last executing test programs: 2m31.589816603s ago: executing program 0 (id=47): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0xe2a62, 0x1a2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) write$6lowpan_enable(r0, &(0x7f00000004c0)='0', 0x1) 2m31.589618357s ago: executing program 0 (id=48): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00', @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$packet(r0, &(0x7f0000000880)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000008c0)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m31.510455696s ago: executing program 0 (id=49): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sctp\x00') mount(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00') r1 = io_uring_setup(0x8, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB]) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000280)={0x6680, 0x0, 0x2, {0x2, @meta={0x43425052, 0xb6f419f, 0xbd14, 0x1e64, 0x5546d64b}}, 0x7}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000380)=""/231, 0xe7, 0x40, &(0x7f0000000480)={0xa, 0x0, 0x0, @initdev}, 0x20) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000007c0)=0x8, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x9) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000840)='./dev/kmsg\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r9]) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0xc2}, 0x48000) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000082}]}) sendmsg$NFT_BATCH(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x3, 0x3, 0x1, "b124b936daa85ac1c08e17d4657996f72e60a8f2ec7aca8480cc22fdaf3f60a0", 0x34325258}) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000001300)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r11, &(0x7f0000001340)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 2m31.379907434s ago: executing program 0 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000880)=@filename='mtd0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000002940)='./file0\x00') r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)={'U+', 0xffffffff}, 0x16, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000000340)=@ethtool_cmd={0x4, 0x28, 0xfffeffff, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x2, 0x40, 0x1, 0x9, 0x9, 0xd, 0xff, 0xfffffffd, [0x1ff, 0x3]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000400)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x121002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x4839, &(0x7f0000000700)={0x0, 0xa74e, 0x40, 0x3, 0x99}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) close_range(r2, r7, 0x0) 2m31.030737915s ago: executing program 2 (id=59): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="042fff0100000000000007056f1d140400046af7"], 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) bind$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x4e23, 0x3, @mcast1, 0x1}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/sda\x00', 0x101042, 0x5) ioctl(0xffffffffffffffff, 0x1197c682, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0x4) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000480)=0x8, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 2m30.499487106s ago: executing program 2 (id=61): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./tracing\x00', 0x418a80, 0x83) mkdirat(r0, &(0x7f0000000340)='./tracing/events/sched/filter\x00', 0xa0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) chmod(&(0x7f0000000280)='./tracing/events/sched/filter\x00', 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0xd, 0x36d, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x4c}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace(0x10, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 2m30.270638664s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) chdir(&(0x7f00000002c0)='./file0\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x0) mknod(&(0x7f0000001440)='./file0\x00', 0xc000, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, 0x1, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8000}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xff0f}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) write(r1, &(0x7f00000000c0)="010000000000000020", 0x9) openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0x62200, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m30.220671804s ago: executing program 2 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000880)=@filename='mtd0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='jffs2\x00', 0x800000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x40049409, 0x0) chdir(&(0x7f0000002940)='./file0\x00') r1 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x94400, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000001c0)=0x8001, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='2', 0x1}], 0x1}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='2', 0x1}], 0x1}}], 0x1, 0x20000854) close(0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="020000000980ffff", 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101042, 0x108) pwrite64(r5, &(0x7f00000029c0)='2', 0xfdef, 0xe7c) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000480)=0x79, 0x4) bind$inet(r7, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[], 0x4e8}], 0x1}, 0x0) 2m30.060106926s ago: executing program 0 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x626f50a6}, 0x5f) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r0, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000001580)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000001680), &(0x7f00000016c0), 0x0, 0x700}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r4, 0x205, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/nullb0/queue/scheduler\x00', 0x8082, 0x100) write(r5, &(0x7f00000003c0)='kyber', 0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r8 = socket(0x1d, 0x2, 0x6) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000002880)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000028c0)={0x1d, r10, 0x8000000000000003, {0x0, 0xf}}, 0x18) r11 = syz_open_dev$audion(&(0x7f0000002940), 0x9, 0x202802) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r13 = signalfd4(r1, &(0x7f0000002a00)={[0x8]}, 0x8, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a80)={0x6, 0x1f, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x382e, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002800)='syzkaller\x00', 0x5, 0xa, &(0x7f0000002840)=""/10, 0x41000, 0x22, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x1, 0xe, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[r11, r12, r13], 0x0, 0x10, 0xfffffffc}, 0x94) 2m30.059828805s ago: executing program 2 (id=71): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$packet(r0, &(0x7f0000000880)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000008c0)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m29.809710908s ago: executing program 2 (id=72): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x900, 0x3000, 0x1, 0x12, r0, 0x0) 2m29.809449281s ago: executing program 0 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c070000000000000000e6ff00000000020000000900010073797a30feffffff0800030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}}, 0x800) 2m29.728620215s ago: executing program 32 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c070000000000000000e6ff00000000020000000900010073797a30feffffff0800030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}}, 0x800) 2m29.669633161s ago: executing program 33 (id=72): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x900, 0x3000, 0x1, 0x12, r0, 0x0) 2m17.360843416s ago: executing program 4 (id=241): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x7ffff, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x1, 0x12, r0, 0x0) 2m17.360466474s ago: executing program 4 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001d80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_open_dev$vim2m(&(0x7f0000000000), 0x4c6f, 0x2) mount(0x0, &(0x7f0000002d80)='./dev\x00', &(0x7f0000002dc0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002e00)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/mailbox/mailbox_summary\x00', 0x400, 0x135) mount(&(0x7f0000002e80)=@filename='./dev/sda1\x00', &(0x7f0000002ec0)='./mnt\x00', &(0x7f0000002f00)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002f40)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) 2m17.300651865s ago: executing program 4 (id=244): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2840) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x5, &(0x7f0000000280)}) 2m17.300434806s ago: executing program 4 (id=245): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00600012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m17.229207506s ago: executing program 4 (id=248): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x183200) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000380)=ANY=[@ANYBLOB="7490e928090000f8863b0000"]) r2 = eventfd2(0xb, 0x80800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10) write$eventfd(r2, &(0x7f00000015c0)=0x3, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0f01c90f209266b9080a00000f3267ff9e00000100670f6f69b10f0766b98e0300000f320f01c20f7766b8f4ffffff0f23d00f21f866353000000a0f23f8", 0x3e}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x4f}) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./proc_mnt\x00', &(0x7f00000016c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xfa) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1002804, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) write$sysctl(r6, &(0x7f0000001780)='1\x00', 0x1) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x8922, &(0x7f00000017c0)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_emit_ethernet(0x3a, &(0x7f0000001800)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x37}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./cgroup\x00'}, 0x18) syz_open_dev$I2C(&(0x7f0000000280), 0x101, 0x5cd140) socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r8 = syz_open_dev$evdev(&(0x7f00000004c0), 0x40, 0x0) ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f0000000500)={0x10000000, 0x8, 0xc96b, 0x75, 0x6, 0x2}) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000001600)) 2m17.170910763s ago: executing program 4 (id=250): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000095"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r1, 0x0, 0x7, "a5782911b0a0c3a4058de9ed848a173e8aed47e2848f579aae15cd44807a0f5af3ecbc3c5522f99367da63385744374fcb04cff4e7305c511d2e4924f1dbb4682aee8c9770d75930413931c12172e17664c1b852e0801f88d1391d01"}) 2m2.189566733s ago: executing program 34 (id=250): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) munmap$KVM_VCPU(0x0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000095"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r1, 0x0, 0x7, "a5782911b0a0c3a4058de9ed848a173e8aed47e2848f579aae15cd44807a0f5af3ecbc3c5522f99367da63385744374fcb04cff4e7305c511d2e4924f1dbb4682aee8c9770d75930413931c12172e17664c1b852e0801f88d1391d01"}) 1m25.72618089s ago: executing program 6 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x3, 0xa000000, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x80) 1m25.669869191s ago: executing program 6 (id=755): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x74, {0x0, 0x10, [@code={0xa, 0x1b, {"49bf563412efbeadde00"}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x21, {"4c89f848ba0001040000000000488902"}}]}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1b, {"49bf0000000000000000"}}, @nested_vmresume={0x130, 0x18}], 0xef}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80002) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x100000000000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1deadbeef123456) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1m25.512783376s ago: executing program 6 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a72656600001400029d080003400000000908000540000000020900020073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x4048c10}, 0x48010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x20000084) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4020044) 1m25.387771878s ago: executing program 6 (id=762): mmap$IORING_OFF_SQES(0x0, 0x805, 0xa, 0x110, 0xffffffffffffffff, 0x10000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000001440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001480), 0x0, 0x10, &(0x7f00000014c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000004c0)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001500)={'syz1\x00', {0xfff9, 0x1, 0x3, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x200, 0x8, 0x155f, 0x10000006, 0x4, 0x4, 0x1, 0xb4, 0xb, 0xa2b9, 0x1, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x1, 0x6, 0x4, 0x7, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7f7, 0x8, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xaf, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x0, 0x20004, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0xffffffff, 0x6, 0x438, 0x2, 0x9, 0x5, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xa, 0x0, 0x2e6bf783, 0x80000001, 0x4, 0x40000005, 0x491, 0x8, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000102, 0x1, 0xb, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffb, 0x100006, 0x2, 0x4, 0x8, 0x5, 0xd3, 0x6, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x8007f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x7f, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af5, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x80, 0xff, 0x1005, 0x10000001, 0x6, 0x21, 0x1800, 0x81, 0x7, 0x6f, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x4, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x800, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, r5, &(0x7f00000019c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r8, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x4) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) bind$packet(r0, &(0x7f0000000880)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000008c0)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2002, 0x100) write(r10, &(0x7f0000000740)='7', 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r8) 1m25.386816135s ago: executing program 6 (id=763): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='westwood', 0x8) sendto$inet(r2, &(0x7f0000000480), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000004c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_ALT_IFNAME={0x38, 0x35, 'syz_tun\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m23.110581856s ago: executing program 6 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x6c, 0x24, 0x405, 0x8100, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xd, 0x1}}]}}]}, 0x6c}}, 0x0) 1m23.057534704s ago: executing program 35 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x6c, 0x24, 0x405, 0x8100, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xd, 0x1}}]}}]}, 0x6c}}, 0x0) 8.18376055s ago: executing program 5 (id=1553): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="890000f0120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 8.129155063s ago: executing program 5 (id=1555): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x74, {0x0, 0x10, [@code={0xa, 0x1b, {"49bf563412efbeadde00"}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x21, {"4c89f848ba0001040000000000488902"}}]}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1b, {"49bf0000000000000000"}}, @nested_vmresume={0x130, 0x18}], 0xef}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7f000000) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x100000000000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1deadbeef123456) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 7.948192177s ago: executing program 5 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x3f00, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x80) 7.94798023s ago: executing program 5 (id=1557): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000180)='./file0\x00') (async) acct(&(0x7f0000000540)='./file1\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000540), 0x11000) (async) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f00000005c0), 0x3528a9c0}], 0x1, 0x0) (async, rerun: 64) unlink(&(0x7f00000001c0)='./file0\x00') (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a3100000000089217eeaefffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c004ba54ebdbfc120c4b5018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) openat$dm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='100', 0x3) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) (async) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0xc88, 0x0, 0x60, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'p', 0x20, '128'}}]}) (async) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000480)) (async) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x103) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0xf) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9404f7d0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb9c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (async) ioctl$TCFLSH(r7, 0x400455cb, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f00000002c0)=0x2, 0x4) 7.0753293s ago: executing program 5 (id=1560): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'geneve0\x00', 0x1000}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000008c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232100000004000ffffff84"], 0x4a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r3, &(0x7f0000000580)='off', 0x3) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x3, 0x0, 0x0, 0x10001, 0xd5, &(0x7f00000006c0)="7d6fe9bc8fdd1e0de6833b8e3d82d2f1efd5b3d0b60627a28beee0478d22a1f83c0f96dec82d0c740dc643ea6e278af07647e96634fbb3f6b1c4c6de557b3f64e4619fc4ac9bb1072449bdf19eb6b0c65824f8ab33b23d231313bbcd2fdced83e4da7ccef54b6f7f77a7f511aeedbeac2819110b9f8d230affa2011556cf007907f68a62980934c826bc69805ba639d6bf90a67b4f8a64a137de0ffd724643b9e30b9891aa9273d47739e7b9b11d26f72fc38ce5fbaf0d28ff7d295b8b5f6f5f1f55e6d0c83b64a5b5b2a5e99f824183ed4d0dc5c3"}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x238, 