last executing test programs: 20.389790124s ago: executing program 0 (id=35): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f00000008c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=md5)\x00\x00\x00\x00\x00'], 0x0, 0x0) keyctl$link(0x8, r0, r0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000780)="bb8383a8f63f22b16002e8cba633721021ce75f0d9873a2f1680b4c5cb65f5af378d2467408ad35c72fdeb2a6b74e0586482444c13196f85f173fb7e9a724f345dd2862517f7346a7b6a1353cad085964768237a0d4390f83c7fcb3cd8e1c21bdf7e974f28038035e70acfc99b48c2188ab49ca6a522f31e13ce0b140573969b602c7100a737b1ad30c263f631056c18fe0764a58c45c87fc17bd76c133d10d9d7dfd60b4b82809e84ce689f89da0ed2e2f7", 0xb2, r0) 20.339366723s ago: executing program 0 (id=37): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001480)='fdinfo/3\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r0, &(0x7f0000001600)="46b4f083c13cc07dcfcc053057afcaeb42bc348e92567c90e1fb5d565f093712d00552f6bbc996362dd70503ce1c62412477fbc6aa25972320ade53aa446b9c728da206842a32a4582f03219f8f10e8cd96024776b3166095fe8c4501a82d664c94218339320a1f9514e07fe7d7c989ec124647f3ce573d602ad36f936674f77969ef9611ceb0e4f792b9b236bba468fb07a053fb1bfbbb9474206ca972ecab039c3d1fdb8a54f7846", &(0x7f00000016c0)=@tcp=r1, 0x2}, 0x20) syz_open_dev$dvb_frontend(&(0x7f0000001440), 0x0, 0x703840) 20.337133412s ago: executing program 0 (id=38): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc04, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.131819453s ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./mydev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mydev/v4l-touch0\x00', 0xa2c00, 0xd0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r1, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x305}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_pidfd_open(r4, 0x0) mq_open(&(0x7f0000000180)='\x00', 0x2, 0x40, &(0x7f00000001c0)={0x80000000, 0x3ff, 0x3ff, 0x1}) pidfd_send_signal(r6, 0x21, 0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 20.02113294s ago: executing program 0 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee0000080009"], 0x184}, 0x1, 0x0, 0xee8f, 0x20000010}, 0x0) 19.779487508s ago: executing program 0 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000010fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000011080)={0x0, 0x0, &(0x7f00000110c0)={&(0x7f0000011100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='27', 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000011140)={0x0, 0x0, &(0x7f0000011180)={&(0x7f00000001c0)={0x1f8, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@cf={0x4, 0x6, {0x7f, 0x4, 0x1000, 0x3}}, @cf={0x4, 0x6, {0x5, 0x3, 0x3, 0x8}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xbb, 0x48}}, @dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_FTM_RESPONDER={0xc8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbc, 0x3, "7be899ee6b27a7bc1c8f06303d290eb81cc356c77a8d8da81a212a9635af083a847098d214aa7cfa7bc737ad5494444d3596f9c179e8e9ca0b7c212a57e57d6dd130f4b5b10895237c8aa12aaa386d346c87b1f8f49e466029c467e42aaa2cc0468e012c65295431b336e5db11f14e7d854afb6094b6731d95092fdf5963a51ff96e15c48c5da6e76d8663e1b0dab34a1d471275254a23597537573048a915f3338d8098916dab1e6be804977aa3a479c91bc0b068f3997e"}]}, @NL80211_ATTR_BEACON_HEAD={0xd1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x9, 0xdff}}, 0xf, @random=0x6877, 0x8010, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x8, 0x1, 0x6}}, @void, @void, @val={0x25, 0x3, {0x1, 0x7c, 0x1}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0xff, 0x78, 0xe}}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x6f, 0x40, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x10001, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6a}}, @void, [{0xdd, 0x5c, "421f987f6ec1aed054ad243aba5050910c4df1e8bb7d3e644f7d1459c86015bd855fd15761233116e5ee3178808be6f9acb589752224fa3668ba7bf8aa18b0b4ee4e70ee0cc5a6c5457661cdba05a62847e3115235b11423e9d332e4"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x1f8}}, 0x20000014) 19.676888285s ago: executing program 32 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000010fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000011080)={0x0, 0x0, &(0x7f00000110c0)={&(0x7f0000011100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='27', 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000011140)={0x0, 0x0, &(0x7f0000011180)={&(0x7f00000001c0)={0x1f8, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@cf={0x4, 0x6, {0x7f, 0x4, 0x1000, 0x3}}, @cf={0x4, 0x6, {0x5, 0x3, 0x3, 0x8}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xbb, 0x48}}, @dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_FTM_RESPONDER={0xc8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbc, 0x3, "7be899ee6b27a7bc1c8f06303d290eb81cc356c77a8d8da81a212a9635af083a847098d214aa7cfa7bc737ad5494444d3596f9c179e8e9ca0b7c212a57e57d6dd130f4b5b10895237c8aa12aaa386d346c87b1f8f49e466029c467e42aaa2cc0468e012c65295431b336e5db11f14e7d854afb6094b6731d95092fdf5963a51ff96e15c48c5da6e76d8663e1b0dab34a1d471275254a23597537573048a915f3338d8098916dab1e6be804977aa3a479c91bc0b068f3997e"}]}, @NL80211_ATTR_BEACON_HEAD={0xd1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x9, 0xdff}}, 0xf, @random=0x6877, 0x8010, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x8, 0x1, 0x6}}, @void, @void, @val={0x25, 0x3, {0x1, 0x7c, 0x1}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0xff, 0x78, 0xe}}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x6f, 0x40, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x10001, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6a}}, @void, [{0xdd, 0x5c, "421f987f6ec1aed054ad243aba5050910c4df1e8bb7d3e644f7d1459c86015bd855fd15761233116e5ee3178808be6f9acb589752224fa3668ba7bf8aa18b0b4ee4e70ee0cc5a6c5457661cdba05a62847e3115235b11423e9d332e4"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x1f8}}, 0x20000014) 3.849429815s ago: executing program 2 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000400)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='clear_refs\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x42, 0x0) write$dsp(r5, &(0x7f00000009c0)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000a00)='1\x00', 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000880)={[0x35, 0x7, 0x0, 0x180, 0x1000000004, 0x10, 0xf1, 0x483, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x1, 0xbd9], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000abc000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0x2c8d, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xf3}, @nested_amd_invlpga={0x17d, 0x20, {0x1ffc, 0xa284}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x2, 0xb64, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa1, 0xffff, 0x3, 0x1}}, @rdmsr={0x66, 0x18, {0xa98}}], 0x130}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.831701967s ago: executing program 2 (id=238): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wlan1\x00', 0x10) unshare(0x40200) (async) unshare(0x40200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001880)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r1, &(0x7f00000017c0), 0x4000000000001f2, 0xfc) (async) sendmmsg(r1, &(0x7f00000017c0), 0x4000000000001f2, 0xfc) r2 = semget(0x3, 0x4, 0x39c) semop(r2, &(0x7f0000000300)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000340)=[{0x2, 0xbbdd, 0x1000}], 0x1) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="1920e8dd4bf7b577", 0x8}], 0x1) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="1920e8dd4bf7b577", 0x8}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000380)=[0x6, 0x7fff]) unshare(0x40400) (async) unshare(0x40400) sendto$unix(r0, &(0x7f00000003c0)="47c04a5e", 0x4, 0x40080c0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e02}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x8050, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e1d}, 0x6e) clock_gettime(0x0, &(0x7f00000004c0)) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) select(0x40, &(0x7f0000000400)={0x4, 0x9, 0xa, 0xfffffffffffffff9, 0x6, 0x2, 0x1ff, 0x400}, &(0x7f0000000440)={0x3, 0x6, 0x2, 0x100, 0x6, 0x2, 0x7, 0x9}, &(0x7f0000000480)={0x8, 0x5, 0x6, 0x3, 0x0, 0x1, 0x0, 0xe1b8}, &(0x7f0000000500)={r3, r4/1000+10000}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x40}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000240)={0x6, 0x0, [{0xac2, 0x0, 0x7}, {0x223, 0x0, 0xfffffffffffffffb}, {0x830, 0x0, 0x800}, {0x865, 0x0, 0xcad5}, {0xb0b}, {0x978, 0x0, 0x1ff}]}) (async) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000240)={0x6, 0x0, [{0xac2, 0x0, 0x7}, {0x223, 0x0, 0xfffffffffffffffb}, {0x830, 0x0, 0x800}, {0x865, 0x0, 0xcad5}, {0xb0b}, {0x978, 0x0, 0x1ff}]}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000001800)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x81, 0x0, 0x366e, 0xf6c, 0x5}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) preadv2(r7, &(0x7f0000000140)=[{&(0x7f0000001880)=""/4099, 0xfffffdc0}], 0x1, 0x1, 0xfffffffc, 0x92) (async) preadv2(r7, &(0x7f0000000140)=[{&(0x7f0000001880)=""/4099, 0xfffffdc0}], 0x1, 0x1, 0xfffffffc, 0x92) connect$pppl2tp(r0, &(0x7f0000001780)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x1, 0x0, 0x22, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000000c0)="a1b18ee4b34c") 2.011466025s ago: executing program 1 (id=246): r0 = socket(0x200000000000011, 0x2, 0xd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x26, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f00000002c0)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x41}) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f0000000980), &(0x7f00000009c0)=r4}, 0x20) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000140)=0x7, 0x4) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180)={'/dev/syzrnull', 0x0}, 0x60000, 0x0) ioctl$BLKCLOSEZONE(r8, 0x40101287, &(0x7f00000001c0)={0x8642, 0xc50}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000200)={0x2, 'ip6tnl0\x00', {0x7fffffff}, 0x7}) 1.919917045s ago: executing program 2 (id=247): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x7) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/147, 0x93, 0x0, 0x0}, &(0x7f0000000ac0)=0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getchain={0x34, 0x66, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff2}, {0x10, 0xf}, {0xd, 0x1}}, [{0x8}, {0x8, 0xb, 0x52599c61}]}, 0x34}, 0x1, 0x0, 0x0, 0xa001}, 0x8000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) writev(r7, &(0x7f0000000780)=[{&(0x7f00000007c0), 0x86}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_RATE={0x0, 0x5, {0x40, 0x74}}, @TCA_CHAIN={0x8, 0xb, 0x7fff0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x881}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x5001}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="01051c00100014000600450000950000000008119078ac140002ac14000112344e20009c90780100000000000000a224802d9ad8418b60670386545080dd7f0dba3bab92a9ed00a7de589bd3b6a03ebfc8c8a89d61a2094026ca385961bbb617dd83ede761cfb4acfc9731dfa4d7f76f9dc9f2c3f47110eafca1ce43bda6da6ff5f98e8164653684ef60b6718fd64129b6bd746c61392f8fa9d0c58b153dc1997e7f95c4b0a2c1550657dd201a218f09ef9fc2f77a"], 0xba) 1.919240499s ago: executing program 1 (id=248): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000002c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0x7, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0xf, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4002, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000540)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write$tcp_mem(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) symlink(&(0x7f0000000040)='./dev/sda/file0\x00', &(0x7f0000000080)='./dev/sda\x00') r3 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) futex$unlock_wake_list64(r3, 0x20a, 0x7, 0x0, 0x0, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100d2fe52010625bd7000fedbdf2500000000000000000000ffffac141417fe8000000000000000000000000000aa000000000000000000008000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000003000000000000000000000028bd7000010000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa00"/268], 0x154}}, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff8}, r5}}, 0x30) 1.79171608s ago: executing program 1 (id=249): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x101800, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x24080) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000380)="09000000010000", 0x7) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9, 0x8}, 0x20) (async) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000500)=0xffffffc3, 0x4) (async) sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f0000000580)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) (async) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000780)={0x0, 0x0}) (async) r11 = syz_create_resource$kvm_nested_state(&(0x7f0000002840)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r10, 0xc080aebe, r11) (async) ioctl$KVM_SET_NESTED_STATE_res(r10, 0x4080aebf, r11) fchdir(r6) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./bus\x00', 0xa0) (async) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_io_uring_setup(0x79d8, &(0x7f0000000640)={0x0, 0xa4b2, 0x10000, 0x2, 0x1c2, 0x0, r6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) 1.521714407s ago: executing program 1 (id=250): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 1.520574076s ago: executing program 1 (id=252): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000d00), 0x12) connect$x25(r1, &(0x7f0000001180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) recvmsg(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x21) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0xc0803, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000f00)={0x8f, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001140)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001140)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'bridge0\x00', 0x0}) syz_usb_connect(0x2, 0x93a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x70, 0x31, 0x7c, 0x8, 0x5c6, 0x9080, 0x2589, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x928, 0x4, 0xc5, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x5, 0x7f, 0x1, 0xf3, 0x76, 0x3, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xa}}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x50, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xb26}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0x81}]}}]}}, {{0x9, 0x4, 0x4d, 0xc, 0x9, 0x74, 0x4c, 0xc6, 0x7, [@hid_hid={0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x397}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "abc9bb50"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3b}, [@ncm={0x6, 0x24, 0x1a, 0x802e, 0x10}, @obex={0x5, 0x24, 0x15, 0x1de6}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0xfff4, 0x2, 0xa, 0x8, 0x6}, @acm={0x4}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x2}}, {{0x9, 0x5, 0x4, 0x1, 0x1ef, 0x8, 0x0, 0x3, [@generic={0x78, 0x9, "156f4de82d9c8d4f2457e72cced29cd183e2518f74a9fec1f5d85c9af0988b51410cc43f34d2b6b5080f423718ff1c2261b57dee7ee80d06d6309af3b1132e72e915ea6b065000cad7fe2b087be94f85c4cecc88b58e02e7be05c8315b9e08305b516db4fbd1f6c54e1c5bcc7f5d086aab759f845b9c"}, @generic={0xd4, 0x2d, "cda949de511cdc00aae3c1d2454379f4c170bc4843bd7ecda5cc319fa69b771fa1e270c2fc662d108b20847c3d93597631d1772ffbfc67d3e2d06b2079a5d1b124bada45cf0054c73b5191b619c7d0f1006a7d18dc5a9cc5029a4ae737c6e659a7299a9ad82bb3f0d69661a529c900ff5eea7188579ac105428c3a7b3fc819f818b6e8eee090735a351af925ae7436239e3509108bb39930b51c349a9f19bb151330d1f139c38321e3b20920e8ced72ce22d07a4fb856d20c6e3832ba52a829c7c2b69c058ec9f006bdb086e4bef58703734"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x80, 0x1f, 0x40, [@generic={0xd9, 0x1, "c08ca661fcdf22ee8e870f2733e1e2032b2a86141ddbe1e0439618dd37323f8962d2ad51a652f63a251998dfff475095edf0b7de83a170cb63028a2f4bce4da508798ed1ce784b32cb2dcef3389be67598c86fd9317cad6835296cc278b57ff0cbe367fb0af57016579f927389a23e328e6988f8975b59a4c76e8ac11ef752c6aaf4603a1428136b61a47be2c94efc0dc988ea3bc4773dce08450876e7e61e2a9ca541870cc0cda80e6fec38e419e77ee962a7fe4214c926610d8d8570d99e73ca3df605f7e94a44c56c0d149bf16066d54015786aca19"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x8, 0x10, 0x7f, [@generic={0x63, 0x36, "6731330895aaa290cc022f22b866853a2fafcb3289eff8529dd26ae4c7019ce00f93d148babd231b06a224ecff7435f3ac7fa459ff99655762df3e64edffa3d73a7030a0924fc8c8db36b0c0b770dfed120bec5e1bbbb8caa7dac58cba51056d6d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x10, 0x3f, 0x4, [@generic={0x7a, 0x24, "4dd66be59f43675e0b4fc49aba1c876e5a9b607f51839e0899d0b23877d44463753387763ee584690cb23b7e64cfb5af4900a56caf63fe8cc17d5c073a439d943ef664e15bd39c5f2e1256272bdba69d5a0e9021b208994a590a09e6c863264d2951df1deef1be5c4c54e92639946a8957e6671a8e2e5814"}, @generic={0x20, 0x0, "e9dcf67265ddcf9987d760fcfe4bb45faebf2c3f0df76cf07ba50686a50b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xd, 0x5, 0x5, [@generic={0x77, 0x0, "ea055baf64e12a5b0f8a7323f81492f02d38b0c4a7fd253f47c69713cff50e1788a1d0d5a689ba0822d22f3d9face5d925e36003adb3b5d7d2f2f51da76aebc1ce900764490a462f1e2a5ce8699ae38448920e1c4fb7186b71365243ebab0f52e5f6488b170de786ac0acb1186322943b7ab5f8028"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x9, 0xf4, 0x2, [@generic={0xd6, 0xa, "771841f7615335f46490d91f85cef0ba4da2c040f02710640867d53512acc5fd60ab95306dd1a523f612889afb3040ef3ce599ee38f5753379e0e2ee5cb022940694ebfbed5eb289a0c337970927b025d52b79d154e383912cacb92e4e6b0363db53d37db43d1923c8de9f5268c38c8e1157a3dadb2c937a802f890b76596c7c4eebc2db552b1c289ad0c97dc7d720dea6cd01c7c39a27970781f36da8106d820abeb33ed071f59f9749fe66a5d1a0b54c08e6a19d4bc3eb5a34e76a44876f342fc20297589a3b76d4105bea530077cfdb512364"}, @uac_iso={0x7, 0x25, 0x1, 0xd4771309650b8e33, 0x8, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x1b, 0xa0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0xf8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2}]}}]}}, {{0x9, 0x4, 0xec, 0x25, 0x4, 0x2, 0xe, 0x0, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe25, 0x7ff, 0x9}}], [{{0x9, 0x5, 0x5, 0x1, 0x10, 0xe, 0x80, 0x2, [@generic={0x9, 0x8, "9c83ac53a7d27b"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0xc6, 0x85}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5b, 0x3}, @generic={0x95, 0x27, "01578e350275c56532a224f2512a2bea6dc753b1a16e55b3ac4a4347865dfd998ef8f8a4a2acb30027fec45539e617614302b24a61c4d9987b216e2d162267c7c9ddd7a4c4587010970bf7bd1d73fbd6362c0995580d9fe8011a5796a8767dec306e26aac8824e11b48b10451139bc6d5558158e4911c89635b9c037ade62ec93c7eeeef5176e25c3966fe9e0bdbfa893eaad4"}]}}, {{0x9, 0x5, 0xb, 0x4, 0xb6071c7e2b908120, 0x81, 0x4, 0x8}}]}}, {{0x9, 0x4, 0xb, 0xf, 0xa, 0x30, 0x1b, 0x89, 0x5, [], [{{0x9, 0x5, 0x16, 0x0, 0x40, 0xe, 0x7, 0x8, [@generic={0x9a, 0x3e, "28717849d6c01cf5256920067c0dd2162bbbcc7df2749caf20e12836af11c765f62902ffc80844fa9f052191bbd839eddca2ece0f47ebf7d9648c7c6d6ec64fbc721977bf6e6d244b678d28e7e3e3cbf250514715e143ab82ee83639645ea2e78ea61d4accad123661d85ba029cb2508e72fa3e409a963c06bccec612c2c32746127643e9a347f36b521c9cf2f3181ceed5a31bb2661e817"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xf7, 0x0, 0x40}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x1, 0x3e}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0xd9, 0x7}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x5, 0x5, [@generic={0x6a, 0x9, "d0079e9d3e9f29acb7cdd446b3dfbd14ac5287fb317cf699c4c7ca070473ac0d1fed82a3c72e7a9afd3ce7fcae990bc495e1a3bcfc4691ee61935ac81da857813f8ce5d0c85d57478a3a591e72ca71677047f0bce32b7e6f6aac093c602a1790d78e34b42b0903d6"}, @generic={0x8d, 