last executing test programs: 29.153000286s ago: executing program 2 (id=204): socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 29.150555478s ago: executing program 2 (id=205): r0 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) (async) getgroups(0x7, &(0x7f0000000340)=[0xee01, 0xee01, 0xee00, 0xee00, 0xee00, 0xee01, 0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000006840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006880)='./proc\x00', &(0x7f00000068c0)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write$P9_RREAD(r6, &(0x7f0000006940)={0xb, 0x75, 0x1}, 0xb) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006a00), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000006980)='./file0\x00', &(0x7f00000069c0), 0x10044, &(0x7f0000006a40)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, 'smb3\x00'}}, {@subj_user={'subj_user', 0x3d, '$:'}}, {@euid_lt={'euid<', r1}}, {@fowner_gt={'fowner>', r1}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}}) (async) read$FUSE(r9, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000002540)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r9, &(0x7f00000025c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000046c0)="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", 0x2000, &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x78, 0x0, 0x6, {0x8, 0x2, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x3963, 0x1, 0x8000, 0x8, r12, r13, 0x10000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setgroups(0x8, &(0x7f0000006800)=[r2, r3, 0x0, r4, r5, r8, r13, 0x0]) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) 29.100943402s ago: executing program 2 (id=207): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x80000001, 0x30}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000002340)=""/226, 0x36000, 0x1000, 0x9}, 0x1c) r4 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r4], 0x32600) write$binfmt_format(r5, &(0x7f0000000280)='0\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000002480)=@broute={'broute\x00', 0x20, 0x4, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000002500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x56, 0x81e, 'veth1_to_hsr\x00', 'hsr0\x00', 'geneve0\x00', 'syzkaller0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xe8, 0xe8, 0x130, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x51d786f35ebae0f3, 0x0, 0xff000000, 0xff000000], [0xff000000, 0x80000080, 0xffffffff, 0xff], 0x9, 0x62, 0x0, 0xa, 0x4e22, 0x4e23, 0x4e21, 0x4e23}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xb, 0x7, {0x2}}}}}, {0x5, 0x5, 0x1b, 'lo\x00', 'tunl0\x00', 'ipvlan0\x00', 'veth0_to_team\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x36, 0x6006, 'pimreg\x00', 'dvmrp0\x00', 'veth1_to_batadv\x00', 'sit0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x883e, 'wlan1\x00', 'veth1_vlan\x00', 'veth0_to_bridge\x00', 'team_slave_1\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, [0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x3, 0x1, 0x0, 0x0, "cf81b58e7034a13ab5beed67da5141ed99a920dd5f5ca6358cc0da8c2e3e029db52af6800f6f9f11d187f921417a8258976f4783a581a048057f2f2042b730b7"}}}}]}]}, 0x460) write$char_usb(r1, &(0x7f0000000180)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000400000004000000bae5000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3f000000000800040b05000000000000000008000000000000000000"], 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000029c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000002a00)={0x1d, r10, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000002a40)=0x41, 0x4) sendmmsg(r9, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, 0x0, 0x0) 27.941121119s ago: executing program 3 (id=223): timer_gettime(0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = memfd_create(&(0x7f0000000080)='/dev/loop#\x00', 0x5) fallocate(r0, 0x3, 0x0, 0x200000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) setns(0xc9, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20040006) r3 = socket$inet(0x2, 0x8000b, 0x5) bind$inet(r3, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r3, 0x5) setsockopt$inet_buf(r3, 0x0, 0x1, &(0x7f0000000140)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f00000001c0)='127.:.0.1:/export\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r4 = accept$inet(r3, 0x0, 0x0) read(r4, &(0x7f0000000380), 0x4) read(r4, &(0x7f00000003c0), 0x4) write(r4, &(0x7f0000000400), 0x100) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) 27.842985879s ago: executing program 3 (id=224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000a00)="b002401d42b755c94142dfeb56e69ee92fb553bbe868a4be6fba0d398c1476c229eb8a3adcb877aab2b787762fd27d5f6d6ad9a4a2a47ce39ca6e3d760cc358243db3e44e58902158e35675b209a041d546325ceff9884bda4f9fe1902ad539cf6c75b084a384d94e7216a1daa987b43280a330090fe001faf5977e6806a474c3ebbcc323190bad3dfb465dad9653e3c9c24bd86fd965db3adffb3bde57540e967954dd5a1f2389d7348b1a44d938c3f32298bd5e10c28ead285bffb9ff418ce6562a1e417ed73d0f2624bb5796cbda04c3934bb4962a6eb46dccc686bf7e14fdf2bd42a8b7402dbe09247", 0xeb}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'pim6reg\x00', {0x1}, 0x3}) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, &(0x7f0000001b00), 0xfffffd9d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/8) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 27.531602606s ago: executing program 2 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000540)='./file0\x00') unlink(&(0x7f0000000580)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffff8000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffff8000, 0x1) 27.463232362s ago: executing program 2 (id=226): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)) socket(0x1d, 0x2, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fanotify_init(0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 27.063123285s ago: executing program 2 (id=230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="060000000300f4ff00", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 26.907179208s ago: executing program 32 (id=230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="060000000300f4ff00", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 26.863303313s ago: executing program 3 (id=233): mmap(0x0, 0x0, 0x3, 0x4010, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 26.861903244s ago: executing program 3 (id=234): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="217562d751f911e16c3a65f406a35b36743a6d6f643ab6", 0x17) read$ublk_bdev(r0, &(0x7f0000001540)=""/242, 0xf2) r1 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./sys\x00', &(0x7f00000016c0)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000001700)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000001740)='./drv\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./drv/unbind\x00', 0x1, 0x6) write(r2, &(0x7f00000017c0)='0000:00:1f.3', 0xc) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000003c0)=0x4091) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000400)=0x100) getsockopt(r5, 0x40, 0x2, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000001800)=[0x101, 0x3]) umount2(&(0x7f0000000340)='.\x00', 0x2) r6 = dup(r1) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write$hidraw(r6, &(0x7f0000000000)="52dcf914c6723a9ca09d7fc418b578d49bb64cf014f2d8950b26c8098da390a1aecb3ccab121cc314e22925e69551e983463e6201428c91fe3fe982c0017c87bc85a308c696bc0ad97a8f9e2dfc514eaad9b6744577e15770a1e6ba4acaa7ada5cd79bb43f5b3e769c14aa596b475c5ed2ab4f58f174ca90cc37ab5558fa291542681c49dda9ced6dd032d11d6bb61d5dda6af0468b064cb0d7fedcd32f68cf998e13a9187447314", 0xa8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200041, 0x0) setns(r6, 0x20000000) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000140)) 26.728699347s ago: executing program 3 (id=235): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000018c0)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26.303074769s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c150000", @ANYRES16, @ANYBLOB="010028bd700000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x8006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0xffff) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100400000000000000a0800060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000007140000001100014c"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') 26.242425066s ago: executing program 33 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c150000", @ANYRES16, @ANYBLOB="010028bd700000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x8006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0xffff) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100400000000000000a0800060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c0004400000000000000007140000001100014c"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') 4.131312771s ago: executing program 5 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x8000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000b00)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000000)=[{r8}, {r6, 0x1413}, {r6, 0x40}, {r0, 0x4}], 0x4, 0x0) 3.852516317s ago: executing program 5 (id=525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000003c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="413b0ec8a378", 0x6}], 0x1, 0x0, 0x0, 0x4000}, 0x8080) r3 = dup(r2) recvmsg$inet_nvme(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x41) pipe(&(0x7f0000000000)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2, 0x0, 0x9, 0x2}, {0x3, 0x5, 0x65, 0x9}]}) fcntl$lock(r4, 0x407, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r7 = syz_open_dev$vim2m(&(0x7f0000000500), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000540)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000580)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f00000005c0)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) r8 = landlock_create_ruleset(&(0x7f0000000640)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) ppoll(&(0x7f0000000680)=[{r7, 0x248}], 0x2000000000000126, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f00000006c0), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r9, 0xc0844123, 0x0) close(r9) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r5, 0x0, r6, 0x0, 0x2000000008, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) sendto$packet(r1, &(0x7f00000000c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.533401924s ago: executing program 0 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x24, &(0x7f0000000200)="f0c46000", 0x4) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800006, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}]}}) 2.458986275s ago: executing program 0 (id=527): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9400}, 0xfffffffb}], 0x1, 0x40000023, 0x0) 1.60313973s ago: executing program 0 (id=528): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)) socket(0x1d, 0x2, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fanotify_init(0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 990.889808ms ago: executing program 0 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000880)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) 990.440118ms ago: executing program 4 (id=531): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="67300400256040001c0012800900010069706970000000000c000280060012004e200000eb63a8a32d6ec9a1a673c21ff036834db2bbe23c9b99e455f649cfead91f2044ca836fff4d24bc43f273850a3c101f961d90d5a4a18e3b83436048dbbbe9f23e30d1a31e563292b11e7f3850eafa161755f5913081a4fc39e5e7733cd789cafd957faf8c4bb5e259ed4d6420f45cf662eaf6010a938add78d9c4c92ad1a80c95adc1fc02c66ecb"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000002) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="25b1c0ff00000000b70800000e0000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018100000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000140)=""/120, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x3, 0xbe, 0x3f3eea29}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0xe, 0xb}, {0x5, 0x3, 0xd, 0xc}], 0x10, 0x6}, 0x94) ioctl(r2, 0x7, &(0x7f0000000440)="a2b472e5403fb86c4a1da5a0f30fe255420e01a690afc1fcabf76e42441211fc995062b8a506105699f1fd9c76d58b3941f5c39e24b857ac56993d86321b417fe58f0d150f9277ae800fa9c78b92d5fbb404765f9946abb4b7cd4d3e4aee82ac089833bb6cd447127be0f6c3d20e09e3766cea9996d38e62e3ba5208a720d9507bbef114f5d7b44838d00da9d31ea9a718b778f342c966fa1bec381a0435dc0a1a1e18fc0a5655c5f230444da40b383df590de7cd9bda5e214ba3d3356f8f492da2f0feec53c4b229157a1bd614eabe63d202207c6f6cf4e500853574cf8e3269249f47bf4") bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240), 0x0) write(r0, &(0x7f0000000400)="1b00000008001122334455660000", 0xe) 990.122483ms ago: executing program 0 (id=532): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) syz_clone(0x2000, 0x0, 0xffaa, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x2, &(0x7f0000001b00)="723039f0a0ccd48e9f5646ff972bacf4c91afd9ec5e1305d013fab") mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./sys\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001b80)={@mcast1, 0x1, 0x1, 0x2, 0x2, 0x9, 0xfffe}, 0xfffffffffffffda6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001bc0)={'virt_wifi0\x00', 0x9}) ioctl(r4, 0x8b32, &(0x7f0000001c00)) mount(0x0, &(0x7f0000001c40)='./sys\x00', &(0x7f0000001c80)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000001d00)='unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000001d40)='serial8250', 0xa) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001540)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r8 = socket(0xa, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x5}}, './sys\x00'}) sendmsg$inet6(r8, &(0x7f0000001940)={&(0x7f0000001980)={0xa, 0xa, 0x81, @mcast2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001a00)="671723c2020033", 0x7}, {&(0x7f0000001a40)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000001a80)="000000b814", 0x5e}, {&(0x7f0000001ac0)="33c4", 0x2}], 0x4}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000380)={{0x0, 0x2c1e, 0x40, 0x78, 0x7, 0x1, 0x0, 0x800, 0x0, 0x9, 0x40, 0x0, 0x5, 0x6, 0x4}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000440)={{r9, 0x200, 0x5, 0x9, 0x8, 0x7, 0x574a, 0x1, 0x7, 0x7, 0x4, 0x6, 0x10, 0x7, 0x8000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000001440)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x8, 0x8, {{0x38, 0x4, 0x1, 0x32, 0xe0, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x90, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@broadcast, 0xfffffffb}, {@loopback, 0x9}]}, @ssrr={0x89, 0x7, 0xa0, [@dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x13, 0xa8, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x5b, 0x3, 0x2, [{@broadcast, 0xb950}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@broadcast, 0x2}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x7}, {@loopback, 0xa}]}, @generic={0x7, 0x11, "85079749e40b7ce779c338dde894ad"}, @lsrr={0x83, 0xf, 0x6a, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0x3, 'm'}, {0x2, 0xb, "78d07f70130cfd0c67"}, {0x1, 0x12, "d321907497aabfbdfc0246dabb303980"}, {0x3, 0x9, "49939744ba4b25"}]}]}}}}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r13, 0x4068aea3, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001a0000042dbd7000fedbdf250a801402fc02000b002600000800100017000000080010000200000008001900", @ANYRES32=r2, @ANYBLOB="1400050000000000000062af9734b725e4650aefedc59e380002000000000000", @ANYRES32=r10, @ANYBLOB], 0x58}}, 0x2000000) pipe(&(0x7f0000000180)) 987.710631ms ago: executing program 4 (id=534): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3a5500) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x8) r4 = io_uring_setup(0x792b, &(0x7f0000000440)={0x0, 0x7b0c, 0x10, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f00000004c0), 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xffffffffffffff84, 0x99, {0x3, 0x66}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x9804a0ea7a80368d) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xc, 0x0, 0x7, 0x8}]}) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000200), 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x61) openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x1) 892.908852ms ago: executing program 1 (id=536): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240), 0x0) write(r0, &(0x7f0000000400)="1b00000008001122334455660014", 0xe) 823.180459ms ago: executing program 1 (id=537): r0 = syz_open_dev$sndctrl(&(0x7f0000019e40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000019ec0)={{0x1009, 0x0, 