270][T12118] ? __pfx_ctl_ioctl+0x10/0x10 [ 227.431298][T12118] ? selinux_file_ioctl+0x13b/0x290 [ 227.431316][T12118] ? selinux_file_ioctl+0xb6/0x290 [ 227.431338][T12118] dm_ctl_ioctl+0x22/0x30 [ 227.431351][T12118] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 227.431365][T12118] __x64_sys_ioctl+0x18e/0x210 [ 227.431383][T12118] do_syscall_64+0x115/0x870 [ 227.431398][T12118] ? clear_bhb_loop+0x40/0x90 [ 227.431411][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.431423][T12118] RIP: 0033:0x7f4c4d59e019 [ 227.431433][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.431445][T12118] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.431457][T12118] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 227.431464][T12118] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 227.431471][T12118] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 227.431477][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.431484][T12118] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 227.431498][T12118] [ 227.527001][T12121] netlink: 'syz.0.2121': attribute type 21 has an invalid length. [ 227.529610][T12121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2121'. [ 227.532483][T12121] netlink: 'syz.0.2121': attribute type 5 has an invalid length. [ 227.535722][T12121] netlink: 'syz.0.2121': attribute type 6 has an invalid length. [ 227.538252][T12121] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2121'. [ 227.546287][T12121] netlink: 'syz.0.2121': attribute type 21 has an invalid length. [ 227.551026][T12121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2121'. [ 227.556836][T12121] netlink: 'syz.0.2121': attribute type 5 has an invalid length. [ 227.559444][T12121] netlink: 'syz.0.2121': attribute type 6 has an invalid length. [ 227.561931][T12121] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2121'. [ 227.567274][T12121] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 227.639089][T12131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2126'. [ 227.648101][T12135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2126'. [ 227.652608][T12133] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.698985][T12133] gfs2: gfs2 mount does not exist [ 227.764076][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 227.764089][ T42] audit: type=1400 audit(1785889980.847:1012): avc: denied { read } for pid=12137 comm="syz.2.2128" path="socket:[54871]" dev="sockfs" ino=54871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.769874][T12129] kvm: kvm [12126]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 227.808515][T12149] loop5: detected capacity change from 0 to 7 [ 227.813505][T12149] loop5: p3 p4 [ 227.815711][T12149] loop5: partition table partially beyond EOD, truncated [ 227.820210][ T42] audit: type=1400 audit(1785889980.907:1013): avc: denied { name_connect } for pid=12143 comm="syz.6.2130" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 227.848681][T12144] netlink: 'syz.6.2130': attribute type 64 has an invalid length. [ 227.858047][T12144] netlink: 'syz.6.2130': attribute type 4 has an invalid length. [ 227.869638][T12144] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2130'. [ 227.945502][T12152] syzkaller0: entered promiscuous mode [ 227.947400][T12152] syzkaller0: entered allmulticast mode [ 228.614397][T12155] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(15728644.2.0), cmd(9) [ 228.741499][T12160] FAULT_INJECTION: forcing a failure. [ 228.741499][T12160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.750947][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.4.2136 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.750966][T12160] Tainted: [L]=SOFTLOCKUP [ 228.750970][T12160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.750978][T12160] Call Trace: [ 228.750993][T12160] [ 228.750999][T12160] dump_stack_lvl+0x100/0x190 [ 228.751017][T12160] should_fail_ex.cold+0x5/0xa [ 228.751032][T12160] _copy_from_user+0x2e/0xd0 [ 228.751049][T12160] ctl_ioctl+0x89f/0xcd0 [ 228.751064][T12160] ? __pfx_table_load+0x10/0x10 [ 228.751081][T12160] ? __pfx_ctl_ioctl+0x10/0x10 [ 228.751109][T12160] ? selinux_file_ioctl+0x13b/0x290 [ 228.751126][T12160] ? selinux_file_ioctl+0xb6/0x290 [ 228.751144][T12160] dm_ctl_ioctl+0x22/0x30 [ 228.751157][T12160] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 228.751172][T12160] __x64_sys_ioctl+0x18e/0x210 [ 228.751193][T12160] do_syscall_64+0x115/0x870 [ 228.751206][T12160] ? clear_bhb_loop+0x40/0x90 [ 228.751220][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.751232][T12160] RIP: 0033:0x7f6d18f9e019 [ 228.751242][T12160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.751253][T12160] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.751265][T12160] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 228.751272][T12160] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 228.751278][T12160] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 228.751284][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.751291][T12160] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 228.751304][T12160] [ 228.847070][ T42] audit: type=1400 audit(1785889981.927:1014): avc: denied { create } for pid=12165 comm="syz.4.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.926181][T12166] device-mapper: table: 248:0: : unknown target type [ 228.928419][T12166] device-mapper: ioctl: error adding target to table [ 229.703915][T12179] bond8: entered promiscuous mode [ 229.705847][T12179] bond8: entered allmulticast mode [ 229.708238][T12179] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.769240][ T42] audit: type=1400 audit(1785889982.857:1015): avc: denied { setopt } for pid=12185 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.795875][T12190] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.65536.0), cmd(9) [ 229.910984][ T42] audit: type=1400 audit(1785889982.997:1016): avc: denied { setopt } for pid=12199 comm="syz.6.2149" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.918455][T12201] overlayfs: missing 'workdir' [ 229.923956][T12201] afs: Unknown parameter 'flock-Gº(˜Òsû' [ 229.935621][T12201] netlink: 'syz.6.2149': attribute type 21 has an invalid length. [ 229.943983][T12201] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2149'. [ 229.953653][T12201] device-mapper: ioctl: Next dm_target_spec (offset 342) is not 8-byte aligned [ 229.956648][T12201] device-mapper: ioctl: unable to find target [ 230.103374][T12221] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4026531844.2.0), cmd(9) [ 230.148539][T12228] ip_tables: iptables: counters copy to user failed while replacing table [ 230.190426][T12233] FAULT_INJECTION: forcing a failure. [ 230.190426][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 230.206575][T12233] CPU: 0 UID: 0 PID: 12233 Comm: syz.0.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.206597][T12233] Tainted: [L]=SOFTLOCKUP [ 230.206601][T12233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.206608][T12233] Call Trace: [ 230.206613][T12233] [ 230.206617][T12233] dump_stack_lvl+0x100/0x190 [ 230.206636][T12233] should_fail_ex.cold+0x5/0xa [ 230.206652][T12233] should_failslab+0xc2/0x120 [ 230.206667][T12233] __kmalloc_cache_noprof+0x91/0x6c0 [ 230.206685][T12233] ? rcu_is_watching+0x12/0xc0 [ 230.206701][T12233] ? dm_table_create+0x77/0x3d0 [ 230.206721][T12233] dm_table_create+0x77/0x3d0 [ 230.206741][T12233] table_load+0x1ab/0x7b0 [ 230.206764][T12233] ? __pfx_table_load+0x10/0x10 [ 230.206778][T12233] ? __might_fault+0xc5/0x140 [ 230.206789][T12233] ? __might_fault+0xc5/0x140 [ 230.206804][T12233] ctl_ioctl+0x4db/0xcd0 [ 230.206819][T12233] ? __pfx_table_load+0x10/0x10 [ 230.206834][T12233] ? __pfx_ctl_ioctl+0x10/0x10 [ 230.206861][T12233] ? selinux_file_ioctl+0x13b/0x290 [ 230.206879][T12233] ? selinux_file_ioctl+0xb6/0x290 [ 230.206897][T12233] dm_ctl_ioctl+0x22/0x30 [ 230.206910][T12233] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 230.206924][T12233] __x64_sys_ioctl+0x18e/0x210 [ 230.206942][T12233] do_syscall_64+0x115/0x870 [ 230.206957][T12233] ? clear_bhb_loop+0x40/0x90 [ 230.206970][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.206981][T12233] RIP: 0033:0x7f4c4d59e019 [ 230.206992][T12233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.207003][T12233] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.207016][T12233] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 230.207023][T12233] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 230.207030][T12233] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 230.207036][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.207043][T12233] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 230.207056][T12233] [ 230.304014][T12239] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1701064452.1986932598.114), cmd(9) [ 230.330039][T12244] FAULT_INJECTION: forcing a failure. [ 230.330039][T12244] name failslab, interval 1, probability 0, space 0, times 0 [ 230.334034][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.0.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.334053][T12244] Tainted: [L]=SOFTLOCKUP [ 230.334057][T12244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.334064][T12244] Call Trace: [ 230.334069][T12244] [ 230.334074][T12244] dump_stack_lvl+0x100/0x190 [ 230.334094][T12244] should_fail_ex.cold+0x5/0xa [ 230.334108][T12244] should_failslab+0xc2/0x120 [ 230.334123][T12244] kmem_cache_alloc_noprof+0x91/0x6a0 [ 230.334138][T12244] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 230.334154][T12244] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 230.334171][T12244] mmu_topup_memory_caches+0x25/0x170 [ 230.334188][T12244] kvm_mmu_load+0xe2/0x2570 [ 230.334203][T12244] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 230.334215][T12244] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 230.334228][T12244] ? __pfx_kvm_mmu_load+0x10/0x10 [ 230.334242][T12244] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 230.334256][T12244] ? kvm_check_and_inject_events+0x873/0x12a0 [ 230.334272][T12244] ? record_steal_time+0x3a0/0xbb0 [ 230.334285][T12244] vcpu_run+0x3aaa/0x5de0 [ 230.334306][T12244] ? __pfx_vcpu_run+0x10/0x10 [ 230.334326][T12244] ? rcu_is_watching+0x12/0xc0 [ 230.334345][T12244] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 230.334361][T12244] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 230.334380][T12244] kvm_vcpu_ioctl+0x730/0x1700 [ 230.334395][T12244] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 230.334407][T12244] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.334421][T12244] ? do_vfs_ioctl+0x226/0x13e0 [ 230.334438][T12244] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.334463][T12244] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.334486][T12244] ? __fget_files+0x215/0x3d0 [ 230.334497][T12244] ? hook_file_ioctl_common+0x140/0x440 [ 230.334513][T12244] ? selinux_file_ioctl+0x13b/0x290 [ 230.334529][T12244] ? selinux_file_ioctl+0xb6/0x290 [ 230.334547][T12244] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 230.334560][T12244] __x64_sys_ioctl+0x18e/0x210 [ 230.334577][T12244] do_syscall_64+0x115/0x870 [ 230.334592][T12244] ? clear_bhb_loop+0x40/0x90 [ 230.334620][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.334632][T12244] RIP: 0033:0x7f4c4d59e019 [ 230.334641][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.334652][T12244] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.334664][T12244] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 230.334671][T12244] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 230.334678][T12244] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 230.334684][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.334691][T12244] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 230.334705][T12244] [ 230.584487][ T42] audit: type=1800 audit(1785889983.667:1017): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2164" name="streaming_maxpacket" dev="configfs" ino=55966 res=0 errno=0 [ 230.701364][ T42] audit: type=1400 audit(1785889983.787:1018): avc: denied { accept } for pid=12262 comm="syz.2.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 230.720251][ T42] audit: type=1400 audit(1785889983.797:1019): avc: denied { bind } for pid=12262 comm="syz.2.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.743964][T12267] gfs2: gfs2 mount does not exist [ 230.776434][T12272] tmpfs: Bad value for 'mpol' [ 230.782018][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2171'. [ 230.873882][T12277] Illegal XDP return value 4232888320 on prog (id 93) dev N/A, expect packet loss! [ 230.911555][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 231.108847][T12282] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.0), cmd(9) [ 231.148227][T12285] FAULT_INJECTION: forcing a failure. [ 231.148227][T12285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.156654][T12285] CPU: 2 UID: 0 PID: 12285 Comm: syz.4.