last executing test programs: 6.05133357s ago: executing program 1 (id=266): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.123044187s ago: executing program 1 (id=274): syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x22) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x7, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.122741997s ago: executing program 1 (id=275): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(0x0, 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=.27.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 4.137152037s ago: executing program 1 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), 0x889428, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0xbd7a02a7dcac7ab6) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={&(0x7f00000002c0)="5b76a20602bb466697327e0ce86fda6c3dc5f301aaad", &(0x7f0000000340)="29e81cc6dc98ebb444e99fa63c3fb2433ed238af8353b349a769c61130fea2"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d2, 0x5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = openat$uhid(0xffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f00000009c0)={0x8, {"2d86ec3e0f7a577ed2eb199e3a374cddb0f7c82c7dafa6f6ca258fd572ada06b8b93522106b9c182a07d5f7a42d8b15f521cabdd8b0dee5d5dbd446730c0f5beae4dc0a2a28eab44884bb98f39bde7835430236b7279dc86500ed0e951ecdd51d2b189b176b7510678e04b420ab7a372553a2f8223c1256610523e65db3e31905a28a03a5415c481ef38dad3b50696c0d47740ebab246c524354c80506aaf2719657669e6d453bcb6f6803095a74a31c4d1ea8c19142922578da881c6344a6ac6da27445334c3ab18dc0ecc94880f929bd84d5c59d50cd21dbd1917c8e55c4276eeabba1b1738519af72d1bd22f4e5b4bb2e0f23f63131aa18872046a101eb1b61b65c587b80dd23ca315ad57195c77ab72cdfe8cf48b0268b687440278d4a9a318e28cbe792454be1358e3e0fd6aef3440a4ced273a87a0faead9bb3846e5ab85ef31bf6125254d36ad8db85b50f087daf29675d268c5024e2fcb79d65fe232f3b75c441b270440b22a5e81369d27a8749ee1fcd03fe1a6a3dd3b4149f9779c4fe1c6c9fe80b10e3dffbc110c1363585340965cc29aa56f5592c6f499c579e3249ec06e82899d8626c8117508dd954efacd97a99a2ca04a08e8b4e31b199d728274f0eea44aef5dddcabe3512b5e504f910768175ab49fa62b8ec11ccd8dd636eb404532a2aadea6a371bf6f39740ed8c992a7b3b25a1b33f927d4c89e821b2e740b2aab68d54fa0571ae9cb032076b66b8f8ea6ae5ca20fcc57b3c1c9d738118e21cbaec945d5bade12c64ca793f24341f9d7460e3deec2d06fa209977fdd3585c57e19d1da271d4e4d8eb1c6f2c659e80c90ceb3a621bf8e50e1f1bfa851e0dc630a5f02ae797ee67ce06b0233c922abbe3d9f4c11dcf664100d12ed709b33bc6c0e7b691c1822303577e19fa59c9b8fbbe52d6ecde0fcc8266ecd101d212a513e239eb6ddf2dbb0e2100b18049cd14480932e85f10ed94f7b16262e62f68ff837f0e61ec32192a532bbf9bbe8cf3acb2f713b0cab1ffb01c309a7343463f2d994acb963a2d39333d8ca2176298b2daaea0af78977df13f333c21a0e509d645f23798c076f0111c429bd7c12c046ed0900243ec48b2ccd58e8e12e057de750ddafd2c37a49757e0e98fc4bd16c63106eda8ba0ab9b6392c3e5dbab98ea0ad0ff0c04ee7e5fd8e5effc41d157f2cb80168804d13cfc7bbf9f52b79ec088b8e1bfad9448dc85e2d4d53bb80b4e2743c4aecaeffeea151720062a8f593fbbe6e215386cb6c390cfe05f48010a7ddcb4dbd88b4e7223d32bb6cfcbe8fc4fea6deb9eaba2078fc3a14bc593ac13cc288ac043c89b5a2b06f2d5d8788f76094b33c84708d255aed9fc217f278e700898ea306e1804f4d4293d6f6669474b8125adcd4737bf59361d8eeff6c2e3cadd69b997fc3f60c663baa82cbfa3125679146bd509a1d2239151da3b950a945ff363403a4dc9cd2c561c0f9fad126b7f15e9f87e3c07ea68edba68f9794c3a0c8c65cd785845b73d8819ffa10cdfb5b9d9a7934e50a41d2e4b7a3217047355052fa7b2d473a6bfc7489983c21dc4c4d05373113f9b31236da67c9cc2da792dcabf473f14714e5432a57e85bf3c890d81d28648c1f67a69b944bfcfe542cc6726ed220f28dbfc7e6ae4b263a05ff141a88a4b023aa146a5105c5ae06a044e8dbfff164445f82f7a55adb1733facb7855bbc2e1957234e279e08a485e952b8d391a9c27def7684a81e677bd050418c4a7bf093cca69c6c936e00fc4b6d94ee4ae6f12db13d793c651e27271a4706559003e7fe841ac62fde17a45696591ecfae3a6b05f5a0659cd05814902b29b6ab30b2c2e9e348723ebfebef77beb4c2590c1757e524b39dbd42f7040db56acc72e36e40e058971cf4ff2ae05bad3379c6f13be364c54e386b9b96a61a9e354ad69d5365cd1c1207ed22c72659bb47fbcb40d7a0aa601a3fbf7ff7f8c349e5abcba73338a6a80cc45401de8c1afc945828d4deee4596a79c721b0544b84283db1e780010f802fe24e0dafcbacd98439c91c2a99b45db28b2a627d20cc81a7fbcbbed4e38a80803f39c6846eb8086487b54b2d3830fe2b822134d01a31fc48c03e212034d80b49317d33b6bbf376c2f985286b858a57fa521daeec7412cb30b397dea8ac15f194fd91b33e4e1d872dfeab2695c2c72bec7d36179f91ea73c6ec19e45a775aece4cb937e27f3210c1aa51352b394bbd1a5160772394051cd7251e19a49d3d05a26bfb4d06891492fdac2da04db0d7fa7854d67dcb52e588885cd68c2d7a404f39def00a8f3ce88056233fef2680b6a5f759ebc50978e335e9685a573a56c19918ac222a286da251ccb331e5d82399062ef0528b9189e88bcbf9640de2ae868193f74bb9a0668f86df5707201397a7d3cc8694d4a823963e8fb6186172261cac857669e603ce5ea99af4f8ea86ac9567cc794257cf0db5713fc2d178e69569cbc1d9228bcc91c162f517487b190f355cb9908f964e202e12e7bc10e9fb01035ae010fbc6fb3b222196c759b72dd9a115a5016f4370d1a655181f87701e257a35d9e215faff729d94809f27a52fff79f38e44d1515659fb026103269bb12bcd1853b6ce03e53490408a6c03590095bafe431ba8506b3da02eda0401cdb435af5c154e74a4957fb97be1a72c74b6888045ff9f6bc062a3cd13aa0cde7091f97aa9fe69989ba0f8f091eabbc1666e924be65cb65975113c6b67bc993615541913e1ad3bf551a671e595cf35b06539c6035bcfdc52e74046811dbc2a2d94837964b3e5c463c7abde7d41868b81593912c08cc6c525e9de0c91989f46b0a01dcf434d7480dd44265b28a20597eba657c4eaf0636e4b4d81115a13f6d025b08b29f7485ade716a82f8fdb666844de3938656ee8392b713a908033ca1537337055681a919989dd79a5c623cad83744a4391256cfdfc05630ca2826220847149b87d802e86a6180ccd059157220955bd4409d14cbd8591bcdb2651435bb3e9ede3c1f4c43e2c36dc454d0612fec4b66b19d0b86e23e8afeeada416e5eab345722c3c375e82a8c75e4f94b48ebdfb4209a9eda684fb6ee0bc3fb615d7c708c565f3aba7fe4248036ffe25cf6903ea4983c62c139c3673b9c0a49c0a6df295c1eddf8a054d2abfd6e21438c6e740fc0954254a2f5c1dc1997d408f1456a9e0d2cbbffabbd928f8ef5e57805e6e5bc12c88c3a6c5623dc70c6ece1ee6e4ab7995ce54de567ef7bf17fbb410a8296afe004958230dc3ceffb3298e19377d7c7ee5c009a032dc54ed78cae207a1ae21aa3df9d3aace4e225be06cd54fdda1ff7efc5adfad6cf7362087d1f4de058779690f8a48edda39bf063c663ceb18790342f350ce5764b15da95c9cf7fd57e80ab57b17c784e799d5ad6fa7bdeba22e228634d4909416825039e3af614b48977512587561962fb59353fa2da84aa72591e486f33576f5fa4bb962c5f0c0069043ca51c60bae99eb09ea986ead9e44a96d15a7fdb9757828dabb284f306e07fc151f1a88666fcff4dc96804995e14c70f42f6c9b4d9fe42dc5a66d4a7641210f126b47415dfbd1089f726e008ac2e81af791d67091e798629e3318b2e0a3a4a62a5bdedf94683a264b5aa66832353e6443989283b2bce6e38832b76f07fb6acdf8fdc82ed2ca2cf9918ad756c7839030e4e24a4bc926e832cf0fa016c80df1d339eb25542fcaadd065817e18f35ee20c67af298aa4403625183070cf6f2aa18efd513686e71535e84414ccf594fb3a094b8dfc706e493df1327374fa0410184fa1a6d07865c601148e559cf041f3ad792bf65c00e2f1c4b65bbb60c7234991c92ef7a1db0d06b3b38fed763dec420362542db84597f062d80740c6ddbbb3b1436e1370c1de61e39c118aa9d5f34753f2bf5a8146c49dbe429da3e4dfee4a600a7c36391678e424ef8ca6629d008c18e807e7d13aecf5ea234092e25c265a2bfbf53115ac9cb573dee657f3cd4efb11974bfc39be5999a554d6224cca91091c8f605cecc7cde218f4b521b007ee1c5214aedbb978199ea355f280d92ed725e1fc02116b1df28e892609db6e7e25bef29d5cdfa97a227639958f8d7d2229ab785cfa67e881bda2040514db69fee896a81dfdd311303719e19ad5ccdfaefd46a96ba37987d02b3c87605d22e05a49d1c207ceadf1b025c2bd3735063791ce578b26e23b7094fecd2b83cc8811ada24bb2951c1248603261b8116cdc7a6e3b343a1e27cf457fca8f9a487576e874c96dd1d3d992e81165e4f433d5f52a0b114beed90507cff2dcf45341a697c19d1a857ff1ff03396e9d7eee70a8ef6c536d072c6cb269adece986e0f41de9018ffa7b038901ad3ecf1214de4e8a1e97243b56f736b65684a01e299e81fb667bd2abed8a10aeccf83a57b21fdeab127c26490f2b648fe61d0763fa9732c8508163e1cf30e98dd8920cf58af12759229e5f21ca652cf93baf4dd26c9c84f035e5bf57580fcbf59cfb9b3e94959c37dc3a71fa4354a10bb601f40a64138315ad23a7229d878e4dfdc540f7037f56600d39a8584bb4fbe2e3f2117ad39312c8a31f2ae0a053e2c60bb624d524e243c43d5770d843cabff642992f75784a0c2629c21f59654d759c144fa3b90880ccbbfa70fc94d1ad738aaa1b5dd766f9829972e57bfeceb50acf5118b2e4a1aaaefd075ef4d6bc5e9ee990ee366541226e5e1f2d58a57069709a6aaf45ed5c5ee834d4c6bd33abce61ac827f0d30f5b0ffd923f48a6b8f49a681379d594dcc7c3c35e0465a2d1bf7f656d7e3711e8c919c750dbf7cb261f7234c51210a0d5e2de7c5babcb7be0dcb362a93753eb27959e77f4cefed5a3361a11932ea08d787c172b73d0086c873e77018d254c98d57995acdf7d4288e5c58038cc53e1b82bdba0603fedc0add149989afb90bb7df80297921de7b5f675ae901cb9c6e2497a479229045d548c6690d4e5aae8d73d6e92a071f2e3c30177061c8830782c04967032fd905d8cf65f2c0e0ff23f46ae03078ddff9c54cade56d96c117c5a412084ae3e88c114b3c389f597363ff60770102577370ea4f13099417ab131f110a81d628f3ad87d588cdf8e814fdfda79d57794d45f2d59802b058f980484a3d4e2253986f5033f05c64a585eae413a7a4da10e12c4078d60ef9d1de6f9903670e00cfd3a8be1511c73decea99cfa4e0a90ee523bd0d73aa722c196cce35962974390b7e3f616611b34417a1807ade308227609bce9230fac644294864d111cbc7b9d26347d3a2e2d37a9c0d7e9a9cca21619e082668552cdca0dfe176231b60132c0b7829bc02d9d29cc77d23d6ada40813439696885f53ca0d624f2eb4649cc186c7561e3599036737c217d8e950b8d345cea28dcfcbd0b5cfd811eeeb464fb7e5f86d8db2944ad068342cc50139dc514c3a766e1a7fbf554176ccb92fc54cb3c6253f9b49e7f7d450b4947bd4a617688e21988b90cf7d6cdca552aa58f838382564440dec029ee51c8890a422fe27b3beba7c309da7f3dd47b5527afb7041f2bf8500b1a22fc541d4e2c0787d7c69bc2126b5b49b93a068ced5f69043c402b56efd6871097947e42f123335f5256939cf4909117ea90dcaa8de7fb5fa4f720d4aea24f9d3f8d2cc85c38eb6e20823b391d39ab422ca6d09f2edd1d390aa3d9f03401b63d133d10cb854418bae770787a8ca836cf8bad77d08b7d91152773b1c852b6e096690cbdb088464dd5300fd723a1c73359b7722e92db7fae32bca08e3aee62ee17a", 0x1000}}, 0x1006) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xd, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x400006}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x329}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f0000000140)=0x0) timer_delete(r7) 3.317775423s ago: executing program 3 (id=290): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 2.821371678s ago: executing program 1 (id=291): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.331987353s ago: executing program 3 (id=293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0xfdfdffff, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) 2.331504432s ago: executing program 1 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x0, 0x3, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x81, 0x3, 0x0, 0xc2}, {0x5e000, 0xffff1000, 0x9, 0xfd, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x1, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x15}, {0xdddd1000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x10, 0x0, 0x14}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xffff}, 0xfdf8fffb, 0x0, 0x0, 0x120, 0x1, 0x6d01, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) r3 = io_uring_setup(0x178e, &(0x7f00000001c0)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd01, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x4001) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2}, 0x97}, [{}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xee}, {0x0, 0x20000000}, {}, {0x0, 0x0, 0x1, 0x1, 0x7fc}, {0x0, 0x0, 0x40000}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xfffffffe, 0x100}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}], [{0x3272acbcf996957}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.443556606s ago: executing program 3 (id=299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), 0x889428, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0xbd7a02a7dcac7ab6) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={&(0x7f00000002c0)="5b76a20602bb466697327e0ce86fda6c3dc5f301aaad", &(0x7f0000000340)="29e81cc6dc98ebb444e99fa63c3fb2433ed238af8353b349a769c61130fea2"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d2, 0x5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = openat$uhid(0xffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f00000009c0)={0x8, {"2d86ec3e0f7a577ed2eb199e3a374cddb0f7c82c7dafa6f6ca258fd572ada06b8b93522106b9c182a07d5f7a42d8b15f521cabdd8b0dee5d5dbd446730c0f5beae4dc0a2a28eab44884bb98f39bde7835430236b7279dc86500ed0e951ecdd51d2b189b176b7510678e04b420ab7a372553a2f8223c1256610523e65db3e31905a28a03a5415c481ef38dad3b50696c0d47740ebab246c524354c80506aaf2719657669e6d453bcb6f6803095a74a31c4d1ea8c19142922578da881c6344a6ac6da27445334c3ab18dc0ecc94880f929bd84d5c59d50cd21dbd1917c8e55c4276eeabba1b1738519af72d1bd22f4e5b4bb2e0f23f63131aa18872046a101eb1b61b65c587b80dd23ca315ad57195c77ab72cdfe8cf48b0268b687440278d4a9a318e28cbe792454be1358e3e0fd6aef3440a4ced273a87a0faead9bb3846e5ab85ef31bf6125254d36ad8db85b50f087daf29675d268c5024e2fcb79d65fe232f3b75c441b270440b22a5e81369d27a8749ee1fcd03fe1a6a3dd3b4149f9779c4fe1c6c9fe80b10e3dffbc110c1363585340965cc29aa56f5592c6f499c579e3249ec06e82899d8626c8117508dd954efacd97a99a2ca04a08e8b4e31b199d728274f0eea44aef5dddcabe3512b5e504f910768175ab49fa62b8ec11ccd8dd636eb404532a2aadea6a371bf6f39740ed8c992a7b3b25a1b33f927d4c89e821b2e740b2aab68d54fa0571ae9cb032076b66b8f8ea6ae5ca20fcc57b3c1c9d738118e21cbaec945d5bade12c64ca793f24341f9d7460e3deec2d06fa209977fdd3585c57e19d1da271d4e4d8eb1c6f2c659e80c90ceb3a621bf8e50e1f1bfa851e0dc630a5f02ae797ee67ce06b0233c922abbe3d9f4c11dcf664100d12ed709b33bc6c0e7b691c1822303577e19fa59c9b8fbbe52d6ecde0fcc8266ecd101d212a513e239eb6ddf2dbb0e2100b18049cd14480932e85f10ed94f7b16262e62f68ff837f0e61ec32192a532bbf9bbe8cf3acb2f713b0cab1ffb01c309a7343463f2d994acb963a2d39333d8ca2176298b2daaea0af78977df13f333c21a0e509d645f23798c076f0111c429bd7c12c046ed0900243ec48b2ccd58e8e12e057de750ddafd2c37a49757e0e98fc4bd16c63106eda8ba0ab9b6392c3e5dbab98ea0ad0ff0c04ee7e5fd8e5effc41d157f2cb80168804d13cfc7bbf9f52b79ec088b8e1bfad9448dc85e2d4d53bb80b4e2743c4aecaeffeea151720062a8f593fbbe6e215386cb6c390cfe05f48010a7ddcb4dbd88b4e7223d32bb6cfcbe8fc4fea6deb9eaba2078fc3a14bc593ac13cc288ac043c89b5a2b06f2d5d8788f76094b33c84708d255aed9fc217f278e700898ea306e1804f4d4293d6f6669474b8125adcd4737bf59361d8eeff6c2e3cadd69b997fc3f60c663baa82cbfa3125679146bd509a1d2239151da3b950a945ff363403a4dc9cd2c561c0f9fad126b7f15e9f87e3c07ea68edba68f9794c3a0c8c65cd785845b73d8819ffa10cdfb5b9d9a7934e50a41d2e4b7a3217047355052fa7b2d473a6bfc7489983c21dc4c4d05373113f9b31236da67c9cc2da792dcabf473f14714e5432a57e85bf3c890d81d28648c1f67a69b944bfcfe542cc6726ed220f28dbfc7e6ae4b263a05ff141a88a4b023aa146a5105c5ae06a044e8dbfff164445f82f7a55adb1733facb7855bbc2e1957234e279e08a485e952b8d391a9c27def7684a81e677bd050418c4a7bf093cca69c6c936e00fc4b6d94ee4ae6f12db13d793c651e27271a4706559003e7fe841ac62fde17a45696591ecfae3a6b05f5a0659cd05814