0x138, 0x1, 0x0, 0x20e11, 0x0, 0x0, @by_dev, [@verity={0x0, 0x418, 0x0, 0x100, 'verity\x00', {'0', 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '1024', 0x20, '4096', 0x20, 0x319, 0x20, 0x7b, 0x20, 'md5', 0x20, @hex32=[0x34, 0x63, 0x65, 0x63, 0x61, 0x34, 0x62, 0x37, 0x36, 0x64, 0x8d, 0x31, 0x35, 0x65, 0x63, 0x38, 0x38, 0x62, 0x39, 0x62, 0x33, 0x64, 0x33, 0x62, 0x38, 0x63, 0x52, 0x61, 0x35, 0x3f, 0x34, 0x35, 0x30, 0x64, 0x38, 0x30, 0x61, 0x63, 0x1f646260efba08b5, 0x33, 0x35, 0x63, 0x35, 0x30, 0x64, 0x64, 0x30, 0x31, 0x39, 0x63, 0x65, 0x34, 0x39, 0x36, 0x32, 0x34, 0x61, 0x34, 0x32, 0x38, 0x35, 0x30, 0x65, 0x30], 0x20, @hex=@hex16=[0x54, 0x35, 0x37, 0x30, 0x38, 0x49, 0x61, 0x33, 0x64, 0x33, 0x65, 0x62, 0x65, 0x36, 0x38, 0x39, 0x63, 0x37, 0x63, 0x64, 0x34, 0x51, 0x61, 0x38, 0x4feb84a8018c9657, 0x66, 0x64, 0x38, 0x62, 0x65, 0x33, 0x57], ' 1 ignore_zero_blocks'}}]}) 6.786869478s ago: executing program 5 (id=1564): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r5, 0xae80, 0xf8000000) 6.730344117s ago: executing program 36 (id=1564): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r5, 0xae80, 0xf8000000) 4.485478076s ago: executing program 7 (id=1582): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.390323728s ago: executing program 7 (id=1583): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0xffffffffffffffb6, &(0x7f0000000b40)=[{&(0x7f0000000cc0)={0x18, 0x22, 0x601, 0x709d2a, 0x800, "", [@generic="196785a2749f0fb49560bbe7e0ba218d5d34a3e85a9b61e46300488f0c45b7b5a543c40cd908de855a4e6340a902eaeeb0f4f946ef9a9176bae0704cdcaed56ebb640cfa0db2bf9f4e27d24ceb8d6fcc9a336ea17451f1d9b287a6700d35af0bda336de9e5ff01d7e1d92ec7a977c034fdad31aeebb2445d79fe7fad8791bae0d59a5e925d3f85a92e05377e501d9412294c10cbea18da3970ac0cdc439b8ee19b51702c4530f5d3ca13387e53eb30ebb258fa7fd923f73c2596a804fbc9803f585a6f145c7f6b609ad0de6c30e7d7bca81f372384e534dc800d4e724a910ac21c3df68b92772868f430eebd4d8acc9cac6dd19c7f38e1cc"]}, 0x18}], 0x1, 0x0, 0x0, 0x8000}, 0xfff0) 4.390214874s ago: executing program 7 (id=1584): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) syz_usb_ep_write(r0, 0x82, 0x1f, 0x0) 3.219630349s ago: executing program 7 (id=1586): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0701, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001600), 0x4000000086a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x3554000) (async) fadvise64(r2, 0x3, 0x4000000005, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="6c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000200000003800128009000100766c616e000000002800a39334a289c8292f010002032b74b0abf447de020000010800000c0001000300000006000000060001"], 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x20000090) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000001680)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000016c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000001700)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async) write$binfmt_script(r4, &(0x7f0000001740)={'#! ', './file0'}, 0xb) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001780)={0x1, &(0x7f00000017c0)=[{0x6, 0x72, 0x0, 0x1007}]}) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xd8) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) munlockall() (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f0000001640)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb080045210028006700000006907800000000ffffffff4e244e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000600000000ba48c0bc04"], 0x3a) 3.068915347s ago: executing program 7 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x1f, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44040}, 0xc08d4) 2.938204693s ago: executing program 7 (id=1588): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r2, 0x0, &(0x7f000001f000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26, 0x3f}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000040)={0x101, 0xf39d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, &(0x7f0000000080)=""/244}) r4 = syz_usb_connect(0x1, 0x39, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYBLOB="97747567209032670902050f6eb3fdd4429a824d06eb697a91602f2ab96f3cef082986e3d707fd03ffac0db78ca65b4bad604f68b4e57583a23d7bfaec52dbaf2e11b660f530cc5f3776fefbaaefb12cf363a2a9f563e839d9ae0a7cb32ce9437c097a448e24f42836b92dee76f5c7d15423df3bd65827c43efdff244bb88553509c4087a78bb8054f3af1689c5b472a1cd924670251157b295b93204a8cf4130532ab3b69d70f8acdea9b19aefda5c5c0bf6a8e49b8c5adf5c5cb2c9797dad84b295064cbed83b59755286357f09cf0817c1c391607c06325d4"], 0x0) r5 = socket$inet(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1, 0xc}, &(0x7f0000000380)='R\x10rust\xe3c*sgrVid:De', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f00000002c0)=0xd3a0, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) r8 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x200, 0x190, 0x20}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r8, r7, 0x25, 0x4, @val=@netkit={@void, @value=r9}}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001e451df6140012800c0001006d6163767461700004000280", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x0, 0x0) 2.699863626s ago: executing program 1 (id=1592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000a80)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)=' f 0::7.0.0.1 -\\000000\\0 l\\calhost\n', 0x24) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x5, 0x590, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001400], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x4a, 0x22f0, 'veth1_to_hsr\x00', '\x00', 'pim6reg\x00', 'macvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x401, 0x3d9a, 0x0, 0x0, "2c5b78d353d585d033caf0b8701a6cf7b3dab647fc6bd350080384aa88a3ae887ee0dccbf13788e410c56f5e38b905e9ed8f23773f70a0a9fb41b56eac70be3f"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x5, 0x4, 0x81b, '\x00', 'wg2\x00', 'wlan0\x00', 'ipvlan0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0xa0, 0xa0, 0x1d0, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x4, 0x1, 0x3, 0x7}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8000, 'system_u:object_r:netcontrol_device_t:s0\x00'}}}}, {0x3, 0x887c3b56b961a40e, 0x832e, 'vlan1\x00', 'veth1\x00', 'macvtap0\x00', 'veth0_to_team\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x5, 0xc0, 0x4, 0x0, 0x0, "80f592c4059d3808ae94554537f8f09a31a4e48047c33483f2899780ba8eae9416856423fe68b9a0f3c22731f03c8d4b745f18e92a534fbf2a16f24a67a123bc"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x8884, 'ip6erspan0\x00', 'ipvlan0\x00', 'hsr0\x00', 'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"b54a500c8031e4e2d6d416da268047637313e1e36ca4210f414e44cac4fb"}}}, {0x9, 0x0, 0x6004, 'bridge_slave_1\x00', 'wlan1\x00', 'ipvlan0\x00', 'bridge0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}}]}]}, 0x608) bind$inet(r0, &(0x7f0000000d80)={0x2, 0x4e20, @multicast1}, 0x10) r4 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002280)=""/222, 0xde}, {&(0x7f0000000880)=""/231, 0xe7}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000b80)=""/177, 0xb1}], 0x5) readv(r4, &(0x7f0000002180)=[{&(0x7f00000021c0)=""/183, 0xb7}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000dc0)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000e00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000180)=0x2) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x8, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2f, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {0x0, 0xe}, {0xffe6, 0xa}, {0xc, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4044015) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x14, &(0x7f0000001100)=[{&(0x7f0000001140)=' ', 0xffffff1f}], 0x1}, 0x0) 1.420534385s ago: executing program 1 (id=1593): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000800)='}', 0x1, 0x0, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) 1.270231283s ago: executing program 8 (id=1565): setresuid(0xee00, 0x0, 0x0) r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4038}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.270070703s ago: executing program 8 (id=1596): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000800)='}', 0x1, 0x0, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) 1.029938235s ago: executing program 3 (id=1600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x200c084}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x53, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 959.011211ms ago: executing program 3 (id=1601): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000780)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c000000123f6b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 888.290754ms ago: executing program 3 (id=1602): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0xffffffffffffffb6, &(0x7f0000000b40)=[{&(0x7f0000000cc0)={0x18, 0x22, 0x601, 0x709d2a, 0x800, "", [@generic="196785a2749f0fb49560bbe7e0ba218d5d34a3e85a9b61e46300488f0c45b7b5a543c40cd908de855a4e6340a902eaeeb0f4f946ef9a9176bae0704cdcaed56ebb640cfa0db2bf9f4e27d24ceb8d6fcc9a336ea17451f1d9b287a6700d35af0bda336de9e5ff01d7e1d92ec7a977c034fdad31aeebb2445d79fe7fad8791bae0d59a5e925d3f85a92e05377e501d9412294c10cbea18da3970ac0cdc439b8ee19b51702c4530f5d3ca13387e53eb30ebb258fa7fd923f73c2596a804fbc9803f585a6f145c7f6b609ad0de6c30e7d7bca81f372384e534dc800d4e724a910ac21c3df68b92772868f430eebd4d8acc9cac6dd19c7f38e1cc"]}, 0x18}], 0x1, 0x0, 0x0, 0x8000}, 0xf0ffff) 887.95662ms ago: executing program 3 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x0, 0x128) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) fanotify_mark(r0, 0x1, 0x20, r1, 0x0) open$dir(&(0x7f0000000000)='./mnt/file0\x00', 0x2001, 0x49) 837.661056ms ago: executing program 3 (id=1604): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000140081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 837.548921ms ago: executing program 3 (id=1605): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) syz_usb_ep_write(r0, 0x82, 0x1800, 0x0) 258.059747ms ago: executing program 1 (id=1606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xcc, r1, 0x3, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000990}, 0x1040) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) getitimer(0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0xfc}]}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000300)=""/162) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r5, r6, r7, 0x80, 0xffffffff, 0xc0ab, 0x0, 0x0, 0x10001, 0x40, 0x2}) sendmsg$inet(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="5a2188149afc2ad218614e9100ed343313245dcc16d59c07ab3ab58628b8443a1dad4d25d51d1b0f3084df08e3e9c7d478b315b7f280e0e277c60d825c3b4cab7d69c7b8a7cb97705a7b871c2511d4560d68901add97ab916ba96871d22bef8176f44e28ebc747fcc2ce7e5c1860496fc07b438de53682ab40abe3bb7ba1283834482f2d7bf03ff7d116a745c150ccc571e9515ada9992242d8a43a883050e8dc5ec86e79ca9e22d1a31000afd14", 0xae}, {&(0x7f0000001bc0)="fff237078d673c8d3dd46ac5c042ff016562adb7ef44e93ea7aee3ccee5538c7c3b461fadb4e70038ca0352f6d1f555680665eb5a3b6d96771f0de6be3be98d6a3fec04b", 0x44}, {&(0x7f0000001c40)="eed6afae918e40b5526f1817fb97f55b1d8382e9d0a22e896995f63215776e4dbc9b8c9d010aeb7021f74bf4211f9f2e75683ce97fc2577ed45e2fb1076efa646d87db3f30566685482b417e0c70", 0x4e}, {&(0x7f0000001cc0)="9315f5e96fb248a7591b082ed740b39d371db3b59d0c41e127380646cb44f06dca85d3a6ab316a55fa45244847a39c62356c5e94341a26011bf275a30a10d44795a5685b6d7aea085e27ea3108700b67db034538e270f92439b1a4145aff280b84ac23c705cf20c92dc08b5f7c75d2b98c1494f0a9452111d037a7911b4f443375a4f49887b53f8082f8fbdd3da82bb4d1960ad2fd2f30fff325c0c2a84cf62b2e5bdcdbcc6191d086f6317b464a6465", 0xb0}], 0x5}, 0x80) 159.38678ms ago: executing program 1 (id=1607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x6, 0x7f, 0x2, 0x7}, {0x6, 0x1, 0x7, 0x3ff}, {0x6, 0xed, 0xb, 0x6}, {0xc, 0x0, 0x60, 0x7}, {0x1, 0x34, 0x87, 0x771}, {0x1, 0x6}]}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180062) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0xe, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095006e00000000007a6f005f596135d31c6833bb52305b95f2b64a33618975eadcecdbf444d77755de2b6373e106e80523bb553717ca08a8dcbbb2c09e5810105e13387341b12b316e016e9199c0b00dcde7b012dd58a25fa8946c249c77cf"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) recvfrom$inet_nvme(r2, &(0x7f0000000440)=""/4096, 0x1000, 0x10122, &(0x7f0000001440)=@vsock={0x28, 0x0, 0xffffffff, @host, 0x1}, 0x80) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001740)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001780)={0x1d, r5, 0x80000003, {}, 0xff}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000240)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000001700)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) 119.824044ms ago: executing program 1 (id=1608): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CLR_FD(r0, 0x40081271) 80.150447ms ago: executing program 8 (id=1609): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='westwood', 0x8) sendto$inet(r2, &(0x7f0000000480), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000004c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 0s ago: executing program 1 (id=1610): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000300)) (async) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000380)={0xe, "1a09e5010800030091000041392e000000000000000000000000000000009674", 0xffffffffffffffff}) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000400)={0x4, "fa02790d2a69a2610f020a0000000000001100010000070042000000677c00", 0xffffffffffffffff}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept$alg(r6, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x40) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000440)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r3, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000480)={"0e337b42cc00d331ff0007000000000000001a00", r5}) (async) write(r1, &(0x7f00000001c0)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest', 0x3f) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) kernel console output (not intermixed with test programs): netdevsim5 netdevsim1: entered promiscuous mode [ 179.272221][T10244] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 179.276906][T10244] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 179.278182][T10244] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 179.278349][T10244] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 179.278598][T10244] veth2: entered promiscuous mode [ 179.282314][T10244] veth3: entered promiscuous mode [ 179.283313][T10244] mac80211_hwsim hwsim25 wlan2: entered promiscuous mode [ 179.283416][T10244] mac80211_hwsim hwsim26 wlan3: entered promiscuous mode [ 179.286956][T10244] bridge1: entered promiscuous mode [ 179.287934][T10244] bridge2: entered promiscuous mode [ 179.288771][T10244] mac80211_hwsim hwsim27 wlan4: entered promiscuous mode [ 179.288857][T10244] mac80211_hwsim hwsim37 wlan5: entered promiscuous mode [ 179.288956][T10244] pim6reg: entered promiscuous mode [ 179.293889][T10244] mac80211_hwsim hwsim38 wlan6: entered promiscuous mode [ 179.294039][T10244] mac80211_hwsim hwsim39 wlan7: entered promiscuous mode [ 179.294197][T10244] mac80211_hwsim hwsim44 wlan8: entered promiscuous mode [ 179.294430][T10244] syztnl1: entered promiscuous mode [ 179.294520][T10244] mac80211_hwsim hwsim47 wlan9: entered promiscuous mode [ 179.295221][ T41] wg1 speed is unknown, defaulting to 1000 [ 179.295238][ T41] syz2: Port: 1 Link DOWN [ 179.298709][ T8755] wg1 speed is unknown, defaulting to 1000 [ 179.304164][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 179.318900][T10263] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 179.339052][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.339095][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.339125][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.339155][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.404505][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.405359][ T5942] usb 12-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 179.406121][ T5942] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.407586][ T5942] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.407599][ T5942] usb 12-1: Product: syz [ 179.407607][ T5942] usb 12-1: Manufacturer: syz [ 179.407658][ T5942] usb 12-1: SerialNumber: syz [ 179.410645][ T5942] keyspan 12-1:1.0: Keyspan 1 port adapter converter detected [ 179.410730][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 179.423175][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 179.423242][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 82 [ 179.423304][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 179.423364][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 179.423421][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 83 [ 179.423480][ T5942] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 3 [ 179.428545][ T5942] usb 12-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 179.534000][T10276] netlink: 'syz.5.1344': attribute type 3 has an invalid length. [ 179.534028][T10276] netlink: 'syz.5.1344': attribute type 2 has an invalid length. [ 179.588765][T10280] loop7: detected capacity change from 0 to 7 [ 179.620106][T10280] Dev loop7: unable to read RDB block 7 [ 179.620133][T10280] loop7: unable to read partition table [ 179.620223][T10280] loop7: partition table beyond EOD, truncated [ 179.620246][T10280] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.666538][T10282] loop7: detected capacity change from 0 to 7 [ 179.701532][T10282] Dev loop7: unable to read RDB block 7 [ 179.701555][T10282] loop7: unable to read partition table [ 179.701642][T10282] loop7: partition table beyond EOD, truncated [ 179.701661][T10282] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.702307][T10282] FAULT_INJECTION: forcing a failure. [ 179.702307][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 179.702337][T10282] CPU: 0 UID: 0 PID: 10282 Comm: syz.1.