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.156675][T12285] Tainted: [L]=SOFTLOCKUP [ 231.156679][T12285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.156685][T12285] Call Trace: [ 231.156691][T12285] [ 231.156696][T12285] dump_stack_lvl+0x100/0x190 [ 231.156714][T12285] should_fail_ex.cold+0x5/0xa [ 231.156727][T12285] ? fs_reclaim_acquire+0x70/0x100 [ 231.156744][T12285] should_fail_alloc_page+0xeb/0x140 [ 231.156760][T12285] prepare_alloc_pages+0x1f0/0x5f0 [ 231.156775][T12285] ? kasan_save_track+0x14/0x30 [ 231.156787][T12285] ? __kasan_slab_alloc+0x89/0x90 [ 231.156802][T12285] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 231.156815][T12285] ? sr_block_ioctl+0x1ae/0x250 [ 231.156850][T12285] ? do_syscall_64+0x115/0x870 [ 231.156864][T12285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.156881][T12285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.156901][T12285] ? trace_kmem_cache_alloc+0xdd/0x100 [ 231.156916][T12285] ? __kasan_slab_alloc+0x89/0x90 [ 231.156930][T12285] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 231.156942][T12285] ? bio_associate_blkg+0xcf/0x730 [ 231.156959][T12285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.156973][T12285] ? policy_nodemask+0xed/0x4f0 [ 231.156990][T12285] alloc_pages_mpol+0x1fb/0x540 [ 231.157005][T12285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.157021][T12285] ? __pfx___debug_object_init+0x10/0x10 [ 231.157039][T12285] alloc_pages_noprof+0x1a/0x160 [ 231.157055][T12285] blk_rq_map_kern+0x4d3/0x820 [ 231.157074][T12285] scsi_execute_cmd+0xbb1/0xe70 [ 231.157089][T12285] ? __kernel_text_address+0xd/0x30 [ 231.157103][T12285] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 231.157117][T12285] sr_do_ioctl+0x21a/0x840 [ 231.157130][T12285] ? __pfx_sr_do_ioctl+0x10/0x10 [ 231.157140][T12285] ? __lock_acquire+0x49f/0x1a40 [ 231.157156][T12285] ? kfree+0x22b/0x6c0 [ 231.157180][T12285] sr_packet+0xc4/0x1c0 [ 231.157196][T12285] dvd_do_auth+0xc17/0xfb0 [ 231.157214][T12285] ? __pfx_dvd_do_auth+0x10/0x10 [ 231.157228][T12285] ? __might_fault+0xc5/0x140 [ 231.157244][T12285] mmc_ioctl_dvd_auth+0x153/0x250 [ 231.157256][T12285] ? __pfx_mmc_ioctl_dvd_auth+0x10/0x10 [ 231.157268][T12285] ? lock_acquire+0x1b9/0x370 [ 231.157282][T12285] cdrom_ioctl+0x3200/0x3880 [ 231.157295][T12285] ? __pfx_cdrom_ioctl+0x10/0x10 [ 231.157306][T12285] ? rcu_is_watching+0x12/0xc0 [ 231.157322][T12285] ? trace_rpm_return_int+0x78/0x220 [ 231.157337][T12285] ? rpm_resume+0x7eb/0x1320 [ 231.157351][T12285] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 231.157370][T12285] ? __pfx_rpm_resume+0x10/0x10 [ 231.157383][T12285] ? do_raw_spin_lock+0x128/0x260 [ 231.157399][T12285] ? find_held_lock+0x2b/0x80 [ 231.157412][T12285] ? lockdep_hardirqs_on+0x78/0x100 [ 231.157425][T12285] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.157438][T12285] ? __pm_runtime_resume+0xc3/0x170 [ 231.157454][T12285] sr_block_ioctl+0x1ae/0x250 [ 231.157471][T12285] ? __pfx_sr_block_ioctl+0x10/0x10 [ 231.157488][T12285] blkdev_ioctl+0x5ad/0x6f0 [ 231.157523][T12285] ? __pfx_blkdev_ioctl+0x10/0x10 [ 231.157542][T12285] ? selinux_file_ioctl+0x13b/0x290 [ 231.157559][T12285] ? selinux_file_ioctl+0xb6/0x290 [ 231.157576][T12285] ? __pfx_blkdev_ioctl+0x10/0x10 [ 231.157593][T12285] __x64_sys_ioctl+0x18e/0x210 [ 231.157610][T12285] do_syscall_64+0x115/0x870 [ 231.157623][T12285] ? clear_bhb_loop+0x40/0x90 [ 231.157637][T12285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.157648][T12285] RIP: 0033:0x7f6d18f9e019 [ 231.157659][T12285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.157670][T12285] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.157682][T12285] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 231.157689][T12285] RDX: 0000200000000000 RSI: 0000000000005392 RDI: 0000000000000003 [ 231.157696][T12285] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.157702][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.157709][T12285] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 231.157722][T12285] [ 232.298536][ T5737] Bluetooth: hci0: command 0x0405 tx timeout [ 232.423485][T12280] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 232.521899][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 232.526538][T12305] loop5: detected capacity change from 0 to 7 [ 232.634295][T12312] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2184'. [ 232.650292][ T42] audit: type=1400 audit(1785889985.727:1020): avc: denied { ioctl } for pid=12311 comm="syz.2.2184" path="socket:[56044]" dev="sockfs" ino=56044 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 232.658788][T12312] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 232.677657][T12312] xt_hashlimit: size too large, truncated to 1048576 [ 232.680508][T12310] device-mapper: ioctl: Next dm_target_spec (offset 342) is not 8-byte aligned [ 232.683370][T12310] device-mapper: ioctl: unable to find target [ 232.736676][T12305] Dev loop5: unable to read RDB block 7 [ 232.740664][ C0] blk_print_req_error: 10 callbacks suppressed [ 232.740677][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 232.741134][T12317] FAULT_INJECTION: forcing a failure. [ 232.741134][T12317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.742751][ C0] buffer_io_error: 10 callbacks suppressed [ 232.742760][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 232.754715][T12305] loop5: unable to read partition table [ 232.756762][T12305] loop5: partition table beyond EOD, truncated [ 232.759168][T12305] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 232.764387][T12317] CPU: 2 UID: 0 PID: 12317 Comm: syz.0.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.764406][T12317] Tainted: [L]=SOFTLOCKUP [ 232.764410][T12317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.764417][T12317] Call Trace: [ 232.764422][T12317] [ 232.764427][T12317] dump_stack_lvl+0x100/0x190 [ 232.764447][T12317] should_fail_ex.cold+0x5/0xa [ 232.764461][T12317] _copy_from_user+0x2e/0xd0 [ 232.764478][T12317] copy_msghdr_from_user+0x9f/0x4c0 [ 232.764511][T12317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 232.764529][T12317] ___sys_sendmsg+0x106/0x1e0 [ 232.764541][T12317] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.764551][T12317] ? __lock_acquire+0x49f/0x1a40 [ 232.764565][T12317] ? get_pid_task+0x106/0x250 [ 232.764590][T12317] __sys_sendmsg+0x160/0x210 [ 232.764619][T12317] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.764642][T12317] do_syscall_64+0x115/0x870 [ 232.764656][T12317] ? clear_bhb_loop+0x40/0x90 [ 232.764674][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.764686][T12317] RIP: 0033:0x7f4c4d59e019 [ 232.764696][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.764707][T12317] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.764719][T12317] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 232.764726][T12317] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 232.764733][T12317] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 232.764739][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.764745][T12317] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 232.764759][T12317] [ 232.937748][T12322] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.256.0), cmd(9) [ 232.983306][T12325] FAULT_INJECTION: forcing a failure. [ 232.983306][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 233.007662][T12325] CPU: 0 UID: 0 PID: 12325 Comm: syz.0.2187 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.007695][T12325] Tainted: [L]=SOFTLOCKUP [ 233.007702][T12325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.007714][T12325] Call Trace: [ 233.007722][T12325] [ 233.007730][T12325] dump_stack_lvl+0x100/0x190 [ 233.007762][T12325] should_fail_ex.cold+0x5/0xa [ 233.007786][T12325] should_failslab+0xc2/0x120 [ 233.007811][T12325] kmem_cache_alloc_noprof+0x91/0x6a0 [ 233.007833][T12325] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 233.007863][T12325] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 233.007892][T12325] mmu_topup_memory_caches+0x25/0x170 [ 233.007918][T12325] kvm_mmu_load+0xe2/0x2570 [ 233.007942][T12325] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 233.007960][T12325] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 233.007981][T12325] ? __pfx_kvm_mmu_load+0x10/0x10 [ 233.008003][T12325] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 233.008025][T12325] ? kvm_check_and_inject_events+0x873/0x12a0 [ 233.008050][T12325] ? record_steal_time+0x3a0/0xbb0 [ 233.008071][T12325] vcpu_run+0x3aaa/0x5de0 [ 233.008103][T12325] ? __pfx_vcpu_run+0x10/0x10 [ 233.008137][T12325] ? rcu_is_watching+0x12/0xc0 [ 233.008167][T12325] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.008192][T12325] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 233.008223][T12325] kvm_vcpu_ioctl+0x730/0x1700 [ 233.008247][T12325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.008268][T12325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.008291][T12325] ? do_vfs_ioctl+0x226/0x13e0 [ 233.008324][T12325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.008351][T12325] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 233.008386][T12325] ? __fget_files+0x215/0x3d0 [ 233.008403][T12325] ? hook_file_ioctl_common+0x140/0x440 [ 233.008428][T12325] ? selinux_file_ioctl+0x13b/0x290 [ 233.008456][T12325] ? selinux_file_ioctl+0xb6/0x290 [ 233.008484][T12325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 233.008524][T12325] __x64_sys_ioctl+0x18e/0x210 [ 233.008556][T12325] do_syscall_64+0x115/0x870 [ 233.008580][T12325] ? clear_bhb_loop+0x40/0x90 [ 233.008603][T12325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.008623][T12325] RIP: 0033:0x7f4c4d59e019 [ 233.008640][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.008657][T12325] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.008678][T12325] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 233.008690][T12325] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 233.008701][T12325] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 233.008713][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.008725][T12325] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 233.008751][T12325] [ 233.280065][T12330] FAULT_INJECTION: forcing a failure. [ 233.280065][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 233.288487][T12330] CPU: 2 UID: 0 PID: 12330 Comm: syz.0.2189 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.288509][T12330] Tainted: [L]=SOFTLOCKUP [ 233.288513][T12330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.288519][T12330] Call Trace: [ 233.288525][T12330] [ 233.288531][T12330] dump_stack_lvl+0x100/0x190 [ 233.288551][T12330] should_fail_ex.cold+0x5/0xa [ 233.288566][T12330] should_failslab+0xc2/0x120 [ 233.288581][T12330] __kmalloc_cache_noprof+0x91/0x6c0 [ 233.288675][T12330] ? rcu_is_watching+0x12/0xc0 [ 233.288705][T12330] ? dm_table_create+0x77/0x3d0 [ 233.288726][T12330] dm_table_create+0x77/0x3d0 [ 233.288745][T12330] table_load+0x1ab/0x7b0 [ 233.288760][T12330] ? irqentry_exit+0x24d/0xa00 [ 233.288778][T12330] ? __pfx_table_load+0x10/0x10 [ 233.288796][T12330] ? _copy_from_user+0x93/0xd0 [ 233.288814][T12330] ctl_ioctl+0x4db/0xcd0 [ 233.288828][T12330] ? __pfx_table_load+0x10/0x10 [ 233.288848][T12330] ? __pfx_ctl_ioctl+0x10/0x10 [ 233.288876][T12330] ? selinux_file_ioctl+0x13b/0x290 [ 233.288893][T12330] ? selinux_file_ioctl+0xb6/0x290 [ 233.288912][T12330] dm_ctl_ioctl+0x22/0x30 [ 233.288925][T12330] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 233.288939][T12330] __x64_sys_ioctl+0x18e/0x210 [ 233.288957][T12330] do_syscall_64+0x115/0x870 [ 233.288971][T12330] ? clear_bhb_loop+0x40/0x90 [ 233.288984][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.288995][T12330] RIP: 0033:0x7f4c4d59e019 [ 233.289006][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.289017][T12330] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.289029][T12330] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 233.289037][T12330] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 233.289044][T12330] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 233.289050][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.289056][T12330] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 233.289070][T12330] [ 233.583429][ T42] audit: type=1400 audit(1785889986.667:1021): avc: denied { ioctl } for pid=12327 comm="syz.6.2188" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.601276][T12335] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2191'. [ 233.743344][T12348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.759772][T12348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.771962][ T42] audit: type=1400 audit(1785889986.857:1022): avc: denied { mounton } for pid=12342 comm="syz.4.2193" path="/proc" dev="bpf" ino=56178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 233.854243][T12350] device-mapper: table: 248:0: : unknown target type [ 233.856687][T12350] device-mapper: ioctl: error adding target to table [ 233.937449][T12356] bond15: entered promiscuous mode [ 233.939229][T12356] bond15: entered allmulticast mode [ 233.941117][T12356] 8021q: adding VLAN 0 to HW filter on device bond15 [ 233.958985][T12359] syzkaller0: entered promiscuous mode [ 233.960955][T12359] syzkaller0: entered allmulticast mode [ 234.087687][T12366] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOENT) [ 234.092540][T12366] device-mapper: ioctl: error adding target to table [ 234.159272][T12377] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2048.0), cmd(9) [ 234.198453][ T42] audit: type=1400 audit(1785889987.287:1023): avc: denied { audit_write } for pid=12379 comm="syz.6.2208" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.207277][T12380] validate_nla: 2 callbacks suppressed [ 234.207290][T12380] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 234.233136][ T42] audit: type=1400 audit(1785889987.317:1024): avc: denied { read } for pid=12374 comm="syz.2.2206" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 234.249861][ T42] audit: type=1400 audit(1785889987.317:1025): avc: denied { open } for pid=12374 comm="syz.2.2206" path="/541/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 234.250542][T12380] bond9: option mode: invalid value (8) [ 234.271913][T12380] bond9 (unregistering): Released all slaves [ 234.274503][T12381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.275028][T12384] device-mapper: ioctl: Next dm_target_spec (offset 342) is not 8-byte aligned [ 234.278193][T12381] block device autoloading is deprecated and will be removed. [ 234.296131][T12384] device-mapper: ioctl: unable to find target [ 234.323650][T12375] usb3503 0-0008: unknown mode is requested [ 234.327870][T12375] usb3503 0-0008: usb3503_probe: probed in standby mode [ 234.331805][T12375] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 234.383112][T12375] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 234.412849][T12391] FAULT_INJECTION: forcing a failure. [ 234.412849][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 234.420951][ T42] audit: type=1400 audit(1785889987.497:1026): avc: denied { map } for pid=12393 comm="syz.6.2212" path="socket:[56582]" dev="sockfs" ino=56582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 234.433095][T12391] CPU: 0 UID: 0 PID: 12391 Comm: syz.4.2211 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.433116][T12391] Tainted: [L]=SOFTLOCKUP [ 234.433120][T12391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.433127][T12391] Call Trace: [ 234.433131][T12391] [ 234.433137][T12391] dump_stack_lvl+0x100/0x190 [ 234.433156][T12391] should_fail_ex.cold+0x5/0xa [ 234.433171][T12391] should_failslab+0xc2/0x120 [ 234.433186][T12391] __kmalloc_cache_noprof+0x91/0x6c0 [ 234.433204][T12391] ? rcu_is_watching+0x12/0xc0 [ 234.433221][T12391] ? dm_split_args+0x9d/0x570 [ 234.433241][T12391] dm_split_args+0x9d/0x570 [ 234.433258][T12391] ? get_target_type+0x102/0x140 [ 234.433272][T12391] dm_table_add_target+0x516/0xee0 [ 234.433284][T12391] ? __pfx_dm_table_add_target+0x10/0x10 [ 234.433307][T12391] table_load+0x3b9/0x7b0 [ 234.433325][T12391] ? __pfx_table_load+0x10/0x10 [ 234.433340][T12391] ? __might_fault+0xc5/0x140 [ 234.433350][T12391] ? __might_fault+0xc5/0x140 [ 234.433365][T12391] ctl_ioctl+0x4db/0xcd0 [ 234.433380][T12391] ? __pfx_table_load+0x10/0x10 [ 234.433395][T12391] ? __pfx_ctl_ioctl+0x10/0x10 [ 234.433423][T12391] ? selinux_file_ioctl+0x13b/0x290 [ 234.433440][T12391] ? selinux_file_ioctl+0xb6/0x290 [ 234.433458][T12391] dm_ctl_ioctl+0x22/0x30 [ 