last executing test programs: 1m59.863916237s ago: executing program 32 (id=315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000007c0)=""/68, &(0x7f0000000840)=0x44) sendmsg$sock(r0, 0x0, 0x20000001) r1 = io_uring_setup(0x650b, &(0x7f0000000000)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd03010000000000dd000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec400900000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce702000000427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63e7be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000780), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r6, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) close_range(r1, 0xffffffffffffffff, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000280)='./md0\x00', 0x6180, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) 1m48.812727069s ago: executing program 33 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r3 = fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000b9bd0994f5d6ac738d85116d8b580d37f1dd4dd700ae98e8f9fa2cf67d051e2bee923d88c287a1b0a6ec49f0f201a524c2371aed3ce5e5ed8989225f55ad3c8f6f999c1389417d3589e356949c6f7846abe647ff35bc890db4b2958e29529754f84366e7cb9c6695fb7b4c48868d94412feec7c8c02033932bdee89bcb289cd8fbb278d09f05e7d567a958c7c07486f6b2c00b52046e07c19cf6bc82c6d08516921df36ad704a41b6667fd6a08c87bb27a0d989d5ab2951ac72dd3f297d88a4906c4d1df3e", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000180"], 0x18}}, 0x0) 1m28.863403052s ago: executing program 34 (id=532): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa}]}, 0x58}}, 0x800) 1m0.613419609s ago: executing program 35 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0) close(r1) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000940)={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}, {0xa, 0x4e22, 0x9, @local, 0x7}, 0x1, {[0x3, 0x2, 0x7, 0xc, 0xa, 0x4, 0x5, 0x6]}}, 0x5c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8) syz_emit_ethernet(0x42, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r2, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0x4, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000ac0)='fd/3\x00') write$binfmt_elf64(r9, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="00012bbd7000fddbdf256400000008000300", @ANYRES32=r11, @ANYBLOB="0c0099000200000030000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x44000) 42.36345552s ago: executing program 7 (id=1521): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd12, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, {0x347, 0x20, 0x20, 0x20, 0x1f, 0x20, 0x1c15}}) 42.36311693s ago: executing program 7 (id=1522): mknod(&(0x7f0000000780)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x1000000, &(0x7f0000001b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000001bc0)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000003bc0)={&(0x7f0000003c80)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000003dc0)="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", 0x2000, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005e80)={0x78, 0x0, 0x3, {0x7, 0x1, 0x0, {0x3, 0x0, 0xe418000000, 0x80000005, 0x4, 0x1, 0x9e9, 0x1, 0xb876, 0x8000, 0x7893b06e, r1, r2, 0x40003d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040000) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000800)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001940)=""/32, 0x30}], 0x1}, 0xb}], 0x1, 0x40000182, 0x0) close(r6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f00000001c0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000740)={r7, 0x1f}, &(0x7f0000001980)=ANY=[@ANYBLOB="656e633d706b63733120686173683d73686132323400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d82c0b13ae751dab9836868cc2acab545a3a7a2c5d85f6b31787de8a5fd33fd5c25681cb8aa0724721122213a847966ed027d472475eb2d390f918618364c53a1dad427e4539413381b7df4af297cbf2608e191fdb78c763b5e20f432974ee4347e2bb20f1c8df64a52150d2472f00b23e5a1ba398a74673513e08534d70ecadbf1ea9309a2abbac029ce2cedebc362e84767c2fa241e00ddb30e601eb0a9347c3881cbe689b8a199cd11d53ac0f4938b83cd99226baea11f632"], 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) mknod(&(0x7f0000000780)='./file0\x00', 0x8001420, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x1000000, &(0x7f0000001b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r0, &(0x7f0000001bc0)="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", 0x2000, &(0x7f0000003bc0)={&(0x7f0000003c80)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)) (async) syz_fuse_handle_req(r0, &(0x7f0000003dc0)="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", 0x2000, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005e80)={0x78, 0x0, 0x3, {0x7, 0x1, 0x0, {0x3, 0x0, 0xe418000000, 0x80000005, 0x4, 0x1, 0x9e9, 0x1, 0xb876, 0x8000, 0x7893b06e, r1, r2, 0x40003d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040000) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000800)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001940)=""/32, 0x30}], 0x1}, 0xb}], 0x1, 0x40000182, 0x0) (async) close(r6) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r4) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000740)={r7, 0x1f}, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x0, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) (async) 41.483137279s ago: executing program 7 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='never', 0x5) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x222200, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@int={0xa, 0x0, 0x0, 0x1, 0x7, 0x34, 0x0, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x1ff}}, @fwd={0xe}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000a00)=""/3, 0x68, 0x3, 0x1, 0x69, 0x10000}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r8, &(0x7f0000000b00)=[{&(0x7f0000000b40)="c867", 0x2}], 0x1, 0x31, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r8, 0xc0189436, &(0x7f0000000b80)={0x0, 0x0, 0x2, 0x62, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x33, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x26, &(0x7f0000000800)=""/38, 0x40f00, 0x2, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x23c1e, r8, 0x0, &(0x7f0000000bc0)=[r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x22242, 0x0) r11 = semget$private(0x0, 0x20000000102, 0x0) semop(r11, &(0x7f0000000340)=[{0x2, 0xffff}], 0x1) semtimedop(r11, &(0x7f0000000380)=[{0x3, 0xffff, 0x1000}, {0x1, 0x2, 0x3000}], 0x2, &(0x7f00000003c0)) write$USERIO_CMD_SET_PORT_TYPE(r10, &(0x7f00000001c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r10, &(0x7f0000000200), 0x2) read(r10, &(0x7f0000000240)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r10, &(0x7f0000000300)={0x2, 0xf8}, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) set_mempolicy(0x2002, &(0x7f00000002c0)=0x9, 0x9) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 40.563573344s ago: executing program 7 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="89e7eefbffbfffffffefff0088ca", 0xe}], 0x1) (fail_nth: 2) 40.473029299s ago: executing program 7 (id=1536): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 40.472731472s ago: executing program 7 (id=1537): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0xe0002, 0x0) close(r1) ioctl$KVM_CREATE_VM(r1, 0x40045506, 0x80000023) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='team0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r5, &(0x7f0000000400), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x4b564d06, 0x0, 0x4}]}) r9 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000500)) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r10 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000100)='./dm1\x00', 0x2, 0x0) ioctl$BLKROSET(r10, 0x125d, &(0x7f0000000140)=0xa) r11 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r11, 0xc01864c1, &(0x7f0000000200)) openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x0, 0x0) 38.368852534s ago: executing program 3 (id=1575): syz_open_dev$video4linux(&(0x7f00000004c0), 0x0, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="58506d40d41bb3d465dcb1cb029c55841b00b40a", @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a003400020202020202000008002600990900002400518020000080090001003a0c83ae1a00000005000200030000000800030008ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000005c0)=0xc) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r8}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x41}) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) r9 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) lseek(r9, 0x3, 0x1) 38.172507758s ago: executing program 3 (id=1580): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0xffffff7f00000000) 38.172310648s ago: executing program 3 (id=1581): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f00000000c0)=""/102393, &(0x7f00000190c0)=0x18ff9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 38.093393421s ago: executing program 3 (id=1582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="30a90400002ddba345e8a11801001400b84b033de3685b192bd10500000003006e696376663000"/48], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 38.093268541s ago: executing program 3 (id=1583): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='rootcontext', &(0x7f0000000140)='E\xe1\x85\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x8c0, 0xfffff000}}], 0x20}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1401, 0x28, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 37.93213735s ago: executing program 3 (id=1584): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000040)={{0x8, 0x0, 0x0}, 0xb, 0x4, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x700}) 36.637081522s ago: executing program 6 (id=1586): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003100090025bd7000f63f00000400000008000c00030000007f36a3af100d486aa852181a99ed01534b60151f0a860fb34c03062fbe431a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 36.606882048s ago: executing program 6 (id=1589): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) set_mempolicy(0x2002, &(0x7f00000002c0)=0x9, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 13) 36.511708371s ago: executing program 6 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x20004090) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000680), 0x22000, 0x0) ioctl$DM_TABLE_STATUS(r2, 0xc138fd0c, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}}) 36.511541066s ago: executing program 6 (id=1591): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x1f, &(0x7f00000000c0)={0x26, 0x1, 0x10004}) (async) rt_tgsigqueueinfo(r1, r2, 0x36, &(0x7f0000000140)={0xa, 0x8, 0x29b}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x2, 0x1b2ccb17f569757b, 0x8, 0x5, '\x00', 0x4}, 0x4, 0x20000000, 0x33, r1, 0x8, 0x0, 'syz1\x00', &(0x7f00000001c0)=['&\x00', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/midiC#D#\x00', '/dev/snd/midiC#D#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x73}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x200) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 36.451729624s ago: executing program 6 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe94}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 36.451420128s ago: executing program 6 (id=1594): r0 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000900)={0x0, 0x80000}) 24.983177998s ago: executing program 36 (id=1537): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0xe0002, 0x0) close(r1) ioctl$KVM_CREATE_VM(r1, 0x40045506, 0x80000023) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='team0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r5, &(0x7f0000000400), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x4b564d06, 0x0, 0x4}]}) r9 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000500)) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r10 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000100)='./dm1\x00', 0x2, 0x0) ioctl$BLKROSET(r10, 0x125d, &(0x7f0000000140)=0xa) r11 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r11, 0xc01864c1, &(0x7f0000000200)) openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x0, 0x0) 24.679094744s ago: executing program 2 (id=1603): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a", @ANYRES32=r2], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff0014040100100001"], 0x0) 24.678719024s ago: executing program 2 (id=1604): syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000000020200000000"], 0x0) 24.622323555s ago: executing program 2 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 24.621905505s ago: executing program 2 (id=1606): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x102080, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c820ed"], 0x11) 24.062979585s ago: executing program 2 (id=1607): r0 = socket(0x10, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x7ff, 0x0, &(0x7f0000000100), 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x6}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a0009042400000000ff0200000000000000000600", 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffd93, &(0x7f0000000180)={&(0x7f0000000080)={0x80, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@generic="b5b39b167be0393244ac49abcb5e803b0e221dfe95af7bed183bf3b4625f87c8ecf74dbdc46a5606c957c968161370bf2398014022a634ec2d3016fd453af0a8c40c529e89bae287039a809f6597c6205ef11144da0e3ee75025eaa92a9e604d7fcc879c1d28353a94da83"]}, 0x80}, 0x1, 0x0, 0x0, 0x46855}, 0x0) 24.021694839s ago: executing program 2 (id=1608): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0xffffffffffffff2b, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x4, 0x3, 0x2, [0x0], [0x3, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000003c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000440)=[r5, r5, r5], 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000540)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) r6 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000880)={r8, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) 22.500744987s ago: executing program 37 (id=1584): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000040)={{0x8, 0x0, 0x0}, 0xb, 0x4, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x700}) 21.000282846s ago: executing program 38 (id=1594): r0 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000900)={0x0, 0x80000}) 20.952662029s ago: executing program 9 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x3b0, 0xf8, 0x1d8, 0x0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x3, 0x1, 0x4], 0x6}, {0x3, [0x2, 0x4, 0x1, 0x4, 0x1, 0x2], 0x3}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0xfffffff4]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x0, {0x1}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff, 0xff, 'netpci0\x00', 'wlan1\x00', {}, {0xff}, 0x84, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x35b, 0x8, @empty, 0x4e20}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x3, [0x1, 0x2, 0x4, 0x1, 0x6, 0x2], 0x2, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0xa, [0x1, 0x1f, 0x16, 0x12, 0x11, 0x24, 0x10, 0x22, 0x33, 0x36, 0x18, 0x9, 0x2c, 0xa, 0x27, 0x3c], 0x0, 0x8, 0x1}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x6, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0x4, 0x3, 0x40, 0x6, 0x0, [{0x6, 0x1a26, 0x5, '\x00', 0x3a8a}, {0x8, 0x9, 0x6f38, '\x00', 0x106}, {0x2, 0x4, 0xfffffffffffffffa, '\x00', 0x400}, {0x0, 0x5, 0x1}, {0x34, 0x1000, 0x3, '\x00', 0xc4efcc2206070649}, {0x0, 0x343, 0x6, '\x00', 0x1000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000ac0)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000b40)=ANY=[], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 20.952137743s ago: executing program 9 (id=1613): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000540)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, &(0x7f0000000580)='syzkaller\x00', 0x5}, 0x94) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r1, r2, 0x1, 0x7, 0x7, 0x5, {0x5, 0x22, 0x3, 0x7ff, 0x5, 0x4096, 0x8, 0xfff9, 0x0, 0x6, 0x9b6f, 0x97, 0x200, 0x300000, "427c9145b4d9e5f85f9dfc1fdf80dab57b0e7f931b9e4d7de900000932a005a6"}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000001840)={0x6, 0x0, @ioapic={0x0, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xf, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0x1, 0x1, 0x3}, {0x8, 0x9, 0x3, '\x00', 0xff}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0x6, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x2, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xd, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0xf7}, {0x0, 0x13, 0x0, '\x00', 0x2}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xf8, 0x1, '\x00', 0x80}, {0x3, 0x8d, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xfb, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x2, 0x8, 0x8, '\x00', 0xd}]}}) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r7, 0x2) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, 0x7, 0x1ffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x38, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000091) 19.674445744s ago: executing program 8 (id=1616): ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045520, 0x0) 19.611369821s ago: executing program 8 (id=1617): mount(&(0x7f0000000600)=@sr0, &(0x7f0000000640)='./cgroup\x00', &(0x7f0000000680)='xfs\x00', 0x200013, 0x0) 19.503406099s ago: executing program 8 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) clock_gettime(0x5, &(0x7f0000000240)={0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) r3 = openat$md_node(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r3, 0x40480923, &(0x7f0000000300)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0xffffffff, 0x0, 0x80, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000380)={0x5, {0x1, 0x1}, 0x0, 0x80222}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="80000000"], 0x14}}, 0x20000810) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000040)='./md1\x00', 0x80, 0x0) r4 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = getpgrp(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4ba, 0x73}}}}, [""]}, 0x20}}, 0x24048880) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000540)=0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000800000000000000180003801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r12 = dup(r5) setpriority(0x1, r6, 0x9) r13 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f00000006c0)={r12, 0x3, 0x7a, 0x8}) 19.177373981s ago: executing program 8 (id=1619): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x98, &(0x7f0000000300)={0x2000, 0x24800, 0x1}}) move_pages(0x0, 0x1efe, &(0x7f0000000200), 0x0, &(0x7f00000002c0), 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x80040, 0x0) ioctl$DM_LIST_DEVICES(r1, 0xc138fd02, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x85000}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03314eb61b1511d7000000000000008c9501abc72f2b506ca388f815a3213add1805c61588ae925a5607fd6a0929726bd48a5946d132592a872a308d58f138bf7efac8066e9a98926bad763684f2d6", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x110) set_mempolicy(0x1, &(0x7f0000000200)=0x2, 0xa9c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x103, &(0x7f0000000840)=ANY=[], 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r6, &(0x7f00000008c0), &(0x7f0000000900)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) close(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.083074364s ago: executing program 8 (id=1620): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003100090025bd7000f63f00000400000008000c00030000007f36a3af100d486aa852181a99ed01534b60151f0a860fb34c03062fbe431a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 18.963217348s ago: executing program 8 (id=1621): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x623, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004) modify_ldt$write(0x1, &(0x7f0000000040)={0x2, 0x1000, 0xb06e2a61c80aa3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044850) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0) r4 = fanotify_init(0x8, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103a42, 0x32) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000300), 0xd21, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x1f, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0xc, 0x0, 0xfec00000}) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000580)={0x0, &(0x7f00000005c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000640)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 16.863324671s ago: executing program 1 (id=1637): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x102080, 0x0) 16.863016666s ago: executing program 1 (id=1638): setns(0xc9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x6, &(0x7f00000001c0)=[{0x0, 0x0, 0x4, 0x7fff0000}, {0x100, 0x5, 0x80, 0x737c}, {0xfff8, 0x5, 0x8, 0x805}, {0xfffe, 0xd, 0x1, 0xffffffff}, {0x0, 0x1, 0x9, 0x6}, {0x2, 0x8, 0x4, 0x8}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000700)}, 0x4000801) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800002f8070001007f0000010a0002"], 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc_mnt\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r5, 0x2000) pread64(r5, &(0x7f00000008c0)=""/242, 0xcb, 0x800000009) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000280)='bridge0\x00') r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) ioctl$CDROM_LOCKDOOR(r7, 0x5329, 0x0) mkdirat(r4, &(0x7f00000002c0)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000680)={'veth0_vlan\x00', @ifru_ivalue=0x8}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r9, 0x8949, &(0x7f00000009c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bridge0/bridge/root_port\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r5, 0x40809440, &(0x7f0000000740)={&(0x7f0000000640)=[{&(0x7f0000000600)="d60cf569f9c9cf326d15c360cebed8399e25e6e93a43bdd7116c6acb873d3d8a410cb52a555feaf54b701149ec7eea849723fb6c", 0x34}], 0x1, 0x339, 0x0, 0xab, 0x3ff, 0x4, 0x8, 0x8000}) read(r10, &(0x7f00000003c0), 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 16.713369774s ago: executing program 1 (id=1639): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) 16.71301716s ago: executing program 1 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x3b0, 0xf8, 0x1d8, 0x0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x3, 0x1, 0x4], 0x6}, {0x3, [0x2, 0x4, 0x1, 0x4, 0x1, 0x2], 0x3}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0xfffffff4]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x0, {0x1}}}}, {{@ip={@private=0xa010102, @broadcast, 0xff, 0xff, 'netpci0\x00', 'wlan1\x00', {}, {0xff}, 0x84, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x35b, 0x8, @empty, 0x4e20}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x3, [0x1, 0x2, 0x4, 0x1, 0x6, 0x2], 0x2, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0xa, [0x1, 0x1f, 0x16, 0x12, 0x11, 0x24, 0x10, 0x22, 0x33, 0x36, 0x18, 0x9, 0x2c, 0xa, 0x27, 0x3c], 0x0, 0x8, 0x1}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x6, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x9, 0x4, 0x3, 0x40, 0x6, 0x0, [{0x6, 0x1a26, 0x5, '\x00', 0x3a8a}, {0x8, 0x9, 0x6f38, '\x00', 0x106}, {0x2, 0x4, 0xfffffffffffffffa, '\x00', 0x400}, {0x0, 0x5, 0x1}, {0x34, 0x1000, 0x3, '\x00', 0xc4efcc2206070649}, {0x0, 0x343, 0x6, '\x00', 0x1000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000ac0)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000b40)=ANY=[], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 16.633404866s ago: executing program 1 (id=1641): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x204031, 0xffffffffffffffff, 0xec772000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./mnt\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000008440)=""/16386, 0xffffffffffffff63) 16.513249772s ago: executing program 1 (id=1642): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0xffffffffffffff2b, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x4, 0x3, 0x2, [0x0], [0x3, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000880)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) 8.482843294s ago: executing program 39 (id=1608): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0xffffffffffffff2b, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x4, 0x3, 0x2, [0x0], [0x3, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)) r4 = syz_open_dev$dri(&(0x7f0000000380), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000003c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000440)=[r5, r5, r5], 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000540)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000580)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000005c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) r6 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000880)={r8, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) 6.563243582s ago: executing program 0 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe94}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0) 5.693066194s ago: executing program 0 (id=1645): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0xd, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000540)="662e0f1f84", 0x5) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x7, 0x12, r2, 0x0) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) bind$l2tp6(r2, &(0x7f0000000780)={0xa, 0x0, 0x101c, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x4, 0x3}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000007c0)={0x2, &(0x7f0000000800)=[{0x30, 0x0, 0x3, 0xffe00002}, {0x16, 0x0, 0x40}]}, 0x10) sendto$inet6(r6, &(0x7f0000000840)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r7, 0xc0386447, &(0x7f0000000040)={{0x8, 0x0, 0x0}, 0xb, 0x4, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffffc}) 5.692789017s ago: executing program 40 (id=1613): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000540)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, &(0x7f0000000580)='syzkaller\x00', 0x5}, 0x94) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r1, r2, 0x1, 0x7, 0x7, 0x5, {0x5, 0x22, 0x3, 0x7ff, 0x5, 0x4096, 0x8, 0xfff9, 0x0, 0x6, 0x9b6f, 0x97, 0x200, 0x300000, "427c9145b4d9e5f85f9dfc1fdf80dab57b0e7f931b9e4d7de900000932a005a6"}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000001840)={0x6, 0x0, @ioapic={0x0, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xf, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0x1, 0x1, 0x3}, {0x8, 0x9, 0x3, '\x00', 0xff}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0x6, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x2, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xd, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0xf7}, {0x0, 0x13, 0x0, '\x00', 0x2}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xf8, 0x1, '\x00', 0x80}, {0x3, 0x8d, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xfb, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x2, 0x8, 0x8, '\x00', 0xd}]}}) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r7, 0x2) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, 0x7, 0x1ffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x38, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000091) 3.932338756s ago: executing program 41 (id=1621): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x623, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004) modify_ldt$write(0x1, &(0x7f0000000040)={0x2, 0x1000, 0xb06e2a61c80aa3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044850) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a42, 0x32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0) r4 = fanotify_init(0x8, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103a42, 0x32) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000300), 0xd21, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x1f, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0xc, 0x0, 0xfec00000}) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000580)={0x0, &(0x7f00000005c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000640)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1.623138063s ago: executing program 5 (id=1658): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x1, 0xf3, 0x5}]}, 0x10) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/4096, 0x1000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r0, 0x0, 0x25, 0x4, @void}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x8800, &(0x7f00000001c0)=ANY=[@ANYBLOB="756964bd7c662ade6b5b0000000000", @ANYBLOB]) 1.622707341s ago: executing program 5 (id=1659): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0xc1) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) read(r4, &(0x7f0000000ac0)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25300004f307000300", @ANYRES32=r5, @ANYBLOB="0600360007000000060036000900000006003600130000000600360031000000060036002d000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000080) r6 = fsmount(r0, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000867b0568fcf09ffefc8400121400b1fc70c7fedbdf0908004f000000000000"], 0x18}}, 0x40800) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f00000000c0)={0x20, r8, &(0x7f0000000140)}) fchdir(r6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000580)=[{0x6, 0x4, 0x7, {0x1, 0xc99}, 0x3, 0x7, 0x7}, {0x3, 0x7, 0x0, {0x35, 0x5}, 0x0, 0x4, 0x6}, {0xfffffffffffffffb, 0x5, 0x3, {0xa, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x2, 0x1}], 0x3, 0x40, 0xb2cf, 0x2}, {&(0x7f0000000640)=[{0x2, 0x7}, {0x0, 0xffffffff}], 0x2, 0x10, 0x200, 0x64}, {&(0x7f00000006c0)=[0xb7, 0x100000000, 0x8, 0x3ff, 0x80000001, 0x9, 0x8, 0x3, 0x1], 0x9, 0x8, 0x7fff, 0xffffffff}, {&(0x7f0000000740)=[{0x10000, 0x8000000000000001, 0x400, 0x905, 0x267}, {0xfffffffffffffffb, 0x8, 0x9, 0x5, 0x1}], 0x2, 0x28, 0x1ff, 0x1}, {&(0x7f00000007c0)=[0xe, 0x9], 0x2, 0x8, 0x7ff, 0x43cd}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000008c0)) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r9, r9, 0x7, 0x2, &(0x7f00000004c0)='9f', 0xe, 0x4, 0xc, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000500)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1.543229217s ago: executing program 5 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'geneve0\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/hibernate_compression_threads', 0x200, 0x8) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="43000100000000001400128009000100766c616e000000000400028008000500", @ANYRES32=r1, @ANYBLOB="7bf606091aed45c4896858655a2a2e0e93aeab358d87820969878f25c37a22c6899808058807ffffc661d70b2ce6068413b64095790684bb7951a2c44ead8b2ca2635066e2d7cc619a25a985502a2efaf24ddc0c9f8325f086c151b1795cda26869f29c8972e786ba54cc89007477fafcb483080632182e3ef379bb5634d83f4b4c1d8096a2431b744b0c173c6c0bb58ccc7e9596015c5c594b0852bdfb51214031bfbf77f909b1c10ba4e99f3a3eb1de9376d978f4271f1d27ec467fa6e244b2e902e666256b145a82984b28c8ea0d1e1eebe91ecafddb93bb44fdbc07ebb95fa6c2a52144e50b37c7c7a0ae543c96d529c755480015d5e435177f58667df43"], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.534767768s ago: executing program 42 (id=1642): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000100), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0xffffffffffffff2b, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0x0, 0x4, 0x3, 0x2, [0x0], [0x3, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000740), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000800)={0x0, 0xffffffffffffff2b, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000880)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) 1.493378191s ago: executing program 5 (id=1663): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x3, 0x8000b4, 0x30, 0xffffe}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x1f2, @time={0x65757100, 0x1000000}, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x1f2, @time={0x65757100, 0x1000000}, 0x8}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x13e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKPG(r1, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 1.419879532s ago: executing program 5 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010001fff2dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008000000000000018001280080001000e0000000000007dc0bb9c6cdcc50e4e"], 0x38}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) (async) syz_usb_connect(0x2, 0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000003c0)) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000040aecbd7ead7934e7e827755615e16201080000005801bb4474c67dcbffb98326236a0000ca656c1e9ef1bd99e4a01505e82f2fec3c1b17891b1213150254bb750ea38e44f1f863e738da5717d1cfd8d66c22ff859a9d2bef59d2bac80ca8f3556f6352ad5ad659d2d2ae15a47badabbcce32955f043f14"], 0x2c}, 0x1, 0x0, 0x0, 0x4008820}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0x120}}, 0x0) 1.25260562s ago: executing program 4 (id=1668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x1a00, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x52}, {0x1, 0x3fc}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}}, 0x844) 1.252461519s ago: executing program 4 (id=1670): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003100090025bd7000f63f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 1.25208208s ago: executing program 4 (id=1671): r0 = syz_open_dev$mtd(&(0x7f00000003c0), 0x0, 0x8000) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/13, 0x20300}, {0x0, 0xffb6}], 0x2) (fail_nth: 19) 1.182842313s ago: executing program 4 (id=1672): syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001404010010"], 0x0) 1.182434741s ago: executing program 4 (id=1673): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x102080, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c820ed043b223c2b28a00257ce0c0008c360b406a54f7c3a3b993e39356c500bb3fa6b41"], 0x11) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/245, 0xf5}], 0x1) 622.58033ms ago: executing program 4 (id=1674): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000500), 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008ac0)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='27', 0x2) 461.282211ms ago: executing program 0 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev\x00', 0x1ff) mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x8410, 0x0) 312.835565ms ago: executing program 0 (id=1676): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, 0x0) 147.538082ms ago: executing program 5 (id=1677): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000040)={'pcl812\x00', [0x140, 0x4, 0x1, 0x2, 0x1, 0x2, 0x8002, 0x1002, 0x20000040, 0xd72d, 0x8, 0xffffffff, 0x2009, 0x6, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x408, 0x4, 0x40000000, 0xe, 0xffffffff, 0xffe, 0x20002f, 0xaf, 0x0, 0xffffffff, 0x7ff]}) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000400)={0x0, 0x40, 0x20, 0x4, 0x0, 0xc, 0xffffffff, 0x9, 0x1, 0x4189d435, 0xffffff7e, 0x7, &(0x7f0000000100)=[0x274531ec, 0xb7, 0xffff0000], 0x3, &(0x7f0000000140)="ef756063e2b82a2c3f6f8a17054988a1bdb53d5d995d503a324a62369cf1c135d64161ca9f92f03fa2c9937ee3f8921b920e31c9ad20c2de93dbab0f62705527b12fcdb204f2e2bc30c7e64423ef7f8f90e06d89cef954185de78138034d81a175ca3b585336cfeaf696de45ed5b9922559fef0cdb4cd23e121f91b6cfcb523c9e396d3ecda7b1500fcc520f3d5ed1816a13fa3b739b5eb228889204b579e4bd1d457f114707bf3c2f45fcf834a880a99c104df375d9e99e9b4d7fc515a79b59c1562ebd", 0xc4}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000540)={0x1, 'vlan1\x00', {}, 0x5832}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x1}}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000300)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000380)="05031600d3fc142e00004788031c09102c28", 0xffffffffffffffae, 0x4, &(0x7f00000003c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=@delqdisc={0x3c, 0x25, 0x1000, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x10}, {0x6, 0xffff}, {0xb, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004091) 65.231349ms ago: executing program 0 (id=1678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x3}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x3, 0x0, 0xac}}, 0xf0}}, 0x40) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', r5, 0x29, 0x84, 0xe, 0x2, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7, 0xf99, 0x2}}) syz_open_dev$tty1(0xc, 0x4, 0x3) 0s ago: executing program 0 (id=1679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.7.1415'. [ 184.406569][T10164] block nbd0: not configured, cannot reconfigure [ 184.638059][T10175] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 184.638079][T10175] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 184.638092][T10175] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 184.638101][T10175] One or more global auth toks could not properly register; rc = [-22] [ 184.638137][T10175] Error validating options; rc = [-22] [ 184.654805][T10175] bond0: (slave bond_slave_1): Releasing backup interface [ 184.681188][ T5802] Bluetooth: Unexpected start frame (len 12) [ 184.724410][T10182] XFS (sr0): Invalid superblock magic number [ 184.772323][T10182] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.040453][ T5953] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 185.117517][ T42] audit: type=1400 audit(1793063622.755:892): avc: denied { read } for pid=10200 comm="syz.7.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.181549][T10205] XFS (sr0): Invalid superblock magic number [ 185.211154][ T5953] usb 11-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 185.212226][T10205] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.213098][ T5953] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 185.213111][ T5953] usb 11-1: Product: syz [ 185.213119][ T5953] usb 11-1: Manufacturer: syz [ 185.231680][T10212] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 185.625887][T10189] xt_hashlimit: size too large, truncated to 1048576 [ 185.685210][T10214] net_ratelimit: 43 callbacks suppressed [ 185.685231][T10214] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 185.690824][ T5953] scsi host7: uas [ 185.832387][T10218] FAULT_INJECTION: forcing a failure. [ 185.832387][T10218] name failslab, interval 1, probability 0, space 0, times 0 [ 185.832408][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.3.1434 Not tainted syzkaller #0 PREEMPT(full) [ 185.832434][T10218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.832441][T10218] Call Trace: [ 185.832446][T10218] [ 185.832450][T10218] dump_stack_lvl+0x100/0x190 [ 185.832471][T10218] should_fail_ex.cold+0x5/0xa [ 185.832489][T10218] should_failslab+0xc2/0x120 [ 185.832507][T10218] kmem_cache_alloc_noprof+0x92/0x6a0 [ 185.832521][T10218] ? do_getname+0x35/0x390 [ 185.832535][T10218] do_getname+0x35/0x390 [ 185.832548][T10218] do_sys_openat2+0xc3/0x1d0 [ 185.832559][T10218] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.832572][T10218] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.832594][T10218] __x64_sys_openat+0x12d/0x210 [ 185.832605][T10218] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.832621][T10218] do_syscall_64+0x123/0x790 [ 185.832639][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.832651][T10218] RIP: 0033:0x7fda1879f559 [ 185.832681][T10218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.832694][T10218] RSP: 002b:00007fda196a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.832707][T10218] RAX: ffffffffffffffda RBX: 00007fda18a25fa0 RCX: 00007fda1879f559 [ 185.832715][T10218] RDX: 0000000000102080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 185.832723][T10218] RBP: 00007fda18836b20 R08: 0000000000000000 R09: 0000000000000000 [ 185.832730][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.832737][T10218] R13: 00007fda18a26038 R14: 00007fda18a25fa0 R15: 00007ffcfcc48028 [ 185.832754][T10218] [ 185.835110][ T5802] Bluetooth: Unexpected start frame (len 12) [ 185.863754][T10221] FAULT_INJECTION: forcing a failure. [ 185.863754][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 185.863783][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.2.1435 Not tainted syzkaller #0 PREEMPT(full) [ 185.863803][T10221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.863815][T10221] Call Trace: [ 185.863822][T10221] [ 185.863829][T10221] dump_stack_lvl+0x100/0x190 [ 185.863863][T10221] should_fail_ex.cold+0x5/0xa [ 185.863890][T10221] should_failslab+0xc2/0x120 [ 185.863922][T10221] kmem_cache_alloc_noprof+0x92/0x6a0 [ 185.863946][T10221] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 185.863993][T10221] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 185.864020][T10221] ? kvm_msr_allowed+0x2d0/0x450 [ 185.864059][T10221] kvm_mmu_load+0xe3/0x25b0 [ 185.864092][T10221] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 185.864120][T10221] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.864150][T10221] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.864171][T10221] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 185.864192][T10221] ? kvm_check_and_inject_events+0x896/0x1050 [ 185.864219][T10221] vcpu_run+0x4009/0x60d0 [ 185.864254][T10221] ? __pfx_vcpu_run+0x10/0x10 [ 185.864274][T10221] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 185.864305][T10221] ? lock_acquire+0x1d1/0x380 [ 185.864560][T10221] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 185.864586][T10221] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 185.864625][T10221] ? __local_bh_enable_ip+0xa5/0x120 [ 185.864649][T10221] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 185.864696][T10221] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 185.864726][T10221] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 185.864749][T10221] ? lock_acquire+0x1d1/0x380 [ 185.864772][T10221] ? do_raw_write_lock+0x11e/0x260 [ 185.864797][T10221] ? find_held_lock+0x2b/0x80 [ 185.864814][T10221] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 185.864838][T10221] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 185.864869][T10221] kvm_vcpu_ioctl+0x735/0x17b0 [ 185.864896][T10221] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.864929][T10221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.864957][T10221] ? do_vfs_ioctl+0x226/0x13e0 [ 185.864981][T10221] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.865002][T10221] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 185.865025][T10221] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.865049][T10221] ? __fget_files+0x34/0x3d0 [ 185.865087][T10221] ? selinux_file_ioctl+0x1e0/0x290 [ 185.865104][T10221] ? selinux_file_ioctl+0x1e7/0x290 [ 185.865123][T10221] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.865150][T10221] __x64_sys_ioctl+0x18e/0x210 [ 185.865179][T10221] do_syscall_64+0x123/0x790 [ 185.865209][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.865229][T10221] RIP: 0033:0x7f22f579f559 [ 185.865268][T10221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.865287][T10221] RSP: 002b:00007f22f665d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.865305][T10221] RAX: ffffffffffffffda RBX: 00007f22f5a25fa0 RCX: 00007f22f579f559 [ 185.865338][T10221] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.865349][T10221] RBP: 00007f22f665d090 R08: 0000000000000000 R09: 0000000000000000 [ 185.865361][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.865371][T10221] R13: 00007f22f5a26038 R14: 00007f22f5a25fa0 R15: 00007ffd4a37b4e8 [ 185.865398][T10221] [ 185.870284][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1436'. [ 185.895038][ C1] usb 11-1: stat urb: status -71 [ 185.895079][ C1] usb 11-1: cmd cmplt err -71 [ 185.895344][ T5953] usb 11-1: USB disconnect, device number 6 [ 185.897080][ T5953] scsi 7:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 185.897106][ T5953] scsi 7:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 185.903960][T10225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1434'. [ 185.903988][T10225] block nbd0: not configured, cannot reconfigure [ 185.953422][T10232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1439'. [ 186.034863][T10242] FAULT_INJECTION: forcing a failure. [ 186.034863][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.034882][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.2.1445 Not tainted syzkaller #0 PREEMPT(full) [ 186.034895][T10242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.034901][T10242] Call Trace: [ 186.034905][T10242] [ 186.034910][T10242] dump_stack_lvl+0x100/0x190 [ 186.034931][T10242] should_fail_ex.cold+0x5/0xa [ 186.034949][T10242] _copy_to_user+0x32/0xd0 [ 186.034964][T10242] simple_read_from_buffer+0xcb/0x170 [ 186.034983][T10242] proc_fail_nth_read+0x1af/0x230 [ 186.035001][T10242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.035020][T10242] ? rw_verify_area+0xce/0x6d0 [ 186.035032][T10242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.035049][T10242] vfs_read+0x1e4/0xb40 [ 186.035063][T10242] ? lock_acquire+0x1d1/0x380 [ 186.035077][T10242] ? __fget_files+0x34/0x3d0 [ 186.035093][T10242] ? __pfx_vfs_read+0x10/0x10 [ 186.035106][T10242] ? find_held_lock+0x2b/0x80 [ 186.035117][T10242] ? __fget_files+0x215/0x3d0 [ 186.035135][T10242] ? __fget_files+0x21f/0x3d0 [ 186.035155][T10242] ksys_read+0x12a/0x250 [ 186.035170][T10242] ? __pfx_ksys_read+0x10/0x10 [ 186.035189][T10242] do_syscall_64+0x123/0x790 [ 186.035207][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.035219][T10242] RIP: 0033:0x7f22f575fd8e [ 186.035228][T10242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.035246][T10242] RSP: 002b:00007f22f665cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.035257][T10242] RAX: ffffffffffffffda RBX: 00007f22f665d6c0 RCX: 00007f22f575fd8e [ 186.035265][T10242] RDX: 000000000000000f RSI: 00007f22f665d0a0 RDI: 0000000000000004 [ 186.035272][T10242] RBP: 00007f22f665d090 R08: 0000000000000000 R09: 0000000000000000 [ 186.035270][ T42] audit: type=1400 audit(1793063623.675:893): avc: denied { read } for pid=10239 comm="syz.7.1444" path="socket:[38238]" dev="sockfs" ino=38238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.035278][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.035285][T10242] R13: 00007f22f5a26038 R14: 00007f22f5a25fa0 R15: 00007ffd4a37b4e8 [ 186.035299][T10242] [ 186.081883][T10249] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1447'. [ 186.184527][T10261] FAULT_INJECTION: forcing a failure. [ 186.184527][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 186.184549][T10261] CPU: 2 UID: 0 PID: 10261 Comm: syz.7.1453 Not tainted syzkaller #0 PREEMPT(full) [ 186.184562][T10261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.184569][T10261] Call Trace: [ 186.184573][T10261] [ 186.184578][T10261] dump_stack_lvl+0x100/0x190 [ 186.184598][T10261] should_fail_ex.cold+0x5/0xa [ 186.184615][T10261] should_failslab+0xc2/0x120 [ 186.184631][T10261] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.184645][T10261] ? security_file_alloc+0x34/0x2c0 [ 186.184682][T10261] security_file_alloc+0x34/0x2c0 [ 186.184697][T10261] init_file+0x95/0x480 [ 186.184714][T10261] alloc_empty_file+0x79/0x1c0 [ 186.184725][T10261] alloc_file_pseudo+0x17e/0x290 [ 186.184737][T10261] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 186.184748][T10261] ? security_inode_init_security_anon+0x7b/0x230 [ 186.184768][T10261] __anon_inode_getfile+0xe8/0x280 [ 186.184783][T10261] ? _copy_to_user+0xaf/0xd0 [ 186.184797][T10261] io_uring_setup.cold+0x197d/0x1c7e [ 186.184812][T10261] ? __pfx_io_uring_setup+0x10/0x10 [ 186.184825][T10261] ? find_held_lock+0x2b/0x80 [ 186.184847][T10261] ? ksys_write+0x1ac/0x250 [ 186.184860][T10261] ? __pfx_ksys_write+0x10/0x10 [ 186.184876][T10261] __x64_sys_io_uring_setup+0xc2/0x170 [ 186.184891][T10261] do_syscall_64+0x123/0x790 [ 186.184909][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.184921][T10261] RIP: 0033:0x7fa52cd9f559 [ 186.184930][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.184941][T10261] RSP: 002b:00007fa52dd1bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 186.184952][T10261] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fa52cd9f559 [ 186.184959][T10261] RDX: 0000200000000200 RSI: 0000200000000040 RDI: 0000000000000046 [ 186.184966][T10261] RBP: 00007fa52dd1c090 R08: 0000000000000000 R09: 0000000000000101 [ 186.184972][T10261] R10: 0000200000000240 R11: 0000000000000206 R12: 0000200000000200 [ 186.184979][T10261] R13: 0000200000000240 R14: 00002000000001c0 R15: 00007fffca8d7008 [ 186.184994][T10261] [ 186.213513][T10264] FAULT_INJECTION: forcing a failure. [ 186.213513][T10264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.213534][T10264] CPU: 2 UID: 0 PID: 10264 Comm: syz.7.1454 Not tainted syzkaller #0 PREEMPT(full) [ 186.213547][T10264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.213554][T10264] Call Trace: [ 186.213558][T10264] [ 186.213586][T10264] dump_stack_lvl+0x100/0x190 [ 186.213610][T10264] should_fail_ex.cold+0x5/0xa [ 186.213627][T10264] _copy_from_user+0x2e/0xd0 [ 186.213642][T10264] video_usercopy+0xe71/0x1730 [ 186.213656][T10264] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.213670][T10264] ? __pfx_video_usercopy+0x10/0x10 [ 186.213692][T10264] v4l2_ioctl+0x1bd/0x250 [ 186.213705][T10264] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.213719][T10264] __x64_sys_ioctl+0x18e/0x210 [ 186.213735][T10264] do_syscall_64+0x123/0x790 [ 186.213753][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.213765][T10264] RIP: 0033:0x7fa52cd9f559 [ 186.213775][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.213785][T10264] RSP: 002b:00007fa52dd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.213797][T10264] RAX: ffffffffffffffda RBX: 00007fa52d025fa0 RCX: 00007fa52cd9f559 [ 186.213804][T10264] RDX: 0000200000000440 RSI: 0000000040045612 RDI: 0000000000000003 [ 186.213810][T10264] RBP: 00007fa52dd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.213817][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.213824][T10264] R13: 00007fa52d026038 R14: 00007fa52d025fa0 R15: 00007fffca8d7008 [ 186.213838][T10264] [ 186.268132][ T42] audit: type=1400 audit(1793063623.905:894): avc: denied { validate_trans } for pid=10269 comm="syz.2.1457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 186.284618][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1458'. [ 186.395341][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1460'. [ 186.407960][T10276] bond1: (slave bond_slave_0): Device is not our slave [ 186.407975][T10276] bond1: option active_slave: invalid value (bond_slave_0) [ 186.408877][T10276] bond1 (unregistering): Released all slaves [ 186.470130][ T9824] IPVS: starting estimator thread 0... [ 186.514235][ T42] audit: type=1400 audit(1793063624.155:895): avc: denied { bind } for pid=10282 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.542737][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1469'. [ 186.561743][T10292] IPVS: using max 42 ests per chain, 100800 per kthread [ 186.664706][T10316] FAULT_INJECTION: forcing a failure. [ 186.664706][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 186.664727][T10316] CPU: 0 UID: 0 PID: 10316 Comm: syz.3.1474 Not tainted syzkaller #0 PREEMPT(full) [ 186.664741][T10316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.664748][T10316] Call Trace: [ 186.664765][T10316] [ 186.664770][T10316] dump_stack_lvl+0x100/0x190 [ 186.664803][T10316] should_fail_ex.cold+0x5/0xa [ 186.664842][T10316] should_failslab+0xc2/0x120 [ 186.664863][T10316] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.664877][T10316] ? do_getname+0x35/0x390 [ 186.664892][T10316] do_getname+0x35/0x390 [ 186.664905][T10316] do_sys_openat2+0xc3/0x1d0 [ 186.664919][T10316] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.664931][T10316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.664956][T10316] __x64_sys_openat+0x12d/0x210 [ 186.664967][T10316] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.664983][T10316] do_syscall_64+0x123/0x790 [ 186.665000][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.665012][T10316] RIP: 0033:0x7fda1879f559 [ 186.665022][T10316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.665033][T10316] RSP: 002b:00007fda196a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.665056][T10316] RAX: ffffffffffffffda RBX: 00007fda18a25fa0 RCX: 00007fda1879f559 [ 186.665067][T10316] RDX: 0000000000102080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 186.665078][T10316] RBP: 00007fda18836b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.665087][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.665096][T10316] R13: 00007fda18a26038 R14: 00007fda18a25fa0 R15: 00007ffcfcc48028 [ 186.665119][T10316] [ 186.665808][ T5802] Bluetooth: Unexpected start frame (len 12) [ 186.719826][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1474'. [ 186.719910][T10317] block nbd0: not configured, cannot reconfigure [ 186.820497][ T5872] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 186.981249][ T5872] usb 12-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 186.983767][ T5872] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 186.983789][ T5872] usb 12-1: Product: syz [ 186.983801][ T5872] usb 12-1: Manufacturer: syz [ 187.106690][T10319] tmpfs: Bad value for 'uid' [ 187.106717][T10319] tmpfs: Bad value for 'uid' [ 187.106768][T10319] FAULT_INJECTION: forcing a failure. [ 187.106768][T10319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.106852][T10319] CPU: 0 UID: 0 PID: 10319 Comm: syz.6.1475 Not tainted syzkaller #0 PREEMPT(full) [ 187.106872][T10319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.106884][T10319] Call Trace: [ 187.106891][T10319] [ 187.106899][T10319] dump_stack_lvl+0x100/0x190 [ 187.106931][T10319] should_fail_ex.cold+0x5/0xa [ 187.106973][T10319] _copy_to_user+0x32/0xd0 [ 187.107000][T10319] simple_read_from_buffer+0xcb/0x170 [ 187.107030][T10319] proc_fail_nth_read+0x1af/0x230 [ 187.107060][T10319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.107090][T10319] ? rw_verify_area+0xce/0x6d0 [ 187.107109][T10319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.107138][T10319] vfs_read+0x1e4/0xb40 [ 187.107161][T10319] ? lock_acquire+0x1d1/0x380 [ 187.107183][T10319] ? __fget_files+0x34/0x3d0 [ 187.107209][T10319] ? __pfx_vfs_read+0x10/0x10 [ 187.107229][T10319] ? find_held_lock+0x2b/0x80 [ 187.107248][T10319] ? __fget_files+0x215/0x3d0 [ 187.107280][T10319] ? __fget_files+0x21f/0x3d0 [ 187.107313][T10319] ksys_read+0x12a/0x250 [ 187.107335][T10319] ? __pfx_ksys_read+0x10/0x10 [ 187.107366][T10319] do_syscall_64+0x123/0x790 [ 187.107395][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.107415][T10319] RIP: 0033:0x7f531b15fd8e [ 187.107431][T10319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.107461][T10319] RSP: 002b:00007f531c13efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.107481][T10319] RAX: ffffffffffffffda RBX: 00007f531c13f6c0 RCX: 00007f531b15fd8e [ 187.107493][T10319] RDX: 000000000000000f RSI: 00007f531c13f0a0 RDI: 0000000000000003 [ 187.107504][T10319] RBP: 00007f531c13f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.107516][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.107526][T10319] R13: 00007f531b426038 R14: 00007f531b425fa0 R15: 00007ffc51f98848 [ 187.107552][T10319] [ 187.212180][T10327] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.16777216.0), cmd(12) [ 187.247149][ T42] audit: type=1400 audit(1793063624.885:896): avc: denied { read } for pid=10328 comm="syz.6.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.305928][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 187.353155][T10339] xt_l2tp: invalid flags combination: 8 [ 187.386152][ T5802] Bluetooth: Unexpected start frame (len 12) [ 187.393087][T10310] xt_hashlimit: size too large, truncated to 1048576 [ 187.450929][T10343] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 187.467137][ T5872] scsi host7: uas [ 187.514175][T10349] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 187.550434][ T5951] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 187.658153][ C2] usb 12-1: stat urb: status -71 [ 187.658191][ C2] usb 12-1: cmd cmplt err -71 [ 187.658405][ T5590] usb 12-1: USB disconnect, device number 2 [ 187.660497][ T5590] scsi 7:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 187.660545][ T5590] scsi 7:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00 [ 187.712022][ T5951] usb 7-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 187.713028][ T5951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.713071][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.735567][ T5951] as10x_usb: device has been detected [ 187.735895][ T5951] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 187.743474][ T5951] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 187.744959][ T5951] as10x_usb: error during firmware upload part1 [ 187.744987][ T5951] Registered device Abilis Systems DVB-Titan [ 188.253106][T10355] XFS (sr0): Invalid superblock magic number [ 188.301677][T10355] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 188.396110][T10370] CIFS: Attempting to mount //127.0.0.1/share [ 188.398892][ T5867] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 188.398910][ T5867] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 188.401834][T10370] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 188.410517][ T5867] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 188.410533][ T5867] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 188.412459][T10370] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 188.412702][T10370] CIFS: VFS: cifs_mount failed w/return code = -2 [ 188.414011][T10370] netlink: 'syz.3.1493': attribute type 20 has an invalid length. [ 188.416858][T10370] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 188.467363][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 188.467385][ T42] audit: type=1400 audit(1793063626.105:899): avc: denied { accept } for pid=10376 comm="syz.6.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.542637][ T42] audit: type=1400 audit(1793063626.185:900): avc: denied { accept } for pid=10374 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.680547][ T5590] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 188.810493][ T5590] usb 12-1: device descriptor read/64, error -71 [ 188.950453][ T5951] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 188.997506][T10392] random: crng reseeded on system resumption [ 189.061071][ T5590] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 189.101261][ T5951] usb 11-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 189.103880][ T5951] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 189.103899][ T5951] usb 11-1: Product: syz [ 189.103910][ T5951] usb 11-1: Manufacturer: syz [ 189.191026][ T5590] usb 12-1: device descriptor read/64, error -71 [ 189.301331][ T5590] usb usb12-port1: attempt power cycle [ 189.338769][ T824] usb 7-1: USB disconnect, device number 17 [ 189.358447][ T824] Unregistered device Abilis Systems DVB-Titan [ 189.363870][ T824] as10x_usb: device has been disconnected [ 189.386208][T10396] FAULT_INJECTION: forcing a failure. [ 189.386208][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.386228][T10396] CPU: 0 UID: 0 PID: 10396 Comm: syz.3.1500 Not tainted syzkaller #0 PREEMPT(full) [ 189.386241][T10396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.386247][T10396] Call Trace: [ 189.386252][T10396] [ 189.386257][T10396] dump_stack_lvl+0x100/0x190 [ 189.386291][T10396] should_fail_ex.cold+0x5/0xa [ 189.386308][T10396] _copy_to_user+0x32/0xd0 [ 189.386323][T10396] simple_read_from_buffer+0xcb/0x170 [ 189.386343][T10396] proc_fail_nth_read+0x1af/0x230 [ 189.386361][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.386379][T10396] ? rw_verify_area+0xce/0x6d0 [ 189.386392][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.386409][T10396] vfs_read+0x1e4/0xb40 [ 189.386423][T10396] ? lock_acquire+0x1d1/0x380 [ 189.386438][T10396] ? __fget_files+0x34/0x3d0 [ 189.386454][T10396] ? __pfx_vfs_read+0x10/0x10 [ 189.386466][T10396] ? find_held_lock+0x2b/0x80 [ 189.386477][T10396] ? __fget_files+0x215/0x3d0 [ 189.386496][T10396] ? __fget_files+0x21f/0x3d0 [ 189.386516][T10396] ksys_read+0x12a/0x250 [ 189.386530][T10396] ? __pfx_ksys_read+0x10/0x10 [ 189.386548][T10396] do_syscall_64+0x123/0x790 [ 189.386566][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.386578][T10396] RIP: 0033:0x7fda1875fd8e [ 189.386588][T10396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.386598][T10396] RSP: 002b:00007fda196a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.386610][T10396] RAX: ffffffffffffffda RBX: 00007fda196a46c0 RCX: 00007fda1875fd8e [ 189.386617][T10396] RDX: 000000000000000f RSI: 00007fda196a40a0 RDI: 0000000000000004 [ 189.386624][T10396] RBP: 00007fda196a4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.386631][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.386637][T10396] R13: 00007fda18a26038 R14: 00007fda18a25fa0 R15: 00007ffcfcc48028 [ 189.386652][T10396] [ 189.519506][T10390] __nla_validate_parse: 1 callbacks suppressed [ 189.519518][T10390] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1499'. [ 189.521881][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 189.542743][T10390] xt_hashlimit: size too large, truncated to 1048576 [ 189.549963][T10410] x_tables: duplicate underflow at hook 1 [ 189.598060][ T5951] scsi host7: uas [ 189.642051][ T5590] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 189.661198][ T5590] usb 12-1: device descriptor read/8, error -71 [ 189.798336][ C0] usb 11-1: stat urb: status -71 [ 189.798388][ C0] usb 11-1: cmd cmplt err -71 [ 189.799231][ T5953] usb 11-1: USB disconnect, device number 7 [ 189.804085][ T5953] scsi 7:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 189.804129][ T5953] scsi 7:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 189.900527][ T5590] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 189.921788][ T5590] usb 12-1: device descriptor read/8, error -71 [ 190.031911][ T5590] usb usb12-port1: unable to enumerate USB device [ 190.040519][ T5802] Bluetooth: Unexpected start frame (len 12) [ 190.409098][T10425] FAULT_INJECTION: forcing a failure. [ 190.409098][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 190.409119][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.3.1508 Not tainted syzkaller #0 PREEMPT(full) [ 190.409132][T10425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.409139][T10425] Call Trace: [ 190.409143][T10425] [ 190.409148][T10425] dump_stack_lvl+0x100/0x190 [ 190.409169][T10425] should_fail_ex.cold+0x5/0xa [ 190.409187][T10425] should_failslab+0xc2/0x120 [ 190.409203][T10425] __kmalloc_cache_noprof+0x91/0x6d0 [ 190.409215][T10425] ? smc_pnet_add+0xfe9/0x17c0 [ 190.409235][T10425] smc_pnet_add+0xfe9/0x17c0 [ 190.409268][T10425] ? __pfx_smc_pnet_add+0x10/0x10 [ 190.409285][T10425] ? __nla_parse+0x40/0x60 [ 190.409299][T10425] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 190.409319][T10425] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 190.409336][T10425] genl_family_rcv_msg_doit+0x214/0x300 [ 190.409351][T10425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.409370][T10425] ? bpf_lsm_capable+0x9/0x10 [ 190.409385][T10425] ? security_capable+0x80/0x260 [ 190.409403][T10425] genl_rcv_msg+0x560/0x800 [ 190.409418][T10425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.409432][T10425] ? __lock_acquire+0x5c0/0x1f40 [ 190.409462][T10425] ? __pfx_smc_pnet_add+0x10/0x10 [ 190.409480][T10425] ? __lock_acquire+0x5c0/0x1f40 [ 190.409496][T10425] netlink_rcv_skb+0x159/0x420 [ 190.409508][T10425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.409523][T10425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.409540][T10425] ? netlink_deliver_tap+0x1ae/0xb50 [ 190.409554][T10425] genl_rcv+0x28/0x40 [ 190.409565][T10425] netlink_unicast+0x668/0x950 [ 190.409579][T10425] ? __pfx_netlink_unicast+0x10/0x10 [ 190.409595][T10425] netlink_sendmsg+0x9ac/0x10c0 [ 190.409610][T10425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.409625][T10425] ? selinux_socket_sendmsg+0x198/0x2f0 [ 190.409643][T10425] ? ____sys_sendmsg+0xa99/0xc30 [ 190.409656][T10425] ____sys_sendmsg+0xa99/0xc30 [ 190.409669][T10425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.409682][T10425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.409699][T10425] ? lock_acquire+0x1d1/0x380 [ 190.409712][T10425] ? get_pid_task+0x2a/0x250 [ 190.409738][T10425] ___sys_sendmsg+0x190/0x1e0 [ 190.409753][T10425] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.409767][T10425] ? get_pid_task+0x106/0x250 [ 190.409788][T10425] ? find_held_lock+0x2b/0x80 [ 190.409808][T10425] __sys_sendmsg+0x160/0x210 [ 190.409820][T10425] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.409843][T10425] do_syscall_64+0x123/0x790 [ 190.409861][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.409873][T10425] RIP: 0033:0x7fda1879f559 [ 190.409883][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.409893][T10425] RSP: 002b:00007fda196a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.409905][T10425] RAX: ffffffffffffffda RBX: 00007fda18a25fa0 RCX: 00007fda1879f559 [ 190.409912][T10425] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 190.409918][T10425] RBP: 00007fda196a4090 R08: 0000000000000000 R09: 0000000000000000 [ 190.409925][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.409932][T10425] R13: 00007fda18a26038 R14: 00007fda18a25fa0 R15: 00007ffcfcc48028 [ 190.409948][T10425] [ 190.594840][ T5802] Bluetooth: hci3: unexpected subevent 0x1a length: 12 > 6 [ 190.595806][T10429] capability: warning: `syz.6.1510' uses 32-bit capabilities (legacy support in use) [ 191.290217][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 191.375516][ T5802] Bluetooth: Unexpected start frame (len 12) [ 191.460522][ T29] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 191.468655][T10463] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 191.495950][ T42] audit: type=1400 audit(1793063629.135:901): avc: denied { mounton } for pid=10464 comm="syz.7.1522" path="/88/file0" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 191.623183][ T29] usb 11-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 191.624304][ T29] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.624344][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.635385][ T29] as10x_usb: device has been detected [ 191.635985][ T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 191.650108][ T29] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 191.656204][ T29] as10x_usb: error during firmware upload part1 [ 191.656256][ T29] Registered device Abilis Systems DVB-Titan [ 191.660968][ T42] audit: type=1400 audit(1793063629.295:902): avc: denied { mounton } for pid=10464 comm="syz.7.1522" path="/88/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 191.907768][T10481] netlink: 'syz.3.1523': attribute type 3 has an invalid length. [ 192.049555][ T42] audit: type=1400 audit(1793063629.685:903): avc: denied { append } for pid=10484 comm="syz.3.1525" name="event1" dev="devtmpfs" ino=3057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.190696][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 192.341889][ T42] audit: type=1400 audit(1793063629.985:904): avc: denied { listen } for pid=10497 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.343524][ T42] audit: type=1400 audit(1793063629.985:905): avc: denied { accept } for pid=10497 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.440557][ T29] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 192.610381][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 192.611396][ T29] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.612315][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 192.612333][ T29] usb 7-1: config 16 has an invalid interface number: 128 but max is 0 [ 192.612350][ T29] usb 7-1: config 16 has no interface number 0 [ 192.612380][ T29] usb 7-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.612399][ T29] usb 7-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.612420][ T29] usb 7-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.612434][ T29] usb 7-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.612454][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.633002][ T5802] Bluetooth: hci3: command tx timeout [ 192.819958][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 192.819992][ T29] usbtmc 7-1:16.128: can't read capabilities [ 192.893181][T10504] random: crng reseeded on system resumption [ 193.023096][ T42] audit: type=1400 audit(1793063630.665:906): avc: denied { read } for pid=10488 comm="syz.2.1527" name="nullb" dev="configfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.023246][ T42] audit: type=1400 audit(1793063630.665:907): avc: denied { read open } for pid=10488 comm="syz.2.1527" path="/432/my_configfs/nullb" dev="configfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.025491][ T42] audit: type=1400 audit(1793063630.665:908): avc: denied { write } for pid=10488 comm="syz.2.1527" name="nullb" dev="configfs" ino=3551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.114249][ T43] usb 7-1: USB disconnect, device number 18 [ 193.160376][T10444] 9pnet_virtio: no channels available for device syz [ 193.209424][ T1488] usb 11-1: USB disconnect, device number 8 [ 193.235919][ T1488] Unregistered device Abilis Systems DVB-Titan [ 193.236867][ T1488] as10x_usb: device has been disconnected [ 193.289115][T10513] FAULT_INJECTION: forcing a failure. [ 193.289115][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.289137][T10513] CPU: 3 UID: 0 PID: 10513 Comm: syz.7.1535 Not tainted syzkaller #0 PREEMPT(full) [ 193.289150][T10513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.289156][T10513] Call Trace: [ 193.289172][T10513] [ 193.289177][T10513] dump_stack_lvl+0x100/0x190 [ 193.289211][T10513] should_fail_ex.cold+0x5/0xa [ 193.289236][T10513] _copy_from_iter+0x1f4/0x1690 [ 193.289257][T10513] ? __pfx__copy_from_iter+0x10/0x10 [ 193.289270][T10513] ? __asan_memset+0x23/0x50 [ 193.289283][T10513] ? __alloc_skb+0x4e9/0x710 [ 193.289305][T10513] ? __pfx___alloc_skb+0x10/0x10 [ 193.289321][T10513] ? unwind_next_frame+0xbd/0x2090 [ 193.289349][T10513] skb_copy_datagram_from_iter+0x11f/0x710 [ 193.289374][T10513] tun_get_user+0x1955/0x3ee0 [ 193.289394][T10513] ? __lock_acquire+0x5c0/0x1f40 [ 193.289409][T10513] ? __pfx_tun_get_user+0x10/0x10 [ 193.289423][T10513] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.289439][T10513] ? find_held_lock+0x2b/0x80 [ 193.289449][T10513] ? tun_get+0x191/0x370 [ 193.289461][T10513] ? tun_get+0x191/0x370 [ 193.289477][T10513] tun_chr_write_iter+0xdc/0x200 [ 193.289492][T10513] do_iter_readv_writev+0x6f7/0x930 [ 193.289507][T10513] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 193.289519][T10513] ? selinux_file_permission+0x30/0x6a0 [ 193.289539][T10513] ? bpf_lsm_file_permission+0x9/0x10 [ 193.289553][T10513] ? security_file_permission+0x76/0x210 [ 193.289565][T10513] ? rw_verify_area+0xce/0x6d0 [ 193.289578][T10513] vfs_writev+0x360/0xdd0 [ 193.289592][T10513] ? __lock_acquire+0x5c0/0x1f40 [ 193.289608][T10513] ? __pfx_vfs_writev+0x10/0x10 [ 193.289623][T10513] ? lock_acquire+0x1d1/0x380 [ 193.289636][T10513] ? __fget_files+0x34/0x3d0 [ 193.289658][T10513] ? __fget_files+0x21f/0x3d0 [ 193.289678][T10513] ? do_writev+0x13e/0x340 [ 193.289690][T10513] do_writev+0x13e/0x340 [ 193.289703][T10513] ? __pfx_do_writev+0x10/0x10 [ 193.289719][T10513] do_syscall_64+0x123/0x790 [ 193.289741][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.289753][T10513] RIP: 0033:0x7fa52cd9f559 [ 193.289762][T10513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.289773][T10513] RSP: 002b:00007fa52dd1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 193.289792][T10513] RAX: ffffffffffffffda RBX: 00007fa52d025fa0 RCX: 00007fa52cd9f559 [ 193.289800][T10513] RDX: 0000000000000001 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 193.289807][T10513] RBP: 00007fa52dd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 193.289813][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.289820][T10513] R13: 00007fa52d026038 R14: 00007fa52d025fa0 R15: 00007fffca8d7008 [ 193.289835][T10513] [ 193.668405][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 193.771701][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 193.771714][ T42] audit: type=1400 audit(1793063631.415:915): avc: denied { create } for pid=10531 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.773411][ T42] audit: type=1400 audit(1793063631.415:916): avc: denied { bind } for pid=10531 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.773900][ T42] audit: type=1400 audit(1793063631.415:917): avc: denied { getopt } for pid=10531 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.923431][ T42] audit: type=1400 audit(1793063631.565:918): avc: denied { mounton } for pid=10537 comm="syz.2.1544" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 193.937865][T10538] XFS (sr0): Invalid superblock magic number [ 193.981526][T10538] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.142736][T10552] batman_adv: batadv0: Interface deactivated: syz_tun [ 194.142758][T10552] batman_adv: batadv0: Removing interface: syz_tun [ 194.145781][T10552] bridge0: port 1(syz_tun) entered blocking state [ 194.145861][T10552] bridge0: port 1(syz_tun) entered disabled state [ 194.145959][T10552] syz_tun: entered allmulticast mode [ 194.147724][T10552] syz_tun: left allmulticast mode [ 194.162133][T10554] pimreg: entered allmulticast mode [ 194.213924][T10559] md: md2 stopped. [ 194.221285][T10553] pimreg: left allmulticast mode [ 194.322605][T10567] XFS (sr0): Invalid superblock magic number [ 194.371205][T10567] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.478599][T10582] batman_adv: batadv0: Interface deactivated: syz_tun [ 194.478617][T10582] batman_adv: batadv0: Removing interface: syz_tun [ 194.479262][T10582] bridge0: port 3(syz_tun) entered blocking state [ 194.479311][T10582] bridge0: port 3(syz_tun) entered disabled state [ 194.480266][T10582] syz_tun: entered promiscuous mode [ 194.737598][T10593] FAULT_INJECTION: forcing a failure. [ 194.737598][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 194.737629][T10593] CPU: 2 UID: 0 PID: 10593 Comm: syz.2.1566 Not tainted syzkaller #0 PREEMPT(full) [ 194.737649][T10593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.737659][T10593] Call Trace: [ 194.737666][T10593] [ 194.737673][T10593] dump_stack_lvl+0x100/0x190 [ 194.737703][T10593] should_fail_ex.cold+0x5/0xa [ 194.737729][T10593] should_failslab+0xc2/0x120 [ 194.737753][T10593] kmem_cache_alloc_noprof+0x92/0x6a0 [ 194.737775][T10593] ? security_file_alloc+0x34/0x2c0 [ 194.737798][T10593] security_file_alloc+0x34/0x2c0 [ 194.737816][T10593] init_file+0x95/0x480 [ 194.737843][T10593] alloc_empty_file+0x79/0x1c0 [ 194.737861][T10593] alloc_file_pseudo+0x17e/0x290 [ 194.737880][T10593] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 194.737898][T10593] ? security_inode_init_security_anon+0x7b/0x230 [ 194.737929][T10593] __anon_inode_getfile+0xe8/0x280 [ 194.737951][T10593] ? _copy_to_user+0xaf/0xd0 [ 194.737971][T10593] io_uring_setup.cold+0x197d/0x1c7e [ 194.737994][T10593] ? __pfx_io_uring_setup+0x10/0x10 [ 194.738013][T10593] ? find_held_lock+0x2b/0x80 [ 194.738048][T10593] ? ksys_write+0x1ac/0x250 [ 194.738074][T10593] ? __pfx_ksys_write+0x10/0x10 [ 194.738100][T10593] __x64_sys_io_uring_setup+0xc2/0x170 [ 194.738122][T10593] do_syscall_64+0x123/0x790 [ 194.738149][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.738174][T10593] RIP: 0033:0x7f22f579f559 [ 194.738189][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.738205][T10593] RSP: 002b:00007f22f665cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 194.738223][T10593] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f22f579f559 [ 194.738234][T10593] RDX: 0000200000000200 RSI: 0000200000000040 RDI: 0000000000000046 [ 194.738245][T10593] RBP: 00007f22f665d090 R08: 0000000000000000 R09: 0000000000000101 [ 194.738256][T10593] R10: 0000200000000240 R11: 0000000000000206 R12: 0000200000000200 [ 194.738267][T10593] R13: 0000200000000240 R14: 00002000000001c0 R15: 00007ffd4a37b4e8 [ 194.738290][T10593] [ 194.782304][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 195.444972][ T42] audit: type=1400 audit(1793063633.085:919): avc: denied { node_bind } for pid=10602 comm="syz.2.1571" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 195.449432][T10607] bridge0: port 3(syz_tun) entered blocking state [ 195.449569][T10607] bridge0: port 3(syz_tun) entered disabled state [ 195.449704][T10607] syz_tun: entered allmulticast mode [ 195.451830][T10607] syz_tun: left allmulticast mode [ 195.540044][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 195.747464][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1582'. [ 195.775963][T10629] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 195.830734][ T5948] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 195.990990][ T5948] usb 11-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 195.993278][ T5948] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 195.993292][ T5948] usb 11-1: Product: syz [ 195.993299][ T5948] usb 11-1: Manufacturer: syz [ 196.401265][T10619] xt_hashlimit: size too large, truncated to 1048576 [ 196.465312][T10619] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 196.469495][ T5948] scsi host7: uas [ 196.669421][ C0] usb 11-1: stat urb: status -71 [ 196.669466][ C0] usb 11-1: cmd cmplt err -71 [ 196.669755][ T5872] usb 11-1: USB disconnect, device number 9 [ 196.671651][ T5872] scsi 7:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 196.671685][ T5872] scsi 7:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 197.207027][T10642] FAULT_INJECTION: forcing a failure. [ 197.207027][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 197.207060][T10642] CPU: 2 UID: 0 PID: 10642 Comm: syz.2.1587 Not tainted syzkaller #0 PREEMPT(full) [ 197.207081][T10642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.207091][T10642] Call Trace: [ 197.207097][T10642] [ 197.207106][T10642] dump_stack_lvl+0x100/0x190 [ 197.207137][T10642] should_fail_ex.cold+0x5/0xa [ 197.207167][T10642] should_failslab+0xc2/0x120 [ 197.207191][T10642] __kmalloc_noprof+0xfc/0x840 [ 197.207213][T10642] ? rcu_is_watching+0x13/0xc0 [ 197.207230][T10642] ? tomoyo_realpath_from_path+0xb6/0x690 [ 197.207256][T10642] tomoyo_realpath_from_path+0xb6/0x690 [ 197.207282][T10642] tomoyo_mount_acl+0x1b6/0x8b0 [ 197.207299][T10642] ? is_bpf_text_address+0x8a/0x1a0 [ 197.207320][T10642] ? is_bpf_text_address+0x8a/0x1a0 [ 197.207343][T10642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 197.207367][T10642] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 197.207385][T10642] ? kernel_text_address+0x8d/0x100 [ 197.207421][T10642] ? unwind_get_return_address+0x59/0xa0 [ 197.207483][T10642] ? arch_stack_walk+0xa6/0xf0 [ 197.207522][T10642] ? __lock_acquire+0x5c0/0x1f40 [ 197.207560][T10642] ? tomoyo_mount_permission+0x1f6/0x460 [ 197.207582][T10642] ? tomoyo_domain+0xb2/0x150 [ 197.207605][T10642] ? tomoyo_profile+0x47/0x60 [ 197.207630][T10642] tomoyo_mount_permission+0x214/0x460 [ 197.207648][T10642] ? tomoyo_mount_permission+0x1f6/0x460 [ 197.207671][T10642] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 197.207704][T10642] security_sb_mount+0xdd/0x270 [ 197.207731][T10642] path_mount+0x158/0x2850 [ 197.207757][T10642] ? __pfx_path_mount+0x10/0x10 [ 197.207781][T10642] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.207812][T10642] ? putname+0xb1/0x110 [ 197.207830][T10642] ? kmem_cache_free+0x127/0x6c0 [ 197.207859][T10642] ? __x64_sys_mount+0x293/0x310 [ 197.207879][T10642] __x64_sys_mount+0x293/0x310 [ 197.207899][T10642] ? __pfx___x64_sys_mount+0x10/0x10 [ 197.207927][T10642] do_syscall_64+0x123/0x790 [ 197.207956][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.207975][T10642] RIP: 0033:0x7f22f579f559 [ 197.207990][T10642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.208009][T10642] RSP: 002b:00007f22f665d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.208027][T10642] RAX: ffffffffffffffda RBX: 00007f22f5a25fa0 RCX: 00007f22f579f559 [ 197.208041][T10642] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 197.208051][T10642] RBP: 00007f22f5836b20 R08: 0000000000000000 R09: 0000000000000000 [ 197.208063][T10642] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 197.208076][T10642] R13: 00007f22f5a26038 R14: 00007f22f5a25fa0 R15: 00007ffd4a37b4e8 [ 197.208103][T10642] [ 197.208200][T10642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.278807][T10646] FAULT_INJECTION: forcing a failure. [ 197.278807][T10646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.278827][T10646] CPU: 0 UID: 0 PID: 10646 Comm: syz.6.1589 Not tainted syzkaller #0 PREEMPT(full) [ 197.278840][T10646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.278847][T10646] Call Trace: [ 197.278851][T10646] [ 197.278856][T10646] dump_stack_lvl+0x100/0x190 [ 197.278877][T10646] should_fail_ex.cold+0x5/0xa [ 197.278892][T10646] ? prepare_alloc_pages+0x16d/0x5b0 [ 197.278909][T10646] should_fail_alloc_page+0xeb/0x140 [ 197.278926][T10646] prepare_alloc_pages+0x1f0/0x5b0 [ 197.278943][T10646] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 197.278960][T10646] ? lock_acquire+0x1d1/0x380 [ 197.278975][T10646] ? __lock_acquire+0x5c0/0x1f40 [ 197.278989][T10646] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 197.279005][T10646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.279022][T10646] ? __lock_acquire+0x5c0/0x1f40 [ 197.279041][T10646] ? lock_acquire+0x1d1/0x380 [ 197.279054][T10646] ? page_table_check_set+0x1aa/0x630 [ 197.279070][T10646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.279087][T10646] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 197.279101][T10646] ? policy_nodemask+0xed/0x4f0 [ 197.279118][T10646] alloc_pages_mpol+0x201/0x560 [ 197.279135][T10646] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.279151][T10646] ? __page_table_check_ptes_set+0x1d5/0x530 [ 197.279170][T10646] folio_alloc_mpol_noprof+0x36/0x260 [ 197.279182][T10646] vma_alloc_folio_noprof+0xed/0x1d0 [ 197.279193][T10646] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 197.279205][T10646] ? rcu_read_unlock+0x2d/0xb0 [ 197.279224][T10646] do_anonymous_page+0xac9/0x2050 [ 197.279246][T10646] ? __pfx_do_anonymous_page+0x10/0x10 [ 197.279261][T10646] ? rcu_read_unlock+0x2d/0xb0 [ 197.279277][T10646] ? rcu_read_unlock+0x2d/0xb0 [ 197.279297][T10646] __handle_mm_fault+0x1ff3/0x2f60 [ 197.279322][T10646] ? __pfx___handle_mm_fault+0x10/0x10 [ 197.279339][T10646] ? pte_offset_map_lock+0x174/0x320 [ 197.279352][T10646] ? find_held_lock+0x2b/0x80 [ 197.279362][T10646] ? find_held_lock+0x2b/0x80 [ 197.279386][T10646] ? follow_page_pte+0x536/0x1050 [ 197.279407][T10646] handle_mm_fault+0x363/0xa20 [ 197.279426][T10646] __get_user_pages+0x8a9/0x2c20 [ 197.279443][T10646] ? __pfx_mt_find+0x10/0x10 [ 197.279465][T10646] ? __pfx___get_user_pages+0x10/0x10 [ 197.279486][T10646] populate_vma_page_range+0x267/0x3f0 [ 197.279500][T10646] ? __pfx_populate_vma_page_range+0x10/0x10 [ 197.279514][T10646] ? __pfx_find_vma_intersection+0x10/0x10 [ 197.279531][T10646] __mm_populate+0x107/0x3a0 [ 197.279545][T10646] ? __pfx___mm_populate+0x10/0x10 [ 197.279560][T10646] ? up_write+0x2dc/0x5b0 [ 197.279576][T10646] do_mlock+0x3f0/0x800 [ 197.279589][T10646] ? __pfx_do_mlock+0x10/0x10 [ 197.279600][T10646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.279617][T10646] ? __fget_files+0x21f/0x3d0 [ 197.279638][T10646] __x64_sys_mlock+0xce/0x120 [ 197.279650][T10646] ? __pfx___x64_sys_mlock+0x10/0x10 [ 197.279665][T10646] do_syscall_64+0x123/0x790 [ 197.279683][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.279695][T10646] RIP: 0033:0x7f531b19f559 [ 197.279705][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.279715][T10646] RSP: 002b:00007f531c13f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 197.279727][T10646] RAX: ffffffffffffffda RBX: 00007f531b425fa0 RCX: 00007f531b19f559 [ 197.279734][T10646] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 197.279740][T10646] RBP: 00007f531c13f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.279747][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.279754][T10646] R13: 00007f531b426038 R14: 00007f531b425fa0 R15: 00007ffc51f98848 [ 197.279769][T10646] [ 197.399101][T10655] FAULT_INJECTION: forcing a failure. [ 197.399101][T10655] name failslab, interval 1, probability 0, space 0, times 0 [ 197.399121][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.2.1592 Not tainted syzkaller #0 PREEMPT(full) [ 197.399133][T10655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.399140][T10655] Call Trace: [ 197.399145][T10655] [ 197.399150][T10655] dump_stack_lvl+0x100/0x190 [ 197.399170][T10655] should_fail_ex.cold+0x5/0xa [ 197.399188][T10655] should_failslab+0xc2/0x120 [ 197.399204][T10655] kmem_cache_alloc_noprof+0x92/0x6a0 [ 197.399219][T10655] ? do_getname+0x35/0x390 [ 197.399233][T10655] do_getname+0x35/0x390 [ 197.399246][T10655] do_sys_openat2+0xc3/0x1d0 [ 197.399257][T10655] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.399268][T10655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.399290][T10655] __x64_sys_openat+0x12d/0x210 [ 197.399301][T10655] ? __pfx___x64_sys_openat+0x10/0x10 [ 197.399316][T10655] ? ksys_write+0x1ac/0x250 [ 197.399336][T10655] do_syscall_64+0x123/0x790 [ 197.399354][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.399366][T10655] RIP: 0033:0x7f22f579f559 [ 197.399376][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.399387][T10655] RSP: 002b:00007f22f665d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.399400][T10655] RAX: ffffffffffffffda RBX: 00007f22f5a25fa0 RCX: 00007f22f579f559 [ 197.399408][T10655] RDX: 0000000000102080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 197.399414][T10655] RBP: 00007f22f5836b20 R08: 0000000000000000 R09: 0000000000000000 [ 197.399421][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.399427][T10655] R13: 00007f22f5a26038 R14: 00007f22f5a25fa0 R15: 00007ffd4a37b4e8 [ 197.399441][T10655] [ 197.401818][ T5802] Bluetooth: Unexpected start frame (len 12) [ 197.456187][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 197.456244][T10658] block nbd0: not configured, cannot reconfigure [ 200.952312][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.147018][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 206.147054][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.221447][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 206.221487][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.293186][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 206.293209][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.354381][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 206.354403][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.461886][ T5840] bridge_slave_1: left allmulticast mode [ 206.461911][ T5840] bridge_slave_1: left promiscuous mode [ 206.462097][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.464448][ T5840] bridge_slave_0: left allmulticast mode [ 206.464468][ T5840] bridge_slave_0: left promiscuous mode [ 206.464674][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.623026][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.625353][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.626665][ T5840] bond0 (unregistering): Released all slaves [ 206.632591][ T5840] bond1 (unregistering): Released all slaves [ 206.707099][ T42] audit: type=1400 audit(1793063644.345:920): avc: denied { write } for pid=10669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.739821][ T5840] tipc: Left network mode [ 206.751468][ T5840] IPVS: stopping master sync thread 6333 ... [ 206.757746][ T42] audit: type=1400 audit(1793063644.395:921): avc: denied { write } for pid=10672 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.799393][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 206.920644][ T42] audit: type=1400 audit(1793063644.565:922): avc: denied { write } for pid=10676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.006086][ T42] audit: type=1400 audit(1793063644.645:923): avc: denied { write } for pid=10679 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.036014][ T5840] hsr_slave_0: left promiscuous mode [ 207.038390][ T5840] hsr_slave_1: left promiscuous mode [ 207.038780][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.038792][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.040420][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.040431][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.052344][ T5840] veth1_macvtap: left promiscuous mode [ 207.052367][ T5840] veth0_macvtap: left promiscuous mode [ 207.052411][ T5840] veth1_vlan: left promiscuous mode [ 207.052427][ T5840] veth0_vlan: left promiscuous mode [ 207.229412][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 207.236948][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 207.336201][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 207.419665][ T42] audit: type=1400 audit(1793063645.055:924): avc: denied { write } for pid=10683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.488531][ T42] audit: type=1400 audit(1793063645.125:925): avc: denied { write } for pid=10686 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.531877][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 207.590520][ T42] audit: type=1400 audit(1793063645.225:926): avc: denied { write } for pid=10689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.638904][ T42] audit: type=1400 audit(1793063645.275:927): avc: denied { write } for pid=10692 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.672173][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 208.928358][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.932350][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.935765][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.939937][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.943903][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.115824][T10719] device-mapper: ioctl: Target type does not support messages [ 209.141365][T10704] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.255551][ T5802] Bluetooth: Unexpected start frame (len 12) [ 209.255599][ T5802] Bluetooth: Frame is too long (len 12, expected len 4) [ 209.465329][T10704] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.465450][T10704] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.465536][T10704] bridge_slave_0: entered allmulticast mode [ 209.466678][T10704] bridge_slave_0: entered promiscuous mode [ 209.468849][T10704] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.468917][T10704] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.469003][T10704] bridge_slave_1: entered allmulticast mode [ 209.470226][T10704] bridge_slave_1: entered promiscuous mode [ 209.489829][T10704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.492779][T10704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.509918][T10704] team0: Port device team_slave_0 added [ 209.511719][T10704] team0: Port device team_slave_1 added [ 209.529377][T10704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.529391][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.529411][T10704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.531683][T10704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.531695][T10704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.531715][T10704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.559701][T10704] hsr_slave_0: entered promiscuous mode [ 209.561098][T10704] hsr_slave_1: entered promiscuous mode [ 209.561595][T10704] debugfs: 'hsr0' already exists in 'hsr' [ 209.561613][T10704] Cannot create hsr debugfs directory [ 209.702181][T10704] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 209.704435][T10704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.704902][T10704] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 209.706600][T10704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.707011][T10704] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 209.708784][T10704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.709183][T10704] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 209.711742][T10704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.727698][T10704] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.727779][T10704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.727966][T10704] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.728053][T10704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.762656][T10704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.768899][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.769496][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.777355][T10704] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.782248][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.782301][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.785865][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.785949][ T9814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.818406][T10744] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1607'. [ 210.029368][T10704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.174149][T10704] veth0_vlan: entered promiscuous mode [ 210.178403][T10704] veth1_vlan: entered promiscuous mode [ 210.194465][T10704] veth0_macvtap: entered promiscuous mode [ 210.197964][T10704] veth1_macvtap: entered promiscuous mode [ 210.206672][T10704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.211206][T10704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.214534][ T5840] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.214664][ T5840] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.258665][ T9815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.258679][ T9815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.260580][ T5840] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.260615][ T5840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.277176][ T9815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.277194][ T9815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.361328][T10769] FAULT_INJECTION: forcing a failure. [ 210.361328][T10769] name failslab, interval 1, probability 0, space 0, times 0 [ 210.361351][T10769] CPU: 1 UID: 0 PID: 10769 Comm: syz.8.1597 Not tainted syzkaller #0 PREEMPT(full) [ 210.361364][T10769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.361371][T10769] Call Trace: [ 210.361375][T10769] [ 210.361379][T10769] dump_stack_lvl+0x100/0x190 [ 210.361401][T10769] should_fail_ex.cold+0x5/0xa [ 210.361419][T10769] should_failslab+0xc2/0x120 [ 210.361437][T10769] __kmalloc_noprof+0xfc/0x840 [ 210.361449][T10769] ? rcu_is_watching+0x13/0xc0 [ 210.361460][T10769] ? tomoyo_realpath_from_path+0xb6/0x690 [ 210.361476][T10769] tomoyo_realpath_from_path+0xb6/0x690 [ 210.361491][T10769] tomoyo_mount_acl+0x1b6/0x8b0 [ 210.361500][T10769] ? is_bpf_text_address+0x8a/0x1a0 [ 210.361512][T10769] ? is_bpf_text_address+0x8a/0x1a0 [ 210.361524][T10769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.361539][T10769] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 210.361550][T10769] ? kernel_text_address+0x8d/0x100 [ 210.361562][T10769] ? unwind_get_return_address+0x59/0xa0 [ 210.361580][T10769] ? arch_stack_walk+0xa6/0xf0 [ 210.361600][T10769] ? __lock_acquire+0x5c0/0x1f40 [ 210.361620][T10769] ? tomoyo_mount_permission+0x1f6/0x460 [ 210.361632][T10769] ? tomoyo_domain+0xb2/0x150 [ 210.361645][T10769] ? tomoyo_profile+0x47/0x60 [ 210.361659][T10769] tomoyo_mount_permission+0x214/0x460 [ 210.361669][T10769] ? tomoyo_mount_permission+0x1f6/0x460 [ 210.361681][T10769] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 210.361700][T10769] security_sb_mount+0xdd/0x270 [ 210.361717][T10769] path_mount+0x158/0x2850 [ 210.361732][T10769] ? __pfx_path_mount+0x10/0x10 [ 210.361744][T10769] ? lockdep_hardirqs_on+0x7d/0x110 [ 210.361762][T10769] ? putname+0xb1/0x110 [ 210.361771][T10769] ? kmem_cache_free+0x127/0x6c0 [ 210.361787][T10769] ? __x64_sys_mount+0x293/0x310 [ 210.361798][T10769] __x64_sys_mount+0x293/0x310 [ 210.361811][T10769] ? __pfx___x64_sys_mount+0x10/0x10 [ 210.361827][T10769] do_syscall_64+0x123/0x790 [ 210.361844][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.361856][T10769] RIP: 0033:0x7fda2a79f559 [ 210.361865][T10769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.361876][T10769] RSP: 002b:00007fda2b5aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.361888][T10769] RAX: ffffffffffffffda RBX: 00007fda2aa25fa0 RCX: 00007fda2a79f559 [ 210.361895][T10769] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 210.361902][T10769] RBP: 00007fda2a836b20 R08: 0000000000000000 R09: 0000000000000000 [ 210.361908][T10769] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 210.361915][T10769] R13: 00007fda2aa26038 R14: 00007fda2aa25fa0 R15: 00007ffe1a8eaf88 [ 210.361929][T10769] [ 210.361934][T10769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.950774][ T5802] Bluetooth: hci4: command tx timeout [ 211.429580][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.433114][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.435693][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.437085][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.437323][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.628421][T10773] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.834305][ T9814] rpcbind: server 127.0.0.1 not responding, timed out [ 211.886620][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.886757][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.887064][T10773] bridge_slave_0: entered allmulticast mode [ 211.888271][T10773] bridge_slave_0: entered promiscuous mode [ 