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.702364][T10282] Tainted: [L]=SOFTLOCKUP [ 179.702371][T10282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.702384][T10282] Call Trace: [ 179.702396][T10282] [ 179.702406][T10282] dump_stack_lvl+0x100/0x190 [ 179.702473][T10282] should_fail_ex.cold+0x5/0xa [ 179.702514][T10282] should_failslab+0xc2/0x120 [ 179.702552][T10282] __kmalloc_noprof+0xfc/0x840 [ 179.702581][T10282] ? rcu_is_watching+0x13/0xc0 [ 179.702612][T10282] ? tomoyo_realpath_from_path+0xb6/0x690 [ 179.702650][T10282] tomoyo_realpath_from_path+0xb6/0x690 [ 179.702678][T10282] tomoyo_path_number_perm+0x23c/0x580 [ 179.702712][T10282] ? tomoyo_path_number_perm+0x22e/0x580 [ 179.702742][T10282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.702781][T10282] ? __lock_acquire+0x5c0/0x1f40 [ 179.702821][T10282] ? __fget_files+0x34/0x3d0 [ 179.702846][T10282] ? find_held_lock+0x2b/0x80 [ 179.702866][T10282] ? hook_file_ioctl_common+0x140/0x440 [ 179.702897][T10282] ? __fget_files+0x21f/0x3d0 [ 179.702925][T10282] security_file_ioctl+0xd3/0x230 [ 179.702957][T10282] __x64_sys_ioctl+0xb7/0x210 [ 179.702980][T10282] do_syscall_64+0x123/0x790 [ 179.703028][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.703048][T10282] RIP: 0033:0x7f44fbf9fb19 [ 179.703066][T10282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.703085][T10282] RSP: 002b:00007f44fcec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.703115][T10282] RAX: ffffffffffffffda RBX: 00007f44fc225fa0 RCX: 00007f44fbf9fb19 [ 179.703126][T10282] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 179.703139][T10282] RBP: 00007f44fcec0090 R08: 0000000000000000 R09: 0000000000000000 [ 179.703151][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.703161][T10282] R13: 00007f44fc226038 R14: 00007f44fc225fa0 R15: 00007fff862a51b8 [ 179.703189][T10282] [ 179.703199][T10282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.727359][ T5901] usb 12-1: USB disconnect, device number 19 [ 179.730067][ T5901] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 179.730323][ T5901] keyspan 12-1:1.0: device disconnected [ 179.759658][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1349'. [ 179.773400][T10287] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 179.819663][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 179.819677][ T42] audit: type=1800 audit(1793969260.995:3391): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1350" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22 [ 179.820340][T10289] loop7: detected capacity change from 0 to 7 [ 179.824442][ T5942] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 179.863905][T10289] Dev loop7: unable to read RDB block 7 [ 179.863940][T10289] loop7: unable to read partition table [ 179.864088][T10289] loop7: partition table beyond EOD, truncated [ 179.864124][T10289] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.975283][ T5942] usb 10-1: Using ep0 maxpacket: 8 [ 179.976002][ T5942] usb 10-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.978799][ T5942] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.978824][ T5942] usb 10-1: config 179 has no interface number 0 [ 179.978866][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.978889][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.978912][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.978934][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.978958][ T5942] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.978990][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.981940][T10278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 179.982489][ T42] audit: type=1800 audit(1793969261.155:3392): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219176 res=0 errno=-22 [ 179.984233][ T42] audit: type=1800 audit(1793969261.155:3393): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219205 res=0 errno=-22 [ 179.985147][ T42] audit: type=1800 audit(1793969261.165:3394): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219183 res=0 errno=-22 [ 179.986406][ T42] audit: type=1800 audit(1793969261.165:3395): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219184 res=0 errno=-22 [ 179.987286][ T42] audit: type=1800 audit(1793969261.165:3396): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219185 res=0 errno=-22 [ 179.994132][ T42] audit: type=1800 audit(1793969261.165:3397): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219225 res=0 errno=-22 [ 180.043619][ T42] audit: type=1400 audit(1793969261.215:3398): avc: denied { name_connect } for pid=10292 comm="syz.1.1352" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 180.186419][T10278] ip_tables: iptables: counters copy to user failed while replacing table [ 180.204964][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.324596][ T42] audit: type=1800 audit(1793969261.505:3399): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219293 res=0 errno=-22 [ 180.378921][T10308] gadgetfs: bound to dummy_udc driver [ 180.384379][ T42] audit: type=1800 audit(1793969261.555:3400): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34945 res=0 errno=-22 [ 180.439580][T10314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1360'. [ 180.492423][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1359'. [ 180.506032][T10316] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 180.674421][ T3418] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 180.825111][ T3418] usb 6-1: Using ep0 maxpacket: 8 [ 180.825590][ T3418] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.826538][ T3418] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.826567][ T3418] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 180.826588][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.826612][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.826627][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.826649][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.826666][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 180.826690][ T3418] usb 6-1: config 168 interface 0 has no altsetting 0 [ 180.827571][ T3418] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.827595][ T3418] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 180.827625][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.827641][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.827663][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.827678][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.827700][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 180.827716][ T3418] usb 6-1: config 168 interface 0 has no altsetting 0 [ 180.828610][ T3418] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.828640][ T3418] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 180.828687][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.828714][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.828749][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.828782][ T3418] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.828818][ T3418] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 180.828843][ T3418] usb 6-1: config 168 interface 0 has no altsetting 0 [ 180.831812][ T3418] usb 6-1: string descriptor 0 read error: -22 [ 180.831917][ T3418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.836091][ T3418] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 181.101667][ T3418] usb 6-1: USB disconnect, device number 31 [ 181.474421][ T3418] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 181.625009][ T3418] usb 6-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 181.625962][ T3418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.627659][ T3418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.627673][ T3418] usb 6-1: Product: syz [ 181.627682][ T3418] usb 6-1: Manufacturer: syz [ 181.627691][ T3418] usb 6-1: SerialNumber: syz [ 181.635173][ T3418] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 181.635257][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 181.635865][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 181.635901][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 181.635934][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 181.636108][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 181.636142][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 181.636175][ T3418] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 181.636929][ T3418] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 181.698079][T10339] Cannot find del_set index 4 as target [ 181.743575][T10343] FAULT_INJECTION: forcing a failure. [ 181.743575][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 181.743598][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.7.1369 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.743615][T10343] Tainted: [L]=SOFTLOCKUP [ 181.743620][T10343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.743641][T10343] Call Trace: [ 181.743646][T10343] [ 181.743652][T10343] dump_stack_lvl+0x100/0x190 [ 181.743678][T10343] should_fail_ex.cold+0x5/0xa [ 181.743699][T10343] should_failslab+0xc2/0x120 [ 181.743714][T10343] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.743734][T10343] ? proc_id_map_open+0xb0/0x7d0 [ 181.743752][T10343] ? seq_open+0x55/0x170 [ 181.743772][T10343] seq_open+0x55/0x170 [ 181.743785][T10343] proc_id_map_open+0x316/0x7d0 [ 181.743804][T10343] do_dentry_open+0x674/0x1470 [ 181.743819][T10343] ? __pfx_proc_uid_map_open+0x10/0x10 [ 181.743840][T10343] vfs_open_consume+0xcc/0x460 [ 181.743860][T10343] path_openat+0x1547/0x23f0 [ 181.743879][T10343] ? __pfx_path_openat+0x10/0x10 [ 181.743899][T10343] do_file_open+0x20e/0x430 [ 181.743915][T10343] ? __pfx_do_file_open+0x10/0x10 [ 181.743936][T10343] ? __pfx_kfree_link+0x10/0x10 [ 181.743954][T10343] ? _raw_spin_unlock+0x28/0x50 [ 181.743967][T10343] ? alloc_fd+0x471/0x7a0 [ 181.743986][T10343] do_sys_openat2+0x163/0x1d0 [ 181.744003][T10343] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.744026][T10343] __x64_sys_openat+0x12d/0x210 [ 181.744043][T10343] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.744061][T10343] ? ksys_write+0x1ac/0x250 [ 181.744078][T10343] do_syscall_64+0x123/0x790 [ 181.744094][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.744107][T10343] RIP: 0033:0x7efca996034e [ 181.744119][T10343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.744131][T10343] RSP: 002b:00007efcaa928ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.744144][T10343] RAX: ffffffffffffffda RBX: 00007efcaa9296c0 RCX: 00007efca996034e [ 181.744152][T10343] RDX: 0000000000000002 RSI: 00007efcaa928f90 RDI: ffffffffffffff9c [ 181.744160][T10343] RBP: 00007efca9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 181.744167][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.744174][T10343] R13: 00007efca9c26038 R14: 00007efca9c25fa0 R15: 00007ffddc6a7968 [ 181.744189][T10343] [ 181.953377][ T1048] usb 6-1: USB disconnect, device number 32 [ 181.959163][ T1048] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 181.959435][ T1048] keyspan 6-1:1.0: device disconnected [ 182.578453][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 182.578456][ T24] usb 10-1: USB disconnect, device number 35 [ 182.578573][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 182.607820][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'. [ 182.627983][T10359] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 182.721900][T10365] loop7: detected capacity change from 0 to 7 [ 182.772692][T10365] Dev loop7: unable to read RDB block 7 [ 182.772720][T10365] loop7: unable to read partition table [ 182.772844][T10365] loop7: partition table beyond EOD, truncated [ 182.772865][T10365] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 182.775632][T10370] FAULT_INJECTION: forcing a failure. [ 182.775632][T10370] name failslab, interval 1, probability 0, space 0, times 0 [ 182.775657][T10370] CPU: 2 UID: 0 PID: 10370 Comm: syz.5.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.775681][T10370] Tainted: [L]=SOFTLOCKUP [ 182.775687][T10370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.775697][T10370] Call Trace: [ 182.775704][T10370] [ 182.775710][T10370] dump_stack_lvl+0x100/0x190 [ 182.775744][T10370] should_fail_ex.cold+0x5/0xa [ 182.775771][T10370] should_failslab+0xc2/0x120 [ 182.775791][T10370] __kmalloc_noprof+0xfc/0x840 [ 182.775818][T10370] ? tomoyo_encode2+0xfb/0x3c0 [ 182.775841][T10370] tomoyo_encode2+0xfb/0x3c0 [ 182.775862][T10370] tomoyo_encode+0x29/0x50 [ 182.775879][T10370] tomoyo_realpath_from_path+0x18c/0x690 [ 182.775904][T10370] tomoyo_path_number_perm+0x23c/0x580 [ 182.775930][T10370] ? tomoyo_path_number_perm+0x22e/0x580 [ 182.775959][T10370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.776001][T10370] ? __lock_acquire+0x5c0/0x1f40 [ 182.776042][T10370] ? __fget_files+0x34/0x3d0 [ 182.776068][T10370] ? find_held_lock+0x2b/0x80 [ 182.776088][T10370] ? hook_file_ioctl_common+0x140/0x440 [ 182.776118][T10370] ? __fget_files+0x21f/0x3d0 [ 182.776147][T10370] security_file_ioctl+0xd3/0x230 [ 182.776178][T10370] __x64_sys_ioctl+0xb7/0x210 [ 182.776201][T10370] do_syscall_64+0x123/0x790 [ 182.776227][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.776248][T10370] RIP: 0033:0x7f59ef59fb19 [ 182.776264][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.776282][T10370] RSP: 002b:00007f59f04b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.776301][T10370] RAX: ffffffffffffffda RBX: 00007f59ef826090 RCX: 00007f59ef59fb19 [ 182.776314][T10370] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 182.776325][T10370] RBP: 00007f59f04b1090 R08: 0000000000000000 R09: 0000000000000000 [ 182.776337][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.776348][T10370] R13: 00007f59ef826128 R14: 00007f59ef826090 R15: 00007ffc5caced78 [ 182.776376][T10370] [ 182.776392][T10370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.920597][T10372] device-mapper: table: 248:4: verity: Hash device lookup failed (-ENOENT) [ 182.920613][T10372] device-mapper: ioctl: error adding target to table [ 182.978383][T10391] FAULT_INJECTION: forcing a failure. [ 182.978383][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 182.978415][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.5.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.978442][T10391] Tainted: [L]=SOFTLOCKUP [ 182.978450][T10391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.978462][T10391] Call Trace: [ 182.978469][T10391] [ 182.978477][T10391] dump_stack_lvl+0x100/0x190 [ 182.978514][T10391] should_fail_ex.cold+0x5/0xa [ 182.978549][T10391] should_failslab+0xc2/0x120 [ 182.978574][T10391] __kmalloc_noprof+0xfc/0x840 [ 182.978606][T10391] ? rcu_is_watching+0x13/0xc0 [ 182.978650][T10391] ? tomoyo_encode2+0xfb/0x3c0 [ 182.978683][T10391] tomoyo_encode2+0xfb/0x3c0 [ 182.978710][T10391] tomoyo_encode+0x29/0x50 [ 182.978729][T10391] tomoyo_realpath_from_path+0x18c/0x690 [ 182.978758][T10391] tomoyo_check_open_permission+0x2af/0x3c0 [ 182.978791][T10391] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 182.978831][T10391] ? hook_file_open+0x245/0x8e0 [ 182.978883][T10391] tomoyo_file_open+0x6b/0x90 [ 182.978909][T10391] security_file_open+0xb5/0x1e0 [ 182.978932][T10391] do_dentry_open+0x552/0x1470 [ 182.978962][T10391] vfs_open_consume+0xcc/0x460 [ 182.978994][T10391] path_openat+0x1547/0x23f0 [ 182.979025][T10391] ? __pfx_path_openat+0x10/0x10 [ 182.979060][T10391] do_file_open+0x20e/0x430 [ 182.979088][T10391] ? __pfx_do_file_open+0x10/0x10 [ 182.979125][T10391] ? __pfx_kfree_link+0x10/0x10 [ 182.979156][T10391] ? _raw_spin_unlock+0x28/0x50 [ 182.979176][T10391] ? alloc_fd+0x471/0x7a0 [ 182.979213][T10391] do_sys_openat2+0x163/0x1d0 [ 182.979242][T10391] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.979283][T10391] __x64_sys_openat+0x12d/0x210 [ 182.979313][T10391] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.979354][T10391] do_syscall_64+0x123/0x790 [ 182.979381][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.979402][T10391] RIP: 0033:0x7f59ef56034e [ 182.979420][T10391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.979440][T10391] RSP: 002b:00007f59f04d1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.979461][T10391] RAX: ffffffffffffffda RBX: 00007f59f04d26c0 RCX: 00007f59ef56034e [ 182.979474][T10391] RDX: 0000000000000002 RSI: 00007f59f04d1f90 RDI: ffffffffffffff9c [ 182.979487][T10391] RBP: 00007f59ef637b70 R08: 0000000000000000 R09: 0000000000000000 [ 182.979500][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.979512][T10391] R13: 00007f59ef826038 R14: 00007f59ef825fa0 R15: 00007ffc5caced78 [ 182.979542][T10391] [ 182.979596][T10391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.265069][ T24] net_ratelimit: 4 callbacks suppressed [ 183.265088][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.311518][T10410] syzkaller0: entered promiscuous mode [ 183.311533][T10410] syzkaller0: entered allmulticast mode [ 183.327422][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.521344][T10412] device-mapper: table: 248:5: verity: Cannot initialize hash function (-ENOENT) [ 183.521371][T10412] device-mapper: ioctl: error adding target to table [ 183.818643][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'. [ 183.827462][T10442] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 184.139476][T10466] loop7: detected capacity change from 0 to 7 [ 184.186952][ T1309] blk_print_req_error: 6 callbacks suppressed [ 184.186976][ T1309] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.186993][ T1309] buffer_io_error: 8 callbacks suppressed [ 184.186999][ T1309] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.187878][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.187899][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.187928][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.187943][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.187965][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.187980][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188014][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188031][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188061][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188077][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188099][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188114][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188126][T10466] ldm_validate_partition_table(): Disk read failed. [ 184.188147][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188162][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188185][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188199][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188221][T10466] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 184.188236][T10466] Buffer I/O error on dev loop7, logical block 0, async page read [ 184.188261][T10466] Dev loop7: unable to read RDB block 0 [ 184.188328][T10466] loop7: unable to read partition table [ 184.188421][T10466] loop7: partition table beyond EOD, truncated [ 184.188443][T10466] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 184.374979][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.394447][ T2330] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 184.443365][T10487] Could not find key with description: [syz0] [ 184.443377][T10487] process_request_key_err: No key [ 184.443383][T10487] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 184.443390][T10487] One or more global auth toks could not properly register; rc = [-2] [ 184.443403][T10487] Error validating options; rc = [-2] [ 184.555608][ T2330] usb 8-1: Using ep0 maxpacket: 16 [ 184.556868][ T2330] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 184.557932][ T2330] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1967, setting to 1024 [ 184.557959][ T2330] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.557981][ T2330] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 184.561944][ T2330] usb 8-1: string descriptor 0 read error: -22 [ 184.562038][ T2330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.626455][T10490] FAULT_INJECTION: forcing a failure. [ 184.626455][T10490] name failslab, interval 1, probability 0, space 0, times 0 [ 184.626476][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.7.