234.433471][T12391] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 234.433486][T12391] __x64_sys_ioctl+0x18e/0x210 [ 234.433525][T12391] do_syscall_64+0x115/0x870 [ 234.433540][T12391] ? clear_bhb_loop+0x40/0x90 [ 234.433553][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.433564][T12391] RIP: 0033:0x7f6d18f9e019 [ 234.433575][T12391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.433586][T12391] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.433598][T12391] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 234.433605][T12391] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 234.433612][T12391] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 234.433618][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.433624][T12391] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 234.433638][T12391] [ 234.433645][T12391] device-mapper: table: 248:0: thin-pool: couldn't split parameters (-ENOMEM) [ 234.525639][T12397] FAULT_INJECTION: forcing a failure. [ 234.525639][T12397] name failslab, interval 1, probability 0, space 0, times 0 [ 234.530671][T12397] CPU: 2 UID: 0 PID: 12397 Comm: syz.0.2214 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.530689][T12397] Tainted: [L]=SOFTLOCKUP [ 234.530694][T12397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.530701][T12397] Call Trace: [ 234.530706][T12397] [ 234.530711][T12397] dump_stack_lvl+0x100/0x190 [ 234.530730][T12397] should_fail_ex.cold+0x5/0xa [ 234.530746][T12397] should_failslab+0xc2/0x120 [ 234.530763][T12397] kmem_cache_alloc_noprof+0x91/0x6a0 [ 234.530777][T12397] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 234.530793][T12397] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 234.530810][T12397] mmu_topup_memory_caches+0x25/0x170 [ 234.530827][T12397] kvm_mmu_load+0xe2/0x2570 [ 234.530842][T12397] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 234.530853][T12397] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 234.530866][T12397] ? __pfx_kvm_mmu_load+0x10/0x10 [ 234.530880][T12397] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 234.530893][T12397] ? kvm_check_and_inject_events+0x873/0x12a0 [ 234.530909][T12397] ? record_steal_time+0x3a0/0xbb0 [ 234.530922][T12397] vcpu_run+0x3aaa/0x5de0 [ 234.530943][T12397] ? __pfx_vcpu_run+0x10/0x10 [ 234.530963][T12397] ? rcu_is_watching+0x12/0xc0 [ 234.530982][T12397] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 234.530998][T12397] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 234.531018][T12397] kvm_vcpu_ioctl+0x730/0x1700 [ 234.531031][T12397] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.531044][T12397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.531058][T12397] ? do_vfs_ioctl+0x226/0x13e0 [ 234.531074][T12397] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.531090][T12397] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 234.531112][T12397] ? __fget_files+0x215/0x3d0 [ 234.531123][T12397] ? hook_file_ioctl_common+0x140/0x440 [ 234.531139][T12397] ? selinux_file_ioctl+0x13b/0x290 [ 234.531156][T12397] ? selinux_file_ioctl+0xb6/0x290 [ 234.531174][T12397] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 234.531186][T12397] __x64_sys_ioctl+0x18e/0x210 [ 234.531203][T12397] do_syscall_64+0x115/0x870 [ 234.531218][T12397] ? clear_bhb_loop+0x40/0x90 [ 234.531231][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.531243][T12397] RIP: 0033:0x7f4c4d59e019 [ 234.531257][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.531268][T12397] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.531281][T12397] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 234.531288][T12397] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 234.531294][T12397] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 234.531300][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.531307][T12397] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 234.531320][T12397] [ 234.641194][T12391] device-mapper: ioctl: error adding target to table [ 234.682977][T12404] gfs2: gfs2 mount does not exist [ 234.717175][T12402] bridge1: entered allmulticast mode [ 234.799683][T12411] tmpfs: Group quota block hardlimit too large. [ 234.824885][T12414] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.0), cmd(9) [ 234.844405][ T42] audit: type=1400 audit(1785889987.917:1027): avc: denied { write } for pid=12409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.875417][ T5822] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 234.896600][ T42] audit: type=1400 audit(1785889987.987:1028): avc: denied { write } for pid=12417 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.963430][T12424] FAULT_INJECTION: forcing a failure. [ 234.963430][T12424] name failslab, interval 1, probability 0, space 0, times 0 [ 234.964409][T12427] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.980711][T12424] CPU: 0 UID: 0 PID: 12424 Comm: syz.4.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.980732][T12424] Tainted: [L]=SOFTLOCKUP [ 234.980736][T12424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.980743][T12424] Call Trace: [ 234.980749][T12424] [ 234.980754][T12424] dump_stack_lvl+0x100/0x190 [ 234.980773][T12424] should_fail_ex.cold+0x5/0xa [ 234.980787][T12424] should_failslab+0xc2/0x120 [ 234.980803][T12424] __kvmalloc_node_noprof+0x116/0x970 [ 234.980822][T12424] ? dm_table_create+0x121/0x3d0 [ 234.980842][T12424] dm_table_create+0x121/0x3d0 [ 234.980861][T12424] table_load+0x1ab/0x7b0 [ 234.980877][T12424] ? irqentry_exit+0x24d/0xa00 [ 234.980893][T12424] ? __pfx_table_load+0x10/0x10 [ 234.980912][T12424] ? _copy_from_user+0x93/0xd0 [ 234.980929][T12424] ctl_ioctl+0x4db/0xcd0 [ 234.980943][T12424] ? __pfx_table_load+0x10/0x10 [ 234.980959][T12424] ? __pfx_ctl_ioctl+0x10/0x10 [ 234.980986][T12424] ? selinux_file_ioctl+0x13b/0x290 [ 234.981004][T12424] ? selinux_file_ioctl+0xb6/0x290 [ 234.981022][T12424] dm_ctl_ioctl+0x22/0x30 [ 234.981035][T12424] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 234.981049][T12424] __x64_sys_ioctl+0x18e/0x210 [ 234.981066][T12424] do_syscall_64+0x115/0x870 [ 234.981079][T12424] ? clear_bhb_loop+0x40/0x90 [ 234.981093][T12424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.981105][T12424] RIP: 0033:0x7f6d18f9e019 [ 234.981115][T12424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.981127][T12424] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.981140][T12424] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 234.981147][T12424] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 234.981153][T12424] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 234.981160][T12424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.981166][T12424] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 234.981179][T12424] [ 234.991620][T12427] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 235.036028][ T5822] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.060855][ T42] audit: type=1400 audit(1785889988.137:1029): avc: denied { write } for pid=12428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.112029][ T5822] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.119350][ T5822] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 235.126315][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.129750][ T5822] usb 7-1: Product: syz [ 235.131395][ T5822] usb 7-1: Manufacturer: syz [ 235.132977][ T42] audit: type=1400 audit(1785889988.217:1030): avc: denied { write } for pid=12433 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.140610][ T5822] usb 7-1: SerialNumber: syz [ 235.295437][T12437] FAULT_INJECTION: forcing a failure. [ 235.295437][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.299532][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.0.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.299551][T12437] Tainted: [L]=SOFTLOCKUP [ 235.299555][T12437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.299561][T12437] Call Trace: [ 235.299566][T12437] [ 235.299571][T12437] dump_stack_lvl+0x100/0x190 [ 235.299590][T12437] should_fail_ex.cold+0x5/0xa [ 235.299605][T12437] _copy_to_user+0x32/0xd0 [ 235.299622][T12437] simple_read_from_buffer+0xcb/0x170 [ 235.299636][T12437] proc_fail_nth_read+0x1af/0x230 [ 235.299654][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.299671][T12437] ? rw_verify_area+0xce/0x6d0 [ 235.299687][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.299703][T12437] vfs_read+0x1e4/0xb40 [ 235.299721][T12437] ? __pfx_vfs_read+0x10/0x10 [ 235.299737][T12437] ? __fget_files+0x215/0x3d0 [ 235.299751][T12437] ? __fget_files+0x21f/0x3d0 [ 235.299765][T12437] ksys_read+0x12a/0x250 [ 235.299782][T12437] ? __pfx_ksys_read+0x10/0x10 [ 235.299802][T12437] do_syscall_64+0x115/0x870 [ 235.299821][T12437] ? clear_bhb_loop+0x40/0x90 [ 235.299834][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.299846][T12437] RIP: 0033:0x7f4c4d55e84e [ 235.299856][T12437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.299867][T12437] RSP: 002b:00007f4c4e37ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.299880][T12437] RAX: ffffffffffffffda RBX: 00007f4c4e3806c0 RCX: 00007f4c4d55e84e [ 235.299886][T12437] RDX: 000000000000000f RSI: 00007f4c4e3800a0 RDI: 0000000000000004 [ 235.299893][T12437] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 235.299899][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.299906][T12437] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 235.299919][T12437] [ 235.384460][ T5822] usb 7-1: USB disconnect, device number 49 [ 235.435595][ T10] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 235.606116][ T10] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 235.610062][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.610831][T12443] null_blk: disk nullb1 created [ 235.614452][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.621515][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.628466][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.630288][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.632284][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.637693][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.642684][ T10] usb 9-1: config 0 descriptor?? [ 235.820274][T12427] CIFS: VFS: Error connecting to socket. Aborting operation. [ 235.822774][T12427] CIFS: VFS: cifs_mount failed w/return code = -4 [ 235.931366][T12449] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.67108864.0), cmd(9) [ 236.050872][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 236.057055][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 236.062975][ T10] usb 9-1: USB disconnect, device number 42 [ 236.199695][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.203561][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.215142][ T5822] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 236.376332][ T5822] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 236.379082][ T5822] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.382596][ T5822] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.386035][ T5822] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.390154][ T5822] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.393041][ T5822] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.400174][ T5822] usb 11-1: config 0 descriptor?? [ 236.614396][T12461] FAULT_INJECTION: forcing a failure. [ 236.614396][T12461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.620786][T12461] CPU: 2 UID: 0 PID: 12461 Comm: syz.4.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.620806][T12461] Tainted: [L]=SOFTLOCKUP [ 236.620810][T12461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.620818][T12461] Call Trace: [ 236.620822][T12461] [ 236.620828][T12461] dump_stack_lvl+0x100/0x190 [ 236.620848][T12461] should_fail_ex.cold+0x5/0xa [ 236.620863][T12461] _copy_from_iter+0x1f4/0x1690 [ 236.620882][T12461] ? __asan_memset+0x23/0x50 [ 236.620907][T12461] ? __pfx__copy_from_iter+0x10/0x10 [ 236.620925][T12461] ? __pfx___alloc_skb+0x10/0x10 [ 236.620947][T12461] netlink_sendmsg+0x808/0xda0 [ 236.620973][T12461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.620987][T12461] ? selinux_socket_sendmsg+0x198/0x2f0 [ 236.621007][T12461] ____sys_sendmsg+0xa4d/0xbe0 [ 236.621025][T12461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.621038][T12461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.621063][T12461] ___sys_sendmsg+0x190/0x1e0 [ 236.621075][T12461] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.621085][T12461] ? __lock_acquire+0x49f/0x1a40 [ 236.621099][T12461] ? get_pid_task+0x106/0x250 [ 236.621124][T12461] __sys_sendmsg+0x160/0x210 [ 236.621139][T12461] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.621173][T12461] do_syscall_64+0x115/0x870 [ 236.621188][T12461] ? clear_bhb_loop+0x40/0x90 [ 236.621201][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.621212][T12461] RIP: 0033:0x7f6d18f9e019 [ 236.621222][T12461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.621242][T12461] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.621254][T12461] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 236.621261][T12461] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 236.621268][T12461] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 236.621274][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.621280][T12461] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 236.621293][T12461] [ 236.761969][T12465] device-mapper: table: 248:0: too large device [ 236.765747][T12465] device-mapper: ioctl: error adding target to table [ 236.868260][T12474] team0: Device xfrm0 is of different type [ 236.874384][T12478] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 236.931364][T12480] FAULT_INJECTION: forcing a failure. [ 236.931364][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 236.937110][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.2.