0x3f, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 822.831909ms ago: executing program 5 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000d, 0x2) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)='b', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r1, r2, r2}, &(0x7f0000000480)=""/220, 0xdc, &(0x7f00000005c0)={&(0x7f0000000600)={'sha3-224\x00'}}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'pim6reg0\x00'}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa", 0x35303553}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 822.69515ms ago: executing program 1 (id=539): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)) socket(0x1d, 0x2, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fanotify_init(0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 801.440757ms ago: executing program 0 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r4, 0x5) r5 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='clientaddr\x00', &(0x7f0000000440)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='minorversion\x00', &(0x7f00000004c0)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000540)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='port\x00', &(0x7f00000005c0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = accept(r4, 0x0, 0x0) write(r6, &(0x7f0000000600)="80000028000000010000000000000000", 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000640), 0x0, 0xc0b41) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000700)=""/233}, &(0x7f0000000800)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 801.237416ms ago: executing program 5 (id=541): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@secondary) syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="cd3d"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000440), 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x4, 0x6, 0x8, @remote, @private2, 0x7800, 0x20, 0x2832, 0x800}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fe, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000540)=0x8) 733.168858ms ago: executing program 1 (id=542): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c65, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x40000007, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fc, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000f80)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001040)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000010c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000001140)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000028c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000002900), 0xffffffffffffff97, 0x10, &(0x7f0000002940), 0xffffffffffffffc2}, 0x48) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0xff, 0x4, &(0x7f00000000c0)={0xb, "6ec9ae0b2046c61bc3ab7a9c73216885dc6d066caa644b10549725083c8c97903a"}}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, &(0x7f0000000080)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x94, r9, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x12c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x94}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r10, &(0x7f00000002c0)='INVITE sip:alice@example.com SIP/2.0\r\nCall-Id: call12345@domain.com\r\n\r\n', 0x47, 0x0, &(0x7f0000000340)={0x2, 0x13c4, @loopback}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9", @ANYRES32=0x0], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x2}, 0x8, 0x10, &(0x7f0000001780), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r11, 0x702, 0xe98, 0x0, &(0x7f0000001840)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 493.531144ms ago: executing program 1 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070601080000000003000000000000000500010006"], 0x1c}}, 0x0) 431.380676ms ago: executing program 1 (id=544): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x1, 'vlan0\x00'}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000100, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x66a16000) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$binfmt_register(0xffffff9c, &(0x7f00000003c0), 0x1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') io_setup(0x8, &(0x7f0000000480)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0xa0000016}) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0}]) 242.850995ms ago: executing program 5 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@increfs]}) r2 = dup3(r1, r0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000380)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x90) r5 = openat(r4, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r5}, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000040)='/th0\x00') mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000400)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x40003, 0x0, 0x1, 0x0, 0xc0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=[r1, r2, r0, r2, r2], 0x14}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}]}) 82.281058ms ago: executing program 4 (id=546): pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/158, 0x9e, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='./trace\x00', &(0x7f0000000f00)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000f80)='e:my_eprobe raw_syscalls/sys_ent!r', 0x22) 79.175359ms ago: executing program 4 (id=547): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x28) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000f80)=0x80000000, 0x4) (async, rerun: 64) bind$packet(r2, &(0x7f0000000fc0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async, rerun: 64) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001000)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x1e, 0x3, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) write(r2, &(0x7f0000001200)="01", 0x1) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000f40)='0', 0x1) (async) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r9, r8, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257, 0x0, r3}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x23, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x22d}}], 0x1, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x105, 0x0, 0x0}}, 0x0) ioctl$DVD_WRITE_STRUCT(r9, 0x5391, &(0x7f00000006c0)=@manufact={0x4, 0x0, 0x800, "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"}) ioctl$TCXONC(r1, 0x540a, 0x1) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 1.041975ms ago: executing program 5 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0xa7c, r0}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, {"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", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000001300)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000013c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x30, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001400)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) r7 = syz_open_dev$dri(&(0x7f0000001500), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000001540)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000001580)={&(0x7f00000015c0)=[0x0], 0x1}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{}, 0x0, &(0x7f0000001640)=r8}, 0x1e) 147.889µs ago: executing program 4 (id=549): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@writecache={0x0, 0x1000, 0x0, 0x60, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '1 metadata_only'}}]}) 0s ago: executing program 4 (id=550): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002000010026bd700002000000010100800c0001000200000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000900065cc0ff400083a01ff310000000000000000000000000001ff020000000000000000c600000000018000907800db000b"], 0x34) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 0s ago: executing program 4 (id=551): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @named={'_syz', 0x0, '0'}, '/md/', @array='level\x00'}, 0x1, 0x0) openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000200)=@str='512', 0x3) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @array='bitmap/time_base\x00'}, 0x0, 0x0) write$md_sysfs(r2, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f00000003c0)=@str='1', 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000440)=@str='active', 0x6) kernel console output (not intermixed with test programs): 071][ T6147] [ 56.412078][ T6147] dump_stack_lvl+0x100/0x190 [ 56.412111][ T6147] should_fail_ex.cold+0x5/0xa [ 56.412138][ T6147] _copy_from_iter+0x1f4/0x1690 [ 56.412173][ T6147] ? __pfx__copy_from_iter+0x10/0x10 [ 56.412203][ T6147] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 56.412251][ T6147] ? lock_acquire+0x1d1/0x380 [ 56.412277][ T6147] copy_page_from_iter+0x238/0x300 [ 56.412309][ T6147] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 56.412342][ T6147] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 56.412363][ T6147] ? unwind_get_return_address+0x59/0xa0 [ 56.412392][ T6147] ? arch_stack_walk+0xa6/0xf0 [ 56.412431][ T6147] ? _kstrtoull+0x144/0x200 [ 56.412452][ T6147] ? __pfx__kstrtoull+0x10/0x10 [ 56.412475][ T6147] tun_get_user+0x17b4/0x3da0 [ 56.412506][ T6147] ? __lock_acquire+0x5c0/0x1f40 [ 56.412526][ T6147] ? __pfx_tun_get_user+0x10/0x10 [ 56.412547][ T6147] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 56.412579][ T6147] ? find_held_lock+0x2b/0x80 [ 56.412604][ T6147] ? tun_get+0x191/0x370 [ 56.412622][ T6147] ? tun_get+0x191/0x370 [ 56.412648][ T6147] tun_chr_write_iter+0xdc/0x200 [ 56.412673][ T6147] vfs_write+0x6af/0x1050 [ 56.412695][ T6147] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.412719][ T6147] ? __pfx_vfs_write+0x10/0x10 [ 56.412740][ T6147] ? find_held_lock+0x2b/0x80 [ 56.412784][ T6147] ksys_write+0x12a/0x250 [ 56.412807][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 56.412836][ T6147] do_syscall_64+0x123/0x790 [ 56.412857][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.412876][ T6147] RIP: 0033:0x7f79ec35fd8e [ 56.412891][ T6147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.412908][ T6147] RSP: 002b:00007f79ed17ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.412928][ T6147] RAX: ffffffffffffffda RBX: 00007f79ed1806c0 RCX: 00007f79ec35fd8e [ 56.412940][ T6147] RDX: 0000000000000046 RSI: 0000200000000140 RDI: 00000000000000c8 [ 56.412950][ T6147] RBP: 00007f79ed180090 R08: 0000000000000000 R09: 0000000000000000 [ 56.412962][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.412972][ T6147] R13: 00007f79ec626038 R14: 00007f79ec625fa0 R15: 00007fffbaeaaa78 [ 56.412997][ T6147] [ 56.756174][ T5823] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.886220][ T5823] usb 8-1: device descriptor read/64, error -71 [ 56.926177][ T1843] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.088336][ T1843] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 57.090190][ T1843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.090209][ T1843] usb 7-1: config 0 has no interfaces? [ 57.091985][ T1843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.092005][ T1843] usb 7-1: Product: syz [ 57.092016][ T1843] usb 7-1: Manufacturer: syz [ 57.092026][ T1843] usb 7-1: SerialNumber: syz [ 57.096520][ T1843] usb 7-1: config 0 descriptor?? [ 57.126185][ T5823] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 57.256396][ T5823] usb 8-1: device descriptor read/64, error -71 [ 57.301942][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.302364][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.357732][ T50] usb 7-1: USB disconnect, device number 2 [ 57.366873][ T5823] usb usb8-port1: attempt power cycle [ 57.706209][ T5823] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 57.726859][ T5823] usb 8-1: device descriptor read/8, error -71 [ 57.976286][ T5823] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 58.006622][ T5823] usb 8-1: device descriptor read/8, error -71 [ 58.119218][ T5823] usb usb8-port1: unable to enumerate USB device [ 58.213835][ T6178] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.218517][ T50] usb 5-1: USB disconnect, device number 3 [ 58.348725][ T6196] ip_tables: iptables: counters copy to user failed while replacing table [ 58.470708][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.546378][ T1843] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.608509][ T42] kauditd_printk_skb: 109 callbacks suppressed [ 58.608525][ T42] audit: type=1400 audit(1792640456.043:400): avc: denied { write } for pid=6220 comm="syz.0.90" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 58.608704][ T42] audit: type=1400 audit(1792640456.043:401): avc: denied { open } for pid=6220 comm="syz.0.90" path="/26/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 58.613763][ T42] audit: type=1400 audit(1792640456.043:402): avc: denied { create } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.616536][ T42] audit: type=1400 audit(1792640456.053:403): avc: denied { bind } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.618658][ T42] audit: type=1400 audit(1792640456.053:404): avc: denied { ioctl } for pid=6224 comm="syz.1.91" path="socket:[12574]" dev="sockfs" ino=12574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.618996][ T42] audit: type=1400 audit(1792640456.053:405): avc: denied { bind } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.620483][ T42] audit: type=1400 audit(1792640456.053:406): avc: denied { listen } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.628665][ T42] audit: type=1400 audit(1792640456.053:407): avc: denied { write } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.630772][ T6225] qnx4: no qnx4 filesystem (no root dir). [ 58.634143][ T42] audit: type=1400 audit(1792640456.073:408): avc: denied { accept } for pid=6224 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.676648][ T42] audit: type=1400 audit(1792640456.113:409): avc: denied { create } for pid=6227 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.689287][ T1843] usb 7-1: device descriptor read/64, error -71 [ 58.748568][ T6232] syz.0.94 uses obsolete (PF_INET,SOCK_PACKET) [ 58.753932][ T6232] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.875370][ T6234] netlink: 220 bytes leftover after parsing attributes in process `syz.0.95'. [ 58.926298][ T1843] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.067190][ T1843] usb 7-1: device descriptor read/64, error -71 [ 59.186414][ T1843] usb usb7-port1: attempt power cycle [ 59.526312][ T1843] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.538579][ T29] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.547585][ T1843] usb 7-1: device descriptor read/8, error -71 [ 59.687018][ T29] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 59.687863][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.687879][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 59.687892][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 59.689861][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.689873][ T29] usb 5-1: Product: syz [ 59.689881][ T29] usb 5-1: Manufacturer: syz [ 59.689888][ T29] usb 5-1: SerialNumber: syz [ 59.691912][ T29] usb 5-1: config 0 descriptor?? [ 59.692476][ T6254] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.776380][ T29] rc_core: IR keymap rc-streamzap not found [ 59.776392][ T29] Registered IR keymap rc-empty [ 59.778216][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 59.781055][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 59.786217][ T1843] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.807816][ T1843] usb 7-1: device descriptor read/8, error -71 [ 59.906282][ T29] usb 5-1: USB disconnect, device number 4 [ 59.926375][ T1843] usb usb7-port1: unable to enumerate USB device [ 60.397775][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.398039][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.398307][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.398537][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.398769][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.399042][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.399280][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.399591][ T6271] ip_tables: iptables: counters copy to user failed while replacing table [ 60.473776][ T1843] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.490425][ T6279] overlayfs: missing 'lowerdir' [ 60.500565][ T6279] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 60.564841][ T6287] process 'syz.0.110' launched '/dev/fd/3' with NULL argv: empty string added [ 60.691617][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 60.701702][ T6300] binder: 6299:6300 ioctl c0306201 200000000500 returned -14 [ 60.724525][ T6298] team0: Port device