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.626494][T10490] Tainted: [L]=SOFTLOCKUP [ 184.626498][T10490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.626505][T10490] Call Trace: [ 184.626510][T10490] [ 184.626515][T10490] dump_stack_lvl+0x100/0x190 [ 184.626552][T10490] should_fail_ex.cold+0x5/0xa [ 184.626581][T10490] should_failslab+0xc2/0x120 [ 184.626604][T10490] kmem_cache_alloc_noprof+0x92/0x6a0 [ 184.626624][T10490] ? proc_id_map_open+0xb0/0x7d0 [ 184.626643][T10490] ? seq_open+0x55/0x170 [ 184.626659][T10490] seq_open+0x55/0x170 [ 184.626671][T10490] proc_id_map_open+0x316/0x7d0 [ 184.626689][T10490] do_dentry_open+0x674/0x1470 [ 184.626703][T10490] ? __pfx_proc_uid_map_open+0x10/0x10 [ 184.626724][T10490] vfs_open_consume+0xcc/0x460 [ 184.626743][T10490] path_openat+0x1547/0x23f0 [ 184.626761][T10490] ? __pfx_path_openat+0x10/0x10 [ 184.626781][T10490] do_file_open+0x20e/0x430 [ 184.626797][T10490] ? __pfx_do_file_open+0x10/0x10 [ 184.626818][T10490] ? __pfx_kfree_link+0x10/0x10 [ 184.626835][T10490] ? _raw_spin_unlock+0x28/0x50 [ 184.626876][T10490] ? alloc_fd+0x471/0x7a0 [ 184.626897][T10490] do_sys_openat2+0x163/0x1d0 [ 184.626915][T10490] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.626938][T10490] __x64_sys_openat+0x12d/0x210 [ 184.626956][T10490] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.626980][T10490] do_syscall_64+0x123/0x790 [ 184.626997][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.627011][T10490] RIP: 0033:0x7efca996034e [ 184.627022][T10490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.627034][T10490] RSP: 002b:00007efcaa928ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.627046][T10490] RAX: ffffffffffffffda RBX: 00007efcaa9296c0 RCX: 00007efca996034e [ 184.627054][T10490] RDX: 0000000000000002 RSI: 00007efcaa928f90 RDI: ffffffffffffff9c [ 184.627062][T10490] RBP: 00007efca9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 184.627069][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.627082][T10490] R13: 00007efca9c26038 R14: 00007efca9c25fa0 R15: 00007ffddc6a7968 [ 184.627099][T10490] [ 184.871492][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 184.871507][ T42] audit: type=1800 audit(1793969266.045:3453): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1411" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22 [ 184.871966][T10500] loop7: detected capacity change from 0 to 7 [ 184.914987][T10498] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 185.189466][T10503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=15 sclass=netlink_tcpdiag_socket pid=10503 comm=syz.5.1418 [ 185.228280][ T42] audit: type=1400 audit(1793969266.405:3454): avc: denied { mount } for pid=10506 comm="syz.1.1420" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 185.229495][ T42] audit: type=1400 audit(1793969266.405:3455): avc: denied { mounton } for pid=10506 comm="syz.1.1420" path="/366/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 185.251642][ T42] audit: type=1400 audit(1793969266.425:3456): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 185.261980][T10513] device-mapper: table: 248:6: verity: Hash device lookup failed (-ENOENT) [ 185.261995][T10513] device-mapper: ioctl: error adding target to table [ 185.301732][T10518] ip_tables: iptables: counters copy to user failed while replacing table [ 185.404827][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.553011][T10525] ip6t_REJECT: ECHOREPLY is not supported [ 185.556363][ T42] audit: type=1800 audit(1793969266.735:3457): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1426" name="detach" dev="sysfs" ino=36690 res=0 errno=-13 [ 185.558284][T10528] vhci_hcd: not connected 4 [ 185.558309][T10528] vhci_hcd: not connected 4 [ 185.558354][T10528] vhci_hcd: not connected 4 [ 185.558371][T10528] vhci_hcd: not connected 4 [ 185.558388][T10528] vhci_hcd: not connected 4 [ 185.558425][T10528] vhci_hcd: not connected 4 [ 185.558442][T10528] vhci_hcd: not connected 4 [ 185.558459][T10528] vhci_hcd: not connected 4 [ 185.558475][T10528] vhci_hcd: not connected 4 [ 185.558492][T10528] vhci_hcd: not connected 4 [ 185.558547][T10528] vhci_hcd: not connected 4 [ 185.558565][T10528] vhci_hcd: not connected 4 [ 185.558581][T10528] vhci_hcd: not connected 4 [ 185.558598][T10528] vhci_hcd: not connected 4 [ 185.558614][T10528] vhci_hcd: not connected 4 [ 185.558631][T10528] vhci_hcd: not connected 4 [ 185.558648][T10528] vhci_hcd: not connected 4 [ 185.558664][T10528] vhci_hcd: not connected 4 [ 185.558681][T10528] vhci_hcd: not connected 4 [ 185.558698][T10528] vhci_hcd: not connected 4 [ 185.558714][T10528] vhci_hcd: not connected 4 [ 185.558731][T10528] vhci_hcd: not connected 4 [ 185.558748][T10528] vhci_hcd: not connected 4 [ 185.558764][T10528] vhci_hcd: not connected 4 [ 185.558781][T10528] vhci_hcd: not connected 4 [ 185.558798][T10528] vhci_hcd: not connected 4 [ 185.558814][T10528] vhci_hcd: not connected 4 [ 185.558831][T10528] vhci_hcd: not connected 4 [ 185.558847][T10528] vhci_hcd: not connected 4 [ 185.558864][T10528] vhci_hcd: not connected 4 [ 185.558880][T10528] vhci_hcd: not connected 4 [ 185.558897][T10528] vhci_hcd: not connected 4 [ 185.558914][T10528] vhci_hcd: not connected 4 [ 185.667035][T10526] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1426'. [ 185.679557][T10532] overlayfs: failed to resolve './file1': -2 [ 185.737701][T10536] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 186.064401][ T5942] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 186.215718][ T5942] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 186.216614][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.216640][ T5942] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.216656][ T5942] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.218382][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.218398][ T5942] usb 6-1: Product: syz [ 186.218408][ T5942] usb 6-1: Manufacturer: syz [ 186.218418][ T5942] usb 6-1: SerialNumber: syz [ 186.222155][ T42] audit: type=1800 audit(1793969267.395:3458): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220351 res=0 errno=-22 [ 186.231150][ T42] audit: type=1800 audit(1793969267.395:3459): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220383 res=0 errno=-22 [ 186.231184][ T42] audit: type=1800 audit(1793969267.405:3460): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220358 res=0 errno=-22 [ 186.231206][ T42] audit: type=1800 audit(1793969267.405:3461): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220359 res=0 errno=-22 [ 186.394549][ T41] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 186.426486][ T42] audit: type=1400 audit(1793969267.605:3462): avc: denied { setopt } for pid=10550 comm="syz.7.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.444896][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.544812][ T41] usb 10-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 186.545740][ T41] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.545764][ T41] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.545777][ T41] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.547415][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.547428][ T41] usb 10-1: Product: syz [ 186.547475][ T41] usb 10-1: Manufacturer: syz [ 186.547485][ T41] usb 10-1: SerialNumber: syz [ 186.627403][ T5942] usb 6-1: Cannot retrieve CPort count: -71 [ 186.627429][ T5942] usb 6-1: Cannot retrieve CPort count: -71 [ 186.627444][ T5942] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 186.629879][ T5942] usb 6-1: USB disconnect, device number 33 [ 186.751876][T10542] FAULT_INJECTION: forcing a failure. [ 186.751876][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 186.751898][T10542] CPU: 1 UID: 0 PID: 10542 Comm: syz.5.1431 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.751928][T10542] Tainted: [L]=SOFTLOCKUP [ 186.751933][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.751941][T10542] Call Trace: [ 186.751950][T10542] [ 186.751955][T10542] dump_stack_lvl+0x100/0x190 [ 186.751986][T10542] should_fail_ex.cold+0x5/0xa [ 186.752006][T10542] should_failslab+0xc2/0x120 [ 186.752024][T10542] __kmalloc_noprof+0xfc/0x840 [ 186.752042][T10542] ? rcu_is_watching+0x13/0xc0 [ 186.752065][T10542] ? tomoyo_realpath_from_path+0xb6/0x690 [ 186.752088][T10542] tomoyo_realpath_from_path+0xb6/0x690 [ 186.752105][T10542] tomoyo_path_number_perm+0x23c/0x580 [ 186.752123][T10542] ? tomoyo_path_number_perm+0x22e/0x580 [ 186.752142][T10542] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.752166][T10542] ? __lock_acquire+0x5c0/0x1f40 [ 186.752189][T10542] ? __fget_files+0x34/0x3d0 [ 186.752205][T10542] ? find_held_lock+0x2b/0x80 [ 186.752218][T10542] ? hook_file_ioctl_common+0x140/0x440 [ 186.752236][T10542] ? __fget_files+0x21f/0x3d0 [ 186.752253][T10542] security_file_ioctl+0xd3/0x230 [ 186.752273][T10542] __x64_sys_ioctl+0xb7/0x210 [ 186.752287][T10542] do_syscall_64+0x123/0x790 [ 186.752314][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.752327][T10542] RIP: 0033:0x7f59ef59f7ab [ 186.752337][T10542] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 186.752348][T10542] RSP: 002b:00007f59f04d0f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.752368][T10542] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f59ef59f7ab [ 186.752376][T10542] RDX: 00007f59f04d0fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 186.752383][T10542] RBP: 0000000000000003 R08: 00007f59ef950320 R09: 0000000000000000 [ 186.752390][T10542] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 186.752397][T10542] R13: 0000000000000000 R14: 00007f59ef825fa0 R15: 00007ffc5caced78 [ 186.752413][T10542] [ 186.752455][T10542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.953004][ T41] usb 10-1: Cannot retrieve CPort count: -71 [ 186.953052][ T41] usb 10-1: Cannot retrieve CPort count: -71 [ 186.953105][ T41] es2_ap_driver 10-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 186.959980][ T41] usb 10-1: USB disconnect, device number 36 [ 187.173901][ T2330] cdc_ncm 8-1:1.0: bind() failure [ 187.179521][ T2330] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 187.179546][ T2330] cdc_ncm 8-1:1.1: bind() failure [ 187.186310][ T2330] usb 8-1: USB disconnect, device number 33 [ 187.236052][T10558] overlayfs: overlapping lowerdir path [ 187.243605][T10558] overlay: Unknown parameter '/' [ 187.359958][T10566] i2c i2c-0: new_device: Can't parse I2C address [ 187.414510][T10255] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 187.432709][T10569] ip_tables: iptables: counters copy to user failed while replacing table [ 187.484756][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.566365][T10255] usb 6-1: device descriptor read/64, error -71 [ 187.636299][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.639860][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.642926][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.643313][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.651055][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.651386][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.651890][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.652587][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.652864][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.653145][T10590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 187.717807][T10598] ip_tables: iptables: counters copy to user failed while replacing table [ 187.814599][T10255] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 187.944413][ T41] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 187.944416][T10255] usb 6-1: device descriptor read/64, error -71 [ 188.054772][T10255] usb usb6-port1: attempt power cycle [ 188.104661][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 188.105391][ T41] usb 10-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.106363][ T41] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.106392][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.106424][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.106449][ T41] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.106470][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.106493][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.106515][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 188.106538][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 188.107403][ T41] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.107431][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.107460][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.107483][ T41] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.107504][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.107526][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.107549][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 188.107573][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 188.108453][ T41] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.108481][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 188.108510][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.108533][ T41] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.108568][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.108590][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.108612][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 188.108634][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 188.111383][ T41] usb 10-1: string descriptor 0 read error: -22 [ 188.111499][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.119828][ T41] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.394434][T10255] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 188.414988][T10255] usb 6-1: device descriptor read/8, error -71 [ 188.422515][ T5871] usb 10-1: USB disconnect, device number 37 [ 188.534769][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.638031][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1452'. [ 188.654477][T10255] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 188.658661][T10608] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 188.677423][T10255] usb 6-1: device descriptor read/8, error -71 [ 188.784902][T10255] usb usb6-port1: unable to enumerate USB device [ 188.874486][ T5901] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 189.035062][ T5901] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 189.036037][ T5901] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.036093][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.245948][ T5901] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 189.255625][ T5901] wwan wwan0: port wwan0qmi0 attached [ 189.285160][T10622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.336036][T10622] md: array md5 already initialised! [ 189.427825][T10622] md: personality for level -1 is not loaded! [ 189.427998][T10623] md: could not open device unknown-block(1,11). [ 189.428073][T10623] md: error, md_import_device() returned -16 [ 189.461899][T10627] FAULT_INJECTION: forcing a failure. [ 189.461899][T10627] name failslab, interval 1, probability 0, space 0, times 0 [ 189.461929][T10627] CPU: 0 UID: 0 PID: 10627 Comm: syz.7.