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.937132][T12480] Tainted: [L]=SOFTLOCKUP [ 236.937136][T12480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.937143][T12480] Call Trace: [ 236.937149][T12480] [ 236.937154][T12480] dump_stack_lvl+0x100/0x190 [ 236.937174][T12480] should_fail_ex.cold+0x5/0xa [ 236.937190][T12480] should_failslab+0xc2/0x120 [ 236.937206][T12480] kmem_cache_alloc_noprof+0x91/0x6a0 [ 236.937219][T12480] ? kernel_text_address+0x8d/0x100 [ 236.937233][T12480] ? do_getname_kernel+0x5d/0x250 [ 236.937255][T12480] do_getname_kernel+0x5d/0x250 [ 236.937270][T12480] kern_path+0x1f/0x50 [ 236.937281][T12480] lookup_bdev+0xd8/0x280 [ 236.937297][T12480] ? __pfx_lookup_bdev+0x10/0x10 [ 236.937315][T12480] dm_devt_from_path+0x1c4/0x280 [ 236.937330][T12480] ? __pfx_dm_devt_from_path+0x10/0x10 [ 236.937343][T12480] ? __mutex_lock+0x26d/0x1bd0 [ 236.937358][T12480] ? dm_ctl_ioctl+0x22/0x30 [ 236.937373][T12480] ? do_syscall_64+0x115/0x870 [ 236.937391][T12480] dm_get_device+0xc1/0x7e0 [ 236.937411][T12480] ? __pfx_dm_get_device+0x10/0x10 [ 236.937434][T12480] pool_ctr+0x2a8/0x2380 [ 236.937456][T12480] ? __pfx_pool_ctr+0x10/0x10 [ 236.937473][T12480] ? __kasan_kmalloc+0xaa/0xb0 [ 236.937512][T12480] ? dm_split_args+0xc1/0x570 [ 236.937529][T12480] ? rcu_is_watching+0x12/0xc0 [ 236.937546][T12480] ? dm_split_args+0xc1/0x570 [ 236.937562][T12480] ? kfree+0x1e5/0x6c0 [ 236.937581][T12480] ? skip_spaces+0xee/0x130 [ 236.937602][T12480] dm_table_add_target+0x58b/0xee0 [ 236.937616][T12480] ? __pfx_dm_table_add_target+0x10/0x10 [ 236.937640][T12480] table_load+0x3b9/0x7b0 [ 236.937660][T12480] ? __pfx_table_load+0x10/0x10 [ 236.937675][T12480] ? __might_fault+0xc5/0x140 [ 236.937687][T12480] ? __might_fault+0xc5/0x140 [ 236.937704][T12480] ctl_ioctl+0x4db/0xcd0 [ 236.937719][T12480] ? __pfx_table_load+0x10/0x10 [ 236.937736][T12480] ? __pfx_ctl_ioctl+0x10/0x10 [ 236.937766][T12480] ? selinux_file_ioctl+0x13b/0x290 [ 236.937784][T12480] ? selinux_file_ioctl+0xb6/0x290 [ 236.937803][T12480] dm_ctl_ioctl+0x22/0x30 [ 236.937817][T12480] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 236.937832][T12480] __x64_sys_ioctl+0x18e/0x210 [ 236.937850][T12480] do_syscall_64+0x115/0x870 [ 236.937864][T12480] ? clear_bhb_loop+0x40/0x90 [ 236.937878][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.937890][T12480] RIP: 0033:0x7f59d879e019 [ 236.937900][T12480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.937911][T12480] RSP: 002b:00007f59d95df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.937924][T12480] RAX: ffffffffffffffda RBX: 00007f59d8a25fa0 RCX: 00007f59d879e019 [ 236.937932][T12480] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 236.937939][T12480] RBP: 00007f59d95df090 R08: 0000000000000000 R09: 0000000000000000 [ 236.937946][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.937952][T12480] R13: 00007f59d8a26038 R14: 00007f59d8a25fa0 R15: 00007ffed922d748 [ 236.937967][T12480] [ 236.938279][T12480] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOMEM) [ 237.043860][T12480] device-mapper: ioctl: error adding target to table [ 237.048347][ T5822] usbhid 11-1:0.0: can't add hid device: -71 [ 237.050410][ T5822] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 237.056341][ T5822] usb 11-1: USB disconnect, device number 39 [ 237.120944][T12487] kvm: apic: phys broadcast and lowest prio [ 237.133419][T12487] kvm: apic: phys broadcast and lowest prio [ 237.135699][T12487] kvm: apic: phys broadcast and lowest prio [ 237.137680][T12487] kvm: apic: phys broadcast and lowest prio [ 237.139623][T12487] kvm: apic: phys broadcast and lowest prio [ 237.141556][T12487] kvm: apic: phys broadcast and lowest prio [ 237.143470][T12487] kvm: apic: phys broadcast and lowest prio [ 237.147908][T12487] kvm: apic: phys broadcast and lowest prio [ 237.150093][T12487] kvm: apic: phys broadcast and lowest prio [ 237.152086][T12487] kvm: apic: phys broadcast and lowest prio [ 237.154062][T12487] kvm: apic: phys broadcast and lowest prio [ 237.156802][T12487] kvm: apic: phys broadcast and lowest prio [ 237.158824][T12487] kvm: apic: phys broadcast and lowest prio [ 237.161719][T12487] kvm: apic: phys broadcast and lowest prio [ 237.163725][T12487] kvm: apic: phys broadcast and lowest prio [ 237.165761][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 237.169069][T12487] kvm: apic: phys broadcast and lowest prio [ 237.223876][T12495] FAULT_INJECTION: forcing a failure. [ 237.223876][T12495] name failslab, interval 1, probability 0, space 0, times 0 [ 237.228466][T12495] CPU: 0 UID: 0 PID: 12495 Comm: syz.0.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.228489][T12495] Tainted: [L]=SOFTLOCKUP [ 237.228493][T12495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.228500][T12495] Call Trace: [ 237.228504][T12495] [ 237.228510][T12495] dump_stack_lvl+0x100/0x190 [ 237.228529][T12495] should_fail_ex.cold+0x5/0xa [ 237.228544][T12495] should_failslab+0xc2/0x120 [ 237.228559][T12495] kmem_cache_alloc_noprof+0x91/0x6a0 [ 237.228573][T12495] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 237.228590][T12495] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 237.228606][T12495] mmu_topup_memory_caches+0x25/0x170 [ 237.228623][T12495] kvm_mmu_load+0xe2/0x2570 [ 237.228638][T12495] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 237.228649][T12495] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 237.228663][T12495] ? __pfx_kvm_mmu_load+0x10/0x10 [ 237.228681][T12495] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 237.228695][T12495] ? kvm_check_and_inject_events+0x873/0x12a0 [ 237.228711][T12495] ? record_steal_time+0x3a0/0xbb0 [ 237.228724][T12495] vcpu_run+0x3aaa/0x5de0 [ 237.228745][T12495] ? __pfx_vcpu_run+0x10/0x10 [ 237.228765][T12495] ? rcu_is_watching+0x12/0xc0 [ 237.228784][T12495] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 237.228800][T12495] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 237.228820][T12495] kvm_vcpu_ioctl+0x730/0x1700 [ 237.228834][T12495] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 237.228846][T12495] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.228861][T12495] ? do_vfs_ioctl+0x226/0x13e0 [ 237.228877][T12495] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 237.228893][T12495] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 237.228916][T12495] ? __fget_files+0x215/0x3d0 [ 237.228926][T12495] ? hook_file_ioctl_common+0x140/0x440 [ 237.228942][T12495] ? selinux_file_ioctl+0x13b/0x290 [ 237.228959][T12495] ? selinux_file_ioctl+0xb6/0x290 [ 237.228976][T12495] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 237.228989][T12495] __x64_sys_ioctl+0x18e/0x210 [ 237.229006][T12495] do_syscall_64+0x115/0x870 [ 237.229020][T12495] ? clear_bhb_loop+0x40/0x90 [ 237.229034][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.229046][T12495] RIP: 0033:0x7f4c4d59e019 [ 237.229056][T12495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.229067][T12495] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.229079][T12495] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 237.229085][T12495] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 237.229092][T12495] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 237.229098][T12495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.229105][T12495] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 237.229118][T12495] [ 237.399556][T12500] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 237.403195][T12500] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.406537][T12500] CIFS: VFS: cifs_mount failed w/return code = -111 [ 237.413016][ T9] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 237.416017][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.424749][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.428000][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.432069][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.436534][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.443649][ T9] usb 9-1: config 0 descriptor?? [ 237.490642][T12506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.327680.0), cmd(9) [ 237.584224][T12513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 237.803092][T12527] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 237.819678][T12527] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.822109][T12527] CIFS: VFS: cifs_mount failed w/return code = -111 [ 237.837683][T12531] netlink: 'syz.6.2259': attribute type 63 has an invalid length. [ 237.845769][T12531] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2259'. [ 237.871475][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 237.875548][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 237.877239][T12534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 237.884742][ T9] usb 9-1: USB disconnect, device number 43 [ 237.892398][T12534] block device autoloading is deprecated and will be removed. [ 238.140185][T12549] device-mapper: table: 248:0: : unknown target type [ 238.142470][T12549] device-mapper: ioctl: error adding target to table [ 238.214800][ T5529] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 238.366213][ T5529] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 238.370831][ T5529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.374306][ T5529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.377781][ T5529] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.385358][ T5529] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.393718][ T5529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.403426][ T5529] usb 7-1: config 0 descriptor?? [ 238.411047][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.415753][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.645387][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 238.796163][ T24] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 238.799142][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.802606][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.805751][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.809853][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.812665][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.816582][ T24] usb 9-1: config 0 descriptor?? [ 238.992263][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 238.992277][ T42] audit: type=1400 audit(1785889992.077:1043): avc: denied { connect } for pid=12558 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.013601][ T5529] usbhid 7-1:0.0: can't add hid device: -71 [ 239.015636][ T5529] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 239.020117][ T5529] usb 7-1: USB disconnect, device number 50 [ 239.053772][ T42] audit: type=1400 audit(1785889992.137:1044): avc: denied { read } for pid=12558 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.154038][T12563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.157506][T12563] block device autoloading is deprecated and will be removed. [ 239.238017][T12565] FAULT_INJECTION: forcing a failure. [ 239.238017][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.242382][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.0.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.242400][T12565] Tainted: [L]=SOFTLOCKUP [ 239.242405][T12565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.242412][T12565] Call Trace: [ 239.242417][T12565] [ 239.242423][T12565] dump_stack_lvl+0x100/0x190 [ 239.242442][T12565] should_fail_ex.cold+0x5/0xa [ 239.242457][T12565] _copy_from_iter+0x1f4/0x1690 [ 239.242474][T12565] ? __asan_memset+0x23/0x50 [ 239.242485][T12565] ? __pfx__copy_from_iter+0x10/0x10 [ 239.242501][T12565] ? __pfx___alloc_skb+0x10/0x10 [ 239.242520][T12565] netlink_sendmsg+0x808/0xda0 [ 239.242535][T12565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.242548][T12565] ? selinux_socket_sendmsg+0x198/0x2f0 [ 239.242567][T12565] ____sys_sendmsg+0xa4d/0xbe0 [ 239.242584][T12565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.242596][T12565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.242619][T12565] ___sys_sendmsg+0x190/0x1e0 [ 239.242631][T12565] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.242641][T12565] ? __lock_acquire+0x49f/0x1a40 [ 239.242655][T12565] ? get_pid_task+0x106/0x250 [ 239.242679][T12565] __sys_sendmsg+0x160/0x210 [ 239.242693][T12565] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.242715][T12565] do_syscall_64+0x115/0x870 [ 239.242730][T12565] ? clear_bhb_loop+0x40/0x90 [ 239.242747][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.242759][T12565] RIP: 0033:0x7f4c4d59e019 [ 239.242769][T12565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.242780][T12565] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.242792][T12565] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 239.242799][T12565] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 239.242806][T12565] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 239.242812][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.242818][T12565] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 239.242832][T12565] [ 239.350830][T12567] bond3: entered promiscuous mode [ 239.352691][T12567] bond3: entered allmulticast mode [ 239.354818][T12567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.399103][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2273'. [ 239.402091][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'. [ 239.405867][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2273'. [ 239.432687][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 239.436819][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 239.441162][ T24] usb 9-1: USB disconnect, device number 44 [ 239.486905][T12574] device-mapper: table: 248:0: too large device [ 239.489042][T12574] device-mapper: ioctl: error adding target to table [ 239.524373][T12577] FAULT_INJECTION: forcing a failure. [ 239.524373][T12577] name failslab, interval 1, probability 0, space 0, times 0 [ 239.528886][T12577] CPU: 2 UID: 0 PID: 12577 Comm: syz.0.2277 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.528905][T12577] Tainted: [L]=SOFTLOCKUP [ 239.528909][T12577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.528916][T12577] Call Trace: [ 239.528921][T12577] [ 239.528925][T12577] dump_stack_lvl+0x100/0x190 [ 239.528944][T12577] should_fail_ex.cold+0x5/0xa [ 239.528959][T12577] should_failslab+0xc2/0x120 [ 239.528974][T12577] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 239.528988][T12577] ? __d_alloc+0x35/0xa50 [ 239.529003][T12577] __d_alloc+0x35/0xa50 [ 239.529018][T12577] d_alloc_parallel+0x105/0x14b0 [ 239.529040][T12577] ? __pfx_d_alloc_parallel+0x10/0x10 [ 239.529057][T12577] ? __pfx___might_resched+0x10/0x10 [ 239.529070][T12577] ? try_to_unlazy+0x296/0x910 [ 239.529089][T12577] ? down_read+0x13b/0x4c0 [ 239.529104][T12577] ? __pfx_down_read+0x10/0x10 [ 239.529120][T12577] __lookup_slow+0x98/0x320 [ 239.529136][T12577] lookup_slow+0x50/0x70 [ 239.529151][T12577] path_lookupat+0x5e8/0xc40 [ 239.529169][T12577] filename_lookup+0x202/0x590 [ 239.529181][T12577] ? __pfx_filename_lookup+0x10/0x10 [ 239.529203][T12577] ? __asan_memcpy+0x3c/0x60 [ 239.529214][T12577] ? do_getname_kernel+0x1be/0x250 [ 239.529229][T12577] kern_path+0x37/0x50 [ 239.529238][T12577] lookup_bdev+0xd8/0x280 [ 239.529253][T12577] ? __pfx_lookup_bdev+0x10/0x10 [ 239.529270][T12577] dm_devt_from_path+0x1c4/0x280 [ 239.529282][T12577] ? __pfx_dm_devt_from_path+0x10/0x10 [ 239.529297][T12577] ? __mutex_lock+0x26d/0x1bd0 [ 239.529310][T12577] ? dm_ctl_ioctl+0x22/0x30 [ 239.529325][T12577] ? do_syscall_64+0x115/0x870 [ 239.529342][T12577] dm_get_device+0xc1/0x7e0 [ 239.529360][T12577] ? __pfx_dm_get_device+0x10/0x10 [ 239.529382][T12577] pool_ctr+0x2a8/0x2380 [ 239.529402][T12577] ? __pfx_pool_ctr+0x10/0x10 [ 239.529418][T12577] ? __kasan_kmalloc+0xaa/0xb0 [ 239.529431][T12577] ? dm_split_args+0xc1/0x570 [ 239.529447][T12577] ? rcu_is_watching+0x12/0xc0 [ 239.529464][T12577] ? dm_split_args+0xc1/0x570 [ 239.529507][T12577] ? kfree+0x1e5/0x6c0 [ 239.529531][T12577] ? skip_spaces+0xee/0x130 [ 239.529558][T12577] dm_table_add_target+0x58b/0xee0 [ 239.529571][T12577] ? __pfx_dm_table_add_target+0x10/0x10 [ 239.529593][T12577] table_load+0x3b9/0x7b0 [ 239.529612][T12577] ? __pfx_table_load+0x10/0x10 [ 239.529626][T12577] ? __might_fault+0xc5/0x140 [ 239.529637][T12577] ? __might_fault+0xc5/0x140 [ 239.529652][T12577] ctl_ioctl+0x4db/0xcd0 [ 239.529667][T12577] ? __pfx_table_load+0x10/0x10 [ 239.529682][T12577] ? __pfx_ctl_ioctl+0x10/0x10 [ 239.529710][T12577] ? selinux_file_ioctl+0x13b/0x290 [ 239.529727][T12577] ? selinux_file_ioctl+0xb6/0x290 [ 239.529745][T12577] dm_ctl_ioctl+0x22/0x30 [ 239.529782][T12577] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 239.529801][T12577] __x64_sys_ioctl+0x18e/0x210 [ 239.529817][T12577] do_syscall_64+0x115/0x870 [ 239.529830][T12577] ? clear_bhb_loop+0x40/0x90 [ 239.529844][T12577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.529855][T12577] RIP: 0033:0x7f4c4d59e019 [ 239.529866][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.529877][T12577] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.529890][T12577] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 239.529897][T12577] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 239.529904][T12577] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 239.529910][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.529917][T12577] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 239.529931][T12577] [ 239.529993][T12577] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOMEM) [ 239.656577][T12577] device-mapper: ioctl: error adding target to table [ 239.733354][T12591] FAULT_INJECTION: forcing a failure. [ 239.733354][T12591] name failslab, interval 1, probability 0, space 0, times 0 [ 239.737846][T12591] CPU: 0 UID: 0 PID: 12591 Comm: syz.0.