902b29b6ab30b2c2e9e348723ebfebef77beb4c2590c1757e524b39dbd42f7040db56acc72e36e40e058971cf4ff2ae05bad3379c6f13be364c54e386b9b96a61a9e354ad69d5365cd1c1207ed22c72659bb47fbcb40d7a0aa601a3fbf7ff7f8c349e5abcba73338a6a80cc45401de8c1afc945828d4deee4596a79c721b0544b84283db1e780010f802fe24e0dafcbacd98439c91c2a99b45db28b2a627d20cc81a7fbcbbed4e38a80803f39c6846eb8086487b54b2d3830fe2b822134d01a31fc48c03e212034d80b49317d33b6bbf376c2f985286b858a57fa521daeec7412cb30b397dea8ac15f194fd91b33e4e1d872dfeab2695c2c72bec7d36179f91ea73c6ec19e45a775aece4cb937e27f3210c1aa51352b394bbd1a5160772394051cd7251e19a49d3d05a26bfb4d06891492fdac2da04db0d7fa7854d67dcb52e588885cd68c2d7a404f39def00a8f3ce88056233fef2680b6a5f759ebc50978e335e9685a573a56c19918ac222a286da251ccb331e5d82399062ef0528b9189e88bcbf9640de2ae868193f74bb9a0668f86df5707201397a7d3cc8694d4a823963e8fb6186172261cac857669e603ce5ea99af4f8ea86ac9567cc794257cf0db5713fc2d178e69569cbc1d9228bcc91c162f517487b190f355cb9908f964e202e12e7bc10e9fb01035ae010fbc6fb3b222196c759b72dd9a115a5016f4370d1a655181f87701e257a35d9e215faff729d94809f27a52fff79f38e44d1515659fb026103269bb12bcd1853b6ce03e53490408a6c03590095bafe431ba8506b3da02eda0401cdb435af5c154e74a4957fb97be1a72c74b6888045ff9f6bc062a3cd13aa0cde7091f97aa9fe69989ba0f8f091eabbc1666e924be65cb65975113c6b67bc993615541913e1ad3bf551a671e595cf35b06539c6035bcfdc52e74046811dbc2a2d94837964b3e5c463c7abde7d41868b81593912c08cc6c525e9de0c91989f46b0a01dcf434d7480dd44265b28a20597eba657c4eaf0636e4b4d81115a13f6d025b08b29f7485ade716a82f8fdb666844de3938656ee8392b713a908033ca1537337055681a919989dd79a5c623cad83744a4391256cfdfc05630ca2826220847149b87d802e86a6180ccd059157220955bd4409d14cbd8591bcdb2651435bb3e9ede3c1f4c43e2c36dc454d0612fec4b66b19d0b86e23e8afeeada416e5eab345722c3c375e82a8c75e4f94b48ebdfb4209a9eda684fb6ee0bc3fb615d7c708c565f3aba7fe4248036ffe25cf6903ea4983c62c139c3673b9c0a49c0a6df295c1eddf8a054d2abfd6e21438c6e740fc0954254a2f5c1dc1997d408f1456a9e0d2cbbffabbd928f8ef5e57805e6e5bc12c88c3a6c5623dc70c6ece1ee6e4ab7995ce54de567ef7bf17fbb410a8296afe004958230dc3ceffb3298e19377d7c7ee5c009a032dc54ed78cae207a1ae21aa3df9d3aace4e225be06cd54fdda1ff7efc5adfad6cf7362087d1f4de058779690f8a48edda39bf063c663ceb18790342f350ce5764b15da95c9cf7fd57e80ab57b17c784e799d5ad6fa7bdeba22e228634d4909416825039e3af614b48977512587561962fb59353fa2da84aa72591e486f33576f5fa4bb962c5f0c0069043ca51c60bae99eb09ea986ead9e44a96d15a7fdb9757828dabb284f306e07fc151f1a88666fcff4dc96804995e14c70f42f6c9b4d9fe42dc5a66d4a7641210f126b47415dfbd1089f726e008ac2e81af791d67091e798629e3318b2e0a3a4a62a5bdedf94683a264b5aa66832353e6443989283b2bce6e38832b76f07fb6acdf8fdc82ed2ca2cf9918ad756c7839030e4e24a4bc926e832cf0fa016c80df1d339eb25542fcaadd065817e18f35ee20c67af298aa4403625183070cf6f2aa18efd513686e71535e84414ccf594fb3a094b8dfc706e493df1327374fa0410184fa1a6d07865c601148e559cf041f3ad792bf65c00e2f1c4b65bbb60c7234991c92ef7a1db0d06b3b38fed763dec420362542db84597f062d80740c6ddbbb3b1436e1370c1de61e39c118aa9d5f34753f2bf5a8146c49dbe429da3e4dfee4a600a7c36391678e424ef8ca6629d008c18e807e7d13aecf5ea234092e25c265a2bfbf53115ac9cb573dee657f3cd4efb11974bfc39be5999a554d6224cca91091c8f605cecc7cde218f4b521b007ee1c5214aedbb978199ea355f280d92ed725e1fc02116b1df28e892609db6e7e25bef29d5cdfa97a227639958f8d7d2229ab785cfa67e881bda2040514db69fee896a81dfdd311303719e19ad5ccdfaefd46a96ba37987d02b3c87605d22e05a49d1c207ceadf1b025c2bd3735063791ce578b26e23b7094fecd2b83cc8811ada24bb2951c1248603261b8116cdc7a6e3b343a1e27cf457fca8f9a487576e874c96dd1d3d992e81165e4f433d5f52a0b114beed90507cff2dcf45341a697c19d1a857ff1ff03396e9d7eee70a8ef6c536d072c6cb269adece986e0f41de9018ffa7b038901ad3ecf1214de4e8a1e97243b56f736b65684a01e299e81fb667bd2abed8a10aeccf83a57b21fdeab127c26490f2b648fe61d0763fa9732c8508163e1cf30e98dd8920cf58af12759229e5f21ca652cf93baf4dd26c9c84f035e5bf57580fcbf59cfb9b3e94959c37dc3a71fa4354a10bb601f40a64138315ad23a7229d878e4dfdc540f7037f56600d39a8584bb4fbe2e3f2117ad39312c8a31f2ae0a053e2c60bb624d524e243c43d5770d843cabff642992f75784a0c2629c21f59654d759c144fa3b90880ccbbfa70fc94d1ad738aaa1b5dd766f9829972e57bfeceb50acf5118b2e4a1aaaefd075ef4d6bc5e9ee990ee366541226e5e1f2d58a57069709a6aaf45ed5c5ee834d4c6bd33abce61ac827f0d30f5b0ffd923f48a6b8f49a681379d594dcc7c3c35e0465a2d1bf7f656d7e3711e8c919c750dbf7cb261f7234c51210a0d5e2de7c5babcb7be0dcb362a93753eb27959e77f4cefed5a3361a11932ea08d787c172b73d0086c873e77018d254c98d57995acdf7d4288e5c58038cc53e1b82bdba0603fedc0add149989afb90bb7df80297921de7b5f675ae901cb9c6e2497a479229045d548c6690d4e5aae8d73d6e92a071f2e3c30177061c8830782c04967032fd905d8cf65f2c0e0ff23f46ae03078ddff9c54cade56d96c117c5a412084ae3e88c114b3c389f597363ff60770102577370ea4f13099417ab131f110a81d628f3ad87d588cdf8e814fdfda79d57794d45f2d59802b058f980484a3d4e2253986f5033f05c64a585eae413a7a4da10e12c4078d60ef9d1de6f9903670e00cfd3a8be1511c73decea99cfa4e0a90ee523bd0d73aa722c196cce35962974390b7e3f616611b34417a1807ade308227609bce9230fac644294864d111cbc7b9d26347d3a2e2d37a9c0d7e9a9cca21619e082668552cdca0dfe176231b60132c0b7829bc02d9d29cc77d23d6ada40813439696885f53ca0d624f2eb4649cc186c7561e3599036737c217d8e950b8d345cea28dcfcbd0b5cfd811eeeb464fb7e5f86d8db2944ad068342cc50139dc514c3a766e1a7fbf554176ccb92fc54cb3c6253f9b49e7f7d450b4947bd4a617688e21988b90cf7d6cdca552aa58f838382564440dec029ee51c8890a422fe27b3beba7c309da7f3dd47b5527afb7041f2bf8500b1a22fc541d4e2c0787d7c69bc2126b5b49b93a068ced5f69043c402b56efd6871097947e42f123335f5256939cf4909117ea90dcaa8de7fb5fa4f720d4aea24f9d3f8d2cc85c38eb6e20823b391d39ab422ca6d09f2edd1d390aa3d9f03401b63d133d10cb854418bae770787a8ca836cf8bad77d08b7d91152773b1c852b6e096690cbdb088464dd5300fd723a1c73359b7722e92db7fae32bca08e3aee62ee17a", 0x1000}}, 0x1006) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xd, &(0x7f0000000840)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x400006}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x329}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x6, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f0000000140)=0x0) timer_delete(r7) 923.389573ms ago: executing program 0 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys_mnt\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) mount(0x0, &(0x7f00000005c0)='./sys_mnt\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_mnt/class/rtc/rtc0/date\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000003980), 0xfffffffffffff000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000039c0)={0x5, 0x4}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x77359400}, 0xfffffffffffffffe) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3f7, 0x400, 0x70bd25, 0x25dfdbfd, {0x9, 0x9, './sys_mnt', './sys_mnt'}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000090) read(r0, &(0x7f0000001000)=""/1000, 0x3e8) 723.71961ms ago: executing program 0 (id=308): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000013c0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (fail_nth: 6) 723.328ms ago: executing program 2 (id=309): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x22) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x7, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 723.211016ms ago: executing program 0 (id=310): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f0000001380)={0x6, 0xfffffffffffffffa, 0x9, 0x5d7, 0x6, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 642.433839ms ago: executing program 2 (id=311): ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xb) (async) r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x230800, 0x1c3) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x600001) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) (async) clock_settime(0x2, &(0x7f0000000100)) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x7, 0x0, 0x9, 0x4, 0x8, 0x7f, 0x2}, 0x1c) (async) linkat(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1400) (async) splice(r1, &(0x7f0000000200)=0x1, r1, &(0x7f0000000240)=0x3, 0x81, 0x3) read$msr(r1, &(0x7f0000000280), 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0xd, {{0xa, 0x4e22, 0x2, @private1, 0x80000000}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x6, @mcast1, 0x2}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfffffff0}}, {{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb240}}]}, 0x20c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f00000005c0)=0x8000, 0x4) (async) futex_waitv(&(0x7f0000001140)=[{0x0, &(0x7f0000000600)=0x76, 0x2}, {0x1, &(0x7f0000000640)=0xb1, 0x82}, {0xa, &(0x7f0000000680)=0x4, 0x2}, {0x4, &(0x7f00000006c0)=0x8f06}, {0x572, &(0x7f0000000700)=0x4, 0x2}, {0xf3, &(0x7f0000000740)=0x6, 0x82}, {0x0, &(0x7f0000000780)=0x9, 0x2}, {0x2, &(0x7f00000007c0)=0x3714, 0x2}, {0xd, &(0x7f0000000800)=0x2, 0x2}, {0x80000000, &(0x7f0000000840)=0x101, 0x2}, {0xc, &(0x7f0000000880)=0x6, 0x2}, {0x3, &(0x7f00000008c0)=0x1, 0x82}, {0xa, &(0x7f0000000900)=0x5, 0x80}, {0xffffffffffffffff, &(0x7f0000000940)=0x81, 0x2}, {0x10, &(0x7f0000000980)=0x7, 0x82}, {0x920000000000, &(0x7f00000009c0)=0x81, 0x2}, {0xd92, &(0x7f0000000a00)=0x2, 0x2}, {0x6, &(0x7f0000000a40)=0x3, 0x2}, {0xf904, &(0x7f0000000a80)=0x3, 0x82}, {0x3, &(0x7f0000000ac0)=0x1, 0x2}, {0xf, &(0x7f0000000b00)=0x8, 0x2}, {0x5, &(0x7f0000000b40)=0x9, 0x2}, {0x8, &(0x7f0000000b80), 0x2}, {0x1b, &(0x7f0000000bc0)=0x2, 0x2}, {0x400, &(0x7f0000000c00), 0x82}, {0x10001, &(0x7f0000000c40)=0x8, 0x2}, {0x2, &(0x7f0000000c80)=0x4, 0x82}, {0x0, &(0x7f0000000cc0), 0x2}, {0xffffffffffffff15, &(0x7f0000000d00)=0x3, 0x82}, {0x6, &(0x7f0000000d40)=0x2, 0x82}, {0x5, &(0x7f0000000d80)=0x6, 0x2}, {0x6, &(0x7f0000000dc0)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000000e00)=0x2, 0x82}, {0x40, &(0x7f0000000e40)=0xcd55, 0x82}, {0x4, &(0x7f0000000e80)=0x4, 0x82}, {0x2, &(0x7f0000000ec0)=0x8, 0x2}, {0x2, &(0x7f0000000f00)=0x3, 0x2}, {0x5, &(0x7f0000000f40)=0xfffffffffffffff9, 0x2}, {0x5, &(0x7f0000000f80), 0x82}, {0x7, &(0x7f0000000fc0)=0x7f, 0x82}, {0x8, &(0x7f0000001000)=0x2, 0x82}, {0x1000, &(0x7f0000001040)=0x80000001}, {0x5, &(0x7f0000001080)=0x7373, 0x82}, {0xb, &(0x7f00000010c0)=0x100, 0x82}, {0x8000, &(0x7f0000001100)=0x1, 0x82}], 0x2d, 0x0, &(0x7f0000001580)={0x77359400}, 0x1) r3 = openat$uhid(0xffffff9c, &(0x7f00000015c0), 0x1c05, 0x0) write$UHID_INPUT(r3, &(0x7f0000001600)={0x8, {"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", 0x1000}}, 0x1006) (async) fgetxattr(r1, &(0x7f0000002640)=@random={'trusted.', '/proc/sys/net/ipv4/vs/cache_bypass\x00'}, &(0x7f0000002680)=""/148, 0x94) (async) io_setup(0x81, &(0x7f0000002740)=0x0) io_pgetevents(r4, 0x2, 0x8, &(0x7f0000002780)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002880), &(0x7f0000002900)={&(0x7f00000028c0)={[0xc, 0x2]}, 0x8}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000002940)=0x100ca) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@base={0x0, 0x8, 0xb, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x0, 0x3, 0x1}, 0x50) r6 = fcntl$dupfd(r1, 0x0, r5) fchdir(r6) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x6a000000) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000002a00)={0xc}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d80)={0x0}, &(0x7f0000002dc0)=0xc) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000002e00)=0x0) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = fcntl$getown(r2, 0x9) sendmsg$unix(r2, &(0x7f0000005440)={&(0x7f0000002a40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d40)=[{0xfffffffffffffffe}, {&(0x7f0000002ac0)="8385dbb260293b522bc8a1681d043efa5493fa6c772aa7f053fda4f08663b83de54a544d27767afca4226617dcd18fea860fc96e40740867a912af5248bf174215e24f1a9474a0476457ede0138efedb9b3db74c2ad752bdb994cb38c47fccee2083dbff24a1e502ec2da4c32c534984e0f30d5e44c7ef27d50cdc878db82d83275c42de01643d97476e8cc022c8da20d33c63ae4d07562c68450a979b183791ba2db797a63b40db1d93c3b6d38a2e5ec5679047dbd5dd87699a31b4044413d80f649f1980173158693f507a32f1830845822f8a4214e4003bc2d43dee5eae24d600d7c594c4ea48", 0xe8}, {&(0x7f0000002bc0)="d5a2957a94b2dff73a2f935f5a162cedf7d9f48b48ceaed41c4000350ab0be2b85a9417da0aa3a7e2befd9d5a59fb0df1e94d2966feef62b81da088ab85451a1e794ee4c7ff426fa8eb5d752115cd14038bc35204b91acdc112bae823ad75b97babe55f723b2930940fefdbf37a3f797ed6b620c9a11a7779477bf41e9d67f402743bfd01f131f52487bf4d08b96b1d1bd86daa5d682fb57f6dd29a2d7d850b4", 0xa0}, {&(0x7f0000002c80)="68794e6bd5f36ba6b7425ddf7c52f1d059827453568574468ac93380ffebe42df6ac7eab6666276d019257984a860fc1bde548b758e429ad496a45386e5c63915d2ad5a3f2451c9119f3e25a57bb661867071c5250e9fead782c1b7dc157674c0fd35626289cc11e22b809c4c9558be5bcfc41a8efbd67343b769ffafb89487f745e84bfe4af8f41fe4251de9fa7", 0x8e}], 0x4, &(0x7f00000053c0)=[@cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r3, r6, r5]}}, @cred={{0x18}}], 0x68, 0x801}, 0x49000) 642.185251ms ago: executing program 0 (id=312): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 642.111277ms ago: executing program 2 (id=313): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000013400)={0x0, 0x0, &(0x7f0000013080)=[{&(0x7f0000012fc0)={0x10, 0x22, 0x8, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000013380)=[@rights={{0xc}}], 0xc, 0x4800}, 0x8800) (fail_nth: 3) 641.824829ms ago: executing program 0 (id=314): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 522.90443ms ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0x4, 0x90, 0x6551, 0xf98d, 0x3, 0x4f8c}]}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x6}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x100008, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x7ff, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x0, 0x4, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0x4}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x1ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x2, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0xd, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x3ff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2, 0x1}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003980)={0x14, 0x1c, 0x21, 0x70bd2d, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) mount(0x0, &(0x7f0000000480)='./proc_mnt/driver/rtc\x00', &(0x7f00000004c0)='coda\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r12, &(0x7f0000000000)=""/1000, 0x3e8) 522.692468ms ago: executing program 2 (id=316): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syslog(0x2, &(0x7f0000001640)=""/153, 0x99) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1848"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000140)='THAWED\x00', 0x7) write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x8}, 0xf) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x1}, r3}}, 0x120) umount2(&(0x7f0000000380)='./proc\x00', 0x8) 522.042728ms ago: executing program 0 (id=317): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(0x0, 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe80000000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xc4, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200cd0, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=.27.