last executing test programs: 38.837344825s ago: executing program 2 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="2e80", 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES32=r2], 0xf0}}, 0x0) unshare(0x40100) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf) 38.788240444s ago: executing program 2 (id=215): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_clone(0x20800100, &(0x7f0000000040)="705dd5646d4b7705ad35c23b", 0xc, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="c10b0eea32a1889cfc15eef613eec7b109919edc0685fea0687e6097bb7bf1fb3e08575e65751c7a15207dadb747ec5cf9d25a46486d475497e30a8fab059a4fae50420254afd4b56d85bc634f37e5768c42d726187de24cbb620461923f953c7f49a23fa9e18ac8d8e5becb5e6e") r2 = epoll_create(0x800) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/1:0:0:0\x00', 0x44000, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r2, r3, 0x80000001}) pwritev2(r3, &(0x7f0000001500)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="32558d2e4f5a966de55c7b0d8038a7555cb5aeffdb5dae9195cda3beb5ebb898aaf920bf143d21e4e2dcbb75c7f34dd920e1a0a39908a289cc4e02514e4202a70a9c1c15fa155e7cf3c8fd712d76612fb03c95031ae8455c36ff1caeaf47f606c4373fc2ab0e2140f2fcca1d22a77cf243b44adf8d9f39c2b20945fe8b7028211603acde5807840a6f7dd66fcb101fbe145e1d9e9235fcca21a8d7e7de21449756c061cb073a6c3a616b09325d54481ee9d2f4a2d4e4440fd74967dc05cd64ff6211947728be9d07bda9ebfdd2246b378dfc2db02b9f", 0xd6}, {&(0x7f0000000340)="1eafa22dabd7dfc1117c18629fc8e853f7b4021a758d5cf7ea6ae457e3ad33a6472c9ae12ddeeb97f0dd6dde254a331057e05a919ff158a2a77fa37dc007", 0x3e}, {&(0x7f0000000380)="ad8831c606e52fe6829dc3043f014499cd0ca6f739c44d6ce52bce79f1b02679fdf11deec9fccf660bb3f9eae46371980d55eba602fca621976cc5cc75fd2b724e73e634ce4f031021186208", 0x4c}, {&(0x7f0000000400)="806aebbd0ebfc9b66d0dedf3f4e2b8a104f45dc4c52d229b2006b55e6983858a0df6e16c18173266c47d0d41fffe06b12669efccaaf4447c9e70b41f593b27b32e1934bc438f900e5c6d978d437bdafc6d7af465fedce51bffc0ebb6c3acf61869e844e38bcc0568e1712b33a4b09946c50049634740e64cad79db67738c05691079f5eb9bf22c77a41b0cc468391797a33ab657c94942ca7ca7ce338fc924c0e91e52b35f0f2aa6faf53f001dbb86b25afa", 0xb2}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="91dc8610c2c01f2404028f8919ec8824b5eca2e6044f534e0e783530bcb35a5d50", 0x21}], 0x7, 0x22be, 0x60, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001680)={r2, &(0x7f0000001580)='&,{\x00', 0x4000, &(0x7f00000015c0)={@align=0xc, {0x1, 0x3, 0xe2}}, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x8}) listen(r4, 0x8001) write$selinux_load(r4, &(0x7f00000016c0)={0xf97cff8c, 0x8, 'SE Linux', "3cb63428343b6d10b690838cdbb23ca7fe97ddb8356d2da306396e2da671bda6183b36bb0a6d87c4d89812694b0cc2c861b69cfa036bcfb5a27ef5dbfc0e396fcdb904008fd304ebfa8fdcd0d598dd60f160be1a79cd55d11ca777a0915b4d1093c99c655d24a784972a1914fe9ee33f8a5181a7dc267a0e3347b5b79484c506b938bd5760cd11314301d0cd37833224a49e7547986a3eef450e4e56913fe65fb4cbbfd396306ad50a7762256810229e6a539a21e2e710a9d61ae47faf131bb8b82c1981ed29abc55f23dbdc62a60cce4e2f3fd892"}, 0xe5) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x80, 0xd, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x80}}, 0x89c1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001900)={0x2}, &(0x7f0000001940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001980)={r5, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xffffffff}}, 0x4, 0xf801, 0x2, 0x2, 0x80, 0x4, 0x2}, 0x9c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={r4, 0x58, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r4, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001b80)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001c40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001d80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000041) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001dc0)={r5, 0xaa, "9fb4483157be1537395a4858642b3d2ec3e26f1c2f906e182c113462aa2976636837a421396844fa3d51c916031c2541893da04064f5bff01ddb85834963d362e56f302b634f4b490767b022b1a078e1c668a19609f161f5e8eb90dad2acfa0a36419e9147094455f6d159a28d2317e5b2979051e6615bdeb6e44ab6ed1904e3cbe4ea13f5991c1e8260867986356d4a748f8fc8031c8d20fddccd2dbbb229e932727b5bacbe4c99d2b1"}, &(0x7f0000001e80)=0xb2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001ec0)={r11, 0x3}, &(0x7f0000001f00)=0xc) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000001f40)=0xc453) ptrace$pokeuser(0x6, r0, 0x7, 0x2) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000001f80)) r12 = accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000001fc0)) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x3ff, '\x00', 0x0, r4, 0x1, 0x1, 0x3}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002240)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0x7, '\x00', 0x0, r4, 0x2, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x20, 0xc, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002080)='GPL\x00', 0xe03, 0x65, &(0x7f00000020c0)=""/101, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, r4, 0x8, &(0x7f0000002140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002180)={0x2, 0x1, 0x8001, 0x5}, 0x10, 0x0, r4, 0x8, &(0x7f00000022c0)=[r4, r4, r4, r4, r13, r14], &(0x7f0000002300)=[{0x1, 0x1, 0x10, 0xa}, {0x2, 0x3, 0x3, 0x1}, {0x5, 0x5, 0x7, 0x7}, {0x1, 0x5, 0x1, 0xc}, {0x4, 0x4, 0x4, 0xc}, {0x5, 0x2, 0x6, 0x7}, {0x5, 0x4, 0x4, 0x5}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x10001}, 0x94) ioctl$BSG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000002440)=0xd) 38.728479107s ago: executing program 2 (id=216): r0 = add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000dc0)={r0}, &(0x7f0000000a00)=ANY=[@ANYBLOB="656e633d706b63e53120686173683d736861332d32353600000000200000000000000000000000000000d09ceb001a42c5b42600f8ffff7fffffff00"/84], 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000180)="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", 0x1d8, r1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) syz_clone(0x1000200, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000009c0)='\x00', 0x89901) move_mount(r4, &(0x7f0000000c40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c80)='.\x00', 0x0) sendmsg$kcm(r4, &(0x7f0000002080)={&(0x7f0000000cc0)=@caif=@rfm={0x25, 0xa4a, "d8a516f2a1a528a889776e0a7de62a1b"}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000d80)="0000003da7c3ce51838226359dfaba03b121420000", 0x15}, {&(0x7f00000020c0)="5276664c2009744ca1aed937fa2064eb1da31de6c83959fb2bf92fb544f1d26aa19274cb08000000000000008e7c27f6530e5508fb4a9c9f55c01efce49803c0e4ec38cfe6921742486a1ad84229e38846eb196db697a6fd34a020abec3dacfa8f89ad70d9d0611e957810485a", 0x6d}, {&(0x7f0000000e00)="4b20215a83c40f157d2860bdf4a26707fe37d13aa5f5046d670c0b3cfa075f35ce95f3dc4b1cc8c0be8ee607fc0f4793eae19d73f409043e6fd1aca097c5673aaf82e9a236ce26a291e94041c8dd8847ccc1ea946d7d235e443df1cc80e135c01e031e56580e2a55ecae4dc919451aba5da6095e2a93d936e1", 0x79}, {&(0x7f0000000e80)="f524b79368316d47051635c673efb402d3", 0x11}, {&(0x7f0000000ec0)="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", 0x1000}], 0x5, &(0x7f0000001f40)=[{0xb0, 0x117, 0x9, "a84849388daedf3feddb4fd13a01f65156554dc77694bdca677c2ccc8a0e1912423b7676bc7216a1bd2e2cd902714456d1add65c57c645d98c011eeebb5afc5e9ab5e0fa32a7c41320b7fc45aa22ea2103640a15d253e64a2f4c5788142915e6af0bf4b3a854f8e3f5df1d22abd89c6a277edd99881f9a3c051f4365b202d6539f5cabe2ab8aa0e4c22f9e075b95688f68c64b659eca0ccf738322ffbc"}, {0x88, 0x0, 0x80, "73d75b0e6f587eabf7a2b5fea8938714716540bdd27e99b5d269bac1625c8a4fd98a33676560585a2e9fc08f109920ef4ced234dd641e9e88561a5b951290a5ff3db8a3bf7be816a9a0a1c7ebe827f2f44e7820271b7eef350f546b177527ba1ef46965edf2d62c890f5eb2d84c8f31c02783bf95b"}], 0x138}, 0x0) r5 = add_key$keyring(&(0x7f0000000d40), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000b80)='big_key\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)="dc", 0x1, r5) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000002140)={0x0, [[0xffffffff, 0xffffffff, 0x6, 0xfeffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0x3, 0xfffffeff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000023c0)={0x0, 0x0}) keyctl$get_persistent(0x16, r3, r5) 38.67859007s ago: executing program 2 (id=217): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x40801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x1, 0x1, 0x3f, 0xffff, 0x9, 0x2, 0x20000001, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000280)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80000044, 0xb4, 0x2, 0xfffa, 0x2, "b079b5905683e1439e2e22f3de9a787cddb21a539f12137e73308fdaef5ec758fb04dc6e97839f3084c1a1305d063168ca4e1545b84b7c3eb44994eb051487c79cac5359a4b6ac9c64143394038d7b8e45aef5c661d711214965567afaca2f3877516a08a292faf0f7a564d206dc47abf3a3a25300"}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20040, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000cb2000/0x1000)=nil, r8, 0x1000006, 0x305711d4b75a25b2, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x42200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r11, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000400)={0xbe, 0x0, 0x1}) 38.677978977s ago: executing program 2 (id=218): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2797, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='270', 0x3) unlink(&(0x7f0000000000)='./proc\x00') r2 = syz_clone(0x2c000200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xfffffffffffffff8) syz_open_dev$loop(0x0, 0x6, 0x14f882) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, 0x0, 0x0, 0x8000, &(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10) unshare(0x40000000) 38.416231429s ago: executing program 2 (id=220): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7, 0x21410, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) sendmsg$inet6(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="6883c2a08d2b5d8e4d3171d77102ff6a093f2b604794670a92a32491db5d622b60dcba6ed04b4317854cb704cc14987438d5ddb51de2aa8c1ec79ff1036055bf1aec6d75260ceda3d42049b30393209fca66a40905f1aa54ca1f3efdfd29e8497b94a1c2c451cd1d08c591bc0a3f56e7d0fa923a", 0x74}, {&(0x7f0000000880)="118e13c17f22f6fa75d7bb6060b7ce5315db0b1d60555da0ed8712523505700372f051ecb207638d466f", 0x2a}, {&(0x7f00000008c0)="1ca234a3cac6713ce5c6f4b6f40ded19dd430b375de1475d904fb0fd88ef6dfef7b97e3af5f603309e666c7a31006cf458427e2dc82220bcdfc01ac62983cce949f03e213419da6f3af7685e7a5e83602b9871ce49dbb2c8b0cd691d8b3388e8f31eab970b92e8a7c7e68bfc04c669572130573e816f0fb7665622622c26216cb6335f2edfcd2d48f988007b2b91d3ccf2a428847b4fc5dbd06383d068e3925d067bed66a07703e466dbb952192f4f654799dcd570571a8ed096b6264cb646e21a335c1a0a1f7bf51ffc8991a2314c6a2b58eb2f1c2430bfcee39bc43d68ed9ce23dd50939c73edc62b69e9eb6", 0xed}], 0x3}, 0x40010) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f00000000c0)=""/53}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0100000004000000080000000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x2, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x16) 23.345071057s ago: executing program 32 (id=220): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7, 0x21410, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) sendmsg$inet6(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="6883c2a08d2b5d8e4d3171d77102ff6a093f2b604794670a92a32491db5d622b60dcba6ed04b4317854cb704cc14987438d5ddb51de2aa8c1ec79ff1036055bf1aec6d75260ceda3d42049b30393209fca66a40905f1aa54ca1f3efdfd29e8497b94a1c2c451cd1d08c591bc0a3f56e7d0fa923a", 0x74}, {&(0x7f0000000880)="118e13c17f22f6fa75d7bb6060b7ce5315db0b1d60555da0ed8712523505700372f051ecb207638d466f", 0x2a}, {&(0x7f00000008c0)="1ca234a3cac6713ce5c6f4b6f40ded19dd430b375de1475d904fb0fd88ef6dfef7b97e3af5f603309e666c7a31006cf458427e2dc82220bcdfc01ac62983cce949f03e213419da6f3af7685e7a5e83602b9871ce49dbb2c8b0cd691d8b3388e8f31eab970b92e8a7c7e68bfc04c669572130573e816f0fb7665622622c26216cb6335f2edfcd2d48f988007b2b91d3ccf2a428847b4fc5dbd06383d068e3925d067bed66a07703e466dbb952192f4f654799dcd570571a8ed096b6264cb646e21a335c1a0a1f7bf51ffc8991a2314c6a2b58eb2f1c2430bfcee39bc43d68ed9ce23dd50939c73edc62b69e9eb6", 0xed}], 0x3}, 0x40010) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f00000000c0)=""/53}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0100000004000000080000000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x2, 0x8, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x16) 3.718553296s ago: executing program 1 (id=622): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="4000800408000100ac"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 2.920494747s ago: executing program 1 (id=628): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x3, r0}) (async) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0xc, 0xb, 0x3, 0xfffffffffffffffc, 0xfffffffffffffff8}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x2e, &(0x7f0000000100)=""/46, 0x40f00, 0x4, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r6, r9, r10, r11], &(0x7f0000000440)=[{0x4, 0x5, 0x5, 0xc}, {0x5, 0x4, 0x7, 0xb}, {0x2, 0x4, 0x10, 0xb}, {0x3, 0x5, 0x8, 0x1}, {0x3, 0x2, 0x8, 0x13}, {0x5, 0x4, 0x0, 0x3}, {0x1, 0x3, 0x9, 0x4}, {0x4, 0x4, 0xd, 0x7}], 0x10, 0xfff}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r13 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, 0x0, 0x401, 0x7, r13) (async) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.779451455s ago: executing program 3 (id=634): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x10000, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@empty, @multicast1=0xe0010101, 0x0, "000100"}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e001010108000300010000000500220001000000"], 0x68}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)='acl') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r2, &(0x7f0000000700)="ffffffffffff00aabbccddee080045000028000100004011f8cbd0000001e0010101100010000014000061626364000000000000", 0x30) 2.580565255s ago: executing program 3 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000020, 0x0, 0x80000001}]}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000080)={0x1, [0x8000000000000000]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x10}]}, &(0x7f00000007c0)='syzkaller\x00', 0xb}, 0x94) 2.469603599s ago: executing program 3 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x60042, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x5) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2041) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0xd1, 0x0, 0x3, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x80, 0x7800, 0xffffff8d, 0xe64}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x94}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20044841) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x60042, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x5) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="01", 0x1}], 0x1}, 0x240448c1) (async) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) (async) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2041) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0xd1, 0x0, 0x3, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x80, 0x7800, 0xffffff8d, 0xe64}}) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x94}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20044841) (async) 2.469115199s ago: executing program 3 (id=639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4c00000011002914000e000200001e0002000400200000", 0x17) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) mknodat(0xffffffffffffff9c, &(0x7f0000002900)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000002940)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000002980)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f00000029c0)='./file0\x00') mknod$loop(&(0x7f0000002a00)='./file0\x00', 0x2000, 0x0) 2.408321709s ago: executing program 3 (id=640): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000b00)={0x13}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r3 = creat(&(0x7f0000000340)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9) write$tcp_mem(r3, &(0x7f0000000500)={0xffffffffffff82bc, 0x20, 0x30, 0x20, 0xfffffffff7fffffb}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000580)={0x10004, 0x1, 0xe000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000dc0)='100', 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000e00), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000e40)={0x1, 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xcc}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000000)="00409decbc76b6de7536f7653afdd1b63eb3e3d60402e01ec22b5ea43c90161612e365540d20d85dc2ebb4ff80bd4fa8e79cb60564c9b9ff290a2095ab2648b1a0783b65be8973c547039ef016ab0d91e2d7ce9e7899200d27e1bf3360380c53aeecf8574aa7cb8299da9adaf27eb5209ad90ab2222d77be9b78380e8c5615b9e6271bc54501258a3599061200b9997ae62f6e401c731dd86c787007789700788100000022289754746cdaad08f9d4e2", 0xb0}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a'], 0xc) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f00000004c0)='./file0\x00', 0x1d3) socket$nl_generic(0x10, 0x3, 0x10) 2.407719468s ago: executing program 1 (id=641): ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x66e) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x80) (async) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x80) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x6, 0xe, 0x2, 0xc8a}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x6000, 0xdddd3000, 0x7, 0x1, 0x9}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8402, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r1, 0xc138fd0f, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x410, 0x0, 0x0, @by_dev, {0x2a5, 0x20, 0xae, 0x20, 0x38, 0x20, 0xab}}) (async) ioctl$DM_DEV_SET_GEOMETRY(r1, 0xc138fd0f, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x410, 0x0, 0x0, @by_dev, {0x2a5, 0x20, 0xae, 0x20, 0x38, 0x20, 0xab}}) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000002c0)={0xffffffffffffffff, 0x7}) ioctl$DM_DEV_ARM_POLL(r1, 0xc138fd10, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) (async) ioctl$DM_DEV_ARM_POLL(r1, 0xc138fd10, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000440)=0x7f) r2 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x3, 0x40) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x4a, 0x4, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, r3, 0x906d}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x4a, 0x4, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, r3, 0x906d}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000640)={0x3d, "0ea853f38043f0aa78fafb4a7f193ed4b5df0f66f43dde88148d45c6c91cdbce", 0x2, 0x100, 0x1, 0x6, 0x8, 0x2, 