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.737864][T12591] Tainted: [L]=SOFTLOCKUP [ 239.737868][T12591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.737875][T12591] Call Trace: [ 239.737879][T12591] [ 239.737884][T12591] dump_stack_lvl+0x100/0x190 [ 239.737902][T12591] should_fail_ex.cold+0x5/0xa [ 239.737917][T12591] should_failslab+0xc2/0x120 [ 239.737932][T12591] kmem_cache_alloc_noprof+0x91/0x6a0 [ 239.737946][T12591] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 239.737962][T12591] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 239.737979][T12591] mmu_topup_memory_caches+0x25/0x170 [ 239.737996][T12591] kvm_mmu_load+0xe2/0x2570 [ 239.738011][T12591] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 239.738022][T12591] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 239.738035][T12591] ? __pfx_kvm_mmu_load+0x10/0x10 [ 239.738049][T12591] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 239.738063][T12591] ? kvm_check_and_inject_events+0x873/0x12a0 [ 239.738079][T12591] ? record_steal_time+0x3a0/0xbb0 [ 239.738092][T12591] vcpu_run+0x3aaa/0x5de0 [ 239.738113][T12591] ? __pfx_vcpu_run+0x10/0x10 [ 239.738133][T12591] ? rcu_is_watching+0x12/0xc0 [ 239.738152][T12591] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 239.738168][T12591] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 239.738188][T12591] kvm_vcpu_ioctl+0x730/0x1700 [ 239.738201][T12591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.738213][T12591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.738227][T12591] ? do_vfs_ioctl+0x226/0x13e0 [ 239.738244][T12591] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 239.738260][T12591] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 239.738282][T12591] ? __fget_files+0x215/0x3d0 [ 239.738292][T12591] ? hook_file_ioctl_common+0x140/0x440 [ 239.738309][T12591] ? selinux_file_ioctl+0x13b/0x290 [ 239.738326][T12591] ? selinux_file_ioctl+0xb6/0x290 [ 239.738343][T12591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.738356][T12591] __x64_sys_ioctl+0x18e/0x210 [ 239.738373][T12591] do_syscall_64+0x115/0x870 [ 239.738387][T12591] ? clear_bhb_loop+0x40/0x90 [ 239.738400][T12591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.738411][T12591] RIP: 0033:0x7f4c4d59e019 [ 239.738421][T12591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.738432][T12591] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.738444][T12591] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 239.738451][T12591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 239.738458][T12591] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 239.738464][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.738470][T12591] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 239.738484][T12591] [ 239.964693][ T5822] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 240.005341][T12601] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.393216.0), cmd(9) [ 240.111541][ T42] audit: type=1400 audit(1785889993.197:1045): avc: denied { cmd } for pid=12610 comm="syz.0.2290" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 240.115167][ T5822] usb 7-1: Using ep0 maxpacket: 8 [ 240.121700][ T5822] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.126548][ T5822] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.133186][ T5822] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.135541][ T5822] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 240.138381][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.147224][ T5822] usb 7-1: config 0 descriptor?? [ 240.151810][T12611] device-mapper: table: 248:0: too large device [ 240.153945][T12611] device-mapper: ioctl: error adding target to table [ 240.285993][ T24] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 240.396319][T12623] device-mapper: table: 248:0: : unknown target type [ 240.398591][T12623] device-mapper: ioctl: error adding target to table [ 240.435883][ T24] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 240.438667][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.442125][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.445884][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.449988][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.452787][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.457775][ T24] usb 9-1: config 0 descriptor?? [ 240.560044][ T5822] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 240.562714][ T5822] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 240.565547][ T5822] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 240.568153][ T5822] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 240.570708][ T5822] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 240.573801][ T5822] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 240.878374][ T1352] usb 7-1: USB disconnect, device number 51 [ 240.994737][ T42] audit: type=1800 audit(1785889994.077:1046): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2294" name="zoned" dev="configfs" ino=58019 res=0 errno=0 [ 241.007455][ T42] audit: type=1800 audit(1785889994.087:1047): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2294" name="power" dev="configfs" ino=58020 res=0 errno=0 [ 241.037652][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2295'. [ 241.070497][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 241.073257][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 241.080215][ T24] usb 9-1: USB disconnect, device number 45 [ 241.111077][T12636] FAULT_INJECTION: forcing a failure. [ 241.111077][T12636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.116027][T12636] CPU: 0 UID: 0 PID: 12636 Comm: syz.0.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.116047][T12636] Tainted: [L]=SOFTLOCKUP [ 241.116051][T12636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.116058][T12636] Call Trace: [ 241.116063][T12636] [ 241.116068][T12636] dump_stack_lvl+0x100/0x190 [ 241.116088][T12636] should_fail_ex.cold+0x5/0xa [ 241.116103][T12636] _copy_from_iter+0x1f4/0x1690 [ 241.116121][T12636] ? __asan_memset+0x23/0x50 [ 241.116132][T12636] ? __pfx__copy_from_iter+0x10/0x10 [ 241.116148][T12636] ? __pfx___alloc_skb+0x10/0x10 [ 241.116167][T12636] netlink_sendmsg+0x808/0xda0 [ 241.116182][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.116196][T12636] ? selinux_socket_sendmsg+0x198/0x2f0 [ 241.116214][T12636] ____sys_sendmsg+0xa4d/0xbe0 [ 241.116231][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.116243][T12636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.116266][T12636] ___sys_sendmsg+0x190/0x1e0 [ 241.116278][T12636] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.116288][T12636] ? __lock_acquire+0x49f/0x1a40 [ 241.116303][T12636] ? get_pid_task+0x106/0x250 [ 241.116327][T12636] __sys_sendmsg+0x160/0x210 [ 241.116341][T12636] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.116362][T12636] do_syscall_64+0x115/0x870 [ 241.116377][T12636] ? clear_bhb_loop+0x40/0x90 [ 241.116390][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.116401][T12636] RIP: 0033:0x7f4c4d59e019 [ 241.116414][T12636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.116425][T12636] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.116437][T12636] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 241.116444][T12636] RDX: 0000000000040040 RSI: 0000200000001200 RDI: 0000000000000003 [ 241.116451][T12636] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 241.116457][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.116464][T12636] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 241.116477][T12636] [ 241.245321][ T5822] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 241.307021][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000003c [ 241.320070][T12638] kvm: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xf0b3 [ 241.335448][T12638] kvm_intel: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xe261 [ 241.395559][ T5822] usb 11-1: Using ep0 maxpacket: 32 [ 241.403194][ T5822] usb 11-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 241.409825][ T5822] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.416084][ T5822] usb 11-1: Product: syz [ 241.419373][ T5822] usb 11-1: Manufacturer: syz [ 241.422488][ T5822] usb 11-1: SerialNumber: syz [ 241.428749][ T5822] usb 11-1: config 0 descriptor?? [ 241.656232][ T5822] RobotFuzz Open Source InterFace, OSIF 11-1:0.0: version d4.15 found at bus 011 address 040 [ 241.690935][T12651] bond14: entered promiscuous mode [ 241.695152][T12651] bond14: entered allmulticast mode [ 241.697153][T12651] 8021q: adding VLAN 0 to HW filter on device bond14 [ 241.738676][T12648] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.745492][T12648] sock: sock_set_timeout: `syz.2.2304' (pid 12648) tries to set negative timeout [ 241.763816][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 241.769873][ T5737] Bluetooth: hci4: Malformed Event: 0x13 [ 241.793638][T12655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 241.799711][T12655] tipc: Started in network mode [ 241.802514][T12655] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 241.807314][T12655] tipc: Enabled bearer , priority 0 [ 242.238245][T12661] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.241347][T12661] block device autoloading is deprecated and will be removed. [ 242.270782][T12658] usb3503 0-0008: unknown mode is requested [ 242.272768][T12658] usb3503 0-0008: usb3503_probe: probed in standby mode [ 242.275447][T12658] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 242.279355][T12658] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 242.360635][T12665] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-ENOENT) [ 242.364048][T12665] device-mapper: ioctl: error adding target to table [ 242.366640][T12665] FAULT_INJECTION: forcing a failure. [ 242.366640][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.370919][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.4.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.370937][T12665] Tainted: [L]=SOFTLOCKUP [ 242.370941][T12665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.370948][T12665] Call Trace: [ 242.370953][T12665] [ 242.370959][T12665] dump_stack_lvl+0x100/0x190 [ 242.370977][T12665] should_fail_ex.cold+0x5/0xa [ 242.370991][T12665] _copy_to_user+0x32/0xd0 [ 242.371008][T12665] simple_read_from_buffer+0xcb/0x170 [ 242.371022][T12665] proc_fail_nth_read+0x1af/0x230 [ 242.371040][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.371057][T12665] ? rw_verify_area+0xce/0x6d0 [ 242.371073][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.371089][T12665] vfs_read+0x1e4/0xb40 [ 242.371107][T12665] ? __pfx_vfs_read+0x10/0x10 [ 242.371125][T12665] ? __fget_files+0x215/0x3d0 [ 242.371140][T12665] ? __fget_files+0x21f/0x3d0 [ 242.371155][T12665] ksys_read+0x12a/0x250 [ 242.371171][T12665] ? __pfx_ksys_read+0x10/0x10 [ 242.371191][T12665] do_syscall_64+0x115/0x870 [ 242.371206][T12665] ? clear_bhb_loop+0x40/0x90 [ 242.371219][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.371231][T12665] RIP: 0033:0x7f6d18f5e84e [ 242.371241][T12665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.371253][T12665] RSP: 002b:00007f6d19df3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.371265][T12665] RAX: ffffffffffffffda RBX: 00007f6d19df46c0 RCX: 00007f6d18f5e84e [ 242.371272][T12665] RDX: 000000000000000f RSI: 00007f6d19df40a0 RDI: 0000000000000004 [ 242.371282][T12665] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 242.371292][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.371301][T12665] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 242.371325][T12665] [ 242.496694][ T42] audit: type=1400 audit(1785889995.567:1048): avc: denied { read } for pid=12668 comm="syz.2.2310" path="socket:[58588]" dev="sockfs" ino=58588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.555173][T12675] FAULT_INJECTION: forcing a failure. [ 242.555173][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 242.559335][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.4.2312 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.559354][T12675] Tainted: [L]=SOFTLOCKUP [ 242.559359][T12675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.559366][T12675] Call Trace: [ 242.559371][T12675] [ 242.559376][T12675] dump_stack_lvl+0x100/0x190 [ 242.559395][T12675] should_fail_ex.cold+0x5/0xa [ 242.559409][T12675] should_failslab+0xc2/0x120 [ 242.559424][T12675] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.559438][T12675] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 