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 97.867644ms ago: executing program 2 (id=318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@updpolicy={0x194, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, 0x9}, [@sa={0xe0, 0x6, {{@in6=@private1, @in=@multicast2, 0x4e21, 0x0, 0x4e21, 0x9, 0xa, 0xa0, 0x40, 0xff}, {@in6=@remote, 0x4d5, 0x6c}, @in=@remote, {0x4, 0xfffffffffffffeff, 0x9c5, 0x8, 0x80, 0x7dc, 0x80000001, 0x2}, {0x5bf4, 0x40000, 0x7fffffff, 0x800000000000}, {0x6, 0xfffffff8, 0x10}, 0x70bd26, 0x3502, 0x2, 0x3, 0x8, 0x20}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 93.779952ms ago: executing program 3 (id=319): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e"], 0x22) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x7, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 206.432µs ago: executing program 3 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000", 0x30) (fail_nth: 5) 0s ago: executing program 2 (id=321): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f0000001380)={0x6, 0xfffffffffffffffa, 0x9, 0x5d7, 0x6, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39986' (ED25519) to the list of known hosts. [ 41.439977][ T5704] cgroup: Unknown subsys name 'net' [ 41.551764][ T5704] cgroup: Unknown subsys name 'cpuset' [ 41.557813][ T5704] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.474946][ T5704] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.124296][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.130986][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.134654][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.138097][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.143665][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.145117][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.147747][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.149709][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.153829][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.155868][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.157880][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.159253][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.159442][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.160990][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.161732][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.162347][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.162811][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.163350][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.164659][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.184935][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.787585][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.790493][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.792821][ T5737] bridge_slave_0: entered allmulticast mode [ 46.795400][ T5737] bridge_slave_0: entered promiscuous mode [ 46.799488][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.801812][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.804114][ T5737] bridge_slave_1: entered allmulticast mode [ 46.806731][ T5737] bridge_slave_1: entered promiscuous mode [ 46.819071][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.821384][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.823698][ T5732] bridge_slave_0: entered allmulticast mode [ 46.826342][ T5732] bridge_slave_0: entered promiscuous mode [ 46.829706][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.831995][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.835612][ T5743] bridge_slave_0: entered allmulticast mode [ 46.838355][ T5743] bridge_slave_0: entered promiscuous mode [ 46.841623][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.843914][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.846121][ T5743] bridge_slave_1: entered allmulticast mode [ 46.848991][ T5743] bridge_slave_1: entered promiscuous mode [ 46.866381][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.868837][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.871100][ T5732] bridge_slave_1: entered allmulticast mode [ 46.873695][ T5732] bridge_slave_1: entered promiscuous mode [ 46.888135][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.892662][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.914802][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.924584][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.935965][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.943348][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.969167][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.971554][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.974981][ T5733] bridge_slave_0: entered allmulticast mode [ 46.978255][ T5733] bridge_slave_0: entered promiscuous mode [ 46.988885][ T5737] team0: Port device team_slave_0 added [ 46.993470][ T5737] team0: Port device team_slave_1 added [ 47.003310][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.005632][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.008419][ T5733] bridge_slave_1: entered allmulticast mode [ 47.011724][ T5733] bridge_slave_1: entered promiscuous mode [ 47.023122][ T5743] team0: Port device team_slave_0 added [ 47.032075][ T5732] team0: Port device team_slave_0 added [ 47.040491][ T5743] team0: Port device team_slave_1 added [ 47.050898][ T5732] team0: Port device team_slave_1 added [ 47.069246][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.072864][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.082066][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.093349][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.096733][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.099280][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.107314][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.112529][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.115449][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.125970][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.146321][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.149647][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.151919][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.159917][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.168749][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.171726][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.182976][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.216284][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.219330][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.229481][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.238108][ T5733] team0: Port device team_slave_0 added [ 47.266335][ T5737] hsr_slave_0: entered promiscuous mode [ 47.268777][ T5737] hsr_slave_1: entered promiscuous mode [ 47.272123][ T5733] team0: Port device team_slave_1 added [ 47.277361][ T5743] hsr_slave_0: entered promiscuous mode [ 47.280358][ T5743] hsr_slave_1: entered promiscuous mode [ 47.282565][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 47.284473][ T5743] Cannot create hsr debugfs directory [ 47.328195][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.330517][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.339851][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.368481][ T5732] hsr_slave_0: entered promiscuous mode [ 47.371490][ T5732] hsr_slave_1: entered promiscuous mode [ 47.374196][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.376044][ T5732] Cannot create hsr debugfs directory [ 47.378768][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.381408][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.391330][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.537340][ T5733] hsr_slave_0: entered promiscuous mode [ 47.539738][ T5733] hsr_slave_1: entered promiscuous mode [ 47.541795][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.543604][ T5733] Cannot create hsr debugfs directory [ 47.723802][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.734432][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.737981][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.744991][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.747868][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.754281][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.766362][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.772428][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.844174][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.851492][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.854492][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.859690][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.865108][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.871218][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.877677][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.883075][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.934334][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.939933][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.942671][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.946258][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.949960][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.953994][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.958339][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.963537][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.975112][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.022739][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.028099][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.033164][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.036401][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.040097][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.042715][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.046451][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.049905][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.055394][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.072270][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.075566][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.090584][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.093637][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.125680][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.162919][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.181152][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.184163][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.207818][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.210013][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.241925][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.248548][ T5095] Bluetooth: hci2: command tx timeout [ 48.248551][ T5744] Bluetooth: hci1: command tx timeout [ 48.248720][ T5744] Bluetooth: hci3: command tx timeout [ 48.251129][ T64] Bluetooth: hci0: command tx timeout [ 48.265313][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.269192][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.284845][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.287201][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.316662][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.319028][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.329984][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.336446][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.338815][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.358335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.360691][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.490672][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.521248][ T5743] veth0_vlan: entered promiscuous mode [ 48.529681][ T5743] veth1_vlan: entered promiscuous mode [ 48.548379][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.550897][ T5743] veth0_macvtap: entered promiscuous mode [ 48.555588][ T5743] veth1_macvtap: entered promiscuous mode [ 48.572095][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.581186][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.600186][ T5732] veth0_vlan: entered promiscuous mode [ 48.612474][ T5732] veth1_vlan: entered promiscuous mode [ 48.674631][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.688326][ T119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.690213][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.692187][ T119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.704615][ T5732] veth0_macvtap: entered promiscuous mode [ 48.720573][ T5732] veth1_macvtap: entered promiscuous mode [ 48.730474][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.733829][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.748168][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.753472][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.758730][ T5733] veth0_vlan: entered promiscuous mode [ 48.765654][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.784550][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.792199][ T5733] veth1_vlan: entered promiscuous mode [ 48.800303][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.800776][ T5737] veth0_vlan: entered promiscuous mode [ 48.808342][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.815391][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.820231][ T5737] veth1_vlan: entered promiscuous mode [ 48.829572][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.865785][ T5733] veth0_macvtap: entered promiscuous mode [ 48.886254][ T5733] veth1_macvtap: entered promiscuous mode [ 