team_slave_0 removed [ 61.126178][ T1843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 61.298706][ T1843] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 61.299701][ T1843] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.300651][ T1843] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.302711][ T1843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.302730][ T1843] usb 8-1: Product: syz [ 61.302742][ T1843] usb 8-1: Manufacturer: syz [ 61.302755][ T1843] usb 8-1: SerialNumber: syz [ 61.311340][ T1843] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 61.322265][ T1843] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 61.327753][ T1843] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 61.526253][ T65] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 61.686318][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 61.687583][ T65] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 61.689951][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.689964][ T65] usb 6-1: Product: syz [ 61.689971][ T65] usb 6-1: Manufacturer: syz [ 61.689978][ T65] usb 6-1: SerialNumber: syz [ 61.691490][ T65] usb 6-1: config 0 descriptor?? [ 61.756208][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 61.886224][ T29] usb 7-1: device descriptor read/64, error -71 [ 62.098311][ T65] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 62.105137][ T65] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.105989][ T65] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 62.106205][ T65] usb 6-1: media controller created [ 62.133040][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.135939][ T65] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.225389][ T6331] syz_tun: entered allmulticast mode [ 62.258645][ T29] usb 7-1: device descriptor read/64, error -71 [ 62.301087][ T6309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6309 comm=syz.1.119 [ 62.302767][ T65] zl10353_read_register: readreg error (reg=127, ret==0) [ 62.302792][ T65] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 62.302799][ T65] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 62.305510][ T65] usb 6-1: USB disconnect, device number 7 [ 62.346935][ T65] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 62.366545][ T29] usb usb7-port1: attempt power cycle [ 62.706208][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 62.726703][ T29] usb 7-1: device descriptor read/8, error -71 [ 62.966251][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 62.986782][ T29] usb 7-1: device descriptor read/8, error -71 [ 63.076220][ T1843] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 63.097326][ T29] usb usb7-port1: unable to enumerate USB device [ 63.236214][ T1843] usb 6-1: Using ep0 maxpacket: 8 [ 63.236956][ T1843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.237852][ T1843] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 63.237887][ T1843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.237904][ T1843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.237923][ T1843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.237940][ T1843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.237970][ T1843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.327427][ T6342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 63.434052][ T6345] tipc: Started in network mode [ 63.434072][ T6345] tipc: Node identity 4, cluster identity 4711 [ 63.434132][ T6345] tipc: Node number set to 4 [ 63.446055][ T1843] usb 6-1: usb_control_msg returned -32 [ 63.446129][ T1843] usbtmc 6-1:16.0: can't read capabilities [ 63.617011][ T6307] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 63.618338][ T6307] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 63.618371][ T6307] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 63.618668][ T6307] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 63.622765][ T50] usb 8-1: USB disconnect, device number 6 [ 63.628751][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 63.631193][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 63.631575][ T50] ti_usb_3410_5052 8-1:2.0: device disconnected [ 63.741305][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888030088400: rx timeout, send abort [ 63.746996][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 63.747007][ T42] audit: type=1400 audit(1792640461.183:436): avc: denied { read } for pid=5124 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.747192][ T42] audit: type=1400 audit(1792640461.183:437): avc: denied { search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.747578][ T42] audit: type=1400 audit(1792640461.183:438): avc: denied { write search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.747722][ T42] audit: type=1400 audit(1792640461.183:439): avc: denied { add_name } for pid=5124 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.747959][ T42] audit: type=1400 audit(1792640461.183:440): avc: denied { create } for pid=5124 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.748358][ T42] audit: type=1400 audit(1792640461.183:441): avc: denied { append open } for pid=5124 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.748744][ T42] audit: type=1400 audit(1792640461.183:442): avc: denied { getattr } for pid=5124 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.139995][ T42] audit: type=1400 audit(1792640461.573:443): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.173684][ T6351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.133'. [ 64.174281][ T6351] trusted_key: encrypted_key: insufficient parameters specified [ 64.176024][ T42] audit: type=1400 audit(1792640461.603:444): avc: denied { name_bind } for pid=6350 comm="syz.3.133" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 64.179292][ T42] audit: type=1400 audit(1792640461.613:445): avc: denied { node_bind } for pid=6350 comm="syz.3.133" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 64.182932][ T6351] Cannot find add_set index 0 as target [ 64.184028][ T6351] Could not find key with description: [syz] [ 64.184036][ T6351] process_request_key_err: No key [ 64.184040][ T6351] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 64.184046][ T6351] One or more global auth toks could not properly register; rc = [-2] [ 64.184065][ T6351] Error validating options; rc = [-2] [ 64.241738][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88803008bc00: rx timeout, send abort [ 64.241987][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888030088400: abort rx timeout. Force session deactivation [ 64.270294][ T6355] net_ratelimit: 57 callbacks suppressed [ 64.270312][ T6355] Dead loop on virtual device ip6_vti0 (net 32), fix it urgently! [ 64.381936][ T6364] ip6t_rt: too many addresses specified [ 64.509829][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 64.516159][ T6366] bond0: entered promiscuous mode [ 64.520033][ T6366] gretap0: entered promiscuous mode [ 64.521781][ T6366] debugfs: 'hsr0' already exists in 'hsr' [ 64.521802][ T6366] Cannot create hsr debugfs directory [ 64.521865][ T6366] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 64.521881][ T6366] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 64.522644][ T6366] hsr0: entered promiscuous mode [ 64.569050][ T6371] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 64.741829][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88803008bc00: abort rx timeout. Force session deactivation [ 64.926371][ T5085] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 65.086282][ T5085] usb 8-1: Using ep0 maxpacket: 8 [ 65.087047][ T5085] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.088026][ T5085] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 65.088066][ T5085] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.088085][ T5085] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.088112][ T5085] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.088133][ T5085] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.088168][ T5085] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.296609][ T5085] usb 8-1: usb_control_msg returned -32 [ 65.296645][ T5085] usbtmc 8-1:16.0: can't read capabilities [ 65.371372][ T6393] netlink: 76 bytes leftover after parsing attributes in process `syz.2.143'. [ 65.372084][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.143'. [ 65.847120][ T5843] usb 6-1: USB disconnect, device number 8 [ 66.327512][ T6420] netlink: 80 bytes leftover after parsing attributes in process `syz.1.150'. [ 66.891191][ T6434] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 66.891596][ T6434] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 66.946724][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 67.340468][ T6455] ip_tables: iptables: counters copy to user failed while replacing table [ 67.448067][ T6462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'. [ 67.460906][ T6462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.460993][ T6462] block device autoloading is deprecated and will be removed. [ 67.508060][ T6462] md: invalid raid superblock magic on ram2 [ 67.508072][ T6462] md: ram2 does not have a valid v0.0 superblock, not importing! [ 67.508128][ T6462] md: md_import_device returned -22 [ 67.680745][ T5085] usb 8-1: USB disconnect, device number 7 [ 67.719711][ T6471] netlink: 72 bytes leftover after parsing attributes in process `syz.3.163'. [ 67.752969][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 67.753154][ T6471] gre0: entered allmulticast mode [ 67.849901][ T6477] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 68.128821][ T6493] nftables ruleset with unbound set [ 68.147148][ T5085] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.309102][ T5085] usb 8-1: unable to get BOS descriptor or descriptor too short [ 68.309147][ T5085] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 68.309914][ T5085] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.309926][ T5085] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 68.309948][ T5085] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.311509][ T5085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.311522][ T5085] usb 8-1: Product: syz [ 68.311529][ T5085] usb 8-1: Manufacturer: syz [ 68.311536][ T5085] usb 8-1: SerialNumber: syz [ 68.435971][ T6518] netlink: 80 bytes leftover after parsing attributes in process `syz.0.176'. [ 68.512004][ T6528] nvme_rdma: malformed address passed: 1å:4420 [ 68.573528][ T5085] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.575533][ T5085] usb 8-1: USB disconnect, device number 8 [ 68.599031][ T5733] udevd[5733]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.802004][ T6560] tipc: Enabling of bearer rejected, failed to enable media [ 69.212484][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.3.193 [ 69.469393][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 69.469411][ T42] audit: type=1400 audit(1792640466.903:482): avc: denied { mount } for pid=6573 comm="syz.1.194" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.742455][ T6588] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 69.743372][ T6588] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 70.079035][ T6592] __nla_validate_parse: 2 callbacks suppressed [ 70.079055][ T6592] netlink: 72 bytes leftover after parsing attributes in process `syz.3.200'. [ 70.092462][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 70.347168][ T6597] FAULT_INJECTION: forcing a failure. [ 70.347168][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 70.347192][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.2.202 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.347207][ T6597] Tainted: [L]=SOFTLOCKUP [ 70.347211][ T6597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.347218][ T6597] Call Trace: [ 70.347232][ T6597] [ 70.347237][ T6597] dump_stack_lvl+0x100/0x190 [ 70.347323][ T6597] should_fail_ex.cold+0x5/0xa [ 70.347353][ T6597] should_failslab+0xc2/0x120 [ 70.347381][ T6597] __kmalloc_cache_noprof+0x91/0x6d0 [ 70.347394][ T6597] ? snd_hrtimer_open+0x43/0xf0 [ 70.347431][ T6597] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 70.347449][ T6597] snd_hrtimer_open+0x43/0xf0 [ 70.347467][ T6597] snd_timer_open+0xbc3/0x1190 [ 70.347486][ T6597] ? __pfx_snd_timer_open+0x10/0x10 [ 70.347505][ T6597] ? kstrdup+0xb3/0xe0 [ 70.347519][ T6597] snd_seq_timer_open+0x289/0x5c0 [ 70.347533][ T6597] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 70.347546][ T6597] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.347577][ T6597] ? mark_held_locks+0x40/0x70 [ 70.347589][ T6597] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.347642][ T6597] queue_use+0xdc/0x1f0 [ 70.347659][ T6597] snd_seq_queue_alloc+0x2e5/0x540 [ 70.347679][ T6597] snd_seq_ioctl_create_queue+0xa9/0x370 [ 70.347701][ T6597] call_seq_client_ctl+0xa3/0x130 [ 70.347717][ T6597] snd_seq_kernel_client_ctl+0x35/0x50 [ 70.347733][ T6597] alloc_seq_queue+0xdb/0x180 [ 70.347748][ T6597] ? __pfx_alloc_seq_queue+0x10/0x10 [ 70.347770][ T6597] ? find_held_lock+0x2b/0x80 [ 70.347788][ T6597] ? mark_held_locks+0x40/0x70 [ 70.347802][ T6597] snd_seq_oss_open+0x2b2/0xa10 [ 70.347821][ T6597] odev_open+0x6f/0x90 [ 70.347834][ T6597] ? __pfx_odev_open+0x10/0x10 [ 70.347852][ T6597] soundcore_open+0x2e3/0x5a0 [ 70.347885][ T6597] ? __pfx_soundcore_open+0x10/0x10 [ 70.347906][ T6597] chrdev_open+0x234/0x6a0 [ 70.347934][ T6597] ? __pfx_chrdev_open+0x10/0x10 [ 70.347980][ T6597] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 70.348009][ T6597] do_dentry_open+0x674/0x1470 [ 70.348024][ T6597] ? __pfx_chrdev_open+0x10/0x10 [ 70.348044][ T6597] vfs_open_consume+0xcc/0x460 [ 70.348065][ T6597] path_openat+0x1547/0x23f0 [ 70.348085][ T6597] ? __pfx_path_openat+0x10/0x10 [ 70.348107][ T6597] do_file_open+0x20e/0x430 [ 70.348126][ T6597] ? __pfx_do_file_open+0x10/0x10 [ 70.348152][ T6597] ? _raw_spin_unlock+0x28/0x50 [ 70.348168][ T6597] ? alloc_fd+0x471/0x7a0 [ 70.348192][ T6597] do_sys_openat2+0x163/0x1d0 [ 70.348209][ T6597] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.348233][ T6597] __x64_sys_openat+0x12d/0x210 [ 70.348243][ T6597] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.348260][ T6597] do_syscall_64+0x123/0x790 [ 70.348281][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.348293][ T6597] RIP: 0033:0x7f98d139f559 [ 70.348305][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.348317][ T6597] RSP: 002b:00007f98d2244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.348341][ T6597] RAX: ffffffffffffffda RBX: 00007f98d1625fa0 RCX: 00007f98d139f559 [ 70.348349][ T6597] RDX: 0000000000080200 RSI: 0000200000003300 RDI: ffffffffffffff9c [ 70.348357][ T6597] RBP: 00007f98d1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.348365][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.348372][ T6597] R13: 00007f98d1626038 R14: 00007f98d1625fa0 R15: 00007fffa6e3d6d8 [ 70.348389][ T6597] [ 70.361693][ T6318] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 70.431288][ T6603] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 70.538427][ T6318] usb 8-1: unable to get BOS descriptor or descriptor too short [ 70.538480][ T6318] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 70.540726][ T6318] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.540741][ T6318] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 70.540765][ T6318] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.542814][ T6318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.542837][ T6318] usb 8-1: Product: syz [ 70.542852][ T6318] usb 8-1: Manufacturer: syz [ 70.542867][ T6318] usb 8-1: SerialNumber: syz [ 70.605106][ T6621] overlayfs: failed to clone upperpath [ 70.650019][ T6619] /dev/sr0: Can't open blockdev [ 70.699267][ T42] audit: type=1400 audit(1792640468.133:483): avc: denied { append } for pid=6624 comm="syz.1.212" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.700268][ T42] audit: type=1400 audit(1792640468.133:484): avc: denied { ioctl } for pid=6624 comm="syz.1.212" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x4010640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.706738][ T42] audit: type=1400 audit(1792640468.143:485): avc: denied { relabelfrom } for pid=6624 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.706907][ T42] audit: type=1400 audit(1792640468.143:486): avc: denied { relabelto } for pid=6624 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.726156][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 70.790396][ T6318] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.793923][ T6318] usb 8-1: USB disconnect, device number 9 [ 70.804333][ T5733] udevd[5733]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.888105][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 70.889426][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.890249][ T29] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 70.890273][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 70.890285][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.890297][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 70.890309][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.890320][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.890339][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.995750][ T42] audit: type=1400 audit(1792640468.423:487): avc: denied { map } for pid=6628 comm="syz.1.214" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.097728][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 71.097766][ T29] usbtmc 7-1:16.0: can't read capabilities [ 71.143672][ T42] audit: type=1400 audit(1792640468.573:488): avc: denied { create } for pid=6631 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 71.144224][ T42] audit: type=1400 audit(1792640468.573:489): avc: denied { setopt } for pid=6631 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 71.146389][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 71.181150][ T6634] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 71.194654][ T6634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.202774][ T6634] bond1: (slave geneve2): making interface the new active one [ 71.203858][ T6634] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 71.228838][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228888][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285186][ T42] audit: type=1400 audit(1792640468.713:490): avc: denied { write } for pid=6638 comm="syz.1.218" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.288684][ T6639] binder: BINDER_SET_CONTEXT_MGR already set [ 71.288695][ T6639] binder: 6638:6639 ioctl 4018620d 200000000200 returned -16 [ 71.306402][ T42] audit: type=1400 audit(1792640468.733:491): avc: denied { setopt } for pid=6608 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.330920][ T6609] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.389339][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 71.389413][ T6645] usbtmc 7-1:16.0: Unable to send data, error -71 [ 71.465358][ T6654] syzkaller0: entered promiscuous mode [ 71.465379][ T6654] syzkaller0: entered allmulticast mode [ 71.469331][ T6654] tipc: Started in network mode [ 71.469354][ T6654] tipc: Node identity ca8cd8581a9b, cluster identity 4711 [ 71.470777][ T6654] tipc: Enabled bearer , priority 0 [ 71.472644][ T6653] tipc: Resetting bearer [ 71.490452][ T6653] tipc: Disabling bearer [ 71.613616][ T6318] usb 7-1: USB disconnect, device number 11 [ 72.479505][ T5815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.575706][ T5815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.672020][ T5815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.718640][ T5843] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.773139][ T63] kernel read not supported for file /video9 (pid: 63 comm: kworker/3:1) [ 72.774566][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.781800][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.785193][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.786773][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.787424][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.807004][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.808377][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.809967][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.814317][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.815742][ T5815] bridge_slave_1: left allmulticast mode [ 72.815777][ T5815] bridge_slave_1: left promiscuous mode [ 72.817657][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.817924][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.851086][ T5815] bridge_slave_0: left allmulticast mode [ 72.851109][ T5815] bridge_slave_0: left promiscuous mode [ 72.851308][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.876268][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 72.877282][ T5843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.878302][ T5843] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 72.878340][ T5843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.878359][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.878378][ T5843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.878396][ T5843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.878428][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.990327][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.990932][ T5815] bond_slave_0: left promiscuous mode [ 72.993001][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.993529][ T5815] bond_slave_1: left promiscuous mode [ 72.994501][ T5815] bond0 (unregistering): Released all slaves [ 73.172367][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.264352][ T6690] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.340967][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.473372][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.476534][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.477596][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.478941][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.479590][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.507729][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.572404][ T5815] hsr_slave_0: left promiscuous mode [ 73.573083][ T5815] hsr_slave_1: left promiscuous mode [ 73.574799][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.574831][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.575879][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.575891][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.593368][ T5815] veth1_macvtap: left promiscuous mode [ 73.593411][ T5815] veth0_macvtap: left promiscuous mode [ 73.593500][ T5815] veth1_vlan: left promiscuous mode [ 73.593568][ T5815] veth0_vlan: left promiscuous mode [ 73.729708][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 73.734153][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 73.848669][ T6736] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 73.962031][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.962114][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.962172][ T6690] bridge_slave_0: entered allmulticast mode [ 73.962910][ T6690] bridge_slave_0: entered promiscuous mode [ 73.964205][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.964270][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.964323][ T6690] bridge_slave_1: entered allmulticast mode [ 73.965365][ T6690] bridge_slave_1: entered promiscuous mode [ 73.988176][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.995171][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.995201][ T6721] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.031628][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.034839][ T6690] team0: Port device team_slave_0 added [ 74.039291][ T6690] team0: Port device team_slave_1 added [ 74.057112][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.057127][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.057146][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.058826][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.058838][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.058858][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.094705][ T6690] hsr_slave_0: entered promiscuous mode [ 74.095852][ T6690] hsr_slave_1: entered promiscuous mode [ 74.096997][ T6690] debugfs: 'hsr0' already exists in 'hsr' [ 74.097016][ T6690] Cannot create hsr debugfs directory [ 74.262423][ T5815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.290157][ T6690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.292516][ T6690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.293006][ T6690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.295276][ T6690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.295746][ T6690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.300031][ T6690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.303287][ T6690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.308823][ T6690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.319080][ T5815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.384124][ T5815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.433419][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.433577][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.433674][ T6721] bridge_slave_0: entered allmulticast mode [ 74.434896][ T6721] bridge_slave_0: entered promiscuous mode [ 74.438833][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.438939][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.439030][ T6721] bridge_slave_1: entered allmulticast mode [ 74.440302][ T6721] bridge_slave_1: entered promiscuous mode [ 74.462505][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.464690][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.493231][ T6721] team0: Port device team_slave_0 added [ 74.503505][ T5815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.513020][ T6721] team0: Port device team_slave_1 added [ 74.526445][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.526455][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.526468][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.527671][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.527678][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.527691][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.533838][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.561082][ T6721] hsr_slave_0: entered promiscuous mode [ 74.561845][ T6721] hsr_slave_1: entered promiscuous mode [ 74.562369][ T6721] debugfs: 'hsr0' already exists in 'hsr' [ 74.562384][ T6721] Cannot create hsr debugfs directory [ 74.584362][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.611969][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.612061][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.647499][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.647580][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.705580][ T5815] bridge_slave_1: left allmulticast mode [ 74.705645][ T5815] bridge_slave_1: left promiscuous mode [ 74.705745][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.711610][ T5815] bridge_slave_0: left allmulticast mode [ 74.711623][ T5815] bridge_slave_0: left promiscuous mode [ 74.711745][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.792491][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.794055][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.795252][ T5815] bond0 (unregistering): Released all slaves [ 74.861522][ T6721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.869549][ T6721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.870965][ T6721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.883712][ T6721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.884112][ T5815] tipc: Left network mode [ 74.884160][ T6721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.890298][ T6721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.893718][ T6721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.898725][ T5739] Bluetooth: hci0: command tx timeout [ 74.899819][ T6721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.938618][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 74.938631][ T42] audit: type=1400 audit(1792640472.373:511): avc: denied { write } for pid=6779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.999382][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.022082][ T6721] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.028134][ T42] audit: type=1400 audit(1792640472.453:512): avc: denied { write } for pid=6791 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.043949][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.044024][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.052715][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.052797][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.092395][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.127580][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.190503][ T5815] hsr_slave_0: left promiscuous mode [ 75.191687][ T5815] hsr_slave_1: left promiscuous mode [ 75.192647][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.192664][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.193685][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.193698][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.201860][ T5815] veth1_macvtap: left promiscuous mode [ 75.201880][ T5815] veth0_macvtap: left promiscuous mode [ 75.202004][ T5815] veth1_vlan: left promiscuous mode [ 75.202218][ T5815] veth0_vlan: left promiscuous mode [ 75.232037][ T42] audit: type=1400 audit(1792640472.663:513): avc: denied { write } for pid=6806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.310277][ T42] audit: type=1400 audit(1792640472.743:514): avc: denied { write } for pid=6812 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.351355][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 75.355703][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 75.433031][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 75.497272][ T42] audit: type=1400 audit(1792640472.933:515): avc: denied { setopt } for pid=6814 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.500919][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 75.536730][ T5739] Bluetooth: hci3: command tx timeout [ 75.572321][ T42] audit: type=1400 audit(1792640473.003:516): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.630055][ T6840] bad cache= option: noe [ 75.630055][ T6840] [ 75.630227][ T6840] CIFS: VFS: bad cache= option: noe [ 75.630454][ T6690] veth0_vlan: entered promiscuous mode [ 75.630988][ T42] audit: type=1400 audit(1792640473.063:517): avc: denied { write } for pid=6838 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.634377][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.637924][ T6690] veth1_vlan: entered promiscuous mode [ 75.652994][ T6690] veth0_macvtap: entered promiscuous mode [ 75.655102][ T6690] veth1_macvtap: entered promiscuous mode [ 75.664820][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.672435][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.698740][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.718182][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718268][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718298][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718328][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.730929][ T42] audit: type=1400 audit(1792640473.163:518): avc: denied { nlmsg_read } for pid=6848 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.743774][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.743790][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.770065][ T1713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.770080][ T1713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.775812][ T6854] batman_adv: batadv0: Adding interface: dummy0 [ 75.775826][ T6854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.775849][ T6854] batman_adv: batadv0: Interface activated: dummy0 [ 75.784947][ T42] audit: type=1400 audit(1792640473.213:519): avc: denied { ioctl } for pid=6852 comm="syz.0.247" path="socket:[15726]" dev="sockfs" ino=15726 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.796955][ T6854] batadv0: mtu less than device minimum [ 75.797914][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.798931][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.800002][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.800941][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.802025][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.803059][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.804082][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.805026][ T6854] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.822063][ T42] audit: type=1400 audit(1792640473.253:520): avc: denied { mounton } for pid=6690 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 75.823405][ T6855] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 75.823422][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 75.825920][ T6855] batadv0: entered promiscuous mode [ 75.825938][ T6855] batadv0: entered allmulticast mode [ 75.827934][ T6855] bridge0: port 3(batadv0) entered blocking state [ 75.828061][ T6855] bridge0: port 