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.461954][T10627] Tainted: [L]=SOFTLOCKUP [ 189.461962][T10627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.461973][T10627] Call Trace: [ 189.461987][T10627] [ 189.461995][T10627] dump_stack_lvl+0x100/0x190 [ 189.462041][T10627] should_fail_ex.cold+0x5/0xa [ 189.462070][T10627] should_failslab+0xc2/0x120 [ 189.462097][T10627] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.462125][T10627] ? proc_id_map_open+0xb0/0x7d0 [ 189.462152][T10627] ? seq_open+0x55/0x170 [ 189.462176][T10627] seq_open+0x55/0x170 [ 189.462196][T10627] proc_id_map_open+0x316/0x7d0 [ 189.462223][T10627] do_dentry_open+0x674/0x1470 [ 189.462243][T10627] ? __pfx_proc_uid_map_open+0x10/0x10 [ 189.462272][T10627] vfs_open_consume+0xcc/0x460 [ 189.462300][T10627] path_openat+0x1547/0x23f0 [ 189.462327][T10627] ? __pfx_path_openat+0x10/0x10 [ 189.462357][T10627] do_file_open+0x20e/0x430 [ 189.462382][T10627] ? __pfx_do_file_open+0x10/0x10 [ 189.462413][T10627] ? __pfx_kfree_link+0x10/0x10 [ 189.462441][T10627] ? _raw_spin_unlock+0x28/0x50 [ 189.462474][T10627] ? alloc_fd+0x471/0x7a0 [ 189.462506][T10627] do_sys_openat2+0x163/0x1d0 [ 189.462531][T10627] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.462566][T10627] __x64_sys_openat+0x12d/0x210 [ 189.462592][T10627] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.462616][T10627] ? ksys_write+0x1ac/0x250 [ 189.462644][T10627] do_syscall_64+0x123/0x790 [ 189.462669][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.462688][T10627] RIP: 0033:0x7efca996034e [ 189.462703][T10627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.462721][T10627] RSP: 002b:00007efcaa928ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.462757][T10627] RAX: ffffffffffffffda RBX: 00007efcaa9296c0 RCX: 00007efca996034e [ 189.462770][T10627] RDX: 0000000000000002 RSI: 00007efcaa928f90 RDI: ffffffffffffff9c [ 189.462783][T10627] RBP: 00007efca9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 189.462794][T10627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.462806][T10627] R13: 00007efca9c26038 R14: 00007efca9c25fa0 R15: 00007ffddc6a7968 [ 189.462851][T10627] [ 189.499509][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.499526][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.499716][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.499727][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.499909][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.499919][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.500109][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.500119][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.500302][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.500312][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.500503][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.500514][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.500705][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.500715][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.500906][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.500917][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.501111][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.501120][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.501303][ C3] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 189.501313][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 189.528283][ T5901] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 2e:72:79:1a:66:8b [ 189.533189][ T5901] usb 8-1: USB disconnect, device number 34 [ 189.533308][ C3] qmi_wwan 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 189.534642][ T5901] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 189.564720][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.624893][ T5901] wwan wwan0: port wwan0qmi0 disconnected [ 189.964477][ T41] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 190.117854][ T41] usb 12-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 190.118655][ T41] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.118680][ T41] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.118693][ T41] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.120239][ T41] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.120252][ T41] usb 12-1: Product: syz [ 190.120260][ T41] usb 12-1: Manufacturer: syz [ 190.120268][ T41] usb 12-1: SerialNumber: syz [ 190.122947][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 190.122958][ T42] audit: type=1800 audit(1793969271.295:3503): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221723 res=0 errno=-22 [ 190.127558][ T42] audit: type=1800 audit(1793969271.305:3504): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221755 res=0 errno=-22 [ 190.127604][ T42] audit: type=1800 audit(1793969271.305:3505): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221730 res=0 errno=-22 [ 190.127628][ T42] audit: type=1800 audit(1793969271.305:3506): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221731 res=0 errno=-22 [ 190.207646][ T42] audit: type=1800 audit(1793969271.385:3507): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1461" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22 [ 190.208530][T10637] loop7: detected capacity change from 0 to 7 [ 190.252826][T10637] Dev loop7: unable to read RDB block 7 [ 190.252852][T10637] loop7: unable to read partition table [ 190.252949][T10637] loop7: partition table beyond EOD, truncated [ 190.252970][T10637] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.264439][ T2330] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 190.310305][T10637] Dev loop7: unable to read RDB block 7 [ 190.310329][T10637] loop7: unable to read partition table [ 190.310505][T10637] loop7: partition table beyond EOD, truncated [ 190.415548][ T2330] usb 10-1: Using ep0 maxpacket: 8 [ 190.416189][ T2330] usb 10-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.419205][ T2330] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.419257][ T2330] usb 10-1: config 179 has no interface number 0 [ 190.419278][ T2330] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.419292][ T2330] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.419306][ T2330] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.419320][ T2330] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 190.419335][ T2330] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.419355][ T2330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.421773][ T42] audit: type=1800 audit(1793969271.595:3508): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221800 res=0 errno=-22 [ 190.422370][T10635] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 190.427576][ T42] audit: type=1800 audit(1793969271.605:3509): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221829 res=0 errno=-22 [ 190.427607][ T42] audit: type=1800 audit(1793969271.605:3510): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221807 res=0 errno=-22 [ 190.432335][ T42] audit: type=1800 audit(1793969271.605:3511): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221808 res=0 errno=-22 [ 190.432777][ T42] audit: type=1800 audit(1793969271.605:3512): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221809 res=0 errno=-22 [ 190.451685][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1462'. [ 190.464170][T10648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 190.530839][ T41] usb 12-1: Cannot retrieve CPort count: -71 [ 190.530863][ T41] usb 12-1: Cannot retrieve CPort count: -71 [ 190.530877][ T41] es2_ap_driver 12-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 190.539817][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 190.541620][ T41] usb 12-1: USB disconnect, device number 20 [ 190.570650][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.581390][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1465'. [ 190.604859][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.629654][T10635] ip_tables: iptables: counters copy to user failed while replacing table [ 190.700604][T10655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 190.738764][T10655] null_blk: disk my_nullb created [ 191.148017][T10664] FAULT_INJECTION: forcing a failure. [ 191.148017][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 191.148048][T10664] CPU: 3 UID: 0 PID: 10664 Comm: syz.7.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.148074][T10664] Tainted: [L]=SOFTLOCKUP [ 191.148080][T10664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.148091][T10664] Call Trace: [ 191.148098][T10664] [ 191.148105][T10664] dump_stack_lvl+0x100/0x190 [ 191.148142][T10664] should_fail_ex.cold+0x5/0xa [ 191.148170][T10664] should_failslab+0xc2/0x120 [ 191.148191][T10664] __kmalloc_noprof+0xfc/0x840 [ 191.148219][T10664] ? rcu_is_watching+0x13/0xc0 [ 191.148247][T10664] ? tomoyo_encode2+0xfb/0x3c0 [ 191.148273][T10664] tomoyo_encode2+0xfb/0x3c0 [ 191.148316][T10664] tomoyo_encode+0x29/0x50 [ 191.148335][T10664] tomoyo_realpath_from_path+0x18c/0x690 [ 191.148362][T10664] tomoyo_check_open_permission+0x2af/0x3c0 [ 191.148390][T10664] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 191.148426][T10664] ? hook_file_open+0x245/0x8e0 [ 191.148491][T10664] tomoyo_file_open+0x6b/0x90 [ 191.148518][T10664] security_file_open+0xb5/0x1e0 [ 191.148546][T10664] do_dentry_open+0x552/0x1470 [ 191.148574][T10664] vfs_open_consume+0xcc/0x460 [ 191.148604][T10664] path_openat+0x1547/0x23f0 [ 191.148631][T10664] ? __pfx_path_openat+0x10/0x10 [ 191.148661][T10664] do_file_open+0x20e/0x430 [ 191.148686][T10664] ? __pfx_do_file_open+0x10/0x10 [ 191.148719][T10664] ? __pfx_kfree_link+0x10/0x10 [ 191.148746][T10664] ? _raw_spin_unlock+0x28/0x50 [ 191.148765][T10664] ? alloc_fd+0x471/0x7a0 [ 191.148797][T10664] do_sys_openat2+0x163/0x1d0 [ 191.148824][T10664] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.148858][T10664] __x64_sys_openat+0x12d/0x210 [ 191.148884][T10664] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.148919][T10664] do_syscall_64+0x123/0x790 [ 191.148943][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.148963][T10664] RIP: 0033:0x7efca996034e [ 191.148979][T10664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.148996][T10664] RSP: 002b:00007efcaa928ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.149040][T10664] RAX: ffffffffffffffda RBX: 00007efcaa9296c0 RCX: 00007efca996034e [ 191.149055][T10664] RDX: 0000000000000002 RSI: 00007efcaa928f90 RDI: ffffffffffffff9c [ 191.149068][T10664] RBP: 00007efca9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 191.149080][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.149092][T10664] R13: 00007efca9c26038 R14: 00007efca9c25fa0 R15: 00007ffddc6a7968 [ 191.149119][T10664] [ 191.149186][T10664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.151224][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 191.192499][T10665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.194006][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.194138][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.207512][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.639415][T10675] device-mapper: table: 248:7: verity: Cannot initialize hash function (-ENOENT) [ 191.639547][T10675] device-mapper: ioctl: error adding target to table [ 191.644968][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.744511][ T7399] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 191.904390][ T7399] usb 12-1: Using ep0 maxpacket: 8 [ 191.907970][ T7399] usb 12-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 191.908797][ T7399] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 191.908816][ T7399] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 191.908836][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.908851][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.908864][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.908878][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.908893][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 191.908907][ T7399] usb 12-1: config 168 interface 0 has no altsetting 0 [ 191.909637][ T7399] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 191.909654][ T7399] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 191.909672][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.909686][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.909700][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.909713][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.909727][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 191.909742][ T7399] usb 12-1: config 168 interface 0 has no altsetting 0 [ 191.911670][ T7399] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 191.911696][ T7399] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 191.911725][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.911746][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.911767][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.911789][ T7399] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.911810][ T7399] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 191.911832][ T7399] usb 12-1: config 168 interface 0 has no altsetting 0 [ 191.920236][ T7399] usb 12-1: string descriptor 0 read error: -22 [ 191.920327][ T7399] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.937503][ T7399] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 192.011581][T10696] FAULT_INJECTION: forcing a failure. [ 192.011581][T10696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.011611][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.1.1477 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.011638][T10696] Tainted: [L]=SOFTLOCKUP [ 192.011646][T10696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.011658][T10696] Call Trace: [ 192.011665][T10696] [ 192.011673][T10696] dump_stack_lvl+0x100/0x190 [ 192.011724][T10696] should_fail_ex.cold+0x5/0xa [ 192.011764][T10696] should_fail_alloc_page+0xeb/0x140 [ 192.011797][T10696] prepare_alloc_pages+0x1f0/0x5b0 [ 192.011825][T10696] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 192.011856][T10696] ? __lock_acquire+0x5c0/0x1f40 [ 192.011895][T10696] ? is_bpf_text_address+0x94/0x1a0 [ 192.011921][T10696] ? kernel_text_address+0x8d/0x100 [ 192.011945][T10696] ? __kernel_text_address+0xd/0x30 [ 192.011972][T10696] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 192.012003][T10696] ? find_held_lock+0x2b/0x80 [ 192.012023][T10696] ? stack_depot_save_flags+0x49a/0xa10 [ 192.012066][T10696] ? rcu_is_watching+0x13/0xc0 [ 192.012088][T10696] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.012121][T10696] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.012145][T10696] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.012168][T10696] ? stack_depot_save_flags+0x49a/0xa10 [ 192.012205][T10696] ? kasan_save_track+0x14/0x30 [ 192.012224][T10696] ? __kasan_kmalloc+0xaa/0xb0 [ 192.012241][T10696] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 192.012273][T10696] ? do_kimage_alloc_init+0x40/0x320 [ 192.012303][T10696] ? do_kexec_load+0x11b/0x810 [ 192.012322][T10696] ? __x64_sys_kexec_load+0x1bf/0x230 [ 192.012342][T10696] ? do_syscall_64+0x123/0x790 [ 192.012365][T10696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.012389][T10696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.012425][T10696] ? policy_nodemask+0xed/0x5e0 [ 192.012454][T10696] alloc_pages_mpol+0x201/0x560 [ 192.012482][T10696] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 192.012514][T10696] alloc_pages_noprof+0x1a/0x160 [ 192.012544][T10696] kimage_alloc_pages+0x72/0x380 [ 192.012578][T10696] kimage_alloc_control_pages+0x157/0xa20 [ 192.012617][T10696] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 192.012656][T10696] do_kexec_load+0x275/0x810 [ 192.012679][T10696] ? __pfx_do_kexec_load+0x10/0x10 [ 192.012702][T10696] ? _copy_from_user+0x59/0xd0 [ 192.012731][T10696] __x64_sys_kexec_load+0x1bf/0x230 [ 192.012754][T10696] do_syscall_64+0x123/0x790 [ 192.012781][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.012802][T10696] RIP: 0033:0x7f44fbf9fb19 [ 192.012820][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.012840][T10696] RSP: 002b:00007f44fcec0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 192.012861][T10696] RAX: ffffffffffffffda RBX: 00007f44fc225fa0 RCX: 00007f44fbf9fb19 [ 192.012875][T10696] RDX: 00002000000006c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 192.012888][T10696] RBP: 00007f44fc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.012900][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.012913][T10696] R13: 00007f44fc226038 R14: 00007f44fc225fa0 R15: 00007fff862a51b8 [ 192.012941][T10696] [ 192.013182][T10696] kexec: Could not allocate control_code_buffer [ 192.029280][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 192.043065][T10693] kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5 [ 192.043350][T10693] kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5 [ 192.062743][T10693] kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5 [ 192.106213][T10693] kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5 [ 192.106524][T10693] kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5 [ 192.119545][T10693] kvm_intel: kvm [10692]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5 [ 192.130330][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'. [ 192.130530][T10693] xfrm0: entered promiscuous mode [ 192.130546][T10693] xfrm0: entered allmulticast mode [ 192.135662][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.136351][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'. [ 192.222227][T10706] loop7: detected capacity change from 0 to 7 [ 192.276846][T10706] Dev loop7: unable to read RDB block 7 [ 192.276881][T10706] loop7: unable to read partition table [ 192.277051][T10706] loop7: partition table beyond EOD, truncated [ 192.277679][T10706] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.981359][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1491'. [ 192.983772][T10742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1491'. [ 193.054780][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.054805][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.054819][ T2330] usb 10-1: USB disconnect, device number 38 [ 193.384450][ T41] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 193.384470][ T7399] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 193.432835][T10765] loop7: detected capacity change from 0 to 7 [ 193.473947][T10765] Dev loop7: unable to read RDB block 7 [ 193.473973][T10765] loop7: unable to read partition table [ 193.474071][T10765] loop7: partition table beyond EOD, truncated [ 193.474097][T10765] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 