last executing test programs: 18.825003984s ago: executing program 3 (id=256): r0 = openat$kvm(0x0, &(0x7f0000003480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x2000, 0x1000, &(0x7f0000fdb000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.750390301s ago: executing program 3 (id=260): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)={'b', ' *:* ', 'r\x00'}, 0x8) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73697807d63d7b586653766324d898805f00252c0051782eeafc4f170cd31449c2e3ababb72cafaa8eb1444b83989154c3f7f05ea9ea14f4a184359e511e1cfef43febbf635674aab8e1a96a92442d44a70e35789cae7e7359fd04297b75c9653c5735d9133a7500a9d569dd0b901a0000000000000e73a95ddec3ee6708597a558535ad4734ff7fbf6c21b0e461ec4b85f022e8e075f29a1f274f61aaea8506b217fc6d4e4ae30a52ece4897732"]) 18.659420264s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='100', 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000019640)=0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 18.659161191s ago: executing program 3 (id=264): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='tmpfs\x00', 0x8, &(0x7f0000000440)='usrquota') chdir(&(0x7f0000000480)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000340)={&(0x7f00000004c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000580)={&(0x7f00000005c0)="c94522e546f93f6dedf11f1509685636", 0x60}) mount(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x06\x00\x00\x00\a\x00\x00\x00\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\'\x00\xaf\r\x15\xa0\xd7\xd7\xb6\x9bz\xb2\xaf\xfd\x87fn\x82\x90\xf9\xb4A\xdf\xabB\xdda\x7f\xb8\x96\x1a\xe7\xc1\xabV\x02r\xdd\x9cD\x90\xce\xfa\xff\xff\xff\\!\x1c\xbf\xfa\xe8\x97\x8cD\"\xa3w\x00\x00N\xe6\xeca)\xbc\x97)X\xf6\xa7\xf1S\x11\x8b\x93{\xc2\xfd$\x15Q\xde\x9fJ\xe4\xa5\xb7\xa7\xcb\xbd\x12$EI\x15O\x14\xbfZ\xb5yQ\x9e7d#Jj\x1cPG\a\xaa\x81\xac\x1d\xed1\xebG\x93\x8c>R\xba\xbd9\xde\xc1vd\x9d\xcd\xbfCx)W \xc8\xdee\x06e\xca\x17\'r\xb8m\xe0\xe66\xbc\xe1P\xaa\xa9M\xbc\xc7\x84\xe9\x01H{\xa89\x9a\xc1\xaa\x0f\xed/*\xa5\xf1\xce\\\xd5\x7f\x15\xa5\x80\xba\xc8\xf55\x9ac\x0e\xd6\xa3\xac\x91\xb5\xc5\x1a\x14_U\xc7\xc8V\xa1\xc0\xc7\x8d\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83@*\xd2\xfb\xa4\x85\xdc\xca\xe2\xd6\xaeL(\xe5\xf3\xa9o\x80\xfaGDi\xb32\x924\xd0\xb35\xf0i\x06\x18\xef\xaa\xcf\xb8:l^\xe5\x9b\xb4\x01-\xe5;\x1b\xcf\x1b\xd6\xa2\xf0\xe9cg\x858\xbdJZ\xfd\xb4\x1atH\xfb\x87\xd3I\xa0Y\xab\x84\xdbGWc\xc4\x18\xb0X7\xa5\xd6\x06\x89\xea\b\xa2z ') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000e00)={0x8000000000004000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='rdma.current\x00', 0x275a, 0x0) 18.594792245s ago: executing program 3 (id=266): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0x1}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000180)) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000340)=@isdn={0x22, 0x1, 0x38, 0x8, 0x5}, 0x80) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x1, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x1, 0x4088014) symlink(&(0x7f0000000580)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x2480, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000001600)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000001680)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000001700)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000001740)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 18.475010808s ago: executing program 3 (id=267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xd6001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fe6000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000740)={0xf, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000500)={0x0, 0xc89f, 0xc000, 0x0, 0x20102f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000780)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x80047437, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002200000000000000020000006001c002568621008001900", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)={0x2, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r5, 0x84, 0x82, &(0x7f0000000100)={r6, 0x8}, 0x8) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000280)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r7, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) 18.395070076s ago: executing program 32 (id=267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xd6001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fe6000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000740)={0xf, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000500)={0x0, 0xc89f, 0xc000, 0x0, 0x20102f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000640)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000780)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x80047437, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002200000000000000020000006001c002568621008001900", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7b, 0xa004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)={0x2, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r5, 0x84, 0x82, &(0x7f0000000100)={r6, 0x8}, 0x8) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000280)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r7, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) 5.055250335s ago: executing program 2 (id=296): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b18, 0x0) 3.564506726s ago: executing program 1 (id=310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}]}) 3.503916001s ago: executing program 1 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./mnt\x00', 0x1ff) mount(&(0x7f0000000fc0)=@filename='mtd0\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001040)='jffs2\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000140)={0x6, 0x1}) 3.503521631s ago: executing program 1 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0x1}, {0xc, 0x10}, {0xe, 0xfff1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0xc0080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000900)={0x0, 0x20000, 0x9, 0x2, 0x200, &(0x7f0000000940)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77b0400000000000000519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b210300000000000000dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b2956a7a86812a7ab8896ec5ea1b12643e1844b185730500399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd73445a8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000800000000000000000000000000f800"}) r8 = syz_create_resource$binfmt(&(0x7f0000000d40)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x1000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000d80)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r11, 0x10) r12 = socket$unix(0x1, 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r13) r14 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@ieee802154, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="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", 0xfa}], 0x1, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0xffff7fff}}], 0xd8}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='proc\x00', 0x8, 0x0) syz_open_procfs(r14, &(0x7f0000000280)='auxv\x00') ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x7, 0x7, 0x2c}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) 3.280928948s ago: executing program 1 (id=314): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0xfbf, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='macsec0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24008080, &(0x7f0000001100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000000440)={&(0x7f0000000040)=0xc, 0x2, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000400)}) sendto$inet(r1, 0x0, 0x0, 0x4014, &(0x7f0000001300)={0x2, 0xfc00, @multicast2}, 0x10) 3.2032229s ago: executing program 1 (id=315): syz_open_dev$video(&(0x7f0000000140), 0x7, 0xa0000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x169802, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/242, 0xf2}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x52, 0x24, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x6}, {0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{}, {0x0, 0x2, {0x7, 0x2e07}}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) io_setup(0x200, &(0x7f0000000300)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000026c0)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002940)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002980), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000029c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r7, &(0x7f0000002a00)=[{&(0x7f0000002a40)=""/244, 0xf4}], 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002700), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r4, &(0x7f0000002800)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @b={0x42, 0x2, 0x2, 0x1, 0x47, 0x7, 0xe, {0x2b, "1b5310e7260bd242e9c84cde16ac799372e38d801b58663c32ef36ba2a767f9f5e2030cd4432b5a8fff814"}, 0xdd, 0x5, 0x1, 0x1, 0x73, "42826934b70bdaf86140bd03f275a6ea2f7983a2452d6f0c8b1a8104802f4de41b8c7fcad61b3b6b7d5d214534bf1d5efd474c9e4e48a8e931f92f53a70b75e13ebaf9cc95f29905b54443b4c2054226791741856af0bb9f2125d9a4f8f26140d163f408c37318db35eb735222324140b5e1d7"}}, 0xae) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x9f) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xc20000, 0x39, 0x3ff, 0x9}, 0xfffffff8, 0x2}}, 0x101000) add_key$user(0x0, &(0x7f00000028c0)={'syz', 0x1}, &(0x7f0000002900)="ae", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000480)='cgroup.clone_children\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r11, &(0x7f00000004c0), 0x1) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0xa1, 0x1, 0x4, r0, &(0x7f00000003c0)="1d", 0xfdef, 0x801}]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) 2.835134665s ago: executing program 0 (id=317): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/120, &(0x7f0000000000)=0x78) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @broadcast}, 0x10) 2.818069122s ago: executing program 0 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008051f05000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.817927349s ago: executing program 0 (id=319): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) r2 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @private}, &(0x7f0000000100)=0xc) fsmount(0xffffffffffffffff, 0x1, 0xc3) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x1, 0x7, 0x8400, 0x1, 0xfffffff7, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0xb, @value=r4}, 0x50) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)='.\x00\x00\x00', 0x4}], 0x1}, 0x40) (async) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)='.\x00\x00\x00', 0x4}], 0x1}, 0x40) 2.733659141s ago: executing program 0 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$inet(r1, 0x0, &(0x7f0000000880)) close(r0) write(0xffffffffffffffff, &(0x7f0000000180)='10000000', 0x8) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000500)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x6, 0x1, 0x64, "6cbe30873052fd1957c9fc34302af02b54cc946283c75fd460b880cce627f52890454faa3af3900f9db4ba032d0608f2423b6bec392da30a49ea88d4249802", 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="df94d901259ebd0e79759c190b439cae5c2eb55e8bc65ace80eda98a9577d71df3a0c5e35e9a4d1ef7fc527f55ac8db9058f474e481139f133945d2a7dc28db7dee227170899dc9531256a3d6a5ba09fd2dfa410e14b1df52b6aacce2fac7d8bab465f2d82b0af5ae98d098433016ab6d99454f2316f7b2bfca6328065cb60e80eedbee1801ce30dea1740d1ff59e0653e72a95a7daaa6b880c289af55ad39f084095dd35d999e782b80897e5784da788432c66d81ee0c669b58b8597338f803a79c", 0xc2}, {&(0x7f0000000740)="3927c10efe75e82cd53dde1c16eb3cecccf03016eed47f900d552c2f4d3f0f78d9d747e0a746d52d7d3f42f2396d13bb73e37c03b565824a22338b5a3b27fc506c1a675b2ec87da5218ff6f693c3960d669889cd656972d503ee2fb8083394c8cebafb18f152056b750f4b33637aa88f46d591f2a60beab609b5e8c69a6abc652e84443a1906c2345fae24583d28564a06274cb42c6a3e3733f0e3", 0x9b}], 0x2}, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x160341) socket$phonet_pipe(0x23, 0x5, 0x2) userfaultfd(0x801) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) 2.604646065s ago: executing program 4 (id=321): syz_emit_ethernet(0x26, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) connect(r0, &(0x7f0000000000)=@in={0x2, 0x15, @loopback}, 0x10) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}}) 2.535148672s ago: executing program 4 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000400)="000000000902190001010080320000000000003fe100582371458e29226883", 0x1f) 2.534806331s ago: executing program 4 (id=323): r0 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) (async) keyctl$get_persistent(0x16, 0x0, r0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00 \x00', @ANYRES16=r4, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000300000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x96}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0x1e, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x26, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @data=0x6, 0x7}, {0x43, '\x00', @data=0x5, 0x10000}]}) 2.024290964s ago: executing program 2 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564dff, 0x0, 0x100000001}]}) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x4204000c, 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x39) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab02, r4) (async) ioctl$NBD_SET_SOCK(r5, 0xab02, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000000061119c000000000018000000004f0b0000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.023708791s ago: executing program 2 (id=325): iopl(0x3) syz_io_uring_setup(0x35ea, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0, &(0x7f0000000340)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40010) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x88240, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x15, r2, 0x0, r1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r3, 0x40000000, 0x4) read(r3, &(0x7f00000004c0)=""/174, 0xae) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f000000fb00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000011b40)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000011bc0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000013bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000013c80)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000013cc0)="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", 0x2000, &(0x7f0000015cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="9002000000000000ffffffff0000000004000000000000000300000000000000ff07000000000000feffffffffffff7fff0f0000ff07000009000000000000000700000000486f0003000000000000000600000000000000000000000000008002000000000000000400000006000000070000000080000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000000000000000000000000000000000007000000000000000100000000030000000000000000000007000000000000000300000000000000ffffff7f0000000003000000000000000900000001000100060000000000000009000000000000000400000000080000f9ffffffffffffff0600000000000000000000000000000006000000010000010a00000000a00000de000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000015f00)='./dev/file0\x00', &(0x7f0000015f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000015fc0)=0x0, &(0x7f0000016000), &(0x7f0000016040)) lstat(&(0x7f0000016280)='./dev/kmsg\x00', &(0x7f00000162c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() setregid(r12, 0xffffffffffffffff) statx(r3, &(0x7f0000016440)='./dev/kmsg\x00', 0x400, 0x800, &(0x7f0000016480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="dd70d190de6eea94023784d0d57e070cd2f80d216fb23ae088602f86db38bbc9acc7d1a9df0a435c52735242a553f951ee8a3a4882607d1a8a315667f168c061e32f49cb7c577746e36541450bcfbc994f0e62dcfcec60cd28fddb9f9e4bd663b18eb83404232b87e0db89ec4e4ba9480df5016bffbf4047f611c25abf9dc7b16e25bb36e3863279f27a8083f6a18a58865de58adb78469eb9b203a3e028b7450d3991ab6af684be1b91c2614e9231133fa4dda98faeb1642e7948265b3a95901c65ec0e794cc40b9079a0b345e3733e8b8e14210f26f8c19e7b9a4b5537e63649431e1d6b3e3b64622ce30d1993d37f1bcffd90ff344817dc6620287f41aed00447bc479e4aceb1f75e5ffb684713609a41748df6c4402824568f00f59627679d214b609dea5f34ce7f331cfcb1ebf24dc2e8160e1ace3dd4ce45cb3ed2a0983ddf8b1f71554561d1658758d0cd4ab1209b4540066b80636b84bb5cd4aa34e7b30731e4def1b49188b76ff1507c566f28bff467bca7815fb11d776fb0f0aaad20d6df0de90bf24adc8aa408dc34a2fa68d0fac1a093e1ba43cebc1861ec4a9edc1247972982049d5453a810daa8b80f201336c0e0b2edf84e92ae3f853a10dc1ea37fe5242084239104cd264e05c796d31990bda9a8ddc1d20725ab8952acfa7b0eeb790ec0901d3a81e8f730262c5d6169f70d5bf0077944ac09b619fd04348643d1ed559377a0a3d4301193d7c8a254ed5f9e9f249dc4e9ba08cc022b626502c61a8143b7988bcea6dc32caf646e5f26d7c4fae2e4d2b057699d6163f87ad73baa959960d33a9e591cd8c653f3f872e84226e10fe84f9f1a6fb60dab8012721f22c23aef1ff839af05591dadbb706e0c128a19618d13df2b83d4b290c460237fa68d4710004d4d3045f1dc3a94299375a1f626e66257d7b32f295709d95862ab19b761817d9c51f8413c7e71d859aac3fef44848a502c9b2ff2475bb10c6a9ed9483be40b39ced4d87efc8a2f821dd21f0f7ea464687a35545f8cc315b636bc8f4f7343dc22d03b528a1c4c14aa32586199c7f1545e4ad03e25c920e86b3997f3146104e0ae230a060e58484a1143d864ed619c07f8a619ebfa8b4b2968e40841fcd8ea632f2d3e8a6d4eaf7569eef417e82aa73c78370769f23169b02c8f28118ae88de993b057e883b26ae9bea37c714aa88edf24100f06b94dcd131043ceebccc0b8dfaf7c5751a264a8ee199c69957f23e8ef1924d92af14a28014254272b22c58bf54da0bd25d53afc15fe93c51f1076ee403dd8a218cf9ef063427f78c27a90b7b3c8f6e2028bc262ba4eb52270f1a2e2997b4549dbe1e7721b0539a1de23cd35391bd8e40a2142c4b1213529934004e2666beaeb4c482eed34dca3f4b12cf88997ae4404d95c3cc166101f06b650ef062497659ef86aeb0897b387459ff9c34af5f2b29d784eff72d9f88c4dcdb4f514f1d8fdb5b845939258272fe757491181212b8aaae612499112c03bfd98fea680c82501346335f7a05b70e4fcdf90f6ea385ab3b9ef602358960d8ef9201ee5d89463d75d619e9db06e1d45e64e5fa03c067fc8e53f174d2596b664312d896be456a39937601ea48f0b541c638317c3da817ae8cab65dbb416ee735c1a37ad0f4d921521656fceb7984c2724d6f79a78422e9236970a534de2feb70049a318b8f3bacb99dde63657b64e26fa74e94a094e21c16359f6dbbc32a22e5fbc97fb9e606760d9122564a4f0ab4592f9268b105e63a3eee4a690bd82fce14fe14139a5eaf142a77f76ecdd956ec3ad0a22d6907dfeab7eab2c052098e3160c634e37d4d9a228de28fc0aab17e439765950898014dbfadd633b5d0c21576fa4ef6d6ee76e99b60de0a73d65e48487ccb4d0b4182a3996153bf80820c4b8ec94696a6814b49822af2deb9810bc4d0a4810e8223c587b76dde6bb9e7e8c1b1f6a9d3affba834ac98b4e0cb62768d7abea62d0674cf1383e124a5aecd1af8f948334badbeff53b88151bde8c66b6efe10464b8c08ba8889783b9a0966d438273fe398170786a933f92923be7248ee73b95cd05aea6a3eb8040b3f420c5494004b0527717c8fae06f64126e995bd067e49111d8f0baf33a73433665c52604e9d7a793f0956f142bfdd57bee8596f1aaf46d678a5cb4e26a5f72d02bad087280c0eaac245100283253393cb9a336e0fc7d23fea0219b66872079803d2845cd2b46c2aa59aebfe6c38abfa1f62a3059fb96aac7bee6086242ea0393a46353c6f674f321b3d12661a093759beab8919c0d3d3693f59f0773dfb20a340de2b5a03501e72360396149e856c2624ff4c3f10f0984ef3e4311dd4be577fc6295d7436c97856a5d3873cf415b8455a9c4f298bddf628c44198f659077271b2e0405d79fdf7316531649c1d60e6dada37b9d5f27e0d8e4239530d057118394070e308ff52a4e7e53c3f400dd8ef6429e3d117a9b163cf1deb4cfd0a96d1ac9fe12b04a53b3fed8bed84e4d085bd8b2f51d6d622c0ebe9f2e68d79db65284dfcf3c6895a8bb3e108033406fae042d6906835356a98b45d3e62d9f21e9a5ad200875d5d90f5c29cbfa3e81f2d760429ee4e228e112be3ff92579fd239ab27f5632b3ad2d3b3b77fc0164c0f9b4fa598a808208b28a938f1608445f250d1f3e91911b5174a2099084dbca78a9acbdeb063eb90aa9d9ab6b37bce04e4d44b5ba0dcf4c262b50a3f8f25e25b1bb8349d62f39c88a5bdb294c662e6562ad5556878c5dca99ab754238cce468de17983f9512a33eb052d1e7f05b388f6eb548b3e5294c11f7a86e928e03d3ee188ba9e25f804a2e67183bdf9d2ee590b53c4eefc9412f7fdca10f1e4ae7ddbeaa0b68be88e94654d9a02b6818b7994a80c6d49c1579496260ffd62a48300fa6c37acd48f4b0b6f3bb4fc14e7833cf26e73bfffec81189dbdca35b69edccfbbf187f915dc81bc964563dbda06e02bca521cc761a96a8541ae702c8ba42308e949e2911602e5debd9a54821a8a30248b6473b5927ca852799048983754fa367087c9178465bf834c7fc4df1d60830b667310fda164e283e747625e0ac55c4e66cd701c7f457b027ffa611b20b6bb7d85698049596ed8a828d8f70d0ce5af03744d70330daf27234ef6696d8bbe62e6bfbdcadd99273a30568eef564b90b509499d9470c1b16351e0002f6b1f371cc56f5bb647121eec2162161d3afb149ea6759600687c335731612088a7071aa8f015d243a729fd9a6fd5c3c697fae7e7bcde31c56c54239b8e4d6b198d0bf0e7bd540772a8c50dcfbbef783b07a1fcccbf7b337b4caf631665eab4667b9885bbc71bb8fb1dcac17b63e89beb9e1bc892ceafae23a284edd9bc5c18d1311774970996622448b964ffd8a447f5e035fb923459925f53f7680d1088aefae04d95935c1063a66372576647e1aa10b9a2ba1f27f386a08601cb5230a576588e420a58b4ed39061c4375a9a63d52cd14d3a076d1ca9504cfeff117e0c8b401a045fe463449669e4227f7c938d966418a07930b1e8d4a5896bb498a25c0002c8a0cff0c840d2d72e0cc628e571342b63aabae5dff208a14ebe4741188aa08d4d0cec27785fca06b56d0f5f933dafcd8ddca93e8ee7ef64bc7a17a28ce5bdaf0e417009a6fb3c98550aba6b75caec8f202b6ec2e259fddc210cebd1271a260fbf90174ea26cbcef76a4943760d62b4c55860470396b1bb6f87065955e1b0839da120a7422676bc1c6c63dc8170e26b1633d69b759176cd0ff9d7056f6e1459440ac8b83884a2cc515e407981aacd52e3b17e29644e4e975cbb3ff314fc8c4485eabf82e5e97a104d02306c5194df16a2e433651242fdd0ca1d1e2953674192d4e89e03c501353d4a974b97449070114d39f54034b7bb127d22a7e67b16b79e455eea8b9e71929d48f9fa9ecc726d235f3650694d72517e4af22647640d52755ed7f0662ce268a0d46e59bd1c3a61a115e0b57ec5ebd26dd47905f7194829446a639b2c7aa8ac48d3e4eedcaa7e5c4a303b75cc09e40c483a47020ef8985dde34123ad2b29d815524d42ebadf7488bf9af70e9f1a60bccb36749da075d82deb5bcc7208381868f5639885a0c82aa4761a9888086320573b28718ffe6bcfdcfbf92124bd59c999e876d407a6c05fe64f61e5069478b3b71d1800c256de6b5f34ce7c373af080074ab5267cba56fc9777e3a1b2525095989db2d1ef0928adacb047ba58ca6ea9a5221884811d01f8ae377209e330381e939591420058a8cc3e6bf29acf889d441a6175ef7a0d2d5cc0c758e7180ab292f732244ac54ccf71e9c6b1a140a91d3bac589a8e67d0eea1601f8931786738f6786c70c460719de5ee63415bdefcb30e5171affb70cf2ff2ae6bcf71f7a64b08f204de8f2e79016b7f88d53d3b815117127e2807a990660cdb1418dfc097d2d228964009494043897d5c8f69b9852516012822076997d350d406c825605bf7b60fb3bd0513ad6f2305945b3198227717eadd8cd318475a1997cefeb00d52e3f8a75cf944921a1862bfe249625af1bb4382af87614438634120258c2ec43ad0a23c77d2bb80d29c067f35180448f478c652b50a15ae717a0b19c2e41d56cd5ce576b41cf089f18c1652f2413ac21bb5daeae5f3d1bb8203751e221c71c333d6ebdc761db5e38e0abaa045b21769fef32da3453554b616e1ae878caae50653eb1b0c7776b9b7bb372f33340728353d696d34c204bb5ca4010ef73c9d379c13b36f21cf9457e2ece5e790f4cabafc9618dda53afed92dfaec6f8edebf25a688f4a3955d714f4f0e9eb88139ec0946ed7a3a73fd049ac7667aa42b933d45e77f70f784d5a127ff82e0fd953f696352da03a4ffe298ace1be2ccb6e35d0d0fea107845f24248ee210dfb8f8cce13883bff0644dcc3128ff728fa02259d957027452770fb9232501b911912c7bf2fe37fc5239989f0f585c48fd407d9acda10cac15cf027a269a131940560612e308dab097f5ceed8923964a507365b3d848cf3bcf6df803e6b5279aed62aaed9f53abb4b3de36919d9970398ba23284e6656aba948ccb5517255edec38d5fcf4703b075fc903d25fbf7d7b9b3e667a63deb596d5bfd03c505041404704079e9d66cbf3958cdd096bf0e641048a5afe8dbe3c4af281010ca84c425fc6cd536407f00cec3c4a0fb30ebd81f3daffed80b6b64717ee3f3a7e3c1640b654b69086dee1b429a8ec26933d112f62f758f6964b0600a9ee2f5a9de72c625e329ac5443720b524fb81903882ccd1e481dbacc11aca2d0559219fa8ed67a6842fc0cfdb1c292dc278b53a031c18dbdd50ae597f5a1525a2fb261ed56a52305cb6c02d5d8cc66c483c3ffac8e4e3ee16e33d82505c2f15bbda83f51c7311c3dafad0f55ae15323a8a7e521d80642bee8bdb0d87361b638d7c57ef55084d1d6b0c400bd84a882f5ae280e641d56ac597d8e9dd5043ed9ed10c5a7345591585e963cf05d9a8e000070e4846e2f697c086177a8f63955a99a096243443ee4ca29d6ecbe9eb620045e1b8ddcc55461f3bda07abf461e0268654b9dfd01771e9a394576de332df33a1a1daec17b5ab9f1d080d7343a5a5a48a2ef509af92fd8ab4fedb160683331eadf6227b8830a8b7a0c11252b88a1369189446f24e7674d77bdbbd009ff4b81af28f4b8f0616ff289de0e3e7279f3af7aa114c1f0f294159c0109ed39f240058f42d5dd3b244850286e13296da37a5a9cb08cb082224d11c304fc1272ba4063e46b14b22f60b82f0308fcc4fcf692e0517a78c028e0b40a666e5ff1c08897935525fe0b5f08f6560a966694cbda6a5ec94db6fb28361676f7eded72ef0ef344cc74e68022860cf7dacd039d635b9b2f1b03bd77c4049c9acbe5a7479247c02e9064e53745bc6e187bcdc2810fd6dd2c76bff7644a8216c6b7d1a9e950ac4a8e4d6fb514a1cf51369c05d473ed48970cb8c0efdd7efddbbb0b322794eed2c7b1163c387c3da46510cefc44781c6ef5f16e35d1f328c53b56cdd9d2ee788f90a1337dc59e7ee7e624df7b98bbbd8aa601d8c71723e37ead86334022c4cef948e563945a00e8842fa544fef852d3c03d561639210537c90b74c286a0bdeea1eaab1fb1bc1e50baa509f3b796c7cf33c50a80e9b44651d84e1fd58738bd94d812bc1e23f32e0a2c0ccce643cefe5b4fd2acc8f811242a24634886674d36b2196720cb0189f6f5f11b0a651ed11af53f6b225a885f6a754f092ebbb5b7d492be4cfe42b3aba2a9ac1aef49a493682015a97667682a543c96414fef3c81c34e848f601214d805d857e8c310256037be54eb146b5e255c490760b9952232d4d177d6a70d39b5644bae6747b37ca9c08b2838715b2f9e8bb06c892f4a95d90306d28f0a4f89b3aeb87d272f046e4482348691f9067f1bb2aff606705e14e276feeb8de01bf665e8af4e389f66b42766ff2953818852e4f4fa085cdae532b068cb06f228258850d99842447570d3abcc469fe87c246420d0f5b8082cc7bf9790b70ac5743375a2b4a7b1cad7ede3b5ab3788778d5d32e5e4109e4198dde020f8e0ab5561efaed54c5862849bb6a990baea2c7403e147b21c193302ee1f512143c545a34f8d7f3a8ecb3d7e0c37a87ab4cb259eae78cb83d4835db6814d999663e0c7a90eac6573795d32ec5bd655c15dada8e348bdd91ff03bfedee0a10da85f46b199b79941ee47e255ff3b7698cfa6307c96e1aacaa18978d849232d6ac44c085b56c8d63056d4482e8504fd0d26e8d9e3fef5ba36edfe30cf43def0ae47953e7f14df58bb93cd82012c92763298cfcf85e846a0fbd3e4e67af943d18e591639c6da79cdc0cf12995f292bc739aadcd7b108605e077b799ec399124f53c2245bd7311bf9fa029fc8dbecd798606b452b6d0cae3b5aa986235537fe2810a88494706deb21b733de6830439697c642f4c91df16b9b10a41d1553d7472257577f6cc4c793b59d5602d6ce4cf6a5a618f0879a50243941b58c57194d439360660f8cede1bcc26be98df0802a9cc50c87e1a3c3646206bd999dadc08b72c3238c737704d9be4a47c005e146f933ff8218ad9ea1e3f43ff8bc6386eb84bae12e6d62547d6ae9a5566d4b2593c782c7c0d2f451b1c1be30f094937a896e74417ed0757d5944111a924cc6561992540460e605ea2983703d8e17dcc4e2bac1c4b9076a47963cf57066601f934db2acb07b4ed43e623835995c5c8f8f228e63b1a04ca1af56cb47ea01a633f6b5f2ad7083e5f6aafdc0379b05bcb285cf5c3aec8ad75a20a94d1894a13348c45bf49eb25f77a7adf801f63e16ac2de6c51b38c9583f0e0bbb4626e3ebfa4c5f69c9582ade239e1f4540fc07e67e5bcadeeb04a63d36dffb5d1e93a9dbf66d4e21f13b27590b9d98047b4eefb84ffa2c4229087ce605688d09355410dc09e1f0225c421c53ee66affb08caf60c53e938f435189520d5ede331e171637a778790f4f7bc636bd33887f32bd3b5293af0a8dc15152c5e34c3bc0ac06e13a469f1d666d544ca02dc7e1e60a201ea3a8278b5350a4361acb03cb783d11cc21bd5fa32b42e316a845f37e6ee87e7b021efe8e7dc60e01784c7572f952b0e75e030a4ae14377b70e8991695ae5c858ed80fe7033a94e35bc8291465cfdd28f32ec33eb3b261d27d755a96e018fffe14689619b3bd9fc62d0b65b16e8861cfc6fd39358d0fe0d272642506cf042b942e6f65891ff87c08abecf28f6540613af61a763737a7b683651172624d07fb59ee535219b28610195bdfdda01df5ef9cf61386b83a6fd8b0decfeace868e64c074b4e92f35d7798e9963d34b3b779ece585c1f2ab785fadabebe115d8843662ab32906de90ee489b1cc97b601679affe3f9eb73b70d368ea21a44fe887207cc72bbd3217b251d9987856864382f82eec49ba3073cfbe7909c57a4a4edeab8811157e7f6ce5b77f1f5fc7e6b3b541d82d4e1d7d158cbf6f38b0ea791918f1435bff0a83ab2e1c8878fa415e167fd9bf7717cb9e55f0959ea95441ce134df9400aa70b0b98217e74268b74ef922d2d0e606484782967666a50417befa413a6cdfb2c237cc8680b73a282bf15d46d9a5c05a5d4a35c4f0295fc9c81e3ad8d35880c40a2ccfc0683e2930e4c7ba31b9a209ffb219c2675a724d268d3778ba82ffc1db392316d8d45a892090ddde689dca558bc6f0138890f3f945ccd01e2907c7396a4c6a7da09a29a9117f59e1cba96d71ff6b98644f082296fe42867036491b89fa68f88d37da9dbe5c0271ccce1bc748d93259f323a1e93e5fc56cd363e9bb324f8ada37967f4c70e2a9b683d70c01ceb8b8d060061ed63d28b33007eb6d1158d56790e25e191c48b86e5be2513d96f6700690c5a020351528bc6cf7c8711eba9a19a44539b0ad8f046047e85972f1602168d054e4c5fbfdebaeabcc680b504ce92547d6005c85681d508c31f394ea533eb5cc82adcaf86e48b2bd5ab72ca1feaddb5bba696e3f5f1c4b5a6496d5a6e8b3b13e180ae6856501858d36bcc0b9844f8914b5fe4157d41edde84e60409ffb30aecd7ce7d6e281b063e149cfaa560d3c821f811210507eb814f5c7722f1b769a12b0ddf81b0260fb28a57db24a5e0c56358c338db10ab754fc1d88509442ebea33d37b343565aaab5aaf5a34b568cf9328c54c519a39d3d59cf91f8bdcd5a0b7107d85aff62df85bc4bf8e080d6fad014825b96feaa7880ac069326f866df551c0da48ef95a7be63fd6ce354580909b243280cebbeb9bc9a9121a4264a60e2563e21e04120404ae6a90435d311f302b8095e9eaf5bb7f1fa6a1ae620868e242dc0f69fa1f74f1077c4e21ec108caaa44e6f07e64765287135d9324585323127a67c1bbc4c258d4a3392c8f442ad65158646ac130f228ee1d4f7fb0088ca6bfcc970caa2c65e65bebdcd82a88cc1f51be687a54fc9e110baca1c12723746ab16a86b7e3713c701a46d64ecd9acbb0e081c7e1704637453244c2e3d63754535ebf6ff8f48efffe31448b74d70a50561d250e4aab508ebe863b883917f7ff0bf395833c4edd44947ea0a5ba2327521640ed228e1d1fd99f3e77b4a68b37767e6f1899ad75c29181a6cb9130a07b8b0f675d4a4e12228d5404c1d4c93bff1ca0e33c0b374badd5fc18820665858de17daf6c3075b8608e9022f49d2ddb42d4e0abbb886a64bc8699dfa42b72065432de638cbea255b9be3f087ed2a6335b58ff3ab1d4ac919f998b7a437f555c96760ebd2c1eacfa6b72515d34eb218601358bf8b928b84f862bf0149dc81ce7bb59d98fe4136d0c07b1cd04ac780eccbf73205d078aea281ef40d5abd69fc7953c472188cc6412152b09b8c66a13ae4a240b36392c0e0ec56cc9c46b8d1f99f97f0d8a3e7d424f635e5d31d0e2ddad517a94c87ccf28a3182320f6fea1cd208c14e0c4775b4054f5e2dc24c93956c2d5342c9b1529d00873921399b671d3258d59682d5a4a5cc3a26cd48d5a2e9198135be76f99b30c683478838ff5f702ffef168eb340c015888e6e7a9d2b57c26f062638234bfe9b525ae8d86ebe7b42b35e9b182e1f4e042d94e630fa39f0e5ee18cc1273024660692ea617ca205ebb6fb8c6561b17ed9e0974f5856260c65237ba7f65964fc4effed1aabbc38063820f498f438430117c768ab3d1cea7eb7ae3d6d497e0650dbb30f0357c144c88e96cfd4891d6444f8094e9e707c20b8518e54cd77d7ed7f4d8105e3ab843fc593307f0f79920cc7fd8110de7fbaba963782012c3dafa53af37f515b1c40bff9e65762a237fb0aef464787d0933ebc11ab44f57d2c0077ce2d98768bcf480922e16207f903234b79340e47be7e547d5e4bf469ac29f442449d995b3925fe8d6116c023d28bdc9b08e5dc1611060e7488988726fdfc5b80b8484f35cc7a664977709f4d4278a370574e07d4fe4eccfea08d3f63ab68209a7ba256056ad009db34d0aed96c9c29847b7278291f3f653e77cf27b6172c499dbdb5258e6d4c71d92d71eab05d24a6c69571065f7baaceb0d5341463c979a0f3cc6b7b83ef441dc116f1bd036f4cad0ac5f2306ccd436040176fc1f227d4c4cf38f089a8e829ebc0a00dad24cbdb35030c2b48ed773508b92ae71932b59a714b34804c083cce945882b21f3e5b05cd94b8a80086022920ec3708b217d5c2940395da6e657cdeedfb260d2498baf0448c3d0f4eea27275caeab5dc60548ac67b50b592065135bc50c4f57ea8b5985ccdb166993cf400d420dba3bebd8cd1e12a88e92175e492175f8915aa049750a43d135bd97ae638fc6f9dfe49df2900c2af60e58d541f637e9331cd2e514f92e3dc53f48dc7cd3b3a5acc44e52e398e396c4b541f5c0b1583fc5aea7ce181e0261559f153e0b75161e275553614c13e05966af4a97b5ed0296b6650169fd144b5b95d40f45cae7fee8bccf74d24ac4967dd170cc841bcd4ae6662cce6b4e58888642a81888d9013f4ff825c388551b244031510b196299346e0ff14bdcb227edde7262fbe8f84658b9130f31f08c87d90c1e6f6cb803dec46ee97aced787a0f326d8fb9e290cd6f8ffa54db462f10f91ddc4dabf153296ac672241dbdcd57edab82eb28d69ffe5cd155c43d15917c9092a07ce95baefeb80cc3cf3129d8e10c82802efd519e7f287dd87a4d64f1e76758112ffcd33237dab98e8db42eb96f5b357a32a1c9f93bf4ab4487e103b923eed708263d9a316a1d14006c28571246f757f9eaa915807c6c0ccc75d36cecc147a83199dee4b0a85dc609697f4a0a4c5b750b0b4b71f9503b9003643a464156635e6d6372a14af9af1d91d8d7e4e3fe6ee1bf844e9f5a45a33885e365384827aa12643f8cda6f62573187c691074e679c1ebd5a2586b950d67e5444306aea62bc7e1aadede7fd83d631ad004cd345fd935e3d110a0d886473e0485593cc1ff5c64c25ec985471236c2b89fb3fad92ecd4595eaf023ac8d689e65910a5b0e926ff025edafff95a5cd7926970f620fb41d979ee3b0ce1cbd180b6d0444a6297350a4ccbddc5e3b95c6e0830394c96e0a0ebb02bf214eb85b4ada5a4345a14833435d6862fc4b81b2ee8557049f699b95170bc887ecf6a8e324e4defb42ae5d3f42811e0d30c1f0a1283cb95e21fe8043d6584bb8d6359cae994cd5407b35e730b0efae5f098af816cdedec1c0829b95e43a4fb251e14a6e762409d9e6bdf62e7237cb2d0393aaaa7fd99f83705046ca285dcf7c55936d81c0c449a6dcfcb5c88c6d2279a203a0e5898a31d4a45ad04c3f2865db5b923a966d62620ea44d618f9f65606549d95bba6d12da53053c48b1988e2a76a77525e485285bade633b4ff4530e76e7f6098545c2d6ad57dde60d357f4d6288e998f7dcfe878c35c9ffef978d29b50e4f69d2fa8187f5e8d21b2dca66767dc75c056b128ec586d0b8f7ba7e9bec7fdd7e37814e07b1fc9c1f2277c70efb8c1bf0664a678003e19bd5f980659f4113971ca7e69364f020d20ee03c6d076b830de349a9e22906c35d34711cf6b9586a4b860a581a", 0x2000, &(0x7f00000166c0)={&(0x7f0000002780)={0x50, 0x0, 0x7, {0x7, 0x2d, 0x0, 0x20004, 0x96ec, 0x3, 0x0, 0x3, 0x0, 0x0, 0x10, 0x1}}, &(0x7f0000002800)={0x18, 0x0, 0x4757, {0x1}}, &(0x7f0000002840)={0x18, 0x0, 0x20, {0xa5}}, &(0x7f0000002880)={0x18, 0x0, 0xffffffffffffa34a, {0xdaa1}}, &(0x7f00000028c0)={0x18, 0xffffffffffffffda, 0xe2, {0x7}}, &(0x7f0000002900)={0x28, 0xd2ab643865d7f15f, 0x1, {{0x0, 0x7fff, 0x1}}}, &(0x7f0000002940)={0x60, 0xfffffffffffffffe, 0x1, {{0x1, 0xba9f, 0x7fffffff, 0x4, 0x4, 0x7, 0x833, 0x9}}}, &(0x7f00000029c0)={0x18, 0x0, 0xa529}, &(0x7f0000002a00)={0x13, 0xfffffffffffffffe, 0x2, {'-$\x00'}}, &(0x7f0000002a40)={0x20, 0xfffffffffffffffe, 0x41f, {0x0, 0xc}}, &(0x7f000000b2c0)={0x78, 0xffffffffffffffda, 0x4, {0x7f, 0x7ff, 0x0, {0x4, 0x8, 0xb0, 0x8, 0x3, 0x57, 0x7, 0xfffffffa, 0x8, 0xa000, 0x40, 0x0, 0x0, 0x401, 0x9}}}, &(0x7f000000b340)={0x90, 0xfffffffffffffff5, 0x1178, {0x1, 0x1, 0x4, 0x501, 0xff, 0xf641, {0x4, 0x5, 0x100, 0x8, 0x8, 0xffffffff80000000, 0x6, 0x0, 0x2, 0x2000, 0x39, 0x0, 0xee00, 0x50e, 0x80000001}}}, &(0x7f000000b400)={0x88, 0x0, 0x234a, [{0x3, 0x7, 0x2, 0x7, '-}'}, {0x3, 0x3ff, 0x0, 0x8}, {0x1, 0x85d, 0x7, 0x9, '&()&-*,'}, {0x0, 0x0, 0x8, 0x80000000, 'ethtool\x00'}]}, &(0x7f0000016080)={0x1f8, 0xffffffffffffffda, 0xffffffff00000001, [{{0x2, 0x2, 0x6, 0x10001, 0x2, 0x3ff, {0x2, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffff, 0x80000001, 0x4, 0x9, 0x1000, 0x800, 0x0, 0x0, 0x4, 0xffff}}, {0x0, 0x5, 0x1, 0x9, '&'}}, {{0x0, 0x3, 0x87, 0x8, 0x4dbdf6ba, 0x4, {0x1, 0x73, 0x6, 0x8, 0x63, 0x7, 0x8001, 0x5, 0x400, 0xc000, 0x3, 0x0, r8, 0x1, 0x80000001}}, {0x0, 0x7, 0xb, 0x2, '/dev/iommu\x00'}}, {{0x5, 0x3, 0x9, 0xffffffffffffffb5, 0x0, 0x5, {0x2, 0x4, 0x1, 0x8, 0x2, 0x2, 0x0, 0x2, 0x19e, 0x4000, 0x5, r9, r10, 0x8, 0x818}}, {0x4, 0xfffffffffffffffb, 0x1, 0x559, '\x00'}}]}, &(0x7f0000016340)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0x9, 0x9, 0x10001, 0x7, {0x2, 0x9, 0x200, 0x0, 0x7, 0x9, 0x10, 0x7, 0x7, 0x2000, 0xf67, r11, r12, 0x5, 0x7f}}, {0x0, 0x1b}}}, &(0x7f0000016400)={0x20, 0x0, 0x0, {0x0, 0x0, 0x3, 0x4}}, &(0x7f0000002d40)={0x130, 0x0, 0x100000000, {0x2, 0x8, 0x0, '\x00', {0x4000, 0x0, 0xfffffffffffffff9, 0x401, 0x0, r13, 0x6000, '\x00', 0x4, 0x5, 0x4, 0x80000000, {0xffffffff, 0x400}, {0x3ca0, 0x3240a2d1}, {0x6, 0x1ff}, {0x8000000000000000, 0x7}, 0x5, 0xf, 0xe320}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0xd73ab7b72c507cb9, 0xc, 0x829, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @rand_addr=0x64010101}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25270000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x20000040) 222.594096ms ago: executing program 4 (id=326): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f00000000c0)={0x0, 0xffff, 0x70, &(0x7f0000000040)={0x70, 0xd, {0x2, 0xb, 0x9, 0x10, 0x9, 0xf7, 0x9, 0x1c000000000000, 0x4}, {0xffffffff, 0x1, 0x4, 0x10, 0x2}, {0x7, 0x0, 0x1, 0x5}, {0xe6a8, 0x68, 0x8}}}) syz_open_dev$ublk_bdev(&(0x7f0000000000), r5, 0x80800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x48080) sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4}, {0xa, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x42}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48851}, 0x4000080) 220.811107ms ago: executing program 0 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug/page_tables/current_kernel\x00', &(0x7f00000007c0)='debugfs\x00', 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x10201, 0x0, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000380)="0fc7284625c87dc07148b8b9000000000000000f23d00f21f835100000070f23f848b8bcc585fc2fd3c5080f23d00f21f835000000080f23f8660fc7b374000000450fc7720ec48189c6168bc744240060000000c744240200380000ff2c2466baf80cb808122188ef66bafc0ced66ba610066ed", 0x74}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000840)=@vmx={0x3, 0x0, 0x2080, {0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xfc6, &(0x7f00000028c0)=ANY=[@ANYRES8=r1], 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000200)='p:__st/event1 ./file0:0x0 arg2=', 0x1f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) getsockopt(r6, 0x131, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) write(r7, 0x0, 0x0) 164.685336ms ago: executing program 2 (id=328): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) unshare(0x22020600) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4211, r2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)={0x200000, 0x0, 0x2b}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) personality(0x8) uname(&(0x7f0000000000)=""/67) 103.847421ms ago: executing program 2 (id=329): mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001240), 0x80200, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0xc048aeca, 0x0) 102.460491ms ago: executing program 1 (id=337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x400000000000140, 0x24008050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(r1) 55.096832ms ago: executing program 0 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x0, 0x80000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x0, 0x1}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x885}, 0x240000d0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = memfd_create(&(0x7f0000000300)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4001, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r4, 0x7fffd, 0x4) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0x12000, 0x1}) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "d2dad5", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000dc0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0xa0, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}, ' 1 integrity:8:none'}}]}) 54.995669ms ago: executing program 4 (id=331): socket(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x15f) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 53.639666ms ago: executing program 2 (id=332): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0xc5a, 0x7, 0x1, {0x22, 0x9c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xa, 0xae}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xa5, 0x1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x91, 0x7, 0xd, 0x20, 0x24}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x4, 0x8}]}, 0x2, [{0x17, &(0x7f0000000100)=@string={0x17, 0x3, "580e10a8c455900f355e7a2a62fea93b5d83a2c3ae"}}, {0x2d, &(0x7f0000000140)=@string={0x2d, 0x3, "253f72052ed350b1f906bdcb23b3feee06368b473bbb21f9cf62bc7bb34ff92a05c4a3c32501c8ea430912"}}]}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000002c0)={'comedi_bond\x00', [0x4, 0x4, 0x7fffffff, 0x9, 0xba4, 0x9, 0xfffffe3d, 0x890, 0x3, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9e6, 0x3, 0xb, 0x9, 0x101, 0x1, 0x10990f, 0x5, 0x18, 0x2, 0x2000006, 0x77ba]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 4 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xb95, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x75, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/cpu_byteorder', 0x200, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xf4, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x8, 0x7fffffff, 0x8, 0x5, 0x5, 0x2, 0x9, 0x7fffffff, 0x5, 0x1f, 0xd, 0xe, 0x40, 0x10001, 0xd979}}, @TCA_GRED_PARMS={0x38, 0x1, {0x8000, 0x5, 0x5, 0xa, 0x9, 0x7, 0x9, 0xf, 0x5, 0xfffffffd, 0x1b, 0xe, 0x13, 0x1, 0x9, 0x9}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1800, 0x7f, 0x3ff, 0xd, 0x9, 0xa, 0x7, 0x6, 0x0, 0x101, 0x2, 0x2, 0x20, 0x8, 0x2, 0x9}}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0xa, 0x1, 0x4}}, @TCA_GRED_PARMS={0x38, 0x1, {0x81, 0xffff, 0x10001, 0x10, 0x3, 0x7, 0xc, 0x40, 0x3, 0x7ff, 0x1d, 0xf, 0x12, 0xfd, 0xff, 0xfffffffa}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x6, 0x4094}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc085}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./security\x00', 0x1ff) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r7, 0xc01864cb, &(0x7f0000000300)={0x0, 0x0, 0xfffffdbc}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000004c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000740)={r8}) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./security/ima/policy\x00', 0x1, 0x0) listxattr(&(0x7f00000009c0)='./cgroup\x00', 0x0, 0x7) write(r9, &(0x7f0000000200)='appraise f', 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r11, 0x4188aec6, &(0x7f00000007c0)={0x0, [{0x3, 0x0, 0x5, 0x0}, {0x1, 0x178, 0x1, &(0x7f0000000980)="ef7ad77b2b5bfb118c9a39c110499b10ebb2e12199dc66a980e1ec7c1e8eb384eee7671249c1ede6a47a35174d09f4"}, {0x2, 0xfffffffffffffe92, 0x8001, 0x0}, {0x2, 0x0, 0x571, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x1c82, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x6, 0x0}]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x410400) kernel console output (not intermixed with test programs): 48.311654][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.313599][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.313610][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.313631][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.346262][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.353011][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.353379][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.355776][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.361260][ T5733] hsr_slave_0: entered promiscuous mode [ 48.361927][ T5733] hsr_slave_1: entered promiscuous mode [ 48.362525][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.362543][ T5733] Cannot create hsr debugfs directory [ 48.368584][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.373181][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.373907][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.382758][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.496428][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.498521][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.498863][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.500823][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.500994][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.501321][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.501674][ T5726] bridge_slave_0: entered allmulticast mode [ 48.502326][ T5726] bridge_slave_0: entered promiscuous mode [ 48.505846][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.505919][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.506016][ T5726] bridge_slave_1: entered allmulticast mode [ 48.507209][ T5726] bridge_slave_1: entered promiscuous mode [ 48.531758][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.533683][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.534068][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.535913][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.542628][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.558613][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.558708][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.559104][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.559192][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.563339][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.608335][ T5726] team0: Port device team_slave_0 added [ 48.617969][ T5726] team0: Port device team_slave_1 added [ 48.648469][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.648485][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.648507][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.649727][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.649771][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.649872][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.649933][ T5730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.661850][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.665746][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.667888][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.670477][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.687375][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.687389][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.687410][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.758968][ T5726] hsr_slave_0: entered promiscuous mode [ 48.759761][ T5726] hsr_slave_1: entered promiscuous mode [ 48.760277][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.760295][ T5726] Cannot create hsr debugfs directory [ 48.760461][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.765348][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.766293][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.770868][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.771546][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.776688][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.778262][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.782357][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.895026][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.927560][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.940616][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.940668][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.947180][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.967262][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.969307][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.971759][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.971823][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.974982][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.981572][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.981981][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.984386][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.987124][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.991203][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.009664][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.034211][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.034292][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.054771][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.054816][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.063969][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.081358][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.118914][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.138368][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.138415][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.147904][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.147948][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.166413][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.188303][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.210161][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.210248][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.211933][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.212012][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.290724][ T5090] Bluetooth: hci1: command tx timeout [ 49.290974][ T5734] Bluetooth: hci0: command tx timeout [ 49.290978][ T5090] Bluetooth: hci3: command tx timeout [ 49.291109][ T5090] Bluetooth: hci2: command tx timeout [ 49.381634][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.394032][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.431253][ T5731] veth0_vlan: entered promiscuous mode [ 49.445852][ T5731] veth1_vlan: entered promiscuous mode [ 49.453976][ T5730] veth0_vlan: entered promiscuous mode [ 49.464147][ T5730] veth1_vlan: entered promiscuous mode [ 49.477271][ T5731] veth0_macvtap: entered promiscuous mode [ 49.485533][ T5731] veth1_macvtap: entered promiscuous mode [ 49.488960][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.502982][ T5730] veth0_macvtap: entered promiscuous mode [ 49.505673][ T5730] veth1_macvtap: entered promiscuous mode [ 49.507227][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.520478][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.548594][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.570358][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.576806][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.586329][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.586900][ T5733] veth0_vlan: entered promiscuous mode [ 49.618819][ T5733] veth1_vlan: entered promiscuous mode [ 49.626501][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.626519][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.682231][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.682253][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.707869][ T5733] veth0_macvtap: entered promiscuous mode [ 49.712658][ T5733] veth1_macvtap: entered promiscuous mode [ 49.725163][ T5726] veth0_vlan: entered promiscuous mode [ 49.735734][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.736773][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.736784][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.746835][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.755347][ T5726] veth1_vlan: entered promiscuous mode [ 49.758591][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.770016][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.770148][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.770357][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.770522][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.771966][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.771983][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.801226][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.802559][ T5726] veth0_macvtap: entered promiscuous mode [ 49.814702][ T5726] veth1_macvtap: entered promiscuous mode [ 49.829506][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829544][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829565][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829583][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829601][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.831422][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.834470][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.859316][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.859334][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.867799][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.867817][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.891682][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891725][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891756][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891786][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891817][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.916459][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.916479][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.935864][ T5879] random: crng reseeded on system resumption [ 49.938310][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.938326][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.969179][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.041903][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.101767][ T5888] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.276362][ T5894] FAULT_INJECTION: forcing a failure. [ 50.276362][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 50.276407][ T5894] CPU: 2 UID: 0 PID: 5894 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 50.276420][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.276439][ T5894] Call Trace: [ 50.276444][ T5894] [ 50.276449][ T5894] dump_stack_lvl+0x100/0x190 [ 50.276469][ T5894] should_fail_ex.cold+0x5/0xa [ 50.276486][ T5894] should_failslab+0xc2/0x120 [ 50.276503][ T5894] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.276517][ T5894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.276530][ T5894] ? alloc_pwq+0x3ff/0xdd0 [ 50.276542][ T5894] alloc_pwq+0x3ff/0xdd0 [ 50.276555][ T5894] apply_wqattrs_prepare+0x3aa/0xbb0 [ 50.276571][ T5894] apply_workqueue_attrs_locked+0x64/0xe0 [ 50.276583][ T5894] __alloc_workqueue+0x9a7/0x1950 [ 50.276599][ T5894] alloc_workqueue_noprof+0xc7/0x130 [ 50.276612][ T5894] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 50.276624][ T5894] ? __pfx_dev_set_name+0x10/0x10 [ 50.276637][ T5894] ? __kasan_kmalloc+0xaa/0xb0 [ 50.276652][ T5894] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 50.276665][ T5894] hci_register_dev+0x1cf/0xcc0 [ 50.276682][ T5894] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 50.276730][ T5894] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 50.276748][ T5894] tty_ioctl+0x12f4/0x1870 [ 50.276763][ T5894] ? __pfx_tty_ioctl+0x10/0x10 [ 50.276776][ T5894] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 50.276796][ T5894] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.276815][ T5894] ? __fget_files+0x34/0x3d0 [ 50.276837][ T5894] ? selinux_file_ioctl+0x1e0/0x290 [ 50.276853][ T5894] ? selinux_file_ioctl+0x1e7/0x290 [ 50.276870][ T5894] ? __pfx_tty_ioctl+0x10/0x10 [ 50.276883][ T5894] __x64_sys_ioctl+0x18e/0x210 [ 50.276898][ T5894] do_syscall_64+0x123/0x790 [ 50.276912][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.276923][ T5894] RIP: 0033:0x7fddf159f559 [ 50.276933][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.276943][ T5894] RSP: 002b:00007fddf24f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.276965][ T5894] RAX: ffffffffffffffda RBX: 00007fddf1825fa0 RCX: 00007fddf159f559 [ 50.276972][ T5894] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000007 [ 50.276979][ T5894] RBP: 00007fddf1636b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.276985][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.276992][ T5894] R13: 00007fddf1826038 R14: 00007fddf1825fa0 R15: 00007ffdd4bf3358 [ 50.277006][ T5894] [ 50.277404][ T5894] Bluetooth: Can't register HCI device [ 50.291499][ T5896] Zero length message leads to an empty skb [ 50.483277][ T5900] fuse: Bad value for 'group_id' [ 50.483289][ T5900] fuse: Bad value for 'group_id' [ 50.489142][ T5900] overlay: ./file0 is not a directory [ 50.520869][ T5898] batman_adv: batadv0: Adding interface: syz_tun [ 50.520881][ T5898] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.520895][ T5898] batman_adv: batadv0: Interface activated: syz_tun [ 50.560030][ T5905] --map-set only usable from mangle table [ 50.575804][ T5905] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 50.590698][ T5908] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.590719][ T5908] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.590747][ T5908] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.592180][ T5908] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.596015][ T5908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.622555][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 50.622615][ T5908] batman_adv: batadv0: Interface deactivated: syz_tun [ 50.633927][ T5908] batman_adv: batadv0: Removing interface: syz_tun [ 50.640024][ T111] smbdirect: ib_dev[syz1] removed [ 50.645846][ T5803] infiniband syz1: ib_query_port failed (-19) [ 50.778902][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 50.804588][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 50.896364][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.370035][ T5734] Bluetooth: hci2: command tx timeout [ 51.370066][ T5090] Bluetooth: hci3: command tx timeout [ 51.370069][ T5734] Bluetooth: hci1: command tx timeout [ 51.370093][ T5734] Bluetooth: hci0: command tx timeout [ 51.681683][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.543035][ T5934] batman_adv: batadv0: Adding interface: syz_tun [ 52.543046][ T5934] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.543061][ T5934] batman_adv: batadv0: Interface activated: syz_tun [ 52.664524][ T5943] bridge_slave_0: left allmulticast mode [ 52.664552][ T5943] bridge_slave_0: left promiscuous mode [ 52.665262][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.669354][ T5943] bridge_slave_1: left allmulticast mode [ 52.673279][ T5943] bridge_slave_1: left promiscuous mode [ 52.673527][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.685259][ T5943] bond0: (slave bond_slave_0): Releasing backup interface [ 52.688630][ T5943] bond0: (slave bond_slave_1): Releasing backup interface [ 52.694918][ T5943] team0: Port device team_slave_0 removed [ 52.697058][ T5943] team0: Port device team_slave_1 removed [ 52.697401][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.697412][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.698141][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.698151][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.699131][ T5943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.719146][ T5943] team0: Mode changed to "activebackup" [ 52.721872][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 52.721882][ T42] audit: type=1400 audit(1792683299.079:295): avc: denied { ioctl } for pid=5942 comm="syz.3.25" path="socket:[7937]" dev="sockfs" ino=7937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.722706][ T42] audit: type=1400 audit(1792683299.079:296): avc: denied { getopt } for pid=5942 comm="syz.3.25" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.722902][ T5943] vxcan1: entered allmulticast mode [ 52.723501][ T5942] vxcan1: left allmulticast mode [ 52.771082][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.771096][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.798643][ T5950] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 52.798665][ T5950] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 52.798688][ T5950] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 52.806972][ T5950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.833596][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 52.833654][ T5950] batman_adv: batadv0: Interface deactivated: syz_tun [ 52.843513][ T5950] batman_adv: batadv0: Removing interface: syz_tun [ 52.851043][ T813] smbdirect: ib_dev[syz1] removed [ 52.855743][ T852] infiniband syz1: ib_query_port failed (-19) [ 52.897975][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.912981][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.913021][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.913044][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.938358][ T5954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=5954 comm=syz.1.30 [ 52.969552][ T5727] Bluetooth: hci4: command 0x1003 tx timeout [ 52.970276][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 53.004063][ T5958] netlink: 'syz.1.32': attribute type 6 has an invalid length. [ 53.007022][ T42] audit: type=1400 audit(1792683299.359:297): avc: denied { read write } for pid=5957 comm="syz.1.32" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.007048][ T42] audit: type=1400 audit(1792683299.359:298): avc: denied { open } for pid=5957 comm="syz.1.32" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.016922][ T5962] jffs2: notice: (5962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.021981][ T42] audit: type=1400 audit(1792683299.379:299): avc: denied { write } for pid=5961 comm="syz.2.33" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.022387][ T42] audit: type=1400 audit(1792683299.379:300): avc: denied { add_name } for pid=5961 comm="syz.2.33" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.022655][ T42] audit: type=1400 audit(1792683299.379:301): avc: denied { create } for pid=5961 comm="syz.2.33" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.025459][ T42] audit: type=1400 audit(1792683299.379:302): avc: denied { read write open } for pid=5961 comm="syz.2.33" path="/7/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.081691][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 53.082027][ T5967] xfrm0: entered promiscuous mode [ 53.082042][ T5967] xfrm0: entered allmulticast mode [ 53.087314][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 53.134083][ T42] audit: type=1400 audit(1792683299.489:303): avc: denied { write } for pid=5974 comm="syz.0.39" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.134378][ T5975] random: crng reseeded on system resumption [ 53.134373][ T42] audit: type=1400 audit(1792683299.489:304): avc: denied { open } for pid=5974 comm="syz.0.39" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.172760][ T5975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.236784][ T5975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.287630][ T5975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.329217][ T5975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.417473][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.428653][ T5820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.429534][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.441112][ T5820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.449628][ T5739] Bluetooth: hci3: command tx timeout [ 53.449658][ T5739] Bluetooth: hci2: command tx timeout [ 53.459833][ T5739] Bluetooth: hci1: command tx timeout [ 53.460542][ T5727] Bluetooth: hci0: command tx timeout [ 53.668483][ T5991] cgroup: fork rejected by pids controller in /syz3 [ 53.896031][ T6041] batman_adv: batadv0: Adding interface: syzkaller0 [ 53.896047][ T6041] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.896072][ T6041] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.016023][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 54.018512][ T5727] Bluetooth: hci1: ISO packet too small [ 54.159534][ T3380] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.312916][ T3380] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 54.315289][ T3380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.315330][ T3380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.315349][ T3380] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.317186][ T3380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.317205][ T3380] usb 5-1: Product: syz [ 54.317217][ T3380] usb 5-1: Manufacturer: syz [ 54.317231][ T3380] usb 5-1: SerialNumber: syz [ 54.561016][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.55'. [ 54.642187][ T6081] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 54.651753][ T6081] fuse: Unknown parameter 'f`' [ 54.653318][ T6081] process 'syz.3.58' launched '/dev/fd/3' with NULL argv: empty string added [ 54.830513][ T3380] usb 5-1: Cannot retrieve CPort count: -110 [ 54.830538][ T3380] usb 5-1: Cannot retrieve CPort count: -110 [ 54.830551][ T3380] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 54.869501][ T5803] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 54.966251][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.966484][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.030204][ T5803] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 55.031074][ T5803] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.031090][ T5803] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.031101][ T5803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 55.032643][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 55.032655][ T5803] usb 7-1: Product: syz [ 55.032662][ T5803] usb 7-1: Manufacturer: syz [ 55.032669][ T5803] usb 7-1: SerialNumber: syz [ 55.034210][ T5803] usb 7-1: config 0 descriptor?? [ 55.040758][ T5803] usb 7-1: selecting invalid altsetting 0 [ 55.086678][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.087587][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.130677][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.140047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.211074][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.211688][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.212818][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.245312][ T5829] usb 7-1: USB disconnect, device number 2 [ 55.539527][ T5727] Bluetooth: hci0: command tx timeout [ 55.539562][ T5727] Bluetooth: hci1: command tx timeout [ 55.539581][ T5727] Bluetooth: hci2: command tx timeout [ 55.539599][ T5727] Bluetooth: hci3: command tx timeout [ 55.766485][ T6097] overlay: Bad value for 'uuid' [ 55.793021][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'. [ 55.793124][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 55.825750][ T6097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.045334][ T6108] syzkaller0: entered promiscuous mode [ 56.045348][ T6108] syzkaller0: entered allmulticast mode [ 56.170243][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.539493][ T5803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.699456][ T5803] usb 8-1: Using ep0 maxpacket: 16 [ 56.700933][ T5803] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 56.704279][ T5803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.704292][ T5803] usb 8-1: Product: syz [ 56.704299][ T5803] usb 8-1: Manufacturer: syz [ 56.704306][ T5803] usb 8-1: SerialNumber: syz [ 56.853207][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.853450][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.891676][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.893933][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.909839][ T5803] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 56.915644][ T5803] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 56.915808][ T5803] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 56.915836][ T5803] usb 8-1: media controller created [ 56.925523][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.940772][ T6122] jffs2: notice: (6122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 56.964248][ T6090] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 56.975198][ T6090] batman_adv: batadv0: Removing interface: syzkaller0 [ 57.004072][ T5820] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.004114][ T5820] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.004160][ T5820] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.004187][ T5820] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.022973][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 57.037025][ T852] usb 5-1: USB disconnect, device number 2 [ 57.151292][ T5803] zl10353_read_register: readreg error (reg=127, ret==-110) [ 57.167209][ T5803] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 57.171917][ T5803] usb 8-1: USB disconnect, device number 2 [ 57.399618][ T852] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.579593][ T852] usb 5-1: Using ep0 maxpacket: 32 [ 57.581548][ T852] usb 5-1: New USB device found, idVendor=0fe6, idProduct=8101, bcdDevice=cb.ed [ 57.584093][ T852] usb 5-1: config 7 has an invalid interface number: 4 but max is 0 [ 57.584113][ T852] usb 5-1: config 7 has an invalid interface number: 10 but max is 0 [ 57.584130][ T852] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 57.584145][ T852] usb 5-1: config 7 has an invalid interface number: 229 but max is 0 [ 57.584160][ T852] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 1 [ 57.584177][ T852] usb 5-1: config 7 has no interface number 0 [ 57.584201][ T852] usb 5-1: config 7 has no interface number 1 [ 57.584213][ T852] usb 5-1: config 7 has no interface number 2 [ 57.584257][ T852] usb 5-1: config 7 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 57.584280][ T852] usb 5-1: too many endpoints for config 7 interface 10 altsetting 89: 233, using maximum allowed: 30 [ 57.584308][ T852] usb 5-1: config 7 interface 10 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 57.584327][ T852] usb 5-1: config 7 interface 10 altsetting 89 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 57.584347][ T852] usb 5-1: config 7 interface 10 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 57.584371][ T852] usb 5-1: config 7 interface 10 altsetting 89 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 57.584392][ T852] usb 5-1: config 7 interface 10 altsetting 89 has a duplicate endpoint with address 0x9, skipping [ 57.584409][ T852] usb 5-1: config 7 interface 10 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 233 [ 57.584431][ T852] usb 5-1: too many endpoints for config 7 interface 229 altsetting 118: 104, using maximum allowed: 30 [ 57.584459][ T852] usb 5-1: config 7 interface 229 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 57.584480][ T852] usb 5-1: config 7 interface 4 has no altsetting 0 [ 57.584495][ T852] usb 5-1: config 7 interface 10 has no altsetting 0 [ 57.584510][ T852] usb 5-1: config 7 interface 229 has no altsetting 0 [ 57.586809][ T852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.586827][ T852] usb 5-1: Product: syz [ 57.586840][ T852] usb 5-1: Manufacturer: ꭖ罠Ǥ䮷쎊ëµæ‡€åƒ²é´ì†é «éªì«á¡¡é“¦ç¥è„®æ°½áˆî€±ç˜ë›¦æ›™ï‡äœˆË¿á¶»î³¯åœµâ’œë±å¬Œè°Žî€·â½¾å§¬éŽížŠæ¦ê¾£å§Ÿî„¥Ë¬ë¿î’Žî¦Œëº‘뮮귕á±èªâ„젿㚕갲瞓伔憫䠻稥첔éªáœŠé¸“䫉嘆옑衙ꮬ奻㜂挻 [ 57.586861][ T852] usb 5-1: SerialNumber: syz [ 57.737411][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 57.737424][ T42] audit: type=1400 audit(1792683304.089:362): avc: denied { read write } for pid=6143 comm="syz.3.79" name="video4" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.737695][ T42] audit: type=1400 audit(1792683304.089:363): avc: denied { open } for pid=6143 comm="syz.3.79" path="/dev/video4" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.740884][ T42] audit: type=1400 audit(1792683304.099:364): avc: denied { ioctl } for pid=6143 comm="syz.3.79" path="/dev/video4" dev="devtmpfs" ino=958 ioctlcmd=0xc0d05605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.828909][ T852] dm9601 5-1:7.4: probe with driver dm9601 failed with error -22 [ 57.831937][ T852] dm9601 5-1:7.10: probe with driver dm9601 failed with error -22 [ 57.835448][ T852] dm9601 5-1:7.229: probe with driver dm9601 failed with error -22 [ 57.836909][ T852] usb 5-1: USB disconnect, device number 3 [ 57.854516][ T24] cfg80211: failed to load regulatory.db [ 57.876503][ T42] audit: type=1400 audit(1792683304.229:365): avc: denied { mount } for pid=6150 comm="syz.2.82" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.876959][ T42] audit: type=1400 audit(1792683304.229:366): avc: denied { search } for pid=6150 comm="syz.2.82" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.877088][ T42] audit: type=1400 audit(1792683304.229:367): avc: denied { search } for pid=6150 comm="syz.2.82" name="nullb" dev="configfs" ino=6361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.877700][ T42] audit: type=1400 audit(1792683304.229:368): avc: denied { write search } for pid=6150 comm="syz.2.82" name="nullb" dev="configfs" ino=6361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.877845][ T42] audit: type=1400 audit(1792683304.229:369): avc: denied { add_name } for pid=6150 comm="syz.2.82" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.878028][ T42] audit: type=1400 audit(1792683304.229:370): avc: denied { create } for pid=6150 comm="syz.2.82" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 57.882299][ T42] audit: type=1400 audit(1792683304.229:371): avc: denied { search } for pid=6150 comm="syz.2.82" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.906218][ T6151] null_blk: disk nullb1 created [ 58.059615][ T5829] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.209554][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 58.210259][ T5829] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.211168][ T5829] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 58.211190][ T5829] usb 8-1: config 0 has no interface number 0 [ 58.211219][ T5829] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.211248][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.215822][ T5829] usb 8-1: config 0 descriptor?? [ 58.224081][ T5829] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 58.250393][ T5803] net_ratelimit: 2 callbacks suppressed [ 58.250405][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.422159][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.422661][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.483716][ T6149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.484080][ T6149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.484530][ T6149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.485637][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.486171][ T6148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.490437][ T5829] usb 8-1: USB disconnect, device number 3 [ 58.637133][ T6164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.709211][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.927276][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.92'. [ 58.982926][ T6194] FAULT_INJECTION: forcing a failure. [ 58.982926][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 58.982947][ T6194] CPU: 3 UID: 0 PID: 6194 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) [ 58.982959][ T6194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.982966][ T6194] Call Trace: [ 58.982970][ T6194] [ 58.982975][ T6194] dump_stack_lvl+0x100/0x190 [ 58.982995][ T6194] should_fail_ex.cold+0x5/0xa [ 58.983012][ T6194] should_failslab+0xc2/0x120 [ 58.983030][ T6194] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.983045][ T6194] ? alloc_empty_file+0x5b/0x1c0 [ 58.983057][ T6194] alloc_empty_file+0x5b/0x1c0 [ 58.983067][ T6194] path_openat+0xd6/0x23f0 [ 58.983085][ T6194] ? __pfx_path_openat+0x10/0x10 [ 58.983104][ T6194] do_file_open+0x20e/0x430 [ 58.983121][ T6194] ? __pfx_do_file_open+0x10/0x10 [ 58.983147][ T6194] ? _raw_spin_unlock+0x28/0x50 [ 58.983163][ T6194] ? alloc_fd+0x471/0x7a0 [ 58.983183][ T6194] do_sys_openat2+0x163/0x1d0 [ 58.983200][ T6194] ? __pfx_do_sys_openat2+0x10/0x10 [ 58.983216][ T6194] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 58.983235][ T6194] __x64_sys_openat+0x12d/0x210 [ 58.983246][ T6194] ? __pfx___x64_sys_openat+0x10/0x10 [ 58.983260][ T6194] do_syscall_64+0x123/0x790 [ 58.983274][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.983286][ T6194] RIP: 0033:0x7f70c5b5fd8e [ 58.983296][ T6194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.983305][ T6194] RSP: 002b:00007f70c69d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.983317][ T6194] RAX: ffffffffffffffda RBX: 00007f70c69d56c0 RCX: 00007f70c5b5fd8e [ 58.983324][ T6194] RDX: 000000000014f600 RSI: 00007f70c69d4c00 RDI: ffffffffffffff9c [ 58.983330][ T6194] RBP: 00007f70c69d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 58.983336][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 58.983343][ T6194] R13: 00007f70c5e26038 R14: 00007f70c5e25fa0 R15: 00007ffc1155b188 [ 58.983357][ T6194] [ 59.008851][ T6196] db_root: cannot open: ./m [ 59.022261][ T6200] ubi0: attaching mtd0 [ 59.023553][ T6200] ubi0: scanning is finished [ 59.023578][ T6200] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 59.100919][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.102'. [ 59.162836][ T6200] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 59.228621][ T6214] xt_MASQUERADE: bad MAP_IPS. [ 59.300385][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.409538][ T29] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.463794][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.463934][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.559964][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.560847][ T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.560863][ T29] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 59.560874][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.562588][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.562600][ T29] usb 5-1: Product: syz [ 59.562607][ T29] usb 5-1: Manufacturer: syz [ 59.562614][ T29] usb 5-1: SerialNumber: syz [ 59.564068][ T29] usb 5-1: config 0 descriptor?? [ 59.566429][ T29] usb 5-1: selecting invalid altsetting 0 [ 59.766173][ T5739] Bluetooth: hci3: ACL packet too small [ 59.779545][ T29] usb 5-1: USB disconnect, device number 4 [ 59.800720][ T5739] Bluetooth: hci1: Malformed Event: 0x13 [ 60.331620][ T6235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.112'. [ 60.428162][ T6243] netlink: 168 bytes leftover after parsing attributes in process `syz.1.116'. [ 60.471700][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 60.524394][ T6256] random: crng reseeded on system resumption [ 60.528980][ T6256] xt_hashlimit: size too large, truncated to 1048576 [ 60.582625][ T6259] xt_hl: Unknown TTL match mode: 255 [ 60.666059][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.1.123'. [ 60.733219][ T6266] lo speed is unknown, defaulting to 1000 [ 60.733250][ T6266] lo speed is unknown, defaulting to 1000 [ 60.733693][ T6266] lo speed is unknown, defaulting to 1000 [ 60.734532][ T6266] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 60.734562][ T6266] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 60.734597][ T6266] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 60.737372][ T6266] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 60.748036][ T6266] lo speed is unknown, defaulting to 1000 [ 60.749318][ T6266] lo speed is unknown, defaulting to 1000 [ 60.750558][ T6266] lo speed is unknown, defaulting to 1000 [ 60.751586][ T6266] lo speed is unknown, defaulting to 1000 [ 60.791130][ T6269] tls_set_device_offload: netdev not found [ 60.975085][ T6290] netlink: 48 bytes leftover after parsing attributes in process `syz.3.133'. [ 61.068779][ T6294] ima: rule for LSM 'u' is undefined [ 61.074989][ T6293] ima: policy update failed [ 61.079514][ T6296] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 61.082512][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 61.519494][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.692779][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 61.693714][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.693752][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.700953][ T29] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 61.701189][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 61.701239][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 61.703190][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 61.703271][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 61.709073][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 61.714344][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 61.714405][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 61.716150][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 61.731552][ T6312] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 61.781867][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.142'. [ 61.890556][ T6321] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.890573][ T6321] overlayfs: failed to set xattr on upper [ 61.890577][ T6321] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.890581][ T6321] overlayfs: ...falling back to index=off. [ 61.890585][ T6321] overlayfs: ...falling back to uuid=null. [ 61.901591][ T6307] ======================================================= [ 61.901591][ T6307] WARNING: The mand mount option has been deprecated and [ 61.901591][ T6307] and is ignored by this kernel. Remove the mand [ 61.901591][ T6307] option from the mount to silence this warning. [ 61.901591][ T6307] ======================================================= [ 61.940691][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.986992][ T6325] netlink: 'syz.1.147': attribute type 49 has an invalid length. [ 61.988878][ T6325] bond0: (slave bond_slave_0): Releasing backup interface [ 62.014060][ T6325] bond_slave_0: entered promiscuous mode [ 62.014079][ T6325] bond_slave_0: entered allmulticast mode [ 62.033426][ T10] usb 7-1: USB disconnect, device number 3 [ 62.043277][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.050699][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.051224][ T10] keyspan 7-1:1.0: device disconnected [ 62.069187][ T6329] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.069371][ T6329] CIFS: Attempting to mount //127.0.0.1/share [ 62.583728][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.152'. [ 62.829534][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.904329][ T6329] CIFS: VFS: Error connecting to socket. Aborting operation. [ 62.904387][ T6329] CIFS: VFS: cifs_mount failed w/return code = -4 [ 62.932996][ T6370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.157'. [ 62.991232][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 62.991249][ T42] audit: type=1400 audit(1792683309.349:461): avc: denied { ioctl } for pid=6375 comm="syz.3.160" path="socket:[13857]" dev="sockfs" ino=13857 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.992357][ T42] audit: type=1400 audit(1792683309.349:462): avc: denied { setopt } for pid=6375 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.993992][ T42] audit: type=1400 audit(1792683309.349:463): avc: denied { name_bind } for pid=6375 comm="syz.3.160" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.994286][ T42] audit: type=1400 audit(1792683309.349:464): avc: denied { node_bind } for pid=6375 comm="syz.3.160" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.999960][ T10] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 63.000797][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.000811][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.002318][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 63.002331][ T10] usb 5-1: Product: syz [ 63.002338][ T10] usb 5-1: Manufacturer: syz [ 63.012247][ T6378] FAULT_INJECTION: forcing a failure. [ 63.012247][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 63.012266][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 63.012278][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.012285][ T6378] Call Trace: [ 63.012289][ T6378] [ 63.012293][ T6378] dump_stack_lvl+0x100/0x190 [ 63.012313][ T6378] should_fail_ex.cold+0x5/0xa [ 63.012329][ T6378] should_failslab+0xc2/0x120 [ 63.012346][ T6378] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 63.012361][ T6378] ? __alloc_skb+0x5b7/0x710 [ 63.012375][ T6378] ? __alloc_skb+0x140/0x710 [ 63.012396][ T6378] __alloc_skb+0x140/0x710 [ 63.012409][ T6378] ? __alloc_skb+0x5b7/0x710 [ 63.012422][ T6378] ? __pfx___alloc_skb+0x10/0x10 [ 63.012440][ T6378] netlink_alloc_large_skb+0x69/0x150 [ 63.012456][ T6378] netlink_sendmsg+0x755/0x10c0 [ 63.012472][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.012490][ T6378] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.012506][ T6378] ? ____sys_sendmsg+0xa4d/0xbe0 [ 63.012516][ T6378] ____sys_sendmsg+0xa4d/0xbe0 [ 63.012526][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.012541][ T6378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.012555][ T6378] ? lock_acquire+0x1d1/0x380 [ 63.012566][ T6378] ? get_pid_task+0x2a/0x250 [ 63.012580][ T6378] ___sys_sendmsg+0x190/0x1e0 [ 63.012593][ T6378] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.012604][ T6378] ? get_pid_task+0x106/0x250 [ 63.012622][ T6378] ? find_held_lock+0x2b/0x80 [ 63.012668][ T6378] __sys_sendmsg+0x160/0x210 [ 63.012686][ T6378] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.012707][ T6378] do_syscall_64+0x123/0x790 [ 63.012722][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.012733][ T6378] RIP: 0033:0x7fd6e339f559 [ 63.012742][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.012752][ T6378] RSP: 002b:00007fd6e15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.012763][ T6378] RAX: ffffffffffffffda RBX: 00007fd6e3625fa0 RCX: 00007fd6e339f559 [ 63.012770][ T6378] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 63.012776][ T6378] RBP: 00007fd6e15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.012782][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.012788][ T6378] R13: 00007fd6e3626038 R14: 00007fd6e3625fa0 R15: 00007ffd6a893028 [ 63.012802][ T6378] [ 63.014116][ T10] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 63.018146][ T10] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 63.022426][ T42] audit: type=1400 audit(1792683309.379:465): avc: denied { write } for pid=6375 comm="syz.3.160" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.074368][ T42] audit: type=1400 audit(1792683309.429:466): avc: denied { read write } for pid=6380 comm="syz.3.163" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.074880][ T6381] FAULT_INJECTION: forcing a failure. [ 63.074880][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 63.074900][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.1.162 Not tainted syzkaller #0 PREEMPT(full) [ 63.074912][ T6381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.074919][ T6381] Call Trace: [ 63.074923][ T6381] [ 63.074927][ T6381] dump_stack_lvl+0x100/0x190 [ 63.074948][ T6381] should_fail_ex.cold+0x5/0xa [ 63.074964][ T6381] should_failslab+0xc2/0x120 [ 63.074982][ T6381] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.074995][ T6381] ? snd_ctl_open+0x14f/0x5a0 [ 63.075012][ T6381] snd_ctl_open+0x14f/0x5a0 [ 63.075025][ T6381] ? __pfx_snd_ctl_open+0x10/0x10 [ 63.075038][ T6381] snd_open+0x201/0x450 [ 63.075054][ T6381] ? __pfx_snd_open+0x10/0x10 [ 63.075069][ T6381] chrdev_open+0x234/0x6a0 [ 63.075084][ T6381] ? __pfx_chrdev_open+0x10/0x10 [ 63.075100][ T6381] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 63.075115][ T6381] do_dentry_open+0x674/0x1470 [ 63.075130][ T6381] ? __pfx_chrdev_open+0x10/0x10 [ 63.075148][ T6381] vfs_open_consume+0xcc/0x460 [ 63.075167][ T6381] path_openat+0x1547/0x23f0 [ 63.075185][ T6381] ? __pfx_path_openat+0x10/0x10 [ 63.075204][ T6381] do_file_open+0x20e/0x430 [ 63.075220][ T6381] ? __pfx_do_file_open+0x10/0x10 [ 63.075245][ T6381] ? _raw_spin_unlock+0x28/0x50 [ 63.075262][ T6381] ? alloc_fd+0x471/0x7a0 [ 63.075281][ T6381] do_sys_openat2+0x163/0x1d0 [ 63.075298][ T6381] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.075314][ T6381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 63.075330][ T6381] __x64_sys_openat+0x12d/0x210 [ 63.075341][ T6381] ? __pfx___x64_sys_openat+0x10/0x10 [ 63.075356][ T6381] do_syscall_64+0x123/0x790 [ 63.075369][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.075388][ T6381] RIP: 0033:0x7fd6e335fd8e [ 63.075397][ T6381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.075408][ T6381] RSP: 002b:00007fd6e15f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.075419][ T6381] RAX: ffffffffffffffda RBX: 00007fd6e15f66c0 RCX: 00007fd6e335fd8e [ 63.075427][ T6381] RDX: 0000000000000000 RSI: 00007fd6e15f5c00 RDI: ffffffffffffff9c [ 63.075433][ T6381] RBP: 00007fd6e15f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 63.075440][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 63.075447][ T6381] R13: 00007fd6e3626038 R14: 00007fd6e3625fa0 R15: 00007ffd6a893028 [ 63.075461][ T6381] [ 63.076423][ T42] audit: type=1400 audit(1792683309.429:467): avc: denied { create } for pid=6379 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.076789][ T42] audit: type=1400 audit(1792683309.429:468): avc: denied { read write } for pid=6379 comm="syz.1.162" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.077012][ T42] audit: type=1400 audit(1792683309.429:469): avc: denied { open } for pid=6380 comm="syz.3.163" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.077037][ T42] audit: type=1400 audit(1792683309.429:470): avc: denied { open } for pid=6379 comm="syz.1.162" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.189077][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 63.359979][ T6412] fuse: Unknown parameter 'wpan0' [ 63.364588][ T5739] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 63.387262][ T1718] usb 5-1: USB disconnect, device number 5 [ 63.407223][ T1718] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 63.410030][ T1718] iuu_phoenix 5-1:1.0: device disconnected [ 63.450790][ T1352] net_ratelimit: 320 callbacks suppressed [ 63.450810][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.491888][ T6406] nvme nvme0: rdma connection establishment failed (-512) [ 63.516143][ T6423] Bluetooth: MGMT ver 1.23 [ 63.530396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.624929][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 63.625022][ T6433] FAULT_INJECTION: forcing a failure. [ 63.625022][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 63.625037][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) [ 63.625050][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.625057][ T6433] Call Trace: [ 63.625061][ T6433] [ 63.625065][ T6433] dump_stack_lvl+0x100/0x190 [ 63.625086][ T6433] should_fail_ex.cold+0x5/0xa [ 63.625103][ T6433] should_failslab+0xc2/0x120 [ 63.625120][ T6433] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 63.625136][ T6433] ? kasprintf+0xc7/0x100 [ 63.625149][ T6433] kvasprintf+0xbc/0x150 [ 63.625158][ T6433] ? __pfx_kvasprintf+0x10/0x10 [ 63.625169][ T6433] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.625181][ T6433] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.625192][ T6433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.625205][ T6433] kasprintf+0xc7/0x100 [ 63.625214][ T6433] ? __pfx_kasprintf+0x10/0x10 [ 63.625230][ T6433] ieee80211_alloc_led_names+0x86/0x420 [ 63.625249][ T6433] ieee80211_alloc_hw_nm+0x199b/0x2310 [ 63.625265][ T6433] mac80211_hwsim_new_radio+0x1de/0x6510 [ 63.625285][ T6433] ? __pfx__printk+0x10/0x10 [ 63.625295][ T6433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.625310][ T6433] ? rcu_is_watching+0x13/0xc0 [ 63.625331][ T6433] ? do_trace_netlink_extack+0x72/0x1e0 [ 63.625343][ T6433] ? __nla_validate_parse+0x1e7/0x28b0 [ 63.625361][ T6433] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 63.625381][ T6433] hwsim_new_radio_nl+0xc6b/0x13f0 [ 63.625398][ T6433] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 63.625418][ T6433] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 63.625435][ T6433] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 63.625455][ T6433] genl_family_rcv_msg_doit+0x214/0x300 [ 63.625472][ T6433] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.625492][ T6433] ? bpf_lsm_capable+0x9/0x10 [ 63.625502][ T6433] ? security_capable+0x80/0x260 [ 63.625517][ T6433] ? ns_capable+0xcd/0xf0 [ 63.625534][ T6433] genl_rcv_msg+0x560/0x800 [ 63.625552][ T6433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.625567][ T6433] ? __lock_acquire+0x5c0/0x1f40 [ 63.625578][ T6433] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 63.625595][ T6433] ? __lock_acquire+0x5c0/0x1f40 [ 63.625608][ T6433] netlink_rcv_skb+0x159/0x420 [ 63.625622][ T6433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.625638][ T6433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.625658][ T6433] ? netlink_deliver_tap+0x1ae/0xcc0 [ 63.625673][ T6433] genl_rcv+0x28/0x40 [ 63.625687][ T6433] netlink_unicast+0x65f/0x950 [ 63.625702][ T6433] ? __pfx_netlink_unicast+0x10/0x10 [ 63.625720][ T6433] netlink_sendmsg+0x9ac/0x10c0 [ 63.625737][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.625754][ T6433] ? selinux_socket_sendmsg+0x198/0x2f0 [ 63.625770][ T6433] ? ____sys_sendmsg+0xa4d/0xbe0 [ 63.625815][ T6433] ____sys_sendmsg+0xa4d/0xbe0 [ 63.625826][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.625841][ T6433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.625855][ T6433] ? lock_acquire+0x1d1/0x380 [ 63.625865][ T6433] ? get_pid_task+0x2a/0x250 [ 63.625880][ T6433] ___sys_sendmsg+0x190/0x1e0 [ 63.625893][ T6433] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.625904][ T6433] ? get_pid_task+0x106/0x250 [ 63.625923][ T6433] ? find_held_lock+0x2b/0x80 [ 63.625966][ T6433] __sys_sendmsg+0x160/0x210 [ 63.625982][ T6433] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.626004][ T6433] do_syscall_64+0x123/0x790 [ 63.626018][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.626029][ T6433] RIP: 0033:0x7fd6e339f559 [ 63.626039][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.626049][ T6433] RSP: 002b:00007fd6e15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.626060][ T6433] RAX: ffffffffffffffda RBX: 00007fd6e3625fa0 RCX: 00007fd6e339f559 [ 63.626066][ T6433] RDX: 0000000000000004 RSI: 0000200000000880 RDI: 0000000000000003 [ 63.626073][ T6433] RBP: 00007fd6e15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.626079][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.626085][ T6433] R13: 00007fd6e3626038 R14: 00007fd6e3625fa0 R15: 00007ffd6a893028 [ 63.626099][ T6433] [ 63.668333][ T6437] fuse: Unknown parameter 'group' [ 63.670669][ T6437] qrtr: Invalid version 0 [ 63.966144][ T6458] fuse: Unknown parameter 'g†oup_id' [ 63.967760][ T6458] 9pnet_virtio: no channels available for device syz [ 63.982526][ T6451] netfs: Duplicate cookie detected [ 63.982576][ T6451] netfs: O-cookie c=00000004 [fl=4008 na=0 nA=0 s=-] [ 63.982586][ T6451] netfs: O-cookie V=00000002 [9p,syz,] [ 63.982592][ T6451] netfs: O-key=[8] 'f9174c0400000000' [ 63.982598][ T6451] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 63.982606][ T6451] netfs: N-cookie V=00000002 [9p,syz,] [ 63.982611][ T6451] netfs: N-key=[8] 'f9174c0400000000' [ 64.096466][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 64.259548][ T1718] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.379105][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 64.410271][ T1718] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 64.413183][ T1718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.413199][ T1718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.413211][ T1718] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.414856][ T1718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 64.414869][ T1718] usb 5-1: Product: syz [ 64.414876][ T1718] usb 5-1: Manufacturer: syz [ 64.414883][ T1718] usb 5-1: SerialNumber: syz [ 64.490751][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.626143][ T1718] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 64.701633][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.701807][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.701929][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.702047][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.702164][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.702285][ T6508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.744355][ T6513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 64.785732][ T6515] comedi comedi2: pcl726: I/O base address or length out of range [ 64.821963][ T6520] FAULT_INJECTION: forcing a failure. [ 64.821963][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 64.821996][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.3.208 Not tainted syzkaller #0 PREEMPT(full) [ 64.822008][ T6520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.822023][ T6520] Call Trace: [ 64.822038][ T6520] [ 64.822043][ T6520] dump_stack_lvl+0x100/0x190 [ 64.822078][ T6520] should_fail_ex.cold+0x5/0xa [ 64.822095][ T6520] should_failslab+0xc2/0x120 [ 64.822121][ T6520] __kmalloc_flags_noprof+0x122/0x8e0 [ 64.822141][ T6520] ? find_held_lock+0x2b/0x80 [ 64.822156][ T6520] ? __pcs_replace_empty_main+0x132/0x650 [ 64.822168][ T6520] ? __pcs_replace_empty_main+0x3fa/0x650 [ 64.822181][ T6520] __pcs_replace_empty_main+0x3fa/0x650 [ 64.822195][ T6520] kmem_cache_alloc_node_noprof+0x4ed/0x6e0 [ 64.822210][ T6520] ? ovs_flow_alloc+0x10e/0x210 [ 64.822233][ T6520] ovs_flow_alloc+0x10e/0x210 [ 64.822249][ T6520] ovs_flow_cmd_new+0x231/0xe10 [ 64.822263][ T6520] ? kasan_save_stack+0x30/0x50 [ 64.822276][ T6520] ? kasan_save_track+0x14/0x30 [ 64.822290][ T6520] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 64.822301][ T6520] ? genl_family_rcv_msg_doit+0xc7/0x300 [ 64.822327][ T6520] ? netlink_rcv_skb+0x159/0x420 [ 64.822340][ T6520] ? genl_rcv+0x28/0x40 [ 64.822371][ T6520] ? netlink_unicast+0x65f/0x950 [ 64.822385][ T6520] ? __sys_sendmsg+0x160/0x210 [ 64.822409][ T6520] ? do_syscall_64+0x123/0x790 [ 64.822420][ T6520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.822454][ T6520] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 64.822470][ T6520] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 64.822490][ T6520] genl_family_rcv_msg_doit+0x214/0x300 [ 64.822507][ T6520] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 64.822527][ T6520] ? bpf_lsm_capable+0x9/0x10 [ 64.822546][ T6520] ? security_capable+0x80/0x260 [ 64.822569][ T6520] ? ns_capable+0xcd/0xf0 [ 64.822587][ T6520] genl_rcv_msg+0x560/0x800 [ 64.822604][ T6520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.822619][ T6520] ? __lock_acquire+0x5c0/0x1f40 [ 64.822630][ T6520] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 64.822647][ T6520] netlink_rcv_skb+0x159/0x420 [ 64.822660][ T6520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 64.822677][ T6520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.822697][ T6520] ? netlink_deliver_tap+0x1ae/0xcc0 [ 64.822712][ T6520] genl_rcv+0x28/0x40 [ 64.822729][ T6520] netlink_unicast+0x65f/0x950 [ 64.822745][ T6520] ? __pfx_netlink_unicast+0x10/0x10 [ 64.822763][ T6520] netlink_sendmsg+0x9ac/0x10c0 [ 64.822780][ T6520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.822798][ T6520] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.822821][ T6520] ? ____sys_sendmsg+0xa4d/0xbe0 [ 64.822831][ T6520] ____sys_sendmsg+0xa4d/0xbe0 [ 64.822841][ T6520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.822856][ T6520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.822870][ T6520] ? lock_acquire+0x1d1/0x380 [ 64.822881][ T6520] ? get_pid_task+0x2a/0x250 [ 64.822895][ T6520] ___sys_sendmsg+0x190/0x1e0 [ 64.822908][ T6520] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.822919][ T6520] ? get_pid_task+0x106/0x250 [ 64.822939][ T6520] ? find_held_lock+0x2b/0x80 [ 64.822962][ T6520] __sys_sendmsg+0x160/0x210 [ 64.822977][ T6520] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.823000][ T6520] do_syscall_64+0x123/0x790 [ 64.823013][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.823024][ T6520] RIP: 0033:0x7fddf159f559 [ 64.823034][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.823044][ T6520] RSP: 002b:00007fddf24f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.823063][ T6520] RAX: ffffffffffffffda RBX: 00007fddf1825fa0 RCX: 00007fddf159f559 [ 64.823069][ T6520] RDX: 000000000000c000 RSI: 0000200000000400 RDI: 0000000000000003 [ 64.823076][ T6520] RBP: 00007fddf24f8090 R08: 0000000000000000 R09: 0000000000000000 [ 64.823082][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.823088][ T6520] R13: 00007fddf1826038 R14: 00007fddf1825fa0 R15: 00007ffdd4bf3358 [ 64.823102][ T6520] [ 64.849749][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 64.877950][ T29] usb 5-1: USB disconnect, device number 6 [ 64.886030][ T6460] usblp0: removed [ 65.169508][ T1718] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.291458][ T6544] ip6t_hbh: Not strict - not implemented [ 65.319912][ T1718] usb 7-1: Using ep0 maxpacket: 8 [ 65.321561][ T1718] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.323854][ T1718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.323890][ T1718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.327558][ T1718] usb 7-1: config 0 descriptor?? [ 65.331504][ T6546] netlink: 'syz.1.215': attribute type 21 has an invalid length. [ 65.331615][ T6546] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 65.331627][ T6546] netlink: 'syz.1.215': attribute type 5 has an invalid length. [ 65.427026][ T6549] FAULT_INJECTION: forcing a failure. [ 65.427026][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 65.427059][ T6549] CPU: 3 UID: 0 PID: 6549 Comm: syz.0.