3(batadv0) entered disabled state [ 75.829903][ T6855] bridge0: port 3(batadv0) entered blocking state [ 75.829949][ T6855] bridge0: port 3(batadv0) entered forwarding state [ 75.852023][ T6721] veth0_vlan: entered promiscuous mode [ 75.868953][ T6721] veth1_vlan: entered promiscuous mode [ 75.895834][ T6721] veth0_macvtap: entered promiscuous mode [ 75.900345][ T6721] veth1_macvtap: entered promiscuous mode [ 75.909941][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.917152][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.961564][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 75.979509][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.979531][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.007683][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.007702][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.016796][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017189][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017380][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017411][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086417][ T5781] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 76.086435][ T5781] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 76.342548][ T9] cfg80211: failed to load regulatory.db [ 76.418379][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 76.438678][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 76.566157][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 76.566872][ T24] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 76.571398][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.571420][ T24] usb 10-1: Product: syz [ 76.571435][ T24] usb 10-1: Manufacturer: syz [ 76.571448][ T24] usb 10-1: SerialNumber: syz [ 76.573806][ T24] usb 10-1: config 0 descriptor?? [ 76.673449][ T6915] lo: entered allmulticast mode [ 76.673716][ T6915] bond0: entered allmulticast mode [ 76.673955][ T6915] dummy0: entered allmulticast mode [ 76.674159][ T6915] eql: entered allmulticast mode [ 76.674238][ T6915] ifb0: entered allmulticast mode [ 76.674368][ T6915] ifb1: entered allmulticast mode [ 76.677122][ T6915] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 76.683681][ T6915] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 76.689812][ T6915] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 76.689878][ T6915] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 76.690143][ T6915] hwsim0: entered allmulticast mode [ 76.690210][ T6915] ieee802154 phy0 wpan0: entered allmulticast mode [ 76.690347][ T6915] ieee802154 phy1 wpan1: entered allmulticast mode [ 76.690428][ T6915] teql0: entered allmulticast mode [ 76.690481][ T6915] tunl0: entered allmulticast mode [ 76.690538][ T6915] gre0: entered allmulticast mode [ 76.690582][ T6915] gretap0: entered allmulticast mode [ 76.690625][ T6915] erspan0: entered allmulticast mode [ 76.690675][ T6915] ip_vti0: entered allmulticast mode [ 76.690729][ T6915] ip6_vti0: entered allmulticast mode [ 76.690773][ T6915] sit0: entered allmulticast mode [ 76.690816][ T6915] ip6tnl0: entered allmulticast mode [ 76.690857][ T6915] ip6gre0: entered allmulticast mode [ 76.690900][ T6915] lapb0: entered allmulticast mode [ 76.691012][ T6915] lapb1: entered allmulticast mode [ 76.691095][ T6915] lapb2: entered allmulticast mode [ 76.691172][ T6915] lapb3: entered allmulticast mode [ 76.691250][ T6915] lapb4: entered allmulticast mode [ 76.691330][ T6915] lapb5: entered allmulticast mode [ 76.691364][ T6915] lapb6: entered allmulticast mode [ 76.691533][ T6915] lowpan0: entered allmulticast mode [ 76.691608][ T6915] rxe_eth0: entered allmulticast mode [ 76.691880][ T6915] hsr0: entered allmulticast mode [ 76.692099][ T6915] lapb7: entered allmulticast mode [ 76.692196][ T6915] netdevsim netdevsim2 eth2: entered allmulticast mode [ 76.692438][ T6915] netdevsim netdevsim2 eth3: entered allmulticast mode [ 76.692677][ T6915] netdevsim netdevsim2 eth4: entered allmulticast mode [ 76.693567][ T6915] netdevsim netdevsim2 eth5: entered allmulticast mode [ 76.693820][ T6915] netdevsim netdevsim3 eth6: entered allmulticast mode [ 76.694078][ T6915] netdevsim netdevsim3 eth7: entered allmulticast mode [ 76.694311][ T6915] netdevsim netdevsim3 eth8: entered allmulticast mode [ 76.694537][ T6915] netdevsim netdevsim3 eth9: entered allmulticast mode [ 76.704900][ T6915] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 76.785767][ T6882] syz_tun: entered allmulticast mode [ 76.786531][ T6882] vxcan1: entered allmulticast mode [ 76.792752][ T6881] syz_tun: left allmulticast mode [ 76.793349][ T24] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 76.798516][ T24] usb 10-1: USB disconnect, device number 2 [ 76.976291][ T5739] Bluetooth: hci0: command tx timeout [ 77.076397][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 77.206233][ T9] usb 9-1: device descriptor read/64, error -71 [ 77.446332][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 77.596234][ T9] usb 9-1: device descriptor read/64, error -71 [ 77.626235][ T5739] Bluetooth: hci3: command tx timeout [ 77.716511][ T9] usb usb9-port1: attempt power cycle [ 77.982481][ T6968] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 77.997580][ T6968] bond1: entered promiscuous mode [ 77.997858][ T6968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.019077][ T6967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.019347][ T6967] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 78.019359][ T6967] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 78.022663][ T6967] bond1: (slave gre1): making interface the new active one [ 78.022675][ T6967] gre1: entered promiscuous mode [ 78.023624][ T6967] bond1: (slave gre1): Enslaving as an active interface with an up link [ 78.027173][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 78.039720][ T6967] bond1 (unregistering): (slave gre1): Releasing backup interface [ 78.039800][ T6967] gre1: left promiscuous mode [ 78.049089][ T6967] bond1 (unregistering): Released all slaves [ 78.077268][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 78.110562][ T9] usb 9-1: device descriptor read/8, error -71 [ 78.133587][ T6973] device-mapper: raid: Choosing default region size of 4MiB [ 78.134081][ T6973] device-mapper: table: 248:1: raid: Invalid flags combination (-EINVAL) [ 78.134097][ T6973] device-mapper: ioctl: error adding target to table [ 78.347686][ T6682] usbtmc 6-1:16.0: simple usb_control_msg failed -110 [ 78.356491][ T5822] usb 6-1: USB disconnect, device number 9 [ 78.366192][ T9] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 78.378453][ T6994] netlink: 204 bytes leftover after parsing attributes in process `syz.1.283'. [ 78.386731][ T9] usb 9-1: device descriptor read/8, error -71 [ 78.496613][ T9] usb usb9-port1: unable to enumerate USB device [ 78.498783][ T7003] RGB/YUV Input: ================= START STATUS ================= [ 78.498797][ T7003] RGB/YUV Input: Test Pattern: 75% Colorbar [ 78.498817][ T7003] RGB/YUV Input: Show Information: All [ 78.498834][ T7003] RGB/YUV Input: Vertical Flip: false [ 78.498850][ T7003] RGB/YUV Input: Horizontal Flip: false [ 78.498867][ T7003] RGB/YUV Input: Brightness: 128 [ 78.498885][ T7003] RGB/YUV Input: Contrast: 128 [ 78.498902][ T7003] RGB/YUV Input: Hue: 0 [ 78.498918][ T7003] RGB/YUV Input: Saturation: 128 [ 78.498936][ T7003] RGB/YUV Input: Pixel Rate: 160000000 [ 78.498952][ T7003] RGB/YUV Input: Horizontal Blanking: 800 [ 78.498967][ T7003] RGB/YUV Input: Vertical Blanking: 3223 [ 78.498985][ T7003] RGB/YUV Input: ================== END STATUS ================== [ 78.724380][ T7015] syzkaller0: entered promiscuous mode [ 78.724394][ T7015] syzkaller0: entered allmulticast mode [ 78.916345][ T7024] IPVS: length: 120 != 24 [ 78.993717][ T7033] FAULT_INJECTION: forcing a failure. [ 78.993717][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 78.993740][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.5.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.993755][ T7033] Tainted: [L]=SOFTLOCKUP [ 78.993759][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.993765][ T7033] Call Trace: [ 78.993770][ T7033] [ 78.993774][ T7033] dump_stack_lvl+0x100/0x190 [ 78.993815][ T7033] should_fail_ex.cold+0x5/0xa [ 78.993838][ T7033] should_failslab+0xc2/0x120 [ 78.993859][ T7033] __kmalloc_node_noprof+0xff/0x870 [ 78.993878][ T7033] ? __get_vm_area_node+0x1ff/0x350 [ 78.993902][ T7033] ? __get_vm_area_node+0x22b/0x350 [ 78.993926][ T7033] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 78.993949][ T7033] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 78.993993][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.994011][ T7033] ? find_held_lock+0x2b/0x80 [ 78.994034][ T7033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.994051][ T7033] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.994076][ T7033] ? avc_has_perm_noaudit+0x145/0x470 [ 78.994089][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.994103][ T7033] __vmalloc_node_noprof+0xad/0xf0 [ 78.994124][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.994141][ T7033] __vmalloc_noprof+0xa3/0x120 [ 78.994157][ T7033] ? __pfx___vmalloc_noprof+0x10/0x10 [ 78.994175][ T7033] ? rcu_is_watching+0x13/0xc0 [ 78.994196][ T7033] ? cap_capable+0x107/0x430 [ 78.994211][ T7033] bpf_prog_alloc_no_stats+0x59/0x690 [ 78.994225][ T7033] ? security_capable+0x80/0x260 [ 78.994240][ T7033] bpf_prog_alloc+0x3b/0x200 [ 78.994253][ T7033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.994274][ T7033] bpf_prog_load+0x49e/0x2ab0 [ 78.994293][ T7033] ? __pfx_bpf_prog_load+0x10/0x10 [ 78.994320][ T7033] __sys_bpf+0x1f46/0x4a30 [ 78.994335][ T7033] ? __pfx___sys_bpf+0x10/0x10 [ 78.994346][ T7033] ? find_held_lock+0x2b/0x80 [ 78.994360][ T7033] ? get_pid_task+0xfc/0x250 [ 78.994380][ T7033] ? get_pid_task+0xfc/0x250 [ 78.994397][ T7033] ? find_held_lock+0x2b/0x80 [ 78.994414][ T7033] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.994431][ T7033] ? find_held_lock+0x2b/0x80 [ 78.994445][ T7033] ? ksys_write+0x190/0x250 [ 78.994457][ T7033] ? ksys_write+0x190/0x250 [ 78.994470][ T7033] ? lock_acquire+0x1d1/0x380 [ 78.994490][ T7033] ? fput+0x7c/0x100 [ 78.994506][ T7033] ? ksys_write+0x1ac/0x250 [ 78.994520][ T7033] ? __x64_sys_bpf+0xce/0x140 [ 78.994531][ T7033] __x64_sys_bpf+0xce/0x140 [ 78.994544][ T7033] ? do_syscall_64+0xae/0x790 [ 78.994562][ T7033] do_syscall_64+0x123/0x790 [ 78.994574][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.994587][ T7033] RIP: 0033:0x7fdc4959f559 [ 78.994596][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.994607][ T7033] RSP: 002b:00007fdc4a4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.994629][ T7033] RAX: ffffffffffffffda RBX: 00007fdc49825fa0 RCX: 00007fdc4959f559 [ 78.994637][ T7033] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 78.994643][ T7033] RBP: 00007fdc4a4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 78.994650][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.994656][ T7033] R13: 00007fdc49826038 R14: 00007fdc49825fa0 R15: 00007ffd788df068 [ 78.994671][ T7033] [ 78.994799][ T7033] syz.5.298: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.994898][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.5.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.994921][ T7033] Tainted: [L]=SOFTLOCKUP [ 78.994928][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.994938][ T7033] Call Trace: [ 78.994943][ T7033] [ 78.994950][ T7033] dump_stack_lvl+0x100/0x190 [ 78.994980][ T7033] warn_alloc.cold+0x9e/0xb2 [ 78.995013][ T7033] ? __pfx_warn_alloc+0x10/0x10 [ 78.995029][ T7033] ? dump_stack_lvl+0x17c/0x190 [ 78.995045][ T7033] ? rcu_is_watching+0x13/0xc0 [ 78.995061][ T7033] ? __kasan_kmalloc+0x8a/0xb0 [ 78.995077][ T7033] ? __kmalloc_node_noprof+0x360/0x870 [ 78.995089][ T7033] ? __get_vm_area_node+0x1ff/0x350 [ 78.995104][ T7033] ? __get_vm_area_node+0x22b/0x350 [ 78.995124][ T7033] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 78.995158][ T7033] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 78.995180][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.995197][ T7033] ? find_held_lock+0x2b/0x80 [ 78.995212][ T7033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.995229][ T7033] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.995244][ T7033] ? avc_has_perm_noaudit+0x145/0x470 [ 78.995258][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.995272][ T7033] __vmalloc_node_noprof+0xad/0xf0 [ 78.995289][ T7033] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 78.995305][ T7033] __vmalloc_noprof+0xa3/0x120 [ 78.995321][ T7033] ? __pfx___vmalloc_noprof+0x10/0x10 [ 78.995339][ T7033] ? rcu_is_watching+0x13/0xc0 [ 78.995353][ T7033] ? cap_capable+0x107/0x430 [ 78.995368][ T7033] bpf_prog_alloc_no_stats+0x59/0x690 [ 78.995382][ T7033] ? security_capable+0x80/0x260 [ 78.995397][ T7033] bpf_prog_alloc+0x3b/0x200 [ 78.995410][ T7033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.995424][ T7033] bpf_prog_load+0x49e/0x2ab0 [ 78.995443][ T7033] ? __pfx_bpf_prog_load+0x10/0x10 [ 78.995470][ T7033] __sys_bpf+0x1f46/0x4a30 [ 78.995485][ T7033] ? __pfx___sys_bpf+0x10/0x10 [ 78.995496][ T7033] ? find_held_lock+0x2b/0x80 [ 78.995510][ T7033] ? get_pid_task+0xfc/0x250 [ 78.995523][ T7033] ? get_pid_task+0xfc/0x250 [ 78.995541][ T7033] ? find_held_lock+0x2b/0x80 [ 78.995558][ T7033] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.995574][ T7033] ? find_held_lock+0x2b/0x80 [ 78.995588][ T7033] ? ksys_write+0x190/0x250 [ 78.995601][ T7033] ? ksys_write+0x190/0x250 [ 78.995613][ T7033] ? lock_acquire+0x1d1/0x380 [ 78.995635][ T7033] ? fput+0x7c/0x100 [ 78.995651][ T7033] ? ksys_write+0x1ac/0x250 [ 78.995665][ T7033] ? __x64_sys_bpf+0xce/0x140 [ 78.995677][ T7033] __x64_sys_bpf+0xce/0x140 [ 78.995689][ T7033] ? do_syscall_64+0xae/0x790 [ 78.995700][ T7033] do_syscall_64+0x123/0x790 [ 78.995712][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.995723][ T7033] RIP: 0033:0x7fdc4959f559 [ 78.995732][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.995746][ T7033] RSP: 002b:00007fdc4a4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.995761][ T7033] RAX: ffffffffffffffda RBX: 00007fdc49825fa0 RCX: 00007fdc4959f559 [ 78.995770][ T7033] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 78.995781][ T7033] RBP: 00007fdc4a4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 78.995791][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.995801][ T7033] R13: 00007fdc49826038 R14: 00007fdc49825fa0 R15: 00007ffd788df068 [ 78.995823][ T7033] [ 78.995922][ T7033] Mem-Info: [ 78.995931][ T7033] active_anon:10721 inactive_anon:0 isolated_anon:0 [ 78.995931][ T7033] active_file:0 inactive_file:57125 isolated_file:0 [ 78.995931][ T7033] unevictable:1000 dirty:367 writeback:0 [ 78.995931][ T7033] slab_reclaimable:12443 slab_unreclaimable:71170 [ 78.995931][ T7033] mapped:25014 shmem:1567 pagetables:1388 [ 78.995931][ T7033] sec_pagetables:297 bounce:0 [ 78.995931][ T7033] kernel_misc_reclaimable:0 [ 78.995931][ T7033] free:450090 free_pcp:9171 free_cma:0 [ 78.995970][ T7033] Node 0 active_anon:42884kB inactive_anon:0kB active_file:0kB inactive_file:228292kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100056kB dirty:1444kB writeback:0kB shmem:4268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:5328kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 78.996013][ T7033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:24kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 78.996056][ T7033] Node 0 DMA free:14780kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:108kB free_cma:0kB [ 78.996328][ T7033] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 78.996356][ T7033] Node 0 DMA32 free:151340kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42820kB inactive_anon:0kB active_file:0kB inactive_file:228292kB unevictable:2000kB writepending:1444kB zspages:0kB present:2080628kB managed:1233556kB mlocked:0kB bounce:0kB free_pcp:21444kB local_pcp:2080kB free_cma:0kB [ 78.996403][ T7033] lowmem_reserve[]: 0 0 0 0 0 [ 78.996430][ T7033] Node 1 Normal free:1634240kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:24kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:14812kB local_pcp:1504kB free_cma:0kB [ 78.996470][ T7033] lowmem_reserve[]: 0 0 0 0 0 [ 78.996487][ T7033] Node 0 DMA: 18*4kB (UM) 19*8kB (UM) 14*16kB (UME) 5*32kB (UM) 6*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (ME) 3*1024kB (ME) 4*2048kB (ME) 0*4096kB = 14816kB [ 78.996564][ T7033] Node 0 DMA32: 288*4kB (UME) 121*8kB (UME) 22*16kB (UME) 234*32kB (UME) 139*64kB (UME) 37*128kB (UME) 27*256kB (UM) 16*512kB (ME) 12*1024kB (M) 