242.559454][T12675] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 242.559471][T12675] mmu_topup_memory_caches+0x25/0x170 [ 242.559488][T12675] kvm_mmu_load+0xe2/0x2570 [ 242.559504][T12675] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 242.559515][T12675] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 242.559529][T12675] ? __pfx_kvm_mmu_load+0x10/0x10 [ 242.559543][T12675] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 242.559556][T12675] ? kvm_check_and_inject_events+0x873/0x12a0 [ 242.559571][T12675] ? record_steal_time+0x3a0/0xbb0 [ 242.559584][T12675] vcpu_run+0x3aaa/0x5de0 [ 242.559605][T12675] ? __pfx_vcpu_run+0x10/0x10 [ 242.559625][T12675] ? rcu_is_watching+0x12/0xc0 [ 242.559643][T12675] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 242.559659][T12675] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 242.559679][T12675] kvm_vcpu_ioctl+0x730/0x1700 [ 242.559693][T12675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 242.559706][T12675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.559720][T12675] ? do_vfs_ioctl+0x226/0x13e0 [ 242.559737][T12675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 242.559752][T12675] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.559786][T12675] ? __fget_files+0x215/0x3d0 [ 242.559797][T12675] ? hook_file_ioctl_common+0x140/0x440 [ 242.559813][T12675] ? selinux_file_ioctl+0x13b/0x290 [ 242.559829][T12675] ? selinux_file_ioctl+0xb6/0x290 [ 242.559847][T12675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 242.559860][T12675] __x64_sys_ioctl+0x18e/0x210 [ 242.559877][T12675] do_syscall_64+0x115/0x870 [ 242.559891][T12675] ? clear_bhb_loop+0x40/0x90 [ 242.559904][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.559916][T12675] RIP: 0033:0x7f6d18f9e019 [ 242.559926][T12675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.559937][T12675] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.559949][T12675] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 242.559956][T12675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 242.559963][T12675] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 242.559969][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.559976][T12675] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 242.559990][T12675] [ 242.831772][ T1352] tipc: Node number set to 11578026 [ 243.074751][ T5822] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 243.226350][ T5822] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 243.229077][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.232536][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.236853][ T5822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.241051][ T5822] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.243921][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.248173][ T5822] usb 9-1: config 0 descriptor?? [ 243.504875][T12687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.507983][T12687] block device autoloading is deprecated and will be removed. [ 243.554410][T12686] usb3503 0-0008: unknown mode is requested [ 243.556576][T12686] usb3503 0-0008: usb3503_probe: probed in standby mode [ 243.563083][T12686] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 243.566941][T12686] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 243.856662][ T5822] usbhid 9-1:0.0: can't add hid device: -71 [ 243.858712][ T5822] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 243.862421][ T5822] usb 9-1: USB disconnect, device number 46 [ 243.874909][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 244.007070][ T1352] usb 11-1: USB disconnect, device number 40 [ 244.036747][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.041855][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.049504][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 244.053345][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.057090][ T9] usb 7-1: Product: syz [ 244.058807][ T9] usb 7-1: Manufacturer: syz [ 244.060636][ T9] usb 7-1: SerialNumber: syz [ 244.081127][T12691] loop7: detected capacity change from 0 to 16384 [ 244.248569][T12692] loop7: detected capacity change from 16384 to 0 [ 244.326372][ T42] audit: type=1400 audit(1785889997.417:1049): avc: denied { name_bind } for pid=12688 comm="syz.2.2317" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 244.408486][T12697] device-mapper: ioctl: Next dm_target_spec (offset 342) is not 8-byte aligned [ 244.411915][T12697] device-mapper: ioctl: unable to find target [ 244.750577][T12714] kvm: kvm [12713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 245.036566][T12719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.042990][T12719] block device autoloading is deprecated and will be removed. [ 245.084587][T12718] usb3503 0-0008: unknown mode is requested [ 245.087311][T12718] usb3503 0-0008: usb3503_probe: probed in standby mode [ 245.091036][T12718] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 245.096270][T12718] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 245.275927][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2326'. [ 245.534458][T12730] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.67108866.0), cmd(9) [ 245.652607][T12737] FAULT_INJECTION: forcing a failure. [ 245.652607][T12737] name failslab, interval 1, probability 0, space 0, times 0 [ 245.657493][T12737] CPU: 0 UID: 0 PID: 12737 Comm: syz.4.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.657513][T12737] Tainted: [L]=SOFTLOCKUP [ 245.657517][T12737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.657524][T12737] Call Trace: [ 245.657529][T12737] [ 245.657534][T12737] dump_stack_lvl+0x100/0x190 [ 245.657553][T12737] should_fail_ex.cold+0x5/0xa [ 245.657568][T12737] should_failslab+0xc2/0x120 [ 245.657582][T12737] kmem_cache_alloc_noprof+0x91/0x6a0 [ 245.657596][T12737] ? skb_clone+0x190/0x400 [ 245.657614][T12737] skb_clone+0x190/0x400 [ 245.657628][T12737] nfnetlink_rcv_batch+0x1c8/0x2880 [ 245.657646][T12737] ? kmem_cache_free+0x127/0x6b0 [ 245.657659][T12737] ? __lock_acquire+0x49f/0x1a40 [ 245.657674][T12737] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 245.657690][T12737] ? find_held_lock+0x2b/0x80 [ 245.657707][T12737] ? avc_has_perm_noaudit+0x145/0x3b0 [ 245.657721][T12737] ? __asan_memset+0x23/0x50 [ 245.657733][T12737] ? __nla_validate_parse+0x1e7/0x28b0 [ 245.657748][T12737] ? __pfx___nla_validate_parse+0x10/0x10 [ 245.657759][T12737] ? rcu_is_watching+0x12/0xc0 [ 245.657776][T12737] ? cap_capable+0x107/0x430 [ 245.657793][T12737] ? __nla_parse+0x40/0x60 [ 245.657805][T12737] nfnetlink_rcv+0x3bd/0x440 [ 245.657820][T12737] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.657838][T12737] netlink_unicast+0x585/0x850 [ 245.657853][T12737] ? __pfx_netlink_unicast+0x10/0x10 [ 245.657868][T12737] netlink_sendmsg+0x8b0/0xda0 [ 245.657882][T12737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.657895][T12737] ? selinux_socket_sendmsg+0x198/0x2f0 [ 245.657914][T12737] ____sys_sendmsg+0xa4d/0xbe0 [ 245.657930][T12737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.657943][T12737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.657966][T12737] ___sys_sendmsg+0x190/0x1e0 [ 245.657978][T12737] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.657987][T12737] ? __lock_acquire+0x49f/0x1a40 [ 245.658001][T12737] ? get_pid_task+0x106/0x250 [ 245.658025][T12737] __sys_sendmsg+0x160/0x210 [ 245.658040][T12737] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.658061][T12737] do_syscall_64+0x115/0x870 [ 245.658075][T12737] ? clear_bhb_loop+0x40/0x90 [ 245.658088][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.658100][T12737] RIP: 0033:0x7f6d18f9e019 [ 245.658110][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.658120][T12737] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.658133][T12737] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 245.658139][T12737] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 245.658146][T12737] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 245.658152][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.658159][T12737] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 245.658172][T12737] [ 245.815478][ T24] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 245.951377][ T42] audit: type=1400 audit(1785889999.037:1050): avc: denied { read write } for pid=12750 comm="syz.0.2338" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.959099][ T42] audit: type=1400 audit(1785889999.037:1051): avc: denied { open } for pid=12750 comm="syz.0.2338" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.966666][ T24] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 245.966696][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.966710][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.966723][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.966744][ T24] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.997339][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.007657][ T24] usb 11-1: config 0 descriptor?? [ 246.109775][T12757] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 246.111755][T12757] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 246.115080][T12757] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 246.119301][T12757] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 246.154821][ T5922] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 246.231445][T12757] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 246.233851][T12757] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 246.236715][T12757] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 246.307016][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.312904][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.317415][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.322483][ T5922] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.326092][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.336734][ T5922] usb 9-1: config 0 descriptor?? [ 246.356520][T12767] FAULT_INJECTION: forcing a failure. [ 246.356520][T12767] name failslab, interval 1, probability 0, space 0, times 0 [ 246.360833][T12767] CPU: 0 UID: 0 PID: 12767 Comm: syz.0.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.360853][T12767] Tainted: [L]=SOFTLOCKUP [ 246.360857][T12767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.360864][T12767] Call Trace: [ 246.360869][T12767] [ 246.360875][T12767] dump_stack_lvl+0x100/0x190 [ 246.360894][T12767] should_fail_ex.cold+0x5/0xa [ 246.360909][T12767] should_failslab+0xc2/0x120 [ 246.360924][T12767] kmem_cache_alloc_noprof+0x91/0x6a0 [ 246.360938][T12767] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 246.360954][T12767] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 246.360971][T12767] mmu_topup_memory_caches+0x25/0x170 [ 246.360988][T12767] kvm_mmu_load+0xe2/0x2570 [ 246.361004][T12767] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 246.361016][T12767] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 246.361029][T12767] ? __pfx_kvm_mmu_load+0x10/0x10 [ 246.361043][T12767] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 246.361057][T12767] ? kvm_check_and_inject_events+0x873/0x12a0 [ 246.361073][T12767] ? record_steal_time+0x3a0/0xbb0 [ 246.361086][T12767] vcpu_run+0x3aaa/0x5de0 [ 246.361107][T12767] ? __pfx_vcpu_run+0x10/0x10 [ 246.361127][T12767] ? rcu_is_watching+0x12/0xc0 [ 246.361145][T12767] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 246.361164][T12767] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 246.361184][T12767] kvm_vcpu_ioctl+0x730/0x1700 [ 246.361197][T12767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.361210][T12767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.361225][T12767] ? do_vfs_ioctl+0x226/0x13e0 [ 246.361241][T12767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.361257][T12767] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.361280][T12767] ? __fget_files+0x215/0x3d0 [ 246.361291][T12767] ? hook_file_ioctl_common+0x140/0x440 [ 246.361307][T12767] ? selinux_file_ioctl+0x13b/0x290 [ 246.361324][T12767] ? selinux_file_ioctl+0xb6/0x290 [ 246.361341][T12767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.361354][T12767] __x64_sys_ioctl+0x18e/0x210 [ 246.361371][T12767] do_syscall_64+0x115/0x870 [ 246.361386][T12767] ? clear_bhb_loop+0x40/0x90 [ 246.361399][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.361411][T12767] RIP: 0033:0x7f4c4d59e019 [ 246.361421][T12767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.361432][T12767] RSP: 002b:00007f4c4e380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.361468][T12767] RAX: ffffffffffffffda RBX: 00007f4c4d825fa0 RCX: 00007f4c4d59e019 [ 246.361476][T12767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 246.361483][T12767] RBP: 00007f4c4e380090 R08: 0000000000000000 R09: 0000000000000000 [ 246.361489][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.361496][T12767] R13: 00007f4c4d826038 R14: 00007f4c4d825fa0 R15: 00007fff6cb7e978 [ 246.361510][T12767] [ 246.427954][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.466468][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.468948][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.471388][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.473895][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.479814][ T24] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 246.486799][ T24] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 246.606599][ T42] audit: type=1400 audit(1785889999.697:1052): avc: denied { mount } for pid=12774 comm="syz.0.2345" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 246.631731][ T56] usb 11-1: USB disconnect, device number 41 [ 246.657898][ T42] audit: type=1400 audit(1785889999.747:1053): avc: denied { write } for pid=12774 comm="syz.0.2345" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.682892][ T42] audit: type=1400 audit(1785889999.757:1054): avc: denied { open } for pid=12774 comm="syz.0.2345" path="/211/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.701804][ T42] audit: type=1400 audit(1785889999.787:1055): avc: denied { ioctl } for pid=12774 comm="syz.0.2345" path="/211/tracing/events/enable" dev="tracefs" ino=19680823 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 246.719462][ T42] audit: type=1400 audit(1785889999.807:1056): avc: denied { unmount } for pid=10910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 246.754556][ T5922] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 246.805162][T12777] device-mapper: table: 248:0: : unknown target type [ 246.807948][T12777] device-mapper: ioctl: error adding target to table [ 246.815394][ T9] usb 7-1: USB disconnect, device number 52 [ 246.856943][T12786] FAULT_INJECTION: forcing a failure. [ 246.856943][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 246.861082][T12786] CPU: 0 UID: 0 PID: 12786 Comm: syz.2.