48.897881][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.903322][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.906725][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.906787][ T5737] veth0_macvtap: entered promiscuous mode [ 48.910799][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.925835][ T5737] veth1_macvtap: entered promiscuous mode [ 48.932466][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.948276][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.955301][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.979543][ T119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.984741][ T119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.993383][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.018380][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.093454][ T119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.102379][ T119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.184693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.190629][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232286][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.238381][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.307989][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.313368][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.313833][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.318362][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.338666][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.339076][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.343073][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.350955][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.355168][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.359963][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.398464][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.402146][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.405350][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.452385][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.614624][ T5894] ======================================================= [ 49.614624][ T5894] WARNING: The mand mount option has been deprecated and [ 49.614624][ T5894] and is ignored by this kernel. Remove the mand [ 49.614624][ T5894] option from the mount to silence this warning. [ 49.614624][ T5894] ======================================================= [ 50.327571][ T64] Bluetooth: hci0: command tx timeout [ 50.329417][ T64] Bluetooth: hci3: command tx timeout [ 50.331763][ T5744] Bluetooth: hci1: command tx timeout [ 50.333528][ T5744] Bluetooth: hci2: command tx timeout [ 52.008185][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.197684][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 52.200678][ T5744] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 52.205642][ T60] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 52.207871][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.214707][ T60] usb 5-1: config 0 has no interfaces? [ 52.370162][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 52.385293][ T5834] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 52.398794][ T5834] usb 8-1: config 0 has no interfaces? [ 52.417724][ T5744] Bluetooth: hci2: command tx timeout [ 52.419688][ T5744] Bluetooth: hci3: command tx timeout [ 52.421445][ T5095] Bluetooth: hci1: command tx timeout [ 52.432878][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.434664][ T64] Bluetooth: hci0: command tx timeout [ 52.436040][ T5834] usb 8-1: Product: syz [ 52.446676][ T5834] usb 8-1: Manufacturer: syz [ 52.453495][ T5834] usb 8-1: SerialNumber: syz [ 52.528012][ T5834] usb 8-1: config 0 descriptor?? [ 53.246573][ T41] usb 8-1: USB disconnect, device number 2 [ 53.695980][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.364785][ T60] usb 5-1: Product: syz [ 54.368043][ T60] usb 5-1: Manufacturer: syz [ 54.369673][ T60] usb 5-1: SerialNumber: syz [ 54.381632][ T60] usb 5-1: config 0 descriptor?? [ 54.383813][ T60] usb 5-1: can't set config #0, error -71 [ 54.389614][ T60] usb 5-1: USB disconnect, device number 2 [ 54.487588][ T5744] Bluetooth: hci3: command tx timeout [ 54.489632][ T5095] Bluetooth: hci1: command tx timeout [ 54.490611][ T5744] Bluetooth: hci2: command tx timeout [ 54.492659][ T64] Bluetooth: hci0: command tx timeout [ 55.869991][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'. [ 55.932867][ T5940] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 56.399503][ T5949] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 57.068602][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.228123][ T5820] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 57.235393][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 57.242357][ T5820] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 57.245839][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.267312][ T5820] usb 6-1: USB2VGA dongle found at address 2 [ 57.285050][ T5820] usb 6-1: Allocated 8 output buffers [ 57.478416][ T5954] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 57.860265][ T5746] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 57.927569][ T5746] Bluetooth: hci2: command 0x206a tx timeout [ 59.987871][ T5979] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 61.104695][ T5987] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 62.529774][ T6004] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 62.581436][ T6003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.768115][ T5813] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.998036][ T5813] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.161672][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.166123][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.171876][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.177760][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.184634][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.190208][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.202951][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.207103][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.215790][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.220542][ T6017] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.665651][ T6029] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 63.906212][ T5813] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.034659][ T5813] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.039037][ T5813] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.045776][ T6021] Bluetooth: MGMT ver 1.23 [ 64.047699][ T6021] Bluetooth: hci0: unsupported parameter 255 [ 64.051019][ T6021] Bluetooth: hci0: unsupported parameter 255 [ 64.062725][ T5813] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.093772][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.096665][ T5813] usb 8-1: Product: syz [ 64.098189][ T5813] usb 8-1: Manufacturer: syz [ 64.106002][ T5813] cdc_wdm 8-1:1.0: skipping garbage [ 64.114724][ T5813] cdc_wdm 8-1:1.0: skipping garbage [ 64.124285][ T5813] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 64.126452][ T5813] cdc_wdm 8-1:1.0: Unknown control protocol [ 64.578468][ T64] Bluetooth: hci2: command 0x206a tx timeout [ 64.609913][ T5746] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 64.764467][ T6004] Zero length message leads to an empty skb [ 65.431514][ T5813] usb 8-1: USB disconnect, device number 3 [ 66.114039][ T6050] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 66.298923][ T6050] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 66.657490][ T64] Bluetooth: hci2: command 0x206a tx timeout [ 66.657547][ T5746] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 66.738007][ T6057] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 66.861607][ T6059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.186333][ T6064] netlink: Invalid conntrack timeout [ 67.190368][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.215689][ T6073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.707791][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 68.724620][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 68.850849][ T6087] warning: `syz.2.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.889203][ T5746] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 68.891568][ T5746] Bluetooth: hci3: command 0x206a tx timeout [ 70.248064][ T5744] Bluetooth: hci2: command 0x206a tx timeout [ 70.330818][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 70.975225][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.977693][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.333484][ T6102] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.603316][ T42] audit: type=1400 audit(1787273290.781:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6105 comm="syz.1.55" name="p" offset=53 [ 72.407855][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 72.410572][ T64] Bluetooth: hci2: command 0x206a tx timeout [ 72.557692][ T6115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.635900][ T6118] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 72.971719][ T6126] Bluetooth: hci0: unsupported parameter 255 [ 72.979910][ T6126] Bluetooth: hci0: unsupported parameter 255 [ 73.050348][ T6127] netlink: 'syz.1.62': attribute type 10 has an invalid length. [ 73.378634][ T5746] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 73.382152][ T5746] Bluetooth: hci0: command 0x206a tx timeout [ 74.424531][ T6141] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 74.577511][ T5744] Bluetooth: hci1: command 0x206a tx timeout [ 74.579126][ T64] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 74.638570][ T6151] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 75.120986][ T6155] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 75.193229][ T42] audit: type=1326 audit(1787273294.371:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.203900][ T42] audit: type=1326 audit(1787273294.381:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.214645][ T42] audit: type=1326 audit(1787273294.381:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.225976][ T42] audit: type=1326 audit(1787273294.381:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.236647][ T42] audit: type=1326 audit(1787273294.381:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.243628][ T42] audit: type=1326 audit(1787273294.381:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.250458][ T42] audit: type=1326 audit(1787273294.381:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.256979][ T42] audit: type=1326 audit(1787273294.381:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.272038][ T42] audit: type=1326 audit(1787273294.381:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.1.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 75.645236][ T5744] Bluetooth: hci0: command 0x206a tx timeout [ 75.645541][ T5746] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 75.716739][ T6167] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 75.768129][ T6167] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 76.505940][ T6165] netlink: 'syz.0.73': attribute type 10 has an invalid length. [ 76.776832][ T6178] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 77.351508][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 77.351530][ T42] audit: type=1400 audit(1787273296.431:13): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6181 comm="syz.2.79" name="p" offset=53 [ 78.006800][ T6195] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 78.021084][ T6195] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 78.071260][ T6196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.300622][ T6200] hpfs: hpfs_map_sector(): read error [ 78.567546][ T5746] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 78.570340][ T5744] Bluetooth: hci0: command 0x206a tx timeout [ 78.686517][ T6203] XFS (nullb0): Invalid superblock magic number [ 79.529577][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 79.537557][ T64] Bluetooth: hci3: command 0x206a tx timeout [ 81.315728][ T6227] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.396257][ T10] cfg80211: failed to load regulatory.db [ 82.484537][ T42] audit: type=1400 audit(1787273301.661:14): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6239 comm="syz.1.89" name="p" offset=53 [ 83.207666][ T64] Bluetooth: hci0: command 0x206a tx timeout [ 83.211410][ T5744] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 83.498088][ T6249] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 83.844902][ T42] audit: type=1400 audit(1787273303.021:15): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6250 comm="syz.2.91" name="p" offset=53 [ 84.755331][ T6259] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 85.597322][ T6267] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 85.994749][ T6274] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.368873][ T6281] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 87.530166][ T6295] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 87.829484][ T6299] Console: switching to colour dummy device 80x25 [ 87.888854][ T6300] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 87.919609][ T6300] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 87.922257][ T6300] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 87.924901][ T6300] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 87.938497][ T6300] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 87.961749][ T6300] pci 0000:00:01.0: Adding to iommu group 1 [ 87.971385][ T6300] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 87.973689][ T6300] pci 0000:00:01.0: vgaarb: bridge control possible [ 87.975943][ T6300] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 87.993034][ T6300] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 88.005913][ T6300] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 88.012736][ T6300] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 88.017545][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 88.017817][ T5744] Bluetooth: hci3: command 0x206a tx timeout [ 88.097790][ T6302] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.157210][ T6300] [drm] Found bochs VGA, ID 