11*2048kB (M) 19*4096kB (UM) = 151336kB [ 78.996645][ T7033] Node 1 Normal: 8*4kB (UM) 8*8kB (UM) 10*16kB (UM) 12*32kB (U) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 1*2048kB (U) 398*4096kB (M) = 1634240kB [ 78.996720][ T7033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.996729][ T7033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.996737][ T7033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.996745][ T7033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.996753][ T7033] 58688 total pagecache pages [ 78.996757][ T7033] 0 pages in swap cache [ 78.996761][ T7033] Free swap = 124996kB [ 78.996765][ T7033] Total swap = 124996kB [ 78.996769][ T7033] 1048443 pages RAM [ 78.996772][ T7033] 0 pages HighMem/MovableOnly [ 78.996775][ T7033] 290744 pages reserved [ 78.996779][ T7033] 0 pages cma reserved [ 79.066147][ T5739] Bluetooth: hci0: command tx timeout [ 79.150184][ T7053] smbdirect: ib_dev[rxe0] renamed to [s] [ 79.182237][ T7056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 79.187038][ T7056] CIFS: Attempting to mount //127.0.0.1/share [ 79.247146][ T7058] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x54 [ 79.249291][ T7056] CIFS: VFS: cifs_mount failed w/return code = -112 [ 79.286214][ T3380] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 79.315041][ T7063] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 32, id = 0 [ 79.447070][ T3380] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.448184][ T3380] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.448210][ T3380] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.448241][ T3380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.453075][ T7041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 79.456448][ T3380] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.534653][ T7065] Illegal XDP return value 4294967274 on prog (id 25) dev syzkaller1, expect packet loss! [ 79.628202][ T7067] net_ratelimit: 15 callbacks suppressed [ 79.628221][ T7067] openvswitch: netlink: Key type 1542 is out of range max 32 [ 79.666165][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.666387][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.705303][ T7071] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 79.709094][ T5739] Bluetooth: hci3: command tx timeout [ 79.725401][ T5739] Bluetooth: hci3: unexpected subevent 0x05 length: 5 < 12 [ 79.728278][ T7071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.778978][ T7071] bond2: (slave geneve3): making interface the new active one [ 79.789086][ T7071] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 79.861306][ T63] usb 10-1: USB disconnect, device number 3 [ 79.888854][ T7079] IPv6: sit1: Disabled Multicast RS [ 79.889854][ T7079] sit1: entered allmulticast mode [ 79.937631][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 80.080101][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 80.080112][ T42] audit: type=1400 audit(1792640477.513:547): avc: denied { create } for pid=7096 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.082831][ T42] audit: type=1400 audit(1792640477.513:548): avc: denied { read } for pid=7096 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.083411][ T42] audit: type=1400 audit(1792640477.513:549): avc: denied { ioctl } for pid=7096 comm="syz.0.321" path="socket:[17212]" dev="sockfs" ino=17212 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.170305][ T42] audit: type=1400 audit(1792640477.603:550): avc: denied { shutdown } for pid=7106 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.170837][ T7107] ip_tables: iptables: counters copy to user failed while replacing table [ 80.173170][ T42] audit: type=1400 audit(1792640477.603:551): avc: denied { getopt } for pid=7106 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.173195][ T42] audit: type=1400 audit(1792640477.603:552): avc: denied { connect } for pid=7106 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.178947][ T42] audit: type=1400 audit(1792640477.613:553): avc: denied { setopt } for pid=7106 comm="syz.1.323" lport=58292 faddr=::ffff:172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.358297][ T42] audit: type=1400 audit(1792640477.793:554): avc: denied { write } for pid=7111 comm="syz.1.324" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.359052][ T42] audit: type=1400 audit(1792640477.793:555): avc: denied { open } for pid=7111 comm="syz.1.324" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.485629][ T42] audit: type=1400 audit(1792640477.913:556): avc: denied { write } for pid=7121 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.146145][ T5739] Bluetooth: hci0: command tx timeout [ 81.666205][ T6868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 81.776374][ T5739] Bluetooth: hci3: command tx timeout [ 81.826265][ T6868] usb 6-1: Using ep0 maxpacket: 16 [ 81.826964][ T6868] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 81.828950][ T6868] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.828979][ T6868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.831018][ T6868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.831039][ T6868] usb 6-1: Product: syz [ 81.831052][ T6868] usb 6-1: Manufacturer: syz [ 81.831066][ T6868] usb 6-1: SerialNumber: syz [ 81.833573][ T6868] usb 6-1: config 0 descriptor?? [ 82.051618][ T6868] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 82.386139][ T6868] rc_core: IR keymap rc-imon-pad not found [ 82.386153][ T6868] Registered IR keymap rc-empty [ 82.386291][ T6868] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 82.386303][ T6868] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 82.537560][ T6868] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 82.539753][ T6868] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 82.541334][ T6868] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:10> initialized [ 82.971646][ T7091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.018244][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 83.054418][ T7143] FAULT_INJECTION: forcing a failure. [ 83.054418][ T7143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.054476][ T7143] CPU: 3 UID: 0 PID: 7143 Comm: syz.4.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.054491][ T7143] Tainted: [L]=SOFTLOCKUP [ 83.054495][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.054503][ T7143] Call Trace: [ 83.054511][ T7143] [ 83.054516][ T7143] dump_stack_lvl+0x100/0x190 [ 83.054565][ T7143] should_fail_ex.cold+0x5/0xa [ 83.054593][ T7143] __kvm_read_guest_page+0x186/0x250 [ 83.054627][ T7143] kvm_fetch_guest_virt+0x10d/0x180 [ 83.054646][ T7143] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 83.054674][ T7143] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 83.054691][ T7143] ? ima_match_policy+0x8b8/0x23e0 [ 83.054714][ T7143] ? ima_alloc_init_template+0x330/0x6d0 [ 83.054737][ T7143] x86_decode_insn+0x3ca/0x6da0 [ 83.054762][ T7143] ? vmx_segment_cache_test_set+0x151/0x400 [ 83.054788][ T7143] ? __pfx_x86_decode_insn+0x10/0x10 [ 83.054806][ T7143] ? vmx_cache_reg+0x535/0x700 [ 83.054833][ T7143] ? init_decode_cache+0xd/0x2b0 [ 83.054848][ T7143] ? init_emulate_ctxt+0x3fb/0x6b0 [ 83.054870][ T7143] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 83.054908][ T7143] ? lock_acquire+0x1d1/0x380 [ 83.054941][ T7143] ? __might_fault+0xc5/0x140 [ 83.054960][ T7143] ? find_held_lock+0x2b/0x80 [ 83.054981][ T7143] ? __might_fault+0xc5/0x140 [ 83.055002][ T7143] x86_emulate_instruction+0x1047/0x1d50 [ 83.055028][ T7143] kvm_mmu_page_fault+0xbb4/0x1b60 [ 83.055054][ T7143] ? __kvm_io_bus_write+0x271/0x3b0 [ 83.055081][ T7143] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 83.055106][ T7143] ? __pfx_kvm_io_bus_write+0x10/0x10 [ 83.055130][ T7143] ? vmx_vcpu_run+0x1536/0x32d0 [ 83.055159][ T7143] handle_ept_misconfig+0x11e/0x3f0 [ 83.055192][ T7143] vmx_handle_exit+0x198a/0x1d30 [ 83.055215][ T7143] vcpu_run+0x3725/0x61a0 [ 83.055247][ T7143] ? __pfx_vcpu_run+0x10/0x10 [ 83.055273][ T7143] ? complete_emulated_mmio+0x102/0x710 [ 83.055298][ T7143] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1e20 [ 83.055322][ T7143] kvm_arch_vcpu_ioctl_run+0xf8a/0x1e20 [ 83.055350][ T7143] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 83.055373][ T7143] ? tomoyo_path_number_perm+0x188/0x580 [ 83.055393][ T7143] kvm_vcpu_ioctl+0x730/0x1770 [ 83.055411][ T7143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.055428][ T7143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.055450][ T7143] ? do_vfs_ioctl+0x226/0x13e0 [ 83.055465][ T7143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.055477][ T7143] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 83.055496][ T7143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.055516][ T7143] ? __fget_files+0x34/0x3d0 [ 83.055538][ T7143] ? selinux_file_ioctl+0x1e0/0x290 [ 83.055555][ T7143] ? selinux_file_ioctl+0x1e7/0x290 [ 83.055572][ T7143] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.055589][ T7143] __x64_sys_ioctl+0x18e/0x210 [ 83.055603][ T7143] do_syscall_64+0x123/0x790 [ 83.055632][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.055649][ T7143] RIP: 0033:0x7ff427f9f559 [ 83.055667][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.055686][ T7143] RSP: 002b:00007ff428d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.055726][ T7143] RAX: ffffffffffffffda RBX: 00007ff428225fa0 RCX: 00007ff427f9f559 [ 83.055738][ T7143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.055748][ T7143] RBP: 00007ff428d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 83.055758][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.055767][ T7143] R13: 00007ff428226038 R14: 00007ff428225fa0 R15: 00007fff58a9d948 [ 83.055796][ T7143] [ 83.060014][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 83.060353][ T6868] usb 6-1: USB disconnect, device number 10 [ 83.102394][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 83.611832][ T7188] batman_adv: batadv0: Adding interface: dummy0 [ 83.611848][ T7188] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.611875][ T7188] batman_adv: batadv0: Interface activated: dummy0 [ 83.619087][ T7188] batadv0: mtu less than device minimum [ 83.620202][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.621271][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.622317][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.623335][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.624215][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.625011][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.625820][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.696350][ T6868] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 83.782285][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 83.826229][ T6868] usb 9-1: device descriptor read/64, error -71 [ 83.919716][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.356'. [ 84.066261][ T6868] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 84.140483][ T7221] vcan0: tx address claim with broadcast sa [ 84.198930][ T6868] usb 9-1: device descriptor read/64, error -71 [ 84.306492][ T6868] usb usb9-port1: attempt power cycle [ 84.651619][ T6868] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 84.676951][ T6868] usb 9-1: device descriptor read/8, error -71 [ 84.916368][ T6868] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 84.936727][ T6868] usb 9-1: device descriptor read/8, error -71 [ 84.952230][ T7229] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 84.989040][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.362'. [ 85.046347][ T6868] usb usb9-port1: unable to enumerate USB device [ 85.059995][ T7250] syzkaller0: entered promiscuous mode [ 85.060015][ T7250] syzkaller0: entered allmulticast mode [ 85.236144][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 85.236157][ T42] audit: type=1400 audit(1792640482.663:583): avc: denied { create } for pid=7253 comm="syz.5.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.250564][ T41] hid-generic E205:B49B03AC:BC2804.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 85.274330][ T42] audit: type=1400 audit(1792640482.703:584): avc: denied { write } for pid=7258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.283796][ T7259] fido_id[7259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.315951][ T42] audit: type=1400 audit(1792640482.743:585): avc: denied { write } for pid=7262 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.315952][ T7264] syzkaller0: entered promiscuous mode [ 85.315969][ T7264] syzkaller0: entered allmulticast mode [ 85.321392][ T42] audit: type=1400 audit(1792640482.753:586): avc: denied { setopt } for pid=7263 comm="syz.5.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.041714][ T7273] ip6t_hbh: unknown flags 83 [ 86.102665][ T42] audit: type=1400 audit(1792640739.591:587): avc: denied { wake_alarm } for pid=7275 comm="syz.0.371" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.153747][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 86.238759][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 86.238777][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 86.238787][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8cfd instead [ 86.238798][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7e45 instead [ 86.238807][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 86.238817][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 86.238826][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 86.238838][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 86.238899][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 86.238918][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 86.238928][ T7281] jffs2: Further such events for this erase block will not be printed [ 86.239138][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 86.239147][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 86.239157][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8cfd instead [ 86.239167][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7e45 instead [ 86.239176][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 86.239185][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 86.239194][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 86.239205][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 86.239222][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 86.239239][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 86.239247][ T7281] jffs2: Further such events for this erase block will not be printed [ 86.239441][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 86.239450][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 86.239459][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8cfd instead [ 86.239470][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7e45 instead [ 86.239494][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 86.239503][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 86.239512][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8cfd instead [ 86.239522][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7e45 instead [ 86.239546][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 86.239555][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 86.239564][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8cfd instead [ 86.239575][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7e45 instead [ 86.239598][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 86.239607][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 86.239616][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8cfd instead [ 86.239626][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7e45 instead [ 86.239650][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 86.239666][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 86.239676][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8cfd instead [ 86.239687][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7e45 instead [ 86.239712][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 86.239722][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 86.239732][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8cfd instead [ 86.239743][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7e45 instead [ 86.239776][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 86.239786][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 86.239796][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8cfd instead [ 86.239807][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7e45 instead [ 86.239833][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 86.239842][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 