211.898385][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.898470][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.898538][T10773] bridge_slave_1: entered allmulticast mode [ 211.899212][T10773] bridge_slave_1: entered promiscuous mode [ 211.929590][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.932346][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.955005][T10773] team0: Port device team_slave_0 added [ 211.957324][T10773] team0: Port device team_slave_1 added [ 211.980046][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.980064][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.980087][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.983434][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.983450][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.983473][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.023360][T10773] hsr_slave_0: entered promiscuous mode [ 212.024161][T10773] hsr_slave_1: entered promiscuous mode [ 212.024798][T10773] debugfs: 'hsr0' already exists in 'hsr' [ 212.024817][T10773] Cannot create hsr debugfs directory [ 212.091278][ T41] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 212.176775][T10773] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 212.178967][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.179367][T10773] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 212.181053][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.181416][T10773] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 212.184067][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.184454][T10773] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 212.186407][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.239984][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.253031][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.257853][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.257901][ T9815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.261876][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.261964][ T9815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.271857][ T41] usb 13-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 212.276914][ T41] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.276939][ T41] usb 13-1: Product: syz [ 212.276953][ T41] usb 13-1: Manufacturer: syz [ 212.296964][T10773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.511334][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.663888][T10773] veth0_vlan: entered promiscuous mode [ 212.668454][T10773] veth1_vlan: entered promiscuous mode [ 212.689813][T10773] veth0_macvtap: entered promiscuous mode [ 212.692523][T10788] netlink: 136 bytes leftover after parsing attributes in process `syz.8.1611'. [ 212.694035][T10773] veth1_macvtap: entered promiscuous mode [ 212.707833][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.708654][T10788] xt_hashlimit: size too large, truncated to 1048576 [ 212.715204][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.740787][ T5900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.741783][ T5900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.742092][ T5900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.742125][ T5900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.762373][ T9816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.762394][ T9816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.778434][ T41] scsi host7: uas [ 212.784641][ T9815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.784659][ T9815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.894416][T10823] x_tables: duplicate underflow at hook 1 [ 212.957801][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.963745][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.964409][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.965731][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.966295][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.971363][ C3] usb 13-1: stat urb: status -71 [ 212.971404][ C3] usb 13-1: cmd cmplt err -71 [ 212.971684][ T1488] usb 13-1: USB disconnect, device number 2 [ 212.985209][ T1488] scsi 7:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 212.985240][ T1488] scsi 7:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 213.030557][ T5795] Bluetooth: hci4: command tx timeout [ 213.147369][T10826] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.370116][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.370206][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.370662][T10826] bridge_slave_0: entered allmulticast mode [ 213.371900][T10826] bridge_slave_0: entered promiscuous mode [ 213.373633][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.373703][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.373761][T10826] bridge_slave_1: entered allmulticast mode [ 213.374555][T10826] bridge_slave_1: entered promiscuous mode [ 213.395844][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.398030][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.412666][T10826] team0: Port device team_slave_0 added [ 213.413995][T10826] team0: Port device team_slave_1 added [ 213.427623][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.427633][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.427647][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.428679][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.428686][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.428700][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.454773][T10826] hsr_slave_0: entered promiscuous mode [ 213.455314][T10826] hsr_slave_1: entered promiscuous mode [ 213.455599][T10826] debugfs: 'hsr0' already exists in 'hsr' [ 213.455610][T10826] Cannot create hsr debugfs directory [ 213.511172][ T5795] Bluetooth: hci5: command tx timeout [ 213.513889][ T5795] Bluetooth: Frame is too long (len 12, expected len 4) [ 213.577670][ T42] audit: type=1400 audit(1793063651.215:928): avc: denied { write } for pid=10847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.632949][ T42] audit: type=1400 audit(1793063651.275:929): avc: denied { write } for pid=10850 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.711211][ T42] audit: type=1400 audit(1793063651.345:930): avc: denied { write } for pid=10852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.775299][ T42] audit: type=1400 audit(1793063651.415:931): avc: denied { write } for pid=10855 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.855460][ T42] audit: type=1400 audit(1793063651.495:932): avc: denied { write } for pid=10858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.903014][T10826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.904565][ T42] audit: type=1400 audit(1793063651.545:933): avc: denied { write } for pid=10861 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.905078][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.905698][T10826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.907438][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.908021][T10826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.922529][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.923479][T10826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.935132][T10826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.954983][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.955075][T10826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.955188][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.955232][T10826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.995964][ T42] audit: type=1400 audit(1793063651.635:934): avc: denied { write } for pid=10869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.998857][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.015241][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.015842][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.021714][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.028986][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.029031][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.037145][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.037215][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.056007][ T42] audit: type=1400 audit(1793063651.695:935): avc: denied { write } for pid=10872 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.097651][T10875] netlink: 'syz.8.1615': attribute type 3 has an invalid length. [ 214.137024][ T42] audit: type=1400 audit(1793063651.775:936): avc: denied { write } for pid=10877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.141665][ T24] hid-generic 0005:000C:0009.0003: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 214.177087][T10882] fido_id[10882]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 214.183775][ T42] audit: type=1400 audit(1793063651.825:937): avc: denied { write } for pid=10883 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.266748][T10891] XFS (sr0): Invalid superblock magic number [ 214.302734][T10891] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 214.405857][T10907] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 214.405873][T10907] block device autoloading is deprecated and will be removed. [ 214.450131][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.489717][T10826] veth0_vlan: entered promiscuous mode [ 214.495621][T10826] veth1_vlan: entered promiscuous mode [ 214.517692][T10826] veth0_macvtap: entered promiscuous mode [ 214.521860][T10826] veth1_macvtap: entered promiscuous mode [ 214.533255][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.538845][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.548151][T10907] block device autoloading is deprecated and will be removed. [ 214.561291][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.561654][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.561696][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.636101][ T9815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.636119][ T9815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.663166][ T9808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.663213][ T9808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.690592][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.984981][T10943] FAULT_INJECTION: forcing a failure. [ 214.984981][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 214.985003][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.1.1623 Not tainted syzkaller #0 PREEMPT(full) [ 214.985016][T10943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.985023][T10943] Call Trace: [ 214.985027][T10943] [ 214.985032][T10943] dump_stack_lvl+0x100/0x190 [ 214.985052][T10943] should_fail_ex.cold+0x5/0xa [ 214.985070][T10943] should_failslab+0xc2/0x120 [ 214.985086][T10943] kmem_cache_alloc_noprof+0x92/0x6a0 [ 214.985100][T10943] ? do_getname+0x35/0x390 [ 214.985114][T10943] do_getname+0x35/0x390 [ 214.985128][T10943] do_sys_openat2+0xc3/0x1d0 [ 214.985140][T10943] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.985152][T10943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.985173][T10943] __x64_sys_openat+0x12d/0x210 [ 214.985183][T10943] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.985193][T10943] ? ksys_write+0x1ac/0x250 [ 214.985211][T10943] do_syscall_64+0x123/0x790 [ 214.985228][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.985240][T10943] RIP: 0033:0x7f9ec699f559 [ 214.985249][T10943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.985260][T10943] RSP: 002b:00007f9ec7781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.985273][T10943] RAX: ffffffffffffffda RBX: 00007f9ec6c25fa0 RCX: 00007f9ec699f559 [ 214.985287][T10943] RDX: 0000000000102080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 214.985295][T10943] RBP: 00007f9ec6a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 214.985302][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.985309][T10943] R13: 00007f9ec6c26038 R14: 00007f9ec6c25fa0 R15: 00007fff2e2505d8 [ 214.985323][T10943] [ 215.035813][ T5795] Bluetooth: hci6: command tx timeout [ 215.110977][ T5795] Bluetooth: hci4: command tx timeout [ 215.590906][ T5795] Bluetooth: hci5: command tx timeout [ 215.671004][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 215.785870][ T5948] hid-generic 0005:000C:0009.0004: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 215.829913][T10954] fido_id[10954]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 215.977849][T10960] batman_adv: batadv0: Adding interface: syz_tun [ 215.977860][T10960] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.977877][T10960] batman_adv: batadv0: Interface activated: syz_tun [ 216.026694][T10962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=10962 comm=syz.1.1631 [ 216.938271][ T24] hid-generic 0005:000C:0009.0005: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 216.971750][T10984] fido_id[10984]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci6/hci6:200/report_descriptor': No such file or directory [ 217.110466][ T5795] Bluetooth: hci6: command tx timeout [ 217.164392][T10996] x_tables: duplicate underflow at hook 1 [ 217.200622][ T5795] Bluetooth: hci4: command tx timeout [ 217.680843][ T5795] Bluetooth: hci5: command tx timeout [ 218.390625][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 218.391884][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 219.200546][ T5796] Bluetooth: hci6: command tx timeout [ 219.750658][ T5796] Bluetooth: hci5: command tx timeout [ 221.270483][ T5796] Bluetooth: hci6: command tx timeout [ 221.488169][ T5867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.584763][ T5867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.666709][ T5867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.796724][ T5867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.939990][ T5867] bridge_slave_1: left allmulticast mode [ 221.940013][ T5867] bridge_slave_1: left promiscuous mode [ 221.940191][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.947358][ T5867] bridge_slave_0: left allmulticast mode [ 221.947375][ T5867] bridge_slave_0: left promiscuous mode [ 221.947489][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.058931][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.063553][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.064591][ T5867] bond0 (unregistering): Released all slaves [ 222.067348][ T5867] bond1 (unregistering): Released all slaves [ 222.130178][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 222.130190][ T42] audit: type=1400 audit(1793063659.775:947): avc: denied { write } for pid=11009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.148835][ T5867] tipc: Left network mode [ 222.190075][ T42] audit: type=1400 audit(1793063659.825:948): avc: denied { write } for pid=11012 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.234853][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 222.333871][ T42] audit: type=1400 audit(1793063659.975:949): avc: denied { write } for pid=11016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.375275][ T42] audit: type=1400 audit(1793063660.015:950): avc: denied { write } for pid=11019 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.397244][ T5867] hsr_slave_0: left promiscuous mode [ 222.397619][ T5867] hsr_slave_1: left promiscuous mode [ 222.397980][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.397992][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.398475][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.398485][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.420209][ T5867] veth1_macvtap: left promiscuous mode [ 222.420232][ T5867] veth0_macvtap: left promiscuous mode [ 222.420278][ T5867] veth1_vlan: left promiscuous mode [ 222.420294][ T5867] veth0_vlan: left promiscuous mode [ 222.536850][ T5867] team0 (unregistering): Port device team_slave_1 removed [ 222.544274][ T5867] team0 (unregistering): Port device team_slave_0 removed [ 222.643649][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 222.700014][ T42] audit: type=1400 audit(1793063660.335:951): avc: denied { write } for pid=11022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.759798][ T42] audit: type=1400 audit(1793063660.395:952): avc: denied { write } for pid=11025 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.806873][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 222.894513][ T42] audit: type=1400 audit(1793063660.535:953): avc: denied { write } for pid=11028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.937436][ T42] audit: type=1400 audit(1793063660.575:954): avc: denied { write } for pid=11031 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.978469][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 225.465397][ T5143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.466122][ T5143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.466722][ T5143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.467242][ T5143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.467613][ T5143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.646433][T11041] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.897579][T11041] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.897718][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.897813][T11041] bridge_slave_0: entered allmulticast mode [ 225.901032][T11041] bridge_slave_0: entered promiscuous mode [ 225.914392][T11041] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.914438][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.914499][T11041] bridge_slave_1: entered allmulticast mode [ 225.915222][T11041] bridge_slave_1: entered promiscuous mode [ 225.929441][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.937765][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.953792][T11041] team0: Port device team_slave_0 added [ 225.955397][T11041] team0: Port device team_slave_1 added [ 225.974175][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.974190][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.974208][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.987726][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.987737][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.987756][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.009671][T11041] hsr_slave_0: entered promiscuous mode [ 226.010226][T11041] hsr_slave_1: entered promiscuous mode [ 226.010769][T11041] debugfs: 'hsr0' already exists in 'hsr' [ 226.010782][T11041] Cannot create hsr debugfs directory [ 226.123794][ T42] audit: type=1400 audit(1793063663.765:955): avc: denied { write } for pid=11058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.171995][ T42] audit: type=1400 audit(1793063663.815:956): avc: denied { write } for pid=11061 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.490200][T11041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.496348][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.497124][T11041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.499907][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.500739][T11041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.513390][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.514558][T11041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.519150][T11041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.537936][T11041] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.538029][T11041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.538278][T11041] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.538370][T11041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.579236][T11041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.589876][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.590264][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.601564][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.605772][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.605843][ T9832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.610508][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.610698][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.848705][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.872700][T11041] veth0_vlan: entered promiscuous mode [ 226.878566][T11041] veth1_vlan: entered promiscuous mode [ 226.897512][T11041] veth0_macvtap: entered promiscuous mode [ 226.900015][T11041] veth1_macvtap: entered promiscuous mode [ 226.915520][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.920980][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.963472][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.990624][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.990655][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.990673][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.008409][ T9816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.008430][ T9816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.034876][ T9832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.034904][ T9832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.132571][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 227.132589][ T42] audit: type=1400 audit(1793063664.775:969): avc: denied { write } for pid=11111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.148114][T11114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.150041][T11114] block device autoloading is deprecated and will be removed. [ 227.193302][ T42] audit: type=1400 audit(1793063664.825:970): avc: denied { write } for pid=11116 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.260081][ T42] audit: type=1400 audit(1793063664.895:971): avc: denied { write } for pid=11118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.312739][ T42] audit: type=1400 audit(1793063664.955:972): avc: denied { write } for pid=11124 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.510537][ T5796] Bluetooth: hci7: command tx timeout [ 228.137187][ T42] audit: type=1400 audit(1793063665.775:973): avc: denied { bind } for pid=11127 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.137233][ T42] audit: type=1400 audit(1793063665.775:974): avc: denied { node_bind } for pid=11127 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 228.198475][ T5143] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 228.205366][ T5143] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 228.208174][ T5143] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 228.209586][ T5143] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 228.210023][ T5143] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 228.406920][T11129] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.645341][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.645469][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.645573][T11129] bridge_slave_0: entered allmulticast mode [ 228.646849][T11129] bridge_slave_0: entered promiscuous mode [ 228.651618][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.651697][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.651788][T11129] bridge_slave_1: entered allmulticast mode [ 228.652862][T11129] bridge_slave_1: entered promiscuous mode [ 228.673049][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.674596][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.686924][T11129] team0: Port device team_slave_0 added [ 228.688121][T11129] team0: Port device team_slave_1 added [ 228.702611][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.702623][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.702637][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.703437][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.703445][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.703457][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.727640][T11129] hsr_slave_0: entered promiscuous mode [ 228.728071][T11129] hsr_slave_1: entered promiscuous mode [ 228.728366][T11129] debugfs: 'hsr0' already exists in 'hsr' [ 228.728378][T11129] Cannot create hsr debugfs directory [ 228.823630][ T42] audit: type=1400 audit(1793063666.465:975): avc: denied { write } for pid=11147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.873301][ T42] audit: type=1400 audit(1793063666.515:976): avc: denied { write } for pid=11150 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.962693][ T42] audit: type=1400 audit(1793063666.605:977): avc: denied { write } for pid=11152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.015705][ T42] audit: type=1400 audit(1793063666.645:978): avc: denied { write } for pid=11155 comm="rm" name="hook-state" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.199756][T11129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.203258][T11129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.203782][T11129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.207622][T11129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.208056][T11129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.209893][T11129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.211929][T11129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.213973][T11129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.252498][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.259209][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.263232][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.263277][ T9814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.266429][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.266566][ T9814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.506348][T11129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.590576][ T5796] Bluetooth: hci7: command tx timeout [ 229.658048][T11129] veth0_vlan: entered promiscuous mode [ 229.662063][T11129] veth1_vlan: entered promiscuous mode [ 229.677349][T11129] veth0_macvtap: entered promiscuous mode [ 229.679447][T11129] veth1_macvtap: entered promiscuous mode [ 229.687378][T11129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.690933][T11129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.745948][ T9808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.745961][ T9808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.769470][ T9814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.769485][ T9814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.782689][ T5900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.782714][ T5900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.782732][ T5900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.782750][ T5900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.846916][T11218] device-mapper: table: 248:0: linear: Device lookup failed (-ENOENT) [ 229.846931][T11218] device-mapper: ioctl: error adding target to table [ 229.847246][T11218] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(15) [ 229.980266][ T5143] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.995578][ T5143] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.996765][ T5143] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.998880][ T5143] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 229.999261][ T5143] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 230.156288][T11247] batman_adv: batadv0: Adding interface: syz_tun [ 230.156300][T11247] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.156316][T11247] batman_adv: batadv0: Interface activated: syz_tun [ 230.234532][T11228] rxe_eth0 speed is unknown, defaulting to 1000 [ 230.310540][ T5796] Bluetooth: hci8: command tx timeout [ 230.448827][T11228] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.448873][T11228] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.448934][T11228] bridge_slave_0: entered allmulticast mode [ 230.449835][T11228] bridge_slave_0: entered promiscuous mode [ 230.454877][T11228] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.454950][T11228] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.455016][T11228] bridge_slave_1: entered allmulticast mode [ 230.455709][T11228] bridge_slave_1: entered promiscuous mode [ 230.474394][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.477118][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.494692][T11228] team0: Port device team_slave_0 added [ 230.495925][T11228] team0: Port device team_slave_1 added [ 230.508046][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.508057][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.508070][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.508986][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.508993][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.509007][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.529105][T11228] hsr_slave_0: entered promiscuous mode [ 230.529611][T11228] hsr_slave_1: entered promiscuous mode [ 230.529917][T11228] debugfs: 'hsr0' already exists in 'hsr' [ 230.529929][T11228] Cannot create hsr debugfs directory [ 230.623688][T11228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.691317][T11228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.744162][T11228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.807066][T11228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.921262][T11228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.924062][T11228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.924485][T11228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.926405][T11228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.926982][T11228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.929636][T11228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.930233][T11228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.935058][T11228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.979519][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.987076][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.990235][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.990380][ T9816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.995065][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.995117][ T9816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.277127][T11228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.437275][T11228] veth0_vlan: entered promiscuous mode [ 231.444415][T11228] veth1_vlan: entered promiscuous mode [ 231.460864][T11228] veth0_macvtap: entered promiscuous mode [ 231.463600][T11228] veth1_macvtap: entered promiscuous mode [ 231.470776][T11228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.475224][T11228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.491657][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.491951][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.492217][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.492249][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.545112][ T9815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.545128][ T9815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.569034][ T9815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.569048][ T9815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.654402][T11301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1648'. [ 231.672050][ T5143] Bluetooth: hci7: command tx timeout [ 232.145301][T11303] trusted_key: encrypted_key: insufficient parameters specified [ 232.226106][T11309] tmpfs: Unknown parameter 'uid½|f*Şk[' [ 232.258856][T11311] netlink: 'syz.5.1659': attribute type 3 has an invalid length. [ 232.360643][T11318] batman_adv: batadv0: Adding interface: syz_tun [ 232.360667][T11318] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.360695][T11318] batman_adv: batadv0: Interface activated: syz_tun [ 232.391163][ T5796] Bluetooth: hci8: command tx timeout [ 232.422829][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.423601][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.424359][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.425508][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.430622][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.471073][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1666'. [ 232.511196][T11328] trusted_key: encrypted_key: insufficient parameters specified [ 232.548203][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 232.548215][ T42] audit: type=1807 audit(1793063670.185:1003): action=measure func=FILE_CHECK res=1 [ 232.548491][T11343] ima: policy update completed [ 232.548558][ T42] audit: type=1802 audit(1793063670.185:1004): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.1667" res=1 errno=0 [ 232.627089][T11322] rxe_eth0 speed is unknown, defaulting to 1000 [ 232.635584][T11352] FAULT_INJECTION: forcing a failure. [ 232.635584][T11352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.635607][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.4.1671 Not tainted syzkaller #0 PREEMPT(full) [ 232.635620][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.635626][T11352] Call Trace: [ 232.635631][T11352] [ 232.635636][T11352] dump_stack_lvl+0x100/0x190 [ 232.635657][T11352] should_fail_ex.cold+0x5/0xa [ 232.635672][T11352] ? prepare_alloc_pages+0x16d/0x5b0 [ 232.635688][T11352] should_fail_alloc_page+0xeb/0x140 [ 232.635705][T11352] prepare_alloc_pages+0x1f0/0x5b0 [ 232.635725][T11352] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 232.635739][T11352] ? __pfx_stack_trace_save+0x10/0x10 [ 232.635754][T11352] ? stack_depot_save_flags+0x27/0x9f0 [ 232.635776][T11352] ? lock_acquire+0x1d1/0x380 [ 232.635790][T11352] ? __update_page_owner_handle+0x63/0x530 [ 232.635810][T11352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.635827][T11352] ? __lock_acquire+0x5c0/0x1f40 [ 232.635846][T11352] ? lock_acquire+0x1d1/0x380 [ 232.635859][T11352] ? page_table_check_set+0x1aa/0x630 [ 232.635876][T11352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.635893][T11352] ? policy_nodemask+0xed/0x4f0 [ 232.635910][T11352] alloc_pages_mpol+0x201/0x560 [ 232.635927][T11352] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.635944][T11352] ? __page_table_check_ptes_set+0x1d5/0x530 [ 232.635963][T11352] folio_alloc_mpol_noprof+0x36/0x260 [ 232.635991][T11352] vma_alloc_folio_noprof+0xed/0x1d0 [ 232.636002][T11352] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 232.636013][T11352] ? rcu_read_unlock+0x2d/0xb0 [ 232.636034][T11352] do_anonymous_page+0xac9/0x2050 [ 232.636055][T11352] ? __pfx_do_anonymous_page+0x10/0x10 [ 232.636070][T11352] ? rcu_read_unlock+0x2d/0xb0 [ 232.636086][T11352] ? rcu_read_unlock+0x2d/0xb0 [ 232.636106][T11352] __handle_mm_fault+0x1ff3/0x2f60 [ 232.636125][T11352] ? __pfx___handle_mm_fault+0x10/0x10 [ 232.636141][T11352] ? __pfx_mt_find+0x10/0x10 [ 232.636160][T11352] ? find_vma+0xbf/0x140 [ 232.636172][T11352] ? __pfx_find_vma+0x10/0x10 [ 232.636186][T11352] handle_mm_fault+0x363/0xa20 [ 232.636206][T11352] do_user_addr_fault+0x745/0x12f0 [ 232.636230][T11352] exc_page_fault+0x6f/0xd0 [ 232.636247][T11352] asm_exc_page_fault+0x26/0x30 [ 232.636258][T11352] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 232.636271][T11352] Code: 89 ee 48 89 ef e8 31 d8 d6 fc 4d 85 ff 75 26 e8 47 de d6 fc 89 de 4c 89 e7 e8 9d f9 4f fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 21 de d6 fc 48 89 d8 5b 5d 41 [ 232.636282][T11352] RSP: 0018:ffffc900035b7ab0 EFLAGS: 00050246 [ 232.636292][T11352] RAX: 0000000000000001 RBX: 0000000000020000 RCX: 000000000000f440 [ 232.636299][T11352] RDX: 0000000000000001 RSI: ffff888040bd0bc0 RDI: 0000200000011000 [ 232.636306][T11352] RBP: 0000200000000440 R08: 0000000000000000 R09: ffffed100817bfff [ 232.636313][T11352] R10: ffff888040bdffff R11: 0000000000000000 R12: ffff888040bc0000 [ 232.636320][T11352] R13: 0000200000020440 R14: 00007ffffffff000 R15: 0000000000000000 [ 232.636335][T11352] mtdchar_read+0x3cc/0x5b0 [ 232.636349][T11352] ? __pfx_mtdchar_read+0x10/0x10 [ 232.636363][T11352] ? avc_policy_seqno+0x9/0x20 [ 232.636376][T11352] ? selinux_file_permission+0x30/0x6a0 [ 232.636403][T11352] ? bpf_lsm_file_permission+0x9/0x10 [ 232.636423][T11352] ? security_file_permission+0x76/0x210 [ 232.636473][T11352] ? rw_verify_area+0xce/0x6d0 [ 232.636498][T11352] ? __pfx_mtdchar_read+0x10/0x10 [ 232.636516][T11352] vfs_readv+0x5d8/0x8d0 [ 232.636542][T11352] ? __pfx_vfs_readv+0x10/0x10 [ 232.636569][T11352] ? lock_acquire+0x1d1/0x380 [ 232.636584][T11352] ? __fget_files+0x34/0x3d0 [ 232.636606][T11352] ? __fget_files+0x21f/0x3d0 [ 232.636626][T11352] ? do_readv+0x13e/0x340 [ 232.636637][T11352] do_readv+0x13e/0x340 [ 232.636650][T11352] ? __pfx_do_readv+0x10/0x10 [ 232.636666][T11352] do_syscall_64+0x123/0x790 [ 232.636684][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.636695][T11352] RIP: 0033:0x7fd1b7f9f559 [ 232.636705][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.636716][T11352] RSP: 002b:00007fd1b8dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 232.636728][T11352] RAX: ffffffffffffffda RBX: 00007fd1b8225fa0 RCX: 00007fd1b7f9f559 [ 232.636735][T11352] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 232.636742][T11352] RBP: 00007fd1b8dac090 R08: 0000000000000000 R09: 0000000000000000 [ 232.636749][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.636756][T11352] R13: 00007fd1b8226038 R14: 00007fd1b8225fa0 R15: 00007ffc5600a708 [ 232.636770][T11352] [ 232.721813][ T5908] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 232.881530][ T5908] usb 10-1: not running at top speed; connect to a high speed hub [ 232.881566][ T5908] usb 10-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 232.882533][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 232.882562][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 232.882581][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 232.882600][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 232.882620][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 232.882639][ T5908] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 232.885906][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.885926][ T5908] usb 10-1: Product: syz [ 232.885937][ T5908] usb 10-1: Manufacturer: syz [ 232.885949][ T5908] usb 10-1: SerialNumber: syz [ 232.889316][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.889380][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.889428][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.889472][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.889519][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.891057][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.891176][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.891237][T11322] bridge_slave_0: entered allmulticast mode [ 232.892023][T11322] bridge_slave_0: entered promiscuous mode [ 232.893751][ T5908] usb 10-1: USB2VGA dongle found at address 3 [ 232.895396][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.895459][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.895543][T11322] bridge_slave_1: entered allmulticast mode [ 232.896241][T11322] bridge_slave_1: entered promiscuous mode [ 232.897762][ T42] audit: type=1800 audit(1793063670.535:1005): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274694 res=0 errno=-22 [ 232.898393][ T5908] usb 10-1: Allocated 8 output buffers [ 232.898408][ T5908] usb 10-1: Not attached to USB 2.0 hub, deferring init [ 232.906818][ T42] audit: type=1800 audit(1793063670.545:1006): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274726 res=0 errno=-22 [ 232.908113][ T42] audit: type=1800 audit(1793063670.545:1007): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274701 res=0 errno=-22 [ 232.913722][ T42] audit: type=1800 audit(1793063670.555:1008): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=274702 res=0 errno=-22 [ 232.913765][ T42] audit: type=1800 audit(1793063670.555:1009): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=274723 res=0 errno=-22 [ 232.914467][ T42] audit: type=1800 audit(1793063670.555:1010): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=274724 res=0 errno=-22 [ 232.914501][ T42] audit: type=1800 audit(1793063670.555:1011): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=274703 res=0 errno=-22 [ 232.915164][ T42] audit: type=1800 audit(1793063670.555:1012): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=274725 res=0 errno=-22 [ 232.917284][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.923198][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.948839][T11322] team0: Port device team_slave_0 added [ 232.953083][T11322] team0: Port device team_slave_1 added [ 232.972472][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.972483][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.972496][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.974874][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.974886][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.974906][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.005065][T11322] hsr_slave_0: entered promiscuous mode [ 233.005639][T11322] hsr_slave_1: entered promiscuous mode [ 233.005936][T11322] debugfs: 'hsr0' already exists in 'hsr' [ 233.005949][T11322] Cannot create hsr debugfs directory [ 233.091503][ T24] usb 10-1: USB disconnect, device number 3 [ 233.151616][T11322] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.233583][T11322] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.277719][T11365] Console: switching to colour dummy device 80x25 [ 233.533892][T11322] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.670762][ T5796] Bluetooth: hci9: command tx timeout [ 233.744028][T11366] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 233.751661][ T5796] Bluetooth: hci7: command tx timeout [ 233.752414][T11366] pci 0000:00:01.0: BAR 0 [mem 0x2f000000-0x2f7fffff pref] [ 233.757900][T11366] pci 0000:00:01.0: BAR 2 [mem 0x303030302f734000-0x303030302f737fff 64bit pref] [ 233.758253][T11366] pci 0000:00:01.0: BAR 4 [mem 0x3a303000-0x3a303fff] [ 233.758388][T11366] pci 0000:00:01.0: ROM [mem 0xbc8a0000-0xbc8affff pref] [ 233.768956][T11366] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 233.818372][T11373] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 233.945803][ T5900] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.948035][T11366] pci 0000:00:01.0: Adding to iommu group 1 [ 233.974147][T11366] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 233.974162][T11366] pci 0000:00:01.0: vgaarb: bridge control possible [ 233.974169][T11366] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 234.014236][T11366] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 234.018874][T11366] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 234.018932][T11366] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 234.019108][T11366] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 234.043060][T11366] pci 0000:00:05.0: Adding to iommu group 5 [ 234.045848][T10754] bridge0: port 3(syz_tun) entered disabled state [ 234.056170][T10754] syz_tun (unregistering): left allmulticast mode [ 234.056184][T10754] syz_tun (unregistering): left promiscuous mode [ 234.056230][T10754] bridge0: port 3(syz_tun) entered disabled state [ 234.067630][T11002] batman_adv: batadv0: Interface deactivated: syz_tun [ 234.081522][T11366] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 234.082552][T11366] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 234.113198][T11366] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 234.120247][T11002] batman_adv: batadv0: Removing interface: syz_tun [ 234.123517][T11366] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 234.125204][T11366] pci 0000:00:05.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned [ 234.126897][T11366] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 234.163836][T11322] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.280787][T11366] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 234.280881][T11366] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 234.282662][T11366] [drm] featu ** replaying previous printk message ** [ 234.282662][T11366] [drm] features: -virgl +edid -resource_blob -host_visible [ 234.282674][T11366] [drm] features: -context_init -blob_alignment [ 234.297173][T11366] ------------[ cut here ]------------ [ 234.297192][T11366] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 234.297201][T11366] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xab/0x440, CPU#2: syz.4.1674/11366 [ 234.310199][T11366] Modules linked in: [ 234.312005][T11366] CPU: 2 UID: 0 PID: 11366 Comm: syz.4.1674 Not tainted syzkaller #0 PREEMPT(full) [ 234.316120][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.319204][T11366] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 234.321148][T11366] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4c 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 20 09 81 09 85 c0 75 e0 48 8d 3d 65 b4 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 a0 0a 81 09 48 85 c0 0f [ 234.326668][T11366] RSP: 0018:ffffc9000373ef18 EFLAGS: 00010246 [ 234.328708][T11366] RAX: 0000000000000000 RBX: ffff888100096500 RCX: fffff520006e7dbe [ 234.332654][T11366] RDX: 0000000000000000 RSI: ffffffff8cb2a920 RDI: ffffffff926e1a10 [ 234.335857][T11366] RBP: ffffffff8cb2a920 R08: 0000000000000000 R09: fffffbfff24d30eb [ 234.339050][T11366] R10: ffffc9000373ef18 R11: 0000000000000001 R12: 0000000000000000 [ 234.342426][T11366] R13: ffffc9000373ef88 R14: 00000000000000d8 R15: ffff8880499b5cce [ 234.345664][T11366] FS: 00007fd1b8d8b6c0(0000) GS:ffff8880d469c000(0000) knlGS:0000000000000000 [ 234.349186][T11366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.351811][T11366] CR2: 00007fa831decc40 CR3: 00000000415c2000 CR4: 0000000000352ef0 [ 234.355080][T11366] Call Trace: [ 234.356486][T11366] [ 234.357716][T11366] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 234.359897][T11366] ? __pfx__printk+0x10/0x10 [ 234.362651][T11366] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 234.365170][T11366] ? lockdep_init_map_type+0x5c/0x250 [ 234.367177][T11366] virtio_gpu_init.cold+0x40d/0x127f [ 234.369051][T11366] ? lock_acquire+0x5e/0x380 SYZFAIL: failed to recv rpc [ 234.370604][T11366] ? __pfx_virtio_gpu_init+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.372798][T11366] ? is_console_locked+0x9/0x20 [ 234.374717][T11366] ? con_is_bound+0x141/0x190 [ 234.376218][T11366] ? vga_remove_vgacon+0x21/0x30 [ 234.377793][T11366] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 234.380796][T11366] virtio_gpu_probe+0x21c/0x360 [ 234.382775][T11366] virtio_dev_probe+0x72a/0xd30 [ 234.384788][T11366] ? __pfx_virtio_dev_probe+0x10/0x10 [ 234.386474][T11366] ? kernfs_put+0x3f/0x60 [ 234.387824][T11366] ? sysfs_do_create_link_sd+0xbb/0x140 [ 234.389557][T11366] ? sysfs_create_link+0x68/0xc0 [ 234.391871][T11366] ? __pfx_virtio_dev_probe+0x10/0x10 [ 234.393558][T11366] really_probe+0x241/0xa60 [ 234.395096][T11366] __driver_probe_device+0x210/0x460 [ 234.396780][T11366] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.398627][T11366] driver_probe_device+0x4a/0x140 [ 234.400200][T11366] __device_attach_driver+0x1df/0x320 [ 234.403067][T11366] ? __pfx___device_attach_driver+0x10/0x10 [ 234.404923][T11366] bus_for_each_drv+0x159/0x1e0 [ 234.406463][T11366] ? __pfx_bus_for_each_drv+0x10/0x10 [ 234.408713][T11366] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 234.410859][T11366] __device_attach+0x1e4/0x4c0 [ 234.412386][T11366] ? __pfx___device_attach+0x10/0x10 [ 234.414061][T11366] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.415722][T11366] device_initial_probe+0xaf/0xf0 [ 234.417334][T11366] __bus_probe_device+0x60/0x160 [ 234.418912][T11366] device_add+0x121d/0x1970 [ 234.420800][T11366] ? __pfx_device_add+0x10/0x10 [ 234.422341][T11366] ? __pfx___might_resched+0x10/0x10 [ 234.423986][T11366] ? iowrite8+0x2e/0xb0 [ 234.425304][T11366] ? vp_synchronize_vectors+0x121/0x1f0 [ 234.427024][T11366] ? __pfx_vp_set_status+0x10/0x10 [ 234.428641][T11366] register_virtio_device+0x661/0x7c0 [ 234.430387][T11366] ? __pfx_register_virtio_device+0x10/0x10 [ 234.432243][T11366] ? __pfx_pcibios_set_master+0x10/0x10 [ 234.433972][T11366] ? __raw_spin_lock_init+0x3a/0x110 [ 234.435641][T11366] ? __pfx_virtio_pci_probe+0x10/0x10 [ 234.437329][T11366] virtio_pci_probe+0x255/0x410 [ 234.438862][T11366] local_pci_probe+0xdd/0x1b0 [ 234.440384][T11366] pci_call_probe+0x176/0x800 [ 234.441861][T11366] ? pci_match_device+0x147/0x7d0 [ 234.443416][T11366] ? __pfx_pci_call_probe+0x10/0x10 [ 234.445048][T11366] ? __pfx_pci_match_device+0x10/0x10 [ 234.446688][T11366] ? pci_find_host_bridge+0x3c/0x80 [ 234.448322][T11366] pci_device_probe+0x25b/0x400 [ 234.449835][T11366] ? __pfx_pci_device_probe+0x10/0x10 [ 234.452155][T11366] ? sysfs_create_link+0x68/0xc0 [ 234.453715][T11366] ? __pfx_pci_device_probe+0x10/0x10 [ 234.455535][T11366] really_probe+0x241/0xa60 [ 234.457011][T11366] __driver_probe_device+0x210/0x460 [ 234.459360][T11366] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.461285][T11366] driver_probe_device+0x4a/0x140 [ 234.462869][T11366] __device_attach_driver+0x1df/0x320 [ 234.464564][T11366] ? __pfx___device_attach_driver+0x10/0x10 [ 234.466422][T11366] bus_for_each_drv+0x159/0x1e0 [ 234.467956][T11366] ? __pfx_bus_for_each_drv+0x10/0x10 [ 234.469666][T11366] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.470685][ T5796] Bluetooth: hci4: command tx timeout [ 234.473106][T11366] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.474929][T11366] __device_attach+0x1e4/0x4c0 [ 234.476451][T11366] ? __pfx___device_attach+0x10/0x10 [ 234.478099][T11366] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.479736][T11366] device_initial_probe+0xaf/0xf0 [ 234.480631][ T5796] Bluetooth: hci8: command tx timeout [ 234.483417][T11366] pci_bus_add_device+0xc5/0x100 [ 234.484988][T11366] pci_bus_add_devices+0x9a/0x1f0 [ 234.486568][T11366] pci_rescan_bus+0x2a/0x40 [ 234.488000][T11366] rescan_store+0xfb/0x130 [ 234.489413][T11366] ? __pfx_rescan_store+0x10/0x10 [ 234.491076][T11366] ? sysfs_file_kobj+0xe4/0x290 [ 234.492616][T11366] ? __pfx_rescan_store+0x10/0x10 [ 234.494195][T11366] bus_attr_store+0x74/0xb0 [ 234.495658][T11366] ? __pfx_bus_attr_store+0x10/0x10 [ 234.497308][T11366] sysfs_kf_write+0xf2/0x150 [ 234.498781][T11366] kernfs_fop_write_iter+0x3e0/0x5f0 [ 234.500480][T11366] ? __pfx_sysfs_kf_write+0x10/0x10 [ 234.502112][T11366] vfs_write+0x6af/0x1050 [ 234.503473][T11366] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.505321][T11366] ? __pfx_vfs_write+0x10/0x10 [ 234.506822][T11366] ? find_held_lock+0x2b/0x80 [ 234.508324][T11366] ksys_write+0x12a/0x250 [ 234.510302][T11366] ? __pfx_ksys_write+0x10/0x10 [ 234.512166][T11366] do_syscall_64+0x123/0x790 [ 234.513634][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.515499][T11366] RIP: 0033:0x7fd1b7f9f559 [ 234.516919][T11366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.522953][T11366] RSP: 002b:00007fd1b8d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.525439][T11366] RAX: ffffffffffffffda RBX: 00007fd1b8226090 RCX: 00007fd1b7f9f559 [ 234.527766][T11366] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 000000000000000a [ 234.530141][T11366] RBP: 00007fd1b8036b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.532572][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.534936][T11366] R13: 00007fd1b8226128 R14: 00007fd1b8226090 R15: 00007ffc5600a708 [ 234.537349][T11366] [ 234.538300][T11366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.540564][T11366] CPU: 2 UID: 0 PID: 11366 Comm: syz.4.1674 Not tainted syzkaller #0 PREEMPT(full) [ 234.543418][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.546486][T11366] Call Trace: [ 234.547492][T11366] [ 234.548395][T11366] dump_stack_lvl+0x100/0x190 [ 234.549897][T11366] vpanic+0x553/0x970 [ 234.551152][T11366] ? __pfx_vpanic+0x10/0x10 [ 234.552589][T11366] panic+0xd1/0xe0 [ 234.553775][T11366] ? __pfx_panic+0x10/0x10 [ 234.555183][T11366] check_panic_on_warn.cold+0x19/0x34 [ 234.556872][T11366] ? __kmem_cache_create_args+0xab/0x440 [ 234.558623][T11366] __warn.cold+0x191/0x318 [ 234.560025][T11366] __report_bug+0x30f/0x440 [ 234.561460][T11366] ? __kmem_cache_create_args+0xab/0x440 [ 234.563206][T11366] ? __pfx___report_bug+0x10/0x10 [ 234.564794][T11366] ? __mutex_lock+0x267/0x1c10 [ 234.566228][T11366] ? __kmem_cache_create_args+0x44/0x440 [ 234.567901][T11366] report_bug_entry+0xe2/0x290 [ 234.569370][T11366] ? __kmem_cache_create_args+0xae/0x440 [ 234.571078][T11366] handle_bug+0x1cd/0x2a0 [ 234.572452][T11366] exc_invalid_op+0x17/0x50 [ 234.573878][T11366] asm_exc_invalid_op+0x1a/0x20 [ 234.575416][T11366] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 234.577386][T11366] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4c 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 20 09 81 09 85 c0 75 e0 48 8d 3d 65 b4 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 a0 0a 81 09 48 85 c0 0f [ 234.583261][T11366] RSP: 0018:ffffc9000373ef18 EFLAGS: 00010246 [ 234.585086][T11366] RAX: 0000000000000000 RBX: ffff888100096500 RCX: fffff520006e7dbe [ 234.587516][T11366] RDX: 0000000000000000 RSI: ffffffff8cb2a920 RDI: ffffffff926e1a10 [ 234.589958][T11366] RBP: ffffffff8cb2a920 R08: 0000000000000000 R09: fffffbfff24d30eb [ 234.592400][T11366] R10: ffffc9000373ef18 R11: 0000000000000001 R12: 0000000000000000 [ 234.594866][T11366] R13: ffffc9000373ef88 R14: 00000000000000d8 R15: ffff8880499b5cce [ 234.597331][T11366] ? __kmem_cache_create_args+0xa0/0x440 [ 234.599079][T11366] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 234.600735][T11366] ? __pfx__printk+0x10/0x10 [ 234.602185][T11366] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 234.604027][T11366] ? lockdep_init_map_type+0x5c/0x250 [ 234.605745][T11366] virtio_gpu_init.cold+0x40d/0x127f [ 234.607407][T11366] ? lock_acquire+0x5e/0x380 [ 234.608875][T11366] ? __pfx_virtio_gpu_init+0x10/0x10 [ 234.610553][T11366] ? is_console_locked+0x9/0x20 [ 234.612343][T11366] ? con_is_bound+0x141/0x190 [ 234.613994][T11366] ? vga_remove_vgacon+0x21/0x30 [ 234.615724][T11366] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 234.618159][T11366] virtio_gpu_probe+0x21c/0x360 [ 234.619941][T11366] virtio_dev_probe+0x72a/0xd30 [ 234.621711][T11366] ? __pfx_virtio_dev_probe+0x10/0x10 [ 234.623594][T11366] ? kernfs_put+0x3f/0x60 [ 234.625176][T11366] ? sysfs_do_create_link_sd+0xbb/0x140 [ 234.627135][T11366] ? sysfs_create_link+0x68/0xc0 [ 234.628860][T11366] ? __pfx_virtio_dev_probe+0x10/0x10 [ 234.630741][T11366] really_probe+0x241/0xa60 [ 234.632411][T11366] __driver_probe_device+0x210/0x460 [ 234.634347][T11366] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.636552][T11366] driver_probe_device+0x4a/0x140 [ 234.638328][T11366] __device_attach_driver+0x1df/0x320 [ 234.639994][T11366] ? __pfx___device_attach_driver+0x10/0x10 [ 234.642011][T11366] bus_for_each_drv+0x159/0x1e0 [ 234.643795][T11366] ? __pfx_bus_for_each_drv+0x10/0x10 [ 234.645807][T11366] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 234.647851][T11366] __device_attach+0x1e4/0x4c0 [ 234.649321][T11366] ? __pfx___device_attach+0x10/0x10 [ 234.651090][T11366] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.653008][T11366] device_initial_probe+0xaf/0xf0 [ 234.654778][T11366] __bus_probe_device+0x60/0x160 [ 234.656506][T11366] device_add+0x121d/0x1970 [ 234.658120][T11366] ? __pfx_device_add+0x10/0x10 [ 234.659725][T11366] ? __pfx___might_resched+0x10/0x10 [ 234.661602][T11366] ? iowrite8+0x2e/0xb0 [ 234.663070][T11366] ? vp_synchronize_vectors+0x121/0x1f0 [ 234.664925][T11366] ? __pfx_vp_set_status+0x10/0x10 [ 234.666494][T11366] register_virtio_device+0x661/0x7c0 [ 234.668373][T11366] ? __pfx_register_virtio_device+0x10/0x10 [ 234.670531][T11366] ? __pfx_pcibios_set_master+0x10/0x10 [ 234.672474][T11366] ? __raw_spin_lock_init+0x3a/0x110 [ 234.674341][T11366] ? __pfx_virtio_pci_probe+0x10/0x10 [ 234.676256][T11366] virtio_pci_probe+0x255/0x410 [ 234.678057][T11366] local_pci_probe+0xdd/0x1b0 [ 234.679756][T11366] pci_call_probe+0x176/0x800 [ 234.681225][T11366] ? pci_match_device+0x147/0x7d0 [ 234.682795][T11366] ? __pfx_pci_call_probe+0x10/0x10 [ 234.684422][T11366] ? __pfx_pci_match_device+0x10/0x10 [ 234.686112][T11366] ? pci_find_host_bridge+0x3c/0x80 [ 234.687734][T11366] pci_device_probe+0x25b/0x400 [ 234.689267][T11366] ? __pfx_pci_device_probe+0x10/0x10 [ 234.690944][T11366] ? sysfs_create_link+0x68/0xc0 [ 234.692496][T11366] ? __pfx_pci_device_probe+0x10/0x10 [ 234.694173][T11366] really_probe+0x241/0xa60 [ 234.695648][T11366] __driver_probe_device+0x210/0x460 [ 234.697315][T11366] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.699131][T11366] driver_probe_device+0x4a/0x140 [ 234.700713][T11366] __device_attach_driver+0x1df/0x320 [ 234.702391][T11366] ? __pfx___device_attach_driver+0x10/0x10 [ 234.704230][T11366] bus_for_each_drv+0x159/0x1e0 [ 234.705775][T11366] ? __pfx_bus_for_each_drv+0x10/0x10 [ 234.707461][T11366] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.709091][T11366] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.710905][T11366] __device_attach+0x1e4/0x4c0 [ 234.712403][T11366] ? __pfx___device_attach+0x10/0x10 [ 234.714054][T11366] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.715696][T11366] device_initial_probe+0xaf/0xf0 [ 234.717289][T11366] pci_bus_add_device+0xc5/0x100 [ 234.718831][T11366] pci_bus_add_devices+0x9a/0x1f0 [ 234.720400][T11366] pci_rescan_bus+0x2a/0x40 [ 234.721829][T11366] rescan_store+0xfb/0x130 [ 234.723232][T11366] ? __pfx_rescan_store+0x10/0x10 [ 234.724846][T11366] ? sysfs_file_kobj+0xe4/0x290 [ 234.726377][T11366] ? __pfx_rescan_store+0x10/0x10 [ 234.727945][T11366] bus_attr_store+0x74/0xb0 [ 234.729379][T11366] ? __pfx_bus_attr_store+0x10/0x10 [ 234.730998][T11366] sysfs_kf_write+0xf2/0x150 [ 234.732457][T11366] kernfs_fop_write_iter+0x3e0/0x5f0 [ 234.734101][T11366] ? __pfx_sysfs_kf_write+0x10/0x10 [ 234.735729][T11366] vfs_write+0x6af/0x1050 [ 234.737101][T11366] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.738914][T11366] ? __pfx_vfs_write+0x10/0x10 [ 234.740410][T11366] ? find_held_lock+0x2b/0x80 [ 234.741891][T11366] ksys_write+0x12a/0x250 [ 234.743248][T11366] ? __pfx_ksys_write+0x10/0x10 [ 234.744811][T11366] do_syscall_64+0x123/0x790 [ 234.746272][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.748257][T11366] RIP: 0033:0x7fd1b7f9f559 [ 234.749885][T11366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.755985][T11366] RSP: 002b:00007fd1b8d8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.758567][T11366] RAX: ffffffffffffffda RBX: 00007fd1b8226090 RCX: 00007fd1b7f9f559 [ 234.761017][T11366] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 000000000000000a [ 234.763453][T11366] RBP: 00007fd1b8036b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.765903][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.768363][T11366] R13: 00007fd1b8226128 R14: 00007fd1b8226090 R15: 00007ffc5600a708 [ 234.770905][T11366] [ 234.772553][T11366] Kernel Offset: disabled [ 234.774049][T11366] Rebooting in 86400 seconds..