0x23, "53291da0055b3a1626fafa19bd40b87ebf4aab5cf9392329ff481f11a2e261a8d9af0172dc93ad41e722cec2883f67c86d3a680e5206b671e11a6d9f130b7e07b67c93357d8b25627dd9dc211a4b624e9d293f6cd60f88ca64b0647acec23625ce46c272bb680d527aea8cbe65c1480e5014683dd48a6ed93cea45b02ebd9af4911ccaa617a71dfd0cb0d8"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xb, 0x4, 0xa3, [@generic={0xa9, 0xb, "260a923663cbf6747d8060dea20b7686bdbdca8e302eb6e720cace5cbdaa2d114d3cb958786368c295e18fc34d718d392227b6c5116c91d9ab941c195a12568cfdba1fa7add99e540aa08f04caf8cf368f5ba7eae1b526b89bde421b5f1b3b6b582ef7f9e766f68410bb9c21b1d01d93ebbeb419c380344f2b3d029b94718b06d76becffd294599c943a857a1899465807d492423429804bc266fe5912bdae9502830262377c0e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x83, 0x0, 0x200, 0x8, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd0, 0x6}]}}, {{0x9, 0x5, 0x9, 0x30f13307c0bcfce9, 0x200, 0x90, 0x0, 0x0, [@generic={0x3d, 0xf, "f7c66db216cf2880020500350a3c7b1b45d3ec02e5cb7163f48c0b278bb5dd21dc5e9070672cc79b5b411c381a2a0207dfcce428666c7fc358e2b4"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x8, 0x7, 0xd1, 0x8, 0x7}, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0xb, [{0x20, &(0x7f00000009c0)=@string={0x20, 0x3, "bc160b58a93ced581d153369cb9c781dcc8594bcc224570f5cba9f2a5084"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1009}}, {0xec, &(0x7f0000000ac0)=@string={0xec, 0x3, "788d9d89afb7979a35ab79ad833e2edbaa04c33f435affdda036e2a7dd31605439264b63bd7b41871ae41c854f6f16845ccd778285aa315675b5d3ad58a20854830ac017d697e184bc16e2ff92390130bb7910f64a3c23e81807382688653e506229a534f4b7f05999aa9783ac2b4b217947fed4b3509f52487445df0272d4624384d9f26939e3c9a002e3dbd690307a77d28d44c972f8bdf5348a88cc316bf48afb101c6fa74124d514c0fb62d5309079cb7887dfed98a5a37d0ef38acea1b1a4efa86f032d3bdb3bdf73a7fc91e00451d6f359326fca609060b9a14bd8b8497fac47b7b249336a4ad4"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000c40)=@string={0x4, 0x3, "e3de"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1801}}, {0x1c, &(0x7f0000000cc0)=@string={0x1c, 0x3, "0ec70149ad381a2292121b17e3060b7fb42bf1a30c7b787e1008"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x180c}}]}) (async) syz_usb_connect(0x2, 0x93a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x70, 0x31, 0x7c, 0x8, 0x5c6, 0x9080, 0x2589, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x928, 0x4, 0xc5, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x5, 0x7f, 0x1, 0xf3, 0x76, 0x3, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xa}}], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x50, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xb26}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0x81}]}}]}}, {{0x9, 0x4, 0x4d, 0xc, 0x9, 0x74, 0x4c, 0xc6, 0x7, [@hid_hid={0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x397}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "abc9bb50"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3b}, [@ncm={0x6, 0x24, 0x1a, 0x802e, 0x10}, @obex={0x5, 0x24, 0x15, 0x1de6}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0xfff4, 0x2, 0xa, 0x8, 0x6}, @acm={0x4}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x2}}, {{0x9, 0x5, 0x4, 0x1, 0x1ef, 0x8, 0x0, 0x3, [@generic={0x78, 0x9, "156f4de82d9c8d4f2457e72cced29cd183e2518f74a9fec1f5d85c9af0988b51410cc43f34d2b6b5080f423718ff1c2261b57dee7ee80d06d6309af3b1132e72e915ea6b065000cad7fe2b087be94f85c4cecc88b58e02e7be05c8315b9e08305b516db4fbd1f6c54e1c5bcc7f5d086aab759f845b9c"}, @generic={0xd4, 0x2d, "cda949de511cdc00aae3c1d2454379f4c170bc4843bd7ecda5cc319fa69b771fa1e270c2fc662d108b20847c3d93597631d1772ffbfc67d3e2d06b2079a5d1b124bada45cf0054c73b5191b619c7d0f1006a7d18dc5a9cc5029a4ae737c6e659a7299a9ad82bb3f0d69661a529c900ff5eea7188579ac105428c3a7b3fc819f818b6e8eee090735a351af925ae7436239e3509108bb39930b51c349a9f19bb151330d1f139c38321e3b20920e8ced72ce22d07a4fb856d20c6e3832ba52a829c7c2b69c058ec9f006bdb086e4bef58703734"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x80, 0x1f, 0x40, [@generic={0xd9, 0x1, "c08ca661fcdf22ee8e870f2733e1e2032b2a86141ddbe1e0439618dd37323f8962d2ad51a652f63a251998dfff475095edf0b7de83a170cb63028a2f4bce4da508798ed1ce784b32cb2dcef3389be67598c86fd9317cad6835296cc278b57ff0cbe367fb0af57016579f927389a23e328e6988f8975b59a4c76e8ac11ef752c6aaf4603a1428136b61a47be2c94efc0dc988ea3bc4773dce08450876e7e61e2a9ca541870cc0cda80e6fec38e419e77ee962a7fe4214c926610d8d8570d99e73ca3df605f7e94a44c56c0d149bf16066d54015786aca19"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x8, 0x10, 0x7f, [@generic={0x63, 0x36, "6731330895aaa290cc022f22b866853a2fafcb3289eff8529dd26ae4c7019ce00f93d148babd231b06a224ecff7435f3ac7fa459ff99655762df3e64edffa3d73a7030a0924fc8c8db36b0c0b770dfed120bec5e1bbbb8caa7dac58cba51056d6d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x10, 0x3f, 0x4, [@generic={0x7a, 0x24, "4dd66be59f43675e0b4fc49aba1c876e5a9b607f51839e0899d0b23877d44463753387763ee584690cb23b7e64cfb5af4900a56caf63fe8cc17d5c073a439d943ef664e15bd39c5f2e1256272bdba69d5a0e9021b208994a590a09e6c863264d2951df1deef1be5c4c54e92639946a8957e6671a8e2e5814"}, @generic={0x20, 0x0, "e9dcf67265ddcf9987d760fcfe4bb45faebf2c3f0df76cf07ba50686a50b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xd, 0x5, 0x5, [@generic={0x77, 0x0, "ea055baf64e12a5b0f8a7323f81492f02d38b0c4a7fd253f47c69713cff50e1788a1d0d5a689ba0822d22f3d9face5d925e36003adb3b5d7d2f2f51da76aebc1ce900764490a462f1e2a5ce8699ae38448920e1c4fb7186b71365243ebab0f52e5f6488b170de786ac0acb1186322943b7ab5f8028"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x9, 0xf4, 0x2, [@generic={0xd6, 0xa, "771841f7615335f46490d91f85cef0ba4da2c040f02710640867d53512acc5fd60ab95306dd1a523f612889afb3040ef3ce599ee38f5753379e0e2ee5cb022940694ebfbed5eb289a0c337970927b025d52b79d154e383912cacb92e4e6b0363db53d37db43d1923c8de9f5268c38c8e1157a3dadb2c937a802f890b76596c7c4eebc2db552b1c289ad0c97dc7d720dea6cd01c7c39a27970781f36da8106d820abeb33ed071f59f9749fe66a5d1a0b54c08e6a19d4bc3eb5a34e76a44876f342fc20297589a3b76d4105bea530077cfdb512364"}, @uac_iso={0x7, 0x25, 0x1, 0xd4771309650b8e33, 0x8, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x1b, 0xa0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0xf8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2}]}}]}}, {{0x9, 0x4, 0xec, 0x25, 0x4, 0x2, 0xe, 0x0, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe25, 0x7ff, 0x9}}], [{{0x9, 0x5, 0x5, 0x1, 0x10, 0xe, 0x80, 0x2, [@generic={0x9, 0x8, "9c83ac53a7d27b"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0xc6, 0x85}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5b, 0x3}, @generic={0x95, 0x27, "01578e350275c56532a224f2512a2bea6dc753b1a16e55b3ac4a4347865dfd998ef8f8a4a2acb30027fec45539e617614302b24a61c4d9987b216e2d162267c7c9ddd7a4c4587010970bf7bd1d73fbd6362c0995580d9fe8011a5796a8767dec306e26aac8824e11b48b10451139bc6d5558158e4911c89635b9c037ade62ec93c7eeeef5176e25c3966fe9e0bdbfa893eaad4"}]}}, {{0x9, 0x5, 0xb, 0x4, 0xb6071c7e2b908120, 0x81, 0x4, 0x8}}]}}, {{0x9, 0x4, 0xb, 0xf, 0xa, 0x30, 0x1b, 0x89, 0x5, [], [{{0x9, 0x5, 0x16, 0x0, 0x40, 0xe, 0x7, 0x8, [@generic={0x9a, 0x3e, "28717849d6c01cf5256920067c0dd2162bbbcc7df2749caf20e12836af11c765f62902ffc80844fa9f052191bbd839eddca2ece0f47ebf7d9648c7c6d6ec64fbc721977bf6e6d244b678d28e7e3e3cbf250514715e143ab82ee83639645ea2e78ea61d4accad123661d85ba029cb2508e72fa3e409a963c06bccec612c2c32746127643e9a347f36b521c9cf2f3181ceed5a31bb2661e817"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xf7, 0x0, 0x40}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x1, 0x3e}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0xd9, 0x7}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x8, 0x5, 0x5, [@generic={0x6a, 0x9, "d0079e9d3e9f29acb7cdd446b3dfbd14ac5287fb317cf699c4c7ca070473ac0d1fed82a3c72e7a9afd3ce7fcae990bc495e1a3bcfc4691ee61935ac81da857813f8ce5d0c85d57478a3a591e72ca71677047f0bce32b7e6f6aac093c602a1790d78e34b42b0903d6"}, @generic={0x8d, 0x23, "53291da0055b3a1626fafa19bd40b87ebf4aab5cf9392329ff481f11a2e261a8d9af0172dc93ad41e722cec2883f67c86d3a680e5206b671e11a6d9f130b7e07b67c93357d8b25627dd9dc211a4b624e9d293f6cd60f88ca64b0647acec23625ce46c272bb680d527aea8cbe65c1480e5014683dd48a6ed93cea45b02ebd9af4911ccaa617a71dfd0cb0d8"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xb, 0x4, 0xa3, [@generic={0xa9, 0xb, "260a923663cbf6747d8060dea20b7686bdbdca8e302eb6e720cace5cbdaa2d114d3cb958786368c295e18fc34d718d392227b6c5116c91d9ab941c195a12568cfdba1fa7add99e540aa08f04caf8cf368f5ba7eae1b526b89bde421b5f1b3b6b582ef7f9e766f68410bb9c21b1d01d93ebbeb419c380344f2b3d029b94718b06d76becffd294599c943a857a1899465807d492423429804bc266fe5912bdae9502830262377c0e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x83, 0x0, 0x200, 0x8, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd0, 0x6}]}}, {{0x9, 0x5, 0x9, 0x30f13307c0bcfce9, 0x200, 0x90, 0x0, 0x0, [@generic={0x3d, 0xf, "f7c66db216cf2880020500350a3c7b1b45d3ec02e5cb7163f48c0b278bb5dd21dc5e9070672cc79b5b411c381a2a0207dfcce428666c7fc358e2b4"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x8, 0x7, 0xd1, 0x8, 0x7}, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0xb, [{0x20, &(0x7f00000009c0)=@string={0x20, 0x3, "bc160b58a93ced581d153369cb9c781dcc8594bcc224570f5cba9f2a5084"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1009}}, {0xec, &(0x7f0000000ac0)=@string={0xec, 0x3, "788d9d89afb7979a35ab79ad833e2edbaa04c33f435affdda036e2a7dd31605439264b63bd7b41871ae41c854f6f16845ccd778285aa315675b5d3ad58a20854830ac017d697e184bc16e2ff92390130bb7910f64a3c23e81807382688653e506229a534f4b7f05999aa9783ac2b4b217947fed4b3509f52487445df0272d4624384d9f26939e3c9a002e3dbd690307a77d28d44c972f8bdf5348a88cc316bf48afb101c6fa74124d514c0fb62d5309079cb7887dfed98a5a37d0ef38acea1b1a4efa86f032d3bdb3bdf73a7fc91e00451d6f359326fca609060b9a14bd8b8497fac47b7b249336a4ad4"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000c40)=@string={0x4, 0x3, "e3de"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1801}}, {0x1c, &(0x7f0000000cc0)=@string={0x1c, 0x3, "0ec70149ad381a2292121b17e3060b7fb42bf1a30c7b787e1008"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x180c}}]}) sendmsg$nl_route(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) 1.517127143s ago: executing program 4 (id=253): r0 = syz_open_dev$sndctrl(&(0x7f0000000780), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000007c0)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='ns\x00') openat2(r1, &(0x7f0000000700)='./cgroup\x00', &(0x7f0000000740)={0x80042, 0x72, 0x9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800030102000000000000001f0000009500000040000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/mtrr\x00', 0x2, 0x0) clock_gettime(0x4, &(0x7f00000003c0)) write(r2, &(0x7f0000000a00)='base=0x20000000 size=0x20000 type=write-back', 0x2c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d06, &(0x7f0000000a80)="0000020000000000000002") mkdir(&(0x7f0000000080)='./file0\x00', 0x1c8) pipe(0x0) unshare(0x22020600) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x38) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000240)='./file1\x00') r5 = open(&(0x7f0000000280)='./file0\x00', 0x4264c2, 0x1c2) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000500)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x106}], {0x95, 0x0, 0x74}}, &(0x7f0000000540)='GPL\x00', 0x8, 0xc6, &(0x7f0000000580)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x29, 0x52000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88d4}, 0x4004000) mknodat$null(r5, &(0x7f0000000300)='\x00', 0xc000, 0x103) socket$can_raw(0x1d, 0x3, 0x1) creat(&(0x7f0000000ac0)='./file0\x00', 0x1) r7 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.391905825s ago: executing program 4 (id=254): setns(0xc9, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x27b, 0x4) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = syz_usb_connect$cdc_ecm(0x3, 0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003020000402505a1a4400001020301090256000101fc40020904000503020600070b24060000c7d238418946286905240006000d240f017fffffff0101deff010c241b0900010040060800490905810608000603080932f20744394d6b6d44b10b05820200020076ee0ff3c961f07623298680b483218bdb82a464eeb9736b3bfc8be0f49b21d51358d719744550f9c0af0625ced82c738e5b38b49fe706fe19b4436c63eb11cb102d886cb5324b952e993ed36c4624489b87c6f11453c7b3a2d53de916df956f2f66713b6689f4c2e01c324c1544e4e578f0c1c1c2b3e354e2e39fcb8755a46694836772"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x0, 0x7, 0x40}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x37, 0x1}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}, {0xc5, &(0x7f0000000200)=@string={0xc5, 0x3, "60cbbadacd5ab96cb4e6e7a0dca668cd20c5532ae5ff3566f9afef9b1a19c693403e9a08872007e14226250ef0d1d17a06d22fa81847d8687ee2be3f9564bdc3610477e2fae62c1ddb8b5049075689374ba24afeb715a2266e73925a2def32c2cd0bcdeaeb49f3b6bfeda3f89e851fd094b4c2c7f3f678ab4f2d393d1efc4131fc37b3759231412f9125769aaf6c7838f899720860cc9e20b8f9d08ff1d170ffc5f815aa1fa841b285150fcd52d80b6281570378e37bf0276507ab2c30373fc60cf825"}}]}) syz_usb_ep_read(r1, 0x7, 0x80, &(0x7f0000000340)=""/128) 1.159826158s ago: executing program 3 (id=255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0xe1efcadb8667d749}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x5e24}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x8847}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x88}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x2}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x6c04}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x18ff781cbf8725b}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x88b0}, 0x24000000) 1.070162521s ago: executing program 3 (id=256): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x880) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x199) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x4, 0x10004003, 0x2000007, 0x0, 0x7}}) io_setup(0xd9f6, &(0x7f0000000300)=0x0) io_submit(r2, 0x3b, &(0x7f0000000340)=[&(0x7f0000000380)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f00000003c0), 0x70000}]) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r8, 0x307, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x400c884) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4008000) 911.785651ms ago: executing program 2 (id=257): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010002ce4ac3a0b8233624b6b8ff2e420000000005000000000002000000000000065e5309db55a7360000ffffffff0000000003000600800000000200"/73], 0x50}}, 0x10) r1 = socket(0x1a, 0x3, 0xffffffff) write(r1, &(0x7f0000000100)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f000045b000/0x1000)=nil, 0x1000, 0x64) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e08070c085f16"], 0xb) ioctl$SET_ARRAY_INFO(r2, 0x40480923, &(0x7f0000000200)={0x0, 0x5a, 0x0, 0x0, 0x1, 0xb74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}) ioctl$ADD_NEW_DISK(r2, 0x40140921, &(0x7f0000000280)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r2, 0x400c0930, 0x0) munlock(&(0x7f0000aa4000/0x3000)=nil, 0x3000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) 767.229822ms ago: executing program 3 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x4000080) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/slabinfo\x00', 0x41, 0x0) write$cgroup_devices(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r6, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44020000", @ANYRES16=r2, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x0) 681.679469ms ago: executing program 3 (id=259): socket$packet(0x11, 0xa, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) 681.290605ms ago: executing program 3 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000022100)={0x0, 0x0, &(0x7f0000022140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd6, 0x6, "96f04ee38c9ee40c6954d847cbc1047208bb3f94ca27380cacb38220f50fc980a2e18c66df4398a028efdff2f7c6845a7bce61cdc46f4c111156574b2fdcaca6043dcc2d46ca5c30fb5735172337af32a714beb40edbcc178d65246077f1c000215d3e0d50e3e17b39335cca9c04812516001b9d1cebc4aa1cd086187a5df39f7ae39e95822bf13c83d73fcc4c18fbca61cfcf60cf6e307ef5c8e47ed39c781a81aa9abc8504bb47f3525200799f706a6c401abb8c0321e409ab2396ed2a1d7c5a2ba917dcea44cb0ea12fd85de2f011a32c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x20c}}, 0x0) unshare(0x100000) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000300)='.\x00', 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3ff0d0472e90781200d2d4bc6bd2e018d9172fc1ff1f74821eb50e04d32813c917491759eee720399ce2c8e1765956ca6096a0d53f22944e0fbac3e9586603af7f64c1febef5cf848d22cf0d58c8ae1d"], 0x0) 621.437846ms ago: executing program 3 (id=261): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='dev\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000ec0)={0x101, 0x4, {}, {0xffffffffffffffff}, 0x2, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="580000002000010025bd7000fddbdf2532000000fc000000000000000000000000000000e00000020000000000000000000000004e2200004e22fbce020020102f000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05001900ff009d0804002600"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000001000), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000001040)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000001080)=ANY=[], 0x40000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000001100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000cc0)=@s={0x5, @SEQ_MIDIPUTC=0xff}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f0000000d40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./sys\x00', &(0x7f0000000dc0)='sysfs\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000e40)='en', 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000b80), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x210, 0x210, 0x140, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffffff], [0xff000000, 0xff], 'ip_vti0\x00', 'ipvlan1\x00', {}, {}, 0x2f, 0x1}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0x40, 0xf, 0x0, 0x10, 0x1040, 0x2000}}, @common=@srh={{0x30}, {0x87, 0x9, 0xff, 0x0, 0x31, 0x40, 0xca}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x2}, {0x2, 0x3, 0x1}, {0xffffffffffffffff, 0x6, 0x5}, 0xf, 0xfffffff9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x932, 0xffff, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0x38f115a26182fbd1, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'wlan1\x00', {}, {0xff}, 0x5e, 0x3, 0x0, 0x11}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x4, 0x0, [0x1, 0x10, 0x1, 0x0, 0xfff9, 0x1, 0xfff5, 0x8c0, 0x1, 0x0, 0x6, 0x9, 0xc, 0x4, 0x6, 0x5], 0x1}}, @common=@eui64={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x7, 0x7ff, 0x6, 0xffffff7f, 0x6, 0x401, 0xfd4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='dev/ttyUSB0\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000240)={'syz0\x00', {0x2, 0xb, 0x0, 0x1}, 0x47, [0xa, 0x2, 0x5, 0x78b7, 0x1, 0x1, 0xcd6c, 0x5, 0xf, 0x7000, 0x10000, 0x8, 0xf, 0xc, 0x5, 0x4, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0xb1c, 0x5, 0xfffffffc, 0x0, 0x6, 0x91, 0x800, 0x80000001, 0x80, 0x401, 0x80, 0x3, 0x3, 0x2, 0x6, 0xcbbd, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x3, 0x10001, 0xc, 0x7, 0x10000, 0x5, 0x10001, 0x1000, 0x3, 0x401, 0x800, 0xdec, 0x7, 0x3c0, 0xfffffff6, 0x8, 0x7, 0x7, 0xdec, 0x809, 0x1, 0xfff], [0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x1, 0x80, 0x2, 0x299, 0xb6f, 0x8, 0x200, 0xedc8, 0x5, 0xac, 0x5, 0x0, 0x100, 0xffffff01, 0x8, 0x5, 0x7, 0xa, 0x1, 0xff, 0x3, 0x7, 0x3, 0x23b, 0x6, 0x2, 0x200, 0x0, 0x7, 0x0, 0x5, 0xc69d, 0x101, 0x80000000, 0x7, 0xf6, 0x4, 0x64d, 0x1, 0x5, 0xfff, 0x9, 0xc2, 0x10001, 0x1032800, 0xff, 0xb, 0x751, 0x3, 0xa, 0x3, 0xe0000000, 0x8, 0x3, 0x6, 0x4, 0x8001, 0x80000001], [0x3, 0xfffffff7, 0x3, 0x53, 0x5, 0x35, 0x3, 0x7, 0x1ff, 0x5, 0x0, 0xfff, 0x9, 0x7, 0x3, 0x0, 0x6, 0x4, 0xfffffffb, 0x7, 0xb, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x5, 0x5, 0x1, 0x22bc48d0, 0x3, 0x6, 0x683, 0x6, 0x1, 0x4, 0xe, 0x3, 0x7, 0x6, 0x2, 0x7, 0x40, 0x9, 0x3, 0xffffff81, 0x63, 0x5, 0x7, 0x1, 0x8, 0x2, 0x75, 0xb, 0xd41, 0x8001, 0x7fff, 0x8, 0x7, 0x9, 0x18, 0x20000, 0x400, 0x9], [0x5, 0xff, 0x3, 0x0, 0x8001, 0x7, 0x1, 0x7, 0xe, 0x1, 0x81, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x2b57, 0x6, 0x4000a5, 0x356d, 0x9, 0xb2a3, 0x8, 0x4, 0x4, 0xfffffffb, 0xfffffffc, 0x7, 0xb, 0x7fffffff, 0xffff0000, 0x5, 0x2, 0x2, 0x7, 0xffffeffd, 0x1, 0xffffffff, 0xb1a3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0x401, 0x34f, 0x5, 0xe7d, 0x78b6, 0x80000000, 0xe2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xffff, 0xff, 0x200008, 0x1600, 0x6, 0x0, 0xa]}, 0x45c) syz_create_resource$binfmt(&(0x7f0000000d00)='./file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c00018006000600894f0000500002"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f0000000200)=0x1) 240.405541ms ago: executing program 1 (id=262): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000005c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xfffffffd], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./debug\x00', &(0x7f00000008c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) close(r2) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000240)=0x1, 0x4) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17) accept4(r4, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_sec\x00', 0x1ff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./sys_sec\x00', &(0x7f0000000380)='securityfs\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'ipvlan1\x00', &(0x7f0000000500)=@ethtool_link_settings={0x8, 0x0, 0x0, 0x0, 0x40, 0x80, 0xfd, 0x0, 0x0, 0x0, [0x0, 0xffffffff, 0x59, 0x4, 0x8, 0x8]}}) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='select \n', 0x10) 238.614008ms ago: executing program 4 (id=263): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x79) fchdir(r1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 238.389314ms ago: executing program 4 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000040)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb080045000320000140004084b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) 161.978118ms ago: executing program 4 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="a8000000410001000300000000000000030100002a0000003200010003112233445566778899aabb080045000020000140000006b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) 161.65359ms ago: executing program 4 (id=266): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000500)={0xf, {"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", 0x1000}}, 0x1006) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x3c, r4, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3af}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.683493ms ago: executing program 2 (id=267): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x7195173604391e71, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) ioctl$UI_DEV_CREATE(r1, 0x5501) 0s ago: executing program 2 (id=268): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000040)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000b40)={&(0x7f0000000ac0)=[{0x3, 0x1, 0x0, {0x8, 0x7, 0x1}}, {0x4, 0x1, 0x0, {0x4a61, 0xf2, 0x2}}, {0x5, 0x1, 0x0, {0x7fffffffffffffff, 0x6, 0x2}}], 0x3, 0x20, 0x8, 0x9}) syz_open_dev$dri(&(0x7f0000000b80), 0x3, 0x101001) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000bc0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4c, &(0x7f0000000c40)={@multicast1, @broadcast, @multicast1}, 0xc) r3 = syz_open_dev$ndb(&(0x7f0000000c80), 0x0, 0x100) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400401, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000d00)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000d40)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000dc0)={'\x00', 0xfffb, 0x6, 0x74, 0xc, 0xda1, r5}) r6 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) r7 = open_tree(r6, &(0x7f0000000e80)='./file0\x00', 0xd001) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000ec0)={0x7, [0x1000, 0x2, 0x1, 0x3, 0x5, 0x4, 0x5]}, &(0x7f0000000f00)=0x12) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000f40)) fcntl$notify(r2, 0x402, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) r9 = accept$inet6(r7, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001000)=0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000001180)={{r4, &(0x7f0000001040)='./binderfs/binder_logs/proc\x00', 0x4001, &(0x7f0000001080)={@align=0x5, {0xfffb, 0x6, 0xdc, 0x6}}, 0x3, &(0x7f00000010c0), &(0x7f0000001100)=0x1}, {[0x0, 0x2, 0x7, 0x10000]}, 0x2, 0x2d, &(0x7f0000001140)=""/45}) syz_emit_ethernet(0xc4, &(0x7f0000001200)={@remote, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0xaa, 0xab, '#O', "d85992", 0xd, "9f87c1a9d34d9af523a003ba314dca84a3854258472ca41dca85b0f86fad3139857fe7de409270cb43a27ec71723a67719daa246a4f00ea32b9f3d86be0379f7682b87d2938cd5cc4fd369c204711ac75c5a2dd77e5f7a8c0c396e84acb9cbd8e9a0d21799051ed338d62d40cda506aba3462288d5d5f2461c37ef0e81c1c1e424856d7efb31a05194f15803c1566398dc85b3703ad33a0bcfdf4e4936440f7b83e358a4b366ada23f"}}}}}, &(0x7f0000001300)={0x0, 0x4, [0x6a1, 0xffb, 0x791, 0xdaa]}) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000001340)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001380)=0x28) ioctl$CDROM_SEND_PACKET(r7, 0x5393, &(0x7f0000001540)={"2c01138c00dff85be3ef9dd8", &(0x7f00000013c0)="367d1b7131c2440edc85a980d99d17d2328946382e2fa03f7e8f1cb091deb181d517767d8259c8ab0be5af5f82157b72b9730d910d5f5adcfbadff949cb69c588654a247d03928930e05fd5dd748cef005e0762dc2f91c9a5ab82e16d2d4ea1d3bc8537ba554f80591989b6a932bde42d6e22d7952585edc04a2e76d0d3b7245592f06ac783cbde02c92f8f4d31731fc85d13841a204167e8604b361bf5fd928ee5700fcbb7b27d5d95d6a87de31052c36baa0c8d690eedf2e12a5a2dee378b0bcaab5b50e9e29063a54524c6ce9cb2e2bb07ce9a4a0c4920f1d5c3b4f7c4c", 0xdf, 0xffff8000, &(0x7f00000014c0)={0x64, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, "7506abe4", 0xfc, "919791ca", 0x5, 0x9, 0x8, "0894e7", "ec1b83770b58aebbec98834bf451a90ad4fc41aa1e53504a7c967b08f7b4291efcca3c658ff6eb404cd1e726e3c8"}, 0x1, 0x1, 0x800, &(0x7f0000001500)}) ioctl$TIOCNOTTY(r10, 0x5422) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000001580)) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f00000015c0)={0x9, 0x8}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001600)=r8, 0x4) fchownat(r10, &(0x7f0000001640)='./file0\x00', 0x0, 0x0, 0x400) 0s ago: executing program 2 (id=269): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000600)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010040aa11f6bbf44d00000000008984", 0x9d}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000540)=[r1], 0x0, 0x400001d7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='source', &(0x7f0000000580)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x120) read(r6, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000100)={&(0x7f0000000140)=[r1], 0x0, 0x100000000000001, 0x1, 0x3}) kernel console output (not intermixed with test programs): 779] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.097937][ T43] audit: type=1400 audit(1794129494.980:150): avc: denied { relabelto } for pid=5779 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 44.169225][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.533897][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 48.533913][ T43] audit: type=1400 audit(1794129500.410:154): avc: denied { execmem } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.793893][ T43] audit: type=1400 audit(1794129500.670:155): avc: denied { create } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.794605][ T43] audit: type=1400 audit(1794129500.670:156): avc: denied { read write } for pid=5785 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.795149][ T43] audit: type=1400 audit(1794129500.680:157): avc: denied { open } for pid=5786 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.810484][ T43] audit: type=1400 audit(1794129500.690:158): avc: denied { ioctl } for pid=5786 comm="syz-executor" path="socket:[3532]" dev="sockfs" ino=3532 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.823311][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.824515][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.828835][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.830324][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.831226][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.831737][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.833604][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.836511][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.839703][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.841039][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.841583][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.842702][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.843578][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.844035][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.846599][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.848170][ T43] audit: type=1400 audit(1794129500.720:159): avc: denied { read } for pid=5785 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.848208][ T43] audit: type=1400 audit(1794129500.720:160): avc: denied { open } for pid=5785 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.849147][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.850574][ T43] audit: type=1400 audit(1794129500.730:161): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.850781][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.853554][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.853600][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.853973][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.858095][ T43] audit: type=1400 audit(1794129500.740:162): avc: denied { module_request } for pid=5785 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.875544][ T43] audit: type=1400 audit(1794129500.760:163): avc: denied { mounton } for pid=5788 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.062742][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.063574][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.069691][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.139774][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 49.153634][ T5788] infiniband rxe0: set active [ 49.154978][ T5786] rxe0: rxe_newlink: already configured on rxe_eth0 [ 49.156198][ T5788] infiniband rxe0: added rxe_eth0 [ 49.160874][ T5787] rxe0: rxe_newlink: already configured on rxe_eth0 [ 49.161430][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.177613][ T5788] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 49.177635][ T5788] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 49.177655][ T5788] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 49.201591][ T5788] RDS/IB: rxe0: added [ 49.201807][ T5788] smc: adding ib device rxe0 with port count 1 [ 49.201845][ T5788] smc: ib device rxe0 port 1 has no pnetid [ 49.210034][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.215668][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.351998][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.486358][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.626729][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.639114][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.639178][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.639263][ T5785] bridge_slave_0: entered allmulticast mode [ 49.640386][ T5785] bridge_slave_0: entered promiscuous mode [ 49.661258][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.661382][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.661490][ T5785] bridge_slave_1: entered allmulticast mode [ 49.663227][ T5785] bridge_slave_1: entered promiscuous mode [ 49.725543][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.730674][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.766337][ T5785] team0: Port device team_slave_0 added [ 49.768787][ T5785] team0: Port device team_slave_1 added [ 49.798837][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.798853][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.798872][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.800889][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.800898][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.800909][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.942189][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.942321][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.942575][ T5786] bridge_slave_0: entered allmulticast mode [ 49.943679][ T5786] bridge_slave_0: entered promiscuous mode [ 49.963047][ T5785] hsr_slave_0: entered promiscuous mode [ 49.963839][ T5785] hsr_slave_1: entered promiscuous mode [ 49.973758][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.973833][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.974583][ T5786] bridge_slave_1: entered allmulticast mode [ 49.975935][ T5786] bridge_slave_1: entered promiscuous mode [ 49.998981][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.014610][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.088265][ T5786] team0: Port device team_slave_0 added [ 50.120318][ T5786] team0: Port device team_slave_1 added [ 50.177718][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.177730][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.177742][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.180889][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.181045][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.181302][ T5787] bridge_slave_0: entered allmulticast mode [ 50.182392][ T5787] bridge_slave_0: entered promiscuous mode [ 50.188327][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.188337][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.188348][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.197955][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.198094][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.198189][ T5787] bridge_slave_1: entered allmulticast mode [ 50.199390][ T5787] bridge_slave_1: entered promiscuous mode [ 50.250229][ T5786] hsr_slave_0: entered promiscuous mode [ 50.251052][ T5786] hsr_slave_1: entered promiscuous mode [ 50.251497][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 50.251508][ T5786] Cannot create hsr debugfs directory [ 50.267429][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.289839][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.350178][ T5787] team0: Port device team_slave_0 added [ 50.352505][ T5787] team0: Port device team_slave_1 added [ 50.419253][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.419269][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.419287][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.439836][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.439851][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.439867][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.451950][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.461855][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.488496][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.492011][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.492748][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.496315][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.498752][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.498857][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.498923][ T5788] bridge_slave_0: entered allmulticast mode [ 50.499600][ T5788] bridge_slave_0: entered promiscuous mode [ 50.524489][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.531180][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.531713][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.531784][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.532068][ T5788] bridge_slave_1: entered allmulticast mode [ 50.533276][ T5788] bridge_slave_1: entered promiscuous mode [ 50.586931][ T5787] hsr_slave_0: entered promiscuous mode [ 50.588174][ T5787] hsr_slave_1: entered promiscuous mode [ 50.588753][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 50.588766][ T5787] Cannot create hsr debugfs directory [ 50.619909][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.631622][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.702132][ T5788] team0: Port device team_slave_0 added [ 50.715979][ T5788] team0: Port device team_slave_1 added [ 50.766844][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.766859][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.766874][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.768133][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.768145][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.768160][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.851403][ T5788] hsr_slave_0: entered promiscuous mode [ 50.852190][ T5788] hsr_slave_1: entered promiscuous mode [ 50.853172][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 50.853190][ T5788] Cannot create hsr debugfs directory [ 50.859405][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.863034][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.864229][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.867612][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.868779][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.874100][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.901378][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.904736][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.915404][ T5790] Bluetooth: hci3: command tx timeout [ 50.915413][ T67] Bluetooth: hci0: command tx timeout [ 50.916121][ T5795] Bluetooth: hci1: command tx timeout [ 50.916283][ T5145] Bluetooth: hci2: command tx timeout [ 51.014467][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.017872][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.029097][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.032844][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.043581][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.047168][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.047561][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.052091][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.098073][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.151683][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.155755][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.156419][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.160786][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.164546][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.168776][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.172696][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.179594][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.179706][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.180477][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.183211][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.203495][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.203575][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.237382][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.265186][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.277669][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.299267][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.299409][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.315423][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.315503][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.341506][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.360416][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.360509][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.393215][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.393305][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.411899][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.454331][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.478130][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.478207][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.486933][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.487008][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.659551][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.699753][ T5785] veth0_vlan: entered promiscuous mode [ 51.708867][ T5785] veth1_vlan: entered promiscuous mode [ 51.725292][ T5785] veth0_macvtap: entered promiscuous mode [ 51.729531][ T5785] veth1_macvtap: entered promiscuous mode [ 51.738106][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.760200][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.765653][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.769306][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.789706][ T5787] veth0_vlan: entered promiscuous mode [ 51.814822][ T5787] veth1_vlan: entered promiscuous mode [ 51.826916][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.828050][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.828082][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.839502][ T5786] veth0_vlan: entered promiscuous mode [ 51.851916][ T5786] veth1_vlan: entered promiscuous mode [ 51.861951][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.882424][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.882436][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.905860][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.905873][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.916026][ T5786] veth0_macvtap: entered promiscuous mode [ 51.918362][ T5787] veth0_macvtap: entered promiscuous mode [ 51.929766][ T5786] veth1_macvtap: entered promiscuous mode [ 51.933530][ T5787] veth1_macvtap: entered promiscuous mode [ 51.957723][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.958875][ T5788] veth0_vlan: entered promiscuous mode [ 51.960007][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.972748][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.974172][ T5788] veth1_vlan: entered promiscuous mode [ 51.980750][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.015667][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.017664][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.061959][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.061977][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.087039][ T5788] veth0_macvtap: entered promiscuous mode [ 52.087118][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.087130][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.114838][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.114856][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.119791][ T5788] veth1_macvtap: entered promiscuous mode [ 52.140782][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.140803][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.149005][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.150118][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.158586][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.166825][ T1134] ata1.00: exception Emask 0x0 SAct 0x40 SErr 0x0 action 0x6 [ 52.166846][ T1134] ata1.00: waking up from sleep [ 52.166893][ T1134] ata1: hard resetting link [ 52.171384][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.185683][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.185851][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.185950][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.197942][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.205871][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206188][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206405][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206631][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206656][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206679][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.216518][ T5951] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 52.238196][ T5951] netlink: 'syz.3.4': attribute type 19 has an invalid length. [ 52.241044][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.241062][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.262532][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.262546][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.361188][ T5958] netlink: 'syz.1.2': attribute type 19 has an invalid length. [ 52.361201][ T5958] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 52.381323][ T5958] FAULT_INJECTION: forcing a failure. [ 52.381323][ T5958] name failslab, interval 1, probability 0, space 0, times 1 [ 52.381344][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 52.381356][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.381362][ T5958] Call Trace: [ 52.381366][ T5958] [ 52.381372][ T5958] dump_stack_lvl+0x100/0x190 [ 52.381393][ T5958] should_fail_ex.cold+0x5/0xa [ 52.381410][ T5958] should_failslab+0xc2/0x120 [ 52.381424][ T5958] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.381440][ T5958] ? find_held_lock+0x2b/0x80 [ 52.381451][ T5958] ? tipc_conn_alloc+0x48/0x590 [ 52.381464][ T5958] tipc_conn_alloc+0x48/0x590 [ 52.381476][ T5958] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 52.381489][ T5958] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 52.381502][ T5958] ? net_generic+0xea/0x2a0 [ 52.381516][ T5958] tipc_group_create+0x4ab/0x660 [ 52.381531][ T5958] tipc_setsockopt+0x611/0xe30 [ 52.381547][ T5958] ? __pfx_tipc_setsockopt+0x10/0x10 [ 52.381563][ T5958] ? __fget_files+0x215/0x3d0 [ 52.381585][ T5958] ? selinux_socket_setsockopt+0x6a/0x80 [ 52.381597][ T5958] ? __pfx_tipc_setsockopt+0x10/0x10 [ 52.381614][ T5958] do_sock_setsockopt+0xf3/0x1d0 [ 52.381632][ T5958] __sys_setsockopt+0x195/0x220 [ 52.381647][ T5958] __x64_sys_setsockopt+0xbd/0x160 [ 52.381659][ T5958] ? do_syscall_64+0xae/0x790 [ 52.381671][ T5958] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.381683][ T5958] do_syscall_64+0x123/0x790 [ 52.381696][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.381707][ T5958] RIP: 0033:0x7f9470b9fb19 [ 52.381718][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.381728][ T5958] RSP: 002b:00007f946edee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.381739][ T5958] RAX: ffffffffffffffda RBX: 00007f9470e25fa0 RCX: 00007f9470b9fb19 [ 52.381745][ T5958] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 52.381751][ T5958] RBP: 00007f9470c37b70 R08: 000000000000002e R09: 0000000000000000 [ 52.381757][ T5958] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 52.381762][ T5958] R13: 00007f9470e26038 R14: 00007f9470e25fa0 R15: 00007fffb6799da8 [ 52.381776][ T5958] [ 52.383354][ T5962] netlink: 'syz.3.5': attribute type 30 has an invalid length. [ 52.396340][ T5962] bond1: option arp_missed_max: invalid value (0) [ 52.396359][ T5962] bond1: option arp_missed_max: allowed values 1 - 255 [ 52.403019][ T5962] bond1 (unregistering): Released all slaves [ 52.422700][ T5966] gadgetfs: bound to dummy_udc driver [ 52.500324][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 52.504422][ T1134] ata1.00: configured for UDMA/100 [ 52.504658][ T1134] ata1: EH complete [ 52.529669][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 52.530436][ T5978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5978 comm=syz.3.8 [ 52.538575][ T5968] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 52.538588][ T5968] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 52.711553][ T5989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.760511][ T5993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.985222][ T5145] Bluetooth: hci0: command tx timeout [ 52.995732][ T5145] Bluetooth: hci2: command tx timeout [ 52.995758][ T5145] Bluetooth: hci1: command tx timeout [ 52.995773][ T5145] Bluetooth: hci3: command tx timeout [ 53.004974][ T5943] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.156084][ T5943] usb 6-1: device descriptor read/64, error -71 [ 53.395317][ T5943] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.525043][ T5943] usb 6-1: device descriptor read/64, error -71 [ 53.567714][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 53.572530][ T5997] xfrm1: entered promiscuous mode [ 53.572548][ T5997] xfrm1: entered allmulticast mode [ 53.574770][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 53.575397][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 53.608684][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15'. [ 53.609843][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 53.609857][ T43] audit: type=1400 audit(1794129505.490:225): avc: denied { create } for pid=5998 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.612731][ T43] audit: type=1400 audit(1794129505.490:226): avc: denied { prog_run } for pid=5998 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.635851][ T5943] usb usb6-port1: attempt power cycle [ 53.669442][ T6000] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 53.669942][ T43] audit: type=1400 audit(1794129505.550:227): avc: denied { ioctl } for pid=5998 comm="syz.0.15" path="socket:[9215]" dev="sockfs" ino=9215 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.672157][ T43] audit: type=1400 audit(1794129505.550:228): avc: denied { mmap_zero } for pid=5998 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 53.805895][ T43] audit: type=1400 audit(1794129505.690:229): avc: denied { map_create } for pid=6001 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.859283][ T43] audit: type=1400 audit(1794129505.740:230): avc: denied { create } for pid=6001 comm="syz.0.16" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.862284][ T43] audit: type=1400 audit(1794129505.740:231): avc: denied { read write } for pid=6001 comm="syz.0.16" name="md0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.862315][ T43] audit: type=1400 audit(1794129505.740:232): avc: denied { open } for pid=6001 comm="syz.0.16" path="/5/md0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.877212][ T6002] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.877309][ T6002] block device autoloading is deprecated and will be removed. [ 53.879147][ T43] audit: type=1400 audit(1794129505.760:233): avc: denied { ioctl } for pid=6001 comm="syz.0.16" path="/5/md0" dev="tmpfs" ino=45 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.978517][ T43] audit: type=1400 audit(1794129505.860:234): avc: denied { append } for pid=6001 comm="syz.0.16" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.985021][ T5943] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 53.994971][ T6002] md: md0 stopped. [ 54.005532][ T5943] usb 6-1: device descriptor read/8, error -71 [ 54.254936][ T5943] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 54.285442][ T5943] usb 6-1: device descriptor read/8, error -71 [ 54.395615][ T5943] usb usb6-port1: unable to enumerate USB device [ 54.548257][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 54.548348][ T6009] bridge_slave_0: default FDB implementation only supports local addresses [ 55.065897][ T5145] Bluetooth: hci3: command tx timeout [ 55.065942][ T5145] Bluetooth: hci2: command tx timeout [ 55.065945][ T5790] Bluetooth: hci1: command tx timeout [ 55.065954][ T5145] Bluetooth: hci0: command tx timeout [ 55.450672][ T5969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.497395][ T6022] ======================================================= [ 55.497395][ T6022] WARNING: The mand mount option has been deprecated and [ 55.497395][ T6022] and is ignored by this kernel. Remove the mand [ 55.497395][ T6022] option from the mount to silence this warning. [ 55.497395][ T6022] ======================================================= [ 55.527294][ T6023] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 55.527864][ T6023] syz_tun: entered promiscuous mode [ 55.533403][ T6023] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 55.566084][ T6025] bond1 (unregistering): Released all slaves [ 55.613842][ T6035] xt_hashlimit: size too large, truncated to 1048576 [ 55.690931][ T6041] device-mapper: table: 248:0: snapshot: Cannot get COW device (-ENOENT) [ 55.690955][ T6041] device-mapper: ioctl: error adding target to table [ 55.768700][ T6048] Zero length message leads to an empty skb [ 55.803999][ T6053] netlink: 144 bytes leftover after parsing attributes in process `syz.2.30'. [ 55.825058][ T5789] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.849724][ T59] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 55.867685][ T59] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input5 [ 55.878653][ T59] sony 0005:054C:03D5.0002: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 55.919804][ T6067] overlay: ./file2 is not a directory [ 55.934673][ T6066] fido_id[6066]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.995981][ T5789] usb 8-1: Using ep0 maxpacket: 8 [ 55.996462][ T5789] usb 8-1: New USB device found: idVendor=046d, idProduct=08b2, bcdDevice=12.bf [ 55.997963][ T5789] usb 8-1: config 14 has an invalid interface number: 166 but max is 0 [ 55.997977][ T5789] usb 8-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 55.997985][ T5789] usb 8-1: config 14 has no interface number 0 [ 55.998003][ T5789] usb 8-1: config 14 interface 166 altsetting 15 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 55.998015][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 55.998026][ T5789] usb 8-1: config 14 interface 166 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 16 [ 55.998036][ T5789] usb 8-1: config 14 interface 166 altsetting 15 bulk endpoint 0xD has invalid maxpacket 1023 [ 55.998047][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 55.998056][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 55.998066][ T5789] usb 8-1: config 14 interface 166 altsetting 15 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 55.998078][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 55.998088][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 55.998099][ T5789] usb 8-1: config 14 interface 166 altsetting 15 endpoint 0x8B has an invalid bInterval 37, changing to 7 [ 55.998110][ T5789] usb 8-1: config 14 interface 166 altsetting 15 endpoint 0x8B has invalid maxpacket 10036, setting to 1024 [ 55.998122][ T5789] usb 8-1: config 14 interface 166 altsetting 15 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 55.998134][ T5789] usb 8-1: config 14 interface 166 has no altsetting 0 [ 55.999652][ T5789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.999668][ T5789] usb 8-1: Product: ␉ [ 55.999677][ T5789] usb 8-1: Manufacturer: Ї [ 55.999687][ T5789] usb 8-1: SerialNumber: и [ 56.003273][ T6032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.003323][ T6032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.217947][ T5789] usb 8-1: USB disconnect, device number 2 [ 56.267049][ T6087] comedi comedi0: dt2817: I/O base address or length out of range [ 56.717255][ T6103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.865846][ T6116] device-mapper: ioctl: The device has no table. [ 56.870171][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.976409][ T6119] xt_SECMARK: invalid mode: 2 [ 56.979692][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.030236][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.031854][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.032333][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.033959][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.040401][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.058820][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.128168][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.145033][ T5790] Bluetooth: hci1: command tx timeout [ 57.145056][ T5790] Bluetooth: hci2: command tx timeout [ 57.152517][ T6142] FAULT_INJECTION: forcing a failure. [ 57.152517][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 57.152545][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.2.51 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.152569][ T6142] Tainted: [L]=SOFTLOCKUP [ 57.152575][ T6142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.152586][ T6142] Call Trace: [ 57.152593][ T6142] [ 57.152600][ T6142] dump_stack_lvl+0x100/0x190 [ 57.152657][ T6142] should_fail_ex.cold+0x5/0xa [ 57.152687][ T6142] should_failslab+0xc2/0x120 [ 57.152709][ T6142] __kmalloc_cache_noprof+0x91/0x6d0 [ 57.152735][ T6142] ? find_held_lock+0x2b/0x80 [ 57.152751][ T6142] ? alloc_fs_context+0x57/0xf40 [ 57.152770][ T6142] alloc_fs_context+0x57/0xf40 [ 57.152782][ T6142] ? __get_fs_type+0xe3/0x200 [ 57.152808][ T6142] path_mount+0xf59/0x2850 [ 57.152836][ T6142] ? __pfx_path_mount+0x10/0x10 [ 57.152860][ T6142] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.152883][ T6142] ? putname+0xb1/0x110 [ 57.152903][ T6142] ? kmem_cache_free+0x127/0x6c0 [ 57.152961][ T6142] ? __x64_sys_mount+0x293/0x310 [ 57.152995][ T6142] __x64_sys_mount+0x293/0x310 [ 57.153023][ T6142] ? __pfx___x64_sys_mount+0x10/0x10 [ 57.153055][ T6142] do_syscall_64+0x123/0x790 [ 57.153078][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.153097][ T6142] RIP: 0033:0x7f546bf9fb19 [ 57.153112][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.153128][ T6142] RSP: 002b:00007f546ced2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.153146][ T6142] RAX: ffffffffffffffda RBX: 00007f546c225fa0 RCX: 00007f546bf9fb19 [ 57.153158][ T6142] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 00002000000003c0 [ 57.153170][ T6142] RBP: 00007f546c037b70 R08: 0000200000000540 R09: 0000000000000000 [ 57.153181][ T6142] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 57.153191][ T6142] R13: 00007f546c226038 R14: 00007f546c225fa0 R15: 00007ffcf43369a8 [ 57.153215][ T6142] [ 57.157367][ T5790] Bluetooth: hci0: command tx timeout [ 57.330162][ T14] bridge_slave_1: left allmulticast mode [ 57.330196][ T14] bridge_slave_1: left promiscuous mode [ 57.330934][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.338830][ T14] bridge_slave_0: left allmulticast mode [ 57.338853][ T14] bridge_slave_0: left promiscuous mode [ 57.339051][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.417585][ T6162] Bluetooth: MGMT ver 1.23 [ 57.456607][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.460060][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.461257][ T14] bond0 (unregistering): Released all slaves [ 57.470966][ T6125] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.589651][ T6167] device-mapper: raid: Choosing default region size of 4MiB [ 57.589930][ T6167] device-mapper: raid: New device injected into existing raid set without 'delta_disks' or 'rebuild' parameter specified [ 57.694953][ T6179] veth0_vlan: entered allmulticast mode [ 57.706887][ T6179] veth0_vlan: left allmulticast mode [ 57.711086][ T5498] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.826674][ T6191] FAULT_INJECTION: forcing a failure. [ 57.826674][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 57.826695][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.3.60 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.826711][ T6191] Tainted: [L]=SOFTLOCKUP [ 57.826715][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.826722][ T6191] Call Trace: [ 57.826726][ T6191] [ 57.826731][ T6191] dump_stack_lvl+0x100/0x190 [ 57.826752][ T6191] should_fail_ex.cold+0x5/0xa [ 57.826772][ T6191] should_failslab+0xc2/0x120 [ 57.826786][ T6191] __kmalloc_cache_node_noprof+0x94/0x710 [ 57.826798][ T6191] ? blkg_alloc+0xbd/0xf80 [ 57.826812][ T6191] blkg_alloc+0xbd/0xf80 [ 57.826824][ T6191] ? mark_held_locks+0x40/0x70 [ 57.826840][ T6191] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.826854][ T6191] blkg_conf_prep+0x46e/0xf10 [ 57.826872][ T6191] tg_set_conf.isra.0+0x1ed/0x510 [ 57.826888][ T6191] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 57.826906][ T6191] ? kernfs_root+0xf8/0x2a0 [ 57.826925][ T6191] cgroup_file_write+0x1e6/0x8a0 [ 57.826936][ T6191] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 57.826951][ T6191] ? __pfx_cgroup_file_write+0x10/0x10 [ 57.826961][ T6191] ? __kmalloc_noprof+0x350/0x840 [ 57.826981][ T6191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 57.826993][ T6191] ? __pfx_cgroup_file_write+0x10/0x10 [ 57.827005][ T6191] vfs_write+0x6af/0x1050 [ 57.827025][ T6191] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 57.827040][ T6191] ? __pfx_vfs_write+0x10/0x10 [ 57.827050][ T6191] ? find_held_lock+0x2b/0x80 [ 57.827073][ T6191] ksys_write+0x12a/0x250 [ 57.827085][ T6191] ? __pfx_ksys_write+0x10/0x10 [ 57.827101][ T6191] do_syscall_64+0x123/0x790 [ 57.827117][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.827128][ T6191] RIP: 0033:0x7fe01919fb19 [ 57.827139][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.827149][ T6191] RSP: 002b:00007fe01a0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.827159][ T6191] RAX: ffffffffffffffda RBX: 00007fe019425fa0 RCX: 00007fe01919fb19 [ 57.827166][ T6191] RDX: 0000000000000006 RSI: 0000200000000680 RDI: 000000000000000b [ 57.827172][ T6191] RBP: 00007fe019237b70 R08: 0000000000000000 R09: 0000000000000000 [ 57.827177][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.827183][ T6191] R13: 00007fe019426038 R14: 00007fe019425fa0 R15: 00007fffb5599a68 [ 57.827197][ T6191] [ 57.871699][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.871761][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.871858][ T6125] bridge_slave_0: entered allmulticast mode [ 57.878685][ T6125] bridge_slave_0: entered promiscuous mode [ 57.882040][ T5498] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.883397][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.883513][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.883805][ T6125] bridge_slave_1: entered allmulticast mode [ 57.888823][ T6125] bridge_slave_1: entered promiscuous mode [ 57.918504][ T6167] device-mapper: table: 248:3: raid: Unable to assemble array: Invalid superblocks (-EINVAL) [ 57.918522][ T6167] device-mapper: ioctl: error adding target to table [ 58.007093][ T14] hsr_slave_0: left promiscuous mode [ 58.010405][ T14] hsr_slave_1: left promiscuous mode [ 58.010938][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.010958][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.012595][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.012607][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.026257][ T14] veth1_macvtap: left promiscuous mode [ 58.026295][ T14] veth0_macvtap: left promiscuous mode [ 58.026353][ T14] veth1_vlan: left promiscuous mode [ 58.026412][ T14] veth0_vlan: left promiscuous mode [ 58.146579][ T6209] gadgetfs: bound to dummy_udc driver [ 58.219914][ T14] team0 (unregistering): Port device team_slave_1 removed [ 58.230414][ T14] team0 (unregistering): Port device team_slave_0 removed [ 58.246834][ T6212] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 58.246971][ T6212] Error validating options; rc = [-22] [ 58.331806][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.340762][ T1537] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.342603][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.358547][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 58.358570][ T5790] CPU: 1 UID: 0 PID: 5790 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.358610][ T5790] Tainted: [L]=SOFTLOCKUP [ 58.358617][ T5790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.358629][ T5790] Workqueue: hci0 hci_rx_work [ 58.358660][ T5790] Call Trace: [ 58.358666][ T5790] [ 58.358674][ T5790] dump_stack_lvl+0x100/0x190 [ 58.358712][ T5790] sysfs_warn_dup.cold+0x1c/0x28 [ 58.358740][ T5790] sysfs_create_dir_ns+0x24b/0x2b0 [ 58.358774][ T5790] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 58.358805][ T5790] ? find_held_lock+0x2b/0x80 [ 58.358826][ T5790] ? kobject_add_internal+0x25f/0x930 [ 58.358859][ T5790] ? kobject_add_internal+0x25f/0x930 [ 58.358889][ T5790] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.358916][ T5790] kobject_add_internal+0x2c8/0x930 [ 58.358955][ T5790] kobject_add+0x16a/0x1e0 [ 58.358990][ T5790] ? __pfx_kobject_add+0x10/0x10 [ 58.359020][ T5790] ? class_to_subsys+0x10f/0x150 [ 58.359057][ T5790] ? kobject_put+0xb9/0x640 [ 58.359081][ T5790] ? _raw_spin_unlock+0x28/0x50 [ 58.359113][ T5790] device_add+0x294/0x1970 [ 58.359140][ T5790] ? __pfx_dev_set_name+0x10/0x10 [ 58.359166][ T5790] ? __pfx_device_add+0x10/0x10 [ 58.359191][ T5790] ? mgmt_send_event_skb+0x2fb/0x460 [ 58.359228][ T5790] hci_conn_add_sysfs+0x1a3/0x260 [ 58.359263][ T5790] le_conn_complete_evt+0x12f9/0x2310 [ 58.359293][ T5790] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 58.359321][ T5790] ? hci_event_packet+0x186/0xcd0 [ 58.359348][ T5790] hci_le_conn_complete_evt+0x23c/0x3a0 [ 58.359377][ T5790] ? skb_pull_data+0x15f/0x1e0 [ 58.359404][ T5790] hci_le_meta_evt+0x34a/0x5f0 [ 58.359437][ T5790] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 58.359469][ T5790] hci_event_packet+0x51c/0xcd0 [ 58.359493][ T5790] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 58.359525][ T5790] ? __pfx_hci_event_packet+0x10/0x10 [ 58.359551][ T5790] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.359612][ T5790] hci_rx_work+0x6ea/0x10c0 [ 58.359639][ T5790] process_one_work+0xac7/0x1b10 [ 58.359676][ T5790] ? __pfx_process_one_work+0x10/0x10 [ 58.359697][ T5790] ? lock_acquire+0x1d1/0x380 [ 58.359737][ T5790] ? __pfx_hci_rx_work+0x10/0x10 [ 58.359760][ T5790] worker_thread+0x5ef/0xe50 [ 58.359794][ T5790] ? __pfx_worker_thread+0x10/0x10 [ 58.359816][ T5790] ? kthread+0x13a/0x450 [ 58.359841][ T5790] ? __pfx_worker_thread+0x10/0x10 [ 58.359861][ T5790] kthread+0x373/0x450 [ 58.359885][ T5790] ? __pfx_kthread+0x10/0x10 [ 58.359905][ T5790] ret_from_fork+0x730/0xd60 [ 58.359938][ T5790] ? __pfx_ret_from_fork+0x10/0x10 [ 58.359962][ T5790] ? __switch_to+0x800/0x10e0 [ 58.359988][ T5790] ? __pfx_kthread+0x10/0x10 [ 58.360016][ T5790] ret_from_fork_asm+0x1a/0x30 [ 58.360055][ T5790] [ 58.361223][ T5790] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 58.361306][ T5790] Bluetooth: hci0: failed to register connection device [ 58.363862][ T6125] team0: Port device team_slave_0 added [ 58.366636][ T6125] team0: Port device team_slave_1 added [ 58.379758][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.379769][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.379780][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.381480][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.381493][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.381510][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.444245][ T6125] hsr_slave_0: entered promiscuous mode [ 58.445843][ T6125] hsr_slave_1: entered promiscuous mode [ 58.446495][ T6125] debugfs: 'hsr0' already exists in 'hsr' [ 58.446511][ T6125] Cannot create hsr debugfs directory [ 58.504218][ T6223] device-mapper: table: 248:3: snapshot: Couldn't create exception store (-EINVAL) [ 58.504240][ T6223] device-mapper: ioctl: error adding target to table [ 58.530644][ T1537] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 58.531853][ T1537] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.531877][ T1537] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 58.531904][ T1537] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.642169][ T5498] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.707258][ T6125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.711185][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.711845][ T6125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.714625][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.716542][ T6125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.720012][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.720628][ T6125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.730427][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.752674][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.752728][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.753135][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.753214][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.763196][ T43] kauditd_printk_skb: 108 callbacks suppressed [ 58.763213][ T43] audit: type=1400 audit(1794129766.695:343): avc: denied { write } for pid=6229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.808092][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.817971][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.818864][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.835772][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.839793][ T43] audit: type=1400 audit(1794129766.775:344): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.841114][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.841160][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.847124][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.847197][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.905674][ T5498] 8021q: adding VLAN 0 to HW filter on device eth5 [ 58.946960][ T1537] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -22 [ 58.949627][ T1537] usb 8-1: USB disconnect, device number 3 [ 58.987086][ T43] audit: type=1400 audit(1794129766.925:345): avc: denied { ioctl } for pid=6249 comm="syz.1.70" path="socket:[12518]" dev="sockfs" ino=12518 ioctlcmd=0xc0285840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.065874][ T5790] Bluetooth: hci3: command tx timeout [ 59.073469][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.103583][ T43] audit: type=1400 audit(1794129767.035:346): avc: denied { write } for pid=6262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.167514][ T43] audit: type=1400 audit(1794129767.105:347): avc: denied { write } for pid=6269 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.174464][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.278759][ T43] audit: type=1400 audit(1794129767.215:348): avc: denied { create } for pid=6281 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.280383][ T43] audit: type=1400 audit(1794129767.215:349): avc: denied { map } for pid=6281 comm="syz.1.73" path="pipe:[11928]" dev="pipefs" ino=11928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 59.326487][ T43] audit: type=1400 audit(1794129767.265:350): avc: denied { map_create } for pid=6286 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.327030][ T43] audit: type=1400 audit(1794129767.265:351): avc: denied { map_read map_write } for pid=6286 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.342777][ T43] audit: type=1400 audit(1794129767.275:352): avc: denied { mount } for pid=6286 comm="syz.2.74" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.347398][ T6125] veth0_vlan: entered promiscuous mode [ 59.352153][ T6125] veth1_vlan: entered promiscuous mode [ 59.374267][ T6125] veth0_macvtap: entered promiscuous mode [ 59.383217][ T6125] veth1_macvtap: entered promiscuous mode [ 59.402001][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.408377][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.456679][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.456952][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.456971][ T5871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.456987][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.479704][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.479718][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.499484][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.499503][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.529729][ T6296] bond0: entered promiscuous mode [ 59.529750][ T6296] bond_slave_0: entered promiscuous mode [ 59.529905][ T6296] bond_slave_1: entered promiscuous mode [ 59.533905][ T6296] batadv0: entered promiscuous mode [ 59.541765][ T6296] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 59.543817][ T6296] bond0: left promiscuous mode [ 59.543835][ T6296] bond_slave_0: left promiscuous mode [ 59.544006][ T6296] bond_slave_1: left promiscuous mode [ 59.552587][ T6296] batadv0: left promiscuous mode [ 59.586801][ T6299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.638204][ T6299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.662347][ T6312] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 59.723478][ T6299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.724187][ T6312] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 59.733984][ T6310] syzkaller0: entered promiscuous mode [ 59.734007][ T6310] syzkaller0: entered allmulticast mode [ 59.772906][ T6299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.823030][ T6314] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 59.823050][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 59.850451][ T6314] capability: warning: `syz.2.83' uses 32-bit capabilities (legacy support in use) [ 59.865100][ T42] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 59.894922][ T5871] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.905353][ T14] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.905795][ T14] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.906034][ T14] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.994938][ T5943] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 60.029879][ T42] usb 9-1: unable to get BOS descriptor or descriptor too short [ 60.029924][ T42] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 60.030856][ T42] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 60.030877][ T42] usb 9-1: config 142 descriptor has 1 excess byte, ignoring [ 60.030891][ T42] usb 9-1: config 142 has no interface number 0 [ 60.030921][ T42] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 60.030941][ T42] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 60.030960][ T42] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 60.030977][ T42] usb 9-1: config 142 interface 251 has no altsetting 0 [ 60.033605][ T42] usb 9-1: string descriptor 0 read error: -22 [ 60.033712][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.040069][ T6308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.040216][ T6308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.042169][ T42] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 60.053197][ T42] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 60.145391][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 60.156980][ T5943] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.157019][ T5943] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 60.157877][ T5943] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 60.157903][ T5943] usb 6-1: can't read configurations, error -71 [ 60.346919][ T3416] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.495658][ T3416] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 60.496634][ T3416] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.496666][ T3416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.715856][ T3416] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 60.722538][ T3416] wwan wwan0: port wwan0qmi0 attached [ 60.760023][ T6308] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 60.760050][ T6308] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 60.760274][ C0] usb 9-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 60.946969][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.963444][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.963510][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.964466][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.964482][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.965075][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.965091][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.965645][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.965662][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.965870][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.965885][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.966092][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.966107][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.966315][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.966328][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.966546][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.966558][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.966781][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.966796][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 60.966999][ C1] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 60.967013][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 61.007918][ T3416] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, ea:36:0f:b1:9b:cd [ 61.012892][ T3416] usb 8-1: USB disconnect, device number 4 [ 61.013017][ C1] qmi_wwan 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 61.017039][ T3416] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 61.037679][ T5213] usb 9-1: USB disconnect, device number 2 [ 61.044383][ T5213] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 61.044759][ T5213] cypress_m8 9-1:142.251: device disconnected [ 61.070870][ T3416] wwan wwan0: port wwan0qmi0 disconnected [ 61.115722][ T30] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 61.116764][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.116799][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.145095][ T5790] Bluetooth: hci3: command tx timeout [ 61.326771][ T30] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 61.333654][ T30] wwan wwan0: port wwan0qmi0 attached [ 61.375742][ T5943] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 61.536120][ T5943] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 61.536959][ T5943] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 61.536972][ T5943] usb 6-1: config 1 has no interface number 0 [ 61.540141][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.540161][ T5943] usb 6-1: Product: syz [ 61.540172][ T5943] usb 6-1: Manufacturer: syz [ 61.540183][ T5943] usb 6-1: SerialNumber: syz [ 61.551769][ T5943] usb 6-1: 3:1 : does not exist [ 61.551790][ T5943] usb 6-1: 3:2 : does not exist [ 61.594682][ T6343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.87'. [ 61.598227][ T6342] FAULT_INJECTION: forcing a failure. [ 61.598227][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 61.598252][ T6342] CPU: 2 UID: 0 PID: 6342 Comm: syz.4.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.598273][ T6342] Tainted: [L]=SOFTLOCKUP [ 61.598278][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.598287][ T6342] Call Trace: [ 61.598292][ T6342] [ 61.598299][ T6342] dump_stack_lvl+0x100/0x190 [ 61.598330][ T6342] should_fail_ex.cold+0x5/0xa [ 61.598354][ T6342] should_failslab+0xc2/0x120 [ 61.598374][ T6342] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.598400][ T6342] ? __kernfs_new_node+0xd2/0xa10 [ 61.598423][ T6342] __kernfs_new_node+0xd2/0xa10 [ 61.598442][ T6342] ? __pfx___kernfs_new_node+0x10/0x10 [ 61.598460][ T6342] ? lock_acquire+0x1d1/0x380 [ 61.598482][ T6342] ? kernfs_root+0x23/0x2a0 [ 61.598506][ T6342] ? find_held_lock+0x2b/0x80 [ 61.598524][ T6342] ? kernfs_root+0xee/0x2a0 [ 61.598546][ T6342] ? kernfs_root+0xee/0x2a0 [ 61.598574][ T6342] kernfs_new_node+0x194/0x200 [ 61.598591][ T6342] ? __pfx_kernfs_new_node+0x10/0x10 [ 61.598609][ T6342] ? kernfs_add_one+0x213/0xb40 [ 61.598628][ T6342] __kernfs_create_file+0x53/0x350 [ 61.598650][ T6342] sysfs_add_file_mode_ns+0x207/0x3c0 [ 61.598678][ T6342] internal_create_group+0x593/0xfb0 [ 61.598705][ T6342] ? kernfs_create_dir_ns+0x16d/0x2b0 [ 61.598721][ T6342] ? __pfx_internal_create_group+0x10/0x10 [ 61.598745][ T6342] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 61.598766][ T6342] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 61.598788][ T6342] ? find_held_lock+0x2b/0x80 [ 61.598804][ T6342] ? kobject_add_internal+0x25f/0x930 [ 61.598830][ T6342] internal_create_groups+0x9d/0x150 [ 61.598858][ T6342] kobject_add_internal+0x317/0x930 [ 61.598886][ T6342] kobject_init_and_add+0x121/0x180 [ 61.598911][ T6342] ? __pfx_kobject_init_and_add+0x10/0x10 [ 61.598942][ T6342] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 61.598965][ T6342] do_kmem_cache_create+0x6b5/0x7b0 [ 61.598982][ T6342] ? __kmem_cache_create_args+0x1c3/0x440 [ 61.599004][ T6342] __kmem_cache_create_args+0x1e3/0x440 [ 61.599024][ T6342] copy_pid_ns+0xe27/0x10a0 [ 61.599071][ T6342] ? __pfx_copy_pid_ns+0x10/0x10 [ 61.599095][ T6342] ? create_new_namespaces+0x30/0xac0 [ 61.599121][ T6342] create_new_namespaces+0x2aa/0xac0 [ 61.599155][ T6342] unshare_nsproxy_namespaces+0xf6/0x210 [ 61.599179][ T6342] ksys_unshare+0x44f/0x980 [ 61.599200][ T6342] ? __pfx_ksys_unshare+0x10/0x10 [ 61.599233][ T6342] __x64_sys_unshare+0x31/0x40 [ 61.599254][ T6342] do_syscall_64+0x123/0x790 [ 61.599275][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.599292][ T6342] RIP: 0033:0x7f77d499fb19 [ 61.599307][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.599321][ T6342] RSP: 002b:00007f77d5900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.599338][ T6342] RAX: ffffffffffffffda RBX: 00007f77d4c25fa0 RCX: 00007f77d499fb19 [ 61.599348][ T6342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 61.599356][ T6342] RBP: 00007f77d4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.599366][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.599375][ T6342] R13: 00007f77d4c26038 R14: 00007f77d4c25fa0 R15: 00007ffd19167308 [ 61.599399][ T6342] [ 61.627901][ T6342] kobject: kobject_add_internal failed for pid_3 (error: -12 parent: slab) [ 61.627916][ T6342] SLUB: Unable to add cache pid_3 to sysfs [ 61.652152][ T6342] FAULT_INJECTION: forcing a failure. [ 61.652152][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 61.652172][ T6342] CPU: 2 UID: 0 PID: 6342 Comm: syz.4.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.652186][ T6342] Tainted: [L]=SOFTLOCKUP [ 61.652189][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.652195][ T6342] Call Trace: [ 61.652199][ T6342] [ 61.652203][ T6342] dump_stack_lvl+0x100/0x190 [ 61.652226][ T6342] should_fail_ex.cold+0x5/0xa [ 61.652244][ T6342] should_failslab+0xc2/0x120 [ 61.652256][ T6342] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 61.652274][ T6342] ? kasan_save_track+0x14/0x30 [ 61.652284][ T6342] ? __udp_init+0x37/0x90 [ 61.652300][ T6342] kmemdup_noprof+0x29/0x60 [ 61.652311][ T6342] ? __pfx___udp_init+0x10/0x10 [ 61.652322][ T6342] __udp_init+0x37/0x90 [ 61.652335][ T6342] ip_vs_protocol_net_init+0x194/0x300 [ 61.652350][ T6342] __ip_vs_init+0x239/0x520 [ 61.652365][ T6342] ? __pfx___ip_vs_init+0x10/0x10 [ 61.652379][ T6342] ops_init+0x1e2/0x5f0 [ 61.652395][ T6342] setup_net+0x118/0x3a0 [ 61.652409][ T6342] ? __pfx_setup_net+0x10/0x10 [ 61.652423][ T6342] ? bpf_lsm_namespace_init+0x9/0x10 [ 61.652438][ T6342] copy_net_ns+0x340/0x7a0 [ 61.652454][ T6342] create_new_namespaces+0x3ea/0xac0 [ 61.652472][ T6342] unshare_nsproxy_namespaces+0xf6/0x210 [ 61.652488][ T6342] ksys_unshare+0x44f/0x980 [ 61.652501][ T6342] ? __pfx_ksys_unshare+0x10/0x10 [ 61.652521][ T6342] __x64_sys_unshare+0x31/0x40 [ 61.652534][ T6342] do_syscall_64+0x123/0x790 [ 61.652549][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.652559][ T6342] RIP: 0033:0x7f77d499fb19 [ 61.652576][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.652585][ T6342] RSP: 002b:00007f77d5900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.652596][ T6342] RAX: ffffffffffffffda RBX: 00007f77d4c25fa0 RCX: 00007f77d499fb19 [ 61.652602][ T6342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 61.652608][ T6342] RBP: 00007f77d4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.652613][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.652619][ T6342] R13: 00007f77d4c26038 R14: 00007f77d4c25fa0 R15: 00007ffd19167308 [ 61.652633][ T6342] [ 61.683625][ T6353] netlink: 76 bytes leftover after parsing attributes in process `syz.3.94'. [ 61.692165][ T6353] affs: No valid root block on device sr0 [ 61.692763][ T6348] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.757000][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 61.757025][ T6340] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.760696][ T5789] usb 6-1: USB disconnect, device number 8 [ 62.027192][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 62.027259][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 62.099791][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 62.114030][ T6371] warning: `syz.3.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.135633][ T6371] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.143212][ T6371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6371 comm=syz.3.101 [ 62.174003][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.174054][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.555000][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 62.640631][ T6404] 9pnet_virtio: no channels available for device syz [ 62.641286][ T6404] 9pnet_virtio: no channels available for device syz [ 62.641812][ T6404] 9pnet_virtio: no channels available for device syz [ 62.642387][ T6404] 9pnet_virtio: no channels available for device syz [ 62.643064][ T6404] 9pnet_virtio: no channels available for device syz [ 62.643751][ T6404] 9pnet_virtio: no channels available for device syz [ 62.644087][ T6404] 9pnet_virtio: no channels available for device syz [ 62.644407][ T6404] 9pnet_virtio: no channels available for device syz [ 62.644729][ T6404] 9pnet_virtio: no channels available for device syz [ 62.645574][ T6404] 9pnet_virtio: no channels available for device syz [ 62.645952][ T6404] 9pnet_virtio: no channels available for device syz [ 62.646298][ T6404] 9pnet_virtio: no channels available for device syz [ 62.646667][ T6404] 9pnet_virtio: no channels available for device syz [ 62.647008][ T6404] 9pnet_virtio: no channels available for device syz [ 62.647336][ T6404] 9pnet_virtio: no channels available for device syz [ 62.647763][ T6404] 9pnet_virtio: no channels available for device syz [ 62.648131][ T6404] 9pnet_virtio: no channels available for device syz [ 62.648478][ T6404] 9pnet_virtio: no channels available for device syz [ 62.648806][ T6404] 9pnet_virtio: no channels available for device syz [ 62.649183][ T6404] 9pnet_virtio: no channels available for device syz [ 62.649526][ T6404] 9pnet_virtio: no channels available for device syz [ 62.649876][ T6404] 9pnet_virtio: no channels available for device syz [ 62.650205][ T6404] 9pnet_virtio: no channels available for device syz [ 62.650540][ T6404] 9pnet_virtio: no channels available for device syz [ 62.650859][ T6404] 9pnet_virtio: no channels available for device syz [ 62.651206][ T6404] 9pnet_virtio: no channels available for device syz [ 62.651527][ T6404] 9pnet_virtio: no channels available for device syz [ 62.651850][ T6404] 9pnet_virtio: no channels available for device syz [ 62.652186][ T6404] 9pnet_virtio: no channels available for device syz [ 62.652540][ T6404] 9pnet_virtio: no channels available for device syz [ 62.652861][ T6404] 9pnet_virtio: no channels available for device syz [ 62.653236][ T6404] 9pnet_virtio: no channels available for device syz [ 62.653551][ T6404] 9pnet_virtio: no channels available for device syz [ 62.653894][ T6404] 9pnet_virtio: no channels available for device syz [ 62.654221][ T6404] 9pnet_virtio: no channels available for device syz [ 62.654578][ T6404] 9pnet_virtio: no channels available for device syz [ 62.655010][ T6404] 9pnet_virtio: no channels available for device syz [ 62.655352][ T6404] 9pnet_virtio: no channels available for device syz [ 62.655670][ T6404] 9pnet_virtio: no channels available for device syz [ 62.656009][ T6404] 9pnet_virtio: no channels available for device syz [ 62.656318][ T6404] 9pnet_virtio: no channels available for device syz [ 62.656751][ T6404] 9pnet_virtio: no channels available for device syz [ 62.657103][ T6404] 9pnet_virtio: no channels available for device syz [ 62.657412][ T6404] 9pnet_virtio: no channels available for device syz [ 62.657721][ T6404] 9pnet_virtio: no channels available for device syz [ 62.658040][ T6404] 9pnet_virtio: no channels available for device syz [ 62.658344][ T6404] 9pnet_virtio: no channels available for device syz [ 62.658682][ T6404] 9pnet_virtio: no channels available for device syz [ 62.658994][ T6404] 9pnet_virtio: no channels available for device syz [ 62.659323][ T6404] 9pnet_virtio: no channels available for device syz [ 62.659630][ T6404] 9pnet_virtio: no channels available for device syz [ 62.659937][ T6404] 9pnet_virtio: no channels available for device syz [ 62.660255][ T6404] 9pnet_virtio: no channels available for device syz [ 62.660583][ T6404] 9pnet_virtio: no channels available for device syz [ 62.660947][ T6404] 9pnet_virtio: no channels available for device syz [ 62.661348][ T6404] 9pnet_virtio: no channels available for device syz [ 62.661671][ T6404] 9pnet_virtio: no channels available for device syz [ 62.662003][ T6404] 9pnet_virtio: no channels available for device syz [ 62.662323][ T6404] 9pnet_virtio: no channels available for device syz [ 62.662649][ T6404] 9pnet_virtio: no channels available for device syz [ 62.662969][ T6404] 9pnet_virtio: no channels available for device syz [ 62.663289][ T6404] 9pnet_virtio: no channels available for device syz [ 62.663604][ T6404] 9pnet_virtio: no channels available for device syz [ 62.663898][ T6404] 9pnet_virtio: no channels available for device syz [ 62.705005][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 62.706125][ T5943] usb 6-1: New USB device found: idVendor=03f0, idProduct=4116, bcdDevice=c3.b2 [ 62.709872][ T5943] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 62.709900][ T5943] usb 6-1: can't read configurations, error -22 [ 62.845046][ T5943] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 63.004995][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 63.006136][ T5943] usb 6-1: New USB device found: idVendor=03f0, idProduct=4116, bcdDevice=c3.b2 [ 63.007762][ T5943] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 63.007790][ T5943] usb 6-1: can't read configurations, error -22 [ 63.008279][ T5943] usb usb6-port1: attempt power cycle [ 63.234944][ T5790] Bluetooth: hci3: command tx timeout [ 63.293226][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293341][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293437][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293531][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293629][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293719][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293822][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.293915][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.294007][ T6428] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 63.374929][ T5943] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 63.405473][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 63.406052][ T5943] usb 6-1: New USB device found: idVendor=03f0, idProduct=4116, bcdDevice=c3.b2 [ 63.407651][ T5943] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 63.407678][ T5943] usb 6-1: can't read configurations, error -22 [ 63.556595][ T5943] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 63.575684][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 63.576222][ T5943] usb 6-1: New USB device found: idVendor=03f0, idProduct=4116, bcdDevice=c3.b2 [ 63.579449][ T5943] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 63.579481][ T5943] usb 6-1: can't read configurations, error -22 [ 63.579958][ T5943] usb usb6-port1: unable to enumerate USB device [ 63.692922][ T30] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 9a:b4:d6:fc:66:24 [ 63.699113][ T30] usb 7-1: USB disconnect, device number 2 [ 63.719550][ T30] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 63.780101][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 63.780119][ T43] audit: type=1400 audit(1794129771.715:409): avc: denied { execute } for pid=6429 comm="syz.4.116" path="/dev/dsp1" dev="devtmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 63.811649][ T43] audit: type=1400 audit(1794129771.745:410): avc: denied { getopt } for pid=6431 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.860811][ T30] wwan wwan0: port wwan0qmi0 disconnected [ 63.880559][ T43] audit: type=1400 audit(1794129771.815:411): avc: denied { write } for pid=6437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.912435][ T43] audit: type=1400 audit(1794129771.845:412): avc: denied { cmd } for pid=6439 comm="syz.3.118" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 63.951530][ T43] audit: type=1400 audit(1794129771.885:413): avc: denied { write } for pid=6447 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.020747][ T43] audit: type=1400 audit(1794129771.955:414): avc: denied { write } for pid=6451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.067508][ T6455] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 64.088548][ T43] audit: type=1400 audit(1794129772.025:415): avc: denied { write } for pid=6459 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.119715][ T43] audit: type=1400 audit(1794129772.055:416): avc: denied { shutdown } for pid=6461 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.120162][ T43] audit: type=1400 audit(1794129772.055:417): avc: denied { read } for pid=6461 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.806510][ T5878] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 64.956835][ T5878] usb 9-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 64.960952][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 64.961016][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.067185][ T43] audit: type=1400 audit(1794129773.005:418): avc: denied { create } for pid=6493 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.167614][ T6501] device-mapper: raid: Choosing default region size of 4MiB [ 65.168422][ T6502] bridge1: entered promiscuous mode [ 65.168439][ T6502] bridge1: entered allmulticast mode [ 65.178884][ T5878] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 65.190468][ T5878] wwan wwan0: port wwan0qmi0 attached [ 65.227689][ T6508] FAULT_INJECTION: forcing a failure. [ 65.227689][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.227710][ T6508] CPU: 2 UID: 0 PID: 6508 Comm: syz.3.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.227746][ T6508] Tainted: [L]=SOFTLOCKUP [ 65.227751][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.227760][ T6508] Call Trace: [ 65.227774][ T6508] [ 65.227780][ T6508] dump_stack_lvl+0x100/0x190 [ 65.227820][ T6508] should_fail_ex.cold+0x5/0xa [ 65.227847][ T6508] _copy_from_iter+0x1f4/0x16c0 [ 65.227875][ T6508] ? __pfx__copy_from_iter+0x10/0x10 [ 65.227892][ T6508] ? sctp_addto_chunk+0xfa/0x2a0 [ 65.227918][ T6508] ? __asan_memcpy+0x3c/0x60 [ 65.227939][ T6508] ? sctp_make_datafrag_empty+0x1a4/0x230 [ 65.227963][ T6508] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 65.227983][ T6508] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 65.228007][ T6508] sctp_user_addto_chunk+0x84/0x250 [ 65.228024][ T6508] sctp_datamsg_from_user+0x60b/0x1360 [ 65.228058][ T6508] sctp_sendmsg_to_asoc+0x95a/0x1b60 [ 65.228086][ T6508] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 65.228101][ T6508] ? sctp_connect_new_asoc+0x41e/0x770 [ 65.228121][ T6508] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 65.228156][ T6508] sctp_sendmsg+0x1144/0x22e0 [ 65.228181][ T6508] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.228199][ T6508] ? __lock_acquire+0x5a0/0x1f40 [ 65.228220][ T6508] ? __pfx_sock_has_perm+0x10/0x10 [ 65.228252][ T6508] ? import_ubuf+0x1b6/0x220 [ 65.228276][ T6508] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.228296][ T6508] inet_sendmsg+0x11c/0x140 [ 65.228325][ T6508] ____sys_sendmsg+0xa23/0xc30 [ 65.228348][ T6508] ? __pfx_inet_sendmsg+0x10/0x10 [ 65.228370][ T6508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.228396][ T6508] ? futex_unqueue+0x133/0x2c0 [ 65.228434][ T6508] ___sys_sendmsg+0x190/0x1e0 [ 65.228459][ T6508] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.228481][ T6508] ? __pfx___futex_wait+0x10/0x10 [ 65.228501][ T6508] ? futex_hash+0x311/0x400 [ 65.228524][ T6508] ? __fget_files+0x34/0x3d0 [ 65.228563][ T6508] __sys_sendmmsg+0x20c/0x440 [ 65.228586][ T6508] ? __pfx___sys_sendmmsg+0x10/0x10 [ 65.228603][ T6508] ? ksys_write+0x190/0x250 [ 65.228625][ T6508] ? __pfx_do_futex+0x10/0x10 [ 65.228654][ T6508] ? xfd_validate_state+0x129/0x190 [ 65.228680][ T6508] __x64_sys_sendmmsg+0x9c/0x100 [ 65.228698][ T6508] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.228716][ T6508] do_syscall_64+0x123/0x790 [ 65.228737][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.228753][ T6508] RIP: 0033:0x7fe01919fb19 [ 65.228768][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.228781][ T6508] RSP: 002b:00007fe01a0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.228798][ T6508] RAX: ffffffffffffffda RBX: 00007fe019425fa0 RCX: 00007fe01919fb19 [ 65.228809][ T6508] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000009 [ 65.228818][ T6508] RBP: 00007fe019237b70 R08: 0000000000000000 R09: 0000000000000000 [ 65.228827][ T6508] R10: 0000000000048000 R11: 0000000000000246 R12: 0000000000000000 [ 65.228836][ T6508] R13: 00007fe019426038 R14: 00007fe019425fa0 R15: 00007fffb5599a68 [ 65.228860][ T6508] [ 65.359998][ T6516] FAULT_INJECTION: forcing a failure. [ 65.359998][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 65.360034][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.1.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.360050][ T6516] Tainted: [L]=SOFTLOCKUP [ 65.360054][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.360061][ T6516] Call Trace: [ 65.360070][ T6516] [ 65.360075][ T6516] dump_stack_lvl+0x100/0x190 [ 65.360106][ T6516] should_fail_ex.cold+0x5/0xa [ 65.360124][ T6516] should_failslab+0xc2/0x120 [ 65.360142][ T6516] __kmalloc_noprof+0xfc/0x840 [ 65.360159][ T6516] ? cache_create_net+0xa2/0x1f0 [ 65.360178][ T6516] cache_create_net+0xa2/0x1f0 [ 65.360191][ T6516] ip_map_cache_create+0x60/0x130 [ 65.360202][ T6516] ? __pfx_sunrpc_init_net+0x10/0x10 [ 65.360218][ T6516] sunrpc_init_net+0x55/0x1b0 [ 65.360234][ T6516] ops_init+0x1e2/0x5f0 [ 65.360253][ T6516] setup_net+0x118/0x3a0 [ 65.360267][ T6516] ? __pfx_setup_net+0x10/0x10 [ 65.360281][ T6516] ? bpf_lsm_namespace_init+0x9/0x10 [ 65.360295][ T6516] copy_net_ns+0x340/0x7a0 [ 65.360311][ T6516] create_new_namespaces+0x3ea/0xac0 [ 65.360331][ T6516] unshare_nsproxy_namespaces+0xf6/0x210 [ 65.360348][ T6516] ksys_unshare+0x44f/0x980 [ 65.360362][ T6516] ? __pfx_ksys_unshare+0x10/0x10 [ 65.360382][ T6516] __x64_sys_unshare+0x31/0x40 [ 65.360395][ T6516] do_syscall_64+0x123/0x790 [ 65.360409][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.360420][ T6516] RIP: 0033:0x7f9470b9fb19 [ 65.360430][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.360440][ T6516] RSP: 002b:00007f946edee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.360450][ T6516] RAX: ffffffffffffffda RBX: 00007f9470e25fa0 RCX: 00007f9470b9fb19 [ 65.360457][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 65.360463][ T6516] RBP: 00007f9470c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 65.360468][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.360474][ T6516] R13: 00007f9470e26038 R14: 00007f9470e25fa0 R15: 00007fffb6799da8 [ 65.360488][ T6516] [ 65.371069][ T6501] device-mapper: table: 248:4: raid: RAID metadata device lookup failure (-ENOENT) [ 65.371102][ T6501] device-mapper: ioctl: error adding target to table [ 65.417420][ T6516] __nla_validate_parse: 6 callbacks suppressed [ 65.417437][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 65.421561][ T6516] batadv_slave_1: entered promiscuous mode [ 65.421703][ T6516] batadv_slave_1: left promiscuous mode [ 65.457672][ T5878] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, c6:4c:eb:5c:1d:6f [ 65.471112][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 65.476948][ C2] qmi_wwan 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 65.476975][ T5878] usb 9-1: USB disconnect, device number 3 [ 65.486404][ T6523] batadv_slave_1: entered promiscuous mode [ 65.486402][ T5878] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 65.486559][ T6523] batadv_slave_1: left promiscuous mode [ 65.586080][ T5878] wwan wwan0: port wwan0qmi0 disconnected [ 66.198422][ T6565] can0: slcan on ttyS3. [ 66.308857][ T6565] can0 (unregistered): slcan off ttyS3. [ 66.320454][ T6582] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 66.402140][ T6590] vlan0: entered promiscuous mode [ 66.408314][ T6590] team0: Port device vlan0 added [ 66.590020][ T6612] fuse: Unknown parameter 'useëù×r¥ü;²…r_00000000000000000000' [ 66.593835][ T6606] fuse: Unknown parameter '0000000000000000000000500000000000000000000004' [ 66.720647][ T6618] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 66.720856][ T6618] SELinux: failed to load policy [ 66.811888][ T6625] net_ratelimit: 3322 callbacks suppressed [ 66.811923][ T6625] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.819092][ T6625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.160'. [ 67.042710][ T6629] TCP: TCP_TX_DELAY enabled [ 67.412119][ T6642] syz.1.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.653687][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 67.673316][ T6657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.677215][ T6657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=6657 comm=syz.2.166 [ 67.835126][ T10] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 67.865413][ T3416] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 67.910781][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6664 comm=syz.3.170 [ 67.966453][ T6667] netlink: 'syz.3.170': attribute type 21 has an invalid length. [ 67.966467][ T6667] netlink: 156 bytes leftover after parsing attributes in process `syz.3.170'. [ 67.977785][ T6669] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 67.985144][ T10] usb 9-1: Invalid ep0 maxpacket: 64 [ 68.015699][ T3416] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 68.016935][ T3416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 68.016960][ T3416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.016977][ T3416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 68.019528][ T3416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.019550][ T3416] usb 6-1: Product: syz [ 68.019560][ T3416] usb 6-1: Manufacturer: syz [ 68.019570][ T3416] usb 6-1: SerialNumber: syz [ 68.024252][ T3416] usb 6-1: config 0 descriptor?? [ 68.034060][ T5790] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 68.062490][ T6673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.114936][ T10] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 68.231107][ T3416] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 68.240014][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 68.264967][ T10] usb 9-1: Invalid ep0 maxpacket: 64 [ 68.265193][ T10] usb usb9-port1: attempt power cycle [ 68.320238][ T6688] CUSE: unknown device info "" [ 68.320252][ T6688] CUSE: unknown device info "€" [ 68.320257][ T6688] CUSE: unknown device info "" [ 68.320262][ T6688] CUSE: unknown device info "" [ 68.320268][ T6688] CUSE: zero length info key specified [ 68.369916][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.392803][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.409762][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.415370][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.431397][ T5878] usb 6-1: USB disconnect, device number 13 [ 68.432655][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.450771][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.456051][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.459035][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.460773][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.474513][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.487282][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.489294][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.506035][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.528615][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.530826][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.549018][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.571692][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.576422][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.580261][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.585846][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.604916][ T10] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 68.607733][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.625453][ T10] usb 9-1: Invalid ep0 maxpacket: 64 [ 68.635496][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.639715][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.651377][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.664750][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.666502][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.667847][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.670630][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.682965][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.701929][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.702689][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.717933][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.737926][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.741150][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.752977][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.754909][ T10] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 68.768779][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.770433][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.778110][ T10] usb 9-1: Invalid ep0 maxpacket: 64 [ 68.778278][ T10] usb usb9-port1: unable to enumerate USB device [ 68.782158][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.796473][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.798085][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.807611][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.821082][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.822101][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.837333][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.851073][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.852479][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.862521][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.877292][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.878042][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.887358][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.905382][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.907930][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.922681][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.938687][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.940749][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.951200][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.968965][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.970695][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 68.981238][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 68.995896][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 68.998684][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.013761][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.027412][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.028320][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.042104][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.049058][ T6702] netlink: 72 bytes leftover after parsing attributes in process `syz.1.181'. [ 69.049184][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 69.049204][ T6703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 69.054170][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.057211][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.073632][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.082846][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 69.091972][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.095108][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.114314][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.131542][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.133038][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.143455][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.158606][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.159682][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.171356][ T5871] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 69.202808][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.205922][ T6688] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 69.210623][ T6688] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 69.251787][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 69.251803][ T43] audit: type=1400 audit(1794129777.185:467): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 69.284056][ T6710] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6710 comm=syz.2.183 [ 69.285076][ T43] audit: type=1400 audit(1794129777.225:468): avc: denied { create } for pid=6709 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.285805][ T43] audit: type=1400 audit(1794129777.225:469): avc: denied { write } for pid=6709 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.286486][ T6710] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 69.334868][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 69.348601][ T43] audit: type=1400 audit(1794129777.285:470): avc: denied { ioctl } for pid=6716 comm="syz.2.186" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x405c5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.403221][ T6718] input: syz0 as /devices/virtual/input/input6 [ 69.496984][ T42] usb 6-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 69.497978][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.497998][ T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.500628][ T42] usb 6-1: string descriptor 0 read error: -22 [ 69.500721][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.505494][ T42] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 69.505652][ T42] etas_es58x 6-1:1.0: could not retrieve the product info string [ 69.534993][ T1356] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.597530][ T43] audit: type=1400 audit(1794129777.535:471): avc: denied { write } for pid=6720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.638349][ T43] audit: type=1400 audit(1794129777.575:472): avc: denied { write } for pid=6723 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.668473][ T5498] etas_es58x 6-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 69.668985][ C2] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 69.669964][ C2] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 69.670158][ C2] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 69.670347][ C2] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 69.670534][ C2] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 69.670574][ T5498] etas_es58x 6-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 69.708538][ T1356] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 69.709237][ T10] usb 6-1: USB disconnect, device number 14 [ 69.709861][ T1356] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 69.709880][ T1356] usb 8-1: config 1 has no interface number 0 [ 69.711899][ T1356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.711918][ T1356] usb 8-1: Product: syz [ 69.711928][ T1356] usb 8-1: Manufacturer: syz [ 69.711938][ T1356] usb 8-1: SerialNumber: syz [ 69.712773][ T10] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 69.723897][ T1356] usb 8-1: 3:0 : does not exist [ 69.723911][ T1356] usb 8-1: 3:0 : does not exist [ 69.740718][ T43] audit: type=1400 audit(1794129777.675:473): avc: denied { write } for pid=6726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.797902][ T43] audit: type=1400 audit(1794129777.735:474): avc: denied { write } for pid=6729 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.880391][ T43] audit: type=1400 audit(1794129777.815:475): avc: denied { write } for pid=6731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.940694][ T43] audit: type=1400 audit(1794129777.875:476): avc: denied { write } for pid=6734 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.990113][ T5943] usb 8-1: USB disconnect, device number 5 [ 70.563274][ T6769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 70.726821][ T6787] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 70.736798][ T5943] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 70.751328][ T6789] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 70.852299][ T6799] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20000 [ 70.887550][ T5943] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.888237][ T5943] usb 6-1: not running at top speed; connect to a high speed hub [ 70.888262][ T5943] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 70.894925][ T5943] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 70.894950][ T5943] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 70.894966][ T5943] usb 6-1: config 14 has no interface number 0 [ 70.894986][ T5943] usb 6-1: config 14 has no interface number 1 [ 70.895034][ T5943] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 70.895053][ T5943] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 70.895074][ T5943] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 70.895093][ T5943] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 70.895113][ T5943] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 70.895133][ T5943] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.895150][ T5943] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.895169][ T5943] usb 6-1: config 14 interface 57 has no altsetting 0 [ 70.895182][ T5943] usb 6-1: config 14 interface 228 has no altsetting 0 [ 70.897748][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.897770][ T5943] usb 6-1: Product: syz [ 70.897782][ T5943] usb 6-1: Manufacturer: syz [ 70.897793][ T5943] usb 6-1: SerialNumber: syz [ 71.146625][ T6812] NFSD: Failed to start, no listeners configured. [ 71.227853][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.227903][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.253319][ T25] cfg80211: failed to load regulatory.db [ 71.274587][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 71.280565][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 71.330775][ T5943] legousbtower 6-1:14.57: interrupt endpoints not found [ 71.511798][ T6832] overlayfs: failed to get inode (-116) [ 71.512005][ T6832] overlayfs: failed to get inode (-116) [ 71.536440][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 71.544958][ T5943] legousbtower 6-1:14.228: get version request failed: -71 [ 71.545036][ T5943] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 71.550325][ T5943] usb 6-1: USB disconnect, device number 15 [ 71.722629][ T6835] __nla_validate_parse: 65 callbacks suppressed [ 71.722649][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 71.863890][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 71.959347][ T6866] netlink: ct family unspecified [ 72.006943][ T6868] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 72.006971][ T6868] bond1: entered allmulticast mode [ 72.036521][ T6873] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 72.040399][ T6873] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 72.049213][ T30] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 72.066068][ T6823] ceph: No mds server is up or the cluster is laggy [ 72.136275][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 72.147331][ T6888] fuse: Unknown parameter '' [ 72.169871][ T6888] fuse: Unknown parameter '' [ 72.189390][ T6896] ªªªªª»: renamed from vlan0 (while UP) [ 72.340742][ T6901] netlink: 120 bytes leftover after parsing attributes in process `syz.1.220'. [ 72.371296][ T6901] SELinux: class does not define every permission it declares [ 72.371335][ T6901] SELinux: invalid class [ 72.371394][ T6901] SELinux: failed to load policy [ 72.373026][ T6904] netlink: 120 bytes leftover after parsing attributes in process `syz.1.220'. [ 72.389196][ T6907] SELinux: failed to load policy [ 72.449798][ T6913] ip_tables: iptables: counters copy to user failed while replacing table [ 72.465054][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.477834][ T6913] xt_CT: No such helper "pptp" [ 72.636432][ T30] usb 8-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 72.637634][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.637656][ T30] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.640314][ T30] usb 8-1: string descriptor 0 read error: -22 [ 72.640429][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.670030][ T30] etas_es58x 8-1:1.0: Starting (null) (null) (Serial Number (null)) [ 72.670146][ T30] etas_es58x 8-1:1.0: could not retrieve the product info string [ 72.881458][ T6898] etas_es58x 8-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 72.881572][ C2] etas_es58x 8-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 72.881790][ C2] etas_es58x 8-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 72.882057][ C2] etas_es58x 8-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 72.882273][ C2] etas_es58x 8-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 72.882482][ C2] etas_es58x 8-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 72.882539][ T6898] etas_es58x 8-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 72.884290][ T1356] usb 8-1: USB disconnect, device number 6 [ 72.886098][ T1356] etas_es58x 8-1:1.0: Disconnecting (null) (null) [ 73.446165][ T6965] netlink: ct family unspecified [ 73.481523][ T6967] phram: illegal start address [ 73.681458][ T6982] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 73.892349][ T6988] raw_sendmsg: syz.2.238 forgot to set AF_INET. Fix it! [ 74.114974][ T5878] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.150846][ T7050] netlink: ct family unspecified [ 74.260651][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 74.260725][ T43] audit: type=1400 audit(1794129782.195:535): avc: denied { map } for pid=7051 comm="syz.1.243" path="/dev/ublkc0" dev="devtmpfs" ino=2954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.276035][ T43] audit: type=1400 audit(1794129782.205:536): avc: denied { listen } for pid=7053 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.278196][ T43] audit: type=1400 audit(1794129782.215:537): avc: denied { ioctl } for pid=7053 comm="syz.4.244" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.287590][ T5878] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 74.288552][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.288586][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.425084][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.436373][ T43] audit: type=1400 audit(1794129782.375:538): avc: denied { read } for pid=7068 comm="syz.1.245" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.436580][ T7070] syzkaller1: entered promiscuous mode [ 74.436595][ T7070] syzkaller1: entered allmulticast mode [ 74.508805][ T5878] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 74.517563][ T5878] wwan wwan0: port wwan0qmi0 attached [ 74.697312][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 74.744183][ T43] audit: type=1400 audit(1794129782.675:539): avc: denied { checkpoint_restore } for pid=7088 comm="syz.1.248" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.746533][ T7089] sd 0:0:0:0: PR command failed: 1026 [ 74.746569][ T7089] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 74.746659][ T7089] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 74.767914][ C2] wdm_int_callback: 348 callbacks suppressed [ 74.767943][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.767956][ C2] wdm_int_callback: 348 callbacks suppressed [ 74.767966][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.768177][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.768192][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.768417][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.768431][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.768645][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.768659][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.768898][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.768912][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.769131][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.769145][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.769367][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.769380][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.769605][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.769618][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.770127][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.770143][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.770351][ C2] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 74.770359][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 74.817551][ T5878] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, e6:97:97:fc:f9:4d [ 74.821209][ C2] qmi_wwan 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 74.821241][ T5878] usb 8-1: USB disconnect, device number 7 [ 74.828048][ T5878] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 74.860666][ T43] audit: type=1400 audit(1794129782.795:540): avc: denied { mount } for pid=7094 comm="syz.1.249" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.887015][ T7098] overlayfs: failed to resolve './bus': -2 [ 74.887611][ T43] audit: type=1400 audit(1794129782.825:541): avc: denied { mounton } for pid=7094 comm="syz.1.249" path="/file0" dev="bpf" ino=16075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 74.910294][ T5878] wwan wwan0: port wwan0qmi0 disconnected [ 74.958982][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 75.092413][ T43] audit: type=1400 audit(1794129783.025:542): avc: denied { bind } for pid=7114 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.092755][ T43] audit: type=1400 audit(1794129783.025:543): avc: denied { connect } for pid=7114 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.093138][ T43] audit: type=1400 audit(1794129783.025:544): avc: denied { read } for pid=7114 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.125385][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.125590][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.374936][ T5878] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 75.444985][ T59] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 75.526305][ T5878] usb 6-1: New USB device found: idVendor=05c6, idProduct=9080, bcdDevice=25.89 [ 75.530464][ T5878] usb 6-1: config 197 has an invalid interface number: 5 but max is 3 [ 75.530486][ T5878] usb 6-1: config 197 has an invalid interface number: 77 but max is 3 [ 75.530498][ T5878] usb 6-1: config 197 contains an unexpected descriptor of type 0x1, skipping [ 75.530510][ T5878] usb 6-1: config 197 has an invalid interface number: 236 but max is 3 [ 75.530521][ T5878] usb 6-1: config 197 has an invalid interface number: 11 but max is 3 [ 75.530534][ T5878] usb 6-1: config 197 has no interface number 0 [ 75.530543][ T5878] usb 6-1: config 197 has no interface number 1 [ 75.530552][ T5878] usb 6-1: config 197 has no interface number 2 [ 75.530562][ T5878] usb 6-1: config 197 has no interface number 3 [ 75.530607][ T5878] usb 6-1: config 197 interface 77 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 75.530621][ T5878] usb 6-1: config 197 interface 77 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 75.530636][ T5878] usb 6-1: config 197 interface 77 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 75.530652][ T5878] usb 6-1: config 197 interface 77 altsetting 12 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 75.530667][ T5878] usb 6-1: config 197 interface 77 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 75.530685][ T5878] usb 6-1: config 197 interface 236 altsetting 37 has a duplicate endpoint with address 0x5, skipping [ 75.530699][ T5878] usb 6-1: config 197 interface 236 altsetting 37 has a duplicate endpoint with address 0x2, skipping [ 75.530712][ T5878] usb 6-1: config 197 interface 236 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 75.530724][ T5878] usb 6-1: config 197 interface 236 altsetting 37 has a duplicate endpoint with address 0xB, skipping [ 75.530743][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has an endpoint descriptor with address 0x16, changing to 0x6 [ 75.530757][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 75.530770][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 75.530783][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 75.530797][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 75.530811][ T5878] usb 6-1: config 197 interface 11 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 75.530832][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has a duplicate endpoint with address 0x83, skipping [ 75.530846][ T5878] usb 6-1: config 197 interface 11 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 75.530860][ T5878] usb 6-1: config 197 interface 5 has no altsetting 0 [ 75.530871][ T5878] usb 6-1: config 197 interface 77 has no altsetting 0 [ 75.530882][ T5878] usb 6-1: config 197 interface 236 has no altsetting 0 [ 75.530892][ T5878] usb 6-1: config 197 interface 11 has no altsetting 0 [ 75.534105][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.534127][ T5878] usb 6-1: Product: щ [ 75.534138][ T5878] usb 6-1: Manufacturer: ࠄ [ 75.534148][ T5878] usb 6-1: SerialNumber: ဉ [ 75.581147][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.616318][ T59] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 75.617193][ T59] usb 9-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 75.617215][ T59] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.617227][ T59] usb 9-1: config 1 interface 0 has no altsetting 0 [ 75.620054][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.622450][ T59] usb 9-1: Dual-Role OTG device on HNP port [ 75.622687][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.622698][ T59] usb 9-1: Product: syz [ 75.622705][ T59] usb 9-1: Manufacturer: 쭠嫍油ꃧꛜ쵨씠⩓¥昵꿹鯯ᤚ鏆㹀࢚₇♂ล퇰竑툆꠯䜘棘㾾撕쎽ѡᴬ诛䥐嘇㞉ꉋ﹊ᖷ⚢獮媒숲்䧫뛳薞퀟뒔쟂ꭸⵏ㴹ﰞㅁ㟼疳㆒⽁░驶沯㡸駸ࡲ챠₞隸运퇱ーꨕꠟ뉁ᖅ촏戋垁砃篣⟰ݥⲫ㜰옿 [ 75.622720][ T59] usb 9-1: SerialNumber: syz [ 75.746753][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.747492][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.773556][ T5878] cdc_mbim 6-1:197.236: CDC Union missing and no IAD found [ 75.773580][ T5878] cdc_mbim 6-1:197.236: bind() failure [ 75.778958][ T5878] usb 6-1: USB disconnect, device number 16 [ 75.840720][ T7131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.840736][ T7131] block device autoloading is deprecated and will be removed. [ 75.842842][ T59] cdc_ether 9-1:1.0: skipping garbage [ 75.842858][ T59] cdc_ether 9-1:1.0: skipping garbage [ 75.842870][ T59] cdc_ether 9-1:1.0: missing cdc header ether descriptor [ 75.850121][ T59] usb 9-1: USB disconnect, device number 8 [ 75.888281][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.258'. [ 75.888295][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 75.997091][ T7131] md/raid1:md2: active with 1 out of 2 mirrors [ 75.998195][ T7131] md2: detected capacity change from 0 to 5864 [ 76.026100][ T7142] x_tables: duplicate underflow at hook 2 [ 76.264953][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 76.417117][ T25] usb 8-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 76.418111][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.418135][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 76.419966][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.419986][ T25] usb 8-1: Product: syz [ 76.419996][ T25] usb 8-1: Manufacturer: syz [ 76.420006][ T25] usb 8-1: SerialNumber: syz [ 76.422836][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.422925][ T7142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.424325][ T25] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 76.424341][ T25] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 76.424367][ T25] usbserial_generic 8-1:1.0: generic converter detected [ 76.429902][ T25] usb 8-1: generic converter now attached to ttyUSB0 [ 76.627270][ T7142] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 76.630267][ T25] usb 8-1: USB disconnect, device number 8 [ 76.643767][ T25] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 76.648897][ T25] usbserial_generic 8-1:1.0: device disconnected [ 76.684982][ T855] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 76.694295][ T7161] netlink: 'syz.2.269': attribute type 63 has an invalid length. [ 76.694316][ T7161] netlink: 5 bytes leftover after parsing attributes in process `syz.2.269'. [ 76.695922][ T7161] ------------[ cut here ]------------ [ 76.695931][ T7161] 1 [ 76.695937][ T7161] WARNING: mm/slub.c:5459 at ___kmalloc_large_node+0x132/0x170, CPU#0: syz.2.269/7161 [ 76.713268][ T7161] Modules linked in: [ 76.716562][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.2.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.720430][ T7161] Tainted: [L]=SOFTLOCKUP [ 76.722264][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.726693][ T7161] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 76.729713][ T7161] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d cc 42 d6 0f 00 75 0b c6 05 c3 42 d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc [ 76.738053][ T7161] RSP: 0018:ffffc9000663fa60 EFLAGS: 00010246 [ 76.740821][ T7161] RAX: ffffffff85e99664 RBX: 000000010000075c RCX: ffffc900066a1000 [ 76.744300][ T7161] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 000000010000075c [ 76.747940][ T7161] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 00000000400001d7 [ 76.750784][ T7162] CIFS: VFS: UNC: missing share name [ 76.750902][ T7162] CIFS: VFS: Malformed UNC in devname [ 76.751114][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.269'. [ 76.751129][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.269'. [ 76.751141][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.269'. [ 76.766303][ T7161] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 76.769623][ T7161] R13: 00000000ffffffff R14: 000000010000075c R15: ffff8880563d3000 [ 76.772756][ T7161] FS: 00007f546ced26c0(0000) GS:ffff8880d4475000(0000) knlGS:0000000000000000 [ 76.776482][ T7161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.779156][ T7161] CR2: 000000110c3ca485 CR3: 000000002cdac000 CR4: 0000000000352ef0 [ 76.782372][ T7161] Call Trace: [ 76.783836][ T7161] [ 76.785197][ T7161] __kmalloc_large_node_noprof+0x1c/0x70 [ 76.787608][ T7161] __kmalloc_noprof+0x5a3/0x840 [ 76.789688][ T7161] ? avc_has_extended_perms+0x4a5/0x10b0 [ 76.792080][ T7161] ? drm_syncobj_array_find+0x34/0x3a0 [ 76.794386][ T7161] drm_syncobj_array_find+0x34/0x3a0 [ 76.796777][ T7161] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 76.799290][ T7161] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 76.801847][ T7161] ? drm_dev_enter+0x53/0x170 [ 76.804215][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.807488][ T7161] ? drm_dev_exit+0x41/0x60 [ 76.809451][ T7161] ? drm_dev_exit+0x41/0x60 [ 76.811314][ T7161] drm_ioctl_kernel+0x1f3/0x3e0 [ 76.813332][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.816272][ T7161] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 76.818590][ T7161] drm_ioctl+0x5e6/0xc60 [ 76.820435][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.823351][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 76.825587][ T7161] ? __fget_files+0x34/0x3d0 [ 76.827620][ T7161] ? selinux_file_ioctl+0x1e0/0x290 [ 76.829864][ T7161] ? selinux_file_ioctl+0x1e7/0x290 [ 76.832062][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 76.834137][ T7161] __x64_sys_ioctl+0x18e/0x210 [ 76.836318][ T7161] do_syscall_64+0x123/0x790 [ 76.838317][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.840806][ T7161] RIP: 0033:0x7f546bf9fb19 [ 76.842732][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.850917][ T7161] RSP: 002b:00007f546ced2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.854420][ T7161] RAX: ffffffffffffffda RBX: 00007f546c225fa0 RCX: 00007f546bf9fb19 [ 76.857926][ T7161] RDX: 0000200000000400 RSI: 00000000c01864cd RDI: 0000000000000003 [ 76.861256][ T7161] RBP: 00007f546c037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.864680][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.868090][ T7161] R13: 00007f546c226038 R14: 00007f546c225fa0 R15: 00007ffcf43369a8 [ 76.871468][ T7161] [ 76.872859][ T7161] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.875954][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.2.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.880438][ T7161] Tainted: [L]=SOFTLOCKUP [ 76.882258][ T7161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.886588][ T7161] Call Trace: [ 76.888025][ T7161] [ 76.889325][ T7161] dump_stack_lvl+0x100/0x190 [ 76.891320][ T7161] vpanic+0x2dc/0x6f8 [ 76.893049][ T7161] panic+0xd1/0xe0 [ 76.894674][ T7161] ? __pfx_panic+0x10/0x10 [ 76.896601][ T7161] check_panic_on_warn.cold+0x19/0x34 [ 76.898841][ T7161] ? ___kmalloc_large_node+0x132/0x170 [ 76.901213][ T7161] __warn.cold+0x191/0x321 [ 76.903119][ T7161] __report_bug+0x30f/0x440 [ 76.905096][ T7161] ? ___kmalloc_large_node+0x132/0x170 [ 76.907388][ T7161] ? __pfx___report_bug+0x10/0x10 [ 76.909571][ T7161] ? tomoyo_path_number_perm+0x46d/0x580 [ 76.911944][ T7161] ? stack_trace_save+0x8e/0xc0 [ 76.913971][ T7161] ? __pfx_stack_trace_save+0x10/0x10 [ 76.916255][ T7161] ? ___kmalloc_large_node+0x132/0x170 [ 76.918568][ T7161] report_bug+0xb3/0x220 [ 76.920052][ T7161] ? ___kmalloc_large_node+0x132/0x170 [ 76.922057][ T7161] handle_bug+0x16a/0x2a0 [ 76.923603][ T7161] exc_invalid_op+0x17/0x50 [ 76.925532][ T7161] asm_exc_invalid_op+0x1a/0x20 [ 76.927565][ T7161] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 76.930077][ T7161] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d cc 42 d6 0f 00 75 0b c6 05 c3 42 d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc [ 76.937001][ T7161] RSP: 0018:ffffc9000663fa60 EFLAGS: 00010246 [ 76.939363][ T7161] RAX: ffffffff85e99664 RBX: 000000010000075c RCX: ffffc900066a1000 [ 76.942649][ T7161] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 000000010000075c [ 76.945917][ T7161] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 00000000400001d7 [ 76.949198][ T7161] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 76.952482][ T7161] R13: 00000000ffffffff R14: 000000010000075c R15: ffff8880563d3000 [ 76.955769][ T7161] ? drm_syncobj_array_find+0x34/0x3a0 [ 76.958054][ T7161] __kmalloc_large_node_noprof+0x1c/0x70 [ 76.960423][ T7161] __kmalloc_noprof+0x5a3/0x840 [ 76.962509][ T7161] ? avc_has_extended_perms+0x4a5/0x10b0 [ 76.964644][ T7161] ? drm_syncobj_array_find+0x34/0x3a0 [ 76.966377][ T7161] drm_syncobj_array_find+0x34/0x3a0 [ 76.968173][ T7161] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 76.970640][ T7161] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 76.973324][ T7161] ? drm_dev_enter+0x53/0x170 [ 76.975286][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.978106][ T7161] ? drm_dev_exit+0x41/0x60 [ 76.980034][ T7161] ? drm_dev_exit+0x41/0x60 [ 76.981999][ T7161] drm_ioctl_kernel+0x1f3/0x3e0 [ 76.984030][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.986924][ T7161] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 76.989178][ T7161] drm_ioctl+0x5e6/0xc60 [ 76.991000][ T7161] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 76.993856][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 76.995830][ T7161] ? __fget_files+0x34/0x3d0 [ 76.997581][ T7161] ? selinux_file_ioctl+0x1e0/0x290 [ 76.999699][ T7161] ? selinux_file_ioctl+0x1e7/0x290 [ 77.001893][ T7161] ? __pfx_drm_ioctl+0x10/0x10 [ 77.003891][ T7161] __x64_sys_ioctl+0x18e/0x210 [ 77.005895][ T7161] do_syscall_64+0x123/0x790 [ 77.007823][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.010286][ T7161] RIP: 0033:0x7f546bf9fb19 [ 77.012150][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.020053][ T7161] RSP: 002b:00007f546ced2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.023250][ T7161] RAX: ffffffffffffffda RBX: 00007f546c225fa0 RCX: 00007f546bf9fb19 [ 77.026494][ T7161] RDX: 0000200000000400 RSI: 00000000c01864cd RDI: 0000000000000003 [ 77.029457][ T7161] RBP: 00007f546c037b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.032345][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.034899][ T7161] R13: 00007f546c226038 R14: 00007f546c225fa0 R15: 00007ffcf43369a8 [ 77.037463][ T7161] [ 77.039306][ T7161] Kernel Offset: disabled [ 77.041164][ T7161] Rebooting in 86400 seconds..