last executing test programs: 3.609381454s ago: executing program 1 (id=508): r0 = semget$private(0x0, 0x0, 0x120) semctl$GETZCNT(r0, 0x7, 0xf, &(0x7f0000000000)=""/4096) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002240)={&(0x7f0000001000)="cad5221f3469de1e6ef1e5ae623a0e84802ff7d5d48f01d80f4138f3d63ba7d3fb8c9456cc92af749c78fcc5f57a937cd70d251a14e1b51c1322e74c5d60328be74fd1042fcd9b454ada3ae005189262300f0fb7332cd8b2ad4b981e6a92d2d9d6bac7112fef41249d2963bf225a3b25d40a1494dd1b653727e6c98919e32e4835ffd36a7bb9df4f5a288a294eeb1fe1870d6153df600b660cc68c64b718ce8226baa8587dac1f49fa1ffd7b202313d9f8a5", &(0x7f00000010c0)=""/216, &(0x7f00000011c0)="92063f574815500a7c5763deae367480dfb652a0d208871985171bef2e0c7dcff417600715d74a8ef07e0c7fcd43bfcbe2397dc9412158db3ace3a5f8c52d9143ac350f2f4d4d51f9cf101f3aa559125156eadb27bde6313ea43caee71a2261fd23e7036e73abad0362bea83a1a294f73a370614d0ce8c3efe9a95620703d49e72951635ab6f1b698a9da28a036026bc64a4fc1f03e34e0f8ec3260d5a3463afb2c129ba8b028053a89297bbaa2aaa6ace360005aacfbb8004a6489a1963ed72f1e1272cd20c7e0969208b753ba09db02f5a98ff10813ed2900b0b22f7d8e10604223c2389b17e4cc0fedeaa5f6bdeef2c60d3c68b52f4faebf4e8eb3a800d0451e4c4dd9de900020593f0b1c7728957f0d86b5a09571e29b4dd3a9e7401cff7a00ec579c7e70ca45f72a5e3e3b702b73129de4fd0d3dc7afcbb0184c4b99d267a4f79ea22b8b341dcacab94b4304c913ea1d1f87c148b3116f98239c662b67eaabc070ca899786cf291109d6a6d7fa0e0730d607242c612c07baa9f4eb17bf58c4c5570dfbaeba87e89b44787549b55d4f1db90b09b947c463b45026918ca5abaa42ccb51f99518e4b0e35a763853d1a197708bf499870083a0686c4aab03baab072ad64051a2b60d99fc152dc9d889ebeea71da6668956168f3a9f57f0bdb0d316a6f65f430d252161103af0931d2be13f03423c1c14ae5ccfb611d6371d8b3ac47e3e595d2bcbb5b20518da7ba5aa2eb5a4e638d90fd50c1928cecd2ca9b03eba61843d37a053288747b657535129202b371365e7c993b1c0c68443ee1d0f7dbd8d96689f560334a5137e30e402974578cb9a0e3591ace689b484527724df977df9190ecc1f088879d830703ae29535fc5dda1530b2fe830e813eaae83d74b7417a2338bcd1b790ccfa78e20e7c5d2f0a16969238952677b8e841996168d51825e4d06486ba306d482eef57fa3ee0c96857a7a9b40c805baf9e54fd9d57251011cd58c5af6abd2c6d23090edea33ef1b21bfba4cd90a150a3fb041901684b1e0124538dc2d013f4b91a3d007dac2255d035aad9ad529be9476e6b6f5343cfed0afa8e44bc6fbc41f38a603c81a2ecc23bca290d14de3071fd4d1f7cc7ee978c56e177f3b6e279f5988f636f6addd80bd7b972067c09305f34aa3f8e3859554c5c4ec1c5e33489918f6a25f022dd4a6f518418e85c9942f71d904eff3ee9537c095568830f37973fd73b7cf6dccf15b702d802702cf6d3e5c3174c323f3283a4fa7625c121d4117028f164f6ad9f6e9d95914af61437cd729151bf317f34f6ada9f5384e457a72d3224c9d71e6f2a677e91e60e5f0b8d12af081f5510e79e99cd17500402221fe126c4d09c17c3d38981d713f9a8cc12b38d70c71bb8ad4308b4722fbb590760e2a05ea8358b4563c3cfa92d5ee213e164e39bb8356cbd867c7819b86a36fc6374ccca2e5a3c225e4675d95ef28ccbdf35da95fd40c3f3c4df3ec110b7ab0caebc96e137ae95451da86347488dd7c0df8083038e6542c1ab1efb1cd18b513a22b916f6f9ad2ac633a954f9f8addda92905947a1415d0dad180fee8fdd7614274ef5fd366bc9a4e8170920f08d4293e444b067a508a8a08d0dcf1987163911801e5b2d796f9f836853aedb0edc0d8bb485d236ad345214bc1d2c2b2cf9ea4d186c73861082a33317796f7843046ee0f161fb88a79f1596c5892470022c2c05f8414b0220f22f34a3aee5faab8a30f220a40c93aaf8f1fef1f47a1340a9fc6b4352f7334fef7f37e8033ba1ddb4344bb7edc7134783e4c08a6e6220cbf65ba951ac5e7d29137e94aba1cf1e29453bb0ef21e7ea219f83fbe835f634b55b9e928ae96180b26eb3af7d2e000fe7b6d80a511b8ec4732c7b519f70dbaa87014aae9001b2226d3863014f6f81245ca7c608af8b7300dbdfee157c50448fdde4464d97d384e3a8ddc3fffa6f53d9179df15544994c421cb232b83c756eea98e444240cdadc3fcb1472867898e4888c8d924341df53056d08a8f8d9b4affd9dd3bf411446153c5b9d57305e2c6fb0441555838f0f8904d40fc08c879383c4e1c613a677313837049d7be4ab7d8cfc72735923d8de04634e533162b748a85c206dac040491cdfef8a1a5916d8f8a0b5e37be3339b5e449f2816eb32e95ac30da2cfaaebd8a1014b1b869d76701578081b0e6137b7c9ce0727b21f77d4772451f6a685cae028d34f3e31cc033815368744fe860bdc2c06df16ef888df0875220b9d464f197c217848cbe1d18edc6a6d7f762388c4de3b6ea6c4033c6816f11dabff168c40fb5815e67ea113fae3aeda7e05b00340f47de4b8b41dff4dee5c65e4914ebc400e075fbc05068492c2a9e2727561521d150a15251f418d37684ab2a141a0346ed34fc3a03fb40c336f034f887aae52d26d8db67eb9ab04496d1aff8dba297dd2840dc06f9eb4a8a490b474522359f8ea2798de40ad3d08f17a971412ac85d942340b7dd3edd79ab56624b6382df8608ad6c87b334bb562af99bab7054884d69fac3bf4cb96b4862d9d0def34490ceb0fb912b7b3c64f2e618b725aadadb6de54c77ebdd3a2afc5a563421dcf4f5d8900bb95382de5e20eb5ad94941270bb2bb2b5f60f5d71a5e08b1baa53d73fe9fd3ce09068fb2c8c6b3ff0fc3564da207535235c65822458afde38351b63e6af06ae27e67ab469798a49f01863361d983aeda17430526b649a2d4dfd441bbd9ca0d7ced27a8c3757a6f46e6c31e4bc24f154cf37784e892190fdb98ca659674a50c0e2d32aa28e55315c78fee133cfc745255651359441b8a6749d46319d7f0f6e161ec62972a256f11d137b4c58964766d2c76763f3b233b6a1d60323a1a4f0c7b9953978867be6b04e6563c18af86f0ca7a01323188a7b148e1e4afecc5bcc13e629b110048b233c1ab162efb648ef841c48f116552faafbaced87e4cd06d08ebd592acc100404660e4ec0638b7b54611aceb98ddad3764f9d40b9f3cbd0a4f4e196ffe890cc25d476384b8580d1eda7884cf441216404f36d97717de64aee9bf1d104cee0a41cd6f7507d5485cb435e083c5cda5dd12aad0b9d588cb31e7d55fdad0f669e4af344a3a36f09e2620cb61df8471b466d09e5825edbeba70745e8d08f3dde3c52c689a6efd738a670f48a4b19f7b9a944a250140b537de6e3d30839a23a09eab1410594d1022bc3eb3b507c1e7e832f7926e8b3c7f6eec2b9e9647bdddd8d8334406b1eeb88a46542d95f9a0959dab83b87191f52b4eb3b384a427a345791ddc48ec581a91ed7b9f5d89e98f4e920aeb934c8cdce25b4121041daacb52631c393379c754301999053df12c3c8d7fdbae79eb9cc3204f99183dcdf38e249ecd88f3526e958f7bf3b50a743a11c8bca7f45525372832880ce8cbcfd609a04a8087093657fdff11e2b9c2943636f8fd7718f69c23a396e4da3e254431a9e748abf3fdfdf5ba0316bfc6f4a2f0bf3bd6cd8442b7f5f4df64648cb604997ad614247d3d849d57e9440c6c87c7a0c2cf4bf039501a4c2dc0a3a1f5676a2b23293ac2323ceeb402c6e899a7e1ec0aaadd28d754e4c6e5392151ee9608c121e4f980abb861f1a5620f8daaae6ab3d34b3552b17a4c53d25ab92e20caf9299416e34fb680e6ce4921e33e7bb037d7098cb6aebd3956b0363c8dabb56c963efbd5e1d5cc204aa52db481b7e4b5a7613a213191ae3f74ad9727967a33e811a99a8fd415d78a098ed1f30f38ff1018f837f4b06627654a4c4453356c31a08638e6d532c8f55a2826c04d573dec9be11d94551b15ad7b26b405206c4bf24fc2be69c8d3ca0dc75f67810fa9cf9c9f8436f12d32c4e5d368f7c1f1593fd3ca1632bc60adc4e38fd18a1b8aad376183672e8968bef82a74bc746e147fc7b8bb5636e4c11fbd5631f6cf8f540308f0562b47fdf0f0cf07d4dd1d98999b822a817d41b6eb91371d86992ef12c29bf881f616a90b656adf77c46ba179320ba0e2f0cf7bcc7191917ddd2e6c2cfce43852013adeb23828dd3f0a5e80efe59b1acb8e0cb613d3d5549d149bffd565f49ea79219e00d3be24dd5e9ec5d19d136de3734bef2f07fa19c4f246369c4fb1dcce617e0b4a201d7fa9800bab83fd31c2fc83c4309b8d6dde327051a256d630b10b9f3a6fb825673db488a6b4f3b298a85ef0a98bd8f6c8375ed0f4fe18454a05513040feeaf738bf6887b2fc3aa14f32e7da5d77c525bc005de925d78d416d4cf4de3e4054851d45b948b508b25e02ba203d533d3839b34f7f23bb14626d3652818b4f9c6dddbe96d65cde1a632638dd4715aa6cf1d5399cc305d2c2c79bb05b591f246e00e2b26ebb504e9f13d0809e4c3e140ad576ca8b2b3500e41200e72d2685f6bdca8c13194277f81f0483636038ec9a4ed1045e44b010df69fad5e6f3599e94eb664e6614aa3e983ee92eb84ddff33a5382fa6469dd3f404437e12ace1c5e371f2a646aab8401461881456de2a7b78b02123d7fd3f0804e44cd773bad73345acdcd523c2b17992097dee481f62d91de2645aa0b236dff3dc469857a7d5df661e3ad1a886676c37e8c25aebf8ded62d9eb8ecf1d1049620684ef49ea4e52f0c2956c759be37598257a2ac2bdaeed7b172525875e02afe16f8546098bef46014af782534f50baa5e7b044dea938a24439b9554197bc5e25c45f1a1cf5d56ccb5c9b8a349a2f703bfd94c410db84156f51e0deaeb7a5fe9cda5a19b117e221a36cad63946ef4ffd7a96ef891c89fd88cccdb7eea49795b49377773178c53c65434883fd1d366298d2e77f396681174d6d04bc70785739b435d995b12de305d416ddb09e9985bd613f957e7589b28ed2955f3e6437d828966e808e84f98f312bb65763594bb53d4a6785d331728d85653ffcbfb0aa785fc51492dee3e3e7c6f4f3fdef9f3ced8720cc51f517cf36df0a9e580eb97244d58bcfa0adbd78b7def6b6e140b9c3eb690450d9a82210ce6c217216e22da53ce53c74a8c405b73b93e27dadf4a8cc5029b56966337eeb1eaefef9d13ee4a8a9e21bf940ff58ee3fa68f34324b09e00f03411220f00694fddafca3311c14634e818a6037ae6316dc06243bfb665ebf470eea3a59cb81c7b382f74d094d716e3de18aaec1bcc2ee44a1b28193ab93d711fc639639aadabe4c37960c1266d797e966bfc5ff613b3e1b120a944e13e896640c3d9d26179eba12a6e714c3341d464b390d6f81b58ce85c1aed3d71070096ccffa7185fc9c4bbfc1efacfa368a93e96b64a41073232a0a8266fb4f660a611f51b48490224c968c1e6f9992b2c95e5dac17c240fcf08c4b0fbc37c91fe55642b85e9ec58b5049ca23357a7d70518b703f46ee99cb01bdde801b2ce4eec06ef56b67745f1970d241915b0c4e108955b022f1d91b0ff8b26c0fd141c34a2e66b0f161a04bb9aeb51cd15d32dec1e3cdbe4a624a961148fab7a2ce726faf975d29aa804e102e4da3d05b3b7978d53db3fea4525e28fba6440bb1396a6c62e826779e84006b20fa7557969e54e17e7c50e9df458a988da79381519ec60c4b6b07a8eec259911406ef37f720828a138fe62f64ddae33ec2281ddc2cdcb1ebfd7a0c9649b3a45f0ad216e6e4e7bbf460ab982c81921f8f90418af862614352a085dfa02f8932c14098b3b8f594737166d9fd4ba95122deb452ac6d95fcd74acac61ba33b0111a28559ba52839022bbf6362d8dc1f46a7bddae93cdcee9ae0a3050cdf44d5bf3bcce23a9634e41ae8efe967e4e1cca0a24d57af4", &(0x7f00000021c0)="aeb4814583e323fc6e", 0x1f, r1}, 0x38) close(r1) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000002280)=""/158) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x4c, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x7357d756cde4438}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x1, &(0x7f00000024c0)="c5c289e28659fd3d09894777397d6e645354a9c00b68101254b1ab83c72f6eb6d540c0022abc8c032c34da54333f98abb1c89d8d16b36fe7833f8f6325ef6fcbcfd202370f34108c9a9765cd2eed3d3bdae5a734da4a671f4460470b3e8f8c7fbcc9472d6b805240b12a873e70b516b6d6876aa3ba865de51cb3d293ae6e610e5fc969edea0f17f568301d0f45b32db52b81ac136d2192225b86315f8ba234668002d6410bcb16e64263999d1bf15dcbfcce368a") bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003740)={&(0x7f0000002580)="688d293ae9a2fb38b717f1acb4a800f94f4122b25cfdb13b3c576a3ee38b96c317ee130044ee367a411481c4e5a02f27ab84097672809ee77d622b96d5b1ed38a0a743a364a7aeef342a5aa4c65a6cf907c901effe27ceeb2a1b85bbf38be46d853a619a4b902f0695be8675a75b08560a8d9a45549bbcfbb562d554b885bf5469e475ca900e130c", &(0x7f0000002640)=""/155, &(0x7f0000002700)="0c7150a3bea227c06345739ee8315b36ebba4481809aab", &(0x7f0000002740)="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", 0x2, r1, 0x4}, 0x38) r4 = syz_open_dev$dri(&(0x7f0000003780), 0x7ff, 0x402) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000037c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000038c0)=0x0, &(0x7f0000003900)=0x4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000039c0), 0xa0000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003a80)={{r1, 0xffffffffffffffff}, &(0x7f0000003a00), &(0x7f0000003a40)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003b80)={0x1a, 0xd, &(0x7f0000003800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000003880)='syzkaller\x00', 0xf5, 0x0, 0x0, 0x41000, 0x40, '\x00', r5, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000003940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003980)={0x0, 0x0, 0x3, 0x8}, 0x10, 0xffffffffffffffff, r6, 0x6, &(0x7f0000003ac0)=[r1, r1, r1, r7, r1], &(0x7f0000003b00)=[{0x3, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x0, 0xa}, {0x3, 0x5, 0x9, 0x7}, {0x5, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x3, 0x8}, {0x5, 0x4, 0x4, 0x3}]}, 0x94) close(r3) unlinkat(0xffffffffffffffff, &(0x7f0000003c40)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003c80)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000003d80)=0xe8) write$P9_RGETATTR(r6, &(0x7f0000003dc0)={0xa0, 0x19, 0x1, {0x200, {0x2, 0x0, 0x7}, 0x10, r9, 0x0, 0x80000001, 0x8, 0x5, 0xad62, 0xf41f, 0x4, 0x6, 0x10, 0x6, 0xfffffffffffffffe, 0x8, 0x9, 0x56e7, 0x80, 0x63}}, 0xa0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000005000), 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005080)={0x13, 0x15, &(0x7f0000003e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x1, 0x5, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003f40)='GPL\x00', 0x800, 0x1000, &(0x7f0000003f80)=""/4096, 0x41000, 0x5c, '\x00', r8, @fallback=0x1b, r6, 0x8, &(0x7f0000004f80)={0x6, 0x8}, 0x8, 0x10, &(0x7f0000004fc0)={0x4, 0xb, 0x5b, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000005040)=[r10, r7, r7, r1, r1], 0x0, 0x10, 0x4}, 0x94) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000005140)=0x1) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000005180)=""/197) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000005280)) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000052c0)=0x1) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000005300)=""/191) write$cgroup_int(r10, &(0x7f00000053c0)=0x80000001, 0x12) 3.490050429s ago: executing program 1 (id=510): socket$rds(0x15, 0x5, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000eeb919a026759a644132c4df4e72f95104febc5740903f410acebb6abd9beac803e27fca912997ea6dbc86342cfa4680e5e06804202c", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080f0000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280900000000000001000000005914537e8e8a82057218d2f3ffcd78349b2ce0ee5303"], 0x128}, 0x40081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40010121) pipe2(0x0, 0x84100) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r7) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=r8, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 3.430819893s ago: executing program 1 (id=511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000140), 0x3, 0x4a243) close(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) open$dir(&(0x7f0000000300)='./dev\x00', 0x40000, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002", @ANYRES8, @ANYRES64=r4, @ANYRES64=r6], 0x44}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ef) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000600)=0x8040, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) r9 = io_uring_setup(0x57d2, &(0x7f0000000b00)={0x0, 0x3406, 0x80000, 0x0, 0x138}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r9, 0x1a, &(0x7f0000001640)={0x5}, 0x1) ioctl(r8, 0x80480911, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.059896342s ago: executing program 2 (id=517): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, r0}, 0x94) 1.999784274s ago: executing program 2 (id=518): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'vxcan1\x00', 0x1}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r2, &(0x7f0000000140), 0x0, 0xc8844) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) write(r6, &(0x7f0000010000)="000002000000000080", 0x9) write(r6, &(0x7f0000000340)="2098636e9c324ff2eaaa5c54cd4db2947cfabcb55aa3e49ad7c17b23cb5bd077b59896a37ef90d4e98f26692e93e9a1348bce9c19b19ca6e8d35b4bd7ec40403a27526e60035cb0ee6981b00448347bfad329c5b52c779f6c600acbbbb4f30228e6fe75aa8a5570f06e7c20644303e1d22fd6b599a4e97033588ae9accafa1c6f8a4cbe10009b1280e39c8e2ff6fed5c8ac9ce41bdb6e244bbad57905e528327b6b64917e2a5030bd9", 0xa9) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000180)=""/11, &(0x7f0000000140)=""/9, &(0x7f00000002c0), 0x9000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000600)={0x1, r6}) write$tun(0xffffffffffffffff, &(0x7f0000000800)=ANY=[], 0x10) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="0f0eb8010000000f01c1440f20c03506000000440f22c0362a9209000000c744240099610000c744240229290000c7442406000000000f011424b9b4020000b801000000ba000000000f300f23ceb805000000b92f2ee6e50f01d966baa100b88f000000ef9a00000080d700", 0x6c}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r8, 0x800, 0x0) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 1.910830149s ago: executing program 1 (id=519): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$netlink(0x10, 0x3, 0x8) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.905764015s ago: executing program 1 (id=520): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400008, {0xff3b, 0x0, 0x5, 0xace}}}, @NL80211_ATTR_FILS_KEK={0x42, 0xf2, "3463a696748009ee21c9ac1be45fbe38f8fcffd0f10358199c6b535c801481d78748d75090ada9cb69995cf40eea14641ea2da701bf16574b178b4cac911"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c041}, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x20, 0x4, 0x2c, {0x2c, 0xd, "06c035ae5668d066968d744aef5429f6cc7f90fcaeffe449fdc0b85e574544a464fb4ec0d79a43937c5c"}}, &(0x7f0000000240)={0x0, 0x3, 0x71, @string={0x71, 0x3, "006e958852f8748d8f5145b04cdeebfcdcf7a18457ef0cc3cf6940e40036396c73a8b39a2163930cb7872b15ccafbacd488c2ae363b1488ba4e99b51c90fbf5f16416303ff85f0aee01f15c892261e5dc3aaa24f6e1dabf958c7cf6edff412c8652cae5f1a2f685ade9d10ff962b6d"}}, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0x2, "d9"}, @local=@item_4={0x3, 0x2, 0xb, "199a3bcf"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x2, "cd6b"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x214}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0xf5, "28ffa26f581cca9168a642f81b0c5559ded1d5dbee7f01ebf5ebc9502b493c885c9863db81e05a4f31d2c2d35b9623ef1d3073bc97d70ca25a59d7dbdae8d7002d412431e3b5fc87dad1eaa7bb6680f2c3674a8ec4c4c3a0a49e6082c4683216d697b2e4a3bfe2b20996a03a9819b9aea6b3a6428bc2ec8115553d7b7cabd937b3aed81f04efb408a5b9005e8cc9ecc11d0e3c1d47e135a41ab7973ffa225b0ba1a8f1ba6dc9ad27cae1c4b42f85159a4d912f498ad2801312d71c2a3279530d2fa8904bc985f1225783a7beec76cfef4c90c830a014e2d357cf0daea464d936ab606e1870aeddc4307c0af5ed4d2eda6107b0f190"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000500)={0x20, 0x1, 0xf5, "80884114a38a44b5aad72ab7306c5b3e1172ac9177006344f235f37ec8f01ddd5b607ac9e014069916472d1601c7a8bf890116dc3f8f94d71570ca9c27e58e75e0a38d18b3862d0e9d46b455c424a1f01fabb2b82bee067391266d83cb76cb6070a520b773be9ae63d2d4059edaf37dcff621fca95c7b992efb167fbe91931c5baba38ca3d82737b462b349f0e116a24a62796e6dfc2604ead5f82ce93c020a1f6ae39c3511167cf7112329e6effe7933e8a774e50e8a9a705195b5f57823be15a64460e952b9b98d4912c9c9394b1816ec50bc1ebfcc09e2dafdef9323b00301a79affd1382843004273e8650a2f08d95a9b85507"}, &(0x7f0000000600)={0x20, 0x3, 0x1}}) syz_80211_inject_frame(&(0x7f0000000680), &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @from_mac, @from_mac, {0x9, 0x7}}, @a_msdu=[{@broadcast, @broadcast, 0xbf, "51be48e6d9eb1a431ec20b960c6fbd0cfd1a89f3badd54af2db00c9ed020558c483217c6be0e85cdd8486d14ec85b66cb72ac1d06af4fc1b334a18ae20b33de0099ed3bdb5ee84e4ea05ab483e078c738a9d959421a13db0b5a0780fe99c95eb3c0f4de2fc67d285c8983b2446913464bf017973a1f568e8fe8156b5f28121097d3478229008fe8f5c4d47a41d4bd897911ed6e1f2e7cdde4a70f3961b509c3a6a82cc51d4adac1acedb4bf6bf2fd755b7c85973d1591e242d21be95073377"}, {@device_a, @device_a, 0x49, "d83e6ba2ca2864893094723b4fac3e965d9e1a01e7c2e9b7f722fd87faa9b91be3c0aaa947648a96d607366443cbd205501255839d81b73d1cc8eb8c2c0dcdce409411be20e92249d5"}]}, 0x140) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000840)="578c865c9e974522095904dbc4cf3d7b949ebadea93ebf71c9bf0e3cebdddda294c717a58ab17efa95327a782fb0e75cfc6a0a") r1 = syz_open_dev$vbi(&(0x7f0000000880), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000008c0)={0x6, 0x2, 0x2}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000900)={0x1, @raw_data="2cc1afa3a2b8fe09e05343b758c2917e0eb4428e367d9d514b56a01e745b482575a593a42dbbc1e09218b330960efbc72e5d198a7f50784c66011dc5e3c1ed9540545d04071a0bab5bc99828261449cf42bfe88716ad1caa1184a4f3cab59abb5315538ab6ae09686ec4ddcfbd6b4874146890094237945e4481036394dab3a2a9f5c46d6adb19c2b785234711a8f2608fe43afdfe390094ec0fa7c530d237c1e37db0635d4545b483d037589219e36f8ef62f55bc3940eb49675af530e0bbee6b284ab2d96e656c"}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000a00)={0x0, 0x0, {0x7, 0x4, 0x3006, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x20180, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000c80)={{r1, &(0x7f0000000ac0)='&*^\x00', 0x0, &(0x7f0000000b00)={@_ha_fsid={[0x7, 0x73]}, {0x5e21, 0xa3a, 0x1, 0x6}}, 0x0, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x8}, {[0x4dc2267d, 0x9, 0x200, 0xd]}, 0xfffff55f, 0x8b, &(0x7f0000000bc0)=""/139}) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000d00)) fstat(r3, &(0x7f0000000d40)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/230, 0xe6}, {&(0x7f0000000f80)=""/73, 0x49}, {&(0x7f0000001000)=""/199, 0xc7}, {&(0x7f0000001100)=""/32, 0x20}], 0x5) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) syz_80211_inject_frame(&(0x7f00000011c0)=@device_b, &(0x7f0000001200)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0x7, 0x1}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x2008, 0x3c, @default, @val={0x1, 0x4, [{0x1b}, {0x5}, {0x36}, {0x9}]}, @void, [{0xdd, 0x70, "c716e01cfe366595272012a9730d3d6b579e6dbf24de92348201884832c59ac241600855ba739cf6bf04a37cf2ec2f9b98e997241a78936735b363b8347f4b5a7512b1fdff8a912111ebe809cf75b0438d5f5fe7d2aba5e8f0309a779e6880d995a81059e3555ed47e361d704e482abe"}, {0xdd, 0x20, "ef830835a4b8eaa334ac1316d2488e5b54f8f7c3ce3c787661d3e836cc65565c"}]}, 0xbc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000012c0)={0x0, 0x7, "74269caaa883a8"}, &(0x7f0000001300)=0xf) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001340)={r4, 0x1, 0x20}, &(0x7f0000001380)=0xc) read$nci(r2, &(0x7f00000013c0)=""/93, 0x5d) syz_open_dev$usbfs(&(0x7f0000001540), 0x401, 0x400000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001880)={0x24, &(0x7f0000001740)={0x20, 0xb, 0x53, {0x53, 