0xb0c5. [ 88.173625][ T6300] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 88.303405][ T6300] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 88.516366][ T42] audit: type=1400 audit(1787273307.691:16): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6311 comm="syz.1.105" name="p" offset=53 [ 89.777585][ T6323] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 90.097567][ T5744] Bluetooth: hci2: command 0x206a tx timeout [ 90.097776][ T64] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 90.423399][ T6326] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.508622][ T6300] Console: switching to colour frame buffer device 160x50 [ 90.554611][ T6300] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 90.661861][ T6328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.787840][ T6335] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 90.830104][ T6328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.915022][ T6328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.046887][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.053279][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.063695][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066997][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.666052][ T6350] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 92.127467][ T5997] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.277458][ T5997] usb 5-1: Using ep0 maxpacket: 16 [ 92.279797][ T5997] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.283388][ T5997] usb 5-1: config 0 has no interfaces? [ 92.286929][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.289763][ T5997] usb 5-1: Product: syz [ 92.291273][ T5997] usb 5-1: Manufacturer: syz [ 92.293485][ T5997] usb 5-1: SerialNumber: syz [ 92.301423][ T5997] usb 5-1: config 0 descriptor?? [ 92.390227][ T6360] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 92.412672][ T6363] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 92.515666][ T61] usb 5-1: USB disconnect, device number 3 [ 92.527327][ T6370] block nbd1: NBD_DISCONNECT [ 92.981158][ T6379] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 93.198979][ T6380] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 93.209025][ T6380] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 94.052479][ T6385] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 94.145667][ T6386] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 94.212808][ T42] audit: type=1400 audit(1787273313.391:17): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6391 comm="syz.2.131" name="p" offset=53 [ 94.487733][ T5744] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 94.490176][ T5744] Bluetooth: hci2: command 0x206a tx timeout [ 94.624796][ T6393] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 95.473888][ T42] audit: type=1400 audit(1787273314.651:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6407 comm="syz.3.127" name="p" offset=53 [ 96.737444][ T6422] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 97.460879][ T42] audit: type=1400 audit(1787273316.641:19): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6423 comm="syz.1.128" name="p" offset=53 [ 99.065006][ T42] audit: type=1400 audit(1787273318.241:20): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6445 comm="syz.2.138" name="p" offset=53 [ 100.062692][ T6454] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 102.222920][ T6466] kexec: Could not allocate control_code_buffer [ 102.274355][ T6477] block nbd0: NBD_DISCONNECT [ 106.197625][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.437778][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 106.468340][ T34] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.473432][ T34] usb 8-1: config 0 has no interfaces? [ 106.501487][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.506071][ T34] usb 8-1: Product: syz [ 106.519148][ T34] usb 8-1: Manufacturer: syz [ 106.525464][ T34] usb 8-1: SerialNumber: syz [ 106.604467][ T34] usb 8-1: config 0 descriptor?? [ 106.895742][ T34] usb 8-1: USB disconnect, device number 4 [ 108.101365][ T6516] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 108.634596][ T6522] block nbd1: NBD_DISCONNECT [ 108.958146][ T42] audit: type=1400 audit(1787273328.101:21): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6523 comm="syz.2.162" name="p" offset=53 [ 110.569444][ T6547] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 110.805223][ T6549] jffs2: notice: (6549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.238823][ T6556] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 111.815779][ T6561] tmpfs: Bad value for 'nr_inodes' [ 113.935943][ T6594] netlink: 'syz.2.183': attribute type 10 has an invalid length. [ 114.940425][ T6611] jffs2: notice: (6611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.047460][ T64] Bluetooth: hci2: command 0x206a tx timeout [ 115.061300][ T5744] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 115.865390][ T6619] FAULT_INJECTION: forcing a failure. [ 115.865390][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.871275][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 115.871313][ T6619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.871324][ T6619] Call Trace: [ 115.871331][ T6619] [ 115.871338][ T6619] dump_stack_lvl+0x100/0x190 [ 115.871494][ T6619] should_fail_ex.cold+0x5/0xa [ 115.871543][ T6619] _copy_from_user+0x2e/0xd0 [ 115.871625][ T6619] copy_mount_options+0x76/0x190 [ 115.871677][ T6619] __ia32_sys_mount+0x1ab/0x310 [ 115.871702][ T6619] ? __pfx___ia32_sys_mount+0x10/0x10 [ 115.871725][ T6619] ? exit_to_user_mode_loop+0x166/0x700 [ 115.871765][ T6619] ? rcu_is_watching+0x13/0xc0 [ 115.871794][ T6619] __do_fast_syscall_32+0x13a/0x8b0 [ 115.871851][ T6619] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.871872][ T6619] do_fast_syscall_32+0x32/0x70 [ 115.871893][ T6619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.871918][ T6619] RIP: 0023:0xf708efec [ 115.871940][ T6619] Code: Unable to access opcode bytes at 0xf708efc2. [ 115.871949][ T6619] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 115.871968][ T6619] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000200 [ 115.871979][ T6619] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000080000800 [ 115.871990][ T6619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.872000][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.872009][ T6619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.872030][ T6619] [ 115.984883][ T6619] jffs2: notice: (6619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.748539][ T42] audit: type=1400 audit(1787273336.931:22): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6633 comm="syz.1.197" name="p" offset=53 [ 119.137536][ T5744] Bluetooth: hci1: command 0x206a tx timeout [ 119.170842][ T6644] jffs2: notice: (6644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.176091][ T64] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 119.178158][ T6644] FAULT_INJECTION: forcing a failure. [ 119.178158][ T6644] name failslab, interval 1, probability 0, space 0, times 1 [ 119.184890][ T6644] CPU: 2 UID: 0 PID: 6644 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 119.184905][ T6644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.184911][ T6644] Call Trace: [ 119.184916][ T6644] [ 119.184920][ T6644] dump_stack_lvl+0x100/0x190 [ 119.184940][ T6644] should_fail_ex.cold+0x5/0xa [ 119.184954][ T6644] should_failslab+0xc2/0x120 [ 119.184985][ T6644] __kmalloc_noprof+0xfc/0x820 [ 119.185006][ T6644] ? rcu_is_watching+0x13/0xc0 [ 119.185027][ T6644] ? tomoyo_realpath_from_path+0xb6/0x690 [ 119.185054][ T6644] tomoyo_realpath_from_path+0xb6/0x690 [ 119.185073][ T6644] tomoyo_path_number_perm+0x23c/0x580 [ 119.185095][ T6644] ? tomoyo_path_number_perm+0x22e/0x580 [ 119.185108][ T6644] ? print_kernel_ident+0x10/0x40 [ 119.185132][ T6644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.185150][ T6644] ? __lock_acquire+0x4c5/0x1ec0 [ 119.185169][ T6644] ? current_check_access_path+0x269/0x430 [ 119.185191][ T6644] ? __pfx_current_check_access_path+0x10/0x10 [ 119.185207][ T6644] ? d_alloc_parallel+0x9f6/0x14c0 [ 119.185228][ T6644] tomoyo_path_mknod+0x164/0x190 [ 119.185239][ T6644] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 119.185250][ T6644] ? __d_lookup+0x25c/0x4a0 [ 119.185265][ T6644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.185292][ T6644] security_path_mknod+0x161/0x300 [ 119.185309][ T6644] may_o_create+0x30/0x3a0 [ 119.185332][ T6644] lookup_open+0xe35/0x1990 [ 119.185353][ T6644] path_openat+0xa2c/0x2440 [ 119.185368][ T6644] ? __pfx_path_openat+0x10/0x10 [ 119.185384][ T6644] do_file_open+0x20e/0x430 [ 119.185398][ T6644] ? __pfx_do_file_open+0x10/0x10 [ 119.185419][ T6644] ? _raw_spin_unlock+0x28/0x50 [ 119.185435][ T6644] ? alloc_fd+0x471/0x7a0 [ 119.185452][ T6644] do_sys_openat2+0x10f/0x1e0 [ 119.185468][ T6644] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.185484][ T6644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.185499][ T6644] __ia32_compat_sys_openat+0x12d/0x210 [ 119.185515][ T6644] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 119.185530][ T6644] ? fput+0x7c/0x100 [ 119.185543][ T6644] ? ksys_write+0x1ac/0x250 [ 119.185554][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 119.185567][ T6644] __do_fast_syscall_32+0x13a/0x8b0 [ 119.185579][ T6644] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.185590][ T6644] do_fast_syscall_32+0x32/0x70 [ 119.185602][ T6644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.185617][ T6644] RIP: 0023:0xf708efec [ 119.185630][ T6644] Code: Unable to access opcode bytes at 0xf708efc2. [ 119.185635][ T6644] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 119.185645][ T6644] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 119.185652][ T6644] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 119.185658][ T6644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.185663][ T6644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.185669][ T6644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.185682][ T6644] [ 119.185687][ T6644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.350257][ T6650] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 119.522553][ T6653] jffs2: notice: (6653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.852236][ T6660] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 121.687474][ T64] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 121.687570][ T5744] Bluetooth: hci3: command 0x206a tx timeout [ 122.396868][ T6680] jffs2: notice: (6680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.423419][ T6683] FAULT_INJECTION: forcing a failure. [ 122.423419][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 122.428764][ T6683] CPU: 3 UID: 0 PID: 6683 Comm: syz.2.211 Not tainted syzkaller #0 PREEMPT(full) [ 122.428786][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.428795][ T6683] Call Trace: [ 122.428801][ T6683] [ 122.428808][ T6683] dump_stack_lvl+0x100/0x190 [ 122.428836][ T6683] should_fail_ex.cold+0x5/0xa [ 122.428855][ T6683] should_failslab+0xc2/0x120 [ 122.428879][ T6683] __kmalloc_noprof+0xfc/0x820 [ 122.428902][ T6683] ? tomoyo_encode2+0xfb/0x3c0 [ 122.428930][ T6683] tomoyo_encode2+0xfb/0x3c0 [ 122.428948][ T6683] tomoyo_encode+0x29/0x50 [ 122.428962][ T6683] tomoyo_realpath_from_path+0x18c/0x690 [ 122.428980][ T6683] tomoyo_check_open_permission+0x2af/0x3c0 [ 122.428995][ T6683] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 122.429013][ T6683] ? hook_file_open+0x24f/0x8f0 [ 122.429033][ T6683] ? lock_acquire+0x1b9/0x370 [ 122.429051][ T6683] tomoyo_file_open+0x6b/0x90 [ 122.429062][ T6683] security_file_open+0xb5/0x1e0 [ 122.429077][ T6683] do_dentry_open+0x588/0x14d0 [ 122.429094][ T6683] vfs_open+0x82/0x3f0 [ 122.429109][ T6683] path_openat+0x19fa/0x2440 [ 122.429124][ T6683] ? __pfx_path_openat+0x10/0x10 [ 122.429140][ T6683] do_file_open+0x20e/0x430 [ 122.429154][ T6683] ? __pfx_do_file_open+0x10/0x10 [ 122.429181][ T6683] ? _raw_spin_unlock+0x28/0x50 [ 122.429197][ T6683] ? alloc_fd+0x471/0x7a0 [ 122.429213][ T6683] do_sys_openat2+0x10f/0x1e0 [ 122.429228][ T6683] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.429246][ T6683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.429261][ T6683] __ia32_compat_sys_openat+0x12d/0x210 [ 122.429277][ T6683] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 122.429292][ T6683] ? fput+0x7c/0x100 [ 122.429305][ T6683] ? ksys_write+0x1ac/0x250 [ 122.429315][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 122.429329][ T6683] __do_fast_syscall_32+0x13a/0x8b0 [ 122.429341][ T6683] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.429353][ T6683] do_fast_syscall_32+0x32/0x70 [ 122.429365][ T6683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.429379][ T6683] RIP: 0023:0xf708efec [ 122.429393][ T6683] Code: Unable to access opcode bytes at 0xf708efc2. [ 122.429398][ T6683] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 122.429408][ T6683] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 122.429415][ T6683] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 122.429421][ T6683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.429427][ T6683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.429433][ T6683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.429445][ T6683] [ 122.429457][ T6683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.474004][ T6675] ima: policy update failed [ 122.543655][ T42] audit: type=1802 audit(1787273341.721:23): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.209" res=0 errno=0 [ 122.922631][ T6696] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 123.215142][ T6703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.218748][ T6703] overlayfs: missing 'lowerdir' [ 123.255579][ T6705] jffs2: notice: (6705) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.263189][ T6705] FAULT_INJECTION: forcing a failure. [ 123.263189][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 123.269234][ T6705] CPU: 3 UID: 0 PID: 6705 Comm: syz.0.