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.861110][T12786] Tainted: [L]=SOFTLOCKUP [ 246.861114][T12786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.861121][T12786] Call Trace: [ 246.861126][T12786] [ 246.861132][T12786] dump_stack_lvl+0x100/0x190 [ 246.861150][T12786] should_fail_ex.cold+0x5/0xa [ 246.861165][T12786] should_failslab+0xc2/0x120 [ 246.861180][T12786] __kmalloc_node_noprof+0x101/0x830 [ 246.861194][T12786] ? qdisc_alloc+0xbb/0xb30 [ 246.861214][T12786] qdisc_alloc+0xbb/0xb30 [ 246.861233][T12786] ? _raw_read_unlock+0x28/0x50 [ 246.861248][T12786] qdisc_create+0x70/0x1060 [ 246.861264][T12786] tc_modify_qdisc+0xdcf/0x2120 [ 246.861281][T12786] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 246.861305][T12786] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 246.861319][T12786] rtnetlink_rcv_msg+0x3c9/0xe90 [ 246.861336][T12786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.861355][T12786] ? ref_tracker_free+0x37e/0x6c0 [ 246.861373][T12786] netlink_rcv_skb+0x159/0x420 [ 246.861386][T12786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.861402][T12786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.861418][T12786] ? netlink_deliver_tap+0x1ae/0xcc0 [ 246.861431][T12786] netlink_unicast+0x585/0x850 [ 246.861466][T12786] ? __pfx_netlink_unicast+0x10/0x10 [ 246.861482][T12786] netlink_sendmsg+0x8b0/0xda0 [ 246.861496][T12786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.861509][T12786] ? selinux_socket_sendmsg+0x198/0x2f0 [ 246.861528][T12786] ____sys_sendmsg+0xa4d/0xbe0 [ 246.861545][T12786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.861558][T12786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.861581][T12786] ___sys_sendmsg+0x190/0x1e0 [ 246.861593][T12786] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.861603][T12786] ? __lock_acquire+0x49f/0x1a40 [ 246.861617][T12786] ? get_pid_task+0x106/0x250 [ 246.861642][T12786] __sys_sendmsg+0x160/0x210 [ 246.861657][T12786] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.861678][T12786] do_syscall_64+0x115/0x870 [ 246.861692][T12786] ? clear_bhb_loop+0x40/0x90 [ 246.861706][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.861717][T12786] RIP: 0033:0x7f59d879e019 [ 246.861731][T12786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.861743][T12786] RSP: 002b:00007f59d95df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.861755][T12786] RAX: ffffffffffffffda RBX: 00007f59d8a25fa0 RCX: 00007f59d879e019 [ 246.861761][T12786] RDX: 0000000000040040 RSI: 0000200000001200 RDI: 0000000000000003 [ 246.861768][T12786] RBP: 00007f59d95df090 R08: 0000000000000000 R09: 0000000000000000 [ 246.861774][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.861780][T12786] R13: 00007f59d8a26038 R14: 00007f59d8a25fa0 R15: 00007ffed922d748 [ 246.861794][T12786] [ 246.900965][ T42] audit: type=1400 audit(1785889999.987:1057): avc: denied { create } for pid=12789 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.018539][ T42] audit: type=1400 audit(1785890000.027:1058): avc: denied { setopt } for pid=12789 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.069635][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.073804][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.198921][T12812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2360'. [ 247.245576][ T56] usb 9-1: USB disconnect, device number 47 [ 247.375156][ T5529] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 247.484569][T12814] kvm: kvm [12813]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 247.527221][ T5529] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.531404][ T5529] usb 7-1: config 0 has no interfaces? [ 247.533610][ T5529] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.537097][ T5529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.544322][ T5529] usb 7-1: config 0 descriptor?? [ 247.669621][T12820] syzkaller0: entered promiscuous mode [ 247.671439][T12820] syzkaller0: entered allmulticast mode [ 247.752657][ T5737] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 247.758795][ T9] usb 7-1: USB disconnect, device number 53 [ 247.954981][T12822] FAULT_INJECTION: forcing a failure. [ 247.954981][T12822] name failslab, interval 1, probability 0, space 0, times 0 [ 247.958993][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.4.2364 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.959022][T12822] Tainted: [L]=SOFTLOCKUP [ 247.959026][T12822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.959033][T12822] Call Trace: [ 247.959038][T12822] [ 247.959043][T12822] dump_stack_lvl+0x100/0x190 [ 247.959062][T12822] should_fail_ex.cold+0x5/0xa [ 247.959077][T12822] should_failslab+0xc2/0x120 [ 247.959092][T12822] __kmalloc_cache_noprof+0x91/0x6c0 [ 247.959110][T12822] ? nfnetlink_rcv_batch+0x780/0x2880 [ 247.959130][T12822] nfnetlink_rcv_batch+0x780/0x2880 [ 247.959152][T12822] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 247.959168][T12822] ? find_held_lock+0x2b/0x80 [ 247.959186][T12822] ? avc_has_perm_noaudit+0x145/0x3b0 [ 247.959213][T12822] ? __nla_parse+0x40/0x60 [ 247.959227][T12822] nfnetlink_rcv+0x3bd/0x440 [ 247.959242][T12822] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 247.959261][T12822] netlink_unicast+0x585/0x850 [ 247.959276][T12822] ? __pfx_netlink_unicast+0x10/0x10 [ 247.959291][T12822] netlink_sendmsg+0x8b0/0xda0 [ 247.959306][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.959319][T12822] ? selinux_socket_sendmsg+0x198/0x2f0 [ 247.959338][T12822] ____sys_sendmsg+0xa4d/0xbe0 [ 247.959355][T12822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.959367][T12822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.959391][T12822] ___sys_sendmsg+0x190/0x1e0 [ 247.959403][T12822] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.959413][T12822] ? __lock_acquire+0x49f/0x1a40 [ 247.959427][T12822] ? get_pid_task+0x106/0x250 [ 247.959452][T12822] __sys_sendmsg+0x160/0x210 [ 247.959467][T12822] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.959489][T12822] do_syscall_64+0x115/0x870 [ 247.959504][T12822] ? clear_bhb_loop+0x40/0x90 [ 247.959517][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.959528][T12822] RIP: 0033:0x7f6d18f9e019 [ 247.959539][T12822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.959550][T12822] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.959562][T12822] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 247.959569][T12822] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 247.959575][T12822] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 247.959582][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.959588][T12822] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 247.959603][T12822] [ 248.867898][ T9] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 249.036535][ T9] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.040945][ T9] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.047602][ T9] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 249.051100][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.053750][ T9] usb 11-1: Product: syz [ 249.055942][ T9] usb 11-1: Manufacturer: syz [ 249.057676][ T9] usb 11-1: SerialNumber: syz [ 249.356092][T12840] input: syz0 as /devices/virtual/input/input29 [ 249.508238][T12840] cgroup: none used incorrectly [ 249.630488][ T24] usb 11-1: USB disconnect, device number 42 [ 249.661062][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 249.661082][ T42] audit: type=1400 audit(1785890002.747:1065): avc: denied { write } for pid=12842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.797861][ T42] audit: type=1400 audit(1785890002.887:1066): avc: denied { write } for pid=12854 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.835708][T12858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.853685][T12858] block device autoloading is deprecated and will be removed. [ 249.885770][ T42] audit: type=1400 audit(1785890002.967:1067): avc: denied { write } for pid=12862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.895014][ T42] audit: type=1400 audit(1785890002.977:1068): avc: denied { execute } for pid=12864 comm="syz.0.2375" path="/dev/video4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 249.939510][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.943233][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.975389][ T42] audit: type=1400 audit(1785890003.057:1069): avc: denied { write } for pid=12869 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.052444][ T42] audit: type=1400 audit(1785890003.137:1070): avc: denied { write } for pid=12873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.093188][ T42] audit: type=1400 audit(1785890003.177:1071): avc: denied { write } for pid=12878 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.172415][ T42] audit: type=1400 audit(1785890003.257:1072): avc: denied { write } for pid=12881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.189295][T12888] netlink: 'syz.6.2380': attribute type 1 has an invalid length. [ 250.193629][T12888] netlink: 'syz.6.2380': attribute type 2 has an invalid length. [ 250.221453][ T42] audit: type=1400 audit(1785890003.307:1073): avc: denied { write } for pid=12891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.239260][T12893] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.8453919.0), cmd(9) [ 250.279729][ T42] audit: type=1800 audit(1785890003.367:1074): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2382" name="zoned" dev="configfs" ino=59984 res=0 errno=0 [ 250.404776][ T5843] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 250.545263][ T849] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 250.556100][ T5843] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.559494][ T5843] usb 9-1: config 0 has no interfaces? [ 250.561310][ T5843] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.564226][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.568671][ T5843] usb 9-1: config 0 descriptor?? [ 250.716027][ T849] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 250.721141][ T849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.724756][ T849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.728356][ T849] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.733199][ T849] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.737544][ T849] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.743596][ T849] usb 11-1: config 0 descriptor?? [ 250.777353][ T5737] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 250.784984][ T5843] usb 9-1: USB disconnect, device number 48 [ 250.895114][T12922] device-mapper: table: 248:0: too large device [ 250.897172][T12922] device-mapper: ioctl: error adding target to table [ 250.947627][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'. [ 250.958708][T12925] macvlan0: entered allmulticast mode [ 250.960513][T12925] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 251.155856][ T849] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 251.167853][ T849] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 251.173813][ T849] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 251.180503][ T849] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 251.183044][ T849] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 251.185213][ T5843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 251.190747][ T849] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 251.261304][ T5737] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 251.418568][ T5529] usb 11-1: USB disconnect, device number 43 [ 251.433629][T12948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2393'. [ 251.487413][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 251.490467][T12948] netlink: 'syz.4.2393': attribute type 30 has an invalid length. [ 251.514779][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.520738][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.525972][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.525996][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.535480][T12954] FAULT_INJECTION: forcing a failure. [ 251.535480][T12954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.542708][T12954] CPU: 2 UID: 0 PID: 12954 Comm: syz.4.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.542727][T12954] Tainted: [L]=SOFTLOCKUP [ 251.542731][T12954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.542738][T12954] Call Trace: [ 251.542743][T12954] [ 251.542750][T12954] dump_stack_lvl+0x100/0x190 [ 251.542770][T12954] should_fail_ex.cold+0x5/0xa [ 251.542782][T12954] ? prepare_alloc_pages+0x16d/0x5f0 [ 251.542799][T12954] should_fail_alloc_page+0xeb/0x140 [ 251.542815][T12954] prepare_alloc_pages+0x1f0/0x5f0 [ 251.542833][T12954] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 251.542846][T12954] ? __pfx_stack_trace_save+0x10/0x10 [ 251.542859][T12954] ? stack_depot_save_flags+0x27/0x9d0 [ 251.542875][T12954] ? stack_depot_save_flags+0x27/0x9d0 [ 251.542893][T12954] ? kasan_save_stack+0x3f/0x50 [ 251.542905][T12954] ? kasan_save_stack+0x30/0x50 [ 251.542917][T12954] ? kasan_save_track+0x14/0x30 [ 251.542929][T12954] ? __kasan_kmalloc+0xaa/0xb0 [ 251.542940][T12954] ? __kvmalloc_node_noprof+0x34f/0x970 [ 251.542953][T12954] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 251.542966][T12954] ? mmu_topup_memory_caches+0xbc/0x170 [ 251.542981][T12954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.542993][T12954] ? kvm_vcpu_ioctl+0x730/0x1700 [ 251.543005][T12954] ? do_syscall_64+0x115/0x870 [ 251.543031][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.543046][T12954] ? policy_nodemask+0xed/0x4f0 [ 251.543062][T12954] alloc_pages_mpol+0x1fb/0x540 [ 251.543077][T12954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.543093][T12954] ? __kvmalloc_node_noprof+0x36d/0x970 [ 251.543108][T12954] alloc_pages_noprof+0x1a/0x160 [ 251.543125][T12954] get_free_pages_noprof+0x10/0xb0 [ 251.543139][T12954] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 251.543156][T12954] mmu_topup_memory_caches+0xbc/0x170 [ 251.543172][T12954] kvm_mmu_load+0xe2/0x2570 [ 251.543186][T12954] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 251.543198][T12954] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 251.543211][T12954] ? __pfx_kvm_mmu_load+0x10/0x10 [ 251.543225][T12954] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 251.543238][T12954] ? kvm_check_and_inject_events+0x873/0x12a0 [ 251.543253][T12954] ? record_steal_time+0x3a0/0xbb0 [ 251.543266][T12954] vcpu_run+0x3aaa/0x5de0 [ 251.543293][T12954] ? __pfx_vcpu_run+0x10/0x10 [ 251.543313][T12954] ? rcu_is_watching+0x12/0xc0 [ 251.543332][T12954] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 