0x22, "35a2bc8c3c7f37a664fc848daa4793709fed068b29f6ca0fd6d65b348e2f23c20ebb43a898d594171e6f04b8a53b24219afb254306f1eb1cc65fc7d0731a2227de0e8cd329c4efede733a666a8bbe008ea"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000001800)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x8, "6690c18d"}, @local=@item_012={0x2, 0x2, 0x0, "d03a"}, @global=@item_4={0x3, 0x1, 0x2, "f3b7dcc8"}, @global=@item_012={0x1, 0x1, 0x9, '{'}]}}, &(0x7f0000001840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x549}}}}, &(0x7f0000001a80)={0x2c, &(0x7f00000018c0)={0x0, 0x18, 0x57, "fa012cae776dc04352503adbefa9b28347b344785e2d5cba627c6709866139636de5f6dbffd7967110bb16a3b548659c3bc885d36a04e59fca7f530fb0fd674a2ceffae3f4a966c4a4c26512fcfc939cf9e49747e99d54"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000019c0)={0x20, 0x1, 0x51, "7db8765c133600346be30daabf983c99bc8f86f23f279320d54fc88d4f26395ea72d33b8e8336b56c300c171dd228e2bfe68363cf85ee55c39263f272c1b42e2e202d9443566a9116c8833867d640e0ad2"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0x9f}}) 1.650516522s ago: executing program 0 (id=523): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800) recvfrom(r0, &(0x7f0000000080)=""/119, 0x77, 0x40000020, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200004, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@noextend}, {@fscache}, {@cache_mmap}], [{@flag='dirsync'}, {@subj_user={'subj_user', 0x3d, '\xe4'}}, {@flag='silent'}]}}) (async) r1 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x80000) ioctl$RTC_PIE_ON(r1, 0x7005) (async) getsockopt(r0, 0x3, 0x8, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000380)={0xffffffffffffffff, 0x8}) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x9, 0x3, 0x30, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x8000, 0x10, 0x8c4b, 0xffffffff}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0x20, 0x2b, r3, 0xffffffffffffffff}, {0x9, 0x6, 0xd, 0x0, 0xfffffffffffffe00, 0x3cfce07b, 0x8, 0x1}, {0x100, 0x0, 0x9, 0x2}, 0x7ff, 0x0, 0x2, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x34ff, 0x5, 0x0, 0x8, 0xffff0001, 0x0, 0x8}}, 0xe8) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (rerun: 64) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f0000000680)=""/68, 0x53, 0x44, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x5, 0x0, 0x8000, 0x6, r4, 0x8, '\x00', r3, r5, 0x1, 0x4, 0x1, 0x3}, 0x50) (async, rerun: 64) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f00000007c0)=[@in_dx={0x69, 0x20, {0xe290, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x2994}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x6, 0x3, 0x1}}, @in_dx={0x69, 0x20, {0xd171, 0x3}}, @wrmsr={0x65, 0x20, {0xc0000103, 0x7}}, @wr_drn={0x68, 0x20, {0x0, 0x3}}, @rdmsr={0x66, 0x18, {0xb0e}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x9c}, @nested_amd_inject_event={0x180, 0x38, {0x8, 0xef, 0x6, 0x8000, 0x1}}], 0x178}) (rerun: 64) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STATS_GET(r7, &(0x7f0000000f40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a00)={0x4e0, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{{[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}+{,-&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '127.0.0.1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\xe4'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/rtc#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/^\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "241aee469e11c44c48ed9722991b0379d813c9b55d121e46be4a70fdbabca40f494cc562aa7673e7a718541475ee610530f4bc585d8ca6af6a57bc152e759254977a147d2f57722ce4b08993afaa638e512026b1f1de4b89d7ddacc6a324cd68eb2fa4f5aeeccd01f16682132a7ca7515325982fee965b93a42cc77cc9a4d7538fd65dea52c2e1577b94b0b4acb19a63ada1a96824a385d22d402dd6149fbbe265f3615339039928028fc54b34260d0d1832a375f0f4b22cb9428a69c24c4dd2284b25b0d0e488cfae383c8b0002e1d309e10fbe529a274867a8cf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_STATS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "53cca47bd8404f31708f7861fa6e82963d013d7d1091f723f1976f67c17105f7b2862ef65d23939c1a0455ba24c0c0aad96c1ced3fa07df8565a458c46"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "a234bdef28d441911f14d142c24fb1a6e0f455c3d674b128c497e0216522576fe12393118e2ca214c18108a3b1aed81876c31f208b7fe31642859487b99e6d05a2471d659a408dcedb828ddd62c83fadcdb2f11362d6cf8f3c58322a98bec6168bda088a3dd487d572da4b6985ea34b86da47b763a1221796c70494bbb161d0f93dac91c012ea58dbc1a7629d59bbd76b09c673271aed3222df8f0e8cffae622380f93f81887de9f59760adb39101457a2f8974c2bb93a8a152f"}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "b1783498cc9d9940c11bc458c29f0f1c9cb8508d3635c808b179b89c71a7d3d7a11d3dfc3458e963f1ecddbddcc323b280e6a39cb39c3e14a4b6890166850615cd082fbc348d8dacb7c9ee3a1afaae7cae5f8c1b7cce83ace9db2affb755a34920f472851a48a195d84d2a90ccc9b1a98f08d485efd9b67af26d48abc87e16c347"}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/+B\xc3\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fscache'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\xe4'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xff\'}^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000005) (async) sendmmsg$inet(r2, &(0x7f0000001100)=[{{&(0x7f0000000f80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000fc0)="35e15d23e601b5cf3b97b3e9ae0ee689bad98e941cafb2c759c90cd20bba1a154221939272d7c1e2e88f88a4d7ea3972d45b2a4e30a5dd255c1f3162abea93d9e47256a648dc0f3ee13e769e8e02d768366d71046f78ab47b0da5709657c6e41056275ce48b8f09508ee9e2420a46bb158e75d1274ef863a0323c63d151c87e5de21d3", 0x83}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x4880) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r7) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r9, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8a0e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x10000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xb4, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2d}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x535}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x48d4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r11, &(0x7f0000007c00)=[{{&(0x7f0000001400)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/14, 0xe}], 0x1, &(0x7f0000001500)=""/224, 0xe0}, 0x4}, {{&(0x7f0000001600)=@alg, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001680)=""/24, 0x18}, {&(0x7f00000016c0)=""/84, 0x54}, {&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000017c0)=""/18, 0x12}, {&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000001880)=""/240, 0xf0}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/146, 0x92}, {&(0x7f0000002a40)=""/202, 0xca}, {&(0x7f0000002b40)=""/38, 0x26}], 0xa, &(0x7f0000002c40)=""/12, 0xc}, 0x2}, {{&(0x7f0000002c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005240)=[{&(0x7f0000002d00)=""/196, 0xc4}, {&(0x7f0000002e00)=""/145, 0x91}, {&(0x7f0000002ec0)=""/48, 0x30}, {&(0x7f0000002f00)=""/16, 0x10}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/220, 0xdc}, {&(0x7f0000003140)=""/58, 0x3a}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/189, 0xbd}, {&(0x7f0000004240)=""/4096, 0x1000}], 0xa, &(0x7f0000005300)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000006300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000006540)=[{&(0x7f0000006380)=""/193, 0xc1}, {&(0x7f0000006480)=""/84, 0x54}, {&(0x7f0000006500)=""/43, 0x2b}], 0x3, &(0x7f0000006580)=""/117, 0x75}, 0x10}, {{&(0x7f0000006600)=@in6, 0x80, &(0x7f0000007a80)=[{&(0x7f0000006680)=""/191, 0xbf}, {&(0x7f0000006740)=""/81, 0x51}, {&(0x7f00000067c0)=""/222, 0xde}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/250, 0xfa}, {&(0x7f00000079c0)=""/162, 0xa2}], 0x6, &(0x7f0000007b00)=""/234, 0xea}}], 0x5, 0x2, &(0x7f0000007d40)={0x0, 0x989680}) bind$inet6(r12, &(0x7f0000007d80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x1c) (async) fcntl$getflags(r6, 0x40a) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007e40)={'syztnl1\x00', &(0x7f0000007dc0)={'syztnl1\x00', r3, 0x4, 0x5, 0x40, 0x5, 0xc537263ddc1f0250, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0xc6, 0x7}}) (rerun: 64) fcntl$setstatus(r10, 0x4, 0x40000) 1.650269769s ago: executing program 0 (id=524): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079104800000000006104180000e2000095000000a964369c813f711f736045f2cb1108d3ad51577bccc8373e8661a586cecc8f0465af4789fe3adcd4ff1c70bdc879b60bc042a7f4d28dec1c4c98cbf7204366072ac3e8e55ff7600b3f7803000000f61de6c7aa3de8717e101d18412956e68e31d932c1a45465dcdd0645f97d3555748d11229d9f9c4c91ca39cd818bcfe53a115d061f2c008000004a77bdc23a9b3a4d5e9a1b4b2c6938222b7b933f9f9564d0d3c30d19cfec5f28c5209d35adc1cc9053d41b3e348fc6568bc35b172a6648f968138449f8bf6efd16fcb92368455e6c4484e20973e8a66b967688ab6c0482d7f450aa81414d8a69d9040c15203cca9c4482fa3100af7240f41741c6dea2c33323b78cd52273c2e3e7ea68989f5097f988f1221ed14d75f940faa2d7d3a0ed72bbabff070000b602e4d4606d80b56c317d64a1cbaf94ccbce3dac22566172bff66f7e63a81b1fda1ceebeb74fbe40c4ac74ce4e6a024318b3f2ee43dcf020e4237f98e8c9b853c706ec063a4ba76aafd94173a3bc768f82ad7"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1.598768867s ago: executing program 2 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6149be97ba41e89863638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000340)='./file0\x00') (async) r0 = timerfd_create(0x9, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x80, 0xffffffff}, {0x6, 0x681}, 0xab4, [0x7f9, 0x800007b, 0x3, 0xffffffffffffff80, 0xffffffff80000000, 0x66, 0x1000, 0x5f, 0x4, 0xffffffff, 0x40010, 0x80000000011, 0x0, 0xada, 0x0, 0xe3]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fda000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000d8a000/0x1000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1c4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100283d7000fddbdf250c000000180005800c00028008000400041c0000080001007564"], 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) (async, rerun: 64) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 1.597264776s ago: executing program 0 (id=526): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000001e80)={&(0x7f0000000100)=@x25, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000180)="f8db98a31d573c43f1543cc645e6a184be9c47381e2db64fb949211e5afb599037425a5c22ad19a6c34444570ae7df0ce4fc99545a971d196be1c1d84c6825ade8d6f577bae165dbdba6cad4732b2f68b4701ccdde463a824b752c48c7fa24dcb84e0307f4a4e89c", 0x68}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="01085c3f6b73081d84dcd1fdc513d87e093808c08539cb1fdf707879862b8fdda131ff21c80cbadabd272ffde579ec8d9e1671741e1da0d4803c9fe9e5470b6ddf4cef1f0764bfa907d7ec146a25707207c66a79ef7765d413fb1156b34c7bf9c57d9068d567c8463bb168ba8fc247bee5fed09bf2fd7d0a51", 0x79}, {&(0x7f0000001600)="291eb0fd6f8fd606f59f18c3dfe1dcfbd6681abac8fe85ae789c570780c4486edb1456ba52e9e7274f5c6dd75dd6f2ba447eefb91bc73564ab25e451e4aeabf0aa24da157c5c49dcd8d6612246611a69d2fa6e873bc0e52231ce231f2f7cac94f554db6db1ab41e5ebe2c2bc8205ec7144fdd99a06ab6e87e31d7269daddac62de6e146a18b6d9c077408e6e91bc1e7bb8b107c9e7ac3ecc269a9e17d620841eb3a0", 0xa2}, {&(0x7f00000016c0)="b854c72fafae14f3b6b5df947464560f15b9cb0c9e4d2f52cbb9", 0x1a}, {&(0x7f0000001700)="dea6d925906d1034e5cbf26c92aff58884ff80cd8832e24832e3882a31594556b3fdcefc5a492ff30cde0adaafbfbd2cc9be8ec2d163d7a9b2058e9f4853ab0735063faf99d8ef6ebf632aea752e0bcc09c886151a63af28a6f066a12a6dc776b65673", 0x63}, {&(0x7f0000001780)="78d63af1862bc126bdb29b6415d2ddd41de255302f9917612bbcdde44549ed942a4e329516ad90eb53cd57a0ccc0e232f818fa3028565f46cc288aefc5d3435c2232d14b1e6a2f2b788c3cfc23bc637401e8", 0x52}, {&(0x7f0000001800)="fcff1653080f84b7e8d6328a2cca21f412546c4e243bac63c65519672edfaeb0282b087cc5aa85fe36cf27619646634451a6a85809d031325c985c551128dba721cf5f30fbd70c063fd3a7d2456deeebc3f6e665bc8f9a4f1d21b72c96137a", 0x5f}, {&(0x7f0000001880)="4c00e2028608dc0df4a5eb66b7bf5a27f76c1ed5bd36d6bcdf83fb13eb4f835336ea4d096aef8ee4997092836f2cbe9d2dcc9894d31db024b8f68f433f9fc9d45a76163ae914763421c76ed1adc753b5949337e8be1cdd83e5cadeaa4eec9881757339ab61e2a63ab23ce52990e19754a624737ac2e215e4e091a8588497004fba0a03cbc630a3c6d8d111dcd912045235afe7e353ed4a82bbf87939521066d90a40cf478fe50be3b2d06ec0733952b6449442c22b4cec4d82586e7daecf9f03ff912839b708aca22df0c8512510ca92fe02eb4ce646e45800f584b575dff0e69bfd347681dd7341833e18ceaae193", 0xef}, {&(0x7f0000001980)="0a95deb775c6b7c544ae47cb9725d5557927a75128de99f8ba05a537ff7ba8fd07abe93246a8348e44023dd74478db97eb2def758a9dec8e321006a10462e8ab4fa31880a959f038bdc2d63ae61a2391ab3e6ef9ad1d35eddb5b36ab31", 0x5d}], 0xa, &(0x7f0000001ac0)=[{0x68, 0x102, 0x8, "5ad8f9acfbeb4635b6ba7627b3d8d6bcb5289c573fa13cf83923b30a125ceeebb8302aea00ae5a79b9727ceed44f500b836e0d2f5a8613cb52db4a0776007701437a3c7219ac653d565de39dfb91336bc07d"}, {0xa8, 0xff, 0xb, "259fef0c51b4e20071270774398178d08a03945b608b56cce8c90677ebde9b46eaf9797c6f105f278dda12ba89407a32c7cfd4e00e1c5e283a309a3d40e7426b537c2ea7e0a9e61c6c8e4dc78ea750e38f66a35a200373f990258a6da64245c8d769b5ce6307f76da88daa1f026d09cad5a7468e7dedd1e4671c604c0de6f3fdb60db727716393e3825baa5854512b35a5acad9931"}, {0x60, 0x1, 0x6, "cb00563b369b7e79abe5811e96c4914e02d0b112b400f0191ac0036b8c7755aaaeebc20c387bd3428daba7e8c7074d7aa4df5d1876cd57b798422e96699635e5639290ab4d4268a571"}, {0xd8, 0x11d, 0x0, "68d93c815858ff4700d0683d16039c761ce7beb6808660f8d9567a33091d581a1220290e9a94ab1a955a98aefaa93dc3afac22c30b7dcea5bf460ae1c85d3d4439f46c19e03ab9195c2e6fc915a521f3b8b12bc6b5805d243e29df97da391410ffbf603e36435d1f959c33472e3610d4320d19fd797f60610ae3ba8ed38e7802638d804b86377519eb055be9f9d38d91240ccb61ee4bba85c19d7961131f1f0b1670e4ed7844be0621f907c898b76ab45d04d0a58e3ab2447b8157cfb4653ff92093050d89572ddb"}, {0x10, 0x112, 0x800}, {0xa8, 0x6, 0x6, "21f8863766b698fe90f1e963d6b1274487cb22c1bfc83bddc60c4ca0887cb47d7128d7c9372cfec2432cbd4c864bddcf5b94a03e96f1a9f5af3fe93dc8a261ca0daed20bd276e6aa7160a633d033a6860b2d69632cac7da8c406a0a926ea8a44b0b3c327ad663e47f0e7512584603fabfa38d56c602c96b2c850d63862cc2bd9852388de501ad307344024af51e60c14ba8c"}, {0x90, 0x110, 0x7, "6639be1914ab1a1d079379e890c08898bdcc495ccff3342a5d542b9553d4412535f62739bbd0fc7888fa08cef5a1a12e2cc728a1c770efa6d6874898483200b11f91363ffaaf7d356d8673f141aab2230e02eeb6d348c3f53a4b9c0645ffc0ef21a8fc86dc1d609bea7619d5742e4701ecdb1c7ce34d2d2be3144fc9ca"}], 0x390}, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=0x0]) 1.530650234s ago: executing program 0 (id=527): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x2) write(r0, &(0x7f0000000500)='\\x0100 000 b', 0xc) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x50000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x3}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0xfffffffe, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}, {}, {0x0, 0x7}, {0x0, 0xfffff0a4}], '\x00', 0x10000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x7fff, 0x9}}) keyctl$dh_compute(0x17, &(0x7f0000002740), 0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002880)={'digest_null-generic\x00'}}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r5, 0xffff}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0a0300c90029690f441566"], 0xd) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x15, 0x301, 0x4, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x24002000) (async, rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000022c0211"], 0x27c}}, 0x0) (rerun: 32) 1.310834848s ago: executing program 1 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x20000, &(0x7f0000000240)='!\\\\[(.!)/^\x00') mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x60, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "07d86d1ea7b3"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xb2, 0x2, 0x0, 0x7f}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x98, 0x52, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe3, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000300)={0xa, 0x6, 0xbaf6f7e23a3b5234, 0x3, 0x6, 0xb, 0x20, 0x47}, 0x1d, &(0x7f0000000340)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x2, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x5, 0x6}]}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) 720.255645ms ago: executing program 2 (id=531): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xe, 0xfea2, &(0x7f00000000c0)="464208b70000917e073a1f1411e3", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) 550.797376ms ago: executing program 2 (id=534): syz_emit_ethernet(0x1a0, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "b551df", 0x16a, 0x6, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0xab, 0x4, 0x0, 0x3, 0x0, [@mcast1, @mcast2]}, @dstopts={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}, @fragment={0x0, 0x0, 0x8, 0x1, 0x0, 0xb, 0x64}, @dstopts={0x0, 0xc, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x18, 0x2e, "b855ffdb06e5a308098870f67b3b0c8f2675405ad79b764aac44a2e8ccf1fc326bfea9580979666c56952ec5817f"}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x6df7}, @generic={0xf0, 0x3c, "22540638ecf6189b03a6163598b6597b77ec7ddb6c29215ea27ed336e9ba5ad88e271f03c55ef74b510c09a482d201c1fb204c9bb3fa0793785c0c76"}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x5, [0x1, 0x3, 0xfba5]}}]}, @hopopts={0x33, 0x0, '\x00', [@pad1]}], @payload_mcast={{{{{{0x32, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x2, 0x7, 0x0, 0x2, 0xd, 0x0, 0x1, 0x343, 0x9, 0x1, 0x4e21, 0x4e24}, 0x2, 0x4}, 0x4, 0x4}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x808) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cd042, 0x224) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040002050004820081e4b513ced85489e89939b5b8e816bb64bb3828ee50f254788d18bf80e32514647d29eff8dbb2970aadeaae7cd7bc02b9fd00197cdd29092d1471d706f59c6e93fe65d5021cae"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x426000, 0x0) fcntl$setflags(r5, 0x2, 0x0) 479.291596ms ago: executing program 2 (id=536): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400008, {0xff3b, 0x0, 0x5, 0xace}}}, @NL80211_ATTR_FILS_KEK={0x42, 0xf2, "3463a696748009ee21c9ac1be45fbe38f8fcffd0f10358199c6b535c801481d78748d75090ada9cb69995cf40eea14641ea2da701bf16574b178b4cac911"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c041}, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x20, 0x4, 0x2c, {0x2c, 0xd, "06c035ae5668d066968d744aef5429f6cc7f90fcaeffe449fdc0b85e574544a464fb4ec0d79a43937c5c"}}, &(0x7f0000000240)={0x0, 0x3, 0x71, @string={0x71, 0x3, "006e958852f8748d8f5145b04cdeebfcdcf7a18457ef0cc3cf6940e40036396c73a8b39a2163930cb7872b15ccafbacd488c2ae363b1488ba4e99b51c90fbf5f16416303ff85f0aee01f15c892261e5dc3aaa24f6e1dabf958c7cf6edff412c8652cae5f1a2f685ade9d10ff962b6d"}}, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0x2, "d9"}, @local=@item_4={0x3, 0x2, 0xb, "199a3bcf"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x2, "cd6b"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x214}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0xf5, "28ffa26f581cca9168a642f81b0c5559ded1d5dbee7f01ebf5ebc9502b493c885c9863db81e05a4f31d2c2d35b9623ef1d3073bc97d70ca25a59d7dbdae8d7002d412431e3b5fc87dad1eaa7bb6680f2c3674a8ec4c4c3a0a49e6082c4683216d697b2e4a3bfe2b20996a03a9819b9aea6b3a6428bc2ec8115553d7b7cabd937b3aed81f04efb408a5b9005e8cc9ecc11d0e3c1d47e135a41ab7973ffa225b0ba1a8f1ba6dc9ad27cae1c4b42f85159a4d912f498ad2801312d71c2a3279530d2fa8904bc985f1225783a7beec76cfef4c90c830a014e2d357cf0daea464d936ab606e1870aeddc4307c0af5ed4d2eda6107b0f190"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000500)={0x20, 0x1, 0xf5, "80884114a38a44b5aad72ab7306c5b3e1172ac9177006344f235f37ec8f01ddd5b607ac9e014069916472d1601c7a8bf890116dc3f8f94d71570ca9c27e58e75e0a38d18b3862d0e9d46b455c424a1f01fabb2b82bee067391266d83cb76cb6070a520b773be9ae63d2d4059edaf37dcff621fca95c7b992efb167fbe91931c5baba38ca3d82737b462b349f0e116a24a62796e6dfc2604ead5f82ce93c020a1f6ae39c3511167cf7112329e6effe7933e8a774e50e8a9a705195b5f57823be15a64460e952b9b98d4912c9c9394b1816ec50bc1ebfcc09e2dafdef9323b00301a79affd1382843004273e8650a2f08d95a9b85507"}, &(0x7f0000000600)={0x20, 0x3, 0x1}}) syz_80211_inject_frame(&(0x7f0000000680), &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @from_mac, @from_mac, {0x9, 0x7}}, @a_msdu=[{@broadcast, @broadcast, 0xbf, "51be48e6d9eb1a431ec20b960c6fbd0cfd1a89f3badd54af2db00c9ed020558c483217c6be0e85cdd8486d14ec85b66cb72ac1d06af4fc1b334a18ae20b33de0099ed3bdb5ee84e4ea05ab483e078c738a9d959421a13db0b5a0780fe99c95eb3c0f4de2fc67d285c8983b2446913464bf017973a1f568e8fe8156b5f28121097d3478229008fe8f5c4d47a41d4bd897911ed6e1f2e7cdde4a70f3961b509c3a6a82cc51d4adac1acedb4bf6bf2fd755b7c85973d1591e242d21be95073377"}, {@device_a, @device_a, 0x49, "d83e6ba2ca2864893094723b4fac3e965d9e1a01e7c2e9b7f722fd87faa9b91be3c0aaa947648a96d607366443cbd205501255839d81b73d1cc8eb8c2c0dcdce409411be20e92249d5"}]}, 0x140) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000840)="578c865c9e974522095904dbc4cf3d7b949ebadea93ebf71c9bf0e3cebdddda294c717a58ab17efa95327a782fb0e75cfc6a0a") r1 = syz_open_dev$vbi(&(0x7f0000000880), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000008c0)={0x6, 0x2, 