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.269267][ T6705] Tainted: [L]=SOFTLOCKUP [ 123.269271][ T6705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.269278][ T6705] Call Trace: [ 123.269283][ T6705] [ 123.269287][ T6705] dump_stack_lvl+0x100/0x190 [ 123.269309][ T6705] should_fail_ex.cold+0x5/0xa [ 123.269323][ T6705] should_failslab+0xc2/0x120 [ 123.269340][ T6705] __kmalloc_noprof+0xfc/0x820 [ 123.269354][ T6705] ? rcu_is_watching+0x13/0xc0 [ 123.269371][ T6705] ? tomoyo_realpath_from_path+0xb6/0x690 [ 123.269391][ T6705] tomoyo_realpath_from_path+0xb6/0x690 [ 123.269420][ T6705] tomoyo_path_number_perm+0x23c/0x580 [ 123.269436][ T6705] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.269449][ T6705] ? print_kernel_ident+0x10/0x40 [ 123.269466][ T6705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.269484][ T6705] ? __lock_acquire+0x4c5/0x1ec0 [ 123.269503][ T6705] ? current_check_access_path+0x269/0x430 [ 123.269520][ T6705] ? __pfx_current_check_access_path+0x10/0x10 [ 123.269536][ T6705] ? d_alloc_parallel+0x9f6/0x14c0 [ 123.269557][ T6705] tomoyo_path_mknod+0x164/0x190 [ 123.269567][ T6705] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 123.269578][ T6705] ? __d_lookup+0x25c/0x4a0 [ 123.269593][ T6705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.269608][ T6705] security_path_mknod+0x161/0x300 [ 123.269625][ T6705] may_o_create+0x30/0x3a0 [ 123.269643][ T6705] lookup_open+0xe35/0x1990 [ 123.269665][ T6705] path_openat+0xa2c/0x2440 [ 123.269679][ T6705] ? __pfx_path_openat+0x10/0x10 [ 123.269700][ T6705] do_file_open+0x20e/0x430 [ 123.269714][ T6705] ? __pfx_do_file_open+0x10/0x10 [ 123.269736][ T6705] ? _raw_spin_unlock+0x28/0x50 [ 123.269752][ T6705] ? alloc_fd+0x471/0x7a0 [ 123.269768][ T6705] do_sys_openat2+0x10f/0x1e0 [ 123.269783][ T6705] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.269800][ T6705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.269814][ T6705] __ia32_compat_sys_openat+0x12d/0x210 [ 123.269831][ T6705] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 123.269846][ T6705] ? fput+0x7c/0x100 [ 123.269878][ T6705] ? ksys_write+0x1ac/0x250 [ 123.269889][ T6705] ? __pfx_ksys_write+0x10/0x10 [ 123.269903][ T6705] __do_fast_syscall_32+0x13a/0x8b0 [ 123.269915][ T6705] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.269927][ T6705] do_fast_syscall_32+0x32/0x70 [ 123.269939][ T6705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.269964][ T6705] RIP: 0023:0xf708efec [ 123.269978][ T6705] Code: Unable to access opcode bytes at 0xf708efc2. [ 123.269983][ T6705] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 123.269994][ T6705] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 123.270001][ T6705] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 123.270007][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.270013][ T6705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.270019][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.270032][ T6705] [ 123.271208][ T6705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.631646][ T6716] netlink: 'syz.2.221': attribute type 29 has an invalid length. [ 123.660704][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.664467][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.668490][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.672273][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.153946][ T6723] FAULT_INJECTION: forcing a failure. [ 124.153946][ T6723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.166142][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.3.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.166162][ T6723] Tainted: [L]=SOFTLOCKUP [ 124.166166][ T6723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.166172][ T6723] Call Trace: [ 124.166176][ T6723] [ 124.166180][ T6723] dump_stack_lvl+0x100/0x190 [ 124.166200][ T6723] should_fail_ex.cold+0x5/0xa [ 124.166214][ T6723] _copy_to_user+0x32/0xd0 [ 124.166227][ T6723] simple_read_from_buffer+0xcb/0x170 [ 124.166242][ T6723] proc_fail_nth_read+0x1af/0x230 [ 124.166269][ T6723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.166281][ T6723] ? rw_verify_area+0xce/0x6d0 [ 124.166298][ T6723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.166309][ T6723] vfs_read+0x1e4/0xb40 [ 124.166321][ T6723] ? __pfx_vfs_read+0x10/0x10 [ 124.166330][ T6723] ? find_held_lock+0x2b/0x80 [ 124.166347][ T6723] ? __fget_files+0x215/0x3d0 [ 124.166362][ T6723] ? __fget_files+0x21f/0x3d0 [ 124.166377][ T6723] ksys_read+0x12a/0x250 [ 124.166387][ T6723] ? __pfx_ksys_read+0x10/0x10 [ 124.166402][ T6723] do_int80_emulation+0x166/0x650 [ 124.166417][ T6723] asm_int80_emulation+0x1a/0x20 [ 124.166428][ T6723] RIP: 0023:0xf71674eb [ 124.166437][ T6723] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 124.166447][ T6723] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.166458][ T6723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 124.166464][ T6723] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 124.166470][ T6723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.166476][ T6723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.166482][ T6723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.166495][ T6723] [ 124.411648][ T6731] mmap: syz.1.226 (6731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.717604][ T6738] FAULT_INJECTION: forcing a failure. [ 124.717604][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.723613][ T6738] CPU: 2 UID: 0 PID: 6738 Comm: syz.2.230 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.723632][ T6738] Tainted: [L]=SOFTLOCKUP [ 124.723636][ T6738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.723642][ T6738] Call Trace: [ 124.723647][ T6738] [ 124.723651][ T6738] dump_stack_lvl+0x100/0x190 [ 124.723673][ T6738] should_fail_ex.cold+0x5/0xa [ 124.723688][ T6738] _copy_from_iter+0x1f4/0x1690 [ 124.723715][ T6738] ? __asan_memset+0x23/0x50 [ 124.723729][ T6738] ? __pfx__copy_from_iter+0x10/0x10 [ 124.723741][ T6738] ? __pfx___alloc_skb+0x10/0x10 [ 124.723808][ T6738] netlink_sendmsg+0x808/0xda0 [ 124.723835][ T6738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.723854][ T6738] ? apparmor_socket_sendmsg+0x15b/0x270 [ 124.723869][ T6738] ____sys_sendmsg+0xa4d/0xbe0 [ 124.723883][ T6738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.723900][ T6738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.723920][ T6738] ___sys_sendmsg+0x190/0x1e0 [ 124.723936][ T6738] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.723957][ T6738] ? find_held_lock+0x2b/0x80 [ 124.723983][ T6738] __sys_sendmsg+0x160/0x210 [ 124.723996][ T6738] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.724016][ T6738] ? __pfx_ksys_write+0x10/0x10 [ 124.724031][ T6738] __do_fast_syscall_32+0x13a/0x8b0 [ 124.724044][ T6738] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.724056][ T6738] do_fast_syscall_32+0x32/0x70 [ 124.724069][ T6738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.724084][ T6738] RIP: 0023:0xf708efec [ 124.724098][ T6738] Code: Unable to access opcode bytes at 0xf708efc2. [ 124.724103][ T6738] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 124.724114][ T6738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 124.724121][ T6738] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.724128][ T6738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.724134][ T6738] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.724140][ T6738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.724153][ T6738] [ 124.786993][ T6742] jffs2: notice: (6742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.963789][ T6758] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 125.010315][ T6763] FAULT_INJECTION: forcing a failure. [ 125.010315][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 125.014481][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.3.240 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.014500][ T6763] Tainted: [L]=SOFTLOCKUP [ 125.014504][ T6763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.014510][ T6763] Call Trace: [ 125.014514][ T6763] [ 125.014519][ T6763] dump_stack_lvl+0x100/0x190 [ 125.014538][ T6763] should_fail_ex.cold+0x5/0xa [ 125.014552][ T6763] should_failslab+0xc2/0x120 [ 125.014568][ T6763] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 125.014584][ T6763] ? sock_alloc_inode+0x26/0x2c0 [ 125.014598][ T6763] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.014611][ T6763] sock_alloc_inode+0x26/0x2c0 [ 125.014623][ T6763] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.014635][ T6763] alloc_inode+0x68/0x250 [ 125.014651][ T6763] sock_alloc+0x44/0x280 [ 125.014665][ T6763] do_accept+0xf9/0x530 [ 125.014680][ T6763] ? do_raw_spin_lock+0x128/0x260 [ 125.014696][ T6763] ? __pfx_do_accept+0x10/0x10 [ 125.014718][ T6763] __sys_accept4+0x108/0x200 [ 125.014734][ T6763] ? __pfx___sys_accept4+0x10/0x10 [ 125.014750][ T6763] ? ksys_write+0x1ac/0x250 [ 125.014763][ T6763] __ia32_sys_accept4+0x94/0x100 [ 125.014779][ T6763] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.014790][ T6763] __do_fast_syscall_32+0x13a/0x8b0 [ 125.014802][ T6763] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.014813][ T6763] do_fast_syscall_32+0x32/0x70 [ 125.014825][ T6763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.014839][ T6763] RIP: 0023:0xf702efec [ 125.014852][ T6763] Code: Unable to access opcode bytes at 0xf702efc2. [ 125.014857][ T6763] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 125.014868][ T6763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 125.014874][ T6763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.014880][ T6763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.014885][ T6763] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.014891][ T6763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.014904][ T6763] [ 125.686140][ T6777] FAULT_INJECTION: forcing a failure. [ 125.686140][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 125.690613][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.690632][ T6777] Tainted: [L]=SOFTLOCKUP [ 125.690635][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.690642][ T6777] Call Trace: [ 125.690646][ T6777] [ 125.690651][ T6777] dump_stack_lvl+0x100/0x190 [ 125.690673][ T6777] should_fail_ex.cold+0x5/0xa [ 125.690689][ T6777] should_failslab+0xc2/0x120 [ 125.690705][ T6777] __kvmalloc_node_noprof+0x116/0x970 [ 125.690721][ T6777] ? xfrm_user_rcv_msg_compat+0x49b/0x1340 [ 125.690751][ T6777] xfrm_user_rcv_msg_compat+0x49b/0x1340 [ 125.690764][ T6777] ? kasan_save_stack+0x30/0x50 [ 125.690779][ T6777] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 125.690794][ T6777] ? kmem_cache_free+0x127/0x6b0 [ 125.690809][ T6777] ? kfree_skbmem+0x19a/0x210 [ 125.690829][ T6777] ? consume_skb+0xd1/0x110 [ 125.690845][ T6777] ? nlmon_xmit+0xa5/0xe0 [ 125.690882][ T6777] ? dev_hard_start_xmit+0x121/0x760 [ 125.690903][ T6777] ? __dev_queue_xmit+0x1bbf/0x4970 [ 125.690918][ T6777] ? netlink_deliver_tap+0xa4d/0xcc0 [ 125.690946][ T6777] ? find_held_lock+0x2b/0x80 [ 125.690962][ T6777] ? xfrm_get_translator+0xeb/0x290 [ 125.690980][ T6777] ? xfrm_get_translator+0xeb/0x290 [ 125.690999][ T6777] xfrm_user_rcv_msg+0x65e/0xd00 [ 125.691018][ T6777] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 125.691035][ T6777] ? kfree_skbmem+0x19f/0x210 [ 125.691047][ T6777] ? look_up_lock_class+0x55/0x120 [ 125.691059][ T6777] ? register_lock_class+0x3f/0x7b0 [ 125.691085][ T6777] ? rcu_is_watching+0x13/0xc0 [ 125.691101][ T6777] ? trace_contention_end+0x126/0x160 [ 125.691115][ T6777] ? __mutex_lock+0x26c/0x1bc0 [ 125.691128][ T6777] netlink_rcv_skb+0x159/0x420 [ 125.691158][ T6777] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 125.691181][ T6777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.691206][ T6777] xfrm_netlink_rcv+0x71/0x90 [ 125.691221][ T6777] netlink_unicast+0x585/0x850 [ 125.691239][ T6777] ? __pfx_netlink_unicast+0x10/0x10 [ 125.691258][ T6777] netlink_sendmsg+0x8b0/0xda0 [ 125.691276][ T6777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.691296][ T6777] ? apparmor_socket_sendmsg+0x15b/0x270 [ 125.691315][ T6777] ____sys_sendmsg+0xa4d/0xbe0 [ 125.691333][ T6777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.691350][ T6777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.691370][ T6777] ___sys_sendmsg+0x190/0x1e0 [ 125.691385][ T6777] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.691406][ T6777] ? find_held_lock+0x2b/0x80 [ 125.691429][ T6777] __sys_sendmsg+0x160/0x210 [ 125.691442][ T6777] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.691456][ T6777] ? __pfx_ksys_write+0x10/0x10 [ 125.691471][ T6777] __do_fast_syscall_32+0x13a/0x8b0 [ 125.691482][ T6777] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.691494][ T6777] do_fast_syscall_32+0x32/0x70 [ 125.691506][ T6777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.691520][ T6777] RIP: 0023:0xf708efec [ 125.691534][ T6777] Code: Unable to access opcode bytes at 0xf708efc2. [ 125.691539][ T6777] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 125.691550][ T6777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 125.691556][ T6777] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.691562][ T6777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.691568][ T6777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.691574][ T6777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.691587][ T6777] [ 125.969244][ T64] Bluetooth: hci0: hcon ffff88804ae4c000 sent 0 < count 6 [ 126.256588][ T6803] netlink: 'syz.2.253': attribute type 10 has an invalid length. [ 126.692411][ T42] audit: type=1400 audit(1787273345.871:24): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6802 comm="syz.0.254" name="p" offset=53 [ 127.799503][ T42] audit: type=1326 audit(1787273346.981:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.809156][ T42] audit: type=1326 audit(1787273346.981:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.815019][ T42] audit: type=1326 audit(1787273346.981:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.821301][ T42] audit: type=1326 audit(1787273346.981:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.827532][ T42] audit: type=1326 audit(1787273346.981:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.839482][ T42] audit: type=1326 audit(1787273346.981:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.850804][ T42] audit: type=1326 audit(1787273346.981:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.860217][ T6818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.259'. [ 127.866238][ T42] audit: type=1326 audit(1787273346.981:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 127.885272][ T42] audit: type=1326 audit(1787273346.981:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 128.008225][ T64] Bluetooth: hci3: command 0x206a tx timeout [ 128.011562][ T5744] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 128.456555][ T6826] block nbd1: NBD_DISCONNECT [ 128.458327][ T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 128.610255][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.615301][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.619889][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.625279][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.871278][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.900159][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.926443][ T29] usb 7-1: usb_control_msg returned -32 [ 128.933574][ T29] usbtmc 7-1:16.0: can't read capabilities [ 129.542384][ T6837] macvlan0: entered promiscuous mode [ 129.544836][ T6837] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 129.547776][ T6837] netlink: 'syz.0.265': attribute type 2 has an invalid length. [ 129.821059][ T6855] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 129.960912][ T6859] block nbd0: NBD_DISCONNECT [ 131.050163][ T6874] jffs2: notice: (6874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.202679][ T5997] usb 7-1: USB disconnect, device number 2 [ 131.645036][ T6892] block nbd1: NBD_DISCONNECT [ 131.721310][ T6894] FAULT_INJECTION: forcing a failure. [ 131.721310][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 131.726513][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.726531][ T6894] Tainted: [L]=SOFTLOCKUP [ 131.726535][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.726541][ T6894] Call Trace: [ 131.726558][ T6894] [ 131.726564][ T6894] dump_stack_lvl+0x100/0x190 [ 131.726591][ T6894] should_fail_ex.cold+0x5/0xa [ 131.726617][ T6894] should_failslab+0xc2/0x120 [ 131.726642][ T6894] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 131.726666][ T6894] ? alloc_vmap_area+0x640/0x2bb0 [ 131.726691][ T6894] alloc_vmap_area+0x640/0x2bb0 [ 131.726711][ T6894] ? kasan_save_track+0x14/0x30 [ 131.726725][ T6894] ? __kasan_kmalloc+0xaa/0xb0 [ 131.726738][ T6894] ? __pfx_alloc_vmap_area+0x10/0x10 [ 131.726754][ T6894] ? __get_vm_area_node+0x124/0x350 [ 131.726771][ T6894] __get_vm_area_node+0x1ed/0x350 [ 131.726789][ T6894] __vmalloc_node_range_noprof+0x228/0x1630 [ 131.726807][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.726831][ T6894] ? rcu_is_watching+0x13/0xc0 [ 131.726852][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.726866][ T6894] ? __memcg_slab_post_alloc_hook+0x74c/0x1160 [ 131.726884][ T6894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.726905][ T6894] ? trace_kmem_cache_alloc+0xdd/0x100 [ 131.726923][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.726933][ T6894] __vmalloc_node_noprof+0xad/0xf0 [ 131.726949][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.726961][ T6894] copy_process+0x803/0x8370 [ 131.726991][ T6894] ? __pfx_copy_process+0x10/0x10 [ 131.727005][ T6894] ? __kasan_kmalloc+0xaa/0xb0 [ 131.727019][ T6894] ? lockdep_init_map_type+0x5c/0x250 [ 131.727033][ T6894] ? lockdep_init_map_type+0x5c/0x250 [ 131.727046][ T6894] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 131.727068][ T6894] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 131.727089][ T6894] vhost_task_create+0x1db/0x370 [ 131.727100][ T6894] ? __pfx_vhost_task_create+0x10/0x10 [ 131.727112][ T6894] ? register_lock_class+0x3f/0x7b0 [ 131.727128][ T6894] ? __pfx_vhost_task_fn+0x10/0x10 [ 131.727140][ T6894] ? __pfx___mutex_lock+0x10/0x10 [ 131.727156][ T6894] kvm_mmu_post_init_vm+0x1b3/0x360 [ 131.727174][ T6894] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 131.727197][ T6894] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 131.727217][ T6894] kvm_vcpu_ioctl+0x730/0x1700 [ 131.727230][ T6894] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.727242][ T6894] ? tomoyo_path_number_perm+0x188/0x580 [ 131.727258][ T6894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.727272][ T6894] ? get_pid_task+0x106/0x250 [ 131.727291][ T6894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.727305][ T6894] ? do_vfs_ioctl+0x226/0x13e0 [ 131.727323][ T6894] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.727346][ T6894] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 131.727358][ T6894] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 131.727371][ T6894] ? __fget_files+0x21f/0x3d0 [ 131.727385][ T6894] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 131.727398][ T6894] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 131.727416][ T6894] __do_fast_syscall_32+0x13a/0x8b0 [ 131.727428][ T6894] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.727452][ T6894] do_fast_syscall_32+0x32/0x70 [ 131.727466][ T6894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.727481][ T6894] RIP: 0023:0xf708efec [ 131.727496][ T6894] Code: Unable to access opcode bytes at 0xf708efc2. [ 131.727501][ T6894] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 131.727512][ T6894] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae80 [ 131.727519][ T6894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.727525][ T6894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.727530][ T6894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.727536][ T6894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.727549][ T6894] [ 131.848204][ T6894] syz.2.286: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.852771][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.852789][ T6894] Tainted: [L]=SOFTLOCKUP [ 131.852792][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.852799][ T6894] Call Trace: [ 131.852804][ T6894] [ 131.852808][ T6894] dump_stack_lvl+0x100/0x190 [ 131.852828][ T6894] warn_alloc.cold+0x94/0xa8 [ 131.852853][ T6894] ? __pfx_warn_alloc+0x10/0x10 [ 131.852866][ T6894] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.852879][ T6894] ? __get_vm_area_node+0x2f0/0x350 [ 131.852898][ T6894] ? __get_vm_area_node+0x22b/0x350 [ 131.852916][ T6894] __vmalloc_node_range_noprof+0xccd/0x1630 [ 131.852933][ T6894] ? rcu_is_watching+0x13/0xc0 [ 131.852957][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.852978][ T6894] ? __memcg_slab_post_alloc_hook+0x74c/0x1160 [ 131.853006][ T6894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.853036][ T6894] ? trace_kmem_cache_alloc+0xdd/0x100 [ 131.853062][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.853073][ T6894] __vmalloc_node_noprof+0xad/0xf0 [ 131.853089][ T6894] ? vhost_task_create+0x1db/0x370 [ 131.853101][ T6894] copy_process+0x803/0x8370 [ 131.853124][ T6894] ? __pfx_copy_process+0x10/0x10 [ 131.853138][ T6894] ? __kasan_kmalloc+0xaa/0xb0 [ 131.853153][ T6894] ? lockdep_init_map_type+0x5c/0x250 [ 131.853167][ T6894] ? lockdep_init_map_type+0x5c/0x250 [ 131.853180][ T6894] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 131.853194][ T6894] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 131.853212][ T6894] vhost_task_create+0x1db/0x370 [ 131.853223][ T6894] ? __pfx_vhost_task_create+0x10/0x10 [ 131.853233][ T6894] ? register_lock_class+0x3f/0x7b0 [ 131.853248][ T6894] ? __pfx_vhost_task_fn+0x10/0x10 [ 131.853260][ T6894] ? __pfx___mutex_lock+0x10/0x10 [ 131.853276][ T6894] kvm_mmu_post_init_vm+0x1b3/0x360 [ 131.853293][ T6894] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 131.853309][ T6894] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 131.853324][ T6894] kvm_vcpu_ioctl+0x730/0x1700 [ 131.853337][ T6894] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 131.853350][ T6894] ? tomoyo_path_number_perm+0x188/0x580 [ 131.853365][ T6894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.853379][ T6894] ? get_pid_task+0x106/0x250 [ 131.853398][ T6894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.853411][ T6894] ? do_vfs_ioctl+0x226/0x13e0 [ 131.853428][ T6894] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.853450][ T6894] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 131.853463][ T6894] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 131.853475][ T6894] ? __fget_files+0x21f/0x3d0 [ 131.853490][ T6894] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 131.853502][ T6894] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 131.853521][ T6894] __do_fast_syscall_32+0x13a/0x8b0 [ 131.853533][ T6894] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.853544][ T6894] do_fast_syscall_32+0x32/0x70 [ 131.853556][ T6894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.853570][ T6894] RIP: 0023:0xf708efec [ 131.853585][ T6894] Code: Unable to access opcode bytes at 0xf708efc2. [ 131.853589][ T6894] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 131.853604][ T6894] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae80 [ 131.853611][ T6894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.853617][ T6894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.853622][ T6894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.853628][ T6894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.853641][ T6894] [ 131.853645][ T6894] Mem-Info: [ 131.965113][ T6894] active_anon:6003 inactive_anon:173 isolated_anon:0 [ 131.965113][ T6894] active_file:491 inactive_file:56964 isolated_file:0 [ 131.965113][ T6894] unevictable:1000 dirty:219 writeback:0 [ 131.965113][ T6894] slab_reclaimable:7073 slab_unreclaimable:51371 [ 131.965113][ T6894] mapped:24235 shmem:1478 pagetables:1148 [ 131.965113][ T6894] sec_pagetables:297 bounce:0 [ 131.965113][ T6894] kernel_misc_reclaimable:0 [ 131.965113][ T6894] free:38751 free_pcp:13327 free_cma:0 [ 131.978934][ T6894] Node 0 active_anon:472kB inactive_anon:68kB active_file:128kB inactive_file:12kB unevictable:1308kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:8kB writeback:0kB shmem:1424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9120kB pagetables:1692kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.989304][ T6894] Node 1 active_anon:23540kB inactive_anon:624kB active_file:1836kB inactive_file:227844kB unevictable:2692kB isolated(anon):0kB isolated(file):0kB mapped:96800kB dirty:868kB writeback:0kB shmem:4488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4548kB pagetables:2900kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.000217][ T6894] Node 0 DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:28kB free_cma:0kB [ 132.011932][ T6894] lowmem_reserve[]: 0 279 279 279 279 [ 132.013848][ T6894] Node 0 DMA32 free:15836kB boost:0kB min:12648kB low:15808kB high:18968kB reserved_highatomic:0KB free_highatomic:0KB active_anon:472kB inactive_anon:68kB active_file:128kB inactive_file:12kB unevictable:1308kB writepending:8kB zspages:0kB present:1032196kB managed:285924kB mlocked:0kB bounce:0kB free_pcp:6508kB local_pcp:404kB free_cma:0kB [ 132.024023][ T6894] lowmem_reserve[]: 0 0 0 0 0 [ 132.025644][ T6894] Node 1 DMA32 free:137116kB boost:4096kB min:51236kB low:63020kB high:74804kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23540kB inactive_anon:624kB active_file:1836kB inactive_file:227844kB unevictable:2692kB writepending:868kB zspages:1824kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:46704kB local_pcp:14688kB free_cma:0kB [ 132.036829][ T6894] lowmem_reserve[]: 0 0 0 0 0 [ 132.038621][ T6894] Node 0 DMA: 3*4kB (M) 1*8kB (M) 1*16kB (U) 7*32kB (UM) 2*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2052kB [ 132.044488][ T6894] Node 0 DMA32: 5*4kB (E) 136*8kB (UME) 88*16kB (UME) 52*32kB (UME) 30*64kB (ME) 14*128kB (UME) 5*256kB (UME) 1*512kB (E) 4*1024kB (UM) 1*2048kB (M) 0*4096kB = 15828kB [ 132.051472][ T6894] Node 1 DMA32: 115*4kB (UME) 342*8kB (UME) 120*16kB (UME) 187*32kB (UME) 79*64kB (UME) 53*128kB (UME) 54*256kB (UME) 28*512kB (UM) 22*1024kB (UM) 13*2048kB (UM) 9*4096kB (UM) = 137116kB [ 132.058813][ T6894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.062115][ T6894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.065855][ T6894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.077505][ T6894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.081130][ T6894] 59147 total pagecache pages [ 132.082974][ T6894] 218 pages in swap cache [ 132.084398][ T6894] Free swap = 121828kB [ 132.085840][ T6894] Total swap = 124996kB [ 132.087201][ T6894] 524155 pages RAM [ 132.088730][ T6894] 0 pages HighMem/MovableOnly [ 132.090345][ T6894] 211781 pages reserved [ 132.091695][ T6894] 0 pages cma reserved [ 132.409130][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.456405][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.468730][ T6923] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 134.160972][ T6932] block nbd3: NBD_DISCONNECT [ 134.771796][ T6955] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 134.776097][ T6955] binder: 6954:6955 ioctl c0306201 80000080 returned -14 [ 134.779388][ T6955] binder: 6954:6955 ioctl c0306201 800003c0 returned -14 [ 134.985516][ T6971] FAULT_INJECTION: forcing a failure. [ 134.985516][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.991016][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.2.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.991034][ T6971] Tainted: [L]=SOFTLOCKUP [ 134.991038][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.991044][ T6971] Call Trace: [ 134.991048][ T6971] [ 134.991053][ T6971] dump_stack_lvl+0x100/0x190 [ 134.991073][ T6971] should_fail_ex.cold+0x5/0xa [ 134.991086][ T6971] _copy_from_user+0x2e/0xd0 [ 134.991101][ T6971] cmsghdr_from_user_compat_to_kern+0x4eb/0x7d0 [ 134.991139][ T6971] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 134.991153][ T6971] ? __import_iovec+0x1d2/0x640 [ 134.991169][ T6971] ____sys_sendmsg+0x607/0xbe0 [ 134.991184][ T6971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.991203][ T6971] ___sys_sendmsg+0x190/0x1e0 [ 134.991219][ T6971] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.991239][ T6971] ? find_held_lock+0x2b/0x80 [ 134.991264][ T6971] __sys_sendmsg+0x160/0x210 [ 134.991276][ T6971] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.991290][ T6971] ? __pfx_ksys_write+0x10/0x10 [ 134.991304][ T6971] __do_fast_syscall_32+0x13a/0x8b0 [ 134.991317][ T6971] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.991329][ T6971] do_fast_syscall_32+0x32/0x70 [ 134.991340][ T6971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.991355][ T6971] RIP: 0023:0xf708efec [ 134.991368][ T6971] Code: Unable to access opcode bytes at 0xf708efc2. [ 134.991373][ T6971] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 134.991384][ T6971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080013400 [ 134.991391][ T6971] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.991397][ T6971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.991402][ T6971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.991408][ T6971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.991420][ T6971] [ 135.169662][ T6977] tc action pedit offset must be on 32 bit boundaries [ 135.355233][ T6975] lo speed is unknown, defaulting to 1000 [ 135.359381][ T6975] lo speed is unknown, defaulting to 1000 [ 135.364364][ T6975] lo speed is unknown, defaulting to 1000 [ 135.370167][ T6975] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 135.377061][ T6975] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 135.383649][ T6975] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 135.390679][ T6975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.402797][ T6975] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 135.426601][ T6981] ucma_write: process 239 (syz.2.316) changed security contexts after opening file descriptor, this is not allowed. [ 135.454219][ T6975] lo speed is unknown, defaulting to 1000 [ 135.459932][ T6975] lo speed is unknown, defaulting to 1000 [ 135.464451][ T6975] lo speed is unknown, defaulting to 1000 [ 135.470137][ T6975] lo speed is unknown, defaulting to 1000 [ 135.474092][ T6975] lo speed is unknown, defaulting to 1000 [ 135.579804][ T6988] capability: warning: `syz.2.318' uses deprecated v2 capabilities in a way that may be insecure [ 135.622450][ T6990] FAULT_INJECTION: forcing a failure. [ 135.622450][ T6990] name failslab, interval 1, probability 0, space 0, times 0 [ 135.640036][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.3.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.640057][ T6990] Tainted: [L]=SOFTLOCKUP [ 135.640061][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.640067][ T6990] Call Trace: [ 135.640072][ T6990] [ 135.640076][ T6990] dump_stack_lvl+0x100/0x190 [ 135.640097][ T6990] should_fail_ex.cold+0x5/0xa [ 135.640112][ T6990] should_failslab+0xc2/0x120 [ 135.640129][ T6990] __kmalloc_noprof+0xfc/0x820 [ 135.640143][ T6990] ? kasan_save_track+0x14/0x30 [ 135.640156][ T6990] ? aa_str_alloc+0x4a/0xb0 [ 135.640170][ T6990] aa_str_alloc+0x4a/0xb0 [ 135.640180][ T6990] aa_policy_init+0x1cd/0x240 [ 135.640192][ T6990] aa_alloc_profile+0xd1/0x520 [ 135.640207][ T6990] unpack_profile+0x3ed/0x4510 [ 135.640221][ T6990] ? is_bpf_text_address+0x8a/0x1a0 [ 135.640246][ T6990] ? bpf_ksym_find+0x124/0x1c0 [ 135.640261][ T6990] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.640281][ T6990] ? is_bpf_text_address+0x94/0x1a0 [ 135.640293][ T6990] ? kernel_text_address+0x8d/0x100 [ 135.640305][ T6990] ? __pfx_unpack_profile+0x10/0x10 [ 135.640320][ T6990] ? arch_stack_walk+0xa6/0xf0 [ 135.640349][ T6990] ? stack_trace_save+0x8e/0xc0 [ 135.640359][ T6990] ? __pfx_stack_trace_save+0x10/0x10 [ 135.640379][ T6990] ? aa_unpack_str+0xae/0x2b0 [ 135.640395][ T6990] aa_unpack+0x39e/0x1240 [ 135.640414][ T6990] ? __pfx_aa_unpack+0x10/0x10 [ 135.640432][ T6990] ? __lock_acquire+0x4c5/0x1ec0 [ 135.640447][ T6990] aa_replace_profiles+0x176/0x31c0 [ 135.640470][ T6990] ? __might_fault+0xc5/0x140 [ 135.640482][ T6990] ? __might_fault+0xc5/0x140 [ 135.640493][ T6990] ? __pfx_aa_replace_profiles+0x10/0x10 [ 135.640510][ T6990] ? _copy_from_user+0x59/0xd0 [ 135.640523][ T6990] policy_update+0x20b/0x340 [ 135.640540][ T6990] profile_load+0xaa/0x1a0 [ 135.640555][ T6990] vfs_write+0x2aa/0x1050 [ 135.640567][ T6990] ? __pfx_profile_load+0x10/0x10 [ 135.640582][ T6990] ? __pfx_vfs_write+0x10/0x10 [ 135.640592][ T6990] ? find_held_lock+0x2b/0x80 [ 135.640608][ T6990] ? __fget_files+0x215/0x3d0 [ 135.640622][ T6990] ? __fget_files+0x21f/0x3d0 [ 135.640637][ T6990] ksys_write+0x12a/0x250 [ 135.640647][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.640657][ T6990] ? ksys_write+0x1ac/0x250 [ 135.640667][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.640680][ T6990] __do_fast_syscall_32+0x13a/0x8b0 [ 135.640692][ T6990] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.640704][ T6990] do_fast_syscall_32+0x32/0x70 [ 135.640716][ T6990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.640745][ T6990] RIP: 0023:0xf702efec [ 135.640760][ T6990] Code: Unable to access opcode bytes at 0xf702efc2. [ 135.640765][ T6990] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 135.640776][ T6990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 135.640782][ T6990] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.640788][ T6990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.640794][ T6990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.640799][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.640812][ T6990] [ 135.640860][ T6990] ------------[ cut here ]------------ [ 135.741134][ T6990] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 135.741148][ T6990] WARNING: security/apparmor/lib.c:509 at aa_policy_destroy+0x78/0x1f0, CPU#1: syz.3.320/6990 [ 135.748922][ T6990] Modules linked in: [ 135.750359][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.3.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.753654][ T6990] Tainted: [L]=SOFTLOCKUP [ 135.755025][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.758148][ T6990] RIP: 0010:aa_policy_destroy+0x7f/0x1f0 [ 135.760075][ T6990] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc [ 135.764566][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 135.764582][ T42] audit: type=1400 audit(1787273354.911:67): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6993 comm="syz.2.322" name="unknown" offset=16 [ 135.766166][ T6990] RSP: 0000:ffffc9000d64f678 EFLAGS: 00010293 [ 135.766198][ T6990] RAX: 0000000000000000 RBX: ffff8880145c6c00 RCX: 0000000000000000 [ 135.778253][ T6990] RDX: ffff888029050000 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0 [ 135.780719][ T6990] RBP: ffff8880145c6c20 R08: 0000000000000005 R09: 0000000000000000 [ 135.783178][ T6990] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 135.785637][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0 [ 135.788421][ T6990] FS: 0000000000000000(0000) GS:ffff888096abd000(0063) knlGS:00000000f541db40 [ 135.791187][ T6990] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 135.793242][ T6990] CR2: 00000000f702f000 CR3: 0000000048e6e000 CR4: 0000000000352ef0 [ 135.795852][ T6990] Call Trace: [ 135.796924][ T6990] [ 135.797965][ T6990] aa_free_profile+0x82/0xca0 [ 135.799457][ T6990] ? aa_str_alloc+0x90/0xb0 [ 135.800886][ T6990] aa_alloc_profile+0x3ae/0x520 [ 135.802416][ T6990] unpack_profile+0x3ed/0x4510 [ 135.803925][ T6990] ? is_bpf_text_address+0x8a/0x1a0 [ 135.805556][ T6990] ? bpf_ksym_find+0x124/0x1c0 [ 135.807097][ T6990] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.809110][ T6990] ? is_bpf_text_address+0x94/0x1a0 [ 135.810758][ T6990] ? kernel_text_address+0x8d/0x100 [ 135.812390][ T6990] ? __pfx_unpack_profile+0x10/0x10 [ 135.814072][ T6990] ? arch_stack_walk+0xa6/0xf0 [ 135.815593][ T6990] ? stack_trace_save+0x8e/0xc0 [ 135.817130][ T6990] ? __pfx_stack_trace_save+0x10/0x10 [ 135.818868][ T6990] ? aa_unpack_str+0xae/0x2b0 [ 135.820357][ T6990] aa_unpack+0x39e/0x1240 [ 135.821735][ T6990] ? __pfx_aa_unpack+0x10/0x10 [ 135.823262][ T6990] ? __lock_acquire+0x4c5/0x1ec0 [ 135.824824][ T6990] aa_replace_profiles+0x176/0x31c0 [ 135.826472][ T6990] ? __might_fault+0xc5/0x140 [ 135.828026][ T6990] ? __might_fault+0xc5/0x140 [ 135.829514][ T6990] ? __pfx_aa_replace_profiles+0x10/0x10 [ 135.831277][ T6990] ? _copy_from_user+0x59/0xd0 [ 135.832791][ T6990] policy_update+0x20b/0x340 [ 135.834273][ T6990] profile_load+0xaa/0x1a0 [ 135.835691][ T6990] vfs_write+0x2aa/0x1050 [ 135.837064][ T6990] ? __pfx_profile_load+0x10/0x10 [ 135.838749][ T6990] ? __pfx_vfs_write+0x10/0x10 [ 135.840261][ T6990] ? find_held_lock+0x2b/0x80 [ 135.841756][ T6990] ? __fget_files+0x215/0x3d0 [ 135.843247][ T6990] ? __fget_files+0x21f/0x3d0 [ 135.844733][ T6990] ksys_write+0x12a/0x250 [ 135.846062][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.847703][ T6990] ? ksys_write+0x1ac/0x250 [ 135.849153][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.850649][ T6990] __do_fast_syscall_32+0x13a/0x8b0 [ 135.852285][ T6990] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.853936][ T6990] do_fast_syscall_32+0x32/0x70 [ 135.855471][ T6990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.857524][ T6990] RIP: 0023:0xf702efec [ 135.858844][ T6990] Code: Unable to access opcode bytes at 0xf702efc2. [ 135.860908][ T6990] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 135.863501][ T6990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 135.866000][ T6990] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.868532][ T6990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.870991][ T6990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.873439][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.875905][ T6990] [ 135.876895][ T6990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.879188][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.3.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.882486][ T6990] Tainted: [L]=SOFTLOCKUP [ 135.883837][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.886948][ T6990] Call Trace: [ 135.888030][ T6990] [ 135.888971][ T6990] dump_stack_lvl+0x100/0x190 [ 135.890481][ T6990] vpanic+0x553/0x970 [ 135.891751][ T6990] ? __pfx_vpanic+0x10/0x10 [ 135.893187][ T6990] panic+0xd1/0xe0 [ 135.894378][ T6990] ? __pfx_panic+0x10/0x10 [ 135.895786][ T6990] check_panic_on_warn.cold+0x19/0x34 [ 135.897465][ T6990] ? aa_policy_destroy+0x78/0x1f0 [ 135.899069][ T6990] __warn.cold+0x191/0x318 [ 135.900479][ T6990] __report_bug+0x30f/0x440 [ 135.901925][ T6990] ? aa_policy_destroy+0x78/0x1f0 [ 135.903510][ T6990] ? __pfx___report_bug+0x10/0x10 [ 135.905086][ T6990] ? irqentry_exit+0x24d/0xa10 [ 135.906609][ T6990] report_bug_entry+0xe2/0x290 [ 135.908125][ T6990] ? aa_policy_destroy+0x7f/0x1f0 [ 135.909703][ T6990] handle_bug+0x1cd/0x2a0 [ 135.911075][ T6990] exc_invalid_op+0x17/0x50 [ 135.912509][ T6990] asm_exc_invalid_op+0x1a/0x20 [ 135.914044][ T6990] RIP: 0010:aa_policy_destroy+0x7f/0x1f0 [ 135.915705][ T6990] Code: 00 0f 85 88 01 00 00 48 b8 22 01 00 00 00 00 ad de 48 39 43 28 74 18 e8 df b4 31 fd 48 8d 3d e8 f6 74 0c 48 c7 c6 c0 12 57 8c <67> 48 0f b9 3a e8 c7 b4 31 fd 48 8d 6b 10 48 b8 00 00 00 00 00 fc [ 135.921601][ T6990] RSP: 0000:ffffc9000d64f678 EFLAGS: 00010293 [ 135.923497][ T6990] RAX: 0000000000000000 RBX: ffff8880145c6c00 RCX: 0000000000000000 [ 135.925948][ T6990] RDX: ffff888029050000 RSI: ffffffff8c5712c0 RDI: ffffffff914d7da0 [ 135.928436][ T6990] RBP: ffff8880145c6c20 R08: 0000000000000005 R09: 0000000000000000 [ 135.930892][ T6990] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 135.933333][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000dc0 [ 135.935797][ T6990] ? aa_policy_destroy+0x71/0x1f0 [ 135.937372][ T6990] aa_free_profile+0x82/0xca0 [ 135.938852][ T6990] ? aa_str_alloc+0x90/0xb0 [ 135.940280][ T6990] aa_alloc_profile+0x3ae/0x520 [ 135.941770][ T6990] unpack_profile+0x3ed/0x4510 [ 135.943216][ T6990] ? is_bpf_text_address+0x8a/0x1a0 [ 135.944725][ T6990] ? bpf_ksym_find+0x124/0x1c0 [ 135.946157][ T6990] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.948002][ T6990] ? is_bpf_text_address+0x94/0x1a0 [ 135.949527][ T6990] ? kernel_text_address+0x8d/0x100 [ 135.951107][ T6990] ? __pfx_unpack_profile+0x10/0x10 [ 135.952664][ T6990] ? arch_stack_walk+0xa6/0xf0 [ 135.954112][ T6990] ? stack_trace_save+0x8e/0xc0 [ 135.955612][ T6990] ? __pfx_stack_trace_save+0x10/0x10 [ 135.957297][ T6990] ? aa_unpack_str+0xae/0x2b0 [ 135.958806][ T6990] aa_unpack+0x39e/0x1240 [ 135.960179][ T6990] ? __pfx_aa_unpack+0x10/0x10 [ 135.961697][ T6990] ? __lock_acquire+0x4c5/0x1ec0 [ 135.963268][ T6990] aa_replace_profiles+0x176/0x31c0 [ 135.964909][ T6990] ? __might_fault+0xc5/0x140 [ 135.966414][ T6990] ? __might_fault+0xc5/0x140 [ 135.967915][ T6990] ? __pfx_aa_replace_profiles+0x10/0x10 [ 135.969678][ T6990] ? _copy_from_user+0x59/0xd0 [ 135.971228][ T6990] policy_update+0x20b/0x340 [ 135.972646][ T6990] profile_load+0xaa/0x1a0 [ 135.974070][ T6990] vfs_write+0x2aa/0x1050 [ 135.975440][ T6990] ? __pfx_profile_load+0x10/0x10 [ 135.977027][ T6990] ? __pfx_vfs_write+0x10/0x10 [ 135.978559][ T6990] ? find_held_lock+0x2b/0x80 [ 135.980050][ T6990] ? __fget_files+0x215/0x3d0 [ 135.981544][ T6990] ? __fget_files+0x21f/0x3d0 [ 135.983036][ T6990] ksys_write+0x12a/0x250 [ 135.984403][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.985944][ T6990] ? ksys_write+0x1ac/0x250 [ 135.987374][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 135.988930][ T6990] __do_fast_syscall_32+0x13a/0x8b0 [ 135.990569][ T6990] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.992198][ T6990] do_fast_syscall_32+0x32/0x70 [ 135.993733][ T6990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.995710][ T6990] RIP: 0023:0xf702efec [ 135.997005][ T6990] Code: Unable to access opcode bytes at 0xf702efc2. [ 135.999076][ T6990] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 136.001659][ T6990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 136.004096][ T6990] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.006554][ T6990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.009003][ T6990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.011474][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.013935][ T6990] [ 136.015573][ T6990] Kernel Offset: disabled [ 136.016931][ T6990] Rebooting in 86400 seconds..