193.534406][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 193.535052][ T41] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.535899][ T7399] usb 8-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 193.536036][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 193.536066][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 193.536086][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.536108][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.536123][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.536144][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.536160][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.536182][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 193.536879][ T7399] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.538552][ T7399] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.538567][ T7399] usb 8-1: Product: syz [ 193.538577][ T7399] usb 8-1: Manufacturer: syz [ 193.538585][ T7399] usb 8-1: SerialNumber: syz [ 193.540030][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 193.540051][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 193.540081][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.540098][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.540121][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.540135][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.540158][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.540173][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 193.546484][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 193.546505][ T41] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 193.546535][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.546551][ T41] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.546573][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.546597][ T41] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.546628][ T41] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.546656][ T41] usb 6-1: config 168 interface 0 has no altsetting 0 [ 193.549495][ T7399] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 193.549649][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 193.552463][ T41] usb 6-1: string descriptor 0 read error: -22 [ 193.552525][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.553247][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 193.553322][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 193.553414][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 193.553583][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 193.553785][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 193.553846][ T7399] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 193.563753][ T7399] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 193.587632][ T41] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 193.724711][ T12] net_ratelimit: 1 callbacks suppressed [ 193.724730][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.782797][ T41] usb 6-1: USB disconnect, device number 38 [ 193.819835][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 193.869501][ T24] usb 8-1: USB disconnect, device number 35 [ 193.871603][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 193.871938][ T24] keyspan 8-1:1.0: device disconnected [ 194.125693][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.125758][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.285560][T10796] device-mapper: table: 248:8: integrity: Device lookup failed (-EBUSY) [ 194.285580][T10796] device-mapper: ioctl: error adding target to table [ 194.426761][T10809] kernel read not supported for file /policy (pid: 10809 comm: syz.3.1511) [ 194.504368][ T24] usb 12-1: USB disconnect, device number 21 [ 194.537810][T10818] Cannot find del_set index 4 as target [ 194.614500][T10831] No source specified [ 194.667307][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1515'. [ 194.683184][T10837] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 194.775329][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.864465][ T6235] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 194.922649][T10850] FAULT_INJECTION: forcing a failure. [ 194.922649][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 194.922672][T10850] CPU: 1 UID: 0 PID: 10850 Comm: syz.3.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.922689][T10850] Tainted: [L]=SOFTLOCKUP [ 194.922694][T10850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.922702][T10850] Call Trace: [ 194.922714][T10850] [ 194.922719][T10850] dump_stack_lvl+0x100/0x190 [ 194.922751][T10850] should_fail_ex.cold+0x5/0xa [ 194.922771][T10850] should_failslab+0xc2/0x120 [ 194.922791][T10850] kmem_cache_alloc_noprof+0x92/0x6a0 [ 194.922810][T10850] ? proc_id_map_open+0xb0/0x7d0 [ 194.922828][T10850] ? seq_open+0x55/0x170 [ 194.922844][T10850] seq_open+0x55/0x170 [ 194.922875][T10850] proc_id_map_open+0x316/0x7d0 [ 194.922896][T10850] do_dentry_open+0x674/0x1470 [ 194.922909][T10850] ? __pfx_proc_uid_map_open+0x10/0x10 [ 194.922930][T10850] vfs_open_consume+0xcc/0x460 [ 194.922951][T10850] path_openat+0x1547/0x23f0 [ 194.922969][T10850] ? __pfx_path_openat+0x10/0x10 [ 194.922990][T10850] do_file_open+0x20e/0x430 [ 194.923008][T10850] ? __pfx_do_file_open+0x10/0x10 [ 194.923029][T10850] ? __pfx_kfree_link+0x10/0x10 [ 194.923046][T10850] ? _raw_spin_unlock+0x28/0x50 [ 194.923072][T10850] ? alloc_fd+0x471/0x7a0 [ 194.923093][T10850] do_sys_openat2+0x163/0x1d0 [ 194.923111][T10850] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.923135][T10850] __x64_sys_openat+0x12d/0x210 [ 194.923153][T10850] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.923178][T10850] do_syscall_64+0x123/0x790 [ 194.923195][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.923208][T10850] RIP: 0033:0x7f86dfb6034e [ 194.923224][T10850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.923237][T10850] RSP: 002b:00007f86e09b3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.923257][T10850] RAX: ffffffffffffffda RBX: 00007f86e09b46c0 RCX: 00007f86dfb6034e [ 194.923265][T10850] RDX: 0000000000000002 RSI: 00007f86e09b3f90 RDI: ffffffffffffff9c [ 194.923272][T10850] RBP: 00007f86dfc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 194.923280][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.923288][T10850] R13: 00007f86dfe26038 R14: 00007f86dfe25fa0 R15: 00007ffc1d272e28 [ 194.923306][T10850] [ 195.007335][ T5901] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 195.015635][ T6235] usb 10-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 195.016600][ T6235] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.020326][ T6235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.020341][ T6235] usb 10-1: Product: syz [ 195.020349][ T6235] usb 10-1: Manufacturer: syz [ 195.020357][ T6235] usb 10-1: SerialNumber: syz [ 195.025969][ T6235] keyspan 10-1:1.0: Keyspan 1 port adapter converter detected [ 195.026066][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 195.026673][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 195.026707][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 195.026748][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 195.026783][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 195.026816][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 195.026849][ T6235] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 195.033030][ T6235] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 195.154928][ T5901] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 195.155745][ T5901] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.155771][ T5901] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.155785][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.157360][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.157374][ T5901] usb 6-1: Product: syz [ 195.157383][ T5901] usb 6-1: Manufacturer: syz [ 195.157392][ T5901] usb 6-1: SerialNumber: syz [ 195.160936][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 195.160948][ T42] audit: type=1800 audit(1793969276.335:3577): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223356 res=0 errno=-22 [ 195.161469][ T42] audit: type=1400 audit(1793969276.335:3578): avc: denied { ioctl } for pid=10854 comm="syz.3.1526" path="socket:[44989]" dev="sockfs" ino=44989 ioctlcmd=0x81f8943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.163007][ T42] audit: type=1400 audit(1793969276.335:3579): avc: denied { read } for pid=10854 comm="syz.3.1526" path="socket:[44989]" dev="sockfs" ino=44989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.165584][ T42] audit: type=1800 audit(1793969276.345:3580): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=223388 res=0 errno=-22 [ 195.167291][ T42] audit: type=1800 audit(1793969276.345:3581): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=223363 res=0 errno=-22 [ 195.169140][ T42] audit: type=1400 audit(1793969276.345:3582): avc: denied { connect } for pid=10854 comm="syz.3.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.171942][ T42] audit: type=1800 audit(1793969276.345:3583): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=223364 res=0 errno=-22 [ 195.363669][ T6235] usb 10-1: USB disconnect, device number 39 [ 195.364371][T10846] FAULT_INJECTION: forcing a failure. [ 195.364371][T10846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.364427][T10846] CPU: 3 UID: 0 PID: 10846 Comm: syz.1.1523 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.364446][T10846] Tainted: [L]=SOFTLOCKUP [ 195.364451][T10846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.364458][T10846] Call Trace: [ 195.364463][T10846] [ 195.364468][T10846] dump_stack_lvl+0x100/0x190 [ 195.364502][T10846] should_fail_ex.cold+0x5/0xa [ 195.364528][T10846] _copy_from_user+0x2e/0xd0 [ 195.364565][T10846] memdup_user+0x6b/0xe0 [ 195.364586][T10846] raw_alloc_io_data+0x186/0x1c0 [ 195.364628][T10846] raw_ioctl+0x223/0x2b80 [ 195.364649][T10846] ? __pfx_raw_ioctl+0x10/0x10 [ 195.364667][T10846] ? selinux_file_ioctl+0x1e0/0x290 [ 195.364687][T10846] ? selinux_file_ioctl+0x1e7/0x290 [ 195.364700][T10846] ? __pfx_raw_ioctl+0x10/0x10 [ 195.364719][T10846] __x64_sys_ioctl+0x18e/0x210 [ 195.364733][T10846] do_syscall_64+0x123/0x790 [ 195.364756][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.364769][T10846] RIP: 0033:0x7f44fbf9f7ab [ 195.364779][T10846] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 195.364790][T10846] RSP: 002b:00007f44fcebef60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.364802][T10846] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44fbf9f7ab [ 195.364810][T10846] RDX: 00007f44fcebefe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 195.364817][T10846] RBP: 0000000000000003 R08: 00007f44fc350320 R09: 0000000000000000 [ 195.364824][T10846] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 195.364831][T10846] R13: 0000000000000000 R14: 00007f44fc225fa0 R15: 00007fff862a51b8 [ 195.364846][T10846] [ 195.396771][ T6235] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 195.397052][ T6235] keyspan 10-1:1.0: device disconnected [ 195.565678][ T5901] usb 6-1: Cannot retrieve CPort count: -71 [ 195.565704][ T5901] usb 6-1: Cannot retrieve CPort count: -71 [ 195.565718][ T5901] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 195.566812][ T42] audit: type=1800 audit(1793969276.745:3584): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=223385 res=0 errno=-22 [ 195.567692][ T42] audit: type=1800 audit(1793969276.745:3585): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=223386 res=0 errno=-22 [ 195.568209][ T42] audit: type=1800 audit(1793969276.745:3586): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=223365 res=0 errno=-22 [ 195.569932][ T5901] usb 6-1: USB disconnect, device number 39 [ 195.804668][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.834500][ T6235] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 196.004398][ T6235] usb 12-1: Using ep0 maxpacket: 8 [ 196.004858][ T6235] usb 12-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.005678][ T6235] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 196.005703][ T6235] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.005715][ T6235] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.005729][ T6235] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.005742][ T6235] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.005762][ T6235] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.067923][T10874] netlink: 'syz.5.1533': attribute type 1 has an invalid length. [ 196.080639][T10874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.087733][T10874] veth0_to_bond: left promiscuous mode [ 196.093194][T10874] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.107174][T10877] FAULT_INJECTION: forcing a failure. [ 196.107174][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 196.107196][T10877] CPU: 0 UID: 0 PID: 10877 Comm: syz.1.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.107213][T10877] Tainted: [L]=SOFTLOCKUP [ 196.107218][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.107226][T10877] Call Trace: [ 196.107231][T10877] [ 196.107237][T10877] dump_stack_lvl+0x100/0x190 [ 196.107261][T10877] should_fail_ex.cold+0x5/0xa [ 196.107280][T10877] should_failslab+0xc2/0x120 [ 196.107296][T10877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 196.107315][T10877] ? proc_id_map_open+0xb0/0x7d0 [ 196.107333][T10877] ? seq_open+0x55/0x170 [ 196.107349][T10877] seq_open+0x55/0x170 [ 196.107362][T10877] proc_id_map_open+0x316/0x7d0 [ 196.107381][T10877] do_dentry_open+0x674/0x1470 [ 196.107394][T10877] ? __pfx_proc_uid_map_open+0x10/0x10 [ 196.107414][T10877] vfs_open_consume+0xcc/0x460 [ 196.107434][T10877] path_openat+0x1547/0x23f0 [ 196.107451][T10877] ? __pfx_path_openat+0x10/0x10 [ 196.107471][T10877] do_file_open+0x20e/0x430 [ 196.107488][T10877] ? __pfx_do_file_open+0x10/0x10 [ 196.107509][T10877] ? __pfx_kfree_link+0x10/0x10 [ 196.107526][T10877] ? _raw_spin_unlock+0x28/0x50 [ 196.107538][T10877] ? alloc_fd+0x471/0x7a0 [ 196.107558][T10877] do_sys_openat2+0x163/0x1d0 [ 196.107575][T10877] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.107598][T10877] __x64_sys_openat+0x12d/0x210 [ 196.107615][T10877] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.107632][T10877] ? ksys_write+0x1ac/0x250 [ 196.107650][T10877] do_syscall_64+0x123/0x790 [ 196.107667][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.107681][T10877] RIP: 0033:0x7f44fbf6034e [ 196.107700][T10877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.107713][T10877] RSP: 002b:00007f44fcebfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.107726][T10877] RAX: ffffffffffffffda RBX: 00007f44fcec06c0 RCX: 00007f44fbf6034e [ 196.107735][T10877] RDX: 0000000000000002 RSI: 00007f44fcebff90 RDI: ffffffffffffff9c [ 196.107744][T10877] RBP: 00007f44fc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 196.107752][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.107760][T10877] R13: 00007f44fc226038 R14: 00007f44fc225fa0 R15: 00007fff862a51b8 [ 196.107777][T10877] [ 196.152026][T10878] Cannot find del_set index 4 as target [ 196.210167][ T6235] usb 12-1: GET_CAPABILITIES returned 0 [ 196.210192][ T6235] usbtmc 12-1:16.0: can't read capabilities [ 196.243134][T10883] loop7: detected capacity change from 0 to 7 [ 196.282537][T10883] Dev loop7: unable to read RDB block 7 [ 196.282576][T10883] loop7: unable to read partition table [ 196.282747][T10883] loop7: partition table beyond EOD, truncated [ 196.282782][T10883] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 196.401752][T10891] No source specified [ 196.454907][ T1137] ata1.00: exception Emask 0x0 SAct 0x8 SErr 0x0 action 0x6 [ 196.454927][ T1137] ata1.00: waking up from sleep [ 196.454975][ T1137] ata1: hard resetting link [ 196.644416][ T41] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 196.778705][ T1137] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 196.779930][ T1137] ata1.00: configured for UDMA/100 [ 196.780126][ T1137] ata1: EH complete [ 196.785645][ T2330] usb 12-1: USB disconnect, device number 22 [ 196.804801][ T41] usb 8-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 196.805571][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.807049][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.807064][ T41] usb 8-1: Product: syz [ 196.807073][ T41] usb 8-1: Manufacturer: syz [ 196.807082][ T41] usb 8-1: SerialNumber: syz [ 196.809966][ T41] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 196.810122][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 196.810753][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 196.810787][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 196.810819][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 196.810851][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 196.810884][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 196.810927][ T41] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 196.811688][ T41] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 196.855313][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.126143][ T2330] usb 8-1: USB disconnect, device number 36 [ 197.131777][ T2330] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 197.132210][ T2330] keyspan 8-1:1.0: device disconnected [ 197.246115][T10908] FAULT_INJECTION: forcing a failure. [ 197.246115][T10908] name failslab, interval 1, probability 0, space 0, times 0 [ 197.246137][T10908] CPU: 0 UID: 0 PID: 10908 Comm: syz.5.1544 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.246154][T10908] Tainted: [L]=SOFTLOCKUP [ 197.246159][T10908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.246168][T10908] Call Trace: [ 197.246175][T10908] [ 197.246182][T10908] dump_stack_lvl+0x100/0x190 [ 197.246218][T10908] should_fail_ex.cold+0x5/0xa [ 197.246250][T10908] should_failslab+0xc2/0x120 [ 197.246276][T10908] kmem_cache_alloc_noprof+0x92/0x6a0 [ 197.246307][T10908] ? proc_id_map_open+0xb0/0x7d0 [ 197.246326][T10908] ? seq_open+0x55/0x170 [ 197.246341][T10908] seq_open+0x55/0x170 [ 197.246353][T10908] proc_id_map_open+0x316/0x7d0 [ 197.246371][T10908] do_dentry_open+0x674/0x1470 [ 197.246385][T10908] ? __pfx_proc_uid_map_open+0x10/0x10 [ 197.246406][T10908] vfs_open_consume+0xcc/0x460 [ 197.246425][T10908] path_openat+0x1547/0x23f0 [ 197.246443][T10908] ? __pfx_path_openat+0x10/0x10 [ 197.246462][T10908] do_file_open+0x20e/0x430 [ 197.246479][T10908] ? __pfx_do_file_open+0x10/0x10 [ 197.246499][T10908] ? __pfx_kfree_link+0x10/0x10 [ 197.246517][T10908] ? _raw_spin_unlock+0x28/0x50 [ 197.246529][T10908] ? alloc_fd+0x471/0x7a0 [ 197.246549][T10908] do_sys_openat2+0x163/0x1d0 [ 197.246567][T10908] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.246591][T10908] __x64_sys_openat+0x12d/0x210 [ 197.246608][T10908] ? __pfx___x64_sys_openat+0x10/0x10 [ 197.246625][T10908] ? ksys_write+0x1ac/0x250 [ 197.246642][T10908] do_syscall_64+0x123/0x790 [ 197.246659][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.246671][T10908] RIP: 0033:0x7f59ef56034e [ 197.246682][T10908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.246695][T10908] RSP: 002b:00007f59f04d1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.246708][T10908] RAX: ffffffffffffffda RBX: 00007f59f04d26c0 RCX: 00007f59ef56034e [ 197.246716][T10908] RDX: 0000000000000002 RSI: 00007f59f04d1f90 RDI: ffffffffffffff9c [ 197.246723][T10908] RBP: 00007f59ef637b70 R08: 0000000000000000 R09: 0000000000000000 [ 197.246730][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.246737][T10908] R13: 00007f59ef826038 R14: 00007f59ef825fa0 R15: 00007ffc5caced78 [ 197.246753][T10908] [ 197.337797][T10915] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1546'. [ 197.341428][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1546'. [ 197.341442][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1546'. [ 197.342437][T10915] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.342820][T10915] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.644951][ T6235] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 197.795912][ T6235] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 197.796753][ T6235] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.797648][ T6235] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.799241][ T6235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.799256][ T6235] usb 6-1: Product: syz [ 197.799265][ T6235] usb 6-1: Manufacturer: syz [ 197.799274][ T6235] usb 6-1: SerialNumber: syz [ 197.808118][ T6235] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 197.811274][ T6235] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 197.812646][ T6235] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 197.885203][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.920437][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1557'. [ 197.930805][T10953] device-mapper: table: 248:8: snapshot-merge: Cannot get origin device (-EBUSY) [ 197.930819][T10953] device-mapper: ioctl: error adding target to table [ 198.731380][T10950] Process accounting resumed [ 198.924809][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.178770][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.180775][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.183429][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.184407][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.188882][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.210667][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.211355][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.211583][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.212251][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.212694][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.313564][ T12] bridge_slave_1: left allmulticast mode [ 199.313834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.325367][ T12] bridge_slave_0: left allmulticast mode [ 199.325519][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.345396][ T12] pim6reg: left allmulticast mode [ 199.439513][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.441665][ T12] bond0 (unregistering): (slave c@0): Releasing backup interface [ 199.442676][ T12] bond0 (unregistering): Released all slaves [ 199.461563][ T12] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 199.463341][ T12] bond1 (unregistering): Released all slaves [ 199.478717][ T5497] 8021q: adding VLAN 0 to HW filter on device eth18 [ 199.515052][ T6235] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 199.605500][T10977] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.615541][T11008] geneve2: entered promiscuous mode [ 199.664990][ T6235] usb 8-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 199.665838][ T6235] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.665862][ T6235] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.665876][ T6235] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.667471][ T6235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.667485][ T6235] usb 8-1: Product: syz [ 199.667494][ T6235] usb 8-1: Manufacturer: syz [ 199.667503][ T6235] usb 8-1: SerialNumber: syz [ 199.699923][ T5497] 8021q: adding VLAN 0 to HW filter on device eth19 [ 199.728757][T10977] wg1 speed is unknown, defaulting to 1000 [ 199.903843][ T5497] 8021q: adding VLAN 0 to HW filter on device eth20 [ 199.965033][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.081310][T10983] FAULT_INJECTION: forcing a failure. [ 200.081310][T10983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.081331][T10983] CPU: 0 UID: 0 PID: 10983 Comm: syz.3.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.081348][T10983] Tainted: [L]=SOFTLOCKUP [ 200.081352][T10983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.081360][T10983] Call Trace: [ 200.081372][T10983] [ 200.081378][T10983] dump_stack_lvl+0x100/0x190 [ 200.081409][T10983] should_fail_ex.cold+0x5/0xa [ 200.081428][T10983] _copy_to_user+0x32/0xd0 [ 200.081451][T10983] simple_read_from_buffer+0xcb/0x170 [ 200.081468][T10983] proc_fail_nth_read+0x1af/0x230 [ 200.081486][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.081503][T10983] ? rw_verify_area+0xce/0x6d0 [ 200.081521][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.081542][T10983] vfs_read+0x1e4/0xb40 [ 200.081554][T10983] ? lock_acquire+0x1d1/0x380 [ 200.081581][T10983] ? __fget_files+0x34/0x3d0 [ 200.081596][T10983] ? __pfx_vfs_read+0x10/0x10 [ 200.081607][T10983] ? find_held_lock+0x2b/0x80 [ 200.081621][T10983] ? __fget_files+0x215/0x3d0 [ 200.081638][T10983] ? __fget_files+0x21f/0x3d0 [ 200.081657][T10983] ksys_read+0x12a/0x250 [ 200.081669][T10983] ? __pfx_ksys_read+0x10/0x10 [ 200.081685][T10983] do_syscall_64+0x123/0x790 [ 200.081711][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.081724][T10983] RIP: 0033:0x7f86dfb6034e [ 200.081734][T10983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.081746][T10983] RSP: 002b:00007f86e09b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.081766][T10983] RAX: ffffffffffffffda RBX: 00007f86e09b46c0 RCX: 00007f86dfb6034e [ 200.081774][T10983] RDX: 000000000000000f RSI: 00007f86e09b40a0 RDI: 0000000000000004 [ 200.081781][T10983] RBP: 00007f86e09b4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.081788][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.081795][T10983] R13: 00007f86dfe26038 R14: 00007f86dfe25fa0 R15: 00007ffc1d272e28 [ 200.081811][T10983] [ 200.091229][ T6235] usb 8-1: Cannot retrieve CPort count: -71 [ 200.091253][ T6235] usb 8-1: Cannot retrieve CPort count: -71 [ 200.091268][ T6235] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 200.092906][ T6235] usb 8-1: USB disconnect, device number 37 [ 200.095721][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.095764][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.095832][T10977] bridge_slave_0: entered allmulticast mode [ 200.102809][T10977] bridge_slave_0: entered promiscuous mode [ 200.105503][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.105548][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.105648][T10977] bridge_slave_1: entered allmulticast mode [ 200.108601][T10977] bridge_slave_1: entered promiscuous mode [ 200.128356][T10977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.129697][T10977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.144715][ T5497] 8021q: adding VLAN 0 to HW filter on device eth21 [ 200.149063][T10977] team0: Port device team_slave_0 added [ 200.150344][T10977] team0: Port device team_slave_1 added [ 200.187327][T10977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.187338][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.187353][T10977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.188225][T10977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.188234][T10977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.188248][T10977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.246932][T10977] hsr_slave_0: entered promiscuous mode [ 200.247428][T10977] hsr_slave_1: entered promiscuous mode [ 200.247777][T10977] debugfs: 'hsr0' already exists in 'hsr' [ 200.247787][T10977] Cannot create hsr debugfs directory [ 200.295507][ T5880] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 200.312870][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 200.312886][ T42] audit: type=1800 audit(1793969281.485:3688): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185620 res=0 errno=-22 [ 200.361004][ T42] audit: type=1800 audit(1793969281.535:3689): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27357 res=0 errno=-13 [ 200.361383][ T42] audit: type=1800 audit(1793969281.535:3690): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27356 res=0 errno=-13 [ 200.362175][ T42] audit: type=1800 audit(1793969281.535:3691): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237114 res=0 errno=-22 [ 200.420830][ T7399] usb 6-1: USB disconnect, device number 40 [ 200.437125][ T7399] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 200.452180][T10977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.452191][ T7399] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 200.452629][ T7399] ti_usb_3410_5052 6-1:2.0: device disconnected [ 200.458838][ T5880] usb 12-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 200.463543][T10977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.463948][T10977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.464188][ T5880] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.470824][ T5880] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.470840][ T5880] usb 12-1: Product: syz [ 200.470848][ T5880] usb 12-1: Manufacturer: syz [ 200.470856][ T5880] usb 12-1: SerialNumber: syz [ 200.473315][ T5880] keyspan 12-1:1.0: Keyspan 1 port adapter converter detected [ 200.473412][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 200.473982][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 200.474016][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 82 [ 200.474047][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 200.474079][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 200.474112][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 83 [ 200.474143][ T5880] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 3 [ 200.486651][T10977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.486829][ T42] audit: type=1800 audit(1793969281.665:3692): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237474 res=0 errno=-22 [ 200.486856][ T42] audit: type=1800 audit(1793969281.665:3693): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=237506 res=0 errno=-22 [ 200.487265][ T5880] usb 12-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 200.489035][ T42] audit: type=1800 audit(1793969281.675:3694): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=237481 res=0 errno=-22 [ 200.489690][ T42] audit: type=1800 audit(1793969281.675:3695): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=237482 res=0 errno=-22 [ 200.491251][ T42] audit: type=1800 audit(1793969281.675:3696): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=237503 res=0 errno=-22 [ 200.492865][ T42] audit: type=1800 audit(1793969281.675:3697): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=237504 res=0 errno=-22 [ 200.521415][T10977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.528562][T10977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.531463][T10977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.534016][T10977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.601848][T10977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.609870][T10977] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.613218][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.613264][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.620478][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.620529][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.744005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.747471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.796382][ T5880] usb 12-1: USB disconnect, device number 23 [ 200.804809][ T5880] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 200.805147][ T5880] keyspan 12-1:1.0: device disconnected [ 200.867251][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.876757][ T7399] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 200.913215][ T64] smc: removing ib device syz2 [ 200.939464][ T64] smbdirect: ib_dev[syz2] removed [ 201.015321][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.034469][ T7399] usb 6-1: Using ep0 maxpacket: 8 [ 201.039159][ T7399] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.039186][ T7399] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 201.040062][ T7399] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 201.040075][ T7399] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 201.040899][ T7399] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 201.040912][ T7399] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 201.042327][ T7399] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 201.042341][ T7399] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 201.054786][ T7399] usb 6-1: string descriptor 0 read error: -22 [ 201.054846][ T7399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.156854][T11077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.157509][T11078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.168011][T10977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.254580][ T5788] Bluetooth: hci2: command tx timeout [ 201.275065][T11077] md: md3 stopped. [ 201.299020][ T5901] usb 6-1: USB disconnect, device number 41 [ 201.299280][T10977] veth0_vlan: entered promiscuous mode [ 201.303362][T10977] veth1_vlan: entered promiscuous mode [ 201.328693][T10977] veth0_macvtap: entered promiscuous mode [ 201.333977][T10977] veth1_macvtap: entered promiscuous mode [ 201.348913][T10977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.351781][T10977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.357456][T11087] loop1: detected capacity change from 0 to 7 [ 201.404634][ T5833] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.404661][ T5833] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.404680][ T5833] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.404698][ T5833] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.412586][T11087] Dev loop1: unable to read RDB block 7 [ 201.412612][T11087] loop1: unable to read partition table [ 201.412755][T11087] loop1: partition table beyond EOD, truncated [ 201.412777][T11087] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 201.500720][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.500743][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.510843][ T12] IPVS: stop unused estimator thread 0... [ 201.674431][ T5880] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 201.824925][ T5880] usb 12-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 201.826242][ T5880] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.826282][ T5880] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.826301][ T5880] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.828228][ T5880] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.830809][ T5880] usb 12-1: Product: syz [ 201.830824][ T5880] usb 12-1: Manufacturer: syz [ 201.830838][ T5880] usb 12-1: SerialNumber: syz [ 202.039489][ T5880] usb 12-1: Cannot retrieve CPort count: -71 [ 202.039514][ T5880] usb 12-1: Cannot retrieve CPort count: -71 [ 202.039528][ T5880] es2_ap_driver 12-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 202.041309][ T5880] usb 12-1: USB disconnect, device number 24 [ 202.047266][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.571183][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1586'. [ 203.085118][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.124426][ T1362] usb 12-1: new low-speed USB device number 25 using dummy_hcd [ 203.264989][ T1362] usb 12-1: device descriptor read/64, error -71 [ 203.334566][ T5788] Bluetooth: hci2: command tx timeout [ 203.405319][ T7399] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 203.524505][ T1362] usb 12-1: new low-speed USB device number 26 using dummy_hcd [ 203.555193][ T7399] usb 6-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 203.556614][ T7399] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.558174][ T7399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.558187][ T7399] usb 6-1: Product: syz [ 203.558195][ T7399] usb 6-1: Manufacturer: syz [ 203.558203][ T7399] usb 6-1: SerialNumber: syz [ 203.561619][ T7399] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 203.561719][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 203.565123][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 203.565196][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 203.565254][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 203.565316][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 203.565377][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 203.565438][ T7399] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 203.569620][ T7399] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 