0x2}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000900)={0x1, @raw_data="2cc1afa3a2b8fe09e05343b758c2917e0eb4428e367d9d514b56a01e745b482575a593a42dbbc1e09218b330960efbc72e5d198a7f50784c66011dc5e3c1ed9540545d04071a0bab5bc99828261449cf42bfe88716ad1caa1184a4f3cab59abb5315538ab6ae09686ec4ddcfbd6b4874146890094237945e4481036394dab3a2a9f5c46d6adb19c2b785234711a8f2608fe43afdfe390094ec0fa7c530d237c1e37db0635d4545b483d037589219e36f8ef62f55bc3940eb49675af530e0bbee6b284ab2d96e656c"}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000a00)={0x0, 0x0, {0x7, 0x4, 0x3006, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x20180, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000c80)={{r1, &(0x7f0000000ac0)='&*^\x00', 0x0, &(0x7f0000000b00)={@_ha_fsid={[0x7, 0x73]}, {0x5e21, 0xa3a, 0x1, 0x6}}, 0x0, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x8}, {[0x4dc2267d, 0x9, 0x200, 0xd]}, 0xfffff55f, 0x8b, &(0x7f0000000bc0)=""/139}) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000d00)) fstat(r3, &(0x7f0000000d40)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/173, 0xad}, {&(0x7f0000000e80)=""/230, 0xe6}, {&(0x7f0000000f80)=""/73, 0x49}, {&(0x7f0000001000)=""/199, 0xc7}, {&(0x7f0000001100)=""/32, 0x20}], 0x5) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) syz_80211_inject_frame(&(0x7f00000011c0)=@device_b, &(0x7f0000001200)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0x7, 0x1}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x2008, 0x3c, @default, @val={0x1, 0x4, [{0x1b}, {0x5}, {0x36}, {0x9}]}, @void, [{0xdd, 0x70, "c716e01cfe366595272012a9730d3d6b579e6dbf24de92348201884832c59ac241600855ba739cf6bf04a37cf2ec2f9b98e997241a78936735b363b8347f4b5a7512b1fdff8a912111ebe809cf75b0438d5f5fe7d2aba5e8f0309a779e6880d995a81059e3555ed47e361d704e482abe"}, {0xdd, 0x20, "ef830835a4b8eaa334ac1316d2488e5b54f8f7c3ce3c787661d3e836cc65565c"}]}, 0xbc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000012c0)={0x0, 0x7, "74269caaa883a8"}, &(0x7f0000001300)=0xf) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001340)={r4, 0x1, 0x20}, &(0x7f0000001380)=0xc) read$nci(r2, &(0x7f00000013c0)=""/93, 0x5d) syz_open_dev$usbfs(&(0x7f0000001540), 0x401, 0x400000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001880)={0x24, &(0x7f0000001740)={0x20, 0xb, 0x53, {0x53, 0x22, "35a2bc8c3c7f37a664fc848daa4793709fed068b29f6ca0fd6d65b348e2f23c20ebb43a898d594171e6f04b8a53b24219afb254306f1eb1cc65fc7d0731a2227de0e8cd329c4efede733a666a8bbe008ea"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000001800)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x8, "6690c18d"}, @local=@item_012={0x2, 0x2, 0x0, "d03a"}, @global=@item_4={0x3, 0x1, 0x2, "f3b7dcc8"}, @global=@item_012={0x1, 0x1, 0x9, '{'}]}}, &(0x7f0000001840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x549}}}}, &(0x7f0000001a80)={0x2c, &(0x7f00000018c0)={0x0, 0x18, 0x57, "fa012cae776dc04352503adbefa9b28347b344785e2d5cba627c6709866139636de5f6dbffd7967110bb16a3b548659c3bc885d36a04e59fca7f530fb0fd674a2ceffae3f4a966c4a4c26512fcfc939cf9e49747e99d54"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000019c0)={0x20, 0x1, 0x51, "7db8765c133600346be30daabf983c99bc8f86f23f279320d54fc88d4f26395ea72d33b8e8336b56c300c171dd228e2bfe68363cf85ee55c39263f272c1b42e2e202d9443566a9116c8833867d640e0ad2"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0x9f}}) 380.745785ms ago: executing program 3 (id=538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0xf0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) 311.007724ms ago: executing program 3 (id=539): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000800)=""/4096, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r2, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200102, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl(r10, 0x4048aecb, &(0x7f0000000240)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) 174.858779ms ago: executing program 3 (id=540): r0 = dup(0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x5) write$binfmt_misc(r0, &(0x7f0000000000)="aba09a39e40898e0e5bb3b8341c9580e9370a53fcb82520c7e31e50fe70caafb6ef95b6b0aa546c73c68f3ddabeb2f41b7829a41f15b252b13da934e551e8e8c493588cfa95413bf684b34fab69d74a76e207d4d86b7c70fb6c207cba714c6cf74a5cd517a8145b987afb7e2e4b11682ae117fa3fd00bf97ca5762875342a54688bf72dae01e9c0f128b5c4495a6f80df3a5d80ecbd21c90bafe76d298555eff2827a14c044a7ff7aee0656d9a51591068bdffb91a1a4f709230c026c99508868dc7dab03ed40a946b254a68f1db6fee080a2d09", 0xd4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0xd0, 0xa8, &(0x7f0000000140)="f2de13950c66e8f9ac686de5ab1086962fa9227113550a1d9d65898ba4453a2f4efa2c7d11c04c64f918c4794a4c6c9d3980b45258062c287f7d3887bc4ce5518a1c6b4e37984d2f2ccc3e0b3f46706b8b80d3f1edc3e601ec9d502bb731233bfd2469c045b4cefc3c5e7143fb9c3faefb33ad8eaa5df48687da49051df0c98ca40a8d3c22c5287e39dd3a4ab2ef6a4c05d0dff8e01cb303d4b919a21908abf75e0cdc5c453b52fd048c71f2334a30fadf731693cb8a06ed8bf6ebd80a034a0c54b610074e8a9dcf967e99c7c80440e5", &(0x7f0000000240)=""/168, 0x9, 0x0, 0x1000, 0x68, &(0x7f0000000300)="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", &(0x7f0000001300)="bcd661df40008efba7935cfd6c1d03014cdd6bb5f58e30d5dc4882692e73be0eb43a06048166a051c86a5ad13cf9deb9b54d0686ef76bed42d72b4ba290b2f61dece55d989e009d718f76a0883c28343696302d6d59704a9953dcd1106e4c58f5f578a03332626c4", 0x4, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000001400)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000001440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001480)=""/148) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540)={r0, 0xffffffffffffffff}, 0x4) listen(r1, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001580)={'dvmrp1\x00', 0x400}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000001600), 0x3, 0x2) bind$inet6(r0, &(0x7f0000001640)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000001680)={0x8001, 0x8000, 0x0, 'queue1\x00', 0x3}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000001740)={'filter\x00', 0x0, 0x0, 0x0, [0x6d, 0xd, 0x8, 0x8, 0x800, 0x7]}, &(0x7f00000017c0)=0x78) fcntl$notify(r5, 0x402, 0x1) fchmod(r0, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001800)={"dd43a344333965b4879a46f02e4f3783", 0x0, 0x0, {0x6, 0xffff}, {0x3, 0xc}, 0x3, [0x6, 0x9, 0x4, 0x2b654bca, 0xea, 0x3, 0x1000, 0x90f0, 0x8, 0x3, 0x458e, 0x9, 0xd09, 0x81, 0x80000000, 0xffffffffffffff8d]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001900)={{r1}, r6, 0x4, @unused=[0x400, 0xe, 0x1, 0x7], @name="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"}) r7 = openat(r0, &(0x7f0000002900)='.\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000002980)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000002940), {[{{@arp={@broadcast, @loopback, 0xff, 0xffffffff, 0x9, 0xb, {@empty, {[0x0, 0xe009867e34f169d5, 0xff, 0x80, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x1fbd22dea00e9195]}}, 0xc17d, 0x6, 0x98, 0x9, 0x9, 0x2, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @initdev={0xac, 0x1e, 0x6, 0x0}, @multicast2, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @empty, 0x0, 0xffffffff}}}, {{@arp={@multicast1, @broadcast, 0xffffffff, 0xffffff00, 0xb, 0x5, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x30, 0x200, 0x9, 0x80, 0x4, 0x27, 'veth0_to_bridge\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, 0x8, 0xfffffffe}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000002e00), &(0x7f0000002e40)=0x4) write$UHID_CREATE2(r8, &(0x7f0000002e80)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5f, 0x3ff, 0x80, 0xa, 0x400, 0x0, "43a7ca4130213fd77c038b13fa8ae1aa393c61c0c308f1f71edb18b636169cd5506b8a9847486de404e061cd0b4b1600a2b4d54b56839097d57ebdb0ba0435df794246498bde10672c203807beabce769213c995c076e223be0d7affeedf72"}}, 0x177) fchdir(r3) io_uring_enter(r0, 0x4cb9, 0x2af8, 0x88, &(0x7f0000003000), 0x8) 50.700885ms ago: executing program 3 (id=541): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000400000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 49.293318ms ago: executing program 0 (id=542): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) (async) r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='n\\ 127.0.0.1 2\\00000t\n', 0x18) (async) write(r2, &(0x7f0000000d00)='n\\ 127.0.0.1 2\\00000t\n', 0x18) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@routing={0x2b}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r4 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xd569, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000600)={0x5, 0x2, 0x1, "924ed7ce722b64ea6cadde9bfd9bf093f442bdcacc9522fa38f7dc4777fc0f63", 0x56555959}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000600)={0x5, 0x2, 0x1, "924ed7ce722b64ea6cadde9bfd9bf093f442bdcacc9522fa38f7dc4777fc0f63", 0x56555959}) socket$inet(0x2, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r7, &(0x7f0000000500), 0x1000) getsockopt$inet6_buf(r7, 0x29, 0xcd, &(0x7f0000000100)=""/125, &(0x7f0000000180)=0x7d) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x314}, "3939e0286ea0c77e", "ffc2397ac39cbf398197cba3a2fb57388e5b0a7a9142af7f48d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) sendmmsg$inet(r5, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) (async) sendmmsg$inet(r5, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 49.026802ms ago: executing program 3 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x900}) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='n\\ 127.0.0.1 2\\00000t\n', 0x18) (async) openat$cgroup_ro(r4, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, r5}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 306.279µs ago: executing program 0 (id=544): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a4fc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b87f7c40a1702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f600e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80729fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a5517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000047e628cd57cde4268f47c9aaec3a3dfe43e032b88ea53656a8740c1a4e0a99be5c97ba451d8b2b0f4e12ba96082e0f6b2dabe716699090058e61a38ce85611945106dd1309087d3a2cf3aaef6216ff3720c3917170544a509071166565eaa3c9285b5227f520cd47"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823d5b82f6158adc8b61bca70b554d23cb6d5f7e06f6f05", 0x595}], 0x1}, 0x400c000) (rerun: 32) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (rerun: 32) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x66, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x31, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x65, 0x66, 0x36, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1c}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x33, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x62, 0x61]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (rerun: 32) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x30, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x34, 0x64, 0x39, 0x30, 0x63, 0x30, 0x30, 0x30, 0x31, 0x30, 0x65, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233eec2e02a8899aabbccdd6eff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x50}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') socket$inet(0x2, 0x2, 0x1) 0s ago: executing program 3 (id=545): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='2', 0x1) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 50.657509][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.657524][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.693355][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.693373][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.721710][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.721728][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.730901][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.765034][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.765398][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.872325][ T5906] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 50.931894][ T5913] process 'syz.0.8' launched '/dev/fd/5' with NULL argv: empty string added [ 50.942036][ T5913] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 50.973483][ T5913] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 51.006324][ T5917] FAULT_INJECTION: forcing a failure. [ 51.006324][ T5917] name failslab, interval 1, probability 0, space 0, times 1 [ 51.006344][ T5917] CPU: 3 UID: 0 PID: 5917 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 51.006355][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.006362][ T5917] Call Trace: [ 51.006365][ T5917] [ 51.006370][ T5917] dump_stack_lvl+0x100/0x190 [ 51.006390][ T5917] should_fail_ex.cold+0x5/0xa [ 51.006424][ T5917] should_failslab+0xc2/0x120 [ 51.006443][ T5917] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.006456][ T5917] ? __ipv6_dev_ac_inc+0x351/0xdb0 [ 51.006475][ T5917] __ipv6_dev_ac_inc+0x351/0xdb0 [ 51.006493][ T5917] ipv6_sock_ac_join+0x67c/0xd80 [ 51.006509][ T5917] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 51.006523][ T5917] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 51.006540][ T5917] ? __local_bh_enable_ip+0xa5/0x120 [ 51.006553][ T5917] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.006567][ T5917] do_ipv6_setsockopt+0x3874/0x44a0 [ 51.006583][ T5917] ? avc_has_perm_noaudit+0x56/0x470 [ 51.006611][ T5917] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 51.006630][ T5917] ? avc_has_perm_noaudit+0x145/0x470 [ 51.006642][ T5917] ? avc_has_perm+0x135/0x1e0 [ 51.006652][ T5917] ? __pfx_avc_has_perm+0x10/0x10 [ 51.006665][ T5917] ? futex_wait+0x11e/0x370 [ 51.006679][ T5917] ? sock_has_perm+0x25a/0x2f0 [ 51.006691][ T5917] ? __pfx_sock_has_perm+0x10/0x10 [ 51.006704][ T5917] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 51.006721][ T5917] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 51.006742][ T5917] ? ipv6_setsockopt+0xcb/0x170 [ 51.006756][ T5917] ipv6_setsockopt+0xcb/0x170 [ 51.006773][ T5917] udpv6_setsockopt+0x64/0xb0 [ 51.006784][ T5917] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 51.006797][ T5917] do_sock_setsockopt+0xf3/0x1d0 [ 51.006809][ T5917] __sys_setsockopt+0x195/0x220 [ 51.006827][ T5917] __x64_sys_setsockopt+0xbd/0x160 [ 51.006842][ T5917] ? do_syscall_64+0xae/0x790 [ 51.006853][ T5917] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.006865][ T5917] do_syscall_64+0x123/0x790 [ 51.006878][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.006889][ T5917] RIP: 0033:0x7f4f36b9e199 [ 51.006899][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.006908][ T5917] RSP: 002b:00007f4f37b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.006919][ T5917] RAX: ffffffffffffffda RBX: 00007f4f36e25fa0 RCX: 00007f4f36b9e199 [ 51.006926][ T5917] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 51.006932][ T5917] RBP: 00007f4f36c358e0 R08: 0000000000000014 R09: 0000000000000000 [ 51.006938][ T5917] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 51.006945][ T5917] R13: 00007f4f36e26038 R14: 00007f4f36e25fa0 R15: 00007fffa31883f8 [ 51.006958][ T5917] [ 51.092012][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13'. [ 51.133124][ T5925] vxcan0: tx address claim with different name [ 51.528780][ T5942] FAULT_INJECTION: forcing a failure. [ 51.528780][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 51.528806][ T5942] CPU: 2 UID: 0 PID: 5942 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 51.528825][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.528835][ T5942] Call Trace: [ 51.528841][ T5942] [ 51.528848][ T5942] dump_stack_lvl+0x100/0x190 [ 51.528873][ T5942] should_fail_ex.cold+0x5/0xa [ 51.528897][ T5942] should_failslab+0xc2/0x120 [ 51.528949][ T5942] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.528964][ T5942] ? add_lock_to_list+0x9d/0x1d0 [ 51.528982][ T5942] ? fib6_add_1+0x2b0/0x1700 [ 51.529009][ T5942] fib6_add_1+0x2b0/0x1700 [ 51.529040][ T5942] fib6_add+0x1c5/0x1eb0 [ 51.529062][ T5942] ? lock_acquire+0x1d1/0x380 [ 51.529081][ T5942] ? do_raw_spin_lock+0x128/0x260 [ 51.529122][ T5942] ? __pfx_fib6_add+0x10/0x10 [ 51.529144][ T5942] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.529169][ T5942] ip6_ins_rt+0xb5/0x110 [ 51.529194][ T5942] ? __pfx_ip6_ins_rt+0x10/0x10 [ 51.529222][ T5942] ? __local_bh_enable_ip+0xa5/0x120 [ 51.529242][ T5942] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.529263][ T5942] __ipv6_dev_ac_inc+0x912/0xdb0 [ 51.529287][ T5942] ipv6_sock_ac_join+0x67c/0xd80 [ 51.529312][ T5942] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 51.529334][ T5942] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 51.529361][ T5942] ? __local_bh_enable_ip+0xa5/0x120 [ 51.529374][ T5942] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.529395][ T5942] do_ipv6_setsockopt+0x3874/0x44a0 [ 51.529418][ T5942] ? avc_has_perm_noaudit+0x56/0x470 [ 51.529440][ T5942] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 51.529466][ T5942] ? avc_has_perm_noaudit+0x145/0x470 [ 51.529487][ T5942] ? avc_has_perm+0x135/0x1e0 [ 51.529505][ T5942] ? __pfx_avc_has_perm+0x10/0x10 [ 51.529525][ T5942] ? futex_wait+0x11e/0x370 [ 51.529548][ T5942] ? sock_has_perm+0x25a/0x2f0 [ 51.529569][ T5942] ? __pfx_sock_has_perm+0x10/0x10 [ 51.529588][ T5942] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 51.529611][ T5942] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 51.529642][ T5942] ? ipv6_setsockopt+0xcb/0x170 [ 51.529664][ T5942] ipv6_setsockopt+0xcb/0x170 [ 51.529691][ T5942] udpv6_setsockopt+0x64/0xb0 [ 51.529709][ T5942] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 51.529724][ T5942] do_sock_setsockopt+0xf3/0x1d0 [ 51.529745][ T5942] __sys_setsockopt+0x195/0x220 [ 51.529774][ T5942] __x64_sys_setsockopt+0xbd/0x160 [ 51.529798][ T5942] ? do_syscall_64+0xae/0x790 [ 51.529817][ T5942] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.529836][ T5942] do_syscall_64+0x123/0x790 [ 51.529852][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.529869][ T5942] RIP: 0033:0x7fd40a19e199 [ 51.529884][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.529903][ T5942] RSP: 002b:00007fd40b062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.529920][ T5942] RAX: ffffffffffffffda RBX: 00007fd40a425fa0 RCX: 00007fd40a19e199 [ 51.529932][ T5942] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 51.529938][ T5942] RBP: 00007fd40a2358e0 R08: 0000000000000014 R09: 0000000000000000 [ 51.529945][ T5942] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 51.529956][ T5942] R13: 00007fd40a426038 R14: 00007fd40a425fa0 R15: 00007ffc3515fb58 [ 51.529979][ T5942] [ 51.746466][ T5960] cifs: Unknown parameter 'usernam~' [ 51.820790][ T5967] FAULT_INJECTION: forcing a failure. [ 51.820790][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 51.820817][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(full) [ 51.820837][ T5967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.820848][ T5967] Call Trace: [ 51.820854][ T5967] [ 51.820861][ T5967] dump_stack_lvl+0x100/0x190 [ 51.820892][ T5967] should_fail_ex.cold+0x5/0xa [ 51.820942][ T5967] should_failslab+0xc2/0x120 [ 51.820971][ T5967] __kmalloc_cache_noprof+0x91/0x6d0 [ 51.820991][ T5967] ? __ipv6_dev_ac_inc+0x351/0xdb0 [ 51.821020][ T5967] __ipv6_dev_ac_inc+0x351/0xdb0 [ 51.821050][ T5967] ipv6_sock_ac_join+0x67c/0xd80 [ 51.821077][ T5967] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 51.821101][ T5967] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 51.821132][ T5967] ? __local_bh_enable_ip+0xa5/0x120 [ 51.821153][ T5967] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.821181][ T5967] do_ipv6_setsockopt+0x3874/0x44a0 [ 51.821208][ T5967] ? avc_has_perm_noaudit+0x56/0x470 [ 51.821233][ T5967] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 51.821263][ T5967] ? avc_has_perm_noaudit+0x145/0x470 [ 51.821284][ T5967] ? avc_has_perm+0x135/0x1e0 [ 51.821303][ T5967] ? __pfx_avc_has_perm+0x10/0x10 [ 51.821323][ T5967] ? futex_wait+0x11e/0x370 [ 51.821346][ T5967] ? sock_has_perm+0x25a/0x2f0 [ 51.821365][ T5967] ? __pfx_sock_has_perm+0x10/0x10 [ 51.821401][ T5967] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 51.821430][ T5967] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 51.821464][ T5967] ? ipv6_setsockopt+0xcb/0x170 [ 51.821490][ T5967] ipv6_setsockopt+0xcb/0x170 [ 51.821520][ T5967] udpv6_setsockopt+0x64/0xb0 [ 51.821538][ T5967] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 51.821561][ T5967] do_sock_setsockopt+0xf3/0x1d0 [ 51.821582][ T5967] __sys_setsockopt+0x195/0x220 [ 51.821612][ T5967] __x64_sys_setsockopt+0xbd/0x160 [ 51.821636][ T5967] ? do_syscall_64+0xae/0x790 [ 51.821656][ T5967] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.821674][ T5967] do_syscall_64+0x123/0x790 [ 51.821696][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.821714][ T5967] RIP: 0033:0x7f547919e199 [ 51.821728][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.821745][ T5967] RSP: 002b:00007f547a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.821762][ T5967] RAX: ffffffffffffffda RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 51.821774][ T5967] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 51.821784][ T5967] RBP: 00007f54792358e0 R08: 0000000000000014 R09: 0000000000000000 [ 51.821794][ T5967] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 51.821805][ T5967] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 51.821830][ T5967] [ 51.830090][ T5747] Bluetooth: hci2: command tx timeout [ 51.830120][ T5747] Bluetooth: hci1: command tx timeout [ 51.830141][ T5747] Bluetooth: hci3: command tx timeout [ 51.840042][ T5091] Bluetooth: hci0: command tx timeout [ 51.876994][ T5972] bond0: entered promiscuous mode [ 51.877007][ T5972] bond_slave_0: entered promiscuous mode [ 51.877104][ T5972] bond_slave_1: entered promiscuous mode [ 51.878770][ T5972] batadv0: entered promiscuous mode [ 51.880515][ T5972] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 51.886805][ T5972] bond0: left promiscuous mode [ 51.886822][ T5972] bond_slave_0: left promiscuous mode [ 51.886990][ T5972] bond_slave_1: left promiscuous mode [ 51.891955][ T5972] batadv0: left promiscuous mode [ 51.981966][ T5977] netlink: 316 bytes leftover after parsing attributes in process `syz.1.31'. [ 51.981981][ T5977] netlink: 316 bytes leftover after parsing attributes in process `syz.1.31'. [ 52.000059][ T5980] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32'. [ 52.002039][ T5981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32'. [ 52.009697][ T5978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.31'. [ 52.011208][ T5978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.011369][ T5977] netlink: 128 bytes leftover after parsing attributes in process `syz.1.31'. [ 52.012686][ T5977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.018020][ T5980] syzkaller1: entered promiscuous mode [ 52.018035][ T5980] syzkaller1: entered allmulticast mode [ 52.022839][ T5980] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 52.022976][ T5980] syzkaller1: left promiscuous mode [ 52.022989][ T5980] syzkaller1: left allmulticast mode [ 52.447774][ T44] kauditd_printk_skb: 119 callbacks suppressed [ 52.447793][ T44] audit: type=1400 audit(1791353494.959:287): avc: denied { mount } for pid=5983 comm="syz.2.33" name="/" dev="autofs" ino=10004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.536693][ T44] audit: type=1400 audit(1791353495.049:288): avc: denied { write } for pid=5987 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.568801][ T44] audit: type=1400 audit(1791353495.079:289): avc: denied { mount } for pid=5990 comm="syz.2.37" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.733629][ T44] audit: type=1400 audit(1791353495.249:290): avc: denied { mount } for pid=6001 comm="syz.2.39" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.742357][ T5995] raw_sendmsg: syz.1.36 forgot to set AF_INET. Fix it! [ 52.750525][ T44] audit: type=1400 audit(1791353495.269:291): avc: denied { ioctl } for pid=5989 comm="syz.1.36" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.756312][ T44] audit: type=1400 audit(1791353495.269:292): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.827395][ T44] audit: type=1400 audit(1791353495.339:293): avc: denied { write } for pid=6005 comm="syz.2.40" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.872461][ T6006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6006 comm=syz.2.40 [ 52.921292][ T6010] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 52.984214][ T6011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=6011 comm=syz.2.41 [ 53.077890][ T44] audit: type=1400 audit(1791353495.589:294): avc: denied { bind } for pid=6012 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.078231][ T44] audit: type=1400 audit(1791353495.589:295): avc: denied { write } for pid=6012 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.115296][ T44] audit: type=1400 audit(1791353495.629:296): avc: denied { map } for pid=6015 comm="syz.1.43" path="/dev/vbi5" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.327930][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.45'. [ 53.393375][ T6026] nvme_fabrics: no handler found for transport r. [ 53.564494][ T6039] smpboot: CPU 1 is now offline [ 53.631310][ T6041] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 53.874300][ T6050] openvswitch: netlink: Key type 110 is out of range max 32 [ 53.884589][ T6044] tipc: Started in network mode [ 53.884604][ T6044] tipc: Node identity 1001001, cluster identity 4711 [ 53.884613][ T6044] tipc: Node number set to 16781313 [ 53.920250][ T5091] Bluetooth: hci0: command tx timeout [ 53.920273][ T5091] Bluetooth: hci3: command tx timeout [ 53.920286][ T5091] Bluetooth: hci1: command tx timeout [ 53.920297][ T5091] Bluetooth: hci2: command tx timeout [ 54.217424][ T6060] FAULT_INJECTION: forcing a failure. [ 54.217424][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 54.217456][ T6060] CPU: 2 UID: 0 PID: 6060 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT(full) [ 54.217476][ T6060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.217487][ T6060] Call Trace: [ 54.217493][ T6060] [ 54.217500][ T6060] dump_stack_lvl+0x100/0x190 [ 54.217531][ T6060] should_fail_ex.cold+0x5/0xa [ 54.217563][ T6060] should_failslab+0xc2/0x120 [ 54.217588][ T6060] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.217607][ T6060] ? __ipv6_dev_ac_inc+0x351/0xdb0 [ 54.217636][ T6060] __ipv6_dev_ac_inc+0x351/0xdb0 [ 54.217665][ T6060] ipv6_sock_ac_join+0x67c/0xd80 [ 54.217688][ T6060] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 54.217708][ T6060] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 54.217733][ T6060] ? __local_bh_enable_ip+0xa5/0x120 [ 54.217751][ T6060] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.217773][ T6060] do_ipv6_setsockopt+0x3874/0x44a0 [ 54.217797][ T6060] ? avc_has_perm_noaudit+0x56/0x470 [ 54.217819][ T6060] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 54.217847][ T6060] ? avc_has_perm_noaudit+0x145/0x470 [ 54.217864][ T6060] ? avc_has_perm+0x135/0x1e0 [ 54.217879][ T6060] ? __pfx_avc_has_perm+0x10/0x10 [ 54.217898][ T6060] ? futex_wait+0x11e/0x370 [ 54.217919][ T6060] ? sock_has_perm+0x25a/0x2f0 [ 54.217938][ T6060] ? __pfx_sock_has_perm+0x10/0x10 [ 54.217956][ T6060] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 54.217981][ T6060] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 54.218012][ T6060] ? ipv6_setsockopt+0xcb/0x170 [ 54.218035][ T6060] ipv6_setsockopt+0xcb/0x170 [ 54.218061][ T6060] udpv6_setsockopt+0x64/0xb0 [ 54.218079][ T6060] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.218101][ T6060] do_sock_setsockopt+0xf3/0x1d0 [ 54.218121][ T6060] __sys_setsockopt+0x195/0x220 [ 54.218150][ T6060] __x64_sys_setsockopt+0xbd/0x160 [ 54.218172][ T6060] ? do_syscall_64+0xae/0x790 [ 54.218191][ T6060] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.218209][ T6060] do_syscall_64+0x123/0x790 [ 54.218228][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.218247][ T6060] RIP: 0033:0x7f547919e199 [ 54.218263][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.218279][ T6060] RSP: 002b:00007f547a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.218296][ T6060] RAX: ffffffffffffffda RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 54.218307][ T6060] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 54.218318][ T6060] RBP: 00007f54792358e0 R08: 0000000000000014 R09: 0000000000000000 [ 54.218328][ T6060] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 54.218338][ T6060] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 54.218363][ T6060] [ 54.355144][ T6066] geneve2: entered promiscuous mode [ 54.371186][ T6070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.63'. [ 54.487043][ T234] IPVS: starting estimator thread 0... [ 54.589529][ T6075] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.793663][ T6092] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 54.793683][ T6092] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 54.995015][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.996009][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.381264][ T6112] FAULT_INJECTION: forcing a failure. [ 55.381264][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 55.381294][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 55.381314][ T6112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.381326][ T6112] Call Trace: [ 55.381332][ T6112] [ 55.381339][ T6112] dump_stack_lvl+0x100/0x190 [ 55.381372][ T6112] should_fail_ex.cold+0x5/0xa [ 55.381399][ T6112] should_failslab+0xc2/0x120 [ 55.381428][ T6112] __kmalloc_noprof+0xfc/0x840 [ 55.381451][ T6112] ? udpv6_init_sock+0x24e/0x450 [ 55.381475][ T6112] udpv6_init_sock+0x24e/0x450 [ 55.381493][ T6112] ? __pfx_udpv6_init_sock+0x10/0x10 [ 55.381514][ T6112] inet6_create+0xb1a/0x12b0 [ 55.381538][ T6112] ? inet6_create+0x7f/0x12b0 [ 55.381563][ T6112] __sock_create+0x339/0x860 [ 55.381588][ T6112] __sys_socket+0x14d/0x260 [ 55.381610][ T6112] ? __pfx___sys_socket+0x10/0x10 [ 55.381638][ T6112] __x64_sys_socket+0x72/0xb0 [ 55.381659][ T6112] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.381680][ T6112] do_syscall_64+0x123/0x790 [ 55.381704][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.381723][ T6112] RIP: 0033:0x7fd40a19e199 [ 55.381738][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.381755][ T6112] RSP: 002b:00007fd40b062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 55.381774][ T6112] RAX: ffffffffffffffda RBX: 00007fd40a425fa0 RCX: 00007fd40a19e199 [ 55.381806][ T6112] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 55.381817][ T6112] RBP: 00007fd40a2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 55.381829][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.381841][ T6112] R13: 00007fd40a426038 R14: 00007fd40a425fa0 R15: 00007ffc3515fb58 [ 55.381866][ T6112] [ 55.499570][ T5825] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.544002][ T6139] loop9: detected capacity change from 0 to 16384 [ 55.600201][ T6139] loop9: detected capacity change from 16384 to 15871 [ 55.664396][ T6144] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 55.673007][ T5825] usb 8-1: Using ep0 maxpacket: 8 [ 55.677671][ T5825] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.686018][ T5825] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 55.686058][ T5825] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.686075][ T5825] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.686092][ T5825] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.686109][ T5825] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.686142][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.698530][ T6144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.750887][ T6144] bond1: (slave gretap1): making interface the new active one [ 55.752270][ T6144] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 55.794467][ T6151] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 55.794483][ T6151] overlayfs: missing 'lowerdir' [ 55.852275][ T6155] FAULT_INJECTION: forcing a failure. [ 55.852275][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.852303][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 55.852323][ T6155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.852333][ T6155] Call Trace: [ 55.852339][ T6155] [ 55.852346][ T6155] dump_stack_lvl+0x100/0x190 [ 55.852390][ T6155] should_fail_ex.cold+0x5/0xa [ 55.852415][ T6155] _copy_to_user+0x32/0xd0 [ 55.852445][ T6155] simple_read_from_buffer+0xcb/0x170 [ 55.852471][ T6155] proc_fail_nth_read+0x1af/0x230 [ 55.852496][ T6155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.852521][ T6155] ? rw_verify_area+0xce/0x6d0 [ 55.852540][ T6155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.852563][ T6155] vfs_read+0x1e4/0xb40 [ 55.852580][ T6155] ? lock_acquire+0x1d1/0x380 [ 55.852596][ T6155] ? __fget_files+0x34/0x3d0 [ 55.852618][ T6155] ? __pfx_vfs_read+0x10/0x10 [ 55.852634][ T6155] ? find_held_lock+0x2b/0x80 [ 55.852658][ T6155] ? __fget_files+0x215/0x3d0 [ 55.852685][ T6155] ? __fget_files+0x21f/0x3d0 [ 55.852715][ T6155] ksys_read+0x12a/0x250 [ 55.852735][ T6155] ? __pfx_ksys_read+0x10/0x10 [ 55.852762][ T6155] do_syscall_64+0x123/0x790 [ 55.852790][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.852808][ T6155] RIP: 0033:0x7fd40a15e9ce [ 55.852823][ T6155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.852838][ T6155] RSP: 002b:00007fd40b061fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.852855][ T6155] RAX: ffffffffffffffda RBX: 00007fd40b0626c0 RCX: 00007fd40a15e9ce [ 55.852867][ T6155] RDX: 000000000000000f RSI: 00007fd40b0620a0 RDI: 0000000000000005 [ 55.852878][ T6155] RBP: 00007fd40b062090 R08: 0000000000000000 R09: 0000000000000000 [ 55.852911][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.852926][ T6155] R13: 00007fd40a426038 R14: 00007fd40a425fa0 R15: 00007ffc3515fb58 [ 55.852956][ T6155] [ 55.926673][ T6157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.948558][ T5825] usb 8-1: GET_CAPABILITIES returned 0 [ 55.948593][ T5825] usbtmc 8-1:16.0: can't read capabilities [ 55.987871][ T6162] dlm: non-version read from control device 4082 [ 55.992174][ T5747] Bluetooth: hci2: command tx timeout [ 55.992202][ T5747] Bluetooth: hci1: command tx timeout [ 55.992220][ T5747] Bluetooth: hci3: command tx timeout [ 55.992239][ T5747] Bluetooth: hci0: command tx timeout [ 55.998019][ T6162] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 55.998303][ T6162] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 55.998449][ T6162] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 55.998578][ T6162] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 56.080921][ T1361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.116088][ T6172] ======================================================= [ 56.116088][ T6172] WARNING: The mand mount option has been deprecated and [ 56.116088][ T6172] and is ignored by this kernel. Remove the mand [ 56.116088][ T6172] option from the mount to silence this warning. [ 56.116088][ T6172] ======================================================= [ 56.116212][ T6172] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 56.116219][ T6172] overlayfs: missing 'lowerdir' [ 56.206652][ T5725] usb 8-1: USB disconnect, device number 2 [ 56.237107][ T6183] xt_hl: Unknown TTL match mode: 255 [ 56.251878][ T1361] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 56.255503][ T1361] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.257472][ T1361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 56.257490][ T1361] usb 6-1: Product: syz [ 56.257501][ T1361] usb 6-1: Manufacturer: syz [ 56.257512][ T1361] usb 6-1: SerialNumber: syz [ 56.472622][ T1361] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 56.687457][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687563][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687652][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687732][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687812][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687894][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.687971][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.688053][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.2.108 [ 56.725678][ T6213] __nla_validate_parse: 2 callbacks suppressed [ 56.725694][ T6213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.725707][ T6213] netlink: 6 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.725722][ T6213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.725733][ T6213] netlink: 6 bytes leftover after parsing attributes in process `syz.1.88'. [ 56.775826][ T6154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.796380][ T5725] usb 6-1: USB disconnect, device number 2 [ 56.806221][ T5725] usblp0: removed [ 56.855487][ T6220] FAULT_INJECTION: forcing a failure. [ 56.855487][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 56.855508][ T6220] CPU: 2 UID: 0 PID: 6220 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 56.855520][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.855526][ T6220] Call Trace: [ 56.855530][ T6220] [ 56.855534][ T6220] dump_stack_lvl+0x100/0x190 [ 56.855554][ T6220] should_fail_ex.cold+0x5/0xa [ 56.855571][ T6220] should_failslab+0xc2/0x120 [ 56.855588][ T6220] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.855602][ T6220] ? d_instantiate+0x8a/0xb0 [ 56.855612][ T6220] ? alloc_empty_file+0x5b/0x1c0 [ 56.855639][ T6220] alloc_empty_file+0x5b/0x1c0 [ 56.855657][ T6220] alloc_file_pseudo+0x183/0x290 [ 56.855675][ T6220] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 56.855694][ T6220] ? _raw_spin_unlock+0x28/0x50 [ 56.855705][ T6220] ? alloc_fd+0x471/0x7a0 [ 56.855722][ T6220] __anon_inode_getfile+0xe8/0x280 [ 56.855738][ T6220] do_epoll_create+0x3ac/0x540 [ 56.855749][ T6220] __x64_sys_epoll_create1+0x30/0x40 [ 56.855760][ T6220] do_syscall_64+0x123/0x790 [ 56.855774][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.855785][ T6220] RIP: 0033:0x7fd40a19e199 [ 56.855794][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.855805][ T6220] RSP: 002b:00007fd40b062028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 56.855816][ T6220] RAX: ffffffffffffffda RBX: 00007fd40a425fa0 RCX: 00007fd40a19e199 [ 56.855823][ T6220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.855829][ T6220] RBP: 00007fd40a2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 56.855835][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.855841][ T6220] R13: 00007fd40a426038 R14: 00007fd40a425fa0 R15: 00007ffc3515fb58 [ 56.855855][ T6220] [ 56.952104][ T6227] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 56.952130][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.952282][ T6225] Zero length message leads to an empty skb [ 57.044916][ T6234] jffs2: notice: (6234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.353534][ T6249] FAULT_INJECTION: forcing a failure. [ 57.353534][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 57.353565][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(full) [ 57.353586][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.353596][ T6249] Call Trace: [ 57.353603][ T6249] [ 57.353610][ T6249] dump_stack_lvl+0x100/0x190 [ 57.353642][ T6249] should_fail_ex.cold+0x5/0xa [ 57.353669][ T6249] should_failslab+0xc2/0x120 [ 57.353695][ T6249] __kmalloc_cache_noprof+0x91/0x6d0 [ 57.353716][ T6249] ? __ipv6_dev_ac_inc+0x351/0xdb0 [ 57.353758][ T6249] __ipv6_dev_ac_inc+0x351/0xdb0 [ 57.353790][ T6249] ipv6_sock_ac_join+0x67c/0xd80 [ 57.353818][ T6249] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 57.353841][ T6249] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 57.353870][ T6249] ? __local_bh_enable_ip+0xa5/0x120 [ 57.353890][ T6249] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.353914][ T6249] do_ipv6_setsockopt+0x3874/0x44a0 [ 57.353939][ T6249] ? avc_has_perm_noaudit+0x56/0x470 [ 57.353962][ T6249] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 57.353992][ T6249] ? avc_has_perm_noaudit+0x145/0x470 [ 57.354013][ T6249] ? avc_has_perm+0x135/0x1e0 [ 57.354035][ T6249] ? __pfx_avc_has_perm+0x10/0x10 [ 57.354055][ T6249] ? futex_wait+0x11e/0x370 [ 57.354080][ T6249] ? sock_has_perm+0x25a/0x2f0 [ 57.354100][ T6249] ? __pfx_sock_has_perm+0x10/0x10 [ 57.354120][ T6249] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 57.354148][ T6249] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 57.354182][ T6249] ? ipv6_setsockopt+0xcb/0x170 [ 57.354206][ T6249] ipv6_setsockopt+0xcb/0x170 [ 57.354233][ T6249] udpv6_setsockopt+0x64/0xb0 [ 57.354252][ T6249] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 57.354274][ T6249] do_sock_setsockopt+0xf3/0x1d0 [ 57.354298][ T6249] __sys_setsockopt+0x195/0x220 [ 57.354330][ T6249] __x64_sys_setsockopt+0xbd/0x160 [ 57.354374][ T6249] ? do_syscall_64+0xae/0x790 [ 57.354397][ T6249] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.354419][ T6249] do_syscall_64+0x123/0x790 [ 57.354449][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.354470][ T6249] RIP: 0033:0x7f84b059e199 [ 57.354486][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.354503][ T6249] RSP: 002b:00007f84b13c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.354522][ T6249] RAX: ffffffffffffffda RBX: 00007f84b0825fa0 RCX: 00007f84b059e199 [ 57.354536][ T6249] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 57.354547][ T6249] RBP: 00007f84b06358e0 R08: 0000000000000014 R09: 0000000000000000 [ 57.354557][ T6249] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 57.354569][ T6249] R13: 00007f84b0826038 R14: 00007f84b0825fa0 R15: 00007fff2cbab3f8 [ 57.354595][ T6249] [ 58.011726][ T6266] selinux_netlink_send: 25 callbacks suppressed [ 58.011745][ T6266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6266 comm=syz.0.125 [ 58.011860][ T44] kauditd_printk_skb: 73 callbacks suppressed [ 58.011874][ T44] audit: type=1400 audit(1791353500.529:370): avc: denied { setopt } for pid=6265 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.013009][ T44] audit: type=1400 audit(1791353500.529:371): avc: denied { map } for pid=6265 comm="syz.0.125" path="socket:[11649]" dev="sockfs" ino=11649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.013172][ T44] audit: type=1400 audit(1791353500.529:372): avc: denied { read } for pid=6265 comm="syz.0.125" path="socket:[11649]" dev="sockfs" ino=11649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.061629][ T44] audit: type=1400 audit(1791353500.579:373): avc: denied { execute } for pid=6271 comm="syz.2.126" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.107949][ T44] audit: type=1400 audit(1791353500.619:374): avc: denied { create } for pid=6273 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.108508][ T44] audit: type=1400 audit(1791353500.619:375): avc: denied { bind } for pid=6273 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.235516][ T6282] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 58.251342][ T6282] bond2: entered promiscuous mode [ 58.251526][ T6282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.274301][ T5825] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.278049][ T6282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.278322][ T6282] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 58.278337][ T6282] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 58.285006][ T6282] bond2: (slave ip6gre1): making interface the new active one [ 58.285025][ T6282] ip6gre1: entered promiscuous mode [ 58.289176][ T6282] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 58.294080][ T6282] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 58.313329][ T44] audit: type=1400 audit(1791353500.829:376): avc: denied { create } for pid=6294 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.315513][ T44] audit: type=1400 audit(1791353500.829:377): avc: denied { setopt } for pid=6294 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.323026][ T44] audit: type=1400 audit(1791353500.839:378): avc: denied { write } for pid=6294 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.326948][ T44] audit: type=1400 audit(1791353500.839:379): avc: denied { read } for pid=6294 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.345943][ T5825] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 58.495808][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.495838][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.509019][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 58.518989][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.519016][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.523230][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.559258][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.559296][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.559322][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.559349][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.256815][ T6332] FAULT_INJECTION: forcing a failure. [ 59.256815][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 59.256838][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(full) [ 59.256850][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.256857][ T6332] Call Trace: [ 59.256861][ T6332] [ 59.256865][ T6332] dump_stack_lvl+0x100/0x190 [ 59.256906][ T6332] should_fail_ex.cold+0x5/0xa [ 59.256923][ T6332] should_failslab+0xc2/0x120 [ 59.256940][ T6332] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.256952][ T6332] ? nsim_fib_event_nb+0x1b4/0xe50 [ 59.256967][ T6332] nsim_fib_event_nb+0x1b4/0xe50 [ 59.256980][ T6332] ? lock_acquire+0x1d1/0x380 [ 59.256992][ T6332] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 59.257010][ T6332] notifier_call_chain+0x99/0x3f0 [ 59.257029][ T6332] atomic_notifier_call_chain+0x71/0x1c0 [ 59.257046][ T6332] call_fib_notifiers+0x33/0x70 [ 59.257058][ T6332] fib6_add_rt2node+0x14e3/0x3df0 [ 59.257085][ T6332] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 59.257101][ T6332] ? fib6_add_1+0xe1c/0x1700 [ 59.257121][ T6332] ? fib6_add+0x60e/0x1eb0 [ 59.257134][ T6332] fib6_add+0x60e/0x1eb0 [ 59.257155][ T6332] ? do_raw_spin_lock+0x128/0x260 [ 59.257171][ T6332] ? __pfx_fib6_add+0x10/0x10 [ 59.257185][ T6332] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 59.257204][ T6332] ip6_ins_rt+0xb5/0x110 [ 59.257222][ T6332] ? __pfx_ip6_ins_rt+0x10/0x10 [ 59.257245][ T6332] __ipv6_dev_ac_inc+0x912/0xdb0 [ 59.257272][ T6332] ipv6_sock_ac_join+0x67c/0xd80 [ 59.257296][ T6332] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 59.257316][ T6332] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 59.257343][ T6332] ? __local_bh_enable_ip+0xa5/0x120 [ 59.257362][ T6332] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.257385][ T6332] do_ipv6_setsockopt+0x3874/0x44a0 [ 59.257410][ T6332] ? avc_has_perm_noaudit+0x56/0x470 [ 59.257434][ T6332] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 59.257463][ T6332] ? avc_has_perm_noaudit+0x145/0x470 [ 59.257485][ T6332] ? avc_has_perm+0x135/0x1e0 [ 59.257501][ T6332] ? __pfx_avc_has_perm+0x10/0x10 [ 59.257521][ T6332] ? futex_wait+0x11e/0x370 [ 59.257545][ T6332] ? sock_has_perm+0x25a/0x2f0 [ 59.257564][ T6332] ? __pfx_sock_has_perm+0x10/0x10 [ 59.257584][ T6332] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 59.257608][ T6332] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 59.257641][ T6332] ? ipv6_setsockopt+0xcb/0x170 [ 59.257679][ T6332] ipv6_setsockopt+0xcb/0x170 [ 59.257709][ T6332] udpv6_setsockopt+0x64/0xb0 [ 59.257728][ T6332] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 59.257751][ T6332] do_sock_setsockopt+0xf3/0x1d0 [ 59.257772][ T6332] __sys_setsockopt+0x195/0x220 [ 59.257803][ T6332] __x64_sys_setsockopt+0xbd/0x160 [ 59.257850][ T6332] ? do_syscall_64+0xae/0x790 [ 59.257871][ T6332] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.257892][ T6332] do_syscall_64+0x123/0x790 [ 59.257916][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.257935][ T6332] RIP: 0033:0x7f4f36b9e199 [ 59.257953][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.257969][ T6332] RSP: 002b:00007f4f37b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.257988][ T6332] RAX: ffffffffffffffda RBX: 00007f4f36e25fa0 RCX: 00007f4f36b9e199 [ 59.258001][ T6332] RDX: 000000000000001b RSI: 0000000000000029 RDI: 000000000000000b [ 59.258012][ T6332] RBP: 00007f4f36c358e0 R08: 0000000000000014 R09: 0000000000000000 [ 59.258023][ T6332] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 59.258033][ T6332] R13: 00007f4f36e26038 R14: 00007f4f36e25fa0 R15: 00007fffa31883f8 [ 59.258057][ T6332] [ 60.015827][ T6346] /dev/sg0: Can't lookup blockdev [ 60.207122][ T6367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.319957][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.349432][ T6386] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 60.349432][ T6386] [ 60.349600][ T6386] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 60.349766][ T6386] CIFS: Attempting to mount //127.0.0.1/share [ 60.480357][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 60.480807][ T5881] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 60.481589][ T5881] usb 6-1: config 155 contains an unexpected descriptor of type 0x2, skipping [ 60.481600][ T5881] usb 6-1: config 155 has an invalid descriptor of length 255, skipping remainder of the config [ 60.481620][ T5881] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 60.481637][ T5881] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 21, changing to 8 [ 60.481650][ T5881] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 60.484716][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.484729][ T5881] usb 6-1: Product: syz [ 60.484736][ T5881] usb 6-1: Manufacturer: syz [ 60.484743][ T5881] usb 6-1: SerialNumber: syz [ 60.535577][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 60.543984][ T5881] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input7 [ 60.587908][ T6408] binder: Bad value for 'max' [ 60.719643][ T5811] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.719711][ T5811] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.719730][ T5811] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.719746][ T5811] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.742360][ T5881] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 60.742376][ T5881] (id 0x00) [ 60.791916][ T5881] rc_core: IR keymap rc-imon-pad not found [ 60.791932][ T5881] Registered IR keymap rc-empty [ 60.791989][ T5881] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 60.792002][ T5881] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 60.929193][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.942778][ T5881] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 60.943710][ T5881] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input8 [ 60.950924][ T5881] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 61.079536][ T5825] usb 5-1: device descriptor read/64, error -71 [ 61.131542][ T10] usb 6-1: USB disconnect, device number 3 [ 61.187175][ T6386] CIFS: VFS: cifs_mount failed w/return code = -112 [ 61.262838][ T6419] ufs: You didn't specify the type of your ufs filesystem [ 61.262838][ T6419] [ 61.262838][ T6419] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 61.262838][ T6419] [ 61.262838][ T6419] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 61.262860][ T6419] ufs: failed to set blocksize [ 61.300899][ T6421] syzkaller0: entered promiscuous mode [ 61.300919][ T6421] syzkaller0: entered allmulticast mode [ 61.329475][ T5825] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.368148][ T6426] netlink: 'syz.2.162': attribute type 6 has an invalid length. [ 61.395829][ T6426] netlink: 'syz.2.162': attribute type 3 has an invalid length. [ 61.404359][ T6426] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 61.418951][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.421306][ T6426] team0: Port device netdevsim1 added [ 61.459380][ T5825] usb 5-1: device descriptor read/64, error -71 [ 61.478712][ T6430] jffs2: notice: (6430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 61.569435][ T5825] usb usb5-port1: attempt power cycle [ 61.747748][ T6450] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 61.755482][ T6450] team0: Port device netdevsim1 removed [ 61.758421][ T6450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.765370][ T6450] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 61.775712][ T6453] Could not find key with description: [syznek_sig=syz] [ 61.775726][ T6453] process_request_key_err: No key [ 61.775734][ T6453] Could not find valid key in user session keyring for sig specified in mount option: [syznek_sig=syz] [ 61.775744][ T6453] One or more global auth toks could not properly register; rc = [-2] [ 61.775772][ T6453] Error validating options; rc = [-2] [ 61.881471][ T6457] kvm: user requested TSC rate below hardware speed [ 61.900312][ T6467] __nla_validate_parse: 135 callbacks suppressed [ 61.900325][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.911195][ T6466] comedi comedi0: pcl726: I/O base address or length out of range [ 61.930399][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.951099][ T5825] usb 5-1: device descriptor read/8, error -71 [ 62.019363][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 62.190740][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 62.209312][ T5825] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.233053][ T5825] usb 5-1: device descriptor read/8, error -71 [ 62.277417][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=6489 comm=syz.2.185 [ 62.290075][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.185'. [ 62.290841][ T6489] 9pnet_fd: Insufficient options for proto=fd [ 62.344598][ T5825] usb usb5-port1: unable to enumerate USB device [ 62.381694][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 62.537169][ T6491] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input9 [ 62.544684][ T6513] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.194'. [ 62.558102][ T6517] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.194'. [ 62.760887][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.802261][ T6534] overlayfs: regular lower layers cannot follow data lower layers [ 62.825963][ T6492] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input10 [ 62.875173][ T6535] overlay: Unknown parameter 'subj_role' [ 62.930075][ T6540] kvm: apic: phys broadcast and lowest prio [ 62.934872][ T6538] fuse: Bad value for 'fd' [ 62.938646][ T6539] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 62.938789][ T6539] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 63.010471][ T6544] bond2: entered allmulticast mode [ 63.013026][ T6544] netlink: 3 bytes leftover after parsing attributes in process `syz.2.201'. [ 63.016152][ T6544] macvlan2: entered promiscuous mode [ 63.016164][ T6544] macvlan2: entered allmulticast mode [ 63.016935][ T6544] bond2: entered promiscuous mode [ 63.017287][ T6544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.025471][ T6544] bond2: left promiscuous mode [ 63.297061][ T44] kauditd_printk_skb: 53 callbacks suppressed [ 63.297073][ T44] audit: type=1400 audit(1791353505.809:433): avc: denied { write } for pid=6560 comm="syz.2.205" name="nullb" dev="configfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.297260][ T44] audit: type=1400 audit(1791353505.809:434): avc: denied { create } for pid=6560 comm="syz.2.205" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 63.302485][ T44] audit: type=1400 audit(1791353505.819:435): avc: denied { write } for pid=6560 comm="syz.2.205" name="power" dev="configfs" ino=13076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 63.302731][ T44] audit: type=1400 audit(1791353505.819:436): avc: denied { open } for pid=6560 comm="syz.2.205" path="/74/config/nullb/nullb1/power" dev="configfs" ino=13076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 63.339913][ T6561] null_blk: disk nullb1 created [ 63.523503][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.525301][ T44] audit: type=1400 audit(1791353506.039:437): avc: denied { mounton } for pid=6563 comm="syz.2.206" path="/75/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.532002][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 63.540414][ T6564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.540797][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.540928][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541090][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541188][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541282][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541375][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541472][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541567][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.541665][ T6564] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 63.583772][ T6565] bond3: (slave bridge1): making interface the new active one [ 63.586983][ T6565] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 63.658760][ T6574] NILFS (nullb0): couldn't find nilfs on the device [ 63.751411][ T44] audit: type=1400 audit(1791353506.259:438): avc: denied { bind } for pid=6583 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.751620][ T44] audit: type=1400 audit(1791353506.269:439): avc: denied { listen } for pid=6583 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.759950][ T44] audit: type=1400 audit(1791353506.269:440): avc: denied { connect } for pid=6583 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.783921][ T6596] sctp: [Deprecated]: syz.2.213 (pid 6596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.783921][ T6596] Use struct sctp_sack_info instead [ 63.845089][ T44] audit: type=1326 audit(1791353506.359:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.0.216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f36b9e199 code=0x0 [ 63.868314][ T6608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6608 comm=syz.1.218 [ 63.868815][ T44] audit: type=1400 audit(1791353506.379:442): avc: denied { setopt } for pid=6607 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.906886][ T6612] CIFS: VFS: UNC: missing share name [ 63.906953][ T6612] CIFS: VFS: Malformed UNC in devname [ 63.976115][ T6618] WARNING! power/level is deprecated; use power/control instead [ 63.988144][ T6618] FAULT_INJECTION: forcing a failure. [ 63.988144][ T6618] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.988165][ T6618] CPU: 3 UID: 0 PID: 6618 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.988181][ T6618] Tainted: [L]=SOFTLOCKUP [ 63.988185][ T6618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.988192][ T6618] Call Trace: [ 63.988196][ T6618] [ 63.988201][ T6618] dump_stack_lvl+0x100/0x190 [ 63.988220][ T6618] should_fail_ex.cold+0x5/0xa [ 63.988234][ T6618] ? prepare_alloc_pages+0x16d/0x5b0 [ 63.988254][ T6618] should_fail_alloc_page+0xeb/0x140 [ 63.988272][ T6618] prepare_alloc_pages+0x1f0/0x5b0 [ 63.988291][ T6618] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 63.988305][ T6618] ? __pfx_stack_trace_save+0x10/0x10 [ 63.988318][ T6618] ? stack_depot_save_flags+0x27/0x9f0 [ 63.988336][ T6618] ? kasan_save_stack+0x3f/0x50 [ 63.988350][ T6618] ? kasan_save_track+0x14/0x30 [ 63.988364][ T6618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 63.988397][ T6618] ? __lock_acquire+0x5c0/0x1f40 [ 63.988412][ T6618] ? __lock_acquire+0x5c0/0x1f40 [ 63.988424][ T6618] ? __css_rstat_updated+0x1ce/0x590 [ 63.988450][ T6618] ? find_held_lock+0x2b/0x80 [ 63.988470][ T6618] ? page_table_check_set+0x30f/0x580 [ 63.988493][ T6618] ? page_table_check_set+0x30f/0x580 [ 63.988521][ T6618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.988545][ T6618] ? policy_nodemask+0xed/0x4f0 [ 63.988573][ T6618] alloc_pages_mpol+0x201/0x550 [ 63.988600][ T6618] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 63.988626][ T6618] ? folio_add_new_anon_rmap+0x52d/0x18c0 [ 63.988655][ T6618] folio_alloc_mpol_noprof+0x36/0x260 [ 63.988667][ T6618] vma_alloc_folio_noprof+0xed/0x1d0 [ 63.988678][ T6618] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 63.988690][ T6618] ? __pfx___might_resched+0x10/0x10 [ 63.988701][ T6618] ? copy_page_range+0x1c91/0x57c0 [ 63.988720][ T6618] copy_page_range+0x4096/0x57c0 [ 63.988753][ T6618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.988767][ T6618] ? __pfx_copy_page_range+0x10/0x10 [ 63.988783][ T6618] ? mas_wr_store_entry+0xa4/0x1d50 [ 63.988802][ T6618] ? mas_store+0x745/0xe20 [ 63.988821][ T6618] ? __pfx___vma_start_write+0x10/0x10 [ 63.988841][ T6618] dup_mmap+0x1230/0x2370 [ 63.988884][ T6618] ? __pfx_dup_mmap+0x10/0x10 [ 63.988900][ T6618] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.988913][ T6618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.988928][ T6618] ? __lock_acquire+0x5c0/0x1f40 [ 63.988950][ T6618] ? lock_acquire+0x1d1/0x380 [ 63.988962][ T6618] ? copy_process+0x4816/0x8380 [ 63.988980][ T6618] copy_process+0x4821/0x8380 [ 63.989001][ T6618] ? __pfx_copy_process+0x10/0x10 [ 63.989014][ T6618] ? futex_wake+0x4ea/0x5e0 [ 63.989030][ T6618] kernel_clone+0x176/0x9d0 [ 63.989044][ T6618] ? __pfx_kernel_clone+0x10/0x10 [ 63.989059][ T6618] ? ksys_write+0x190/0x250 [ 63.989076][ T6618] __do_sys_clone+0xd9/0x120 [ 63.989089][ T6618] ? __pfx___do_sys_clone+0x10/0x10 [ 63.989100][ T6618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 63.989125][ T6618] do_syscall_64+0x123/0x790 [ 63.989139][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.989150][ T6618] RIP: 0033:0x7f547919e199 [ 63.989161][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.989170][ T6618] RSP: 002b:00007f547a04ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 63.989181][ T6618] RAX: ffffffffffffffda RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 63.989188][ T6618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 63.989195][ T6618] RBP: 00007f54792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 63.989201][ T6618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 63.989207][ T6618] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 63.989222][ T6618] [ 64.022949][ T6624] bond1: entered promiscuous mode [ 64.043091][ T6624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.085307][ T6626] bond1: (slave ipip0): refused to change device type [ 64.110690][ T6633] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 64.110747][ T6633] syzkaller0: linktype set to 270 [ 64.219972][ T6646] capability: warning: `syz.2.229' uses deprecated v2 capabilities in a way that may be insecure [ 64.315447][ T6659] ip_tables: iptables: counters copy to user failed while replacing table [ 64.397988][ T6664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 64.420828][ T6664] bond4: (slave geneve2): making interface the new active one [ 64.422297][ T6664] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 64.708400][ T6678] gretap0: entered allmulticast mode [ 64.708647][ T6678] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.916132][ T6685] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 64.930592][ T6689] afs: Unknown parameter 'ïöädy ' [ 64.939537][ T5811] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.939574][ T5811] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.939602][ T5811] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.939629][ T5811] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.479303][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.496534][ T6708] pim6reg1: entered promiscuous mode [ 65.496553][ T6708] pim6reg1: entered allmulticast mode [ 65.659191][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 65.659640][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.660525][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.660545][ T10] usb 7-1: config 179 has no interface number 0 [ 65.660575][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.660595][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.660615][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.660632][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.660649][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.660673][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.666571][ T6705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.756364][ T6711] FAULT_INJECTION: forcing a failure. [ 65.756364][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 65.756394][ T6711] CPU: 2 UID: 0 PID: 6711 Comm: syz.0.248 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.756418][ T6711] Tainted: [L]=SOFTLOCKUP [ 65.756424][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.756433][ T6711] Call Trace: [ 65.756439][ T6711] [ 65.756446][ T6711] dump_stack_lvl+0x100/0x190 [ 65.756477][ T6711] should_fail_ex.cold+0x5/0xa [ 65.756502][ T6711] should_failslab+0xc2/0x120 [ 65.756528][ T6711] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.756549][ T6711] ? __asan_memcpy+0x3c/0x60 [ 65.756567][ T6711] ? __kernfs_new_node+0xd2/0xa10 [ 65.756590][ T6711] __kernfs_new_node+0xd2/0xa10 [ 65.756611][ T6711] ? __pfx___kernfs_new_node+0x10/0x10 [ 65.756631][ T6711] ? lock_acquire+0x1d1/0x380 [ 65.756651][ T6711] ? kernfs_root+0x23/0x2a0 [ 65.756677][ T6711] ? find_held_lock+0x2b/0x80 [ 65.756702][ T6711] ? kernfs_root+0xee/0x2a0 [ 65.756727][ T6711] ? kernfs_root+0xee/0x2a0 [ 65.756758][ T6711] kernfs_new_node+0x117/0x150 [ 65.756781][ T6711] kernfs_create_link+0xcc/0x240 [ 65.756806][ T6711] sysfs_do_create_link_sd+0x90/0x140 [ 65.756835][ T6711] sysfs_create_link+0x61/0xc0 [ 65.756885][ T6711] device_add+0x675/0x1970 [ 65.756910][ T6711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.756936][ T6711] ? __pfx_device_add+0x10/0x10 [ 65.756958][ T6711] ? lockdep_init_map_type+0x5c/0x250 [ 65.756972][ T6711] ? __init_waitqueue_head+0xca/0x150 [ 65.756989][ T6711] netdev_register_kobject+0x1df/0x410 [ 65.757005][ T6711] register_netdevice+0x15b6/0x25a0 [ 65.757026][ T6711] ? __pfx_register_netdevice+0x10/0x10 [ 65.757043][ T6711] ? net_generic+0xea/0x2a0 [ 65.757058][ T6711] register_netdev+0x34/0x50 [ 65.757075][ T6711] ip6_tnl_init_net+0x2ff/0x480 [ 65.757088][ T6711] ? __pfx_ip6_tnl_init_net+0x10/0x10 [ 65.757100][ T6711] ops_init+0x1e2/0x5f0 [ 65.757118][ T6711] setup_net+0x118/0x3a0 [ 65.757136][ T6711] ? __pfx_setup_net+0x10/0x10 [ 65.757156][ T6711] copy_net_ns+0x345/0x7a0 [ 65.757169][ T6711] create_new_namespaces+0x3ea/0xac0 [ 65.757185][ T6711] unshare_nsproxy_namespaces+0xf2/0x220 [ 65.757200][ T6711] ksys_unshare+0x4a2/0xa70 [ 65.757213][ T6711] ? __pfx_ksys_unshare+0x10/0x10 [ 65.757232][ T6711] __x64_sys_unshare+0x31/0x40 [ 65.757245][ T6711] do_syscall_64+0x123/0x790 [ 65.757259][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.757270][ T6711] RIP: 0033:0x7f4f36b9e199 [ 65.757280][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.757290][ T6711] RSP: 002b:00007f4f37b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.757301][ T6711] RAX: ffffffffffffffda RBX: 00007f4f36e25fa0 RCX: 00007f4f36b9e199 [ 65.757308][ T6711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 65.757314][ T6711] RBP: 00007f4f36c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 65.757321][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.757327][ T6711] R13: 00007f4f36e26038 R14: 00007f4f36e25fa0 R15: 00007fffa31883f8 [ 65.757341][ T6711] [ 65.888787][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input11 [ 65.958255][ T6723] syzkaller1: entered promiscuous mode [ 65.958276][ T6723] syzkaller1: entered allmulticast mode [ 66.022632][ T5091] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 66.075944][ T10] usb 7-1: USB disconnect, device number 2 [ 66.076066][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.076100][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.322575][ T6751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.360654][ T6703] TC_ACT_REPEAT abuse ? [ 66.452389][ T6765] tmpfs: Bad value for 'mpol' [ 66.599198][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.637004][ T6784] binder: 6781:6784 ioctl c0306201 2000000000c0 returned -22 [ 66.658728][ T6784] binder: 6781:6784 ioctl c0306201 2000000000c0 returned -22 [ 66.759341][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 66.759928][ T5825] usb 7-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice= 0.40 [ 66.760947][ T5825] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 66.760979][ T5825] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 66.763260][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.763278][ T5825] usb 7-1: Product: Э [ 66.763290][ T5825] usb 7-1: Manufacturer: é²�먶n爣솨줦彪⻞깡玑汸ﲾ㱷掭è‰�溜旓촺㙄넓á��虅龪â—�㹘 [ 66.763305][ T5825] usb 7-1: SerialNumber: У [ 66.982639][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.986187][ T5825] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 66.994587][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.994912][ T5825] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 66.998934][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.999656][ T5881] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 67.054646][ T5825] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 67.059712][ T5825] usb 7-1: USB disconnect, device number 3 [ 67.095647][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.159636][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.160427][ T5881] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.160443][ T5881] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.160465][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.166810][ T6798] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 67.175864][ T5881] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.236036][ T6814] __nla_validate_parse: 18 callbacks suppressed [ 67.236056][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 67.389433][ T5881] usb 5-1: USB disconnect, device number 6 [ 67.422255][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422283][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422302][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422322][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422340][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422358][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422377][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422392][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422410][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.422427][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 67.449419][ T6822] tmpfs: Using encoding : utf8-12.1.0 [ 67.450772][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 67.643134][ T6832] sctp: [Deprecated]: syz.3.286 (pid 6832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.643134][ T6832] Use struct sctp_sack_info instead [ 67.685622][ T6834] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 67.735415][ T6842] CUSE: unknown device info "" [ 67.735425][ T6842] CUSE: unknown device info "" [ 67.735430][ T6842] CUSE: unknown device info "ÿ" [ 67.735434][ T6842] CUSE: unknown device info "" [ 67.735437][ T6842] CUSE: unknown device info "ý" [ 67.735441][ T6842] CUSE: unknown device info "" [ 67.735445][ T6842] CUSE: unknown device info "" [ 67.735448][ T6842] CUSE: unknown device info "" [ 67.735452][ T6842] CUSE: DEVNAME unspecified [ 67.775264][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 67.915240][ T6856] ip_tables: iptables: counters copy to user failed while replacing table [ 67.934244][ T6856] can0: slcan on pts0. [ 68.043053][ T6855] can0 (unregistered): slcan off pts0. [ 68.106474][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 68.106513][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 68.114004][ T6866] geneve0: entered promiscuous mode [ 68.114023][ T6866] geneve0: entered allmulticast mode [ 68.128117][ T6866] ima: Unable to open file: /e (-2) [ 68.130633][ T6866] LUN: removable file: (no medium) [ 68.134693][ T6866] mass_storage.0/lun.0: unable to open backing file: file0 [ 68.135126][ T6865] ima: policy update failed [ 68.239671][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 68.306361][ T6880] comedi comedi2: comedi_config --init_data is deprecated [ 68.349157][ T44] kauditd_printk_skb: 46 callbacks suppressed [ 68.349170][ T44] audit: type=1400 audit(1791353510.859:489): avc: denied { write } for pid=6884 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.390943][ T5091] Bluetooth: hci2: command 0x2016 tx timeout [ 68.560089][ T6899] ubi0: attaching mtd0 [ 68.564121][ T6899] ubi0: scanning is finished [ 68.564160][ T6899] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 68.570160][ T44] audit: type=1400 audit(1791353511.089:490): avc: denied { write } for pid=6897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.640457][ T44] audit: type=1400 audit(1791353511.159:491): avc: denied { write } for pid=6902 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.741876][ T6899] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 69.021031][ T6908] validate_nla: 61 callbacks suppressed [ 69.021048][ T6908] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 69.027080][ T6908] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 69.064912][ T44] audit: type=1400 audit(1791353511.579:492): avc: denied { mount } for pid=6907 comm="syz.3.303" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.280418][ T6911] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 69.282616][ T44] audit: type=1400 audit(1791353511.799:493): avc: denied { setattr } for pid=6910 comm="syz.2.305" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.284318][ T6913] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 69.285016][ T44] audit: type=1400 audit(1791353511.799:494): avc: denied { write } for pid=6912 comm="syz.1.304" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.286491][ T44] audit: type=1400 audit(1791353511.799:495): avc: denied { map } for pid=6912 comm="syz.1.304" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.351178][ T6917] netlink: 'syz.1.307': attribute type 3 has an invalid length. [ 69.351190][ T6917] netlink: 'syz.1.307': attribute type 21 has an invalid length. [ 69.353272][ T6911] nvme_fabrics: missing parameter 'transport=%s' [ 69.353281][ T6911] nvme_fabrics: missing parameter 'nqn=%s' [ 69.354481][ T44] audit: type=1400 audit(1791353511.869:496): avc: denied { ioctl } for pid=6910 comm="syz.2.305" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.487283][ T44] audit: type=1400 audit(1791353511.999:497): avc: denied { write } for pid=6935 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.487405][ T6936] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.501385][ T6923] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.501406][ T6923] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.591281][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.678083][ T44] audit: type=1400 audit(1791353512.189:498): avc: denied { write } for pid=6944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.779440][ T6954] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 69.779758][ T6954] macvlan1: entered promiscuous mode [ 69.779773][ T6954] macvlan1: entered allmulticast mode [ 69.800048][ T6954] veth1_vlan: entered allmulticast mode [ 69.804367][ T6954] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 69.822712][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.851067][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.316'. [ 70.126225][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 70.193288][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 70.193308][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 70.203689][ T6987] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 70.210753][ T6987] macvlan1: entered promiscuous mode [ 70.210767][ T6987] macvlan1: entered allmulticast mode [ 70.213845][ T6987] veth1_vlan: entered allmulticast mode [ 70.221511][ T6987] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 70.289447][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 70.305954][ T7003] block nbd0: Unsupported socket: should be TCP or UNIX. [ 70.334527][ T5445] veth0_vlan: left promiscuous mode [ 70.346348][ T5881] veth0_vlan: entered promiscuous mode [ 70.388261][ T7008] FAULT_INJECTION: forcing a failure. [ 70.388261][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 70.388292][ T7008] CPU: 3 UID: 0 PID: 7008 Comm: syz.1.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.388317][ T7008] Tainted: [L]=SOFTLOCKUP [ 70.388324][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.388334][ T7008] Call Trace: [ 70.388341][ T7008] [ 70.388348][ T7008] dump_stack_lvl+0x100/0x190 [ 70.388378][ T7008] should_fail_ex.cold+0x5/0xa [ 70.388404][ T7008] should_failslab+0xc2/0x120 [ 70.388440][ T7008] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 70.388464][ T7008] ? shmem_alloc_inode+0x25/0x50 [ 70.388488][ T7008] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 70.388510][ T7008] shmem_alloc_inode+0x25/0x50 [ 70.388530][ T7008] alloc_inode+0x68/0x250 [ 70.388550][ T7008] new_inode+0x22/0x1c0 [ 70.388572][ T7008] shmem_get_inode+0x1e3/0xf70 [ 70.388595][ T7008] ? __lock_acquire+0x5c0/0x1f40 [ 70.388614][ T7008] ? __pfx_shmem_get_inode+0x10/0x10 [ 70.388643][ T7008] __shmem_file_setup+0x168/0x460 [ 70.388666][ T7008] ? lock_acquire+0x1d1/0x380 [ 70.388686][ T7008] ? __pfx___shmem_file_setup+0x10/0x10 [ 70.388709][ T7008] ? do_raw_spin_lock+0x128/0x260 [ 70.388733][ T7008] ? find_held_lock+0x2b/0x80 [ 70.388759][ T7008] ? alloc_fd+0x471/0x7a0 [ 70.388782][ T7008] ? alloc_fd+0x471/0x7a0 [ 70.388809][ T7008] memfd_alloc_file+0x247/0x610 [ 70.388864][ T7008] ? _raw_spin_unlock+0x28/0x50 [ 70.388888][ T7008] ? __pfx_memfd_alloc_file+0x10/0x10 [ 70.388923][ T7008] __do_sys_memfd_create+0x236/0x3d0 [ 70.388954][ T7008] do_syscall_64+0x123/0x790 [ 70.388977][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.389017][ T7008] RIP: 0033:0x7f84b059e199 [ 70.389032][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.389048][ T7008] RSP: 002b:00007f84b13c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 70.389066][ T7008] RAX: ffffffffffffffda RBX: 00007f84b0825fa0 RCX: 00007f84b059e199 [ 70.389078][ T7008] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000040 [ 70.389089][ T7008] RBP: 00007f84b06358e0 R08: 0000000000000000 R09: 0000000000000000 [ 70.389099][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.389110][ T7008] R13: 00007f84b0826038 R14: 00007f84b0825fa0 R15: 00007fff2cbab3f8 [ 70.389135][ T7008] [ 70.592526][ T7024] syzkaller0: entered promiscuous mode [ 70.592541][ T7024] syzkaller0: entered allmulticast mode [ 70.596599][ T7024] xt_MASQUERADE: bad rangesize 10242 [ 70.639543][ T1361] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.793536][ T1361] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 70.795408][ T1361] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.795428][ T1361] usb 6-1: config 1 has no interface number 0 [ 70.797100][ T1361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.797118][ T1361] usb 6-1: Product: syz [ 70.797130][ T1361] usb 6-1: Manufacturer: syz [ 70.797141][ T1361] usb 6-1: SerialNumber: syz [ 70.825099][ T1361] usb 6-1: 3:103 : does not exist [ 70.825116][ T1361] usb 6-1: 3:101 : does not exist [ 70.835725][ T7034] dvmrp0: entered allmulticast mode [ 70.892685][ T7036] x_tables: duplicate underflow at hook 3 [ 71.025841][ T5881] usb 6-1: USB disconnect, device number 4 [ 71.038614][ T7008] No such timeout policy "syz1" [ 71.155003][ T7038] CIFS: Invalid mount helper version specified [ 71.347782][ T7046] IPv6: Can't replace route, no match found [ 71.395141][ T7046] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 71.544634][ T7062] pipefs: Unknown parameter 'ecryptfs_sig' [ 71.567019][ T7064] geneve2: entered promiscuous mode [ 71.594735][ T7032] dvmrp0: left allmulticast mode [ 71.623354][ T7067] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 71.677183][ T7069] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 71.716341][ T7069] bond3: (slave veth0_to_bond): making interface the new active one [ 71.717165][ T7069] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 71.718518][ T7069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=7069 comm=syz.1.346 [ 71.832567][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.832619][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.837520][ T35] cfg80211: failed to load regulatory.db [ 72.066505][ T7085] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 72.066525][ T7085] netlink: 'syz.0.350': attribute type 2 has an invalid length. [ 72.400137][ T5747] Bluetooth: hci3: command 0x0406 tx timeout [ 72.463064][ T7132] evm: overlay not supported [ 72.533382][ T7144] __nla_validate_parse: 36 callbacks suppressed [ 72.533405][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 72.575268][ T5747] Bluetooth: hci3: hardware error 0xef [ 72.607638][ T7147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.613326][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.614347][ T7147] bond2: left allmulticast mode [ 72.614487][ T7147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.697120][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 73.057675][ T7170] netlink: 45 bytes leftover after parsing attributes in process `syz.0.366'. [ 73.353446][ T7177] SELinux: mls: truncated range [ 73.353459][ T7177] SELinux: error reading MLS range of context [ 73.353466][ T7177] SELinux: invalid ocon [ 73.469709][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 73.483631][ T7177] SELinux: failed to load policy [ 73.532908][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 73.532925][ T44] audit: type=1400 audit(1791353516.049:531): avc: denied { write } for pid=7197 comm="syz.1.374" name="functions" dev="configfs" ino=6928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.585539][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 73.585561][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 73.635497][ T7190] comedi comedi0: pcl816: I/O base address not correctly aligned [ 73.636707][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 73.639202][ T7205] 0: reclassify loop, rule prio 0, protocol 03 [ 73.748618][ T7211] netlink: 'syz.3.379': attribute type 21 has an invalid length. [ 73.748636][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 73.840139][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 73.998512][ T44] audit: type=1400 audit(1791353516.509:532): avc: denied { write } for pid=7233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.050795][ T44] audit: type=1400 audit(1791353516.569:533): avc: denied { write } for pid=7242 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.118794][ T44] audit: type=1400 audit(1791353516.629:534): avc: denied { write } for pid=7247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.177272][ T44] audit: type=1400 audit(1791353516.689:535): avc: denied { write } for pid=7251 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.207015][ T44] audit: type=1400 audit(1791353516.719:536): avc: denied { listen } for pid=7252 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.306913][ T7261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.389'. [ 74.319253][ T1361] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.469794][ T1361] usb 6-1: New USB device found, idVendor=d044, idProduct=3847, bcdDevice=44.e8 [ 74.469819][ T1361] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 74.471249][ T1361] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 74.471264][ T1361] usb 6-1: can't read configurations, error -61 [ 74.599608][ T1361] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.630879][ T5747] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 74.750731][ T1361] usb 6-1: New USB device found, idVendor=d044, idProduct=3847, bcdDevice=44.e8 [ 74.750768][ T1361] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 74.752560][ T1361] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 74.752588][ T1361] usb 6-1: can't read configurations, error -61 [ 74.754583][ T1361] usb usb6-port1: attempt power cycle [ 74.898728][ T7273] tipc: Started in network mode [ 74.898753][ T7273] tipc: Node identity 124c4ef8a628, cluster identity 4711 [ 74.898955][ T7273] tipc: Enabled bearer , priority 0 [ 74.899252][ T7275] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 74.900631][ T7274] syzkaller0: entered promiscuous mode [ 74.900646][ T7274] syzkaller0: entered allmulticast mode [ 74.905701][ T7273] tipc: Resetting bearer [ 74.923761][ T7273] tipc: Resetting bearer [ 74.946337][ T7273] tipc: Disabling bearer [ 75.018414][ T44] audit: type=1400 audit(1791353517.529:537): avc: denied { mount } for pid=7278 comm="syz.0.392" name="/" dev="ramfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.089276][ T1361] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.110191][ T1361] usb 6-1: New USB device found, idVendor=d044, idProduct=3847, bcdDevice=44.e8 [ 75.110216][ T1361] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 75.111309][ T1361] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 75.111325][ T1361] usb 6-1: can't read configurations, error -61 [ 75.212278][ T7286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=7286 comm=syz.2.394 [ 75.239252][ T1361] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 75.259720][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.263784][ T1361] usb 6-1: New USB device found, idVendor=d044, idProduct=3847, bcdDevice=44.e8 [ 75.263806][ T1361] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 75.265049][ T1361] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 75.265074][ T1361] usb 6-1: can't read configurations, error -61 [ 75.265398][ T1361] usb usb6-port1: unable to enumerate USB device [ 75.408672][ T44] audit: type=1400 audit(1791353517.919:538): avc: denied { ioctl } for pid=7293 comm="syz.3.396" path="/101/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 75.408726][ T7295] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1868771118.1734960750.0), cmd(5) [ 75.409276][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 75.410994][ T7296] jffs2: notice: (7296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.412971][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.412994][ T35] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 75.413764][ T35] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 75.413776][ T35] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 75.413786][ T35] usb 5-1: config 14 has no interface number 0 [ 75.413794][ T35] usb 5-1: config 14 has no interface number 1 [ 75.413819][ T35] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 75.413831][ T35] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 75.413843][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 75.413856][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 75.413868][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 75.413881][ T35] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.413894][ T35] usb 5-1: config 14 interface 57 has no altsetting 0 [ 75.413903][ T35] usb 5-1: config 14 interface 228 has no altsetting 0 [ 75.415430][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.415441][ T35] usb 5-1: Product: syz [ 75.415449][ T35] usb 5-1: Manufacturer: syz [ 75.415456][ T35] usb 5-1: SerialNumber: syz [ 75.435519][ T7294] nvmet: Invalid value '�' for trtype [ 75.435963][ T7295] /dev/sg0: Can't lookup blockdev [ 75.453260][ T44] audit: type=1400 audit(1791353517.929:539): avc: denied { write } for pid=7293 comm="syz.3.396" name="ports" dev="configfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.453303][ T44] audit: type=1400 audit(1791353517.939:540): avc: denied { setattr } for pid=7293 comm="syz.3.396" name="1" dev="configfs" ino=16955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.488930][ T7299] netlink: 'syz.2.398': attribute type 11 has an invalid length. [ 75.603402][ T7313] netlink: 'syz.3.400': attribute type 30 has an invalid length. [ 75.679743][ T7321] 8021q: VLANs not supported on gre0 [ 75.840062][ T35] legousbtower 5-1:14.57: interrupt endpoints not found [ 76.241428][ T35] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 76.244581][ T35] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 76.319215][ T5825] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.470134][ T5825] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.473479][ T5825] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 76.473518][ T5825] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.473538][ T5825] usb 7-1: config 0 interface 0 has no altsetting 0 [ 76.475568][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.475587][ T5825] usb 7-1: Product: syz [ 76.475599][ T5825] usb 7-1: Manufacturer: syz [ 76.475611][ T5825] usb 7-1: SerialNumber: syz [ 76.478063][ T5825] usb 7-1: config 0 descriptor?? [ 76.479964][ T5825] hub 7-1:0.0: bad descriptor, ignoring hub [ 76.479983][ T5825] hub 7-1:0.0: probe with driver hub failed with error -5 [ 76.492917][ T5825] usb 7-1: selecting invalid altsetting 0 [ 76.651611][ T7343] ip_tables: iptables: counters copy to user failed while replacing table [ 76.899719][ T25] usb 7-1: USB disconnect, device number 4 [ 77.178899][ T7347] ucma_write: process 245 (syz.1.409) changed security contexts after opening file descriptor, this is not allowed. [ 77.314089][ T7355] [U] [ 77.314110][ T7355] [U] [ 77.314125][ T7355] [U] [ 77.314140][ T7355] [U] [ 77.314235][ T7355] [U] [ 77.314251][ T7355] [U] [ 77.314266][ T7355] [U] [ 77.314280][ T7355] [U] [ 77.314359][ T7355] [U] [ 77.314374][ T7355] [U] [ 77.314389][ T7355] [U] [ 77.314404][ T7355] [U] [ 77.314471][ T7355] [U] [ 77.314486][ T7355] [U] [ 77.314500][ T7355] [U] [ 77.314515][ T7355] [U] [ 77.314825][ T7355] [U] [ 77.331851][ T7360] mmap: syz.2.412 (7360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.441645][ T7370] vivid-000: ================= START STATUS ================= [ 77.441677][ T7370] vivid-000: Enable Output Cropping: true [ 77.441699][ T7370] vivid-000: Enable Output Composing: true [ 77.441718][ T7370] vivid-000: Enable Output Scaler: true [ 77.441733][ T7370] vivid-000: Tx RGB Quantization Range: Automatic [ 77.441752][ T7370] vivid-000: Transmit Mode: HDMI [ 77.441767][ T7370] vivid-000: Hotplug Present: 0x00000000 [ 77.441787][ T7370] vivid-000: RxSense Present: 0x00000000 [ 77.441804][ T7370] vivid-000: EDID Present: 0x00000000 [ 77.441819][ T7370] vivid-000: ================== END STATUS ================== [ 77.515915][ T7374] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.757065][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 77.769004][ T7389] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 77.769026][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.770609][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 77.772248][ T7391] vhci_hcd: cannot find the pending unlink 5 [ 77.786989][ T7390] __nla_validate_parse: 3 callbacks suppressed [ 77.787003][ T7390] netlink: 68 bytes leftover after parsing attributes in process `syz.2.420'. [ 77.801210][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 77.811953][ T7391] vhci_hcd: connection closed [ 77.815510][ T12] vhci_hcd vhci_hcd.2: stop threads [ 77.816493][ T12] vhci_hcd vhci_hcd.2: release socket [ 77.816520][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 77.969411][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 77.989200][ T1361] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.017143][ T35] usb 5-1: USB disconnect, device number 7 [ 78.027147][ T35] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 78.159406][ T1361] usb 8-1: Using ep0 maxpacket: 8 [ 78.160358][ T1361] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 78.161385][ T1361] usb 8-1: config 0 has no interfaces? [ 78.161409][ T1361] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.163520][ T1361] usb 8-1: config 0 descriptor?? [ 78.368757][ T35] usb 8-1: USB disconnect, device number 3 [ 78.489660][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 78.624189][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 78.624202][ T44] audit: type=1400 audit(1791353521.139:556): avc: denied { watch watch_reads } for pid=7413 comm="syz.2.428" path="/proc/445/net/dev_snmp6" dev="proc" ino=4026533270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 78.625819][ T7414] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 78.718662][ T44] audit: type=1400 audit(1791353521.229:557): avc: denied { read append } for pid=7420 comm="syz.2.430" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.718893][ T44] audit: type=1400 audit(1791353521.229:558): avc: denied { open } for pid=7420 comm="syz.2.430" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.870803][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 78.870975][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 78.906463][ T44] audit: type=1400 audit(1791353521.419:559): avc: denied { create } for pid=7430 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.910324][ T7431] sctp: [Deprecated]: syz.1.435 (pid 7431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.910324][ T7431] Use struct sctp_sack_info instead [ 78.919222][ T44] audit: type=1400 audit(1791353521.429:560): avc: denied { bind } for pid=7430 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.919709][ T44] audit: type=1400 audit(1791353521.429:561): avc: denied { listen } for pid=7430 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.025722][ T7439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.439'. [ 79.028567][ T44] audit: type=1400 audit(1791353521.539:562): avc: denied { search } for pid=7438 comm="syz.1.439" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.056309][ T7440] random: crng reseeded on system resumption [ 79.057072][ T44] audit: type=1400 audit(1791353521.569:563): avc: denied { read write } for pid=7436 comm="syz.3.438" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.057169][ T44] audit: type=1400 audit(1791353521.569:564): avc: denied { ioctl open } for pid=7436 comm="syz.3.438" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.129273][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.148353][ T7448] FAULT_INJECTION: forcing a failure. [ 79.148353][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 79.148382][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.1.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.148405][ T7448] Tainted: [L]=SOFTLOCKUP [ 79.148410][ T7448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.148420][ T7448] Call Trace: [ 79.148426][ T7448] [ 79.148433][ T7448] dump_stack_lvl+0x100/0x190 [ 79.148471][ T7448] should_fail_ex.cold+0x5/0xa [ 79.148495][ T7448] should_failslab+0xc2/0x120 [ 79.148522][ T7448] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.148544][ T7448] ? __kernfs_new_node+0xd2/0xa10 [ 79.148566][ T7448] __kernfs_new_node+0xd2/0xa10 [ 79.148587][ T7448] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.148606][ T7448] ? lock_acquire+0x1d1/0x380 [ 79.148625][ T7448] ? kernfs_root+0x23/0x2a0 [ 79.148649][ T7448] ? find_held_lock+0x2b/0x80 [ 79.148672][ T7448] ? kernfs_root+0xee/0x2a0 [ 79.148694][ T7448] ? kernfs_root+0xee/0x2a0 [ 79.148723][ T7448] kernfs_create_dir_ns+0xa6/0x2b0 [ 79.148746][ T7448] sysfs_create_dir_ns+0x13a/0x2b0 [ 79.148771][ T7448] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 79.148816][ T7448] ? find_held_lock+0x2b/0x80 [ 79.148839][ T7448] ? kobject_add_internal+0x25f/0x930 [ 79.148872][ T7448] ? kobject_add_internal+0x25f/0x930 [ 79.148895][ T7448] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.148919][ T7448] kobject_add_internal+0x2c8/0x930 [ 79.148944][ T7448] kobject_add+0x16a/0x1e0 [ 79.148966][ T7448] ? __pfx_kobject_add+0x10/0x10 [ 79.148990][ T7448] ? __kasan_kmalloc+0xaa/0xb0 [ 79.149012][ T7448] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 79.149029][ T7448] ? get_device_parent+0x29a/0x4c0 [ 79.149056][ T7448] get_device_parent+0x382/0x4c0 [ 79.149095][ T7448] device_add+0xc3b/0x1970 [ 79.149123][ T7448] ? __pfx_dev_set_name+0x10/0x10 [ 79.149140][ T7448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.149160][ T7448] ? __pfx_device_add+0x10/0x10 [ 79.149184][ T7448] ? lockdep_init_map_type+0x5c/0x250 [ 79.149205][ T7448] ? __init_waitqueue_head+0xca/0x150 [ 79.149231][ T7448] wakeup_source_device_create+0x243/0x2e0 [ 79.149251][ T7448] wakeup_source_sysfs_add+0x1c/0x90 [ 79.149267][ T7448] wakeup_source_register+0x154/0x3e0 [ 79.149291][ T7448] ep_create_wakeup_source+0x1df/0x2e0 [ 79.149318][ T7448] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 79.149347][ T7448] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 79.149363][ T7448] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 79.149386][ T7448] do_epoll_ctl_file+0x1e26/0x36e0 [ 79.149410][ T7448] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 79.149427][ T7448] ? lock_acquire+0x1d1/0x380 [ 79.149444][ T7448] ? __fget_files+0x34/0x3d0 [ 79.149466][ T7448] ? find_held_lock+0x2b/0x80 [ 79.149489][ T7448] ? __fget_files+0x215/0x3d0 [ 79.149515][ T7448] ? __fget_files+0x21f/0x3d0 [ 79.149543][ T7448] ? do_epoll_ctl+0xfd/0x1a0 [ 79.149557][ T7448] do_epoll_ctl+0xfd/0x1a0 [ 79.149575][ T7448] ? __pfx_do_epoll_ctl+0x10/0x10 [ 79.149599][ T7448] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 79.149617][ T7448] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 79.149641][ T7448] do_syscall_64+0x123/0x790 [ 79.149662][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.149679][ T7448] RIP: 0033:0x7f84b059e199 [ 79.149693][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.149708][ T7448] RSP: 002b:00007f84b13c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 79.149724][ T7448] RAX: ffffffffffffffda RBX: 00007f84b0825fa0 RCX: 00007f84b059e199 [ 79.149735][ T7448] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 79.149745][ T7448] RBP: 00007f84b06358e0 R08: 0000000000000000 R09: 0000000000000000 [ 79.149754][ T7448] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 79.149764][ T7448] R13: 00007f84b0826038 R14: 00007f84b0825fa0 R15: 00007fff2cbab3f8 [ 79.149787][ T7448] [ 79.152158][ T7448] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 79.300168][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 79.301488][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.302965][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 79.303002][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.303020][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.303039][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.303058][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.303125][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.512726][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.517331][ T25] usb 7-1: usb_control_msg returned -32 [ 79.517359][ T25] usbtmc 7-1:16.0: can't read capabilities [ 79.547590][ T7456] netlink: 52 bytes leftover after parsing attributes in process `syz.1.444'. [ 79.936521][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936534][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936540][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936545][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936550][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936555][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936561][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936566][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936571][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936576][ T7468] tc action pedit 'at' offset 5 out of bounds [ 79.936586][ T7468] 0: reclassify loop, rule prio 0, protocol 800 [ 80.074202][ T44] audit: type=1400 audit(1791353522.589:565): avc: denied { write } for pid=7469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.225199][ T7480] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 80.426823][ T9] usb 7-1: USB disconnect, device number 5 [ 80.598802][ T7497] syzkaller0: entered promiscuous mode [ 80.598826][ T7497] syzkaller0: entered allmulticast mode [ 80.677327][ T7505] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:12129 [ 81.066764][ T7512] usb usb9: usbfs: process 7512 (syz.2.457) did not claim interface 0 before use [ 81.164428][ T7515] tipc: Can't bind to reserved service type 0 [ 81.828408][ T7514] tipc: New replicast peer: 172.20.20.187 [ 81.828988][ T7514] tipc: Enabled bearer , priority 10 [ 82.020168][ T7536] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 82.045526][ T7536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.048502][ T7536] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 82.048513][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'. [ 82.093398][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 82.201980][ T7560] netlink: 5 bytes leftover after parsing attributes in process `syz.2.472'. [ 82.216245][ T7560] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.639322][ C2] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 82.743328][ T7573] batadv_slave_1: entered promiscuous mode [ 83.734022][ T5825] tipc: Node number set to 3026472696 [ 83.735349][ T7568] batadv_slave_1: left promiscuous mode [ 83.752607][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7589 comm=syz.1.477 [ 83.752818][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 83.756508][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 83.756587][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7589 comm=syz.1.477 [ 83.756680][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 83.757847][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.781017][ T5811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.781044][ T5811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.781061][ T5811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.850549][ T7596] ip_tables: iptables: counters copy to user failed while replacing table [ 83.891315][ T7595] usb usb9: usbfs: process 7595 (syz.1.480) did not claim interface 0 before use [ 83.931045][ T7598] CIFS: Attempting to mount //127.0.0.1/share [ 83.931563][ T7598] CIFS: VFS: Error connecting to socket. Aborting operation. [ 83.931585][ T7598] CIFS: VFS: cifs_mount failed w/return code = -22 [ 83.931881][ T7598] CIFS: Attempting to mount //127.0.0.1/share [ 83.932149][ T7598] CIFS: VFS: Error connecting to socket. Aborting operation. [ 83.932166][ T7598] CIFS: VFS: cifs_mount failed w/return code = -22 [ 83.934591][ T7598] CIFS: Attempting to mount //127.0.0.1/share [ 83.934811][ T7598] CIFS: VFS: Error connecting to socket. Aborting operation. [ 83.934827][ T7598] CIFS: VFS: cifs_mount failed w/return code = -22 [ 83.952228][ T7609] ima: policy update completed [ 83.952844][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 83.952859][ T44] audit: type=1807 audit(1791353526.469:581): action=measure func=FILE_CHECK res=1 [ 83.952891][ T44] audit: type=1802 audit(1791353526.469:582): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.481" res=1 errno=0 [ 83.999925][ T44] audit: type=1800 audit(1791353526.509:583): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5100 res=0 errno=0 [ 84.043346][ T44] audit: type=1400 audit(1791353526.559:584): avc: denied { setopt } for pid=7617 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.119715][ T44] audit: type=1400 audit(1791353526.639:585): avc: denied { watch watch_reads } for pid=7619 comm="syz.3.487" path="/123" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.155801][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 84.215426][ T44] audit: type=1800 audit(1791353526.729:586): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128202 res=0 errno=0 [ 84.217517][ T44] audit: type=1800 audit(1791353526.729:587): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128212 res=0 errno=0 [ 84.230480][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.881690][ T44] audit: type=1400 audit(1791353527.399:588): avc: denied { setopt } for pid=7647 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.916262][ T44] audit: type=1400 audit(1791353527.429:589): avc: denied { write } for pid=7645 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.044354][ T44] audit: type=1800 audit(1791353527.559:590): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4926 res=0 errno=0 [ 85.823109][ T7664] ip6erspan0: entered allmulticast mode [ 85.878213][ T7679] capability: warning: `syz.1.502' uses 32-bit capabilities (legacy support in use) [ 86.004859][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.007579][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.019621][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 86.149774][ T35] usb 8-1: device descriptor read/64, error -71 [ 86.179206][ T7702] tipc: New replicast peer: 0.0.0.0 [ 86.179376][ T7702] tipc: Enabled bearer , priority 10 [ 86.339208][ T1361] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.389564][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.499183][ T1361] usb 7-1: Using ep0 maxpacket: 32 [ 86.501559][ T5881] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.501976][ T1361] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 86.503593][ T1361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 86.503617][ T1361] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.503637][ T1361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.503657][ T1361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.506054][ T1361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.506074][ T1361] usb 7-1: Product: syz [ 86.506086][ T1361] usb 7-1: Manufacturer: syz [ 86.506098][ T1361] usb 7-1: SerialNumber: syz [ 86.525651][ T1361] usb 7-1: config 0 descriptor?? [ 86.525819][ T35] usb 8-1: device descriptor read/64, error -71 [ 