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.427083][ T6549] Tainted: [L]=SOFTLOCKUP [ 65.427089][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.427098][ T6549] Call Trace: [ 65.427105][ T6549] [ 65.427112][ T6549] dump_stack_lvl+0x100/0x190 [ 65.427144][ T6549] should_fail_ex.cold+0x5/0xa [ 65.427171][ T6549] should_failslab+0xc2/0x120 [ 65.427195][ T6549] __kmalloc_noprof+0xfc/0x840 [ 65.427217][ T6549] ? ima_alloc_init_template+0xb6/0x6d0 [ 65.427263][ T6549] ima_alloc_init_template+0xb6/0x6d0 [ 65.427280][ T6549] ? d_absolute_path+0x136/0x1b0 [ 65.427310][ T6549] ? __pfx_d_absolute_path+0x10/0x10 [ 65.427336][ T6549] ima_store_measurement+0x1e3/0x5b0 [ 65.427357][ T6549] ? __pfx_ima_store_measurement+0x10/0x10 [ 65.427376][ T6549] ? ima_d_path+0x137/0x260 [ 65.427400][ T6549] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 65.427428][ T6549] process_measurement+0x19cc/0x2350 [ 65.427466][ T6549] ? __pfx_process_measurement+0x10/0x10 [ 65.427496][ T6549] ? lock_acquire+0x1d1/0x380 [ 65.427514][ T6549] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 65.427535][ T6549] ? find_held_lock+0x2b/0x80 [ 65.427557][ T6549] ? rcu_read_unlock+0x17/0x60 [ 65.427575][ T6549] ? rcu_read_unlock+0x17/0x60 [ 65.427616][ T6549] ? lockdep_init_map_type+0x5c/0x250 [ 65.427636][ T6549] ? mutex_init_lockdep+0xf1/0x120 [ 65.427659][ T6549] ima_file_check+0xbf/0x110 [ 65.427686][ T6549] ? __pfx_ima_file_check+0x10/0x10 [ 65.427719][ T6549] security_file_post_open+0xc4/0x210 [ 65.427745][ T6549] path_openat+0x5d0/0x23f0 [ 65.427789][ T6549] ? __pfx_path_openat+0x10/0x10 [ 65.427822][ T6549] do_file_open+0x20e/0x430 [ 65.427849][ T6549] ? __pfx_do_file_open+0x10/0x10 [ 65.427891][ T6549] ? alloc_fd+0x471/0x7a0 [ 65.427921][ T6549] ? do_getname+0x191/0x390 [ 65.427942][ T6549] do_sys_openat2+0x163/0x1d0 [ 65.427971][ T6549] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.427999][ T6549] ? __fget_files+0x21f/0x3d0 [ 65.428028][ T6549] __x64_sys_open+0xfe/0x1d0 [ 65.428045][ T6549] ? __pfx___x64_sys_open+0x10/0x10 [ 65.428061][ T6549] ? ksys_write+0x1ac/0x250 [ 65.428091][ T6549] do_syscall_64+0x123/0x790 [ 65.428113][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.428131][ T6549] RIP: 0033:0x7f70c5b9f559 [ 65.428146][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.428161][ T6549] RSP: 002b:00007f70c69d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 65.428179][ T6549] RAX: ffffffffffffffda RBX: 00007f70c5e25fa0 RCX: 00007f70c5b9f559 [ 65.428190][ T6549] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000780 [ 65.428201][ T6549] RBP: 00007f70c69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 65.428210][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.428220][ T6549] R13: 00007f70c5e26038 R14: 00007f70c5e25fa0 R15: 00007ffc1155b188 [ 65.428250][ T6549] [ 65.533013][ T1718] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.539548][ T5739] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 65.539953][ T5739] Bluetooth: hci0: command 0x1407 tx timeout [ 66.840412][ T6583] Falling back ldisc for ttyS3. [ 67.380920][ T5727] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 67.380956][ T5727] Bluetooth: hci0: Injecting HCI hardware error event [ 67.381621][ T5727] Bluetooth: hci0: hardware error 0x00 [ 67.466344][ T6611] FAULT_INJECTION: forcing a failure. [ 67.466344][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 67.466384][ T6611] CPU: 2 UID: 0 PID: 6611 Comm: syz.0.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.466399][ T6611] Tainted: [L]=SOFTLOCKUP [ 67.466403][ T6611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.466417][ T6611] Call Trace: [ 67.466441][ T6611] [ 67.466448][ T6611] dump_stack_lvl+0x100/0x190 [ 67.466482][ T6611] should_fail_ex.cold+0x5/0xa [ 67.466499][ T6611] should_failslab+0xc2/0x120 [ 67.466524][ T6611] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.466592][ T6611] ? find_held_lock+0x2b/0x80 [ 67.466607][ T6611] ? alloc_fs_context+0x57/0xf40 [ 67.466629][ T6611] alloc_fs_context+0x57/0xf40 [ 67.466641][ T6611] ? __get_fs_type+0xe3/0x200 [ 67.466654][ T6611] path_mount+0xf59/0x2850 [ 67.466668][ T6611] ? __pfx_path_mount+0x10/0x10 [ 67.466679][ T6611] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.466696][ T6611] ? putname+0xb1/0x110 [ 67.466712][ T6611] ? kmem_cache_free+0x127/0x6c0 [ 67.466728][ T6611] ? __x64_sys_mount+0x293/0x310 [ 67.466739][ T6611] __x64_sys_mount+0x293/0x310 [ 67.466750][ T6611] ? __pfx___x64_sys_mount+0x10/0x10 [ 67.466766][ T6611] do_syscall_64+0x123/0x790 [ 67.466780][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.466791][ T6611] RIP: 0033:0x7f70c5b9f559 [ 67.466802][ T6611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.466811][ T6611] RSP: 002b:00007f70c69d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.466829][ T6611] RAX: ffffffffffffffda RBX: 00007f70c5e25fa0 RCX: 00007f70c5b9f559 [ 67.466836][ T6611] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000000 [ 67.466842][ T6611] RBP: 00007f70c69d5090 R08: 0000200000000340 R09: 0000000000000000 [ 67.466849][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.466855][ T6611] R13: 00007f70c5e26038 R14: 00007f70c5e25fa0 R15: 00007ffc1155b188 [ 67.466869][ T6611] [ 67.796859][ T6618] comedi comedi1: Minor 2 could not be opened [ 67.857584][ T5829] usb 7-1: USB disconnect, device number 4 [ 67.923211][ T6626] binder: 6625:6626 ioctl c0306201 200000000900 returned -22 [ 67.926543][ T6626] __nla_validate_parse: 2 callbacks suppressed [ 67.926553][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 67.926562][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 68.057416][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 68.057485][ T42] audit: type=1400 audit(1792683314.409:513): avc: denied { listen } for pid=6627 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.231676][ T42] audit: type=1400 audit(1792683314.589:514): avc: denied { ioctl } for pid=6640 comm="syz.2.233" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x4028700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.234975][ T42] audit: type=1400 audit(1792683314.589:515): avc: denied { ioctl } for pid=6631 comm="syz.3.232" path="socket:[12217]" dev="sockfs" ino=12217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.235675][ T42] audit: type=1400 audit(1792683314.589:516): avc: denied { setopt } for pid=6631 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.235968][ T42] audit: type=1400 audit(1792683314.589:517): avc: denied { write } for pid=6631 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.276383][ T42] audit: type=1400 audit(1792683314.629:518): avc: denied { create } for pid=6642 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.276961][ T42] audit: type=1400 audit(1792683314.629:519): avc: denied { write } for pid=6642 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.443870][ T42] audit: type=1400 audit(1792683314.799:520): avc: denied { mounton } for pid=6644 comm="syz.2.235" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 68.443967][ T6645] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 68.445301][ T6645] cramfs: wrong magic [ 68.480885][ T6648] FAULT_INJECTION: forcing a failure. [ 68.480885][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.480923][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.2.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.480938][ T6648] Tainted: [L]=SOFTLOCKUP [ 68.480942][ T6648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.480955][ T6648] Call Trace: [ 68.480966][ T6648] [ 68.480971][ T6648] dump_stack_lvl+0x100/0x190 [ 68.481004][ T6648] should_fail_ex.cold+0x5/0xa [ 68.481021][ T6648] _copy_from_user+0x2e/0xd0 [ 68.481047][ T6648] snd_seq_event_dup+0x6b5/0x8a0 [ 68.481083][ T6648] ? __pfx_snd_seq_event_dup+0x10/0x10 [ 68.481101][ T6648] ? mark_held_locks+0x40/0x70 [ 68.481112][ T6648] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.481128][ T6648] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.481142][ T6648] snd_seq_client_enqueue_event.constprop.0+0x20b/0x4a0 [ 68.481161][ T6648] ? __pfx_snd_seq_client_enqueue_event.constprop.0+0x10/0x10 [ 68.481181][ T6648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.481203][ T6648] snd_seq_write+0x388/0x6d0 [ 68.481222][ T6648] ? __pfx_snd_seq_write+0x10/0x10 [ 68.481240][ T6648] ? bpf_lsm_file_permission+0x9/0x10 [ 68.481262][ T6648] ? security_file_permission+0x76/0x210 [ 68.481292][ T6648] ? rw_verify_area+0xce/0x6d0 [ 68.481311][ T6648] vfs_write+0x2aa/0x1050 [ 68.481325][ T6648] ? __pfx_snd_seq_write+0x10/0x10 [ 68.481340][ T6648] ? lock_acquire+0x1d1/0x380 [ 68.481355][ T6648] ? __fget_files+0x34/0x3d0 [ 68.481376][ T6648] ? __pfx_vfs_write+0x10/0x10 [ 68.481388][ T6648] ? find_held_lock+0x2b/0x80 [ 68.481402][ T6648] ? __fget_files+0x215/0x3d0 [ 68.481417][ T6648] ? __fget_files+0x215/0x3d0 [ 68.481435][ T6648] ? __fget_files+0x21f/0x3d0 [ 68.481454][ T6648] ksys_write+0x1f8/0x250 [ 68.481467][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 68.481500][ T6648] do_syscall_64+0x123/0x790 [ 68.481515][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.481526][ T6648] RIP: 0033:0x7f09f399f559 [ 68.481536][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.481547][ T6648] RSP: 002b:00007f09f4843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.481565][ T6648] RAX: ffffffffffffffda RBX: 00007f09f3c25fa0 RCX: 00007f09f399f559 [ 68.481573][ T6648] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 68.481580][ T6648] RBP: 00007f09f4843090 R08: 0000000000000000 R09: 0000000000000000 [ 68.481586][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.481592][ T6648] R13: 00007f09f3c26038 R14: 00007f09f3c25fa0 R15: 00007fff57f9b598 [ 68.481607][ T6648] [ 68.650224][ T1352] net_ratelimit: 5 callbacks suppressed [ 68.650244][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.801462][ T6653] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 68.801596][ T6653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 68.979891][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.451630][ T5727] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 69.691463][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.717818][ T6658] device-mapper: table: 248:1: too large device [ 69.717830][ T6658] device-mapper: ioctl: error adding target to table [ 69.979503][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.109550][ T10] usb 6-1: device descriptor read/64, error -71 [ 70.349497][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.479507][ T10] usb 6-1: device descriptor read/64, error -71 [ 70.599836][ T10] usb usb6-port1: attempt power cycle [ 70.729748][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.828561][ T6620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.913963][ T6671] netlink: 48 bytes leftover after parsing attributes in process `syz.3.244'. [ 70.949866][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.952827][ T42] audit: type=1400 audit(1792683317.309:521): avc: denied { write } for pid=6672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.961525][ T6680] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 70.962727][ T42] audit: type=1400 audit(1792683317.319:522): avc: denied { ioctl } for pid=6678 comm="syz.3.247" path="socket:[15452]" dev="sockfs" ino=15452 ioctlcmd=0x80047437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.970160][ T10] usb 6-1: device descriptor read/8, error -71 [ 71.041810][ T6689] capability: warning: `syz.0.251' uses deprecated v2 capabilities in a way that may be insecure [ 71.085904][ T6695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.253'. [ 71.092662][ T6687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.130720][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 71.137113][ T6700] bond0: entered promiscuous mode [ 71.138493][ T6700] gretap0: entered promiscuous mode [ 71.149083][ T6700] debugfs: 'hsr0' already exists in 'hsr' [ 71.149103][ T6700] Cannot create hsr debugfs directory [ 71.149264][ T6700] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 71.149275][ T6700] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 71.150676][ T6700] hsr0: entered promiscuous mode [ 71.182708][ T6703] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 71.184709][ T6703] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 71.215832][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.215910][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.219527][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 71.250523][ T10] usb 6-1: device descriptor read/8, error -71 [ 71.296838][ T6703] tmpfs: Bad value for 'mpol' [ 71.347850][ T6716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.257'. [ 71.361330][ T10] usb usb6-port1: unable to enumerate USB device [ 71.384819][ T6719] FAULT_INJECTION: forcing a failure. [ 71.384819][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 71.384850][ T6719] CPU: 2 UID: 0 PID: 6719 Comm: syz.0.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.384866][ T6719] Tainted: [L]=SOFTLOCKUP [ 71.384870][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.384884][ T6719] Call Trace: [ 71.384894][ T6719] [ 71.384900][ T6719] dump_stack_lvl+0x100/0x190 [ 71.384935][ T6719] should_fail_ex.cold+0x5/0xa [ 71.384951][ T6719] should_failslab+0xc2/0x120 [ 71.384976][ T6719] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 71.384999][ T6719] ? nvmf_parse_options+0x10a2/0x1f80 [ 71.385025][ T6719] kmemdup_nul+0x49/0xd0 [ 71.385044][ T6719] nvmf_parse_options+0x10a2/0x1f80 [ 71.385065][ T6719] ? __pfx_nvmf_parse_options+0x10/0x10 [ 71.385098][ T6719] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 71.385110][ T6719] ? nvmf_dev_write+0x14c/0xb60 [ 71.385127][ T6719] nvmf_dev_write+0x16c/0xb60 [ 71.385145][ T6719] vfs_write+0x2aa/0x1050 [ 71.385166][ T6719] ? __pfx_nvmf_dev_write+0x10/0x10 [ 71.385181][ T6719] ? lock_acquire+0x1d1/0x380 [ 71.385197][ T6719] ? __fget_files+0x34/0x3d0 [ 71.385219][ T6719] ? __pfx_vfs_write+0x10/0x10 [ 71.385231][ T6719] ? find_held_lock+0x2b/0x80 [ 71.385245][ T6719] ? __fget_files+0x215/0x3d0 [ 71.385260][ T6719] ? __fget_files+0x215/0x3d0 [ 71.385278][ T6719] ? __fget_files+0x21f/0x3d0 [ 71.385297][ T6719] ksys_write+0x12a/0x250 [ 71.385310][ T6719] ? __pfx_ksys_write+0x10/0x10 [ 71.385328][ T6719] do_syscall_64+0x123/0x790 [ 71.385345][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.385356][ T6719] RIP: 0033:0x7f70c5b9f559 [ 71.385366][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.385377][ T6719] RSP: 002b:00007f70c69d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.385395][ T6719] RAX: ffffffffffffffda RBX: 00007f70c5e25fa0 RCX: 00007f70c5b9f559 [ 71.385402][ T6719] RDX: 000000000000004b RSI: 0000200000000040 RDI: 0000000000000003 [ 71.385408][ T6719] RBP: 00007f70c69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 71.385414][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.385421][ T6719] R13: 00007f70c5e26038 R14: 00007f70c5e25fa0 R15: 00007ffc1155b188 [ 71.385435][ T6719] [ 71.457399][ T6727] tmpfs: Unknown parameter 'sixÖ' [ 71.656935][ T5820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.736693][ T5820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.780670][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.797985][ T6748] netlink: 108 bytes leftover after parsing attributes in process `syz.0.269'. [ 71.830680][ T5820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.862710][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.863814][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.867102][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.878343][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.878897][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.937739][ T5820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.015385][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.190337][ T5820] bond0 (unregistering): Released all slaves [ 72.206003][ T6763] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.299762][ T5790] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.345657][ T6763] lo speed is unknown, defaulting to 1000 [ 72.397245][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.469707][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 72.471487][ T5790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.473800][ T5790] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 72.473850][ T5790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.473872][ T5790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.473912][ T5790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 72.473934][ T5790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 72.473956][ T5790] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.474000][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.486139][ T5790] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 72.510564][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.278'. [ 72.616196][ T6819] FAULT_INJECTION: forcing a failure. [ 72.616196][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 72.616219][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.2.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.616235][ T6819] Tainted: [L]=SOFTLOCKUP [ 72.616239][ T6819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.616245][ T6819] Call Trace: [ 72.616250][ T6819] [ 72.616254][ T6819] dump_stack_lvl+0x100/0x190 [ 72.616275][ T6819] should_fail_ex.cold+0x5/0xa [ 72.616291][ T6819] should_failslab+0xc2/0x120 [ 72.616308][ T6819] __kmalloc_noprof+0xfc/0x840 [ 72.616323][ T6819] ? __register_sysctl_table+0xac/0x1650 [ 72.616351][ T6819] __register_sysctl_table+0xac/0x1650 [ 72.616367][ T6819] ? __pfx___register_sysctl_table+0x10/0x10 [ 72.616380][ T6819] ? snprintf+0xc7/0x100 [ 72.616392][ T6819] ? __pfx_snprintf+0x10/0x10 [ 72.616406][ T6819] register_net_sysctl_sz+0x325/0x420 [ 72.616424][ T6819] __addrconf_sysctl_register+0x1a2/0x360 [ 72.616449][ T6819] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 72.616465][ T6819] ? lockdep_init_map_type+0x5c/0x250 [ 72.616477][ T6819] ? mld_in_v1_mode+0x2b2/0x3a0 [ 72.616502][ T6819] addrconf_sysctl_register+0x163/0x200 [ 72.616517][ T6819] ipv6_add_dev+0xaf2/0x1520 [ 72.616534][ T6819] addrconf_notify+0xbd3/0x1ba0 [ 72.616545][ T6819] ? __pfx_tls_dev_event+0x10/0x10 [ 72.616560][ T6819] ? __pfx_addrconf_notify+0x10/0x10 [ 72.616571][ T6819] ? ip6mr_device_event+0x1c4/0x230 [ 72.616583][ T6819] notifier_call_chain+0x99/0x3f0 [ 72.616624][ T6819] call_netdevice_notifiers_info+0xbe/0x110 [ 72.616647][ T6819] netif_set_mtu_ext+0x48b/0x7b0 [ 72.616663][ T6819] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 72.616681][ T6819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.616695][ T6819] ? netdev_work_dequeue+0x10a/0x310 [ 72.616712][ T6819] ? __local_bh_enable_ip+0xa5/0x120 [ 72.616724][ T6819] ? netdev_work_dequeue+0x10a/0x310 [ 72.616736][ T6819] do_setlink.isra.0+0x7f9/0x3e60 [ 72.616757][ T6819] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 72.616777][ T6819] ? __lock_acquire+0x5c0/0x1f40 [ 72.616799][ T6819] ? do_raw_spin_lock+0x128/0x260 [ 72.616821][ T6819] ? find_held_lock+0x2b/0x80 [ 72.616845][ T6819] ? debug_mutex_remove_waiter+0xa0/0x320 [ 72.616865][ T6819] ? debug_mutex_remove_waiter+0xa0/0x320 [ 72.616882][ T6819] ? mark_held_locks+0x40/0x70 [ 72.616893][ T6819] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.616903][ T6819] ? __mutex_lock+0x824/0x1c10 [ 72.616914][ T6819] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.616927][ T6819] ? __mutex_lock+0x824/0x1c10 [ 72.616938][ T6819] ? __mutex_lock+0x267/0x1c10 [ 72.616950][ T6819] ? rtnl_newlink+0xac3/0x2620 [ 72.616968][ T6819] ? __pfx___mutex_lock+0x10/0x10 [ 72.616980][ T6819] ? rcu_is_watching+0x13/0xc0 [ 72.616995][ T6819] ? cap_capable+0x107/0x430 [ 72.617036][ T6819] ? netlink_ns_capable+0xfa/0x130 [ 72.617059][ T6819] rtnl_newlink+0x1dc4/0x2620 [ 72.617081][ T6819] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.617096][ T6819] ? avc_has_perm_noaudit+0x56/0x470 [ 72.617117][ T6819] ? find_held_lock+0x2b/0x80 [ 72.617131][ T6819] ? avc_has_perm_noaudit+0x11e/0x470 [ 72.617151][ T6819] ? avc_has_perm_noaudit+0x11e/0x470 [ 72.617174][ T6819] ? __lock_acquire+0x5c0/0x1f40 [ 72.617191][ T6819] ? lock_acquire+0x1d1/0x380 [ 72.617202][ T6819] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 72.617219][ T6819] ? find_held_lock+0x2b/0x80 [ 72.617233][ T6819] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.617249][ T6819] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.617266][ T6819] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.617283][ T6819] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.617301][ T6819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.617320][ T6819] ? __lock_acquire+0x5c0/0x1f40 [ 72.617335][ T6819] netlink_rcv_skb+0x159/0x420 [ 72.617349][ T6819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.617368][ T6819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.617387][ T6819] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.617403][ T6819] netlink_unicast+0x65f/0x950 [ 72.617419][ T6819] ? __pfx_netlink_unicast+0x10/0x10 [ 72.617437][ T6819] netlink_sendmsg+0x9ac/0x10c0 [ 72.617454][ T6819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.617473][ T6819] ? selinux_socket_sendmsg+0x198/0x2f0 [ 72.617489][ T6819] ? ____sys_sendmsg+0xa4d/0xbe0 [ 72.617500][ T6819] ____sys_sendmsg+0xa4d/0xbe0 [ 72.617510][ T6819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.617525][ T6819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.617540][ T6819] ? lock_acquire+0x1d1/0x380 [ 72.617551][ T6819] ? get_pid_task+0x2a/0x250 [ 72.617565][ T6819] ___sys_sendmsg+0x190/0x1e0 [ 72.617578][ T6819] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.617590][ T6819] ? get_pid_task+0x106/0x250 [ 72.617609][ T6819] ? find_held_lock+0x2b/0x80 [ 72.617633][ T6819] __sys_sendmsg+0x160/0x210 [ 72.617648][ T6819] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.617671][ T6819] do_syscall_64+0x123/0x790 [ 72.617685][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.617697][ T6819] RIP: 0033:0x7f09f399f559 [ 72.617708][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.617719][ T6819] RSP: 002b:00007f09f4843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.617730][ T6819] RAX: ffffffffffffffda RBX: 00007f09f3c25fa0 RCX: 00007f09f399f559 [ 72.617737][ T6819] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000004 [ 72.617744][ T6819] RBP: 00007f09f4843090 R08: 0000000000000000 R09: 0000000000000000 [ 72.617750][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.617756][ T6819] R13: 00007f09f3c26038 R14: 00007f09f3c25fa0 R15: 00007fff57f9b598 [ 72.617771][ T6819] [ 72.740172][ T6819] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 72.848881][ T6819] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 72.878842][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 72.887850][ T5820] hsr_slave_0: left promiscuous mode [ 72.890520][ T5820] hsr_slave_1: left promiscuous mode [ 72.895357][ T5820] veth1_macvtap: left promiscuous mode [ 72.895412][ T5820] veth0_macvtap: left promiscuous mode [ 72.895477][ T5820] veth1_vlan: left promiscuous mode [ 72.895515][ T5820] veth0_vlan: left promiscuous mode [ 72.968129][ T6827] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61721 sclass=netlink_xfrm_socket pid=6827 comm=syz.1.281 [ 73.092494][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 73.092519][ T42] audit: type=1400 audit(1792683319.449:607): avc: denied { transfer } for pid=6834 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.116758][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.116806][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.116862][ T6763] bridge_slave_0: entered allmulticast mode [ 73.117528][ T6763] bridge_slave_0: entered promiscuous mode [ 73.118711][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.118754][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.118808][ T6763] bridge_slave_1: entered allmulticast mode [ 73.119820][ T6763] bridge_slave_1: entered promiscuous mode [ 73.148181][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.150845][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.171928][ T6763] team0: Port device team_slave_0 added [ 73.174807][ T6763] team0: Port device team_slave_1 added [ 73.207767][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.207784][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.207841][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.210682][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.210694][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.210731][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.246311][ T6763] hsr_slave_0: entered promiscuous mode [ 73.247121][ T6763] hsr_slave_1: entered promiscuous mode [ 73.247743][ T6763] debugfs: 'hsr0' already exists in 'hsr' [ 73.247760][ T6763] Cannot create hsr debugfs directory [ 73.257447][ T42] audit: type=1400 audit(1792683319.609:608): avc: denied { write } for pid=6842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.314424][ T42] audit: type=1400 audit(1792683319.669:609): avc: denied { write } for pid=6845 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.333428][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 73.371156][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.380856][ T6763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.387511][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.391308][ T6763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.395462][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.396017][ T6763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.401480][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.402113][ T6763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.408043][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.433174][ T42] audit: type=1400 audit(1792683319.789:610): avc: denied { setopt } for pid=6855 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.435558][ T75] IPVS: starting estimator thread 0... [ 73.438058][ T6856] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 73.468252][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.472134][ T42] audit: type=1400 audit(1792683319.819:611): avc: denied { write } for pid=6857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.483615][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.496395][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.496475][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.500946][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.501028][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.515853][ T6862] FAULT_INJECTION: forcing a failure. [ 73.515853][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 73.515876][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.515892][ T6862] Tainted: [L]=SOFTLOCKUP [ 73.515896][ T6862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.515903][ T6862] Call Trace: [ 73.515907][ T6862] [ 73.515912][ T6862] dump_stack_lvl+0x100/0x190 [ 73.515933][ T6862] should_fail_ex.cold+0x5/0xa [ 73.515950][ T6862] should_failslab+0xc2/0x120 [ 73.515968][ T6862] __kmalloc_cache_noprof+0x91/0x6d0 [ 73.515982][ T6862] ? alloc_vfsmnt+0x72/0x840 [ 73.515998][ T6862] alloc_vfsmnt+0x72/0x840 [ 73.516012][ T6862] clone_mnt+0x4b/0x9c0 [ 73.516024][ T6862] ? _raw_spin_unlock+0x28/0x50 [ 73.516043][ T6862] lock_mount_exact+0x187/0x890 [ 73.516060][ T6862] create_new_namespace+0x34e/0xf60 [ 73.516075][ T6862] ? __pfx_create_new_namespace+0x10/0x10 [ 73.516089][ T6862] ? strncpy_from_user+0x19d/0x2d0 [ 73.516121][ T6862] ? vfs_open_tree+0x91e/0xb60 [ 73.516132][ T6862] vfs_open_tree+0x91e/0xb60 [ 73.516144][ T6862] ? _raw_spin_unlock+0x28/0x50 [ 73.516172][ T6862] ? __pfx_vfs_open_tree+0x10/0x10 [ 73.516189][ T6862] __x64_sys_open_tree+0xbe/0x150 [ 73.516203][ T6862] do_syscall_64+0x123/0x790 [ 73.516218][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.516230][ T6862] RIP: 0033:0x7f09f399f559 [ 73.516240][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.516251][ T6862] RSP: 002b:00007f09f4843028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 73.516263][ T6862] RAX: ffffffffffffffda RBX: 00007f09f3c25fa0 RCX: 00007f09f399f559 [ 73.516270][ T6862] RDX: 0000000000081802 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 73.516277][ T6862] RBP: 00007f09f3a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.516283][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.516289][ T6862] R13: 00007f09f3c26038 R14: 00007f09f3c25fa0 R15: 00007fff57f9b598 [ 73.516304][ T6862] [ 73.520547][ T6862] overlayfs: missing 'lowerdir' [ 73.529516][ T6858] IPVS: using max 43 ests per chain, 103200 per kthread [ 73.529814][ T6763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.529827][ T6763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.532251][ T42] audit: type=1400 audit(1792683319.889:612): avc: denied { write } for pid=6863 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.573871][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 73.635383][ T42] audit: type=1400 audit(1792683319.989:613): avc: denied { write } for pid=6868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.692083][ T42] audit: type=1400 audit(1792683320.049:614): avc: denied { write } for pid=6874 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.763912][ T42] audit: type=1400 audit(1792683320.119:615): avc: denied { write } for pid=6879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.807711][ T42] audit: type=1400 audit(1792683320.159:616): avc: denied { write } for pid=6884 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.807808][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.985776][ T6763] veth0_vlan: entered promiscuous mode [ 73.996471][ T6763] veth1_vlan: entered promiscuous mode [ 74.020352][ T6763] veth0_macvtap: entered promiscuous mode [ 74.023916][ T6763] veth1_macvtap: entered promiscuous mode [ 74.034556][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.041830][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.090427][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.090673][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100195][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.100209][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.118808][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.118822][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.179782][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.180494][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.810479][ T852] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 75.044201][ T9] usb 5-1: USB disconnect, device number 7 [ 78.527203][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 78.527221][ T42] audit: type=1400 audit(1792683324.879:630): avc: denied { write } for pid=6937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.578557][ T42] audit: type=1400 audit(1792683324.929:631): avc: denied { write } for pid=6940 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.350881][ T42] audit: type=1400 audit(1792683327.709:632): avc: denied { write } for pid=6948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.388254][ T42] audit: type=1400 audit(1792683327.739:633): avc: denied { write } for pid=6951 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.908008][ T42] audit: type=1400 audit(1792683329.259:634): avc: denied { write } for pid=6954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.951618][ T42] audit: type=1400 audit(1792683329.309:635): avc: denied { write } for pid=6957 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.759505][ T42] audit: type=1400 audit(1792683331.109:636): avc: denied { append } for pid=6968 comm="syz.0.287" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 84.872050][ T42] audit: type=1400 audit(1792683331.219:637): avc: denied { associate } for pid=6979 comm="syz.2.289" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.877177][ T42] audit: type=1400 audit(1792683331.229:638): avc: denied { write } for pid=6980 comm="syz.0.292" name="usb_gadget" dev="configfs" ino=2377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.877597][ T42] audit: type=1400 audit(1792683331.229:639): avc: denied { write } for pid=6980 comm="syz.0.292" name="configs" dev="configfs" ino=18327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.878232][ T42] audit: type=1400 audit(1792683331.229:640): avc: denied { write } for pid=6980 comm="syz.0.292" name="functions" dev="configfs" ino=18326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.880711][ T42] audit: type=1400 audit(1792683331.239:641): avc: denied { write } for pid=6980 comm="syz.0.292" name="c.1" dev="configfs" ino=18331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.880862][ T42] audit: type=1400 audit(1792683331.239:642): avc: denied { create } for pid=6980 comm="syz.0.292" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 84.881655][ T42] audit: type=1400 audit(1792683331.239:643): avc: denied { write } for pid=6980 comm="syz.0.292" name="c.1" dev="configfs" ino=18331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.919549][ T6972] netlink: 'syz.1.288': attribute type 25 has an invalid length. [ 84.932670][ T42] audit: type=1400 audit(1792683331.279:644): avc: denied { mounton } for pid=6965 comm="syz.2.289" path="/proc/194/task" dev="proc" ino=16886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 84.993058][ T6987] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 84.994316][ T42] audit: type=1400 audit(1792683331.349:645): avc: denied { bind } for pid=6986 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.063746][ T6995] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 85.149549][ T852] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.170654][ T5739] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 85.170673][ T5739] CPU: 2 UID: 0 PID: 5739 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.170701][ T5739] Tainted: [L]=SOFTLOCKUP [ 85.170705][ T5739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.170722][ T5739] Workqueue: hci3 hci_rx_work [ 85.170760][ T5739] Call Trace: [ 85.170764][ T5739] [ 85.170770][ T5739] dump_stack_lvl+0x100/0x190 [ 85.170799][ T5739] sysfs_warn_dup.cold+0x1c/0x28 [ 85.170835][ T5739] sysfs_create_dir_ns+0x24b/0x2b0 [ 85.170856][ T5739] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.170867][ T5739] ? find_held_lock+0x2b/0x80 [ 85.170891][ T5739] ? kobject_add_internal+0x25f/0x930 [ 85.170909][ T5739] ? kobject_add_internal+0x25f/0x930 [ 85.170935][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.170959][ T5739] kobject_add_internal+0x2c8/0x930 [ 85.170978][ T5739] kobject_add+0x16a/0x1e0 [ 85.171001][ T5739] ? __pfx_kobject_add+0x10/0x10 [ 85.171026][ T5739] ? class_to_subsys+0x10f/0x150 [ 85.171054][ T5739] ? kobject_put+0xb9/0x640 [ 85.171077][ T5739] ? _raw_spin_unlock+0x28/0x50 [ 85.171107][ T5739] device_add+0x294/0x1970 [ 85.171124][ T5739] ? __pfx_dev_set_name+0x10/0x10 [ 85.171142][ T5739] ? __pfx_device_add+0x10/0x10 [ 85.171159][ T5739] ? mgmt_send_event_skb+0x2fb/0x460 [ 85.171188][ T5739] hci_conn_add_sysfs+0x1a3/0x260 [ 85.171213][ T5739] le_conn_complete_evt+0x122f/0x2130 [ 85.171236][ T5739] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 85.171260][ T5739] ? hci_event_packet+0x186/0xcd0 [ 85.171289][ T5739] hci_le_conn_complete_evt+0x23c/0x3a0 [ 85.171313][ T5739] ? skb_pull_data+0x15f/0x1e0 [ 85.171327][ T5739] hci_le_meta_evt+0x34a/0x5f0 [ 85.171338][ T5739] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 85.171370][ T5739] hci_event_packet+0x51c/0xcd0 [ 85.171403][ T5739] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 85.171422][ T5739] ? __pfx_hci_event_packet+0x10/0x10 [ 85.171451][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.171466][ T5739] hci_rx_work+0x451/0xfc0 [ 85.171494][ T5739] process_one_work+0xac7/0x1b10 [ 85.171527][ T5739] ? __pfx_process_one_work+0x10/0x10 [ 85.171544][ T5739] ? lock_acquire+0x1d1/0x380 [ 85.171568][ T5739] ? __pfx_hci_rx_work+0x10/0x10 [ 85.171593][ T5739] worker_thread+0x5ef/0xe50 [ 85.171614][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 85.171639][ T5739] ? kthread+0x13a/0x450 [ 85.171653][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 85.171675][ T5739] kthread+0x373/0x450 [ 85.171697][ T5739] ? __pfx_kthread+0x10/0x10 [ 85.171713][ T5739] ret_from_fork+0x730/0xd60 [ 85.171737][ T5739] ? __pfx_ret_from_fork+0x10/0x10 [ 85.171751][ T5739] ? __switch_to+0x800/0x10e0 [ 85.171776][ T5739] ? __pfx_kthread+0x10/0x10 [ 85.171798][ T5739] ret_from_fork_asm+0x1a/0x30 [ 85.171821][ T5739] [ 85.171836][ T5739] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.171864][ T5739] Bluetooth: hci3: failed to register connection device [ 85.359485][ T1718] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.359959][ T852] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 85.362405][ T852] usb 5-1: Dual-Role OTG device on HNP port [ 85.362664][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.367569][ T852] gspca_main: spca501-2.14.0 probing 0000:0000 [ 85.367876][ T852] gspca_spca501: reg write: error -32 [ 85.367886][ T852] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 85.367951][ T852] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 85.511730][ T1718] usb 7-1: Using ep0 maxpacket: 8 [ 85.512869][ T1718] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.513742][ T1718] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 85.513777][ T1718] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.513795][ T1718] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.513813][ T1718] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 85.513829][ T1718] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 85.513842][ T1718] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.513872][ T1718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.516850][ T1718] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 85.679505][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.831650][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 85.832177][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.833121][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 85.833146][ T24] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.833178][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.833199][ T24] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.833218][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.833237][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.833257][ T24] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.833283][ T24] usb 9-1: config 168 interface 0 has no altsetting 0 [ 85.834529][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 85.834554][ T24] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.834580][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.834600][ T24] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.834620][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.834639][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.834658][ T24] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.834678][ T24] usb 9-1: config 168 interface 0 has no altsetting 0 [ 85.835578][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 85.835602][ T24] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.835628][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.835649][ T24] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.835667][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.835686][ T24] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.835706][ T24] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.835726][ T24] usb 9-1: config 168 interface 0 has no altsetting 0 [ 85.838517][ T24] usb 9-1: string descriptor 0 read error: -22 [ 85.838609][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.861483][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 86.045601][ T7037] FAULT_INJECTION: forcing a failure. [ 86.045601][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 86.045637][ T7037] CPU: 3 UID: 0 PID: 7037 Comm: syz.0.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.045661][ T7037] Tainted: [L]=SOFTLOCKUP [ 86.045668][ T7037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.045701][ T7037] Call Trace: [ 86.045709][ T7037] [ 86.045718][ T7037] dump_stack_lvl+0x100/0x190 [ 86.045753][ T7037] should_fail_ex.cold+0x5/0xa [ 86.045783][ T7037] should_failslab+0xc2/0x120 [ 86.045809][ T7037] __kmalloc_cache_noprof+0x91/0x6d0 [ 86.045832][ T7037] ? mirred_init_net+0x56/0x270 [ 86.045869][ T7037] ? __pfx_mirred_init_net+0x10/0x10 [ 86.045891][ T7037] mirred_init_net+0x56/0x270 [ 86.045914][ T7037] ops_init+0x1e2/0x5f0 [ 86.045944][ T7037] setup_net+0x118/0x3a0 [ 86.045972][ T7037] ? __pfx_setup_net+0x10/0x10 [ 86.046000][ T7037] ? bpf_lsm_namespace_init+0x9/0x10 [ 86.046044][ T7037] copy_net_ns+0x340/0x7a0 [ 86.046062][ T7037] create_new_namespaces+0x3ea/0xac0 [ 86.046092][ T7037] unshare_nsproxy_namespaces+0xf6/0x210 [ 86.046115][ T7037] ksys_unshare+0x44f/0x980 [ 86.046136][ T7037] ? __pfx_ksys_unshare+0x10/0x10 [ 86.046168][ T7037] __x64_sys_unshare+0x31/0x40 [ 86.046190][ T7037] do_syscall_64+0x123/0x790 [ 86.046212][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.046240][ T7037] RIP: 0033:0x7f70c5b9f559 [ 86.046257][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.046277][ T7037] RSP: 002b:00007f70c69d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.046298][ T7037] RAX: ffffffffffffffda RBX: 00007f70c5e25fa0 RCX: 00007f70c5b9f559 [ 86.046310][ T7037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 86.046338][ T7037] RBP: 00007f70c5c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.046351][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.046364][ T7037] R13: 00007f70c5e26038 R14: 00007f70c5e25fa0 R15: 00007ffc1155b188 [ 86.046391][ T7037] [ 86.057565][ T24] usb 9-1: USB disconnect, device number 2 [ 86.188557][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.305'. [ 86.257780][ T7017] adutux: No device or device unplugged -19 [ 86.257796][ T7017] FAULT_INJECTION: forcing a failure. [ 86.257796][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.257814][ T7017] CPU: 2 UID: 0 PID: 7017 Comm: syz.4.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.257829][ T7017] Tainted: [L]=SOFTLOCKUP [ 86.257833][ T7017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.257840][ T7017] Call Trace: [ 86.257844][ T7017] [ 86.257849][ T7017] dump_stack_lvl+0x100/0x190 [ 86.257868][ T7017] should_fail_ex.cold+0x5/0xa [ 86.257885][ T7017] _copy_to_user+0x32/0xd0 [ 86.257919][ T7017] simple_read_from_buffer+0xcb/0x170 [ 86.257937][ T7017] proc_fail_nth_read+0x1af/0x230 [ 86.257962][ T7017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.257980][ T7017] ? rw_verify_area+0xce/0x6d0 [ 86.257992][ T7017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.258009][ T7017] vfs_read+0x1e4/0xb40 [ 86.258022][ T7017] ? lock_acquire+0x1d1/0x380 [ 86.258033][ T7017] ? __fget_files+0x34/0x3d0 [ 86.258049][ T7017] ? __pfx_vfs_read+0x10/0x10 [ 86.258061][ T7017] ? find_held_lock+0x2b/0x80 [ 86.258076][ T7017] ? __fget_files+0x215/0x3d0 [ 86.258093][ T7017] ? __fget_files+0x21f/0x3d0 [ 86.258113][ T7017] ksys_read+0x12a/0x250 [ 86.258126][ T7017] ? __pfx_ksys_read+0x10/0x10 [ 86.258143][ T7017] do_syscall_64+0x123/0x790 [ 86.258157][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.258168][ T7017] RIP: 0033:0x7fddee95fd8e [ 86.258177][ T7017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.258188][ T7017] RSP: 002b:00007fddecbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.258199][ T7017] RAX: ffffffffffffffda RBX: 00007fddecbf66c0 RCX: 00007fddee95fd8e [ 86.258206][ T7017] RDX: 000000000000000f RSI: 00007fddecbf60a0 RDI: 0000000000000003 [ 86.258212][ T7017] RBP: 00007fddecbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 86.258219][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.258225][ T7017] R13: 00007fddeec26038 R14: 00007fddeec25fa0 R15: 00007fffdd424558 [ 86.258239][ T7017] [ 86.751485][ T7079] netlink: 'syz.4.311': attribute type 25 has an invalid length. [ 87.228662][ T7105] pim6reg: entered allmulticast mode [ 87.230731][ T7105] pim6reg: left allmulticast mode [ 87.309447][ T7107] IPVS: length: 120 != 24 [ 87.311029][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 87.340153][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.318'. [ 88.104952][ T5803] usb 7-1: USB disconnect, device number 5 [ 88.164919][ T7134] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 89.938850][ T7097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.995366][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 89.995389][ T42] audit: type=1400 audit(1792683336.349:683): avc: denied { getopt } for pid=7139 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.159069][ T42] audit: type=1400 audit(1792683336.509:684): avc: denied { write } for ** replaying previous printk message ** [ 90.159069][ T42] audit: type=1400 audit(1792683336.509:684): avc: denied { write } for pid=7160 comm="syz.4.333" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.163083][ T7161] ------------[ cut here ]------------ [ 90.163093][ T7161] 1 [ 90.163099][ T7161] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2114/0x32e0, CPU#3: syz.4.333/7161 [ 90.178372][ T7161] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.179812][ T7161] CPU: 3 UID: 0 PID: 7161 Comm: syz.4.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.183494][ T7161] Tainted: [L]=SOFTLOCKUP [ 90.184947][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.188223][ T7161] RIP: 0010:__alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.190570][ T7161] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 ac f9 ff ff e9 9d f5 ff ff 80 3d f3 db ba 0f 00 0f 85 bc e2 ff ff c6 05 e6 db ba 0f 01 90 <0f> 0b 90 e9 ac e2 ff ff 31 c0 e9 7c eb ff ff 48 8b 3c 24 48 c7 c6 [ 90.196896][ T7161] RSP: 0018:ffffc900038ef6c0 EFLAGS: 00010246 [ 90.198872][ T7161] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.201503][ T7161] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 90.204244][ T7161] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000009 [ 90.206880][ T7161] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 90.209499][ T7161] R13: 1ffff9200071df34 R14: 0000000000000000 R15: 1ffff9200071def2 [ 90.212032][ T7161] FS: 00007fddecbf66c0(0000) GS:ffff8880d4a2b000(0000) knlGS:0000000000000000 [ 90.214952][ T7161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.217101][ T7161] CR2: 00007fddee988b80 CR3: 0000000056dee000 CR4: 0000000000352ef0 [ 90.219799][ T7161] Call Trace: [ 90.221060][ T7161] [ 90.222273][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.224123][ T7161] ? unwind_next_frame+0xbd/0x2090 [ 90.225914][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.227444][ T7161] ? is_bpf_text_address+0x25/0x1a0 [ 90.229198][ T7161] ? find_held_lock+0x2b/0x80 [ 90.230794][ T7161] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.232904][ T7161] ? bpf_ksym_find+0x128/0x1c0 [ 90.234456][ T7161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 90.236476][ T7161] ? is_bpf_text_address+0x94/0x1a0 [ 90.238206][ T7161] ? kernel_text_address+0x8d/0x100 [ 90.239960][ T7161] ? __kernel_text_address+0xd/0x30 [ 90.241831][ T7161] ? unwind_get_return_address+0x59/0xa0 [ 90.244032][ T7161] ? arch_stack_walk+0xa6/0xf0 [ 90.245668][ T7161] ? tomoyo_path_number_perm+0x46d/0x580 [ 90.247523][ T7161] ? stack_trace_save+0x8e/0xc0 [ 90.249252][ T7161] ? __pfx_stack_trace_save+0x10/0x10 [ 90.251047][ T7161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.253205][ T7161] ? policy_nodemask+0xed/0x4f0 [ 90.255229][ T7161] alloc_pages_mpol+0x201/0x550 [ 90.256922][ T7161] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 90.258620][ T7161] ? security_file_ioctl+0xd3/0x230 [ 90.260347][ T7161] ? do_syscall_64+0x123/0x790 [ 90.261907][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.263878][ T7161] ___kmalloc_large_node+0xe8/0x130 [ 90.265568][ T7161] ? avc_has_extended_perms+0x201/0x10b0 [ 90.267339][ T7161] __kmalloc_large_node_noprof+0x1c/0x70 [ 90.269119][ T7161] __kmalloc_noprof+0x5a3/0x840 [ 90.270718][ T7161] ? drm_syncobj_array_find+0x34/0x3a0 [ 90.272461][ T7161] drm_syncobj_array_find+0x34/0x3a0 [ 90.274571][ T7161] drm_syncobj_query_ioctl+0x25d/0xa90 [ 90.276894][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.278930][ T7161] ? drm_dev_enter+0x53/0x170 [ 90.281058][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.283612][ T7161] ? find_held_lock+0x2b/0x80 [ 90.285713][ T7161] ? drm_dev_exit+0x41/0x60 [ 90.287725][ T7161] ? drm_dev_exit+0x41/0x60 [ 90.289773][ T7161] drm_ioctl_kernel+0x1f3/0x3e0 [ 90.291925][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.293961][ T7161] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 90.295708][ T7161] drm_ioctl+0x5e6/0xc60 [ 90.297076][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.298977][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 90.300601][ T7161] ? __fget_files+0x34/0x3d0 [ 90.302123][ T7161] ? selinux_file_ioctl+0x1e0/0x290 [ 90.304209][ T7161] ? selinux_file_ioctl+0x1e7/0x290 [ 90.306333][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 90.308250][ T7161] __x64_sys_ioctl+0x18e/0x210 [ 90.310340][ T7161] do_syscall_64+0x123/0x790 [ 90.312233][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.314563][ T7161] RIP: 0033:0x7fddee99f559 [ 90.316386][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.324271][ T7161] RSP: 002b:00007fddecbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.327674][ T7161] RAX: ffffffffffffffda RBX: 00007fddeec25fa0 RCX: 00007fddee99f559 [ 90.330954][ T7161] RDX: 0000200000000300 RSI: 00000000c01864cb RDI: 0000000000000008 [ 90.334316][ T7161] RBP: 00007fddeea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.337712][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.341165][ T7161] R13: 00007fddeec26038 R14: 00007fddeec25fa0 R15: 00007fffdd424558 [ 90.344297][ T7161] [ 90.345351][ T7161] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.347634][ T7161] CPU: 3 UID: 0 PID: 7161 Comm: syz.4.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.351010][ T7161] Tainted: [L]=SOFTLOCKUP [ 90.352381][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.355784][ T7161] Call Trace: [ 90.356861][ T7161] [ 90.357811][ T7161] dump_stack_lvl+0x100/0x190 [ 90.359316][ T7161] vpanic+0x553/0x970 [ 90.360613][ T7161] ? __pfx_vpanic+0x10/0x10 [ 90.362058][ T7161] panic+0xd1/0xe0 [ 90.363297][ T7161] ? __pfx_panic+0x10/0x10 [ 90.364791][ T7161] check_panic_on_warn.cold+0x19/0x34 [ 90.366478][ T7161] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.368411][ T7161] __warn.cold+0x191/0x318 [ 90.369835][ T7161] __report_bug+0x30f/0x440 [ 90.371285][ T7161] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.373401][ T7161] ? __pfx___report_bug+0x10/0x10 [ 90.375512][ T7161] ? stack_trace_save+0x8e/0xc0 [ 90.377610][ T7161] ? __pfx_stack_trace_save+0x10/0x10 [ 90.379903][ T7161] ? __pfx_stack_trace_save+0x10/0x10 [ 90.382199][ T7161] ? stack_depot_save_flags+0x27/0x9f0 [ 90.384540][ T7161] ? __lock_acquire+0x5c0/0x1f40 [ 90.386697][ T7161] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.389317][ T7161] report_bug+0xb3/0x220 [ 90.391142][ T7161] ? __alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.393783][ T7161] handle_bug+0x16a/0x2a0 [ 90.395618][ T7161] exc_invalid_op+0x17/0x50 [ 90.397572][ T7161] asm_exc_invalid_op+0x1a/0x20 [ 90.399653][ T7161] RIP: 0010:__alloc_frozen_pages_noprof+0x2114/0x32e0 [ 90.402494][ T7161] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 ac f9 ff ff e9 9d f5 ff ff 80 3d f3 db ba 0f 00 0f 85 bc e2 ff ff c6 05 e6 db ba 0f 01 90 <0f> 0b 90 e9 ac e2 ff ff 31 c0 e9 7c eb ff ff 48 8b 3c 24 48 c7 c6 [ 90.410035][ T7161] RSP: 0018:ffffc900038ef6c0 EFLAGS: 00010246 [ 90.412465][ T7161] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.415623][ T7161] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 90.418806][ T7161] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000009 [ 90.421966][ T7161] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 90.425281][ T7161] R13: 1ffff9200071df34 R14: 0000000000000000 R15: 1ffff9200071def2 [ 90.428563][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.430575][ T7161] ? unwind_next_frame+0xbd/0x2090 [ 90.432276][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.434209][ T7161] ? is_bpf_text_address+0x25/0x1a0 [ 90.436035][ T7161] ? find_held_lock+0x2b/0x80 [ 90.437575][ T7161] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.439567][ T7161] ? bpf_ksym_find+0x128/0x1c0 [ 90.441095][ T7161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 90.443099][ T7161] ? is_bpf_text_address+0x94/0x1a0 [ 90.444827][ T7161] ? kernel_text_address+0x8d/0x100 [ 90.446477][ T7161] ? __kernel_text_address+0xd/0x30 [ 90.448009][ T7161] ? unwind_get_return_address+0x59/0xa0 [ 90.449713][ T7161] ? arch_stack_walk+0xa6/0xf0 [ 90.451241][ T7161] ? tomoyo_path_number_perm+0x46d/0x580 [ 90.452974][ T7161] ? stack_trace_save+0x8e/0xc0 [ 90.454550][ T7161] ? __pfx_stack_trace_save+0x10/0x10 [ 90.456261][ T7161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.458510][ T7161] ? policy_nodemask+0xed/0x4f0 [ 90.460480][ T7161] alloc_pages_mpol+0x201/0x550 [ 90.462497][ T7161] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 90.464646][ T7161] ? security_file_ioctl+0xd3/0x230 [ 90.466735][ T7161] ? do_syscall_64+0x123/0x790 [ 90.468656][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.470980][ T7161] ___kmalloc_large_node+0xe8/0x130 [ 90.473065][ T7161] ? avc_has_extended_perms+0x201/0x10b0 [ 90.475381][ T7161] __kmalloc_large_node_noprof+0x1c/0x70 [ 90.477709][ T7161] __kmalloc_noprof+0x5a3/0x840 [ 90.479665][ T7161] ? drm_syncobj_array_find+0x34/0x3a0 [ 90.481830][ T7161] drm_syncobj_array_find+0x34/0x3a0 [ 90.483953][ T7161] drm_syncobj_query_ioctl+0x25d/0xa90 [ 90.486180][ T7161] ? lock_acquire+0x1d1/0x380 [ 90.488111][ T7161] ? drm_dev_enter+0x53/0x170 [ 90.490052][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.492446][ T7161] ? find_held_lock+0x2b/0x80 [ 90.494396][ T7161] ? drm_dev_exit+0x41/0x60 [ 90.496261][ T7161] ? drm_dev_exit+0x41/0x60 [ 90.498148][ T7161] drm_ioctl_kernel+0x1f3/0x3e0 [ 90.500091][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.502503][ T7161] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 90.504684][ T7161] drm_ioctl+0x5e6/0xc60 [ 90.506426][ T7161] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 90.508862][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 90.510829][ T7161] ? __fget_files+0x34/0x3d0 [ 90.512755][ T7161] ? selinux_file_ioctl+0x1e0/0x290 [ 90.514860][ T7161] ? selinux_file_ioctl+0x1e7/0x290 [ 90.516914][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 90.518845][ T7161] __x64_sys_ioctl+0x18e/0x210 [ 90.520771][ T7161] do_syscall_64+0x123/0x790 [ 90.522651][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.525026][ T7161] RIP: 0033:0x7fddee99f559 [ 90.526840][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.535456][ T7161] RSP: 002b:00007fddecbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.538732][ T7161] RAX: ffffffffffffffda RBX: 00007fddeec25fa0 RCX: 00007fddee99f559 [ 90.541830][ T7161] RDX: 0000200000000300 RSI: 00000000c01864cb RDI: 0000000000000008 [ 90.544958][ T7161] RBP: 00007fddeea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.548032][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.551081][ T7161] R13: 00007fddeec26038 R14: 00007fddeec25fa0 R15: 00007fffdd424558 [ 90.554144][ T7161] [ 90.556148][ T7161] Kernel Offset: disabled [ 90.557905][ T7161] Rebooting in 86400 seconds..