0x5, 0x81}) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000640)={0x3d, "0ea853f38043f0aa78fafb4a7f193ed4b5df0f66f43dde88148d45c6c91cdbce", 0x2, 0x100, 0x1, 0x6, 0x8, 0x2, 0x5, 0x81}) ioctl$DM_TABLE_STATUS(r1, 0xc138fd0c, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x188, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, "888a1cb36f0332a8d762c1bf1468c48780b71b9dcc4672fd67ab29650059bf5e036e61412a026eafe49414d177ee76298fbb03e74b242527d0bc54d562ddd80bf4e7cfbef9c4d31f197936f3557199"}) fsetxattr$security_selinux(r1, &(0x7f0000000880), &(0x7f00000008c0)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x10000, 0x0) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x10000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000940)={0x401, 0x0, 0x5, 0x7, 0x2}, &(0x7f0000000980)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000009c0)={r5, 0x0, 0x4}, 0x8) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000a00)={0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/crypto\x00', 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x2000004, 0x10030, r6, 0x20000000) (async) r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x2000004, 0x10030, r6, 0x20000000) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000a80)={0x8, 0x5, 0x6, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = mmap$IORING_OFF_PBUF_RING(0x0, 0x5442, 0x80000e, 0x13, r6, 0x84cc3281) mmap$IORING_OFF_SQES(0x0, 0x6, 0x800002, 0x11, r4, 0x10000000) (async) r10 = mmap$IORING_OFF_SQES(0x0, 0x6, 0x800002, 0x11, r4, 0x10000000) syz_io_uring_submit(r7, r9, r10, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff}}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 2.32926619s ago: executing program 3 (id=642): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003000000403512148040000102030109026900030105a009080b000101072006090400000001012000092401004004090007090401000001022000090401010101022000090501090002030b0408250100304004000904020000010200090402010101022000090582090800400603082501820380090000f50475ae67b29e65cd33c491f6d59df5acb6c8ce5d4446f42bfc364cc778623c7f49cdaf70e7d62009c52213628b728c58f5e6cd96138fd807130e6d53e30cefda801287af6b3a218dff29105d7c2bbfcfd32c8b62f930272e6488721f30fe608f08ef44b6b9a4878c00"/240], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000200)={"d1ed39d8de344002b9e581a3a3bb0d5d5f307e5600", r1, 0xffffffffffffffff}) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000580)={"4946b7b00cda74b63b15a2e8920efee4144fdc3fe222a503799c348bc3360fda", r2}) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002a40)=[@textreal={0x8, &(0x7f0000002a80)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0xff76, &(0x7f0000002ac0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) sendmsg(r3, &(0x7f0000002b00)={&(0x7f0000002b40)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f0000002bc0)=[{&(0x7f0000002c00)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='smaps\x00') read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000540)={0x1, 0x4}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x227d, 0x709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa7, 0x70, 0x23, "", [{{0x9, 0x4, 0x0, 0x59, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x6d1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xef, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x2, 0x5, 0x3, 0x8, 0x3}, 0x2c, &(0x7f00000009c0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x9, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x16, 0x5, 0x8, 0xf00, 0xffe9, [0xff0030, 0xff3f0f, 0xff000f, 0xbec0, 0x0]}]}, 0x4, [{0xfc, &(0x7f0000000680)=@string={0xfc, 0x3, "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"}}, {0x83, &(0x7f0000000780)=@string={0x83, 0x3, "64b835cfaf071f2856af5e9f57a3ccea5c4925dd5325ca331a25f1263a2fb53a1f9c3186dc02df4fa68b02b5ff37b4b21a0a2f2c92a676117076ebfb42916d0294d59ca2fe8a2727cd0bf1c61332bce6028c1cd7e11cf4db0ff1943ee9ff94a475e3907da322a0c521f1510f2bb7811fd3c947c1be032a7e90dffe7ce902cc97d9"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4ff}}, {0xba, &(0x7f0000000880)=@string={0xba, 0x3, "a8c6d7140722b3fab0acacc7bbae6cf7d4276ac375446ac8b257b9615f4e33b493b781a0d628b52aff5cce115fcac6a67b2e18328d5efc19c0939e1364486bc80c338cc5199b0711105a19a656018f18c66e3cf9a0eb613c392762209ace35ebcfc0a767b2108d00aaefa8f63008064321ec64569712fb2e8f58db85b5d621a1884e68d51cd0916ff009d5bd6cf3bda7b3429390e3712e6ee0cbba301c3ee2ebb83550331c1b74a8e15abc3fc7e97dc59adada161ea17566"}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f00000004c0)={0xfffffffc}, 0x10}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x25a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x433}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa, 0x9}}}}}]}}]}}, 0x0) 2.328339508s ago: executing program 1 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffec8, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3009}]}, 0x24}}, 0x40000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x26b6, &(0x7f00000001c0)={0x0, 0xf906, 0x10, 0x0, 0x308}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/raw6\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000480)=""/207, 0xcf}], 0x1, 0x80000000, 0x0) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000580)={0xa, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)=[0x2, 0x4]}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mount$9p_rdma(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x7}}]}}) 2.280935185s ago: executing program 1 (id=644): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2.160392642s ago: executing program 1 (id=645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40280, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000180)="070000000000000001000000ffffffff40894088") (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000000}) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000280)={0x3000, 0x1}) (async) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x2000003, 0x13, r9, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.459320973s ago: executing program 4 (id=651): r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0x0, 0x4, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x18, 0x0, 0x0, 0x0, "1a0b6e8c6211c9db"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000580)=""/4090, &(0x7f0000001580)=0xffa) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl(r3, 0x4038ae7a, &(0x7f0000000240)=' \x00\x00\x00\x00\x00\x00@') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x410401, 0x1) 1.289797594s ago: executing program 4 (id=654): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x0, &(0x7f00000011c0)}) r1 = syz_open_dev$sg(&(0x7f0000001200), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="0800000005000000a30c0395"]) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}, [@call={0x61, 0x11, 0x84}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = dup(r0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001380)={0x8, {"b12b7f27694c7b3eb91ca35dc4df5f79bf7ec66c464db16d3373198bf4bd2ba436c2938f38576c3d38923b7b4bbfa98d2f0f2a1787107ad13ae65b8e3246f199766306063547cdbf71db953f1b5ade7c3d541241e56301e2be05093ea035362175c98e1dc971c64456358691ce5443d54ffbebe054b97e2711f739e1be873bd2aea6bcd4caeb73e277e090e844781e866d55acda28761be84058640d7f1865425ba4634325427d86ef05e187e42e09f648115b2c0ed34729fd90f6b9846be75864332f185790182a18e076af7eaa8f2cda74ad8c9984c9386a337f0d45ad883673c70d40511ef8f0719d9320652c274bd45d3e645963ec5b812665e7cf31cbfef066658f28a2387628b6cbf71f502c7533656e16cf0e2b56654b05cbf72287f27bd5362d3d1ed35114bb9a483f8e0f6cad71cad5198877ce1534d0940fc6a6e2251b3e737c3512d2c8458d6ffc578e66d2083539ea091e5e502561b0c5e37d0ee58a3d1562b1a7d46f8d0da20250addb1b5ccfdc940252e9c64ff370d9341a1b0abae22e6e974e8ea5dea2c3fc3539801ee1dde1334ad43ec7a1db7ba24251357cceb453f8dac8fdc674cd1781bbaff6a1abffe7a3e5a73317145d19a6f85fd2ba53c09687d39999d9f47381086f2dd826c48db64240c080565f6d94b7b34dc17a17f8c920c253d69f2903eb1c23a8952986bb359dbfbbd8ac596165166f0fe2d1a03ac5962743123b950f132bb1772cdf0348ca669e54dcdec8fc568ce6136999cc7605a16efe09c55163117618539571b4d58f16c8593272fe8e9bb72b5b1ff8c2ec48590d9ef2a7768106c32e94f78780043edb6ade45c18d7a506e7dbb3f91522f9e856547d77bf483258f245d3c8cacf78363141fda478818015f2df5e49eaeec0834003f8a7b01ca3e2f83c24a2b35d1693ee8688974016cd509edceb0e325e81228000946195de0f7d580be8e8a8f1099b7fabd8702d0b26e4cb8dd24bf2fc8c8596a29fe699da52c6deacdafcea634155005faaa9112d532084441db7fe29957a1b5233860e747b20dd539ba1627f120403baa932e04378304826604398ccae0781b46abdd8de046941f6557f42dcd4999dd5140a2314e947e1209dc5f0f1c9f5a7fc86cbc55777a011c12eedd465910896ba7683d455fa9beff4ec75c7ff427ae0eb8cacf051ef3c7de772f7d372645ac456820190c5e50388f2d855dec0f2de113e006fc8d849aa19bf3efa50068ffadb0bcad2280bf7a481717d811c3d934a236653396e2d1588f6e9aa25668840690acce54bf4c96da04d666e76569a84d9e50ba31ce0171692d9753a1b8195ed31b465e5a6b7b0da5db528fa419c7a4734b5ece2d151072b5befa94f9808f0b5ccaab54f04d5c0e7f618806d769b0d4a2ac9e94a08834d5d16742c460bd5cc4cca276f3ead93c62eaf45e0bb589cb7beafb09387108fc1bb83fb37807af38736ec51f4e5ebf3ba7873ef4f220abb4c4541c33772a3416b35703aceb30a0ecc55ee01bff1fcb2aea2e2e4fde8d05d61079d2dd41479241317bcd6695784d17b592e66ae76423316b3563d7c149d0b7fcbc6cef57a4b6291f8901b0bb0c89a5b776cb35efbfcef8e41180b4048dbb1b050a6eacba82fe869236929cac888ce752f0fdfb68d831247e8883eb8e936542b0dd132f9e76cb40535a0899cded676aa883b87d967cbe4952e0e7e8d7e4f3e8b8e438631ed94fefa09dca388f1c51104b07876a3916b62d11d1e3b3df32a76d97405c0936d0f2189a3e0323d3320c3b1a128a142809a1f50adfbf36f2a885a66eedccabbd0d47ba33386bb3ed95449a6532e4b8903b41bb6a68711dd738377700cdd8ef1db7fc656715710ba4c0c6dfca145a16dd093d0a49bc9b45886a12394467140354600713dcf704670af5b5f6f750b57d70704bc9c435fe346ace0417f82dad2d15c4f203770055c92fb5769d009699be30fad504bd9e9c0b8d1a1ba54511f594a2ac154673e62d92a2e2d3142c8f751514f8c75e2f5035e1630908800e00ffb5c638dd50184667fb1a0bca8b885c227c50b88329908be9351e2bda779789979983920943e3f37bdad77de55ce86695f510415a0f69e9b4e110a1df2b45ee3eed9ecff88785a0407e56359a2b7328ec2b5ef51d88f29f146a0a389cb588b9624546f70b135e377712d7abc1e4798a342b06298855600e8bfa58065de90db091b2e5a54bb4712862051658c743d3cb782ddf6b140ae5c99d78e30d719b8276b3efb7663d13dcb0fe60a545c6d606e6de07ee2d9c6afdd1550f1d94c030e0f259eeee796c678204e8773b1a077885bd4dfc8bd4009a8bb6f447e9da6a3bf11dc911e86510895cc14b873b2e07e104262df5b36ed6ff75a1350b20a8b8e48efe6cb75ca739f8d9fdb7ca59b121bd12f56be61ae96949857b1d2944ebc2c648f54c7a2006e1a3b2923ca441a8d092ed62bf8659528aed5464a880679299ea66561250770fc7ec45fc86616a9c88311b42e9a6c5cff47710098cce11bb784b0986578ba1293570e2fb38e25871a244394136f8c104415df345204ff7cb947ac9b2ed5204551829f32a461a16a917a8f1941bcac89bd35d8655dc4137bdc55e8330d5aefed184ae49e8ec70aaf0488cad0c8bdcf8595b48f39be7f1082bec34c4d2929b1535e8cfa2698442a5622e2562c5abea293035d6d0f321bfaf729108455ead6ab4873968affdc29808b0ba344f4b34a71a26705945f706d3f14e674b48182a8155ba82b2f77a094000d59faf34437bdc27a870fe2dd83122995ec919ebc02280ab0dede149db444ddebb88c35de1b37d75f60b9e424f9ec9bf5c4d16a3e2f662326e99fdd482f64b623ba7c579dc6c27483e6df73d7bdeea6b731d97321bf8b0dfa3200cbd7704a7d9db4700a82c03a7432552c6fccb30570d32e83aced0dbba8acb4824506f20f7ccdc277ce05ea7fd935f658113a80c56bbf5d45d962f81b99ac12358fec6d33377d1e938876f5b33a31b5a774d5d53f6a946a5d1461051d1d3036cba7f6aaebf9cca1066bef8fd98c49d8b48dd2d63dc49024c3bd6f477919075e5a6ff32f8371777b565d3be8c8cd6c8921f314d75a5a67a4c3caa033aeb0d573a4c0a4457ac19b8256e32272018aef22480844c8a27d4c10580a28e316a569410f30216506c3ca1d74ed738bcae54aba779973e222e2749f679e127f29ce3857f675f8dd7daf7c73d523cd1d8aad0086e0f9e098d16f31b1f35c3e593c9ce823747f4f446389b8d302f8c9d01139948eca687dba048929ca28ff5f4a723ae24c80559397072ffdec5d69c8e57340d15b99c88f8f0878a65c78ed3f2ae1e0d5a4baa7e990977f34427f09f80d646898e3833628a95e5efef1cf3bfdefafd5dd98c3c728640ab684c8bdf127c0913d6146160ff9fb9a68a3044d918ab4a02eeddc77e732448798661aa3dd0f1be402d63d26bfbdc742ff5ddd63995a86c8a5e5a77db081dbe2095ee06f94936df3344699f2de7f13560d806ece940c4c3354e97c1c7e9088f2f8903e668454e785b9b8b6be0e624d6ffdfceaa1cad85a371368e1457765ad72bdee27d46c515cf0dc253dfc55e6660c9285f13866b67522d6553bb6589a84a8eec92cb54793fc2bb713f80651f2517e09764a71befaf1dad20872a3681cb287f031a600071a9721c1ab9c30a55f7022fcf4df468b893f089a3a6128d1e7f4352c3312a416a3f1af75d7a5289255d8375ea10db5a0b9830b5eaa99af6ab66316fc036efc41fc2863e22b0a08808a3dd4dde518659afed3794de1e39b1d01f978683b2ad2438c0a9dd61535fda26807a046f5bbe416d52aa580150bcd132cf0feb01df155da9f1dc10a6b8d1c4395b1467663bc04c0a9a07b237b1231f9796b1d12ae96cabe13e5d88d3d9df9ff54ce5d931d53fbd5cbddf09d180316b13df5cee7695337dda39117939c8ad45a4eb007ea52a1e28490001dd64fc9fea09b6137a814ecd45ae8b7f012089d33fb213cf1f4ff1126ee2aaa919508232837b709253816eb37e53ac5e7259c800c274a4f950c8fa934127644555a29a2122972cd1faf60d9f3139913dc19211b5b197ac96376ee267ee26fe08e87994c1467d6c951f021b3f68f70dabcafed65022d14bafc30b63c6e5b9c6e63562eab6f9c17915dc2ba32823e8062244a997bac2aac0a721eb4a418017e6deb638adfedd7430f76d48964b5ec1449933e73a841e5bc7b4ffda1dd2d43ca4ef3aea32f5444b79067db4f21ad2c913aeddc7981223bf513c3b026ec285572c404c659b5853c33dc66b3adb130fae1bfd0d6ca4ec2d47870e51cb4dcfc92647c36fd4b0a4b563620b956cac24675e28334646042a87dc3e16ec806e380e0971c0cd98e251bc4842425922355957bd5b0645a4bb6219a7526f72222b8b6003f71d94016d1f761c4ccfd83246405956f67107a9825f8089f8f5fa5a0a940a988cbfa2144e773f5ae13a82c93a37e12de9b97a28f9fae16c954c2c83a9362f1715bacc52280dd1edfacbb3dd6b63378e2ce200ee25f50bf1c4a9e529200ce1b6d890c5ebbc25d942ee136a53168babc031de3c318a36243af7a5e17d23f157f6f2fa83dd81302f858c367536cae2f296c3e211ea8abbfde728c7e4cf3a4ccac000a78dfc0149e34356d7bfeeaf93fb450109a2a0c4757ed33e4136c6f91d81615974fe5e29751efc57731031e0aa78bb03576a28a675de1178ca72d12df92e0266db6bf86a24c21d8d1040d5ed191a4c67f994a7788246092d1b732e61f3b5149c64d7c5d62675f80440e60855a966991570575dafb2c3621cca7403516f895957d3d604496c68369d737748284f4295188ddf2ce88d2a5229008974dca8198cd70209fc5b7d7551ffe8cd9b36288adc7688149453ea8275e74a94ad71ad8b9cd382859a0f488d37c2bfa0f2c9514672f49a22d7a16dbc85d925814dbb05b2a9c81a57d1f2d1b490d016a8fdbd8ce965a2bcf85a2da4027b345042d8fcaf9cb87cf845fca0847c77fd04f288f75e34d1e2455024b7c3f4a3ea78c3092f30aae224b7424f9ea2eaafcbac8acd1257dec5fb8d5b38e248d0e6b0564e2e03b5e61caa3d419c1deac05817f67e65eb00c242b144a3030a8ee41359c913af987271468db35f2fffcb4684d099564f4271a1d112aad07bb1036efd07560c33d71fd0ad5d854508026415266eb2372028b8ceb28d9e1adb2fd049a74d89f3e5803759b456e525c17da5d66c958223bfcd346574921ca7c55e7425c8c1710af926972c81fa0a8981b4c907ce44c07ddbedca04810ddb2b07f98fd2852dbc1aaa86d3ead23197af704ee0c79dbf5ceebc849c329b63434351cbd43e49dcfd9a5133eda4fe206e0f2167ff91fc47e72dae3c343ec89b7de66af2ac754120e22e1294d8140d61a8300c499006e2b655cbda95dbf0dcc060e8cd86c2dce254ad2aadbe6a4ed1c07e6add6912cd5d1d258d1810f54ba9febc28cc571bd2e81ffcc5b8b1b6c1c3e93e40a44dedd13aeb18b8c24293b872502f5323a57e9f84c60660506cc3d3fa451108faf0d000c5701787edde4fdad405c7adeb7de0768ef0e183641957bb348df8968500f1eed6b88d5fe0fe9a84c0aeeb8d9e43c4ae038808b185b2834802d96ae27decd46c2908a87960a38c3041f251683833772c2399b9c3ce4a76235c55e4e0747462c66ff8a40543f9c869026010c497fe7932f19e49d0cb649e280a9e6d3f9ece41263d32aa98d17abec91a873403620ce9757947db959e5b", 0x1000}}, 0x1006) 1.230241857s ago: executing program 4 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000d7000000200000003500feff2000000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xacf}, 0x94) 1.228823363s ago: executing program 0 (id=657): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000140)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./myproc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./myproc/scsi/device_info\x00', 0x40000, 0x0) pread64(r1, &(0x7f0000000240)=""/190, 0xbe, 0x80000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x3) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40403, 0x0) 1.228527346s ago: executing program 4 (id=658): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_secret(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x16ef, &(0x7f0000000040)={0x0, 0x4c91, 0xc000, 0x3, 0x20002f9, 0x0, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.224531032s ago: executing program 0 (id=659): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x3a222000) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe7}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9c2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008011}, 0x48000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8}, 0x1c) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44005}, 0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x1) (async) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0xf3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:fsadm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x44) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write(0xffffffffffffffff, &(0x7f0000000680)="c88500937e1569996e075c62f7910961065870498cdb6e48b411b6740eb3c77b6e57ec672f1f63f65c7e9e30cdbe90293f712770ab6dec85ec3dee5de89be8745186941e13f67fff44df9e045d1ca988a82e1f2acc4d0b2fbc4f469682298370ac389dc2e13a70e5b330c80d51b941b2b7e7dc721c3a317461e5701bffdc65a6a2d4f3259868bf0cb8dcc0e7d91788f7a00d84ed3f69765f9de5d5cb480f941be797624eea892c5cf4f8b0b098b9a6f16321dcb9abada7573c6f233d9a6fc30299b3c4ec6642c975f015093feb9c7293", 0xd0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x81004}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008050}, 0x40004) recvmsg$kcm(r5, &(0x7f0000001a40)={&(0x7f0000000980), 0x80, &(0x7f0000001a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}, 0x10000) (async) syz_clone(0x80008000, &(0x7f0000001a80)="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", 0x1000, &(0x7f0000002a80), &(0x7f0000002ac0), &(0x7f0000002b00)="005afe013ed7e06b504cd4154f7fbd1de681") mount$9p_fd(0x0, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80), 0x802000, &(0x7f0000002bc0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, 'ip_vti0\x00'}}, {@aname={'aname', 0x3d, 'ip_vti0\x00'}}, {@version_9p2000}, {@debug={'debug', 0x3d, 0x10}}, {@directio}, {@afid={'afid', 0x3d, 0x3}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'ip_vti0\x00'}}, {@fowner_lt}, {@dont_appraise}]}}) (async) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002d00), 0x101000, 0x0) readahead(r10, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000002fc0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x1a8, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "24a99e8a0374b4d984b84ef4da09b770c14ff921f8bf717e2d63ee40bc8403ee"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e7aa0dbdc42e5d25855b104df9fe86a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0xb4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555c}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "32c0ad3bdec28f1747fcd2a9f36b809baaf7092f802f1c17d61cf95f347221fd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abb957253e613acaf206250c036e1d2eace3f818c23825b74a921f858eb2ab2c"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4850) (async) mkdirat(r1, &(0x7f0000003100)='./file0\x00', 