86.239853][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8cfd instead [ 86.239864][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7e45 instead [ 86.239889][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 86.239898][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 86.239908][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8cfd instead [ 86.239920][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7e45 instead [ 86.239945][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 86.239954][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 86.239964][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8cfd instead [ 86.239974][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7e45 instead [ 86.240804][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 86.240823][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 86.240841][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8cfd instead [ 86.240856][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7e45 instead [ 86.240886][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 86.240895][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 86.240906][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8cfd instead [ 86.240917][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7e45 instead [ 86.240942][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 86.240951][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 86.240961][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8cfd instead [ 86.240972][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7e45 instead [ 86.240998][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 86.241007][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 86.241017][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8cfd instead [ 86.241028][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7e45 instead [ 86.241066][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 86.241076][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 86.241086][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8cfd instead [ 86.241098][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7e45 instead [ 86.241123][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 86.241133][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 86.241143][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8cfd instead [ 86.241155][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7e45 instead [ 86.241181][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 86.241190][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 86.241199][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8cfd instead [ 86.241209][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7e45 instead [ 86.241233][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 86.241242][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 86.241252][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8cfd instead [ 86.241262][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7e45 instead [ 86.241285][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 86.241294][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 86.241303][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8cfd instead [ 86.241314][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7e45 instead [ 86.241337][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 86.241346][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 86.241356][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8cfd instead [ 86.241366][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7e45 instead [ 86.241390][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 86.241399][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 86.241409][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8cfd instead [ 86.241419][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7e45 instead [ 86.241443][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 86.241466][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 86.241475][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8cfd instead [ 86.241485][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7e45 instead [ 86.241516][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 86.241525][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 86.241534][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8cfd instead [ 86.241544][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7e45 instead [ 86.241568][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 86.241577][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 86.241587][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8cfd instead [ 86.241598][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7e45 instead [ 86.241622][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 86.241632][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 86.241675][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8cfd instead [ 86.241687][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7e45 instead [ 86.241712][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 86.241722][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 86.241732][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8cfd instead [ 86.241743][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7e45 instead [ 86.241850][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 86.241861][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 86.241871][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8cfd instead [ 86.241882][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7e45 instead [ 86.241909][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 86.241918][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 86.241947][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8cfd instead [ 86.241959][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7e45 instead [ 86.241986][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 86.241996][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 86.242006][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8cfd instead [ 86.242018][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7e45 instead [ 86.242054][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 86.242068][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 86.242082][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8cfd instead [ 86.242094][ T7281] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7e45 instead [ 86.242116][ T7281] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 86.242123][ T7281] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 86.250087][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 86.256214][ T5739] Bluetooth: hci0: command 0x0401 tx timeout [ 86.339229][ T42] audit: type=1400 audit(1792640739.831:588): avc: denied { bind } for pid=7282 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.339677][ T42] audit: type=1400 audit(1792640739.831:589): avc: denied { write } for pid=7282 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.665744][ T42] audit: type=1400 audit(1792640740.151:590): avc: denied { write } for pid=7293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.698407][ T42] audit: type=1400 audit(1792640740.191:591): avc: denied { map } for pid=7296 comm="syz.1.377" path="socket:[19459]" dev="sockfs" ino=19459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.698624][ T42] audit: type=1400 audit(1792640740.191:592): avc: denied { read } for pid=7296 comm="syz.1.377" path="socket:[19459]" dev="sockfs" ino=19459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.896320][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 86.959606][ T7309] netlink: 64 bytes leftover after parsing attributes in process `syz.1.379'. [ 86.959631][ T7309] netlink: 64 bytes leftover after parsing attributes in process `syz.1.379'. [ 87.056334][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 87.056916][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.057766][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 87.057790][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.057801][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.057813][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.057825][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.057844][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.079756][ T7311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.079771][ T7311] block device autoloading is deprecated and will be removed. [ 87.190587][ T7311] md: could not open device unknown-block(0,0). [ 87.190639][ T7311] md: md_import_device returned -6 [ 87.235468][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 87.268563][ T24] usb 9-1: usb_control_msg returned -32 [ 87.268604][ T24] usbtmc 9-1:16.0: can't read capabilities [ 87.420580][ T7340] net_ratelimit: 13 callbacks suppressed [ 87.420598][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.747716][ T7372] loop5: detected capacity change from 0 to 7 [ 87.750990][ T7372] loop5: [POWERTEC] [ 87.792046][ T7375] Bluetooth: MGMT ver 1.23 [ 87.935535][ T7384] capability: warning: `syz.1.403' uses 32-bit capabilities (legacy support in use) [ 88.239072][ T7406] overlayfs: failed to resolve './file1/file0': -2 [ 88.671049][ T7426] __nla_validate_parse: 3 callbacks suppressed [ 88.671069][ T7426] netlink: 76 bytes leftover after parsing attributes in process `syz.5.412'. [ 88.772354][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 88.988724][ T7440] ip_tables: iptables: counters copy to user failed while replacing table [ 89.054369][ T7443] ip6t_hbh: Not strict - not implemented [ 89.060772][ T7443] syzkaller0: entered promiscuous mode [ 89.060786][ T7443] syzkaller0: entered allmulticast mode [ 89.296303][ T6868] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 89.457133][ T6868] usb 10-1: Using ep0 maxpacket: 8 [ 89.457591][ T6868] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.458419][ T6868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.458434][ T6868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.458451][ T6868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.459742][ T6868] usb 10-1: config 0 descriptor?? [ 89.494408][ T7448] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 89.494564][ T7448] CIFS: VFS: Malformed UNC in devname [ 89.549811][ T10] usb 9-1: USB disconnect, device number 10 [ 89.669236][ T6868] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.726208][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 89.868431][ T7443] iowarrior 10-1:0.0: Error -90 while submitting URB [ 89.869048][ T7453] input: syz0 as /devices/virtual/input/input8 [ 89.874091][ T10] usb 10-1: USB disconnect, device number 4 [ 89.886907][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.887929][ T24] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.887948][ T24] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 89.887963][ T24] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.887976][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.889494][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 89.910355][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.910373][ T24] usb 6-1: Product: syz [ 89.910381][ T24] usb 6-1: Manufacturer: syz [ 89.910389][ T24] usb 6-1: SerialNumber: syz [ 89.912340][ T24] usb 6-1: config 0 descriptor?? [ 89.921802][ T24] usb 6-1: selecting invalid altsetting 0 [ 89.955852][ T7459] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 89.958595][ T7459] FAULT_INJECTION: forcing a failure. [ 89.958595][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 89.958625][ T7459] CPU: 3 UID: 0 PID: 7459 Comm: syz.4.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.958656][ T7459] Tainted: [L]=SOFTLOCKUP [ 89.958663][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.958674][ T7459] Call Trace: [ 89.958680][ T7459] [ 89.958687][ T7459] dump_stack_lvl+0x100/0x190 [ 89.958757][ T7459] should_fail_ex.cold+0x5/0xa [ 89.958794][ T7459] should_failslab+0xc2/0x120 [ 89.958825][ T7459] __kmalloc_cache_noprof+0x91/0x6d0 [ 89.958847][ T7459] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 89.958880][ T7459] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 89.958896][ T7459] ? __pfx_device_cmp+0x10/0x10 [ 89.958909][ T7459] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 89.958928][ T7459] masq_device_event+0xfd/0x120 [ 89.958941][ T7459] notifier_call_chain+0x99/0x3f0 [ 89.958968][ T7459] call_netdevice_notifiers_info+0xbe/0x110 [ 89.958987][ T7459] __dev_notify_flags+0x2fc/0x4b0 [ 89.959000][ T7459] ? __local_bh_enable_ip+0xa5/0x120 [ 89.959021][ T7459] ? __pfx___dev_notify_flags+0x10/0x10 [ 89.959045][ T7459] ? __pfx___dev_change_flags+0x10/0x10 [ 89.959068][ T7459] ? kernel_text_address+0x8d/0x100 [ 89.959116][ T7459] ? __pfx_validate_linkmsg+0x10/0x10 [ 89.959144][ T7459] netif_change_flags+0x108/0x160 [ 89.959169][ T7459] do_setlink.isra.0+0x1ac4/0x3e60 [ 89.959189][ T7459] ? __lock_acquire+0x5c0/0x1f40 [ 89.959209][ T7459] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 89.959227][ T7459] ? __lock_acquire+0x5c0/0x1f40 [ 89.959241][ T7459] ? lock_acquire+0x1d1/0x380 [ 89.959252][ T7459] ? avc_has_perm_noaudit+0x56/0x470 [ 89.959268][ T7459] ? lock_acquire+0x1d1/0x380 [ 89.959279][ T7459] ? rtnl_newlink+0xac3/0x2620 [ 89.959297][ T7459] ? rcu_is_watching+0x13/0xc0 [ 89.959320][ T7459] ? trace_contention_end+0x126/0x160 [ 89.959334][ T7459] ? __mutex_lock+0x267/0x1c10 [ 89.959363][ T7459] ? rtnl_newlink+0xac3/0x2620 [ 89.959381][ T7459] ? __pfx___mutex_lock+0x10/0x10 [ 89.959392][ T7459] ? rcu_is_watching+0x13/0xc0 [ 89.959408][ T7459] ? cap_capable+0x107/0x430 [ 89.959428][ T7459] ? netlink_ns_capable+0xfa/0x130 [ 89.959443][ T7459] rtnl_newlink+0x13c1/0x2620 [ 89.959471][ T7459] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.959492][ T7459] ? avc_has_perm_noaudit+0x56/0x470 [ 89.959512][ T7459] ? find_held_lock+0x2b/0x80 [ 89.959535][ T7459] ? avc_has_perm_noaudit+0x11e/0x470 [ 89.959554][ T7459] ? avc_has_perm_noaudit+0x11e/0x470 [ 89.959588][ T7459] ? __lock_acquire+0x5c0/0x1f40 [ 89.959617][ T7459] ? lock_acquire+0x1d1/0x380 [ 89.959634][ T7459] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 89.959665][ T7459] ? find_held_lock+0x2b/0x80 [ 89.959687][ T7459] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.959710][ T7459] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.959736][ T7459] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.959753][ T7459] rtnetlink_rcv_msg+0x95e/0xe90 [ 89.959771][ T7459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.959792][ T7459] ? ref_tracker_free+0x37e/0x6c0 [ 89.959818][ T7459] netlink_rcv_skb+0x159/0x420 [ 89.959832][ T7459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.959849][ T7459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.959869][ T7459] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.959885][ T7459] netlink_unicast+0x65f/0x950 [ 89.959904][ T7459] ? __pfx_netlink_unicast+0x10/0x10 [ 89.959933][ T7459] netlink_sendmsg+0x9ac/0x10c0 [ 89.959959][ T7459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.959985][ T7459] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.960011][ T7459] ? ____sys_sendmsg+0xa4d/0xbe0 [ 89.960037][ T7459] ____sys_sendmsg+0xa4d/0xbe0 [ 89.960062][ T7459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.960082][ T7459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.960104][ T7459] ? lock_acquire+0x1d1/0x380 [ 89.960114][ T7459] ? get_pid_task+0x2a/0x250 [ 89.960130][ T7459] ___sys_sendmsg+0x190/0x1e0 [ 89.960142][ T7459] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.960156][ T7459] ? get_pid_task+0x106/0x250 [ 89.960176][ T7459] ? rcu_read_lock_any_held+0x6a/0x90 [ 89.960200][ T7459] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.960221][ T7459] __sys_sendmsg+0x160/0x210 [ 89.960236][ T7459] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.960260][ T7459] do_syscall_64+0x123/0x790 [ 89.960281][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.960293][ T7459] RIP: 0033:0x7ff427f9f559 [ 89.960304][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.960316][ T7459] RSP: 002b:00007ff428d9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.960335][ T7459] RAX: ffffffffffffffda RBX: 00007ff428225fa0 RCX: 00007ff427f9f559 [ 89.960342][ T7459] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 89.960349][ T7459] RBP: 00007ff428d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 89.960356][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.960362][ T7459] R13: 00007ff428226038 R14: 00007ff428225fa0 R15: 00007fff58a9d948 [ 