251.543349][T12954] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 251.543368][T12954] kvm_vcpu_ioctl+0x730/0x1700 [ 251.543382][T12954] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.543395][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.543409][T12954] ? do_vfs_ioctl+0x226/0x13e0 [ 251.543443][T12954] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 251.543459][T12954] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 251.543481][T12954] ? __fget_files+0x215/0x3d0 [ 251.543492][T12954] ? hook_file_ioctl_common+0x140/0x440 [ 251.543509][T12954] ? selinux_file_ioctl+0x13b/0x290 [ 251.543525][T12954] ? selinux_file_ioctl+0xb6/0x290 [ 251.543546][T12954] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 251.543559][T12954] __x64_sys_ioctl+0x18e/0x210 [ 251.543576][T12954] do_syscall_64+0x115/0x870 [ 251.543594][T12954] ? clear_bhb_loop+0x40/0x90 [ 251.543608][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.543621][T12954] RIP: 0033:0x7f6d18f9e019 [ 251.543631][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.543642][T12954] RSP: 002b:00007f6d19df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.543655][T12954] RAX: ffffffffffffffda RBX: 00007f6d19225fa0 RCX: 00007f6d18f9e019 [ 251.543661][T12954] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 251.543668][T12954] RBP: 00007f6d19df4090 R08: 0000000000000000 R09: 0000000000000000 [ 251.543674][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.543680][T12954] R13: 00007f6d19226038 R14: 00007f6d19225fa0 R15: 00007fffdaf33788 [ 251.543694][T12954] [ 251.802472][T12957] device-mapper: table: 248:0: : unknown target type [ 251.807919][T12957] device-mapper: ioctl: error adding target to table [ 251.814826][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.815832][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 251.821455][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 251.893929][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 251.923411][T12964] bond15: entered promiscuous mode [ 251.925594][T12964] 8021q: adding VLAN 0 to HW filter on device bond15 [ 251.933952][T12963] 8021q: adding VLAN 0 to HW filter on device bond15 [ 251.937603][T12963] bond15: (slave sit2): The slave device specified does not support setting the MAC address [ 251.942257][T12963] bond15: (slave sit2): Error -95 calling set_mac_address [ 252.192504][T12970] FAULT_INJECTION: forcing a failure. [ 252.192504][T12970] name failslab, interval 1, probability 0, space 0, times 0 [ 252.197303][T12970] CPU: 0 UID: 0 PID: 12970 Comm: syz.6.2399 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.197332][T12970] Tainted: [L]=SOFTLOCKUP [ 252.197339][T12970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.197350][T12970] Call Trace: [ 252.197358][T12970] [ 252.197366][T12970] dump_stack_lvl+0x100/0x190 [ 252.197395][T12970] should_fail_ex.cold+0x5/0xa [ 252.197438][T12970] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 252.197471][T12970] should_failslab+0xc2/0x120 [ 252.197495][T12970] kmem_cache_alloc_noprof+0x91/0x6a0 [ 252.197518][T12970] ? skb_clone+0x190/0x400 [ 252.197546][T12970] skb_clone+0x190/0x400 [ 252.197568][T12970] netlink_deliver_tap+0xaed/0xcc0 [ 252.197592][T12970] netlink_unicast+0x6a5/0x850 [ 252.197615][T12970] ? __pfx_netlink_unicast+0x10/0x10 [ 252.197641][T12970] netlink_ack+0x655/0xb80 [ 252.197669][T12970] netlink_rcv_skb+0x333/0x420 [ 252.197687][T12970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.197713][T12970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.197740][T12970] ? netlink_deliver_tap+0x1ae/0xcc0 [ 252.197757][T12970] netlink_unicast+0x585/0x850 [ 252.197771][T12970] ? __pfx_netlink_unicast+0x10/0x10 [ 252.197787][T12970] netlink_sendmsg+0x8b0/0xda0 [ 252.197804][T12970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.197824][T12970] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.197855][T12970] ____sys_sendmsg+0xa4d/0xbe0 [ 252.197882][T12970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.197904][T12970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.197942][T12970] ___sys_sendmsg+0x190/0x1e0 [ 252.197963][T12970] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.197980][T12970] ? __lock_acquire+0x49f/0x1a40 [ 252.198002][T12970] ? get_pid_task+0x106/0x250 [ 252.198046][T12970] __sys_sendmsg+0x160/0x210 [ 252.198071][T12970] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.198113][T12970] do_syscall_64+0x115/0x870 [ 252.198136][T12970] ? clear_bhb_loop+0x40/0x90 [ 252.198158][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.198177][T12970] RIP: 0033:0x7f793699e019 [ 252.198194][T12970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.198210][T12970] RSP: 002b:00007f7937909028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.198228][T12970] RAX: ffffffffffffffda RBX: 00007f7936c25fa0 RCX: 00007f793699e019 [ 252.198239][T12970] RDX: 0000000000040040 RSI: 0000200000001200 RDI: 0000000000000003 [ 252.198249][T12970] RBP: 00007f7937909090 R08: 0000000000000000 R09: 0000000000000000 [ 252.198260][T12970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.198270][T12970] R13: 00007f7936c26038 R14: 00007f7936c25fa0 R15: 00007ffd6b0eac58 [ 252.198295][T12970] [ 252.476777][T12979] gfs2: gfs2 mount does not exist [ 253.634806][ T24] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 253.644792][ T5529] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 253.694702][ T56] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 253.796823][ T5529] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 253.800302][ T5529] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.803776][ T5529] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.807321][ T5529] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.812378][ T5529] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.815573][ T5529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.816808][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.820148][ T5529] usb 9-1: config 0 descriptor?? [ 253.822276][ T24] usb 11-1: config 0 has no interfaces? [ 253.827813][ T24] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.831540][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.837275][ T24] usb 11-1: config 0 descriptor?? [ 253.846564][ T56] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.850253][ T56] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.859343][ T56] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 253.863130][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.867018][ T56] usb 7-1: Product: syz [ 253.868785][ T56] usb 7-1: Manufacturer: syz [ 253.870339][ T56] usb 7-1: SerialNumber: syz [ 253.979321][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 253.981555][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 253.984773][ C2] ------------[ cut here ]------------ [ 253.986903][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 253.989578][ C2] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#2: swapper/2/0 [ 253.993220][ C2] Modules linked in: [ 253.995036][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.999115][ C2] Tainted: [L]=SOFTLOCKUP [ 254.000866][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.004266][ C2] RIP: 0010:__queue_work+0xd31/0x12b0 [ 254.005975][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 fd 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 254.011973][ C2] RSP: 0018:ffffc90000648be0 EFLAGS: 00010046 [ 254.014051][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004d2e94e [ 254.016543][ C2] RDX: ffff8880359ef170 RSI: ffffffff8aae1d70 RDI: ffffffff9125c4e0 [ 254.019024][ C2] RBP: ffff888026974a58 R08: 0000000000000005 R09: 0000000000000000 [ 254.021686][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880359ef000 [ 254.024348][ C2] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 254.026932][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 254.029762][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.031831][ C2] CR2: 00007f59d87eb700 CR3: 000000004706c000 CR4: 0000000000352ef0 [ 254.034369][ C2] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 254.036800][ C2] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 254.039282][ C2] Call Trace: [ 254.040353][ C2] [ 254.041276][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 254.043140][ C2] call_timer_fn+0x19a/0x610 [ 254.044601][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 254.046213][ C2] ? __run_timers+0x560/0xb00 [ 254.047719][ C2] ? __run_timers+0x560/0xb00 [ 254.049206][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 254.051071][ C2] __run_timers+0x570/0xb00 [ 254.052515][ C2] ? __pfx___run_timers+0x10/0x10 [ 254.054117][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 254.055796][ C2] run_timer_base+0x114/0x190 [ 254.057326][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 254.058982][ C2] run_timer_softirq+0x1a/0x50 [ 254.060634][ C2] handle_softirqs+0x1ea/0x9b0 [ 254.062160][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 254.063829][ C2] ? _raw_spin_unlock+0x28/0x50 [ 254.065368][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 254.067200][ C2] __irq_exit_rcu+0x162/0x210 [ 254.068703][ C2] irq_exit_rcu+0x9/0x30 [ 254.070217][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 254.072052][ C2] [ 254.072955][ C2] [ 254.073871][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.075717][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 254.077425][ C2] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 254.083161][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 254.085214][ C2] RAX: 00000000001cd8e9 RBX: ffff88801eed4a80 RCX: ffffffff8bbb42d5 [ 254.087728][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a81ca RDI: ffffffff8c402680 [ 254.090462][ C2] RBP: ffffed1003dda950 R08: 0000000000000001 R09: ffffed100d4c678d [ 254.093468][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 254.096028][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 254.098505][ C2] ? ct_kernel_exit+0x125/0x180 [ 254.100087][ C2] default_idle+0x9/0x10 [ 254.101445][ C2] default_idle_call+0x6c/0xb0 [ 254.102970][ C2] do_idle+0x3a7/0x5b0 [ 254.104282][ C2] ? __pfx_do_idle+0x10/0x10 [ 254.105800][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 254.108001][ C2] cpu_startup_entry+0x4f/0x60 [ 254.109844][ C2] start_secondary+0x21d/0x2d0 [ 254.111642][ C2] ? __pfx_start_secondary+0x10/0x10 [ 254.113496][ C2] common_startup_64+0x13e/0x158 [ 254.115466][ C2] [ 254.116693][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.119238][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.122656][ C2] Tainted: [L]=SOFTLOCKUP [ 254.124146][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.127436][ C2] Call Trace: [ 254.128609][ C2] [ 254.129553][ C2] dump_stack_lvl+0x100/0x190 [ 254.131238][ C2] vpanic+0x552/0x970 [ 254.132536][ C2] ? __pfx_vpanic+0x10/0x10 [ 254.133994][ C2] panic+0xd1/0xe0 [ 254.135189][ C2] ? __pfx_panic+0x10/0x10 [ 254.136605][ C2] ? check_panic_on_warn+0x1f/0x90 [ 254.138224][ C2] check_panic_on_warn.cold+0x19/0x34 [ 254.140212][ C2] ? __queue_work+0xd2d/0x12b0 [ 254.142224][ C2] __warn.cold+0x191/0x318 [ 254.143954][ C2] __report_bug+0x30f/0x440 [ 254.145639][ C2] ? __queue_work+0xd2d/0x12b0 [ 254.147222][ C2] ? __pfx___report_bug+0x10/0x10 [ 254.148850][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 254.150551][ C2] ? mark_held_locks+0x40/0x70 [ 254.152061][ C2] ? look_up_lock_class+0x55/0x120 [ 254.153696][ C2] report_bug_entry+0xe1/0x290 [ 254.155250][ C2] ? __queue_work+0xd31/0x12b0 [ 254.156971][ C2] handle_bug+0x1cd/0x2a0 [ 254.158518][ C2] exc_invalid_op+0x17/0x50 [ 254.160148][ C2] asm_exc_invalid_op+0x1a/0x20 [ 254.161953][ C2] RIP: 0010:__queue_work+0xd31/0x12b0 [ 254.163822][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 fd 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 254.170155][ C2] RSP: 0018:ffffc90000648be0 EFLAGS: 00010046 [ 254.172266][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004d2e94e [ 254.174762][ C2] RDX: ffff8880359ef170 RSI: ffffffff8aae1d70 RDI: ffffffff9125c4e0 [ 254.177327][ C2] RBP: ffff888026974a58 R08: 0000000000000005 R09: 0000000000000000 [ 254.180026][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880359ef000 [ 254.182611][ C2] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 254.185101][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 254.187182][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 254.189322][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 254.191581][ C2] call_timer_fn+0x19a/0x610 [ 254.193489][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 254.195481][ C2] ? __run_timers+0x560/0xb00 [ 254.197365][ C2] ? __run_timers+0x560/0xb00 [ 254.199277][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 254.201485][ C2] __run_timers+0x570/0xb00 [ 254.203302][ C2] ? __pfx___run_timers+0x10/0x10 [ 254.205026][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 254.206605][ C2] run_timer_base+0x114/0x190 [ 254.208111][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 254.209724][ C2] run_timer_softirq+0x1a/0x50 [ 254.211220][ C2] handle_softirqs+0x1ea/0x9b0 [ 254.212738][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 254.214412][ C2] ? _raw_spin_unlock+0x28/0x50 [ 254.215955][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 254.217720][ C2] __irq_exit_rcu+0x162/0x210 [ 254.219409][ C2] irq_exit_rcu+0x9/0x30 [ 254.221179][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 254.223134][ C2] [ 254.224086][ C2] [ 254.225043][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.226935][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 254.228707][ C2] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 254.234933][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 254.237328][ C2] RAX: 00000000001cd8e9 RBX: ffff88801eed4a80 RCX: ffffffff8bbb42d5 [ 254.240275][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a81ca RDI: ffffffff8c402680 [ 254.242850][ C2] RBP: ffffed1003dda950 R08: 0000000000000001 R09: ffffed100d4c678d [ 254.245606][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 254.248122][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 254.250617][ C2] ? ct_kernel_exit+0x125/0x180 [ 254.252390][ C2] default_idle+0x9/0x10 [ 254.253806][ C2] default_idle_call+0x6c/0xb0 [ 254.255356][ C2] do_idle+0x3a7/0x5b0 [ 254.256657][ C2] ? __pfx_do_idle+0x10/0x10 [ 254.258128][ C2] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 254.260038][ C2] cpu_startup_entry+0x4f/0x60 [ 254.261582][ C2] start_secondary+0x21d/0x2d0 [ 254.263156][ C2] ? __pfx_start_secondary+0x10/0x10 [ 254.265127][ C2] common_startup_64+0x13e/0x158 [ 254.266934][ C2] [ 254.268662][ C2] Kernel Offset: disabled [ 254.270177][ C2] Rebooting in 86400 seconds..