0x8) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x30, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8846}, 0x4004860) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000003440)={&(0x7f0000003240), 0xc, &(0x7f0000003400)={&(0x7f00000032c0)={0x114, r12, 0x102, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100, @empty, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7d9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x2004c840}, 0x4001) (async) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r6, 0x84, 0x80, &(0x7f0000003480)={0x2}, 0x8) 1.128909525s ago: executing program 4 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x2e, &(0x7f0000000500)=0xb1e0, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000680)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb4, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}, @in6={0xa, 0x4e20, 0x20, @private0, 0x9}, @in6={0xa, 0x4e21, 0xe, @mcast1, 0x14b91f01}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000300)=0x84) openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x32}, 0x1, 0x0) 1.128336853s ago: executing program 0 (id=661): getpgrp(0x0) (async) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setns(r2, 0x2000000) pidfd_send_signal(r1, 0x0, &(0x7f00000000c0)={0xc, 0xf2a, 0xfffffff8}, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu '], 0xb) rmdir(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) 220.454886ms ago: executing program 0 (id=662): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x153842) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000200)={0x0, 0x0}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x400, @loopback, 0x4}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r5, r6}, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e21, 0xfffff8d0, @mcast2, 0x9}, 0x1c) process_vm_writev(r7, &(0x7f0000000400)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000005c0)=r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="21012bbd7000ffffffff2b00000008000300", @ANYBLOB="dc6dfd85d4e39ba7f499f4424c431a74a6b819d1376f4a33c8bf1c", @ANYBLOB="0a0034000202020202020000088026006c090000080027000300000004002400"], 0x3c}, 0x1, 0x0, 0x0, 0x200070c4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0884123, &(0x7f0000000080)) 160.165429ms ago: executing program 4 (id=663): r0 = syz_usb_connect(0x5, 0x371, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1491ff, 0x22) unshare(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0xb0, 0x2000000000000400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_disconnect(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x1c, 0x29, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) 276.56µs ago: executing program 0 (id=664): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc142, 0x1a2) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000002880)={0x0, &(0x7f0000002740)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x474}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4044805}, 0x8000) 0s ago: executing program 0 (id=665): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000094) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r4, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r4, 0x3, {0x0, 0xf0, 0x1}, 0xfd}, 0x18) kernel console output (not intermixed with test programs): lated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:9076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 57.169770][ T6524] Node 0 DMA free:13200kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 57.169828][ T6524] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 57.169863][ T6524] Node 0 DMA32 free:182772kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:51148kB inactive_anon:268kB active_file:2740kB inactive_file:204912kB unevictable:2000kB writepending:288kB zspages:0kB present:2080628kB managed:1230944kB mlocked:0kB bounce:0kB free_pcp:18712kB local_pcp:3604kB free_cma:0kB [ 57.169917][ T6524] lowmem_reserve[]: 0 0 0 0 0 [ 57.169950][ T6524] Node 1 Normal free:1606860kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:21816kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:22736kB local_pcp:3052kB free_cma:0kB [ 57.170003][ T6524] lowmem_reserve[]: 0 0 0 0 0 [ 57.170034][ T6524] Node 0 DMA: 10*4kB (UM) 7*8kB (U) 11*16kB (UM) 12*32kB (UM) 10*64kB (UM) 11*128kB (UM) 9*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 13200kB [ 57.170196][ T6524] Node 0 DMA32: 157*4kB (UME) 215*8kB (UME) 247*16kB (UME) 103*32kB (UME) 260*64kB (UME) 154*128kB (UME) 104*256kB (UME) 83*512kB (UME) 56*1024kB (UM) 3*2048kB (U) 1*4096kB (U) = 182652kB [ 57.170346][ T6524] Node 1 Normal: 182*4kB (UM) 185*8kB (UME) 227*16kB (UM) 224*32kB (UME) 224*64kB (UME) 214*128kB (UME) 201*256kB (UM) 191*512kB (UM) 156*1024kB (UM) 7*2048kB (ME) 300*4096kB (M) = 1606864kB [ 57.170496][ T6524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.170510][ T6524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.170524][ T6524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.170537][ T6524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.170551][ T6524] 58940 total pagecache pages [ 57.170568][ T6524] 0 pages in swap cache [ 57.170575][ T6524] Free swap = 124996kB [ 57.170582][ T6524] Total swap = 124996kB [ 57.170589][ T6524] 1048443 pages RAM [ 57.170595][ T6524] 0 pages HighMem/MovableOnly [ 57.170601][ T6524] 291397 pages reserved [ 57.170608][ T6524] 0 pages cma reserved [ 57.290957][ T43] audit: type=1400 audit(1793336013.803:426): avc: denied { read write } for pid=6525 comm="syz.1.164" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.291002][ T43] audit: type=1400 audit(1793336013.803:427): avc: denied { open } for pid=6525 comm="syz.1.164" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.293315][ T43] audit: type=1400 audit(1793336013.813:428): avc: denied { ioctl } for pid=6525 comm="syz.1.164" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 57.339740][ T6528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 57.339765][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.340772][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 57.391890][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.521484][ T42] usb 5-1: device descriptor read/64, error -71 [ 57.548003][ T43] audit: type=1400 audit(1793336014.063:429): avc: denied { write } for pid=6537 comm="syz.3.172" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.584109][ T43] audit: type=1400 audit(1793336014.103:430): avc: denied { map } for pid=6537 comm="syz.3.172" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.591481][ T5895] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 57.612298][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.642731][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.763368][ T5878] usb 6-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 57.765526][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.765551][ T5878] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 57.765572][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.772703][ T43] audit: type=1400 audit(1793336014.293:43qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x190000) 1): avc: denied { accept } for pid=6542 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.776940][ T6544] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:21 [ 57.778030][ T6543] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 57.781448][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.781540][ T5886] usb 7-1: device descriptor read/64, error -71 [ 57.783730][ T1170] IPVS: starting estimator thread 0... [ 57.852934][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 57.852950][ T1135] ata1: failed to read log page 10h (errno=-5) [ 57.852960][ T1135] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 57.852971][ T1135] ata1.00: irq_stat 0x41000000 [ 57.852981][ T1135] ata1.00: failed command: READ FPDMA QUEUED [ 57.852987][ T1135] ata1.00: cmd 60/80:f0:ee:32:01/0c:00:00:00:00/40 tag 30 ncq dma 1638400 in [ 57.852987][ T1135] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 57.853059][ T1135] ata1.00: status: { DRDY } [ 57.853068][ T1135] ata1.00: error: { ABRT } [ 57.856255][ T1135] ata1.00: configured for UDMA/100 [ 57.856806][ T1135] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 57.856833][ T1135] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 57.856851][ T1135] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 57.856870][ T1135] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 32 ee 00 0c 80 00 [ 57.856964][ T1135] I/O error, dev sda, sector 78574 op 0x0:(READ) flags 0x80700 phys_seg 102 prio class 2 [ 57.857204][ T1135] ata1: EH complete [ 57.871453][ T6545] IPVS: using max 22 ests per chain, 52800 per kthread [ 57.931396][ T42] usb 5-1: device descriptor read/64, error -71 [ 57.976481][ T5878] dvbdev: DVB: registering new adapter (DEC2000-t) [ 57.986879][ T5878] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 58.041411][ T5886] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.042412][ T42] usb usb5-port1: attempt power cycle [ 58.045594][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.086947][ T43] audit: type=1400 audit(1793336014.603:432): avc: denied { write } for pid=6551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.155178][ T43] audit: type=1400 audit(1793336014.673:433): avc: denied { write } for pid=6554 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.179222][ T6528] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 58.179252][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.180065][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 58.181543][ T6556] vhci_hcd: connection closed [ 58.182176][ T5886] usb 7-1: device descriptor read/64, error -71 [ 58.183135][ T5878] ttusb_dec_send_command: command bulk message failed: error -71 [ 58.186482][ T13] vhci_hcd vhci_hcd.1: stop threads [ 58.186733][ T13] vhci_hcd vhci_hcd.1: release socket [ 58.188471][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 58.189320][ T5878] usb 6-1: USB disconnect, device number 4 [ 58.189437][ T6529] vhci_hcd: connection reset by peer [ 58.192130][ T13] vhci_hcd vhci_hcd.1: stop threads [ 58.192140][ T13] vhci_hcd vhci_hcd.1: release socket [ 58.192207][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 58.291774][ T5886] usb usb7-port1: attempt power cycle [ 58.391332][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.412014][ T42] usb 5-1: device descriptor read/8, error -71 [ 58.631583][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.651446][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.652156][ T5886] usb 7-1: device descriptor read/8, error -71 [ 58.675431][ T42] usb 5-1: device descriptor read/8, error -71 [ 58.729062][ T43] audit: type=1400 audit(1793336015.243:434): avc: denied { ioctl } for pid=6562 comm="syz.1.176" path="socket:[12130]" dev="sockfs" ino=12130 ioctlcmd=0x50009401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.784325][ T42] usb usb5-port1: unable to enumerate USB device [ 58.820195][ T6567] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 58.829534][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.842525][ T6567] bond1: (slave ip6erspan0): making interface the new active one [ 58.844190][ T6567] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 58.891384][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.911972][ T5886] usb 7-1: device descriptor read/8, error -71 [ 59.032720][ T5886] usb usb7-port1: unable to enumerate USB device [ 59.397495][ T6571] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 59.420408][ T6571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.432865][ T6571] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 59.636688][ T6583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.667859][ T6586] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 59.751604][ T6593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.897941][ T6600] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 59.897970][ T6600] __nla_validate_parse: 5 callbacks suppressed [ 59.897980][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 59.898386][ T6600] 8021q: VLANs not supported on tunl0 [ 59.952018][ T6602] netlink: 'syz.3.188': attribute type 11 has an invalid length. [ 59.952039][ T6602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.188'. [ 60.461995][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 60.465940][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 60.521133][ T5944] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.573044][ T6614] gadgetfs: bound to dummy_udc driver [ 60.682326][ T5944] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 60.683371][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.683394][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.683411][ T5944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.683443][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.688775][ T5944] usb 5-1: config 0 descriptor?? [ 60.841370][ T34] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 60.841592][ C3] gadgetfs: connected [ 60.842806][ T34] gadgetfs: disconnected [ 60.856622][ T6630] jffs2: notice: (6630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.862536][ T6633] bond0: (slave bond_slave_1): Releasing backup interface [ 61.110120][ T5944] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 61.110542][ T5057] IPVS: starting estimator thread 0... [ 61.128533][ T6644] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.201060][ T6645] IPVS: using max 26 ests per chain, 62400 per kthread [ 61.330977][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.481519][ T34] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 61.483275][ T34] usb 6-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 61.483289][ T34] usb 6-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 61.483298][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 66 [ 61.483319][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 61.483332][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 61.484491][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.484502][ T34] usb 6-1: Product: syz [ 61.484509][ T34] usb 6-1: Manufacturer: syz [ 61.486806][ T34] usb 6-1: config 0 descriptor?? [ 61.488662][ T34] cdc_wdm 6-1:0.0: skipping garbage [ 61.488671][ T34] cdc_wdm 6-1:0.0: skipping garbage [ 61.492175][ T34] cdc_wdm 6-1:0.0: cdc-wdm1: USB WDM device [ 61.492186][ T34] cdc_wdm 6-1:0.0: Unknown control protocol [ 61.690986][ T5886] usb 6-1: USB disconnect, device number 6 [ 62.266142][ T6676] netlink: 'syz.2.209': attribute type 2 has an invalid length. [ 62.266157][ T6676] netlink: 224 bytes leftover after parsing attributes in process `syz.2.209'. [ 62.266976][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 62.272872][ T6669] device-mapper: table: 248:1: adding target device ram3 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512 [ 62.272895][ T6669] device-mapper: table: 248:1: adding target device ram3 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512 [ 62.332053][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 62.332070][ T43] audit: type=1800 audit(1793336018.853:454): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.210" name="(" dev="sda1" ino=2038 res=0 errno=-22 [ 62.387338][ T43] audit: type=1400 audit(1793336018.903:455): avc: denied { read write } for pid=6682 comm="syz.2.212" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.387632][ T43] audit: type=1400 audit(1793336018.903:456): avc: denied { open } for pid=6682 comm="syz.2.212" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.388262][ T43] audit: type=1400 audit(1793336018.903:457): avc: denied { ioctl } for pid=6682 comm="syz.2.212" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0xc400941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.393198][ T5802] Bluetooth: hci1: Malformed LE Event: 0x1b [ 62.395025][ T6683] input: syz1 as /devices/virtual/input/input5 [ 62.395121][ T6683] input: failed to attach handler leds to device input5, error: -6 [ 62.401622][ T6685] program syz.1.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.404923][ T6691] program syz.1.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.415056][ C2] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 62.427157][ T6683] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 62.428393][ T43] audit: type=1400 audit(1793336018.943:458): avc: denied { mac_admin } for pid=6682 comm="syz.2.212" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.428436][ T43] audit: type=1400 audit(1793336018.943:459): avc: denied { relabelto } for pid=6682 comm="syz.2.212" name="52" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 62.428467][ T43] audit: type=1400 audit(1793336018.943:460): avc: denied { associate } for pid=6682 comm="syz.2.212" name="52" dev="tmpfs" ino=288 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 62.431323][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 62.431350][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 62.496101][ T43] audit: type=1400 audit(1793336019.013:461): avc: denied { write } for pid=5804 comm="syz-executor" name="52" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 62.496447][ T43] audit: type=1400 audit(1793336019.013:462): avc: denied { remove_name } for pid=5804 comm="syz-executor" name="binderfs" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 62.497258][ T43] audit: type=1400 audit(1793336019.013:463): avc: denied { write } for pid=5804 comm="syz-executor" name="52" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 62.720873][ T5895] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 62.752823][ T6703] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.824808][ T5802] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 62.824870][ T5802] Bluetooth: hci1: Injecting HCI hardware error event [ 62.825881][ T5800] Bluetooth: hci1: hardware error 0x00 [ 62.946817][ T6706] 9pnet_fd: Insufficient options for proto=fd [ 63.007924][ T5802] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 63.012004][ T6710] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 63.157914][ T6710] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 63.160336][ T6710] overlayfs: failed to look up (tracing) for ino (-66) [ 63.168534][ T6711] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 63.187953][ T41] usb 5-1: USB disconnect, device number 6 [ 63.809693][ T6725] device-mapper: table: 248:2: writecache: Origin data device lookup failed (-ENOENT) [ 63.809710][ T6725] device-mapper: ioctl: error adding target to table [ 63.819418][ T6724] device-mapper: table: 248:2: writecache: Origin data device lookup failed (-ENOENT) [ 63.819439][ T6724] device-mapper: ioctl: error adding target to table [ 64.204154][ T6751] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.234911][ T6753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.235317][ T6751] netlink: 72 bytes leftover after parsing attributes in process `syz.0.229'. [ 64.237581][ T6751] netlink: 'syz.0.229': attribute type 63 has an invalid length. [ 64.237594][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 64.266008][ T6760] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ž¥&~MfF@!è³0´~…îz!7þ­A·O [ 64.390294][ T6766] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 64.487344][ T6789] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 64.500385][ T6785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.500646][ T6785] block device autoloading is deprecated and will be removed. [ 64.572680][ T6785] md: could not open device unknown-block(1,3). [ 64.572744][ T6785] md: error, md_import_device() returned -16 [ 64.649940][ T6803] input: syz0 as /devices/virtual/input/input6 [ 64.890609][ T5800] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 64.965887][ T6818] overlayfs: failed to resolve './file2': -2 [ 65.396512][ T6831] Bluetooth: MGMT ver 1.23 [ 65.589044][ T6840] kvm: user requested TSC rate below hardware speed [ 65.594524][ T6840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 66.209330][ T6863] netlink: 'syz.0.260': attribute type 9 has an invalid length. [ 66.569793][ T6871] random: crng reseeded on system resumption [ 67.049086][ T6884] syzkaller1: entered promiscuous mode [ 67.049101][ T6884] syzkaller1: entered allmulticast mode [ 67.444865][ T6898] __nla_validate_parse: 2 callbacks suppressed [ 67.444883][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 67.453368][ T6895] xt_CT: No such helper "pptp" [ 67.512575][ T6900] Unknown options in mask 6 [ 67.513496][ T6900] netlink: 112 bytes leftover after parsing attributes in process `syz.1.268'. [ 67.551783][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 67.551795][ T43] audit: type=1400 audit(1793336024.074:510): avc: denied { ioctl } for pid=6904 comm="syz.0.269" path="/dev/uhid" dev="devtmpfs" ino=1302 ioctlcmd=0xc038586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.606637][ T43] audit: type=1400 audit(1793336024.124:511): avc: denied { name_bind } for pid=6913 comm="syz.1.272" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.704120][ T43] audit: type=1400 audit(1793336024.224:512): avc: denied { write } for pid=6917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.755908][ T43] audit: type=1400 audit(1793336024.274:513): avc: denied { write } for pid=6924 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.796471][ T6926] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 67.860403][ T42] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 67.889431][ T6934] FAULT_INJECTION: forcing a failure. [ 67.889431][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 67.889462][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.889476][ T6934] Tainted: [L]=SOFTLOCKUP [ 67.889480][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.889486][ T6934] Call Trace: [ 67.889505][ T6934] [ 67.889510][ T6934] dump_stack_lvl+0x100/0x190 [ 67.889548][ T6934] should_fail_ex.cold+0x5/0xa [ 67.889577][ T6934] should_failslab+0xc2/0x120 [ 67.889594][ T6934] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.889627][ T6934] ? d_instantiate+0x8a/0xb0 [ 67.889643][ T6934] ? alloc_empty_file+0x5b/0x1c0 [ 67.889659][ T6934] alloc_empty_file+0x5b/0x1c0 [ 67.889674][ T6934] alloc_file_pseudo+0x17e/0x290 [ 67.889690][ T6934] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 67.889706][ T6934] ? alloc_fd+0x471/0x7a0 [ 67.889721][ T6934] sock_alloc_file+0x50/0x210 [ 67.889738][ T6934] __sys_socket+0x1c0/0x260 [ 67.889753][ T6934] ? __pfx___sys_socket+0x10/0x10 [ 67.889777][ T6934] __x64_sys_socket+0x72/0xb0 [ 67.889792][ T6934] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.889807][ T6934] do_syscall_64+0x123/0x790 [ 67.889820][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.889831][ T6934] RIP: 0033:0x7ffb4119f559 [ 67.889841][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.889851][ T6934] RSP: 002b:00007ffb42065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 67.889871][ T6934] RAX: ffffffffffffffda RBX: 00007ffb41425fa0 RCX: 00007ffb4119f559 [ 67.889878][ T6934] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 67.889883][ T6934] RBP: 00007ffb41236b20 R08: 0000000000000000 R09: 0000000000000000 [ 67.889889][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.889896][ T6934] R13: 00007ffb41426038 R14: 00007ffb41425fa0 R15: 00007ffdcb942d78 [ 67.889910][ T6934] [ 68.004101][ T43] audit: type=1400 audit(1793336024.524:514): avc: denied { create } for pid=6936 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.004872][ T43] audit: type=1400 audit(1793336024.524:515): avc: denied { ioctl } for pid=6936 comm="syz.0.278" path="socket:[15353]" dev="sockfs" ino=15353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.009383][ T43] audit: type=1400 audit(1793336024.524:516): avc: denied { write } for pid=6936 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.011198][ T42] usb 6-1: New USB device found: idVendor=05ac, idProduct=1440, bcdDevice=0.00 [ 68.012253][ T42] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 68.012277][ T42] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.012298][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.012329][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.017017][ T42] usb 6-1: config 0 descriptor?? [ 68.018964][ T6914] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.414589][ T43] audit: type=1400 audit(1793336024.934:517): avc: denied { setattr } for pid=6974 comm="syz.0.289" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.442243][ T42] input: HID 05ac:1440 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:1440.0004/input/input7 [ 68.448759][ T43] audit: type=1400 audit(1793336024.964:518): avc: denied { mounton } for pid=6976 comm="syz.0.291" path="/78/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 68.448866][ T6977] overlay: ./file0 is not a directory [ 68.480452][ T42] appleir 0003:05AC:1440.0004: input,hiddev0,hidraw1: USB HID v0.04 Joystick [HID 05ac:1440] on usb-dummy_hcd.1-1/input0 [ 68.484844][ T6979] netlink: 'syz.3.290': attribute type 49 has an invalid length. [ 68.532220][ T6982] FAULT_INJECTION: forcing a failure. [ 68.532220][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 68.532240][ T6982] CPU: 2 UID: 0 PID: 6982 Comm: syz.3.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.532254][ T6982] Tainted: [L]=SOFTLOCKUP [ 68.532258][ T6982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.532264][ T6982] Call Trace: [ 68.532268][ T6982] [ 68.532273][ T6982] dump_stack_lvl+0x100/0x190 [ 68.532293][ T6982] should_fail_ex.cold+0x5/0xa [ 68.532310][ T6982] should_failslab+0xc2/0x120 [ 68.532321][ T6982] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.532334][ T6982] ? __might_fault+0xc5/0x140 [ 68.532345][ T6982] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 68.532361][ T6982] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 68.532375][ T6982] __get_filter+0x1e1/0x2c0 [ 68.532391][ T6982] sk_attach_filter+0x1c/0x150 [ 68.532406][ T6982] sk_setsockopt+0x3bb9/0x5fc0 [ 68.532421][ T6982] ? __pfx_sk_setsockopt+0x10/0x10 [ 68.532434][ T6982] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 68.532451][ T6982] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 68.532476][ T6982] ? find_held_lock+0x2b/0x80 [ 68.532496][ T6982] ? selinux_socket_setsockopt+0x6a/0x80 [ 68.532514][ T6982] do_sock_setsockopt+0x193/0x1d0 [ 68.532538][ T6982] __sys_setsockopt+0x195/0x220 [ 68.532559][ T6982] __x64_sys_setsockopt+0xbd/0x160 [ 68.532575][ T6982] ? do_syscall_64+0xae/0x790 [ 68.532591][ T6982] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.532608][ T6982] do_syscall_64+0x123/0x790 [ 68.532627][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.532644][ T6982] RIP: 0033:0x7fbb7af9f559 [ 68.532659][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.532674][ T6982] RSP: 002b:00007fbb7be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.532700][ T6982] RAX: ffffffffffffffda RBX: 00007fbb7b225fa0 RCX: 00007fbb7af9f559 [ 68.532711][ T6982] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000007 [ 68.532722][ T6982] RBP: 00007fbb7b036b20 R08: 0000000000000010 R09: 0000000000000000 [ 68.532732][ T6982] R10: 0000200000010300 R11: 0000000000000246 R12: 0000000000000000 [ 68.532743][ T6982] R13: 00007fbb7b226038 R14: 00007fbb7b225fa0 R15: 00007fff2b45ab28 [ 68.532769][ T6982] [ 68.573156][ T6992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2047 sclass=netlink_route_socket pid=6992 comm=syz.0.293 [ 68.598415][ T6994] syzkaller0: entered promiscuous mode [ 68.598433][ T6994] syzkaller0: entered allmulticast mode [ 68.649955][ T5886] usb 6-1: USB disconnect, device number 7 [ 68.707570][ T7003] capability: warning: `syz.3.297' uses 32-bit capabilities (legacy support in use) [ 68.723774][ T43] audit: type=1400 audit(1793336025.244:519): avc: denied { write } for pid=7000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.814131][ T7019] xt_REDIRECT: bad MAP_IPS. [ 68.871706][ T7018] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 68.871727][ T7018] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 68.871750][ T7018] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 68.921015][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 68.955954][ T7018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.972601][ T7018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.014686][ T5057] smbdirect: ib_dev[syz1] removed [ 69.043516][ T7018] bond0 (unregistering): Released all slaves [ 69.056775][ T7010] syz.0.298 (7010): drop_caches: 2 [ 69.142450][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.142603][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.146327][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.146530][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.146673][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.146814][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.146948][ T7018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.297'. [ 69.558372][ T7047] nvme nvme0: failed to connect socket: -111 [ 69.966133][ T7078] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 70.063359][ T7078] zswap: compressor l not available [ 70.158299][ T7090] openvswitch: netlink: nsh attr 63 is out of range max 3 [ 70.392247][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7135 comm=syz.0.318 [ 70.406953][ T7120] nvme nvme0: failed to connect socket: -111 [ 70.428054][ T7139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 70.428094][ T7139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 70.459599][ T7142] ./dev: Can't lookup blockdev [ 70.912686][ T7178] SELinux: policydb version 0 does not match my version range 15-35 [ 70.914155][ T7178] SELinux: failed to load policy [ 71.041936][ T7180] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 71.041948][ T7180] overlayfs: missing 'lowerdir' [ 71.156020][ T7188] Device name not specified. [ 71.156020][ T7188] [ 71.277378][ T7197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=284 sclass=netlink_route_socket pid=7197 comm=syz.1.336 [ 71.281568][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=284 sclass=netlink_route_socket pid=7202 comm=syz.1.336 [ 71.431428][ T7210] raw_sendmsg: syz.1.337 forgot to set AF_INET. Fix it! [ 71.537752][ T1450] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.537873][ T1450] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.547360][ T29] cfg80211: failed to load regulatory.db [ 71.645150][ T7224] ip_tables: iptables: counters copy to user failed while replacing table [ 71.648323][ T7224] device-mapper: table: 248:3: zero-length target [ 71.648336][ T7224] device-mapper: ioctl: error adding target to table [ 71.666834][ T7224] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.809724][ T5875] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 71.970419][ T5875] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 71.971402][ T5875] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.972333][ T5875] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.974232][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.974251][ T5875] usb 6-1: Product: syz [ 71.974266][ T5875] usb 6-1: Manufacturer: syz [ 71.974278][ T5875] usb 6-1: SerialNumber: syz [ 72.003303][ T5875] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 72.011980][ T5875] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 72.018220][ T5875] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 72.208147][ T29] usb 6-1: USB disconnect, device number 8 [ 72.236709][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 72.242422][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 72.242828][ T29] ti_usb_3410_5052 6-1:2.0: device disconnected [ 72.326310][ T7250] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 72.340612][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.353560][ T7250] bond0: (slave geneve2): making interface the new active one [ 72.355482][ T7250] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 72.748587][ T7258] geneve2: entered allmulticast mode [ 72.756436][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 72.756453][ T43] audit: type=1400 audit(1793336029.275:548): avc: denied { bind } for pid=7257 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.756722][ T43] audit: type=1400 audit(1793336029.275:549): avc: denied { write } for pid=7257 comm="syz.1.349" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.756864][ T43] audit: type=1400 audit(1793336029.275:550): avc: denied { connect } for pid=7257 comm="syz.1.349" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.308390][ T7262] netlink: 'syz.3.350': attribute type 30 has an invalid length. [ 73.347061][ T43] audit: type=1400 audit(1793336029.865:551): avc: denied { read } for pid=5505 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 73.420674][ T43] audit: type=1400 audit(1793336029.945:552): avc: denied { write } for pid=7266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.484673][ T43] audit: type=1400 audit(1793336030.005:553): avc: denied { write } for pid=7269 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.555282][ T5505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.620459][ T43] audit: type=1400 audit(1793336030.145:554): avc: denied { write } for pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.682359][ T43] audit: type=1400 audit(1793336030.205:555): avc: denied { write } for pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.703407][ T43] audit: type=1400 audit(1793336030.225:556): avc: denied { write } for pid=7282 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.769663][ T7261] FAULT_INJECTION: forcing a failure. [ 73.769663][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 73.769706][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.3.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.769730][ T7261] Tainted: [L]=SOFTLOCKUP [ 73.769736][ T7261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.769746][ T7261] Call Trace: [ 73.769771][ T7261] [ 73.769779][ T7261] dump_stack_lvl+0x100/0x190 [ 73.769830][ T7261] should_fail_ex.cold+0x5/0xa [ 73.769889][ T7261] should_failslab+0xc2/0x120 [ 73.769913][ T7261] __kmalloc_noprof+0xfc/0x840 [ 73.769939][ T7261] ? constrain_params_by_rules+0x175/0xd20 [ 73.769979][ T7261] constrain_params_by_rules+0x175/0xd20 [ 73.770006][ T7261] ? stack_depot_save_flags+0x49a/0xa10 [ 73.770039][ T7261] ? __kasan_kmalloc+0xaa/0xb0 [ 73.770064][ T7261] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 73.770086][ T7261] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 73.770111][ T7261] ? snd_pcm_oss_ioctl+0x1a67/0x3790 [ 73.770128][ T7261] ? __x64_sys_ioctl+0x18e/0x210 [ 73.770154][ T7261] ? do_syscall_64+0x123/0x790 [ 73.770193][ T7261] ? snd_interval_refine+0x2d0/0x580 [ 73.770219][ T7261] snd_pcm_hw_refine+0x82a/0xb40 [ 73.770250][ T7261] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 73.770281][ T7261] ? kasan_save_track+0x14/0x30 [ 73.770297][ T7261] ? __kasan_kmalloc+0xaa/0xb0 [ 73.770324][ T7261] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 73.770347][ T7261] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 73.770380][ T7261] ? snd_interval_refine+0x2d0/0x580 [ 73.770406][ T7261] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 73.770446][ T7261] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 73.770473][ T7261] ? __pfx___mutex_lock+0x10/0x10 [ 73.770491][ T7261] ? snd_pcm_oss_sync+0x1a0/0x840 [ 73.770519][ T7261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.770545][ T7261] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 73.770565][ T7261] snd_pcm_oss_sync+0x1de/0x840 [ 73.770587][ T7261] snd_pcm_oss_ioctl+0x1a67/0x3790 [ 73.770610][ T7261] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 73.770633][ T7261] ? selinux_file_ioctl+0x1e0/0x290 [ 73.770661][ T7261] ? selinux_file_ioctl+0x1e7/0x290 [ 73.770688][ T7261] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 73.770708][ T7261] __x64_sys_ioctl+0x18e/0x210 [ 73.770736][ T7261] do_syscall_64+0x123/0x790 [ 73.770756][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.770774][ T7261] RIP: 0033:0x7fbb7af9f559 [ 73.770790][ T7261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.770806][ T7261] RSP: 002b:00007fbb7be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.770833][ T7261] RAX: ffffffffffffffda RBX: 00007fbb7b225fa0 RCX: 00007fbb7af9f559 [ 73.770844][ T7261] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000005 [ 73.770855][ T7261] RBP: 00007fbb7b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.770865][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.770875][ T7261] R13: 00007fbb7b226038 R14: 00007fbb7b225fa0 R15: 00007fff2b45ab28 [ 73.770901][ T7261] [ 73.819068][ T7288] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 73.978295][ T43] audit: type=1400 audit(1793336030.495:557): avc: denied { getopt } for pid=7292 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.700428][ T7283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.770121][ T7303] qnx4: no qnx4 filesystem (no root dir). [ 76.793461][ T7303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.033044][ T7322] evm: overlay not supported [ 77.054047][ T7322] Process accounting resumed [ 77.090121][ T7325] device-mapper: ioctl: populate_table: next target spec (offset 188) overlaps 'struct dm_ioctl' [ 77.114385][ T7327] input: syz0 as /devices/virtual/input/input9 [ 77.212318][ T7339] No buffer was provided with the request [ 77.212383][ T7340] No buffer was provided with the request [ 77.214001][ T7339] nbd: couldn't find a device at index -2130444284 [ 77.309787][ T7344] FAULT_INJECTION: forcing a failure. [ 77.309787][ T7344] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.309817][ T7344] CPU: 2 UID: 0 PID: 7344 Comm: syz.0.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.309844][ T7344] Tainted: [L]=SOFTLOCKUP [ 77.309850][ T7344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.309861][ T7344] Call Trace: [ 77.309867][ T7344] [ 77.309875][ T7344] dump_stack_lvl+0x100/0x190 [ 77.309917][ T7344] should_fail_ex.cold+0x5/0xa [ 77.309948][ T7344] should_fail_alloc_page+0xeb/0x140 [ 77.309972][ T7344] prepare_alloc_pages+0x1f0/0x5b0 [ 77.309997][ T7344] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 77.310027][ T7344] ? update_cfs_rq_load_avg+0x51/0x550 [ 77.310063][ T7344] ? lock_acquire+0x1d1/0x380 [ 77.310091][ T7344] ? finish_task_switch.isra.0+0x149/0x10d0 [ 77.310115][ T7344] ? find_held_lock+0x2b/0x80 [ 77.310135][ T7344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.310162][ T7344] ? rcu_is_watching+0x13/0xc0 [ 77.310181][ T7344] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 77.310209][ T7344] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.310226][ T7344] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 77.310252][ T7344] ? rcu_is_watching+0x13/0xc0 [ 77.310272][ T7344] ? trace_sched_exit_tp+0x120/0x160 [ 77.310305][ T7344] ? __schedule+0x1270/0x6990 [ 77.310342][ T7344] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.310370][ T7344] ? policy_nodemask+0xed/0x5e0 [ 77.310393][ T7344] alloc_pages_mpol+0x201/0x560 [ 77.310419][ T7344] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.310435][ T7344] ? preempt_schedule_thunk+0x16/0x40 [ 77.310459][ T7344] ? preempt_schedule+0x57/0xd0 [ 77.310488][ T7344] folio_alloc_mpol_noprof+0x36/0x260 [ 77.310515][ T7344] vma_alloc_folio_noprof+0xed/0x1d0 [ 77.310537][ T7344] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 77.310567][ T7344] do_anonymous_page+0xac9/0x2050 [ 77.310595][ T7344] ? __pfx_do_anonymous_page+0x10/0x10 [ 77.310622][ T7344] ? rcu_read_unlock+0x2d/0xb0 [ 77.310642][ T7344] ? rcu_read_unlock+0x2d/0xb0 [ 77.310669][ T7344] __handle_mm_fault+0x1ff3/0x2f60 [ 77.310695][ T7344] ? lock_vma_under_rcu+0x11d/0x590 [ 77.310722][ T7344] ? __pfx___handle_mm_fault+0x10/0x10 [ 77.310743][ T7344] ? lock_vma_under_rcu+0x17c/0x590 [ 77.310784][ T7344] handle_mm_fault+0x363/0xa20 [ 77.310814][ T7344] do_user_addr_fault+0x59c/0x12f0 [ 77.310866][ T7344] exc_page_fault+0x6f/0xd0 [ 77.310894][ T7344] asm_exc_page_fault+0x26/0x30 [ 77.310911][ T7344] RIP: 0033:0x7ffb4106082b [ 77.310929][ T7344] Code: 00 00 00 48 8d 3d 3d b0 1a 00 48 89 c1 31 c0 e8 8b 2d ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 b0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 77.310946][ T7344] RSP: 002b:00007ffb42063fa0 EFLAGS: 00010206 [ 77.310963][ T7344] RAX: 0000000000000000 RBX: 00007ffb41425fa0 RCX: 0000000000000000 [ 77.310975][ T7344] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000ac0 [ 77.310988][ T7344] RBP: 00007ffb41236b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.311000][ T7344] R10: 0000200000000ac0 R11: 0000000000000000 R12: 0000000000000000 [ 77.311011][ T7344] R13: 00007ffb41426038 R14: 00007ffb41425fa0 R15: 00007ffdcb942d78 [ 77.311038][ T7344] [ 77.311245][ T7344] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 77.313598][ T7346] ip_tables: iptables: counters copy to user failed while replacing table [ 77.497525][ T7371] xt_ipcomp: unknown flags 1D [ 77.507729][ T7373] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 77.544282][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.547150][ T7377] FAULT_INJECTION: forcing a failure. [ 77.547150][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 77.547169][ T7377] CPU: 3 UID: 0 PID: 7377 Comm: syz.3.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.547183][ T7377] Tainted: [L]=SOFTLOCKUP [ 77.547187][ T7377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.547194][ T7377] Call Trace: [ 77.547197][ T7377] [ 77.547202][ T7377] dump_stack_lvl+0x100/0x190 [ 77.547224][ T7377] should_fail_ex.cold+0x5/0xa [ 77.547241][ T7377] should_failslab+0xc2/0x120 [ 77.547260][ T7377] __kmalloc_noprof+0xfc/0x840 [ 77.547277][ T7377] ? lsm_blob_alloc+0x68/0x90 [ 77.547293][ T7377] lsm_blob_alloc+0x68/0x90 [ 77.547306][ T7377] security_key_alloc+0x34/0x310 [ 77.547324][ T7377] key_alloc+0x876/0x1310 [ 77.547363][ T7377] ? __pfx_key_alloc+0x10/0x10 [ 77.547382][ T7377] ? bpf_lsm_key_permission+0x9/0x10 [ 77.547398][ T7377] ? security_key_permission+0x7b/0x230 [ 77.547418][ T7377] __key_create_or_update+0x702/0xe10 [ 77.547437][ T7377] ? __pfx___key_create_or_update+0x10/0x10 [ 77.547455][ T7377] ? lookup_user_key+0x58c/0x14f0 [ 77.547472][ T7377] ? __lock_acquire+0x5c0/0x1f40 [ 77.547486][ T7377] ? __pfx_lookup_user_key+0x10/0x10 [ 77.547509][ T7377] ? __pfx_keyring_search_iterator+0x10/0x10 [ 77.547523][ T7377] key_create_or_update+0x42/0x60 [ 77.547541][ T7377] __do_sys_add_key+0x2e8/0x460 [ 77.547555][ T7377] ? __pfx___do_sys_add_key+0x10/0x10 [ 77.547572][ T7377] do_syscall_64+0x123/0x790 [ 77.547585][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.547596][ T7377] RIP: 0033:0x7fbb7af9f559 [ 77.547606][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.547615][ T7377] RSP: 002b:00007fbb7be37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 77.547626][ T7377] RAX: ffffffffffffffda RBX: 00007fbb7b225fa0 RCX: 00007fbb7af9f559 [ 77.547635][ T7377] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000200000000340 [ 77.547641][ T7377] RBP: 00007fbb7b036b20 R08: 0000000002e1da4d R09: 0000000000000000 [ 77.547647][ T7377] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 77.547653][ T7377] R13: 00007fbb7b226038 R14: 00007fbb7b225fa0 R15: 00007fff2b45ab28 [ 77.547667][ T7377] [ 77.553687][ T7373] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 77.579710][ T7379] __nla_validate_parse: 28 callbacks suppressed [ 77.579721][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 77.692315][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 77.692338][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 77.705523][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 77.705543][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 77.710812][ T5664] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.710852][ T5664] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.710879][ T5664] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.710906][ T5664] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.764397][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 77.764416][ T43] audit: type=1400 audit(1793336034.285:575): avc: denied { read } for pid=7398 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.774545][ T7399] ip6gretap0: entered promiscuous mode [ 77.787754][ T7401] WARNING! power/level is deprecated; use power/control instead [ 77.821700][ T43] audit: type=1400 audit(1793336034.345:576): avc: denied { write } for pid=7402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.858318][ T43] audit: type=1400 audit(1793336034.375:577): avc: denied { map } for pid=7410 comm="syz.1.382" path="socket:[18846]" dev="sockfs" ino=18846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.880581][ T43] audit: type=1400 audit(1793336034.405:578): avc: denied { write } for pid=7409 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.975520][ T7419] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 77.977833][ T43] audit: type=1400 audit(2000000000.040:579): avc: denied { write } for pid=7415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.038413][ T43] audit: type=1400 audit(2000000000.100:580): avc: denied { execute } for pid=7424 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.038443][ T43] audit: type=1400 audit(2000000000.100:581): avc: denied { execute_no_trans } for pid=7424 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.080619][ T43] audit: type=1400 audit(2000000000.150:582): avc: denied { write } for pid=7423 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.082673][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.387'. [ 78.090632][ T7426] IPVS: ip_vs_add_dest(): server weight less than zero [ 78.091418][ T7426] netlink: zone id is out of range [ 78.091450][ T7426] netlink: zone id is out of range [ 78.091454][ T7426] netlink: zone id is out of range [ 78.091458][ T7426] netlink: zone id is out of range [ 78.091461][ T7426] netlink: zone id is out of range [ 78.092942][ T223] IPVS: starting estimator thread 0... [ 78.104310][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 78.104823][ T7426] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 78.189003][ T7427] IPVS: using max 46 ests per chain, 110400 per kthread [ 78.202836][ T43] audit: type=1400 audit(2000000000.270:583): avc: denied { mounton } for pid=7435 comm="syz.1.389" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 78.202962][ T7436] kAFS: No cell specified [ 78.213107][ T43] audit: type=1400 audit(2000000000.270:584): avc: denied { write } for pid=7432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.247648][ T7440] netlink: 'syz.1.390': attribute type 8 has an invalid length. [ 78.698209][ T7453] syz_tun: entered allmulticast mode [ 78.730181][ T7452] syz_tun: left allmulticast mode [ 79.209036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.289981][ T5800] Bluetooth: hci0: command 0x040f tx timeout [ 79.291573][ T42] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.291592][ T42] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 79.451887][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 79.452587][ T7476] IPVS: ip_vs_add_dest(): server weight less than zero [ 79.684327][ T7483] PM: Enabling pm_trace changes system date and time during resume. [ 79.684327][ T7483] PM: Correct system time has to be restored manually after resume. [ 79.889428][ T7491] syzkaller0: entered promiscuous mode [ 79.889454][ T7491] syzkaller0: entered allmulticast mode [ 80.726554][ T7499] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 80.726574][ T7499] CIFS mount error: No usable UNC path provided in device string! [ 80.726574][ T7499] [ 80.729418][ T7499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 80.732890][ T7499] CIFS mount error: No usable UNC path provided in device string! [ 80.732890][ T7499] [ 80.732907][ T7499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.369367][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.369500][ T42] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 81.369515][ T42] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 81.401101][ T7526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=7526 comm=syz.1.409 [ 81.407000][ T7528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=7528 comm=syz.1.409 [ 81.481636][ T7527] PM: Enabling pm_trace changes system date and time during resume. [ 81.481636][ T7527] PM: Correct system time has to be restored manually after resume. [ 81.487783][ T7534] nbd0: detected capacity change from 0 to 1 [ 81.492743][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492779][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492822][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492855][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492876][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492887][ T6152] ldm_validate_partition_table(): Disk read failed. [ 81.492906][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492927][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492947][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492968][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.492979][ T6152] Dev nbd0: unable to read RDB block 0 [ 81.492996][ T6152] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.493031][ T6152] nbd0: unable to read partition table [ 81.493271][ T6152] nbd0: partition table beyond EOD, truncated [ 81.524777][ T69] block nbd0: Receive control failed (result -32) [ 81.618058][ T7540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.644449][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.646493][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.648005][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.648759][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.651366][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.688084][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.692583][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.695020][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.695455][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.695783][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.795603][ T7550] netlink: 'syz.1.415': attribute type 32 has an invalid length. [ 81.795627][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 81.906788][ T7568] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 81.922965][ T7568] bond2: entered promiscuous mode [ 81.923191][ T7568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.923632][ T7429] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.934684][ T7568] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.934700][ T7568] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 81.934708][ T7568] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 81.981796][ T7580] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.981812][ T7580] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 82.025292][ T7582] Bluetooth: hci0: unsupported parameter 5161 [ 82.025313][ T7582] Bluetooth: hci0: unsupported parameter 8192 [ 82.025324][ T7582] Bluetooth: hci0: unsupported parameter 5161 [ 82.025335][ T7582] Bluetooth: hci0: unsupported parameter 8192 [ 82.133983][ T7595] netlink: 42 bytes leftover after parsing attributes in process `syz.1.424'. [ 82.196350][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.196485][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.196579][ T7429] bridge_slave_0: entered allmulticast mode [ 82.197928][ T7429] bridge_slave_0: entered promiscuous mode [ 82.199936][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.199978][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.200036][ T7429] bridge_slave_1: entered allmulticast mode [ 82.200690][ T7429] bridge_slave_1: entered promiscuous mode [ 82.220586][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.222185][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.239642][ T7429] team0: Port device team_slave_0 added [ 82.241026][ T7429] team0: Port device team_slave_1 added [ 82.252755][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.252765][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.252778][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.272408][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.272419][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.272433][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.299706][ T7429] hsr_slave_0: entered promiscuous mode [ 82.300144][ T7429] hsr_slave_1: entered promiscuous mode [ 82.300457][ T7429] debugfs: 'hsr0' already exists in 'hsr' [ 82.300468][ T7429] Cannot create hsr debugfs directory [ 82.337617][ T7606] IPv6: sit1: Disabled Multicast RS [ 82.338294][ T7606] sit1: entered allmulticast mode [ 82.442082][ T7429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.444032][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.444542][ T7429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.445964][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.446586][ T7429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.450475][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.451132][ T7429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.455899][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.496243][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.504206][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.507061][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.507107][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.512593][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.512638][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.730012][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.824963][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 82.824975][ T43] audit: type=1400 audit(2000000004.890:599): avc: denied { block_suspend } for pid=7638 comm="syz.0.431" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.882054][ T7429] veth0_vlan: entered promiscuous mode [ 82.885408][ T7429] veth1_vlan: entered promiscuous mode [ 82.905605][ T7429] veth0_macvtap: entered promiscuous mode [ 82.911653][ T7429] veth1_macvtap: entered promiscuous mode [ 82.922049][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.926228][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.949499][ T5664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949827][ T5664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949859][ T5664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949886][ T5664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987364][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.987385][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.004375][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.004395][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.023450][ T43] audit: type=1400 audit(2000000005.090:600): avc: denied { unmount } for pid=7429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.024681][ T43] audit: type=1400 audit(2000000005.090:601): avc: denied { mounton } for pid=7429 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.062811][ T43] audit: type=1400 audit(2000000005.130:602): avc: denied { mounton } for pid=7429 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.105358][ T43] audit: type=1400 audit(2000000005.170:603): avc: denied { mounton } for pid=7654 comm="syz.4.386" path="/0/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.170805][ T7660] mmap: syz.0.433 (7660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.237299][ T43] audit: type=1400 audit(2000000005.300:604): avc: denied { write } for pid=7662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.297975][ T43] audit: type=1400 audit(2000000005.360:605): avc: denied { write } for pid=7670 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.329924][ T7674] vivid-000: ================= START STATUS ================= [ 83.329952][ T7674] vivid-000: Test Pattern: 75% Colorbar [ 83.329964][ T7674] vivid-000: Fill Percentage of Frame: 100 [ 83.329975][ T7674] vivid-000: Horizontal Movement: No Movement [ 83.329985][ T7674] vivid-000: Vertical Movement: No Movement [ 83.329995][ T7674] vivid-000: OSD Text Mode: All [ 83.330004][ T7674] vivid-000: Show Border: false [ 83.330013][ T7674] vivid-000: Show Square: false [ 83.330022][ T7674] vivid-000: Sensor Flipped Horizontally: false [ 83.330031][ T7674] vivid-000: Sensor Flipped Vertically: false [ 83.330041][ T7674] vivid-000: Insert SAV Code in Image: false [ 83.330050][ T7674] vivid-000: Insert EAV Code in Image: false [ 83.330059][ T7674] vivid-000: Insert Video Guard Band: false [ 83.330069][ T7674] vivid-000: Reduced Framerate: false [ 83.330078][ T7674] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 83.330092][ T7674] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 83.330102][ T7674] vivid-000: Enable Capture Cropping: true [ 83.330111][ T7674] vivid-000: Enable Capture Composing: true [ 83.330121][ T7674] vivid-000: Enable Capture Scaler: true [ 83.330130][ T7674] vivid-000: Timestamp Source: End of Frame [ 83.330139][ T7674] vivid-000: Colorspace: SMPTE 170M [ 83.330149][ T7674] vivid-000: Transfer Function: Default [ 83.330158][ T7674] vivid-000: Y'CbCr Encoding: Default [ 83.330167][ T7674] vivid-000: HSV Encoding: Hue 0-179 [ 83.330176][ T7674] vivid-000: Quantization: Default [ 83.330190][ T7674] vivid-000: Apply Alpha To Red Only: false [ 83.330199][ T7674] vivid-000: Standard Aspect Ratio: 4x3 [ 83.330214][ T7674] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 83.330232][ T7674] vivid-000: DV Timings: 640x480p59 inactive [ 83.330251][ T7674] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 83.330261][ T7674] vivid-000: Maximum EDID Blocks: 2 [ 83.330270][ T7674] vivid-000: Limited RGB Range (16-235): false [ 83.330280][ T7674] vivid-000: Rx RGB Quantization Range: Automatic [ 83.330290][ T7674] vivid-000: Power Present: 0x00000001 [ 83.330300][ T7674] tpg source WxH: 720x576 (Y'CbCr) [ 83.330307][ T7674] tpg field: 4 [ 83.330310][ T7674] tpg crop: (0,0)/720x576 [ 83.330317][ T7674] tpg compose: (0,0)/720x576 [ 83.330323][ T7674] tpg colorspace: 1 [ 83.330327][ T7674] tpg transfer function: 0/0 [ 83.330332][ T7674] tpg Y'CbCr encoding: 0/0 [ 83.330337][ T7674] tpg quantization: 0/0 [ 83.330341][ T7674] tpg RGB range: 0/2 [ 83.330345][ T7674] vivid-000: ================== END STATUS ================== [ 83.356043][ T7680] __nla_validate_parse: 2 callbacks suppressed [ 83.356061][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 83.405610][ T43] audit: type=1400 audit(2000000005.470:606): avc: denied { create } for pid=7683 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.407072][ T7685] tmpfs: Bad value for 'mpol' [ 83.418222][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418315][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418392][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418475][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418550][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418668][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418747][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.418853][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.419060][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.419174][ T7688] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 83.421816][ T43] audit: type=1400 audit(2000000005.490:607): avc: denied { setopt } for pid=7683 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.435012][ T43] audit: type=1400 audit(2000000005.500:608): avc: denied { map } for pid=7683 comm="syz.1.438" path="socket:[20345]" dev="sockfs" ino=20345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.519267][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'. [ 83.700484][ T7707] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 83.736879][ T7711] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.781409][ T5802] Bluetooth: hci4: command tx timeout [ 83.788160][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 84.133734][ T7732] sit1: entered allmulticast mode [ 84.452988][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 84.518773][ T7747] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 84.556621][ T7749] net_ratelimit: 1 callbacks suppressed [ 84.556635][ T7749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.696929][ T7760] ACPI: Can not change Invalid GPE/Fixed Event status [ 84.727309][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 84.727869][ T7766] SELinux: policydb version -1596726554 does not match my version range 15-35 [ 84.727908][ T7766] SELinux: failed to load policy [ 84.796513][ T7777] Unknown options in mask 6 [ 84.889867][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 84.898675][ T7787] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 85.168988][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.319082][ T5946] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.329560][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 85.330518][ T10] usb 6-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.331572][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.333746][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.333761][ T10] usb 6-1: Product: syz [ 85.333772][ T10] usb 6-1: Manufacturer: syz [ 85.333783][ T10] usb 6-1: SerialNumber: syz [ 85.339857][ T10] usb 6-1: config 0 descriptor?? [ 85.342618][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.342635][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 85.479680][ T5946] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 85.481563][ T5946] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.481600][ T5946] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.481619][ T5946] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.483632][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.483652][ T5946] usb 9-1: Product: syz [ 85.483664][ T5946] usb 9-1: Manufacturer: syz [ 85.483676][ T5946] usb 9-1: SerialNumber: syz [ 85.503576][ T7806] SET target dimension over the limit! [ 85.632645][ T7811] 9p: Unknown Cache mode or invalid value fscacheý¨ [ 85.703625][ T5875] usb 9-1: USB disconnect, device number 2 [ 85.849100][ T5802] Bluetooth: hci4: command tx timeout [ 85.949030][ T10] em28xx 6-1:0.0: chip ID is em2874 [ 86.560719][ T7839] xt_nfacct: accounting object `syz0' does not exist [ 86.561135][ T5802] Bluetooth: Unexpected continuation frame (len 20) [ 86.564948][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.564991][ T10] em28xx 6-1:0.0: board has no eeprom [ 86.828970][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.828988][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 86.837059][ T5875] em28xx 6-1:0.0: Binding DVB extension [ 87.140833][ T7851] cgroup: noprefix used incorrectly [ 87.142251][ T7851] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 87.715242][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 87.715324][ T7858] openvswitch: netlink: Key type 12336 is out of range max 32 [ 87.715930][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 87.715942][ T7859] openvswitch: netlink: Key type 12336 is out of range max 32 [ 87.929216][ T5802] Bluetooth: hci4: command tx timeout [ 88.251009][ T7789] em28xx 6-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 88.291228][ T5875] em28xx 6-1:0.0: Registering input extension [ 88.339873][ T5875] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 88.339887][ T5875] Registered IR keymap rc-empty [ 88.344551][ T5875] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 88.345249][ T5875] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 88.357196][ T5875] em28xx 6-1:0.0: Input extension successfully initialized [ 88.371646][ T5946] usb 6-1: USB disconnect, device number 9 [ 88.375150][ T5946] em28xx 6-1:0.0: Disconnecting em28xx [ 88.375285][ T5946] em28xx 6-1:0.0: Closing input extension [ 88.405613][ T5946] em28xx: Freeing device [ 88.683960][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 88.683977][ T43] audit: type=1400 audit(2000000010.750:631): avc: denied { ioctl } for pid=7866 comm="syz.4.491" path="socket:[21991]" dev="sockfs" ino=21991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.727018][ T43] audit: type=1400 audit(2000000010.790:632): avc: denied { append } for pid=7870 comm="syz.4.492" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.727399][ T7871] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.727422][ T7871] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.804416][ T7876] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 88.832506][ T7876] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70000 [ 88.832534][ T7876] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 88.832561][ T7876] raw: 00fff00000002000 ffffea0001c00008 ffffea0001c00008 0000000000000000 [ 88.832577][ T7876] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 88.832588][ T7876] page dumped because: unmovable page [ 88.832650][ T7876] page_owner info is not present (never set?) [ 88.833830][ T43] audit: type=1400 audit(2000000010.900:633): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.835517][ T43] audit: type=1400 audit(2000000010.900:634): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.835559][ T43] audit: type=1400 audit(2000000010.900:635): avc: denied { write search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.835593][ T43] audit: type=1400 audit(2000000010.900:636): avc: denied { add_name } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.835625][ T43] audit: type=1400 audit(2000000010.900:637): avc: denied { create } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.835655][ T43] audit: type=1400 audit(2000000010.900:638): avc: denied { append open } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.836101][ T43] audit: type=1400 audit(2000000010.900:639): avc: denied { getattr } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.903471][ T7843] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.486'. [ 88.943043][ T43] audit: type=1400 audit(2000000011.010:640): avc: denied { ioctl } for pid=7881 comm="syz.1.496" path="pid:[4026532867]" dev="nsfs" ino=4026532867 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.024810][ T7887] validate_nla: 23 callbacks suppressed [ 89.024823][ T7887] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 89.035949][ T7887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.046956][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 89.047156][ T7887] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 89.047167][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 89.047389][ T7887] dummy0: entered promiscuous mode [ 89.085186][ T7891] deleting an unspecified loop device is not supported. [ 89.254846][ T7923] dummy0: left promiscuous mode [ 89.256164][ T7923] batman_adv: batadv0: Adding interface: dummy0 [ 89.256182][ T7923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.256250][ T7923] batman_adv: batadv0: Interface activated: dummy0 [ 89.320660][ T7924] batadv0: mtu less than device minimum [ 89.321278][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.321760][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.322273][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.322798][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.323274][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.323753][ T7924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.428958][ T5946] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.591410][ T5946] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 89.592246][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.592269][ T5946] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.592283][ T5946] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 89.592295][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 89.592315][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.595685][ T7917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.595773][ T7917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.598162][ T5946] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 89.599189][ T5946] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 89.599226][ T5946] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 89.609687][ T5946] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 89.612115][ T5946] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 89.612152][ T5946] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 89.616429][ T5946] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 89.830635][ T5946] usb 5-1: USB disconnect, device number 7 [ 89.836235][ T5946] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 89.838526][ T5946] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 89.842388][ T5946] keyspan 5-1:1.0: device disconnected [ 89.870381][ T7952] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 89.873349][ T7952] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 89.876646][ T7952] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 89.876664][ T7952] netlink: 1 bytes leftover after parsing attributes in process `syz.1.513'. [ 90.019223][ T5802] Bluetooth: hci4: command tx timeout [ 90.048978][ T5900] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 90.219785][ T5900] usb 9-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 90.220786][ T5900] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.220810][ T5900] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 90.220827][ T5900] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.221216][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.224202][ T7961] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 90.224296][ T7961] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 90.225986][ T5900] pl2303 9-1:1.0: pl2303 converter detected [ 90.229851][ T5900] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 90.378064][ T7991] fuse: Bad value for 'user_id' [ 90.378084][ T7991] fuse: Bad value for 'user_id' [ 90.489745][ T8000] overlay: ./file0/file1 is not a directory [ 90.492444][ T8003] FAULT_INJECTION: forcing a failure. [ 90.492444][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 90.492474][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: syz.0.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.492491][ T8003] Tainted: [L]=SOFTLOCKUP [ 90.492496][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.492503][ T8003] Call Trace: [ 90.492522][ T8003] [ 90.492539][ T8003] dump_stack_lvl+0x100/0x190 [ 90.492576][ T8003] should_fail_ex.cold+0x5/0xa [ 90.492606][ T8003] should_failslab+0xc2/0x120 [ 90.492619][ T8003] kmem_cache_alloc_noprof+0x92/0x6a0 [ 90.492636][ T8003] ? vm_area_dup+0x27/0x9d0 [ 90.492650][ T8003] vm_area_dup+0x27/0x9d0 [ 90.492661][ T8003] dup_mmap+0x72d/0x23e0 [ 90.492679][ T8003] ? __pfx_dup_mmap+0x10/0x10 [ 90.492689][ T8003] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.492708][ T8003] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.492726][ T8003] ? __lock_acquire+0x5c0/0x1f40 [ 90.492746][ T8003] ? lock_acquire+0x1d1/0x380 [ 90.492759][ T8003] ? copy_process+0x79fc/0x84c0 [ 90.492784][ T8003] copy_process+0x7a07/0x84c0 [ 90.492804][ T8003] ? __pfx_copy_process+0x10/0x10 [ 90.492817][ T8003] ? futex_wake+0x4ea/0x5e0 [ 90.492837][ T8003] kernel_clone+0x176/0x9d0 [ 90.492852][ T8003] ? __pfx_kernel_clone+0x10/0x10 [ 90.492869][ T8003] ? ksys_write+0x190/0x250 [ 90.492884][ T8003] __do_sys_clone+0xd9/0x120 [ 90.492898][ T8003] ? __pfx___do_sys_clone+0x10/0x10 [ 90.492910][ T8003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.492929][ T8003] ? ksys_write+0x1ac/0x250 [ 90.492938][ T8003] ? __pfx_ksys_write+0x10/0x10 [ 90.492952][ T8003] do_syscall_64+0x123/0x790 [ 90.492964][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.492975][ T8003] RIP: 0033:0x7ffb4119f559 [ 90.492984][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.492994][ T8003] RSP: 002b:00007ffb42064fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 90.493036][ T8003] RAX: ffffffffffffffda RBX: 00007ffb41425fa0 RCX: 00007ffb4119f559 [ 90.493048][ T8003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 90.493059][ T8003] RBP: 00007ffb41236b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.493070][ T8003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.493080][ T8003] R13: 00007ffb41426038 R14: 00007ffb41425fa0 R15: 00007ffdcb942d78 [ 90.493103][ T8003] [ 90.540435][ T8006] netlink: 'syz.0.521': attribute type 20 has an invalid length. [ 90.540494][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 90.552507][ T8006] netlink: 'syz.0.521': attribute type 20 has an invalid length. [ 90.552891][ T7961] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 90.553206][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 90.553411][ T7961] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 90.553634][ T7961] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 90.554109][ T7961] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 90.555041][ T7961] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 90.569602][ T5879] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.569810][ T5879] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.569963][ T5879] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.570523][ T5879] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.830516][ T7961] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 90.831876][ T7961] pl2303 ttyUSB0: error sending break = -32 [ 90.837339][ T5900] usb 9-1: USB disconnect, device number 3 [ 90.844285][ T5900] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 90.844596][ T5900] pl2303 9-1:1.0: device disconnected [ 90.899208][ T8018] kAFS: unable to lookup cell '(,c¾Ì' [ 90.912789][ T8022] syz.1.525 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.916021][ T8018] net_ratelimit: 13 callbacks suppressed [ 90.916036][ T8018] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 92.512438][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'. [ 92.553834][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.556495][ T8057] bridge_slave_1: left allmulticast mode [ 92.556516][ T8057] bridge_slave_1: left promiscuous mode [ 92.556683][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.787366][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 92.787389][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 92.804909][ T8073] block2mtd: illegal erase size [ 92.809533][ T5664] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 347 - 0 [ 92.809558][ T5664] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 347 - 0 [ 92.809575][ T5664] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 347 - 0 [ 92.809591][ T5664] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 347 - 0 [ 92.888453][ T8075] loop2: detected capacity change from 0 to 7 [ 92.895259][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.895298][ C0] buffer_io_error: 18 callbacks suppressed [ 92.895305][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.896524][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.896569][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.898662][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.898697][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.899401][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.899444][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.911793][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.911856][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.911988][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.912043][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.912190][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.912243][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.912276][ T8075] ldm_validate_partition_table(): Disk read failed. [ 92.912347][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.912399][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.912484][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.912535][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.912617][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. prio class 2 [ 92.912668][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.912804][ T8075] Dev loop2: unable to read RDB block 0 [ 92.913310][ T8075] loop2: unable to read partition table [ 92.913518][ T8075] loop2: partition table beyond EOD, truncated [ 92.913560][ T8075] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 93.220202][ T8104] batman_adv: batadv0: adding TT local entry ba:bb:cc:dd:ee:ff to non-existent VLAN 3893 [ 93.523870][ T8125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.585281][ T8129] Falling back ldisc for ttyS3. [ 93.609728][ T8119] md: invalid raid superblock magic on ram0 [ 93.609740][ T8119] md: ram0 does not have a valid v0.0 superblock, not importing! [ 93.609785][ T8119] md: md_import_device returned -22 [ 93.649885][ T8119] md: invalid raid superblock magic on ram1 [ 93.649902][ T8119] md: ram1 does not have a valid v0.0 superblock, not importing! [ 93.649946][ T8119] md: md_import_device returned -22 [ 93.650593][ T8119] md: md0 stopped. [ 93.688520][ T8140] sctp: [Deprecated]: syz.0.564 (pid 8140) Use of int in maxseg socket option. [ 93.688520][ T8140] Use struct sctp_assoc_value instead [ 93.711796][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 93.711812][ T43] audit: type=1400 audit(2000000015.780:669): avc: denied { mount } for pid=8141 comm="syz.4.565" name="/" dev="hugetlbfs" ino=22901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.712506][ T43] audit: type=1400 audit(2000000015.780:670): avc: denied { remount } for pid=8141 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.712591][ T8142] hugetlbfs: Bad value '%' for mount option 'size' [ 93.712591][ T8142] [ 93.720230][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 93.745784][ T8143] Invalid source name [ 93.745799][ T8143] UBIFS error (pid: 8143): cannot open "./file0", error -22 [ 93.747354][ T8146] sctp: [Deprecated]: syz.0.564 (pid 8146) Use of int in maxseg socket option. [ 93.747354][ T8146] Use struct sctp_assoc_value instead [ 93.748805][ T8145] Invalid source name [ 93.748814][ T8145] UBIFS error (pid: 8145): cannot open "./file0", error -22 [ 93.763689][ T43] audit: type=1400 audit(2000000015.840:671): avc: denied { unmount } for pid=7429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.794207][ T43] audit: type=1400 audit(2000000015.860:672): avc: denied { setopt } for pid=8151 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.897473][ T43] audit: type=1400 audit(2000000015.960:673): avc: denied { mount } for pid=8152 comm="syz.4.567" name="/" dev="rpc_pipefs" ino=21492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 93.910709][ T8163] TC_ACT_REPEAT abuse ? [ 93.910759][ T8163] TC_ACT_REPEAT abuse ? [ 93.910795][ T8163] TC_ACT_REPEAT abuse ? [ 93.910920][ T8163] TC_ACT_REPEAT abuse ? [ 93.910957][ T8163] TC_ACT_REPEAT abuse ? [ 93.910992][ T8163] TC_ACT_REPEAT abuse ? [ 93.911027][ T8163] TC_ACT_REPEAT abuse ? [ 93.911062][ T8163] TC_ACT_REPEAT abuse ? [ 93.953125][ T43] audit: type=1400 audit(2000000016.020:674): avc: denied { unmount } for pid=7429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 93.993503][ T43] audit: type=1400 audit(2000000016.060:675): avc: denied { bind } for pid=8167 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.057828][ T8173] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 94.058313][ T8171] IPVS: stopping master sync thread 8173 ... [ 94.135131][ T43] audit: type=1400 audit(2000000016.200:676): avc: denied { write } for pid=8176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.135168][ T43] audit: type=1400 audit(2000000016.200:677): avc: denied { create } for pid=8176 comm="dhcpcd-run-hook" name=7265736F6C762E636F6E662ED72E697076346C6C scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.135197][ T43] audit: type=1400 audit(2000000016.200:678): avc: denied { write open } for pid=8176 comm="dhcpcd-run-hook" path=2F72756E2F6468637063642F686F6F6B2D73746174652F7265736F6C762E636F6E662ED72E697076346C6C dev="tmpfs" ino=2729 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.204666][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 94.204686][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 94.277767][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 94.278703][ T8192] FAULT_INJECTION: forcing a failure. [ 94.278703][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 94.278727][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.4.576 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 94.278754][ T8192] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 94.278760][ T8192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.278771][ T8192] Call Trace: [ 94.278797][ T8192] [ 94.278805][ T8192] dump_stack_lvl+0x100/0x190 [ 94.278877][ T8192] should_fail_ex.cold+0x5/0xa [ 94.278924][ T8192] should_failslab+0xc2/0x120 [ 94.278948][ T8192] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 94.278972][ T8192] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 94.278996][ T8192] ? rcu_is_watching+0x13/0xc0 [ 94.279014][ T8192] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 94.279047][ T8192] krealloc_node_align_noprof+0x1f9/0x3e0 [ 94.279075][ T8192] snd_pcm_hw_rule_add+0x3b3/0x510 [ 94.279100][ T8192] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 94.279125][ T8192] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 94.279146][ T8192] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 94.279171][ T8192] ? mutex_init_lockdep+0xf1/0x120 [ 94.279195][ T8192] ? snd_pcm_attach_substream+0x287/0xd20 [ 94.279221][ T8192] snd_pcm_open_substream+0x942/0x1850 [ 94.279241][ T8192] ? kasan_enable_current+0x20/0x20 [ 94.279266][ T8192] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 94.279284][ T8192] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 94.279306][ T8192] ? snd_pcm_oss_open+0x5c5/0x1400 [ 94.279335][ T8192] snd_pcm_oss_open+0x715/0x1400 [ 94.279369][ T8192] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 94.279397][ T8192] ? __pfx_default_wake_function+0x10/0x10 [ 94.279421][ T8192] ? __lock_acquire+0x5c0/0x1f40 [ 94.279449][ T8192] ? do_raw_spin_lock+0x128/0x260 [ 94.279465][ T8192] ? soundcore_open+0x231/0x5a0 [ 94.279490][ T8192] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 94.279516][ T8192] soundcore_open+0x2e3/0x5a0 [ 94.279541][ T8192] ? __pfx_soundcore_open+0x10/0x10 [ 94.279564][ T8192] chrdev_open+0x234/0x6a0 [ 94.279582][ T8192] ? __pfx_chrdev_open+0x10/0x10 [ 94.279603][ T8192] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 94.279642][ T8192] do_dentry_open+0x674/0x1470 [ 94.279660][ T8192] ? __pfx_chrdev_open+0x10/0x10 [ 94.279684][ T8192] vfs_open_consume+0xcc/0x460 [ 94.279710][ T8192] path_openat+0x1547/0x23f0 [ 94.279733][ T8192] ? __pfx_path_openat+0x10/0x10 [ 94.279761][ T8192] do_file_open+0x20e/0x430 [ 94.279781][ T8192] ? __pfx_do_file_open+0x10/0x10 [ 94.279817][ T8192] ? _raw_spin_unlock+0x28/0x50 [ 94.279849][ T8192] ? alloc_fd+0x471/0x7a0 [ 94.279880][ T8192] do_sys_openat2+0x163/0x1d0 [ 94.279902][ T8192] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.279926][ T8192] ? lock_acquire+0x1d1/0x380 [ 94.279947][ T8192] ? fd_install+0xa2/0x580 [ 94.279972][ T8192] __x64_sys_openat+0x12d/0x210 [ 94.279994][ T8192] ? __pfx___x64_sys_openat+0x10/0x10 [ 94.280024][ T8192] do_syscall_64+0x123/0x790 [ 94.280044][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.280062][ T8192] RIP: 0033:0x7fb08b79f559 [ 94.280077][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.280093][ T8192] RSP: 002b:00007fb08c68a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.280123][ T8192] RAX: ffffffffffffffda RBX: 00007fb08ba25fa0 RCX: 00007fb08b79f559 [ 94.280135][ T8192] RDX: 0000000000000000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 94.280147][ T8192] RBP: 00007fb08b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.280158][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.280169][ T8192] R13: 00007fb08ba26038 R14: 00007fb08ba25fa0 R15: 00007ffeabc18788 [ 94.280195][ T8192] [ 94.581340][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.638831][ T8213] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 94.638847][ T8213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.582'. [ 94.641473][ T8213] batadv0: entered promiscuous mode [ 94.641486][ T8213] batadv0: entered allmulticast mode [ 94.641936][ T8213] bridge0: port 3(batadv0) entered blocking state [ 94.642043][ T8213] bridge0: port 3(batadv0) entered disabled state [ 94.714440][ T8219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.579'. [ 94.980864][ T8231] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 94.980903][ T8231] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.981131][ T8231] vhci_hcd vhci_hcd.0: Device attached [ 94.984198][ T8231] trusted_key: encrypted_key: insufficient parameters specified [ 94.986448][ T8231] Could not find key with description: [syz] [ 94.986460][ T8231] process_request_key_err: No key [ 94.986467][ T8231] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 94.986477][ T8231] One or more global auth toks could not properly register; rc = [-2] [ 94.986514][ T8231] Error validating options; rc = [-2] [ 95.010865][ T8231] vhci_hcd vhci_hcd.0: port 0 already used [ 95.012213][ T8232] vhci_hcd: connection closed [ 95.013629][ T5664] vhci_hcd vhci_hcd.0: stop threads [ 95.013652][ T5664] vhci_hcd vhci_hcd.0: release socket [ 95.013668][ T5664] vhci_hcd vhci_hcd.0: disconnect device [ 95.422293][ T8248] xt_cgroup: invalid path, errno=-2 [ 95.422736][ T8248] netlink: 4236 bytes leftover after parsing attributes in process `syz.1.592'. [ 95.453515][ T8250] sctp: [Deprecated]: syz.4.593 (pid 8250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.453515][ T8250] Use struct sctp_sack_info instead [ 95.498296][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 95.499240][ T8256] No buffer was provided with the request [ 95.547068][ T8262] kvm: user requested TSC rate below hardware speed [ 95.551741][ T7363] IPVS: starting estimator thread 0... [ 95.554292][ T8271] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.593092][ T8274] syzkaller0: entered promiscuous mode [ 95.593112][ T8274] syzkaller0: entered allmulticast mode [ 95.649349][ T8268] IPVS: using max 45 ests per chain, 108000 per kthread [ 95.706334][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.605'. [ 95.815344][ T8294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.908258][ T8306] netlink: 172 bytes leftover after parsing attributes in process `syz.0.611'. [ 95.928640][ T8294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.929961][ T5944] net_ratelimit: 30 callbacks suppressed [ 95.929976][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.008591][ T8294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.132280][ T8317] ubi0: attaching mtd0 [ 96.138522][ T8317] ubi0: scanning is finished [ 96.138540][ T8317] ubi0: empty MTD device detected [ 96.280421][ T8309] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.289218][ T5879] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.299220][ T5879] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.348983][ T5879] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349027][ T5879] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.445517][ T8317] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 96.445547][ T8317] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 96.445564][ T8317] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 96.445578][ T8317] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 96.445594][ T8317] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 96.445608][ T8317] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 96.445623][ T8317] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4129090737 [ 96.445640][ T8317] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 96.446725][ T8328] ubi0: background thread "ubi_bgt0d" started, PID 8328 [ 96.453578][ T8320] ubi0: detaching mtd0 [ 96.458410][ T8320] ubi0: mtd0 is detached [ 97.523587][ T8339] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.622879][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 97.680560][ T8358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.697282][ T8361] geneve3: entered promiscuous mode [ 97.697304][ T8361] geneve3: entered allmulticast mode [ 97.702742][ T8361] sch_fq: defrate 4294967295 ignored. [ 97.709158][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.709206][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.709224][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.709241][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.225829][ T8366] --map-set only usable from mangle table [ 98.227438][ T8366] --map-set only usable from mangle table [ 98.275352][ T5946] sony 0005:054C:03D5.0005: UNIQ does not contain a MAC address; duplicate check skipped [ 98.321160][ T5946] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0005/input/input11 [ 98.350981][ T5946] sony 0005:054C:03D5.0005: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 98.412583][ T8371] fido_id[8371]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.624054][ T8387] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.645258][ T8392] syz_tun: entered allmulticast mode [ 98.651668][ T8392] pimreg: entered allmulticast mode [ 98.667039][ T8392] ceph: No source [ 98.670894][ T8391] syz_tun: left allmulticast mode [ 98.670946][ T8391] pimreg: left allmulticast mode [ 98.689055][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.689080][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.689097][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.699619][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.777318][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 98.777331][ T43] audit: type=1400 audit(2000000020.840:701): avc: denied { write } for pid=8401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.823275][ T8408] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 98.831475][ T43] audit: type=1400 audit(2000000020.900:702): avc: denied { write } for pid=8406 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.831946][ T8408] bond4: entered promiscuous mode [ 98.832141][ T8408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 98.853170][ T8412] vlan0: entered allmulticast mode [ 98.853183][ T8412] bond4: entered allmulticast mode [ 98.858679][ T8413] bond4: (slave bridge5): making interface the new active one [ 98.858698][ T8413] bridge5: entered promiscuous mode [ 98.858773][ T8413] bridge5: entered allmulticast mode [ 98.862474][ T8413] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 98.868950][ T1489] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.904151][ T43] audit: type=1400 audit(2000000020.970:703): avc: denied { write } for pid=8414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.905975][ T8421] Bluetooth: hci0: unsupported parameter 5161 [ 98.905992][ T8421] Bluetooth: hci0: unsupported parameter 8192 [ 98.906001][ T8421] Bluetooth: hci0: unsupported parameter 5161 [ 98.906011][ T8421] Bluetooth: hci0: unsupported parameter 8192 [ 98.910792][ T43] audit: type=1400 audit(2000000020.980:704): avc: denied { create } for pid=8420 comm="syz.3.639" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.911598][ T43] audit: type=1400 audit(2000000020.980:705): avc: denied { unlink } for pid=8420 comm="syz.3.639" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.911741][ T5944] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 98.954611][ T8425] FAULT_INJECTION: forcing a failure. [ 98.954611][ T8425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.954639][ T8425] CPU: 3 UID: 0 PID: 8425 Comm: syz.3.640 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 98.954657][ T8425] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 98.954661][ T8425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.954668][ T8425] Call Trace: [ 98.954679][ T8425] [ 98.954687][ T8425] dump_stack_lvl+0x100/0x190 [ 98.954724][ T8425] should_fail_ex.cold+0x5/0xa [ 98.954751][ T8425] should_fail_alloc_page+0xeb/0x140 [ 98.954769][ T8425] prepare_alloc_pages+0x1f0/0x5b0 [ 98.954783][ T8425] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 98.954799][ T8425] ? __pfx_get_page_from_freelist+0x10/0x10 [ 98.954814][ T8425] ? rcu_is_watching+0x13/0xc0 [ 98.954825][ T8425] ? trace_mm_page_alloc+0x164/0x1c0 [ 98.954837][ T8425] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 98.954854][ T8425] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.954872][ T8425] ? stack_trace_save+0x8e/0xc0 [ 98.954886][ T8425] ? __pfx_stack_trace_save+0x10/0x10 [ 98.954900][ T8425] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.954917][ T8425] ? __kasan_slab_alloc+0x89/0x90 [ 98.954927][ T8425] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 98.954941][ T8425] ? alloc_vmap_area+0x643/0x2bc0 [ 98.954956][ T8425] ? __get_vm_area_node+0x1ed/0x350 [ 98.954970][ T8425] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 98.954980][ T8425] ? vmalloc_user_noprof+0x9e/0xe0 [ 98.954990][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.955004][ T8425] ? __vb2_queue_alloc+0x8d5/0x1160 [ 98.955018][ T8425] ? vb2_core_reqbufs+0x899/0xf30 [ 98.955033][ T8425] ? vb2_ioctl_reqbufs+0x291/0x450 [ 98.955046][ T8425] ? v4l_reqbufs+0x175/0x1d0 [ 98.955056][ T8425] ? __video_do_ioctl+0xb2a/0xdf0 [ 98.955067][ T8425] ? video_usercopy+0x47a/0x1730 [ 98.955078][ T8425] ? v4l2_ioctl+0x1bd/0x250 [ 98.955095][ T8425] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 98.955113][ T8425] ? policy_nodemask+0xed/0x5e0 [ 98.955127][ T8425] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 98.955150][ T8425] __kasan_populate_vmalloc+0xf0/0x210 [ 98.955170][ T8425] alloc_vmap_area+0x963/0x2bc0 [ 98.955192][ T8425] ? kasan_save_track+0x14/0x30 [ 98.955202][ T8425] ? __kasan_kmalloc+0xaa/0xb0 [ 98.955217][ T8425] ? __pfx_alloc_vmap_area+0x10/0x10 [ 98.955233][ T8425] ? vb2_vmalloc_alloc+0xf9/0x410 [ 98.955242][ T8425] ? __get_vm_area_node+0x124/0x350 [ 98.955259][ T8425] __get_vm_area_node+0x1ed/0x350 [ 98.955278][ T8425] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 98.955294][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.955315][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.955334][ T8425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.955363][ T8425] ? __kasan_kmalloc+0xaa/0xb0 [ 98.955383][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.955394][ T8425] vmalloc_user_noprof+0x9e/0xe0 [ 98.955405][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.955416][ T8425] vb2_vmalloc_alloc+0x135/0x410 [ 98.955427][ T8425] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 98.955439][ T8425] __vb2_queue_alloc+0x8d5/0x1160 [ 98.955464][ T8425] vb2_core_reqbufs+0x899/0xf30 [ 98.955483][ T8425] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 98.955500][ T8425] ? trace_contention_end+0x126/0x160 [ 98.955516][ T8425] ? __mutex_lock+0x267/0x1c10 [ 98.955534][ T8425] ? avc_has_extended_perms+0x4a5/0x10b0 [ 98.955551][ T8425] vb2_ioctl_reqbufs+0x291/0x450 [ 98.955567][ T8425] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 98.955584][ T8425] ? check_fmt+0x230/0x900 [ 98.955596][ T8425] v4l_reqbufs+0x175/0x1d0 [ 98.955609][ T8425] __video_do_ioctl+0xb2a/0xdf0 [ 98.955624][ T8425] ? __might_fault+0xc5/0x140 [ 98.955636][ T8425] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.955653][ T8425] video_usercopy+0x47a/0x1730 [ 98.955667][ T8425] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.955681][ T8425] ? __pfx_video_usercopy+0x10/0x10 [ 98.955708][ T8425] v4l2_ioctl+0x1bd/0x250 [ 98.955721][ T8425] ? __pfx_v4l2_ioctl+0x10/0x10 [ 98.955735][ T8425] __x64_sys_ioctl+0x18e/0x210 [ 98.955754][ T8425] do_syscall_64+0x123/0x790 [ 98.955767][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.955778][ T8425] RIP: 0033:0x7fbb7af9f559 [ 98.955788][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.955798][ T8425] RSP: 002b:00007fbb7be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.955818][ T8425] RAX: ffffffffffffffda RBX: 00007fbb7b225fa0 RCX: 00007fbb7af9f559 [ 98.955826][ T8425] RDX: 0000200000000e40 RSI: 00000000c0145608 RDI: 0000000000000009 [ 98.955833][ T8425] RBP: 00007fbb7b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 98.955839][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.955846][ T8425] R13: 00007fbb7b226038 R14: 00007fbb7b225fa0 R15: 00007fff2b45ab28 [ 98.955861][ T8425] [ 98.957574][ T8425] syz.3.640: vmalloc error: size 921600, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.957663][ T8425] CPU: 3 UID: 0 PID: 8425 Comm: syz.3.640 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 98.957684][ T8425] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 98.957689][ T8425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.957695][ T8425] Call Trace: [ 98.957699][ T8425] [ 98.957704][ T8425] dump_stack_lvl+0x100/0x190 [ 98.957725][ T8425] warn_alloc.cold+0x9e/0xb2 [ 98.957745][ T8425] ? __pfx_warn_alloc+0x10/0x10 [ 98.957760][ T8425] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.957773][ T8425] ? __get_vm_area_node+0x2f0/0x350 [ 98.957794][ T8425] ? __get_vm_area_node+0x22b/0x350 [ 98.957813][ T8425] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 98.957830][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.957844][ T8425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.957857][ T8425] ? __kasan_kmalloc+0xaa/0xb0 [ 98.957875][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.957885][ T8425] vmalloc_user_noprof+0x9e/0xe0 [ 98.957895][ T8425] ? vb2_vmalloc_alloc+0x135/0x410 [ 98.957906][ T8425] vb2_vmalloc_alloc+0x135/0x410 [ 98.957915][ T8425] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 98.957927][ T8425] __vb2_queue_alloc+0x8d5/0x1160 [ 98.957949][ T8425] vb2_core_reqbufs+0x899/0xf30 [ 98.957967][ T8425] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 98.957983][ T8425] ? trace_contention_end+0x126/0x160 [ 98.957998][ T8425] ? __mutex_lock+0x267/0x1c10 [ 98.958010][ T8425] ? avc_has_extended_perms+0x4a5/0x10b0 [ 98.958026][ T8425] vb2_ioctl_reqbufs+0x291/0x450 [ 98.958041][ T8425] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 98.958057][ T8425] ? check_fmt+0x230/0x900 [ 98.958068][ T8425] v4l_reqbufs+0x175/0x1d0 [ 98.958080][ T8425] __video_do_ioctl+0xb2a/0xdf0 [ 98.958094][ T8425] ? __might_fault+0xc5/0x140 [ 98.958106][ T8425] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.958124][ T8425] video_usercopy+0x47a/0x1730 [ 98.958137][ T8425] ? __pfx___video_do_ioctl+0x10/0x10 [ 98.958151][ T8425] ? __pfx_video_usercopy+0x10/0x10 [ 98.958173][ T8425] v4l2_ioctl+0x1bd/0x250 [ 98.958186][ T8425] ? __pfx_v4l2_ioctl+0x10/0x10 [ 98.958200][ T8425] __x64_sys_ioctl+0x18e/0x210 [ 98.958217][ T8425] do_syscall_64+0x123/0x790 [ 98.958230][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.958240][ T8425] RIP: 0033:0x7fbb7af9f559 [ 98.958250][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.958259][ T8425] RSP: 002b:00007fbb7be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.958270][ T8425] RAX: ffffffffffffffda RBX: 00007fbb7b225fa0 RCX: 00007fbb7af9f559 [ 98.958276][ T8425] RDX: 0000200000000e40 RSI: 00000000c0145608 RDI: 0000000000000009 [ 98.958283][ T8425] RBP: 00007fbb7b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 98.958289][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.958295][ T8425] R13: 00007fbb7b226038 R14: 00007fbb7b225fa0 R15: 00007fff2b45ab28 [ 98.958309][ T8425] [ 98.958810][ T8425] Mem-Info: [ 98.958818][ T8425] active_anon:13256 inactive_anon:35 isolated_anon:0 [ 98.958818][ T8425] active_file:338 inactive_file:59012 isolated_file:0 [ 98.958818][ T8425] unevictable:3050 dirty:107 writeback:0 [ 98.958818][ T8425] slab_reclaimable:8224 slab_unreclaimable:76091 [ 98.958818][ T8425] mapped:25165 shmem:1572 pagetables:3756 [ 98.958818][ T8425] sec_pagetables:302 bounce:0 [ 98.958818][ T8425] kernel_misc_reclaimable:0 [ 98.958818][ T8425] free:410797 free_pcp:28771 free_cma:0 [ 98.958845][ T8425] Node 0 active_anon:53032kB inactive_anon:140kB active_file:1352kB inactive_file:214300kB unevictable:10200kB isolated(anon):0kB isolated(file):0kB mapped:100604kB dirty:424kB writeback:0kB shmem:4280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:15520kB pagetables:5952kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.960043][ T8425] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:21748kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:9072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.960074][ T8425] Node 0 DMA free:14828kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:28kB free_cma:0kB [ 98.960106][ T8425] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 98.960126][ T8425] Node 0 DMA32 free:78040kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53020kB inactive_anon:140kB active_file:1352kB inactive_file:214300kB unevictable:10200kB writepending:424kB zspages:0kB present:2080628kB managed:1230944kB mlocked:8200kB bounce:0kB free_pcp:36144kB local_pcp:7828kB free_cma:0kB [ 98.960157][ T8425] lowmem_reserve[]: 0 0 0 0 0 [ 98.960175][ T8425] Node 1 Normal free:1550320kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:21748kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:78752kB local_pcp:6148kB free_cma:0kB [ 98.960203][ T8425] lowmem_reserve[]: 0 0 0 0 0 [ 98.960219][ T8425] Node 0 DMA: 15*4kB (UME) 15*8kB (UME) 22*16kB (UME) 25*32kB (UME) 19*64kB (UME) 10*128kB (UME) 9*256kB (UME) 9*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 14836kB [ 98.960295][ T8425] Node 0 DMA32: 156*4kB (UME) 245*8kB (UME) 64*16kB (UME) 62*32kB (UME) 80*64kB (UME) 21*128kB (UME) 42*256kB (UME) 45*512kB (UME) 24*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 77912kB [ 98.960374][ T8425] Node 1 Normal: 15*4kB (M) 14*8kB (UME) 190*16kB (UME) 215*32kB (UM) 222*64kB (UM) 200*128kB (UME) 181*256kB (UME) 180*512kB (UME) 152*1024kB (UM) 5*2048kB (M) 292*4096kB (UM) = 1550316kB [ 98.960454][ T8425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.960463][ T8425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.960470][ T8425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.960477][ T8425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.960485][ T8425] 60918 total pagecache pages [ 98.960500][ T8425] 0 pages in swap cache [ 98.960504][ T8425] Free swap = 124996kB [ 98.960508][ T8425] Total swap = 124996kB [ 98.960512][ T8425] 1048443 pages RAM [ 98.960515][ T8425] 0 pages HighMem/MovableOnly [ 98.960519][ T8425] 291397 pages reserved [ 98.960522][ T8425] 0 pages cma reserved [ 98.965931][ T43] audit: type=1400 audit(2000000021.030:706): avc: denied { write } for pid=8424 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.982126][ T43] audit: type=1400 audit(2000000021.050:707): avc: denied { append } for pid=8426 comm="syz.1.641" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.985565][ T8428] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 98.985946][ T43] audit: type=1400 audit(2000000021.050:708): avc: denied { relabelto } for pid=8426 comm="syz.1.641" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crack_db_t:s0" [ 98.986332][ T43] audit: type=1400 audit(2000000021.050:709): avc: denied { associate } for pid=8426 comm="syz.1.641" name="control" dev="devtmpfs" ino=1289 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crack_db_t:s0" [ 99.029019][ T1489] usb 5-1: Using ep0 maxpacket: 8 [ 99.029541][ T1489] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.030413][ T1489] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 99.030437][ T1489] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.030449][ T1489] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.030462][ T1489] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.030474][ T1489] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.030494][ T1489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.071598][ T5944] usb 9-1: Using ep0 maxpacket: 32 [ 99.075659][ T5944] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.076131][ T5944] usb 9-1: config 0 has no interfaces? [ 99.077913][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.077925][ T5944] usb 9-1: Product: syz [ 99.077932][ T5944] usb 9-1: Manufacturer: syz [ 99.077940][ T5944] usb 9-1: SerialNumber: syz [ 99.079725][ T5944] usb 9-1: config 0 descriptor?? [ 99.137350][ T8439] netlink: 'syz.1.644': attribute type 7 has an invalid length. [ 99.137369][ T8439] netlink: 'syz.1.644': attribute type 8 has an invalid length. [ 99.142196][ T8439] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 99.146341][ T8439] geneve1: entered promiscuous mode [ 99.147885][ T8439] erspan0: entered promiscuous mode [ 99.235633][ T8385] 9p: Bad value for 'wfdno' [ 99.241091][ T43] audit: type=1400 audit(2000000021.310:710): avc: denied { module_load } for pid=8383 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.241189][ T8385] Invalid ELF header magic: != ELF [ 99.262954][ T1489] usb 5-1: usb_control_msg returned -71 [ 99.262978][ T1489] usbtmc 5-1:16.0: can't read capabilities [ 99.275904][ T1489] usb 5-1: USB disconnect, device number 8 [ 99.289655][ T5944] usb 9-1: USB disconnect, device number 4 [ 99.841167][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841253][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841303][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841352][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841403][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841452][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841501][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841550][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841604][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.841654][ T8447] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 99.976110][ T8468] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 100.068181][ T8471] program syz.4.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.086785][ T8473] __nla_validate_parse: 5 callbacks suppressed [ 100.086803][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 100.354408][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 101.264687][ T8495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.662'. [ 101.382862][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 101.420510][ T5944] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.494235][ C2] [ 101.495319][ C2] ============================= [ 101.497409][ C2] [ BUG: Invalid wait context ] [ 101.499468][ C2] syzkaller #0 Tainted: G L Y [ 101.502139][ C2] ----------------------------- [ 101.504189][ C2] swapper/2/0 is trying to lock: [ 101.506281][ C2] ffff88802cc39bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x255/0xd70 [ 101.510247][ C2] other info that might help us debug this: [ 101.512679][ C2] context-{2:2} [ 101.514184][ C2] locks held by swapper/2/0: 1, last CPU#2: [ 101.516438][ C2] #0: ffff88802cc3a118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 101.519568][ C2] stack backtrace: [ 101.520755][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 101.524997][ C2] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 101.527422][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.531621][ C2] Call Trace: [ 101.533080][ C2] [ 101.534313][ C2] dump_stack_lvl+0x100/0x190 [ 101.536261][ C2] __lock_acquire+0xfcc/0x1f40 [ 101.538213][ C2] ? xa_load+0x149/0x2c0 [ 101.539896][ C2] ? xa_load+0x149/0x2c0 [ 101.541665][ C2] lock_acquire+0x1d1/0x380 [ 101.543582][ C2] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 101.545963][ C2] _raw_read_lock_irqsave+0x46/0x90 [ 101.548138][ C2] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 101.550527][ C2] kvm_xen_set_evtchn_fast+0x255/0xd70 [ 101.552816][ C2] ? kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 101.555048][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 101.556919][ C2] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 101.558875][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.560771][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.563181][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 101.565539][ C2] xen_timer_callback+0x1db/0x2a0 [ 101.567663][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 101.568985][ T5944] usb 9-1: Using ep0 maxpacket: 32 [ 101.569482][ T5944] usb 9-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.570356][ T5944] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 101.570382][ T5944] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 101.570401][ T5944] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.570421][ T5944] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 101.572140][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.572157][ T5944] usb 9-1: Product: syz [ 101.572168][ T5944] usb 9-1: Manufacturer: syz [ 101.572180][ T5944] usb 9-1: SerialNumber: syz [ 101.575478][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 101.576074][ T5944] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input12 [ 101.609320][ C2] ? __hrtimer_run_queues+0x361/0x9a0 [ 101.611598][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.613788][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 101.616089][ C2] __hrtimer_run_queues+0x135/0x9a0 [ 101.618283][ C2] hrtimer_interrupt+0x441/0xaa0 [ 101.620263][ C2] __sysvec_apic_timer_interrupt+0x109/0x470 [ 101.622365][ C2] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 101.624167][ C2] [ 101.625282][ C2] [ 101.626377][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.628247][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 101.630565][ C2] Code: 27 a3 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 ad 1f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 101.638387][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000206 [ 101.640904][ C2] RAX: 00000000000d3f03 RBX: ffff8880206dcb00 RCX: ffffffff8bec1325 [ 101.644227][ C2] RDX: 0000000000000001 RSI: ffffffff8e62264f RDI: ffffffff8c833580 [ 101.647441][ C2] RBP: ffffed10040db960 R08: 0000000000000001 R09: ffffed100d446825 [ 101.650679][ C2] R10: ffff88806a23412b R11: 0000000000000001 R12: 0000000000000000 [ 101.653620][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 101.656066][ C2] ? ct_kernel_exit+0x125/0x180 [ 101.657601][ C2] default_idle+0x9/0x10 [ 101.659371][ C2] default_idle_call+0x6c/0xb0 [ 101.661388][ C2] do_idle+0x3ae/0x5b0 [ 101.663101][ C2] ? __pfx_do_idle+0x10/0x10 [ 101.665073][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 101.667535][ C2] cpu_startup_entry+0x4f/0x60 [ 101.669584][ C2] start_secondary+0x21d/0x2d0 [ 101.671612][ C2] ? __pfx_start_secondary+0x10/0x10 [ 101.673866][ C2] common_startup_64+0x13e/0x158 [ 101.675968][ C2] [ 101.788947][ T5944] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 101.788987][ T5944] (id 0x00) [ 101.838948][ T5944] rc_core: IR keymap rc-imon-pad not found [ 101.838961][ T5944] Registered IR keymap rc-empty [ 101.839040][ T5944] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 101.839052][ T5944] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.989401][ T5944] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 101.989766][ T5944] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input13 [ 101.991000][ T5944] imon 9-1:155.0: iMON device (15c2:ffdc) on usb<9:5> initialized [ 102.177497][ T8498] imon:display_open: display port is already open