89.960378][ T7459] [ 89.963092][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.964675][ T7459] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.117612][ T24] usb 6-1: USB disconnect, device number 11 [ 90.128966][ T7448] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 90.159858][ T7472] PKCS7: Unsupported SignerInfo version [ 90.186330][ T7448] bond3: option mode: invalid value (8) [ 90.193433][ T7448] bond3 (unregistering): Released all slaves [ 90.246150][ T42] kauditd_printk_skb: 2528 callbacks suppressed [ 90.246163][ T42] audit: type=1326 audit(1792640743.731:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246235][ T42] audit: type=1326 audit(1792640743.741:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246304][ T42] audit: type=1326 audit(1792640743.741:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246386][ T42] audit: type=1326 audit(1792640743.741:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246453][ T42] audit: type=1326 audit(1792640743.741:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246558][ T42] audit: type=1326 audit(1792640743.741:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246632][ T42] audit: type=1326 audit(1792640743.741:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246693][ T42] audit: type=1326 audit(1792640743.741:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246762][ T42] audit: type=1326 audit(1792640743.741:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.246851][ T42] audit: type=1326 audit(1792640743.741:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff427f9f559 code=0x50000 [ 90.443803][ T7483] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.571875][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7486 comm=syz.5.429 [ 90.672215][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 90.695357][ T7493] bond1: entered allmulticast mode [ 90.703690][ T7493] macvlan2: entered promiscuous mode [ 90.703716][ T7493] macvlan2: entered allmulticast mode [ 90.704419][ T7493] bond1: (slave macvlan2): Opening slave failed [ 90.906293][ T5739] Bluetooth: hci3: command tx timeout [ 90.963475][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 91.030399][ T7505] netlink: 72 bytes leftover after parsing attributes in process `syz.1.435'. [ 91.039418][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.435'. [ 91.039602][ T7505] gre0: entered allmulticast mode [ 91.326162][ T5823] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 91.507878][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.507923][ T5823] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 91.509098][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.509119][ T5823] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 91.509165][ T5823] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.511054][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.511073][ T5823] usb 6-1: Product: syz [ 91.511084][ T5823] usb 6-1: Manufacturer: syz [ 91.511095][ T5823] usb 6-1: SerialNumber: syz [ 91.789595][ T5823] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.792323][ T5823] usb 6-1: USB disconnect, device number 12 [ 91.802851][ T5733] udevd[5733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.511994][ T7539] vhci_hcd: not connected 4 [ 92.618928][ T7533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7533 comm=syz.5.446 [ 92.619245][ T7532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7532 comm=syz.5.446 [ 92.621333][ T7547] ip_tables: iptables: counters copy to user failed while replacing table [ 92.704815][ T7553] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 92.705661][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 92.707700][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.708733][ T7553] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.296808][ T7642] overlayfs: failed to clone upperpath [ 93.411834][ T7652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 93.452310][ T7652] netlink: zone id is out of range [ 93.468132][ T7657] netlink: 64 bytes leftover after parsing attributes in process `syz.4.481'. [ 93.470080][ T7655] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 93.511436][ T7661] ublk_ctrl_add_dev: invalid recovery flags 200 [ 93.640960][ T7607] IPVS: starting estimator thread 0... [ 93.747929][ T7678] IPVS: using max 43 ests per chain, 103200 per kthread [ 93.775138][ T7696] netlink: 'syz.4.492': attribute type 4 has an invalid length. [ 93.919620][ T7710] lo: entered promiscuous mode [ 94.270244][ T7727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.275264][ T7727] md: md4 stopped. [ 94.505591][ T7729] JFS: discard option not supported on device [ 94.507181][ T7729] Mount JFS Failure: -5 [ 94.507190][ T7729] jfs_mount failed w/return code = -5 [ 95.249527][ T7749] binder: Bad value for 'max' [ 95.257086][ T42] kauditd_printk_skb: 25875 callbacks suppressed [ 95.257103][ T42] audit: type=1400 audit(1792640748.751:29006): avc: denied { read append } for pid=7750 comm="syz.4.514" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.257384][ T42] audit: type=1400 audit(1792640748.751:29007): avc: denied { open } for pid=7750 comm="syz.4.514" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.259159][ T42] audit: type=1400 audit(1792640748.751:29008): avc: denied { map } for pid=7750 comm="syz.4.514" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.259363][ T42] audit: type=1400 audit(1792640748.751:29009): avc: denied { write execute } for pid=7750 comm="syz.4.514" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.274908][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.514'. [ 95.314482][ T42] audit: type=1400 audit(1792640748.801:29010): avc: denied { bind } for pid=7752 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.338823][ T7755] syzkaller0: entered promiscuous mode [ 95.338837][ T7755] syzkaller0: entered allmulticast mode [ 95.371046][ T42] audit: type=1400 audit(1792640748.861:29011): avc: denied { mount } for pid=7756 comm="syz.4.516" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.424841][ T42] audit: type=1400 audit(1792640748.911:29012): avc: denied { unmount } for pid=6690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.436699][ T7761] tipc: Enabling of bearer rejected, failed to enable media [ 95.443881][ T42] audit: type=1400 audit(1792640748.931:29013): avc: denied { nlmsg_write } for pid=7765 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 95.461746][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 95.493306][ T7771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.495810][ T7771] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 95.683981][ T42] audit: type=1400 audit(1792640749.171:29014): avc: denied { read } for pid=7790 comm="syz.5.525" laddr=172.20.20.28 lport=59416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.492872][ T7774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.719735][ T7833] gretap1: entered allmulticast mode [ 98.721786][ T7833] team0: Port device gretap1 added [ 98.723892][ T7816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.724311][ T7833] bridge0: port 3(team0) entered blocking state [ 98.724356][ T7833] bridge0: port 3(team0) entered disabled state [ 98.724501][ T7833] team0: entered allmulticast mode [ 98.724510][ T7833] team_slave_0: entered allmulticast mode [ 98.724527][ T7833] team_slave_1: entered allmulticast mode [ 98.735535][ T7833] team0: entered promiscuous mode [ 98.735549][ T7833] team_slave_0: entered promiscuous mode [ 98.735640][ T7833] team_slave_1: entered promiscuous mode [ 98.735713][ T7833] gretap1: entered promiscuous mode [ 98.740852][ T7833] bridge0: port 3(team0) entered blocking state [ 98.740952][ T7833] bridge0: port 3(team0) entered forwarding state [ 98.785292][ T7839] bond2: Unable to set up delay as MII monitoring is disabled [ 98.789327][ T7839] bond2 (unregistering): Released all slaves [ 99.491208][ T42] audit: type=1400 audit(1792640752.981:29015): avc: denied { read } for pid=7858 comm="syz.5.545" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.565852][ T7866] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 99.565888][ T7866] netlink: 'syz.4.550': attribute type 3 has an invalid length. [ 99.565896][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.550'. [ 99.6110 ** replaying previous printk message ** [ 99.611052][ T7869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.616690][ T7869] [ 99.622888][ T7869] ====================================================== [ 99.625670][ T7869] WARNING: possible circular locking dependency detected [ 99.628480][ T7869] syzkaller #0 Tainted: G L [ 99.630928][ T7869] ------------------------------------------------------ [ 99.633435][ T7869] syz.4.551/7869 is trying to acquire lock: [ 99.635593][ T7869] ffff88805c762358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: array_state_store+0x174/0xcf0 [ 99.639234][ T7869] [ 99.639234][ T7869] but task is already holding lock: [ 99.641931][ T7869] ffff88802d1b6c38 (kn->active#78){++++}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 99.645394][ T7869] [ 99.645394][ T7869] which lock already depends on the new lock. [ 99.645394][ T7869] [ 99.649136][ T7869] [ 99.649136][ T7869] the existing dependency chain (in reverse order) is: [ 99.652357][ T7869] [ 99.652357][ T7869] -> #4 (kn->active#78){++++}-{0:0}: [ 99.655063][ T7869] lock_acquire+0x1d1/0x380 [ 99.656920][ T7869] kernfs_drain+0x4eb/0x600 [ 99.658778][ T7869] __kernfs_remove+0x34c/0xbc0 [ 99.660698][ T7869] kernfs_remove_by_name_ns+0x7c/0x120 [ 99.662893][ T7869] remove_files+0x96/0x1c0 [ 99.664698][ T7869] sysfs_remove_group+0x8b/0x1b0 [ 99.666722][ T7869] sysfs_remove_groups+0x60/0xb0 [ 99.668720][ T7869] __kobject_del+0x89/0x220 [ 99.670597][ T7869] kobject_put+0x348/0x640 [ 99.672403][ T7869] process_one_work+0xac7/0x1b10 [ 99.674406][ T7869] worker_thread+0x5ef/0xe50 [ 99.676330][ T7869] kthread+0x373/0x450 [ 99.678091][ T7869] ret_from_fork+0x730/0xd60 [ 99.679975][ T7869] ret_from_fork_asm+0x1a/0x30 [ 99.681933][ T7869] [ 99.681933][ T7869] -> #3 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 99.685284][ T7869] lock_acquire+0x1d1/0x380 [ 99.687157][ T7869] process_one_work+0xa32/0x1b10 [ 99.689160][ T7869] worker_thread+0x5ef/0xe50 [ 99.691059][ T7869] kthread+0x373/0x450 [ 99.692749][ T7869] ret_from_fork+0x730/0xd60 [ 99.694626][ T7869] ret_from_fork_asm+0x1a/0x30 [ 99.696564][ T7869] [ 99.696564][ T7869] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 99.699546][ T7869] lock_acquire+0x1d1/0x380 [ 99.701381][ T7869] touch_wq_lockdep_map+0xad/0x1c0 [ 99.703440][ T7869] __flush_workqueue+0x131/0x1200 [ 99.705449][ T7869] md_alloc+0x30/0x10a0 [ 99.707208][ T7869] md_probe+0x73/0xf0 [ 99.708884][ T7869] blk_probe_dev+0x149/0x1e0 [ 99.710782][ T7869] blk_request_module+0x16/0xc0 [ 99.712726][ T7869] blkdev_get_no_open+0x9b/0xf0 [ 99.714690][ T7869] blkdev_open+0x141/0x4f0 [ 99.716516][ T7869] do_dentry_open+0x674/0x1470 [ 99.718389][ T7869] vfs_open_consume+0xcc/0x460 [ 99.720110][ T7869] path_openat+0x1547/0x23f0 [ 99.721799][ T7869] do_file_open+0x20e/0x430 [ 99.723644][ T7869] do_sys_openat2+0x163/0x1d0 [ 99.725545][ T7869] __x64_sys_openat+0x12d/0x210 [ 99.727518][ T7869] do_syscall_64+0x123/0x790 [ 99.729399][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.731472][ T7869] [ 99.731472][ T7869] -> #1 (major_names_lock){+.+.}-{4:4}: [ 99.734180][ T7869] lock_acquire+0x1d1/0x380 [ 99.736017][ T7869] __mutex_lock+0x19f/0x1c10 [ 99.737937][ T7869] blk_probe_dev+0x28/0x1e0 [ 99.739768][ T7869] blk_request_module+0x16/0xc0 [ 99.741765][ T7869] blkdev_get_no_open+0x9b/0xf0 [ 99.743758][ T7869] bdev_file_open_by_dev+0x70/0x210 [ 99.745846][ T7869] md_import_device+0x120/0x360 [ 99.747865][ T7869] md_add_new_disk+0x4b6/0x1820 [ 99.749830][ T7869] md_ioctl+0x2be7/0x36c0 [ 99.751633][ T7869] blkdev_ioctl+0x5ad/0x6f0 [ 99.753475][ T7869] __x64_sys_ioctl+0x18e/0x210 [ 99.755404][ T7869] do_syscall_64+0x123/0x790 [ 99.757277][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.759615][ T7869] [ 99.759615][ T7869] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 99.762449][ T7869] check_prev_add+0xeb/0xe60 [ 99.764303][ T7869] __lock_acquire+0x1528/0x1f40 [ 99.766255][ T7869] lock_acquire+0x1d1/0x380 [ 99.768094][ T7869] __mutex_lock+0x19f/0x1c10 [ 99.769958][ T7869] array_state_store+0x174/0xcf0 [ 99.771941][ T7869] md_attr_store+0x1c5/0x330 [ 99.773807][ T7869] sysfs_kf_write+0xf2/0x150 [ 99.775687][ T7869] kernfs_fop_write_iter+0x3e0/0x5f0 [ 99.777841][ T7869] vfs_write+0x6af/0x1050 [ 99.779679][ T7869] ksys_write+0x12a/0x250 [ 99.781485][ T7869] do_syscall_64+0x123/0x790 [ 99.783372][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.785703][ T7869] [ 99.785703][ T7869] other info that might help us debug this: [ 99.785703][ T7869] [ 99.789381][ T7869] Chain exists of: [ 99.789381][ T7869] &mddev->reconfig_mutex --> (work_completion)(&mddev->del_work) --> kn->active#78 [ 99.789381][ T7869] [ 99.794779][ T7869] Possible unsafe locking scenario: [ 99.794779][ T7869] [ 99.797470][ T7869] CPU0 CPU1 [ 99.799423][ T7869] ---- ---- [ 99.801369][ T7869] rlock(kn->active#78); [ 99.802997][ T7869] lock((work_completion)(&mddev->del_work)); [ 99.806130][ T7869] lock(kn->active#78); [ 99.808595][ T7869] lock(&mddev->reconfig_mutex); [ 99.810449][ T7869] [ 99.810449][ T7869] *** DEADLOCK *** [ 99.810449][ T7869] [ 99.813362][ T7869] locks held by syz.4.551/7869: 5, last CPU#0: [ 99.815643][ T7869] #0: ffff888026d47b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 99.818924][ T7869] #1: ffff8880376aa460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 99.822192][ T7869] #2: ffff8880369cb908 (&of->prealloc_mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x24d/0x5f0 [ 99.825981][ T7869] #3: ffff8880369cb880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 99.829463][ T7869] #4: ffff88802d1b6c38 (kn->active#78){++++}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 99.833061][ T7869] [ 99.833061][ T7869] stack backtrace: [ 99.835212][ T7869] CPU: 0 UID: 0 PID: 7869 Comm: syz.4.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.839062][ T7869] Tainted: [L]=SOFTLOCKUP [ 99.840644][ T7869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.844304][ T7869] Call Trace: [ 99.845537][ T7869] [ 99.846659][ T7869] dump_stack_lvl+0x100/0x190 [ 99.848413][ T7869] print_circular_bug.cold+0x178/0x1be [ 99.850419][ T7869] check_noncircular+0x146/0x160 [ 99.852248][ T7869] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 99.854410][ T7869] check_prev_add+0xeb/0xe60 [ 99.856114][ T7869] __lock_acquire+0x1528/0x1f40 [ 99.857924][ T7869] lock_acquire+0x1d1/0x380 [ 99.859605][ T7869] ? array_state_store+0x174/0xcf0 [ 99.861518][ T7869] ? __pfx___might_resched+0x10/0x10 [ 99.863471][ T7869] __mutex_lock+0x19f/0x1c10 [ 99.865164][ T7869] ? array_state_store+0x174/0xcf0 [ 99.867051][ T7869] ? array_state_store+0x174/0xcf0 [ 99.868940][ T7869] ? check_prev_add+0xfe/0xe60 [ 99.870697][ T7869] ? avc_has_perm_noaudit+0x145/0x470 [ 99.872650][ T7869] ? __pfx___mutex_lock+0x10/0x10 [ 99.874506][ T7869] ? lock_acquire+0x1d1/0x380 [ 99.876235][ T7869] ? do_raw_spin_lock+0x128/0x260 [ 99.878102][ T7869] ? array_state_store+0x174/0xcf0 [ 99.879968][ T7869] array_state_store+0x174/0xcf0 [ 99.881801][ T7869] md_attr_store+0x1c5/0x330 [ 99.883514][ T7869] ? __pfx_md_attr_store+0x10/0x10 [ 99.885387][ T7869] sysfs_kf_write+0xf2/0x150 [ 99.887123][ T7869] kernfs_fop_write_iter+0x3e0/0x5f0 [ 99.889093][ T7869] ? __pfx_sysfs_kf_write+0x10/0x10 [ 99.891016][ T7869] vfs_write+0x6af/0x1050 [ 99.892622][ T7869] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 99.894768][ T7869] ? __pfx_vfs_write+0x10/0x10 [ 99.896536][ T7869] ? find_held_lock+0x2b/0x80 [ 99.898294][ T7869] ksys_write+0x12a/0x250 [ 99.899884][ T7869] ? __pfx_ksys_write+0x10/0x10 [ 99.901685][ T7869] do_syscall_64+0x123/0x790 [ 99.903402][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.905562][ T7869] RIP: 0033:0x7ff427f9f559 [ 99.907218][ T7869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.914156][ T7869] RSP: 002b:00007ff428d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.917201][ T7869] RAX: ffffffffffffffda RBX: 00007ff428225fa0 RCX: 00007ff427f9f559 [ 99.920128][ T7869] RDX: 0000000000000006 RSI: 0000200000000440 RDI: 0000000000000006 [ 99.923031][ T7869] RBP: 00007ff428036b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.925907][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.928801][ T7869] R13: 00007ff428226038 R14: 00007ff428225fa0 R15: 00007fff58a9d948 [ 99.931687][ T7869] [ 108.976847][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c