86.526512][ T7699] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.536375][ T1361] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 86.564849][ C2] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 86.587323][ T7707] tmpfs: Bad value for 'mpol' [ 86.630837][ T35] usb usb8-port1: attempt power cycle [ 86.641792][ C2] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 86.666395][ C2] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 86.670178][ T5881] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.671150][ T5881] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.671174][ T5881] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.671202][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.678163][ T7704] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.693893][ T5881] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.848205][ T25] usb 7-1: USB disconnect, device number 6 [ 86.848291][ C2] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.971941][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.990011][ T35] usb 8-1: device descriptor read/8, error -71 [ 87.083036][ T7720] tun0: tun_chr_ioctl cmd 1074025675 [ 87.083057][ T7720] tun0: persist enabled [ 87.083428][ T7720] tun0: tun_chr_ioctl cmd 1074025675 [ 87.083441][ T7720] tun0: persist disabled [ 87.128948][ T10] usb 6-1: USB disconnect, device number 9 [ 87.229518][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 87.250394][ T35] usb 8-1: device descriptor read/8, error -71 [ 87.359584][ T35] usb usb8-port1: unable to enumerate USB device [ 87.400256][ T7734] SQUASHFS error: Failed to read block 0x0: -5 [ 87.400298][ T7734] unable to read squashfs_super_block [ 87.809748][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.813998][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.946383][ T7766] netlink: 25 bytes leftover after parsing attributes in process `syz.0.522'. [ 87.946682][ T7765] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.522'. [ 87.946910][ T7766] eql: entered promiscuous mode [ 87.947365][ T7765] 0ªX¹¦Dö»: renamed from eql [ 87.960034][ T7765] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 87.960052][ T7765] 0ªX¹¦Dö»: left promiscuous mode [ 87.960060][ T7765] 0ªX¹¦Dö»: entered allmulticast mode [ 88.077466][ T7785] tmpfs: Unknown parameter '18446744073709551615' [ 88.157614][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.172330][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.430974][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.699270][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.830628][ T7832] netlink: 'syz.3.530': attribute type 4 has an invalid length. [ 88.830701][ T7832] netlink: 17 bytes leftover after parsing attributes in process `syz.3.530'. [ 88.839819][ T25] usb 6-1: device descriptor read/64, error -71 [ 88.941936][ T5881] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.990323][ T44] kauditd_printk_skb: 111 callbacks suppressed [ 88.990335][ T44] audit: type=1800 audit(1791353531.509:702): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129222 res=0 errno=0 [ 88.995343][ T44] audit: type=1800 audit(1791353531.509:703): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129231 res=0 errno=0 [ 89.063337][ T7848] JFS: charset not found [ 89.079486][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 89.109454][ T44] audit: type=1800 audit(1791353531.619:704): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.535" name="rx_trig_bytes" dev="sysfs" ino=12868 res=0 errno=0 [ 89.115556][ T44] audit: type=1800 audit(1791353531.629:705): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.534" name="file1" dev="overlay" ino=932 res=0 errno=0 [ 89.166425][ T44] audit: type=1400 audit(1791353531.679:706): avc: denied { write } for pid=7851 comm="syz.3.535" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.171232][ T44] audit: type=1800 audit(1791353531.689:707): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.535" name="pm_test" dev="sysfs" ino=869 res=0 errno=0 [ 89.175880][ T44] audit: type=1400 audit(1791353531.689:708): avc: denied { mounton } for pid=7851 comm="syz.3.535" path="/131/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 89.177351][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.177539][ T44] audit: type=1800 audit(1791353531.689:709): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.535" name="compressor" dev="sysfs" ino=58411 res=0 errno=0 [ 89.182154][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.221448][ T25] usb 6-1: device descriptor read/64, error -71 [ 89.283286][ T7864] FAULT_INJECTION: forcing a failure. [ 89.283286][ T7864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.283319][ T7864] CPU: 3 UID: 0 PID: 7864 Comm: syz.3.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.283345][ T7864] Tainted: [L]=SOFTLOCKUP [ 89.283352][ T7864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.283364][ T7864] Call Trace: [ 89.283371][ T7864] [ 89.283379][ T7864] dump_stack_lvl+0x100/0x190 [ 89.283427][ T7864] should_fail_ex.cold+0x5/0xa [ 89.283450][ T7864] ? prepare_alloc_pages+0x16d/0x5b0 [ 89.283484][ T7864] should_fail_alloc_page+0xeb/0x140 [ 89.283514][ T7864] prepare_alloc_pages+0x1f0/0x5b0 [ 89.283542][ T7864] ? lock_acquire+0x1d1/0x380 [ 89.283568][ T7864] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 89.283595][ T7864] ? write_profile+0xe1/0x150 [ 89.283614][ T7864] ? is_bpf_text_address+0x94/0x1a0 [ 89.283642][ T7864] ? kernel_text_address+0x8d/0x100 [ 89.283671][ T7864] ? __kernel_text_address+0xd/0x30 [ 89.283688][ T7864] ? unwind_get_return_address+0x59/0xa0 [ 89.283716][ T7864] ? arch_stack_walk+0xa6/0xf0 [ 89.283743][ T7864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 89.283772][ T7864] ? stack_trace_save+0x8e/0xc0 [ 89.283791][ T7864] ? __pfx_stack_trace_save+0x10/0x10 [ 89.283831][ T7864] ? stack_depot_save_flags+0x27/0x9f0 [ 89.283868][ T7864] ? kasan_save_stack+0x30/0x50 [ 89.283896][ T7864] ? kasan_save_track+0x14/0x30 [ 89.283919][ T7864] ? __kasan_kmalloc+0xaa/0xb0 [ 89.283942][ T7864] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 89.283961][ T7864] ? do_kimage_alloc_init+0x40/0x320 [ 89.283983][ T7864] ? do_kexec_load+0x11b/0x810 [ 89.284007][ T7864] ? __x64_sys_kexec_load+0x1bf/0x230 [ 89.284033][ T7864] ? do_syscall_64+0x123/0x790 [ 89.284059][ T7864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.284080][ T7864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.284106][ T7864] ? policy_nodemask+0xed/0x4f0 [ 89.284134][ T7864] alloc_pages_mpol+0x201/0x550 [ 89.284159][ T7864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 89.284189][ T7864] alloc_pages_noprof+0x1a/0x160 [ 89.284206][ T7864] kimage_alloc_pages+0x72/0x380 [ 89.284228][ T7864] kimage_alloc_control_pages+0x157/0xa20 [ 89.284271][ T7864] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 89.284302][ T7864] do_kexec_load+0x275/0x810 [ 89.284329][ T7864] ? __pfx_do_kexec_load+0x10/0x10 [ 89.284355][ T7864] ? _copy_from_user+0x59/0xd0 [ 89.284380][ T7864] __x64_sys_kexec_load+0x1bf/0x230 [ 89.284408][ T7864] do_syscall_64+0x123/0x790 [ 89.284432][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.284452][ T7864] RIP: 0033:0x7f547919e199 [ 89.284468][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.284486][ T7864] RSP: 002b:00007f547a050028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 89.284506][ T7864] RAX: ffffffffffffffda RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 89.284519][ T7864] RDX: 00002000000002c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 89.284531][ T7864] RBP: 00007f54792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.284542][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.284554][ T7864] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 89.284581][ T7864] [ 89.284927][ T7864] kexec: Could not allocate control_code_buffer [ 89.341676][ T25] usb usb6-port1: attempt power cycle [ 89.351511][ T7866] FAULT_INJECTION: forcing a failure. [ 89.351511][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 89.351544][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.351569][ T7866] Tainted: [L]=SOFTLOCKUP [ 89.351576][ T7866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.351588][ T7866] Call Trace: [ 89.351594][ T7866] [ 89.351602][ T7866] dump_stack_lvl+0x100/0x190 [ 89.351634][ T7866] should_fail_ex.cold+0x5/0xa [ 89.351662][ T7866] should_failslab+0xc2/0x120 [ 89.351690][ T7866] __kmalloc_cache_noprof+0x91/0x6d0 [ 89.351710][ T7866] ? ww_mutex_lock+0x37/0x160 [ 89.351732][ T7866] ? virtio_gpu_plane_duplicate_state+0x72/0xd0 [ 89.351765][ T7866] virtio_gpu_plane_duplicate_state+0x72/0xd0 [ 89.351792][ T7866] drm_atomic_get_plane_state+0x279/0x7d0 [ 89.351822][ T7866] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 89.351842][ T7866] ? rcu_is_watching+0x13/0xc0 [ 89.351875][ T7866] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 89.351894][ T7866] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 89.351912][ T7866] ? drm_master_internal_acquire+0x21/0x80 [ 89.351964][ T7866] drm_client_modeset_commit_locked+0x14d/0x580 [ 89.351988][ T7866] drm_client_modeset_commit+0x4f/0x80 [ 89.352008][ T7866] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 89.352041][ T7866] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 89.352074][ T7866] drm_fbdev_client_restore+0x76/0xa0 [ 89.352122][ T7866] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 89.352149][ T7866] drm_client_dev_restore+0x205/0x2a0 [ 89.352171][ T7866] drm_release+0x2c6/0x360 [ 89.352198][ T7866] ? __pfx_drm_release+0x10/0x10 [ 89.352226][ T7866] __fput+0x3ff/0xb50 [ 89.352259][ T7866] task_work_run+0x150/0x240 [ 89.352290][ T7866] ? __pfx_task_work_run+0x10/0x10 [ 89.352327][ T7866] exit_to_user_mode_loop+0x1d8/0x700 [ 89.352352][ T7866] ? rcu_is_watching+0x13/0xc0 [ 89.352379][ T7866] do_syscall_64+0x661/0x790 [ 89.352405][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.352420][ T7866] RIP: 0033:0x7f547919e199 [ 89.352434][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.352449][ T7866] RSP: 002b:00007f547a050028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 89.352467][ T7866] RAX: 0000000000000000 RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 89.352478][ T7866] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 89.352489][ T7866] RBP: 00007f54792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.352499][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.352510][ T7866] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 89.352538][ T7866] [ 89.444630][ T7788] ceph: No mds server is up or the cluster is laggy [ 89.535093][ T44] audit: type=1400 audit(1791353532.059:710): avc: denied { ioctl } for pid=7867 comm="syz.3.540" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 89.590853][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 89.633479][ T7880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.687663][ T7890] [ 89.688549][ T7890] ====================================================== [ 89.690675][ T7890] WARNING: possible circular locking dependency detected [ 89.693150][ T7890] syzkaller #0 Tainted: G L [ 89.695439][ T7890] ------------------------------------------------------ [ 89.697777][ T7890] syz.3.545/7890 is trying to acquire lock: [ 89.699665][ T7890] ffff88804a87b480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 89.703063][ T7890] [ 89.703063][ T7890] but task is already holding lock: [ 89.705930][ T7890] ffff88802cabc378 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 89.709916][ T7890] [ 89.709916][ T7890] which lock already depends on the new lock. [ 89.709916][ T7890] [ 89.713834][ T7890] [ 89.713834][ T7890] the existing dependency chain (in reverse order) is: [ 89.717062][ T7890] [ 89.717062][ T7890] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 89.720018][ T7890] lock_acquire+0x1d1/0x380 [ 89.721863][ T7890] __mutex_lock+0x1a4/0x1bd0 [ 89.723744][ T7890] ima_file_truncate+0xe6/0x190 [ 89.725760][ T7890] security_file_truncate+0xf9/0x1e0 [ 89.727816][ T7890] path_openat+0x1d7e/0x2440 [ 89.729750][ T7890] do_file_open+0x20e/0x430 [ 89.731505][ T7890] do_sys_openat2+0x10f/0x1e0 [ 89.733060][ T7890] __x64_sys_creat+0xcc/0x120 [ 89.734896][ T7890] do_syscall_64+0x123/0x790 [ 89.736809][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.739024][ T7890] [ 89.739024][ T7890] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 89.741396][ T7890] lock_acquire+0x1d1/0x380 [ 89.742910][ T7890] mnt_want_write+0x6f/0x420 [ 89.744493][ T7890] lookup_open+0x150/0x1990 [ 89.745967][ T7890] path_openat+0xa2c/0x2440 [ 89.747476][ T7890] do_file_open+0x20e/0x430 [ 89.749055][ T7890] file_open_name+0x1c3/0x3e0 [ 89.749725][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 89.752893][ T7890] filp_open+0x2e/0x50 [ 89.754317][ T7890] fsg_lun_open+0x6b/0x7b0 [ 89.755815][ T7890] fsg_store_file+0x1e7/0x450 [ 89.757393][ T7890] configfs_write_iter+0x302/0x4e0 [ 89.759127][ T7890] vfs_write+0x6af/0x1050 [ 89.760586][ T7890] ksys_write+0x12a/0x250 [ 89.762019][ T7890] do_syscall_64+0x123/0x790 [ 89.763571][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.765496][ T7890] [ 89.765496][ T7890] -> #2 (&common->filesem){+.+.}-{4:4}: [ 89.767804][ T7890] lock_acquire+0x1d1/0x380 [ 89.769377][ T7890] down_write+0x8b/0x1f0 [ 89.770462][ T25] usb 6-1: device descriptor read/8, error -71 [ 89.772621][ T7890] fsg_store_file+0x193/0x450 [ 89.774174][ T7890] configfs_write_iter+0x302/0x4e0 [ 89.775851][ T7890] vfs_write+0x6af/0x1050 [ 89.777311][ T7890] ksys_write+0x12a/0x250 [ 89.778788][ T7890] do_syscall_64+0x123/0x790 [ 89.780330][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.782201][ T7890] [ 89.782201][ T7890] -> #1 (&p->frag_sem){++++}-{4:4}: [ 89.784391][ T7890] lock_acquire+0x1d1/0x380 [ 89.785873][ T7890] down_read+0x99/0x4c0 [ 89.787275][ T7890] configfs_write_iter+0x218/0x4e0 [ 89.789104][ T7890] vfs_write+0x6af/0x1050 [ 89.790554][ T7890] ksys_write+0x12a/0x250 [ 89.792015][ T7890] do_syscall_64+0x123/0x790 [ 89.793554][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.795500][ T7890] [ 89.795500][ T7890] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 89.798403][ T7890] check_prev_add+0xeb/0xe60 [ 89.799973][ T7890] __lock_acquire+0x1528/0x1f40 [ 89.801841][ T7890] lock_acquire+0x1d1/0x380 [ 89.803731][ T7890] __mutex_lock+0x1a4/0x1bd0 [ 89.805614][ T7890] configfs_read_iter+0x79/0x6f0 [ 89.807596][ T7890] __kernel_read+0x397/0xad0 [ 89.809542][ T7890] integrity_kernel_read+0x7e/0xb0 [ 89.811504][ T7890] ima_calc_file_hash_tfm+0x25e/0x350 [ 89.813498][ T7890] ima_calc_file_hash+0x1e3/0x380 [ 89.815279][ T7890] ima_collect_measurement+0x94f/0xb30 [ 89.817304][ T7890] process_measurement+0xdfe/0x2350 [ 89.819463][ T7890] ima_file_check+0xc3/0x110 [ 89.821114][ T7890] security_file_post_open+0xc4/0x210 [ 89.822854][ T7890] path_openat+0x5cd/0x2440 [ 89.824758][ T7890] do_file_open+0x20e/0x430 [ 89.826663][ T7890] do_sys_openat2+0x10f/0x1e0 [ 89.828536][ T7890] __x64_sys_openat+0x12d/0x210 [ 89.830315][ T7890] do_syscall_64+0x123/0x790 [ 89.832045][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.833964][ T7890] [ 89.833964][ T7890] other info that might help us debug this: [ 89.833964][ T7890] [ 89.836984][ T7890] Chain exists of: [ 89.836984][ T7890] &buffer->mutex --> sb_writers#6 --> &ima_iint_mutex_key[depth] [ 89.836984][ T7890] [ 89.840979][ T7890] Possible unsafe locking scenario: [ 89.840979][ T7890] [ 89.843232][ T7890] CPU0 CPU1 [ 89.844854][ T7890] ---- ---- [ 89.846460][ T7890] lock(&ima_iint_mutex_key[depth]); [ 89.848060][ T7890] lock(sb_writers#6); [ 89.850048][ T7890] lock(&ima_iint_mutex_key[depth]); [ 89.853872][ T7890] lock(&buffer->mutex); [ 89.855583][ T7890] [ 89.855583][ T7890] *** DEADLOCK *** [ 89.855583][ T7890] [ 89.858729][ T7890] locks held by syz.3.545/7890: 1, last CPU#0: [ 89.861192][ T7890] #0: ffff88802cabc378 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 89.865512][ T7890] [ 89.865512][ T7890] stack backtrace: [ 89.867867][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.3.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.872036][ T7890] Tainted: [L]=SOFTLOCKUP [ 89.873776][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.877696][ T7890] Call Trace: [ 89.879017][ T7890] [ 89.880196][ T7890] dump_stack_lvl+0x100/0x190 [ 89.882062][ T7890] print_circular_bug.cold+0x178/0x1be [ 89.884265][ T7890] check_noncircular+0x146/0x160 [ 89.886244][ T7890] check_prev_add+0xeb/0xe60 [ 89.888068][ T7890] __lock_acquire+0x1528/0x1f40 [ 89.890071][ T7890] ? is_bpf_text_address+0x8a/0x1a0 [ 89.892127][ T7890] lock_acquire+0x1d1/0x380 [ 89.893945][ T7890] ? configfs_read_iter+0x79/0x6f0 [ 89.895966][ T7890] ? __pfx___might_resched+0x10/0x10 [ 89.898011][ T7890] ? arch_stack_walk+0xa6/0xf0 [ 89.899930][ T7890] __mutex_lock+0x1a4/0x1bd0 [ 89.901631][ T7890] ? configfs_read_iter+0x79/0x6f0 [ 89.903179][ T7890] ? configfs_read_iter+0x79/0x6f0 [ 89.904745][ T7890] ? stack_trace_save+0x8e/0xc0 [ 89.906247][ T7890] ? __pfx___mutex_lock+0x10/0x10 [ 89.907756][ T7890] ? stack_depot_save_flags+0x27/0x9f0 [ 89.909383][ T7890] ? __kasan_kmalloc+0xaa/0xb0 [ 89.911095][ T7890] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 89.912894][ T7890] ? ima_calc_file_hash_tfm+0x236/0x350 [ 89.915136][ T7890] ? ima_calc_file_hash+0x1e3/0x380 [ 89.917183][ T7890] ? ima_collect_measurement+0x94f/0xb30 [ 89.919416][ T7890] ? process_measurement+0xdfe/0x2350 [ 89.921561][ T7890] ? ima_file_check+0xc3/0x110 [ 89.923475][ T7890] ? security_file_post_open+0xc4/0x210 [ 89.925708][ T7890] ? configfs_read_iter+0x79/0x6f0 [ 89.927745][ T7890] configfs_read_iter+0x79/0x6f0 [ 89.929753][ T7890] __kernel_read+0x397/0xad0 [ 89.931435][ T7890] ? __pfx___kernel_read+0x10/0x10 [ 89.933266][ T7890] integrity_kernel_read+0x7e/0xb0 [ 89.935351][ T7890] ? __pfx_integrity_kernel_read+0x10/0x10 [ 89.937666][ T7890] ? ima_calc_file_hash_tfm+0x236/0x350 [ 89.939893][ T7890] ima_calc_file_hash_tfm+0x25e/0x350 [ 89.942078][ T7890] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 89.944496][ T7890] ? __pfx_filter_irq_stacks+0x10/0x10 [ 89.946683][ T7890] ? look_up_lock_class+0x55/0x120 [ 89.948763][ T7890] ? ima_alloc_tfm+0x21a/0x2e0 [ 89.950609][ T7890] ima_calc_file_hash+0x1e3/0x380 [ 89.952490][ T7890] ima_collect_measurement+0x94f/0xb30 [ 89.954686][ T7890] ? __pfx_ima_collect_measurement+0x10/0x10 [ 89.957094][ T7890] ? process_measurement+0x5ab/0x2350 [ 89.959215][ T7890] ? is_bad_inode+0xd/0x40 [ 89.961015][ T7890] ? xattr_resolve_name+0x27d/0x3f0 [ 89.963151][ T7890] ? vfs_getxattr_alloc+0xec/0x350 [ 89.965257][ T7890] ? ima_get_hash_algo+0x241/0x400 [ 89.967318][ T7890] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 89.969500][ T7890] ? process_measurement+0xdfe/0x2350 [ 89.971649][ T7890] process_measurement+0xdfe/0x2350 [ 89.973775][ T7890] ? __pfx_process_measurement+0x10/0x10 [ 89.976017][ T7890] ? lock_acquire+0x1d1/0x380 [ 89.977933][ T7890] ? __configfs_open_file+0x6ca/0x9c0 [ 89.980057][ T7890] ima_file_check+0xc3/0x110 [ 89.981928][ T7890] ? __pfx_ima_file_check+0x10/0x10 [ 89.984062][ T7890] security_file_post_open+0xc4/0x210 [ 89.986208][ T7890] path_openat+0x5cd/0x2440 [ 89.988035][ T7890] ? __pfx_path_openat+0x10/0x10 [ 89.990044][ T7890] do_file_open+0x20e/0x430 [ 89.991436][ T7890] ? __pfx_do_file_open+0x10/0x10 [ 89.993246][ T7890] ? _raw_spin_unlock+0x28/0x50 [ 89.995202][ T7890] ? alloc_fd+0x471/0x7a0 [ 89.996627][ T7890] do_sys_openat2+0x10f/0x1e0 [ 89.998369][ T7890] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.000471][ T7890] __x64_sys_openat+0x12d/0x210 [ 90.002474][ T7890] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.004672][ T7890] do_syscall_64+0x123/0x790 [ 90.006563][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.008423][ T7890] RIP: 0033:0x7f547919e199 [ 90.009900][ T7890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.017512][ T7890] RSP: 002b:00007f547a050028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.020526][ T7890] RAX: ffffffffffffffda RBX: 00007f5479425fa0 RCX: 00007f547919e199 [ 90.022923][ T7890] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 90.025320][ T7890] RBP: 00007f54792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 90.028227][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.031391][ T7890] R13: 00007f5479426038 R14: 00007f5479425fa0 R15: 00007ffc92ac0498 [ 90.034560][ T7890] [ 90.039500][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 90.051129][ T44] audit: type=1800 audit(1791353532.569:711): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.545" name="size" dev="configfs" ino=21778 res=0 errno=0 [ 90.060123][ T25] usb 6-1: device descriptor read/8, error -71 [ 90.169515][ T25] usb usb6-port1: unable to enumerate USB device [ 90.399223][ C2] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.376753][ T44] audit: type=1400 audit(1791353540.889:712): avc: denied { write } for pid=7897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.426919][ T44] audit: type=1400 audit(1791353540.939:713): avc: denied { write } for pid=7900 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1