203.674503][ T1362] usb 12-1: device descriptor read/64, error -71 [ 203.796778][ T1362] usb usb12-port1: attempt power cycle [ 203.867337][ T5880] usb 6-1: USB disconnect, device number 42 [ 203.869865][ T5880] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 203.870179][ T5880] keyspan 6-1:1.0: device disconnected [ 204.124745][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.135599][ T1362] usb 12-1: new low-speed USB device number 27 using dummy_hcd [ 204.155437][ T1362] usb 12-1: device descriptor read/8, error -71 [ 204.345607][T11087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.407055][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.407074][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.417048][ T1362] usb 12-1: new low-speed USB device number 28 using dummy_hcd [ 204.429967][T11129] loop7: detected capacity change from 0 to 7 [ 204.434951][ T1362] usb 12-1: device descriptor read/8, error -71 [ 204.463925][T11129] Dev loop7: unable to read RDB block 7 [ 204.463949][T11129] loop7: unable to read partition table [ 204.464052][T11129] loop7: partition table beyond EOD, truncated [ 204.466538][T11129] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 204.554682][ T1362] usb usb12-port1: unable to enumerate USB device [ 204.654487][T10253] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 204.783108][T11145] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 204.814235][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 204.814463][T10253] usb 6-1: Using ep0 maxpacket: 8 [ 204.814766][T10255] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 204.815240][T10253] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 204.817261][T10253] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.817275][T10253] usb 6-1: config 179 has no interface number 0 [ 204.817297][T10253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.817311][T10253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 204.817325][T10253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.817339][T10253] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 204.817353][T10253] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.817374][T10253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.818987][T11126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.858515][T11149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16146 sclass=netlink_tcpdiag_socket pid=11149 comm=syz.3.1601 [ 204.974913][T10255] usb 13-1: Using ep0 maxpacket: 8 [ 204.975572][T10255] usb 13-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 204.976451][T10255] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.976465][T10255] usb 13-1: config 179 has no interface number 0 [ 204.976537][T10255] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.976553][T10255] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 204.976567][T10255] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.976581][T10255] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 204.976599][T10255] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.976620][T10255] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.982546][T11137] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 205.026231][T11126] ip_tables: iptables: counters copy to user failed while replacing table [ 205.036034][ T5880] usb 6-1: USB disconnect, device number 43 [ 205.036148][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 205.036170][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.164916][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.187564][T11137] ip_tables: iptables: counters copy to user failed while replacing table [ 205.194120][ T5888] usb 13-1: USB disconnect, device number 2 [ 205.194250][ C0] xpad 13-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.194273][ C0] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 205.224388][ T1362] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 205.375168][ T1362] usb 8-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 205.376150][ T1362] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.376193][ T1362] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.376215][ T1362] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.378306][ T1362] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.378330][ T1362] usb 8-1: Product: syz [ 205.378345][ T1362] usb 8-1: Manufacturer: syz [ 205.378362][ T1362] usb 8-1: SerialNumber: syz [ 205.381105][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 205.381120][ T42] audit: type=1800 audit(1793969286.555:3764): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239421 res=0 errno=-22 [ 205.382003][ T42] audit: type=1800 audit(1793969286.555:3765): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239453 res=0 errno=-22 [ 205.382476][ T42] audit: type=1800 audit(1793969286.555:3766): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=239428 res=0 errno=-22 [ 205.382984][ T42] audit: type=1800 audit(1793969286.555:3767): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=239429 res=0 errno=-22 [ 205.404601][ T5788] Bluetooth: hci2: command tx timeout [ 205.584184][T11161] ipt_REJECT: TCP_RESET invalid for non-tcp [ 205.586606][ T1362] usb 8-1: Cannot retrieve CPort count: -71 [ 205.586629][ T1362] usb 8-1: Cannot retrieve CPort count: -71 [ 205.586644][ T1362] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 205.587729][ T42] audit: type=1800 audit(1793969286.765:3768): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=239450 res=0 errno=-22 [ 205.593560][ T1362] usb 8-1: USB disconnect, device number 38 [ 205.594394][ T42] audit: type=1800 audit(1793969286.765:3769): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=239451 res=0 errno=-22 [ 205.595883][ T42] audit: type=1800 audit(1793969286.775:3770): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=239430 res=0 errno=-22 [ 205.596335][ T42] audit: type=1800 audit(1793969286.775:3771): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=239452 res=0 errno=-22 [ 205.641312][ T42] audit: type=1800 audit(1793969286.815:3772): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1607" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22 [ 205.642466][T11163] loop7: detected capacity change from 0 to 7 [ 205.682945][T11163] Dev loop7: unable to read RDB block 7 [ 205.682982][T11163] loop7: unable to read partition table [ 205.683127][T11163] loop7: partition table beyond EOD, truncated [ 205.685226][T11163] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 205.724742][ T42] audit: type=1800 audit(1793969286.905:3773): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1608" name="mem_sleep" dev="sysfs" ino=867 res=0 errno=-22 [ 205.725246][T11166] loop7: detected capacity change from 0 to 7 [ 205.757400][T11166] Dev loop7: unable to read RDB block 7 [ 205.757426][T11166] loop7: unable to read partition table [ 205.757515][T11166] loop7: partition table beyond EOD, truncated [ 205.759741][T11166] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 205.829460][T11171] nvme nvme0: failed to connect socket: -111 [ 205.829885][T11171] [ 205.833323][T11171] ====================================================== [ 205.836220][T11171] WARNING: possible circular locking dependency detected [ 205.838621][T11171] syzkaller #0 Tainted: G L [ 205.840493][T11171] ------------------------------------------------------ [ 205.842479][T11171] syz.1.1610/11171 is trying to acquire lock: [ 205.844206][T11171] ffff888056d9a4c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 205.847081][T11171] [ 205.847081][T11171] but task is already holding lock: [ 205.849186][T11171] ffffffff91183f60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 205.852078][T11171] [ 205.852078][T11171] which lock already depends on the new lock. [ 205.852078][T11171] [ 205.855353][T11171] [ 205.855353][T11171] the existing dependency chain (in reverse order) is: [ 205.858137][T11171] [ 205.858137][T11171] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 205.860604][T11171] lock_acquire+0x1d1/0x380 [ 205.862215][T11171] __mutex_lock+0x19f/0x1c10 [ 205.863848][T11171] nvmf_dev_show+0x26/0x210 [ 205.865479][T11171] seq_read_iter+0x32f/0x1270 [ 205.867106][T11171] seq_read+0x344/0x4d0 [ 205.868626][T11171] vfs_read+0x1e4/0xb40 [ 205.870140][T11171] ksys_read+0x12a/0x250 [ 205.871649][T11171] do_syscall_64+0x123/0x790 [ 205.873279][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.875307][T11171] [ 205.875307][T11171] -> #3 (&p->lock){+.+.}-{4:4}: [ 205.877474][T11171] lock_acquire+0x1d1/0x380 [ 205.879073][T11171] __mutex_lock+0x19f/0x1c10 [ 205.880693][T11171] seq_read_iter+0xe1/0x1270 [ 205.882298][T11171] kernfs_fop_read_iter+0x46c/0x610 [ 205.884086][T11171] __kernel_read+0x397/0xad0 [ 205.885726][T11171] integrity_kernel_read+0x7e/0xb0 [ 205.887474][T11171] ima_calc_file_hash_tfm+0x25e/0x350 [ 205.889525][T11171] ima_calc_file_hash+0x1e3/0x380 [ 205.891265][T11171] ima_collect_measurement+0x952/0xb30 [ 205.893146][T11171] process_measurement+0xe04/0x2360 [ 205.894915][T11171] ima_file_check+0xbf/0x110 [ 205.896536][T11171] security_file_post_open+0xc4/0x210 [ 205.898386][T11171] path_openat+0x5d0/0x23f0 [ 205.899911][T11171] do_file_open+0x20e/0x430 [ 205.901422][T11171] do_sys_openat2+0x163/0x1d0 [ 205.903263][T11171] __x64_sys_openat+0x12d/0x210 [ 205.904962][T11171] do_syscall_64+0x123/0x790 [ 205.906596][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.908634][T11171] [ 205.908634][T11171] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 205.911331][T11171] lock_acquire+0x1d1/0x380 [ 205.912916][T11171] __mutex_lock+0x19f/0x1c10 [ 205.914539][T11171] process_measurement+0x5ab/0x2360 [ 205.916361][T11171] ima_file_check+0xbf/0x110 [ 205.917972][T11171] security_file_post_open+0xc4/0x210 [ 205.920060][T11171] path_openat+0x5d0/0x23f0 [ 205.921652][T11171] do_file_open+0x20e/0x430 [ 205.923240][T11171] file_open_name+0x1c3/0x3e0 [ 205.924876][T11171] filp_open+0x2e/0x50 [ 205.926307][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1588'. [ 205.929208][T11171] kernel_read_file_from_path_initns+0xec/0x240 [ 205.931328][T11171] _request_firmware+0x6f1/0x1410 [ 205.933086][T11171] request_firmware+0x35/0x50 [ 205.935076][T11171] reg_reload_regdb+0x87/0x540 [ 205.937343][T11171] genl_family_rcv_msg_doit+0x214/0x300 [ 205.939927][T11171] genl_rcv_msg+0x560/0x800 [ 205.942070][T11171] netlink_rcv_skb+0x159/0x420 [ 205.944294][T11171] genl_rcv+0x28/0x40 [ 205.946212][T11171] netlink_unicast+0x668/0x950 [ 205.948426][T11171] netlink_sendmsg+0x9ac/0x10c0 [ 205.950722][T11171] ____sys_sendmsg+0xa99/0xc30 [ 205.952958][T11171] ___sys_sendmsg+0x190/0x1e0 [ 205.955131][T11171] __sys_sendmsg+0x160/0x210 [ 205.957199][T11171] do_syscall_64+0x123/0x790 [ 205.959228][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.961719][T11171] [ 205.961719][T11171] -> #1 (cb_lock){++++}-{4:4}: [ 205.964497][T11171] lock_acquire+0x1d1/0x380 [ 205.966530][T11171] down_read+0x94/0x4c0 [ 205.968426][T11171] genl_release+0x7e/0x1d0 [ 205.970544][T11171] netlink_release+0x104e/0x1fc0 [ 205.972841][T11171] __sock_release+0xb3/0x260 [ 205.974999][T11171] sock_close+0x1c/0x30 [ 205.977000][T11171] __fput+0x3fb/0xb50 [ 205.978949][T11171] fput_close_sync+0x118/0x250 [ 205.981186][T11171] filp_close_sync+0x75/0xa0 [ 205.983342][T11171] __x64_sys_close+0x81/0x110 [ 205.985548][T11171] do_syscall_64+0x123/0x790 [ 205.987693][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.990397][T11171] [ 205.990397][T11171] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 205.994005][T11171] check_prev_add+0xeb/0xe60 [ 205.996165][T11171] __lock_acquire+0x1528/0x1f40 [ 205.998434][T11171] lock_acquire+0x1d1/0x380 [ 206.000565][T11171] down_write+0x86/0x1f0 [ 206.002591][T11171] __sock_release+0x86/0x260 [ 206.004752][T11171] sock_close+0x1c/0x30 [ 206.006739][T11171] __fput+0x3fb/0xb50 [ 206.008579][T11171] __fput_sync+0xd7/0x100 [ 206.010515][T11171] nvme_tcp_alloc_queue.isra.0+0xb26/0x1340 [ 206.012824][T11171] nvme_tcp_configure_admin_queue+0x26/0x530 [ 206.015350][T11171] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 206.017351][T11171] nvme_tcp_create_ctrl+0xd60/0x13d0 [ 206.019646][T11171] nvmf_dev_write+0x4ee/0xb60 [ 206.021550][T11171] vfs_write+0x2aa/0x1050 [ 206.023468][T11171] ksys_write+0x12a/0x250 [ 206.025295][T11171] do_syscall_64+0x123/0x790 [ 206.027063][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.029709][T11171] [ 206.029709][T11171] other info that might help us debug this: [ 206.029709][T11171] [ 206.033771][T11171] Chain exists of: [ 206.033771][T11171] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 206.033771][T11171] [ 206.039248][T11171] Possible unsafe locking scenario: [ 206.039248][T11171] [ 206.042247][T11171] CPU0 CPU1 [ 206.044488][T11171] ---- ---- [ 206.046743][T11171] lock(nvmf_dev_mutex); [ 206.048583][T11171] lock(&p->lock); [ 206.051250][T11171] lock(nvmf_dev_mutex); [ 206.054090][T11171] lock(&sb->s_type->i_mutex_key#13); [ 206.056380][T11171] [ 206.056380][T11171] *** DEADLOCK *** [ 206.056380][T11171] [ 206.059631][T11171] locks held by syz.1.1610/11171: 1, last CPU#1: [ 206.061647][T11171] #0: ffffffff91183f60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 206.064686][T11171] [ 206.064686][T11171] stack backtrace: [ 206.066563][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.1.1610 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.070036][T11171] Tainted: [L]=SOFTLOCKUP [ 206.071402][T11171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.074625][T11171] Call Trace: [ 206.075688][T11171] [ 206.076627][T11171] dump_stack_lvl+0x100/0x190 [ 206.078104][T11171] print_circular_bug.cold+0x178/0x1be [ 206.080049][T11171] check_noncircular+0x146/0x160 [ 206.081593][T11171] check_prev_add+0xeb/0xe60 [ 206.083039][T11171] __lock_acquire+0x1528/0x1f40 [ 206.084615][T11171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.086730][T11171] lock_acquire+0x1d1/0x380 [ 206.088212][T11171] ? __sock_release+0x86/0x260 [ 206.089846][T11171] ? __pfx___might_resched+0x10/0x10 [ 206.091538][T11171] down_write+0x86/0x1f0 [ 206.092953][T11171] ? __sock_release+0x86/0x260 [ 206.094497][T11171] ? __pfx_down_write+0x10/0x10 [ 206.096058][T11171] ? __pfx_locks_remove_file+0x10/0x10 [ 206.097831][T11171] __sock_release+0x86/0x260 [ 206.099502][T11171] ? __pfx_sock_close+0x10/0x10 [ 206.100999][T11171] sock_close+0x1c/0x30 [ 206.102274][T11171] __fput+0x3fb/0xb50 [ 206.103513][T11171] ? kfree+0x22b/0x6d0 [ 206.104816][T11171] __fput_sync+0xd7/0x100 [ 206.106160][T11171] nvme_tcp_alloc_queue.isra.0+0xb26/0x1340 [ 206.108206][T11171] nvme_tcp_configure_admin_queue+0x26/0x530 [ 206.110456][T11171] ? __wake_up+0x3f/0x60 [ 206.111866][T11171] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 206.113485][T11171] ? mark_held_locks+0x40/0x70 [ 206.115050][T11171] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 206.116825][T11171] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.118541][T11171] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.120280][T11171] ? nvme_change_ctrl_state+0xc0/0x440 [ 206.122055][T11171] nvme_tcp_create_ctrl+0xd60/0x13d0 [ 206.123738][T11171] nvmf_dev_write+0x4ee/0xb60 [ 206.125290][T11171] vfs_write+0x2aa/0x1050 [ 206.126681][T11171] ? __pfx_nvmf_dev_write+0x10/0x10 [ 206.128407][T11171] ? lock_acquire+0x1d1/0x380 [ 206.129954][T11171] ? __fget_files+0x34/0x3d0 [ 206.131436][T11171] ? __pfx_vfs_write+0x10/0x10 [ 206.133003][T11171] ? find_held_lock+0x2b/0x80 [ 206.134508][T11171] ? __fget_files+0x215/0x3d0 [ 206.136035][T11171] ? __fget_files+0x215/0x3d0 [ 206.137587][T11171] ? __fget_files+0x21f/0x3d0 [ 206.139138][T11171] ksys_write+0x12a/0x250 [ 206.140504][T11171] ? __pfx_ksys_write+0x10/0x10 [ 206.142051][T11171] do_syscall_64+0x123/0x790 [ 206.143542][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.145489][T11171] RIP: 0033:0x7f44fbf9fb19 [ 206.146935][T11171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.153203][T11171] RSP: 002b:00007f44fce9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.155852][T11171] RAX: ffffffffffffffda RBX: 00007f44fc226090 RCX: 00007f44fbf9fb19 [ 206.158370][T11171] RDX: 000000000000003f RSI: 00002000000001c0 RDI: 0000000000000005 [ 206.160907][T11171] RBP: 00007f44fc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 206.163426][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.165952][T11171] R13: 00007f44fc226128 R14: 00007f44fc226090 R15: 00007fff862a51b8 [ 206.168507][T11171] [ 206.204577][ T8632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.254595][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.484433][ T5788] Bluetooth: hci2: command tx timeout [ 208.284538][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.335109][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.364581][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.542010][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 210.542023][ T42] audit: type=1400 audit(1793969291.715:3777): avc: denied { write } for pid=11187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.571397][ T42] audit: type=1400 audit(1793969291.745:3778): avc: denied { write } for pid=11190 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.753251][ T42] audit: type=1400 audit(1793969291.925:3779): avc: denied { write } for pid=11195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.791877][ T42] audit: type=1400 audit(1793969291.965:3780): avc: denied { write } for pid=11198 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.405039][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.872467][ T42] audit: type=1400 audit(1793969293.045:3781): avc: denied { write } for pid=11202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.901382][ T42] audit: type=1400 audit(1793969293.075:3782): avc: denied { write } for pid=11205 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.444619][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.484886][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.524593][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.564969][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog