last executing test programs: 7m18.686789777s ago: executing program 3 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080)=0x80000002, 0x4) (async) sendto$inet(r1, &(0x7f0000000240)="90", 0x1, 0x10, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0xfffffffffffffc56) 7m18.684741117s ago: executing program 3 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 7m18.61788483s ago: executing program 3 (id=100): socketpair$tipc(0x2d, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) gettimeofday(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0xc0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0, 0x9a6}}, [0xfffffffffffffff9, 0x2, 0xffffffffffffffff, 0x7fff, 0x5, 0x7, 0x100000000, 0xc, 0x7, 0xfffffffffffffff9, 0xffff, 0x0, 0x0, 0x7, 0x4]}, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7m17.69394887s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='-:mygroup/myevent ./d', 0x15) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) umount2(&(0x7f0000000180)='./trace\x00', 0x8) read$FUSE(r1, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3e, 0x1, @tid=r4}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_create(0x0, 0x0, &(0x7f0000000300)) timer_create(0x0, 0x0, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r6, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x1, 0x6, 0x7, 0x5, 0x9, r8}) setpgid(r4, r9) fchdir(r7) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 7m17.635391351s ago: executing program 3 (id=112): r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8bd4cec) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x321880, 0x0) read$FUSE(r2, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='add foosyz 127.0.0.1', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x840, 0x4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000040)=0xd, 0x4) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000440)=""/36, 0x24}], 0x1) 7m17.207356439s ago: executing program 3 (id=114): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x58) read(r7, &(0x7f0000000340)=""/203, 0xcb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x2c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x0, 0x6, 0x3, 0x6, 0xc, 0xfffffffffffffff0}, @generic={0x1, 0x5, 0xb, 0x9, 0xfffff801}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0xdd, 0x68, &(0x7f0000000800)=""/104, 0x41000, 0x41, '\x00', r8, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xa, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r3, r3, r3, r9, r3], 0x0, 0x10, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) (async) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setuid(0xee00) (async) setuid(0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r12, 0x200, 0x50bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0xf0ffff}, 0x200048c4) 7m17.137210264s ago: executing program 32 (id=114): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x58) read(r7, &(0x7f0000000340)=""/203, 0xcb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x2c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x0, 0x6, 0x3, 0x6, 0xc, 0xfffffffffffffff0}, @generic={0x1, 0x5, 0xb, 0x9, 0xfffff801}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0xdd, 0x68, &(0x7f0000000800)=""/104, 0x41000, 0x41, '\x00', r8, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xa, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r3, r3, r3, r9, r3], 0x0, 0x10, 0x8}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) (async) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setuid(0xee00) (async) setuid(0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r12, 0x200, 0x50bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0xf0ffff}, 0x200048c4) 6m24.247086886s ago: executing program 0 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20682) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x5, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0x0, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40015}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f00000006c0)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) sendmsg$nl_route(r8, &(0x7f0000000480)={&(0x7f0000000440), 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r12, 0x0) ppoll(&(0x7f0000000640)=[{r12, 0x68d}], 0x1, &(0x7f0000000680), 0x0, 0xfffffffffffffd45) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 6m24.026293165s ago: executing program 0 (id=471): setuid(0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x18, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x2004c000) ioctl$TCFLSH(r1, 0x400455c8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="620afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150006000000000007000000cc0ffff3bf01000000000000b702000004000000b7030000c7000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m23.587312016s ago: executing program 0 (id=476): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x70, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004005) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'pim6reg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x42, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2801, 0x20) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x10, @rand_addr=0x64010102}, 0x801, 0x0, 0x3, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000b00)}}], 0x1, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat(r3, &(0x7f0000000380)='./proc\x00', 0x0, 0xf0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000001900), 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000240)='./file0\x00', 0xa0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040), 0x0) 6m22.718378997s ago: executing program 0 (id=478): add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000680)="85000000005b8ab4e4469e7805bfdb3e3ee24fb1000000000000001b96121562c7e465", 0x23, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x54c02, 0x31) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x4, 0xa}, {0xa, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) getsockopt(r3, 0x9, 0x80000000, &(0x7f0000000500)=""/200, &(0x7f0000000600)=0xc8) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r5 = openat(r3, &(0x7f0000000380)='./dev/kmsg\x00', 0x0, 0x8) lseek(r5, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r6 = socket$rxrpc(0x21, 0x2, 0x2) listen(r6, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_ublk_setup_io_uring(0x4ef, &(0x7f0000000a80)={0x0, 0xabb8, 0x2, 0x3, 0x157, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 6m22.635351498s ago: executing program 0 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r1, 0x0, 0x0, 0x1}]) write(r0, &(0x7f0000000200)='2', 0x1) (async) write(r0, &(0x7f0000000200)='2', 0x1) 6m22.587173298s ago: executing program 0 (id=486): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000825000/0x1000)=nil}) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) (async) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 6m7.179444753s ago: executing program 33 (id=486): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000825000/0x1000)=nil}) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) (async) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 2m38.862215501s ago: executing program 5 (id=1096): syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 2m38.100604565s ago: executing program 5 (id=1098): syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0xc) 2m36.541747613s ago: executing program 5 (id=1102): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0xfffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) write(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 2m35.721171549s ago: executing program 5 (id=1104): r0 = socket$inet6(0xa, 0x800, 0xfc) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control/file0\x00', 0x151103, 0xe0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00'}) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r2 = syz_open_dev$video(&(0x7f0000000040), 0x3f9, 0x141842) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1c, r3, 0x1, 0x6, 0x6, @multicast}, 0x14) 2m34.284424341s ago: executing program 5 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001d0000022cbd7000fcdbdf251c000000", @ANYRES32=0x0, @ANYBLOB="0400000b0600050002000000000001002001000000000000000000000000000208000d00010000000c000e8004000200040002000000020000000100fd0000000c000200000091136a8fffff"], 0x60}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a320000000034000380080003000700000008000200121bcce80800020006000000080002000e000000080003000100000008000200290000003c0009800800030000000800010000000000080002003c00000008000200060000000000000000000000000023ce129156da8645c23ad2d4f6d5d1b75ec229eeca6728087bfa69956abfbc43043806e5785138ef1d419b97f039ca1ce67f7816d023d8aa5015bb5916c2dc9bbbe23b60"], 0x98}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbdbdf2510000000080003003d7c27687d7dc068e2a7190194d3d935b5395a1340a12f761a23c1c6f3d2e5a82c8cb313577bc2b07ac53b884809df5518863e79846260945623c9285bda53333431975b24259d86b503018c7a7a3f989d87064c7a624c8d4906f6fbe77df28c9e7b8eae018f84086d3d2d", @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r13, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd703d5d811500820000000c0099000300000072004000"], 0x20}, 0x1, 0x0, 0x0, 0x24004805}, 0x8010) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x2, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) ioctl$HIDIOCGUSAGE(r8, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m31.408179219s ago: executing program 5 (id=1118): syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 2m16.089708488s ago: executing program 34 (id=1118): syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 10.400631343s ago: executing program 2 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @binary="ee09e951"}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 9.336482443s ago: executing program 2 (id=1420): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x38) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01031c0010001400060046000065000000000000000000000000ac1400010100000012344e20020000000123456789abcdef0123456789abcdef01beed8eff05dd0e9bdc4d5d6e604e92af25b362d31f0e1ae6b53c2358ddc083dee0a4107392a012493d6f7f3bc975f9cbd0c04d74d6ee3622910143dab058ada1d0b2dc395ca1ddc14416145036872d35cbc41bdff629fd36fe9bb95ae93b22a8"], 0x6f) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x9, 0xffffffff]}}) 9.335498804s ago: executing program 6 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r0, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x45407}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e110b", @ANYRES8], 0xec) syz_emit_vhci(&(0x7f0000001200)=ANY=[], 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x80c0, 0x0) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000100)=0x3f) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000580)={0x4, 0x401, 0x2, {0x1, @vbi={0x3, 0x2, 0x7, 0x50565559, [0xfffffffe, 0x3], [0x7, 0x5], 0x1}}, 0x6}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r11, 0xc0905664, &(0x7f0000000840)={0x0, 0x0, '\x00', @bt={0x4, 0x2, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff5, 0x10, 0xa}}) mkdirat(r11, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0xf0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="184d00000300000000000000000000001841000004000000000000000000000085100000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000700b705000008000000857375a250570000"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x47, &(0x7f0000000440)=""/71, 0x41000, 0x28, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r0, r3, r1], &(0x7f0000000680)=[{0x3, 0x3, 0x2, 0x3}, {0x3, 0x5, 0x9, 0x5}, {0x0, 0x4, 0x7, 0xc}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0x82c2}, 0x94) write$cgroup_pressure(r5, &(0x7f0000000140)={'some'}, 0x2f) 9.267441089s ago: executing program 4 (id=1422): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 8.760202451s ago: executing program 1 (id=1423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x1c) sendfile(r2, r1, 0x0, 0x20000006) 8.300386177s ago: executing program 4 (id=1424): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) 7.430536139s ago: executing program 1 (id=1425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 7.186787523s ago: executing program 2 (id=1426): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace/error_log\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./trace/error_log\x00', 0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="0100000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) userfaultfd(0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) listxattr(&(0x7f00000001c0)='./trace/error_log\x00', &(0x7f0000000140)=""/73, 0x49) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x5}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf25030000000800012000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4094) socket$kcm(0x23, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x4, 0x2, 0x0, r4}) 6.859417004s ago: executing program 4 (id=1427): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1049) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) 6.859004214s ago: executing program 1 (id=1428): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 6.698261805s ago: executing program 6 (id=1429): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0', 0x1) 5.551037719s ago: executing program 1 (id=1430): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x7, 0xff, 0xfffff00c}, {0x6, 0x0, 0x3, 0x1000}]}, 0x8) socket(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 5.52121639s ago: executing program 6 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @binary="ee09e951"}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.694239001s ago: executing program 2 (id=1432): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x5, 0xb, 0x6, 0x86}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0x8}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xb, 0x0, 0x3, 0x6, 0x7f, 0x6}, {0x0, 0x0, 0x38, 0xef, 0x84, 0x7, 0x92, 0x54, 0x0, 0x5, 0x4, 0x7, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0xffffffffffffffd2, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES16=r4, @ANYRESDEC=r1], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000037000501f3fffffffedbd725017c000008000800", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="3c0400000002040104000e5419360000071000000000027f09000000000001005e38000098691d239ddb1355685e00c81000565344d992d29a8b8ff30ff3839d2c75dd35aa6a614a0d31c40502f4f38420d2ec005ff9d9"], 0x30) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000240)) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x1, 0x60, &(0x7f0000000300)="c0f286af6239287c9fa1362c295a1e82aae37a8bb15fa2554bed8192303103d30dac80023bebddae1ab5a357a6", 0x2d, 0x0, 0xfffffffb, 0x0, 0xe92d, 0x0, &(0x7f0000000480)}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x4000090) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x4000090) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) 4.688613392s ago: executing program 6 (id=1433): chdir(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000e80)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x2c4}, 0x1, 0x0, 0x0, 0x20040803}, 0x10) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtaction={0x3e8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3d4, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_gact={0xb0, 0xa, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6f4, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10b3, 0x20000004}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x5, 0x20000000, 0x5, 0x1}}]}, {0x53, 0x6, "88eb010a48ea8819a7c46c841bbbd53d1ff52ebafccf07229e6ec7028d7cbc314e0239ce9dc6e065ebeeae18b46be83a8139abde70590935bb3918b5d407e7363846a2f8dad6e77cbc2cef96acd232"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x108, 0x10, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7fff, 0x4f, 0x0, 0x1, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3d8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x8b, 0x6, "2a1cb1fcf149e59f10edf4140fbc6ecb5423cc4f3c85100697bcba6bd96fdda0ed5d2da8bab6dc1a0e35c3bd4e3f23effcda31f4e6a334be5d2024678edeff1f83dd5b0a799cedc82687a96498629a3fe36eeaa360b34483fb018a5c82100d9c4a61330aff34aa7ea622e1a10ada1d5cbef135eefeeb133e38fb35878a7bec40a8dac44ffb8877"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1e8, 0x14, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x41, 0x8001, 0x5, 0x9, 0xfffffff7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x6, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x18a5, 0x0, 0x5, 0x7fff, 0xbe3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x9, 0x8, 0x2, 0x7}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0xffffffffffffffff, 0x0, 0x217}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xf, 0x4, 0x12, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9a11, 0x80000000, 0x2, 0x0, 0xd}, 0x3}}]}, {0xd9, 0x6, "7d547d400c7b575c74fe7ac912416d598c922b43a4872827bf14a5ac78ada87b3332cf90e5137a886ed806603de6747bb7ac6ad2c26932af6cd05a7ce698f45eb09122152160ababbac9a1ee036703e2ce37e57f5d59319ebe80b65a83bbaff76b1875e46b9fdc1121df82881b96f499e10044c6711cad578ff088d8f5ec45878ba9af200df8230951b7b4fa6517a30f12e07507f186cc70a02e7a4f2bfc71b03515a933d11c991dc4ca220042847175805f79a5034b95c5f99b1bb4a017d2ed6354ff14dad7fac9f3b3adbfc960cfac621a1ea2ce"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x94}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x61d6ce6fcc4b234b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000200000001000000000300626174616476300000000000000000000830f15491317435fc44dd83d0c52bbb0c4a31732546625c219a8e40dfc41bca4abf91fa2858a8a3d4b4f0e01569df578867a3f582f15c07badf3cc16ca5f2cfd427d6d6526bd1b94f642064fbd9c2fb3facc029841d14a6908adfb3772b43f6943f011cd41839910a331476c65b77064ce227029f487ffb663b0d388487ca0e25a6359124a46daf17959b4332c29c915810a44dc5ab93bdd5934efcdb0d251322b32687693354fefd8e9fb11c650573202a1fab87266ae65fd4a3403e6828a7d0761de6aad5d1cf8b84c3c50bc5a3ef53d9"], 0x34}}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0xa6, 0xfffffffffffffffe, 0x1e5, 0x80, @scatter={0x7, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)=""/181, 0x58}, {&(0x7f0000000580)=""/137, 0x89}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f00000008c0)=""/49, 0x31}]}, &(0x7f00000001c0)="a7013d8bc6a47b07282009fe4e7d0900760cc8d74bdcc4ebd80aaa503d63a757ac359e7f9cc9858d8daf43fff436c705bc7e656458475b9ef8867bd850057f52264f00822f4b9d111413a7066e48f72d99802f00a8cfbb286a6ef7cf536b56481ca7a81fd26170728bb05607578f8feebc92e60ebf7d7ae3987b233e5d794fd55012ada4a5680bec56ff06a45d955b4ec514dd062bdf713a2b6421a9e164a1f686b39a81706f02000000a53110f9641e1e9f63719b6568409496a128dd27d7a1a471d9614bca00000000000072d0cedbbd909263fc834e43b3fdc8e8af48c5a70059abfe0e318cd0a6d4d19508014eb56a174d95e4014927ff7b34bb7f5668beb810c024c22bc73784d3a9175616b19603ad633358f0f8ad344abd98821c326f08cc04335c130a867e055d70de7fc52e2a454f2cc644a34c32b4df10d6fb05d1fe0825ea9965af40c79e76b761e3be9026a815dd82bd87e1ed1103ebb2295d10049e3cd97b0e1367ca10bedf146d1648110238b71e6b6980fdcb461c90a5ff1c3fa07d9f00363211d6ea2b8116232db675722b9b817e997f58ec465ca798a96c5b2a060eb9650b39ba0cf822d4b34974e94ede354b1aad29620a55fa64982ae7988c356683b5c96d0f7870529fbbeea8f4ebf2b4dbe0a599faf19205c87d73f4f40c6412b7", 0x0, 0x1, 0x1, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score\x00') 3.947881143s ago: executing program 2 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) syz_pidfd_open(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0x2, {{0xa, 0x4e20, 0xf, @mcast2, 0x2}}}, 0x8c) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd25, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 3.851936045s ago: executing program 6 (id=1435): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) 3.634700834s ago: executing program 1 (id=1436): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x910a, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000003c0)={{0xa, 0x3, 0xfff, 0xd25, 'syz0\x00', 0x10000}, 0x5, 0x2, 0x80000001, r2, 0x2, 0x2, 'syz1\x00', &(0x7f0000000280)=['\x00', '\x00'], 0x2}) readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="108ba06f82ea2ec298b932eedf257900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900000014000000"], 0x28}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x1297, 0x20100}, 0xfffffd96) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000300)='r:test/event1 ./file0:0x0 arg2=\\', 0x20) 2.810410772s ago: executing program 4 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./trace/error_log\x00', 0xc) (fail_nth: 5) 2.304841932s ago: executing program 6 (id=1438): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b) read$watch_queue(r1, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r5) ioctl$OCFS2_IOC_GROUP_EXTEND(r6, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r7, r7) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) 1.624055784s ago: executing program 4 (id=1439): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x109) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001e00010029bd7000fcdbdf2500000000000000000000000000000001000004d60a003c000a010102000000060000000000000000070400f3ff3400001c0017000000000026bd730027bd700029bd70002dbd700005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0, r1) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) write(r0, &(0x7f0000000280)="ff80", 0x2) 1.443624829s ago: executing program 2 (id=1440): openat$dsp1(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_open_dev$ndb(&(0x7f0000003140), 0x0, 0x60840) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x2) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x81, 0xffdfffff, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001809000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a40800008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0xd, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffde4, 0x0, 0x0}) r6 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 5.940035ms ago: executing program 4 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace/error_log\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./trace/error_log\x00', 0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="0100000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) userfaultfd(0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) listxattr(&(0x7f00000001c0)='./trace/error_log\x00', &(0x7f0000000140)=""/73, 0x49) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x5}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf25030000000800012000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4094) socket$kcm(0x23, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x4, 0x4, 0x2, 0x0, r4}) 0s ago: executing program 1 (id=1442): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x43804}, 0x4004000) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r9, r9, 0x0, 0x6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r10, 0x1, 0x80000}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r11, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) kernel console output (not intermixed with test programs): dit: type=1800 audit(1789991441.118:1341): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 341.123117][ T43] audit: type=1800 audit(1789991441.288:1342): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 341.177469][T11661] netlink: 'syz.5.1108': attribute type 11 has an invalid length. [ 341.353096][ T43] audit: type=1800 audit(1789991441.518:1343): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 341.507899][ T25] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 341.726902][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 341.733688][ T25] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.739967][ T25] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 341.740214][ T25] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.740228][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.740243][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.740258][ T25] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.740346][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.886861][ T43] audit: type=1800 audit(1789991442.048:1344): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 341.944169][ T43] audit: type=1800 audit(1789991442.108:1345): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153851 res=0 errno=0 [ 342.008772][ T43] audit: type=1800 audit(1789991442.178:1346): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=153880 res=0 errno=0 [ 342.064390][ T43] audit: type=1800 audit(1789991442.228:1347): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=153858 res=0 errno=0 [ 342.102285][ T43] audit: type=1800 audit(1789991442.268:1348): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=153859 res=0 errno=0 [ 342.351769][ T25] usb 10-1: GET_CAPABILITIES returned 0 [ 342.352001][ T25] usbtmc 10-1:16.0: can't read capabilities [ 342.520654][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 342.684822][ T25] usb 10-1: USB disconnect, device number 10 [ 342.817763][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 342.817807][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1113'. [ 342.837610][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 343.089345][T11698] gretap0: entered promiscuous mode [ 343.116449][T11698] sctp: [Deprecated]: syz.1.1114 (pid 11698) Use of int in max_burst socket option. [ 343.116449][T11698] Use struct sctp_assoc_value instead [ 343.130600][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 343.130934][T11698] gretap0: left promiscuous mode [ 345.303558][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 345.303585][ T43] audit: type=1800 audit(1789991445.468:1363): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 345.325932][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 345.783518][ T43] audit: type=1800 audit(1789991445.948:1364): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 345.915449][ T43] audit: type=1800 audit(1789991446.078:1365): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 346.177021][T11753] netlink: 'syz.4.1126': attribute type 5 has an invalid length. [ 346.177047][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'. [ 346.251013][ T43] audit: type=1800 audit(1789991446.418:1366): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 346.484680][ T43] audit: type=1800 audit(1789991446.648:1367): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 346.727696][ T43] audit: type=1800 audit(1789991446.888:1368): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 346.971860][ T43] audit: type=1800 audit(1789991447.138:1369): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 347.016978][ T43] audit: type=1800 audit(1789991447.168:1370): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154108 res=0 errno=0 [ 347.024312][ T43] audit: type=1800 audit(1789991447.188:1371): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154119 res=0 errno=0 [ 347.786553][ T43] audit: type=1800 audit(1789991447.948:1372): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 348.928913][ T5749] Bluetooth: hci0: command 0x1003 tx timeout [ 348.935161][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.395482][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 350.395504][ T43] audit: type=1800 audit(1789991450.558:1377): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 350.678891][ T43] audit: type=1800 audit(1789991450.848:1378): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 350.702022][ T43] audit: type=1326 audit(1789991450.868:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.706493][ T43] audit: type=1326 audit(1789991450.868:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.711734][ T43] audit: type=1326 audit(1789991450.878:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.711985][ T43] audit: type=1326 audit(1789991450.878:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.713550][ T43] audit: type=1326 audit(1789991450.878:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.723806][ T43] audit: type=1326 audit(1789991450.888:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.726299][ T43] audit: type=1326 audit(1789991450.888:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.734081][ T43] audit: type=1326 audit(1789991450.898:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.1.1136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 350.912596][T11801] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 351.173313][T11801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.754508][T11814] bond2: (slave geneve2): making interface the new active one [ 351.771542][T11814] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 353.366269][T11861] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1140'. [ 353.533641][T11861] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 353.533674][T11861] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1140'. [ 353.533699][T11861] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 353.533725][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 353.691135][T11859] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1969 instead [ 353.691163][T11859] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 353.691180][T11859] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 353.701817][T11859] jffs2: notice: (11859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 353.877240][T11861] null_blk: my_zoned_dev: using native zone append [ 354.245466][T11861] null_blk: disk my_zoned_dev created [ 354.952982][T11878] netlink: 'syz.1.1143': attribute type 2 has an invalid length. [ 355.025918][T11878] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 355.025949][T11878] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1143'. [ 355.657484][ T5749] Bluetooth: hci0: command 0x1003 tx timeout [ 355.662565][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 355.802912][ T43] kauditd_printk_skb: 180 callbacks suppressed [ 355.802940][ T43] audit: type=1800 audit(1789991455.958:1567): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 355.919455][ T43] audit: type=1800 audit(1789991456.088:1568): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 356.183148][ T43] audit: type=1800 audit(1789991456.348:1569): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 356.446164][ T43] audit: type=1800 audit(1789991456.608:1570): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 356.573156][ T43] audit: type=1800 audit(1789991456.738:1571): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 356.888235][ T43] audit: type=1800 audit(1789991457.058:1572): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 357.910595][ T43] audit: type=1800 audit(1789991458.078:1573): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 358.148320][ T43] audit: type=1800 audit(1789991458.318:1574): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 358.254086][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 358.286709][ T43] audit: type=1800 audit(1789991458.448:1575): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154801 res=0 errno=0 [ 358.466202][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 359.295248][ T43] audit: type=1800 audit(1789991459.458:1576): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 359.993903][T11924] netlink: 'syz.4.1154': attribute type 2 has an invalid length. [ 360.035526][T11924] netlink: 'syz.4.1154': attribute type 10 has an invalid length. [ 360.035560][T11924] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1154'. [ 362.612924][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 362.612952][ T43] audit: type=1800 audit(1789991462.778:1579): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 362.919922][ T43] audit: type=1800 audit(1789991463.088:1580): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154820 res=0 errno=0 [ 362.946848][ T43] audit: type=1800 audit(1789991463.108:1581): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154831 res=0 errno=0 [ 363.009253][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.020741][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.034494][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.048829][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.056222][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.110497][T11932] batman_adv: batadv0: Removing interface: wlan0 [ 363.151471][ T43] audit: type=1800 audit(1789991463.318:1582): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154850 res=0 errno=0 [ 363.166813][ T43] audit: type=1800 audit(1789991463.328:1583): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154861 res=0 errno=0 [ 363.578059][ T43] audit: type=1800 audit(1789991463.738:1584): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 363.873669][ T43] audit: type=1800 audit(1789991464.038:1585): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 364.230188][ T43] audit: type=1800 audit(1789991464.398:1586): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 364.540672][ T43] audit: type=1800 audit(1789991464.708:1587): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 365.045915][ T43] audit: type=1800 audit(1789991465.198:1588): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 365.167966][ T5747] Bluetooth: hci0: command tx timeout [ 367.247418][ T5747] Bluetooth: hci0: command tx timeout [ 367.893743][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 367.893834][ T43] audit: type=1800 audit(1789991468.058:1595): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1164" name="/" dev="fuse" ino=1 res=0 errno=0 [ 368.109190][ T43] audit: type=1800 audit(1789991468.198:1596): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 368.755450][ T43] audit: type=1800 audit(1789991468.918:1597): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 369.101910][ T43] audit: type=1800 audit(1789991469.268:1598): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 369.329411][ T5747] Bluetooth: hci0: command tx timeout [ 369.385965][T12068] overlayfs: failed to resolve './sys': -2 [ 369.597704][ T43] audit: type=1800 audit(1789991469.758:1599): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 370.292105][T12098] afs: Unknown parameter 'flockopenafs' [ 370.301740][ T43] audit: type=1800 audit(1789991470.468:1600): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 370.316450][ T5747] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 370.316494][ T5747] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 370.584765][ T43] audit: type=1800 audit(1789991470.748:1601): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 370.807709][ T43] audit: type=1800 audit(1789991470.978:1602): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135160 res=0 errno=0 [ 371.329982][ T43] audit: type=1800 audit(1789991471.488:1603): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 371.419499][ T5747] Bluetooth: hci0: command tx timeout [ 371.916281][ T43] audit: type=1800 audit(1789991472.078:1604): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 373.444708][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 373.444727][ T43] audit: type=1800 audit(1789991473.608:1608): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 373.618980][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.620212][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.620993][T11970] bridge_slave_0: entered allmulticast mode [ 373.643826][T11970] bridge_slave_0: entered promiscuous mode [ 373.706655][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.709298][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.710419][T11970] bridge_slave_1: entered allmulticast mode [ 373.761953][T11970] bridge_slave_1: entered promiscuous mode [ 373.838418][ T43] audit: type=1800 audit(1789991474.008:1609): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 374.202108][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.235061][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.627413][ T5740] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 374.847414][T11970] team0: Port device team_slave_0 added [ 374.872539][T11970] team0: Port device team_slave_1 added [ 375.011443][T12196] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1176'. [ 375.176351][ T43] audit: type=1800 audit(1789991475.338:1610): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 375.379323][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.379339][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.379357][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.414794][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.414814][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.414833][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.415976][ T43] audit: type=1800 audit(1789991475.578:1611): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 375.963458][ T43] audit: type=1800 audit(1789991476.128:1612): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 376.031088][T11970] hsr_slave_0: entered promiscuous mode [ 376.041673][T11970] hsr_slave_1: entered promiscuous mode [ 376.049831][T11970] debugfs: 'hsr0' already exists in 'hsr' [ 376.052998][T11970] Cannot create hsr debugfs directory [ 376.412016][T12293] netlink: 'syz.1.1180': attribute type 2 has an invalid length. [ 376.604189][ T5740] usb 9-1: device descriptor read/all, error -71 [ 377.145936][ T43] audit: type=1800 audit(1789991477.308:1613): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 377.396111][ T43] audit: type=1800 audit(1789991477.558:1614): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 377.609958][ T43] audit: type=1800 audit(1789991477.778:1615): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1181" name="rotate_all" dev="sysfs" ino=1316 res=0 errno=0 [ 377.885483][ T43] audit: type=1800 audit(1789991478.048:1616): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 378.076246][ T43] audit: type=1800 audit(1789991478.238:1617): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 378.161833][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.162125][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972645][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 378.972665][ T43] audit: type=1800 audit(1789991479.138:1622): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 379.155663][ T43] audit: type=1800 audit(1789991479.318:1623): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 379.521725][ T43] audit: type=1800 audit(1789991479.688:1624): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 379.666746][ T43] audit: type=1800 audit(1789991479.828:1625): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1189" name="rotate_all" dev="sysfs" ino=1316 res=0 errno=0 [ 379.909677][T11970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.969834][T11970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.975640][T11970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.160254][T11970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.326570][T11970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.534140][ T43] audit: type=1800 audit(1789991480.698:1626): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 380.626886][T11970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.640920][T11970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.893675][T11970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.131984][ T43] audit: type=1800 audit(1789991481.298:1627): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 381.791130][ T43] audit: type=1800 audit(1789991481.958:1628): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 382.109667][ T43] audit: type=1800 audit(1789991482.278:1629): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 382.191410][T12409] sctp: [Deprecated]: syz.2.1188 (pid 12409) Use of int in maxseg socket option. [ 382.191410][T12409] Use struct sctp_assoc_value instead [ 382.275032][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1193'. [ 382.666754][T12412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1193'. [ 384.502987][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.672886][ T43] audit: type=1800 audit(1789991484.838:1630): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 384.856597][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.923591][ T43] audit: type=1800 audit(1789991485.088:1631): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 385.074742][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.076235][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.148235][ T43] audit: type=1800 audit(1789991485.318:1632): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 385.372667][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.373562][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.532062][ T43] audit: type=1800 audit(1789991485.698:1633): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 385.873495][ T43] audit: type=1800 audit(1789991486.038:1634): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 385.897441][T12434] No control pipe specified [ 385.902352][ T43] audit: type=1800 audit(1789991486.068:1635): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160942 res=0 errno=0 [ 386.153076][ T43] audit: type=1800 audit(1789991486.318:1636): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 386.774333][ T43] audit: type=1800 audit(1789991486.938:1637): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 387.117714][ T43] audit: type=1800 audit(1789991487.278:1638): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 387.488022][ T43] audit: type=1326 audit(1789991487.638:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 388.136552][T12452] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 388.781819][T12499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 388.800007][T12452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.193452][T12499] hsr_slave_1 (unregistering): left promiscuous mode [ 389.696129][ T43] kauditd_printk_skb: 106 callbacks suppressed [ 389.696160][ T43] audit: type=1326 audit(1789991489.858:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.701052][ T43] audit: type=1326 audit(1789991489.868:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.703335][ T43] audit: type=1326 audit(1789991489.868:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.705307][ T43] audit: type=1326 audit(1789991489.868:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.715497][ T43] audit: type=1326 audit(1789991489.878:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.728464][ T43] audit: type=1326 audit(1789991489.898:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.732537][ T43] audit: type=1326 audit(1789991489.898:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.734283][ T43] audit: type=1326 audit(1789991489.898:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.759885][ T43] audit: type=1326 audit(1789991489.928:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 389.772587][ T43] audit: type=1326 audit(1789991489.928:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.2.1201" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 390.434990][T12460] bond2: (slave geneve2): making interface the new active one [ 390.475118][T12460] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 392.479191][T12534] netlink: 'syz.1.1207': attribute type 8 has an invalid length. [ 392.601325][T12539] ublk_ctrl_add_dev: invalid recovery flags 10 [ 392.677018][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.781935][T12529] nvme_fcloop: unknown parameter or missing value 'wwn' [ 394.956950][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 394.956974][ T43] audit: type=1800 audit(1789991495.118:1820): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 395.384094][ T43] audit: type=1800 audit(1789991495.548:1821): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 395.765101][ T43] audit: type=1800 audit(1789991495.928:1822): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 396.029715][ T43] audit: type=1326 audit(1789991496.188:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.035777][ T43] audit: type=1326 audit(1789991496.198:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.086698][ T43] audit: type=1326 audit(1789991496.248:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.097344][ T43] audit: type=1326 audit(1789991496.258:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.098443][ T43] audit: type=1326 audit(1789991496.268:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.112601][ T43] audit: type=1326 audit(1789991496.278:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.121553][ T43] audit: type=1326 audit(1789991496.288:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.4.1213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 396.683883][T12578] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 397.180898][T12578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.184879][T11970] veth0_vlan: entered promiscuous mode [ 397.630987][T11970] veth1_vlan: entered promiscuous mode [ 398.009498][T11970] veth0_macvtap: entered promiscuous mode [ 398.060879][T11970] veth1_macvtap: entered promiscuous mode [ 398.265312][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.375112][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.537964][ T5818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.669493][ T5789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.683157][T12634] overlayfs: failed to resolve './sys': -2 [ 398.727746][ T5789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.727842][ T5789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.413732][ T9412] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 399.597326][ T9412] usb 6-1: Using ep0 maxpacket: 16 [ 399.600975][ T9412] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 399.620658][ T9412] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 399.620680][ T9412] usb 6-1: config 1 has no interface number 0 [ 399.620933][ T9412] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 399.620950][ T9412] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.620966][ T9412] usb 6-1: config 1 interface 105 has no altsetting 0 [ 399.696162][ T9412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.696193][ T9412] usb 6-1: Product: syz [ 399.696212][ T9412] usb 6-1: Manufacturer: syz [ 399.696231][ T9412] usb 6-1: SerialNumber: syz [ 399.901338][T12637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 400.126804][ T43] kauditd_printk_skb: 157 callbacks suppressed [ 400.126829][ T43] audit: type=1800 audit(1789991500.288:1987): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 400.200981][ T43] audit: type=1800 audit(1789991500.368:1988): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161944 res=0 errno=0 [ 400.264062][ T43] audit: type=1800 audit(1789991500.428:1989): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162012 res=0 errno=0 [ 400.275773][ T43] audit: type=1800 audit(1789991500.438:1990): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161957 res=0 errno=0 [ 400.285007][ T43] audit: type=1800 audit(1789991500.448:1991): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161958 res=0 errno=0 [ 400.326085][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1218'. [ 400.500478][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.500498][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.556751][ T9412] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 400.658397][ T43] audit: type=1800 audit(1789991500.828:1992): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=162007 res=0 errno=0 [ 400.704189][ T9412] usb 6-1: USB disconnect, device number 23 [ 400.717836][ T43] audit: type=1800 audit(1789991500.878:1993): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162070 res=0 errno=0 [ 400.800855][ T43] audit: type=1800 audit(1789991500.968:1994): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=162009 res=0 errno=0 [ 401.000302][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.000327][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.555494][ T43] audit: type=1800 audit(1789991501.708:1995): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 401.864908][ T43] audit: type=1800 audit(1789991502.028:1996): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 403.592594][ T30] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 403.777428][ T30] usb 11-1: Using ep0 maxpacket: 16 [ 403.784078][ T30] usb 11-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 403.798927][ T30] usb 11-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.798948][ T30] usb 11-1: config 0 has no interface number 0 [ 403.839712][ T30] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.839736][ T30] usb 11-1: Product: syz [ 403.839750][ T30] usb 11-1: Manufacturer: syz [ 403.839764][ T30] usb 11-1: SerialNumber: syz [ 403.894780][ T30] usb 11-1: config 0 descriptor?? [ 403.959164][ T30] hub 11-1:0.132: bad descriptor, ignoring hub [ 403.962073][ T30] hub 11-1:0.132: probe with driver hub failed with error -5 [ 404.061318][ T30] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.132/input/input18 [ 404.938964][ T30] usb 11-1: USB disconnect, device number 2 [ 405.452036][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 405.452055][ T43] audit: type=1326 audit(1789991505.618:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.456353][ T43] audit: type=1326 audit(1789991505.618:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.470370][ T43] audit: type=1800 audit(1789991505.638:2026): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 405.474771][ T43] audit: type=1326 audit(1789991505.638:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.475031][ T43] audit: type=1326 audit(1789991505.638:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.476955][ T43] audit: type=1326 audit(1789991505.638:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.507401][ T43] audit: type=1326 audit(1789991505.668:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.508882][ T43] audit: type=1326 audit(1789991505.678:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.514760][ T43] audit: type=1326 audit(1789991505.678:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 405.517787][ T43] audit: type=1326 audit(1789991505.678:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12743 comm="syz.4.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 406.872339][T12759] overlayfs: failed to resolve './sys': -2 [ 410.327791][ T9412] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 410.529463][ T9412] usb 6-1: Using ep0 maxpacket: 16 [ 410.543737][ T9412] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 410.592127][ T9412] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 410.592164][ T9412] usb 6-1: config 0 has no interface number 0 [ 410.682257][ T9412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.682280][ T9412] usb 6-1: Product: syz [ 410.682293][ T9412] usb 6-1: Manufacturer: syz [ 410.682305][ T9412] usb 6-1: SerialNumber: syz [ 410.821443][T12798] FAULT_INJECTION: forcing a failure. [ 410.821443][T12798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.821478][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.6.1242 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.821497][T12798] Tainted: [L]=SOFTLOCKUP [ 410.821506][T12798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.821516][T12798] Call Trace: [ 410.821532][T12798] [ 410.821550][T12798] dump_stack_lvl+0x100/0x190 [ 410.821645][T12798] should_fail_ex.cold+0x5/0xa [ 410.821774][T12798] _copy_from_user+0x2e/0xd0 [ 410.821827][T12798] get_compat_msghdr+0xb3/0x480 [ 410.821895][T12798] ? __pfx_get_compat_msghdr+0x10/0x10 [ 410.822034][T12798] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 410.822155][T12798] ___sys_sendmsg+0x1b6/0x1e0 [ 410.822268][T12798] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.822339][T12798] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 410.822590][T12798] ? find_held_lock+0x2b/0x80 [ 410.822909][T12798] __sys_sendmsg+0x160/0x210 [ 410.822984][T12798] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.823177][T12798] ? __pfx_ksys_write+0x10/0x10 [ 410.823339][T12798] __do_fast_syscall_32+0x13a/0x8b0 [ 410.823391][T12798] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.823477][T12798] do_fast_syscall_32+0x32/0x70 [ 410.823531][T12798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.823567][T12798] RIP: 0023:0xf707efec [ 410.823624][T12798] Code: Unable to access opcode bytes at 0xf707efc2. [ 410.823636][T12798] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 410.823661][T12798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 410.823676][T12798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.823689][T12798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.823703][T12798] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 410.823718][T12798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.823978][T12798] [ 410.827366][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 410.827387][ T43] audit: type=1800 audit(1789991510.938:2067): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 410.833115][ T9412] usb 6-1: config 0 descriptor?? [ 410.945904][ T9412] hub 6-1:0.132: bad descriptor, ignoring hub [ 410.946212][ T9412] hub 6-1:0.132: probe with driver hub failed with error -5 [ 411.332717][ T9412] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input19 [ 411.558780][ T43] audit: type=1800 audit(1789991511.728:2068): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 411.607402][ T43] audit: type=1800 audit(1789991511.768:2069): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162448 res=0 errno=0 [ 411.722283][ T43] audit: type=1800 audit(1789991511.888:2070): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162480 res=0 errno=0 [ 411.822112][ T43] audit: type=1800 audit(1789991511.988:2071): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=162455 res=0 errno=0 [ 411.882407][ T43] audit: type=1800 audit(1789991512.048:2072): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=162456 res=0 errno=0 [ 411.967023][ T9412] input: failed to attach handler mousedev to device input19, error: -2 [ 412.045922][ T43] audit: type=1800 audit(1789991512.208:2073): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=162477 res=0 errno=0 [ 412.093920][ T43] audit: type=1800 audit(1789991512.258:2074): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=162478 res=0 errno=0 [ 412.114477][ T43] audit: type=1800 audit(1789991512.278:2075): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=162457 res=0 errno=0 [ 412.126875][T12803] input: syz1 as /devices/virtual/input/input20 [ 412.134993][ T43] audit: type=1800 audit(1789991512.298:2076): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=162479 res=0 errno=0 [ 412.511842][ T30] usb 6-1: USB disconnect, device number 24 [ 414.805545][T12848] jffs2: notice: (12848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 415.573734][T12859] Bluetooth: MGMT ver 1.23 [ 415.573810][T12859] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 416.076252][T12863] mmap: syz.4.1247 (12863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.255498][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 416.255519][ T43] audit: type=1800 audit(1789991516.418:2094): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 416.623828][T12869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1253'. [ 416.811112][ T43] audit: type=1800 audit(1789991516.978:2095): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 417.132132][ T43] audit: type=1800 audit(1789991517.298:2096): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 417.594098][T12878] netlink: 'syz.2.1255': attribute type 2 has an invalid length. [ 417.634249][ T43] audit: type=1800 audit(1789991517.798:2097): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 417.895289][ T43] audit: type=1800 audit(1789991518.058:2098): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 418.156876][ T43] audit: type=1800 audit(1789991518.318:2099): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 418.164702][T12461] Bluetooth: hci1: unknown advertising packet type: 0x2f [ 418.164769][T12461] Bluetooth: hci1: Dropping invalid advertising data [ 418.164780][T12461] Bluetooth: hci1: Malformed LE Event: 0x02 [ 418.369603][ T43] audit: type=1800 audit(1789991518.528:2100): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 418.835137][ T43] audit: type=1800 audit(1789991518.998:2101): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 419.064848][ T43] audit: type=1800 audit(1789991519.228:2102): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 419.346806][ T43] audit: type=1800 audit(1789991519.508:2103): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 420.232758][T12461] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 421.320054][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 421.320074][ T43] audit: type=1800 audit(1789991521.488:2107): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 421.661341][ T43] audit: type=1800 audit(1789991521.828:2108): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 422.133985][ T43] audit: type=1800 audit(1789991522.298:2109): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 422.577878][ T43] audit: type=1800 audit(1789991522.728:2110): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 422.807799][ T43] audit: type=1800 audit(1789991522.978:2111): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 422.932305][ T43] audit: type=1800 audit(1789991523.098:2112): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 423.388300][T12461] Bluetooth: hci1: Malformed LE Event: 0x02 [ 423.462157][ T43] audit: type=1800 audit(1789991523.628:2113): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 423.774095][ T43] audit: type=1800 audit(1789991523.938:2114): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 424.074028][ T43] audit: type=1800 audit(1789991524.238:2115): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 424.245729][ T43] audit: type=1800 audit(1789991524.408:2116): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 424.587762][T12942] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1276'. [ 424.587797][T12942] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1276'. [ 426.186717][T12969] FAULT_INJECTION: forcing a failure. [ 426.186717][T12969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.186769][T12969] CPU: 1 UID: 0 PID: 12969 Comm: syz.4.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.186795][T12969] Tainted: [L]=SOFTLOCKUP [ 426.186809][T12969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.186826][T12969] Call Trace: [ 426.186857][T12969] [ 426.186877][T12969] dump_stack_lvl+0x100/0x190 [ 426.186946][T12969] should_fail_ex.cold+0x5/0xa [ 426.187083][T12969] _copy_from_iter+0x1f4/0x1690 [ 426.187223][T12969] ? __asan_memset+0x23/0x50 [ 426.187279][T12969] ? __pfx__copy_from_iter+0x10/0x10 [ 426.187330][T12969] ? __pfx___alloc_skb+0x10/0x10 [ 426.187593][T12969] netlink_sendmsg+0x808/0xda0 [ 426.187784][T12969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.187860][T12969] ? apparmor_socket_sendmsg+0x165/0x280 [ 426.188042][T12969] ____sys_sendmsg+0xa4d/0xbe0 [ 426.188089][T12969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.188157][T12969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.188329][T12969] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 426.188475][T12969] ___sys_sendmsg+0x190/0x1e0 [ 426.188604][T12969] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.188675][T12969] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 426.188950][T12969] ? find_held_lock+0x2b/0x80 [ 426.189318][T12969] __sys_sendmsg+0x160/0x210 [ 426.189392][T12969] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.189612][T12969] ? __pfx_ksys_write+0x10/0x10 [ 426.189767][T12969] __do_fast_syscall_32+0x13a/0x8b0 [ 426.189819][T12969] ? lockdep_hardirqs_on+0x7d/0x110 [ 426.189920][T12969] do_fast_syscall_32+0x32/0x70 [ 426.189971][T12969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.190007][T12969] RIP: 0023:0xf7f82fec [ 426.190065][T12969] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 426.190077][T12969] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 426.190104][T12969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 426.190119][T12969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.190134][T12969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.190149][T12969] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 426.190164][T12969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.190449][T12969] [ 426.197803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 426.830354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 427.055174][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 427.055193][ T43] audit: type=1800 audit(1789991527.218:2121): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 427.429349][ T43] audit: type=1800 audit(1789991527.598:2122): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 427.726990][ T43] audit: type=1800 audit(1789991527.888:2123): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 428.146987][ T43] audit: type=1800 audit(1789991528.308:2124): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 428.168622][ T43] audit: type=1800 audit(1789991528.328:2125): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1284" name="idVendor" dev="configfs" ino=36527 res=0 errno=0 [ 428.211935][ T43] audit: type=1800 audit(1789991528.378:2126): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1284" name="p_chmask" dev="configfs" ino=36528 res=0 errno=0 [ 428.303648][ T43] audit: type=1800 audit(1789991528.468:2127): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 428.437396][ T43] audit: type=1800 audit(1789991528.598:2128): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 428.570872][ T43] audit: type=1800 audit(1789991528.738:2129): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 429.453317][ T43] audit: type=1800 audit(1789991529.618:2130): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 432.265260][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 432.265282][ T43] audit: type=1800 audit(1789991532.428:2133): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 432.629801][T13025] No memory to map [ 432.817772][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 432.832902][T13025] xt_cgroup: path and classid specified [ 433.259921][T13028] FAULT_INJECTION: forcing a failure. [ 433.259921][T13028] name failslab, interval 1, probability 0, space 0, times 0 [ 433.259962][T13028] CPU: 0 UID: 0 PID: 13028 Comm: syz.2.1293 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.259984][T13028] Tainted: [L]=SOFTLOCKUP [ 433.259993][T13028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.260006][T13028] Call Trace: [ 433.260026][T13028] [ 433.260049][T13028] dump_stack_lvl+0x100/0x190 [ 433.260171][T13028] should_fail_ex.cold+0x5/0xa [ 433.260275][T13028] should_failslab+0xc2/0x120 [ 433.260324][T13028] __kvmalloc_node_noprof+0x113/0x9b0 [ 433.260448][T13028] ? seq_read_iter+0x819/0x1270 [ 433.260606][T13028] seq_read_iter+0x819/0x1270 [ 433.260727][T13028] ? __pfx_aa_file_perm+0x10/0x10 [ 433.260888][T13028] seq_read+0x344/0x4d0 [ 433.260966][T13028] ? __pfx_seq_read+0x10/0x10 [ 433.261168][T13028] ? common_file_perm+0x266/0x500 [ 433.261354][T13028] ? rw_verify_area+0xce/0x6d0 [ 433.261434][T13028] ? __pfx_seq_read+0x10/0x10 [ 433.261488][T13028] vfs_read+0x1e4/0xb40 [ 433.261555][T13028] ? lock_acquire+0x1d1/0x380 [ 433.261601][T13028] ? __fget_files+0x34/0x3d0 [ 433.261662][T13028] ? __pfx_vfs_read+0x10/0x10 [ 433.261696][T13028] ? find_held_lock+0x2b/0x80 [ 433.261787][T13028] ? __fget_files+0x215/0x3d0 [ 433.261894][T13028] ? __fget_files+0x21f/0x3d0 [ 433.262123][T13028] ksys_read+0x12a/0x250 [ 433.262169][T13028] ? __pfx_ksys_read+0x10/0x10 [ 433.262200][T13028] ? ksys_write+0x1ac/0x250 [ 433.262253][T13028] ? __pfx_ksys_write+0x10/0x10 [ 433.262431][T13028] __do_fast_syscall_32+0x13a/0x8b0 [ 433.262464][T13028] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.262557][T13028] do_fast_syscall_32+0x32/0x70 [ 433.262630][T13028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.262678][T13028] RIP: 0023:0xf6feefec [ 433.262756][T13028] Code: Unable to access opcode bytes at 0xf6feefc2. [ 433.262771][T13028] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 433.262794][T13028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002140 [ 433.262804][T13028] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.262814][T13028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.262825][T13028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 433.262839][T13028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.263146][T13028] [ 433.973115][ T43] audit: type=1800 audit(1789991534.098:2134): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 434.433598][ T43] audit: type=1800 audit(1789991534.598:2135): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 434.566210][ T43] audit: type=1326 audit(1789991534.728:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.566454][ T43] audit: type=1326 audit(1789991534.728:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.574860][ T43] audit: type=1326 audit(1789991534.738:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.578716][ T43] audit: type=1326 audit(1789991534.748:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.580288][ T43] audit: type=1326 audit(1789991534.748:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.607749][ T43] audit: type=1326 audit(1789991534.768:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 434.614846][ T43] audit: type=1326 audit(1789991534.778:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.4.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 437.371576][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 437.371598][ T43] audit: type=1800 audit(1789991537.528:2167): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 437.491387][T13050] netlink: 'syz.2.1299': attribute type 8 has an invalid length. [ 437.557577][T13054] ublk_ctrl_add_dev: invalid recovery flags 10 [ 437.624827][ T43] audit: type=1800 audit(1789991537.788:2168): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 437.885525][T13058] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1301'. [ 438.389930][ T43] audit: type=1800 audit(1789991538.548:2169): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 438.688605][ T43] audit: type=1800 audit(1789991538.848:2170): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 439.088730][ T43] audit: type=1800 audit(1789991539.258:2171): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 439.205239][T13070] FAULT_INJECTION: forcing a failure. [ 439.205239][T13070] name failslab, interval 1, probability 0, space 0, times 0 [ 439.205286][T13070] CPU: 3 UID: 0 PID: 13070 Comm: syz.4.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.205305][T13070] Tainted: [L]=SOFTLOCKUP [ 439.205312][T13070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.205322][T13070] Call Trace: [ 439.205334][T13070] [ 439.205348][T13070] dump_stack_lvl+0x100/0x190 [ 439.205429][T13070] should_fail_ex.cold+0x5/0xa [ 439.205564][T13070] should_failslab+0xc2/0x120 [ 439.205622][T13070] kmem_cache_alloc_noprof+0x92/0x6a0 [ 439.205666][T13070] ? do_getname+0x35/0x390 [ 439.205814][T13070] do_getname+0x35/0x390 [ 439.205925][T13070] do_sys_openat2+0xc7/0x1e0 [ 439.206003][T13070] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.206090][T13070] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.206173][T13070] ? __fget_files+0x21f/0x3d0 [ 439.206294][T13070] __ia32_sys_creat+0xcb/0x120 [ 439.206348][T13070] ? __pfx___ia32_sys_creat+0x10/0x10 [ 439.206433][T13070] ? __pfx_ksys_write+0x10/0x10 [ 439.206540][T13070] ? __do_fast_syscall_32+0xb3/0x8b0 [ 439.206593][T13070] __do_fast_syscall_32+0x13a/0x8b0 [ 439.206627][T13070] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.206729][T13070] do_fast_syscall_32+0x32/0x70 [ 439.206809][T13070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.206858][T13070] RIP: 0023:0xf7f82fec [ 439.206903][T13070] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 439.206912][T13070] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 439.206931][T13070] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 000000000000000c [ 439.206942][T13070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.206953][T13070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.206963][T13070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.206974][T13070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.207232][T13070] [ 439.602005][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.602292][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.894591][ T43] audit: type=1800 audit(1789991540.048:2172): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 440.256069][ T43] audit: type=1800 audit(1789991540.418:2173): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 440.523972][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 440.668473][ T43] audit: type=1800 audit(1789991540.828:2174): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 440.786439][ T43] audit: type=1800 audit(1789991540.948:2175): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 441.052025][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 441.109898][ T43] audit: type=1800 audit(1789991541.268:2176): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1308" name="delay_use" dev="sysfs" ino=62372 res=0 errno=0 [ 441.241547][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 441.804846][T13085] bond3: entered promiscuous mode [ 441.848713][T13085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.287427][ T43] audit: type=1800 audit(1789991543.228:2177): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 443.439180][T13098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.440700][T13098] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 443.498524][T13098] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 443.667547][ T43] audit: type=1326 audit(1789991543.828:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.679452][ T43] audit: type=1326 audit(1789991543.838:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.683327][ T43] audit: type=1326 audit(1789991543.848:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.695585][ T43] audit: type=1326 audit(1789991543.838:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.695825][ T43] audit: type=1326 audit(1789991543.858:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.721975][ T43] audit: type=1326 audit(1789991543.888:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.734115][ T43] audit: type=1326 audit(1789991543.888:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.757250][ T43] audit: type=1326 audit(1789991543.918:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 443.762799][ T43] audit: type=1326 audit(1789991543.928:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1310" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707efec code=0x7ffc0000 [ 446.782836][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 446.846079][ C3] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 446.846279][ C3] sr 2:0:0:0: [sr0] tag#6 CDB: Release(6) [ 446.846300][ C3] sr 2:0:0:0: [sr0] tag#6 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 446.846320][ C3] sr 2:0:0:0: [sr0] tag#6 CDB[10]: 41 [ 448.497407][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 448.497442][ T43] audit: type=1800 audit(1789991548.658:2208): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 448.881736][T13161] netlink: 'syz.4.1317': attribute type 8 has an invalid length. [ 448.901636][ T43] audit: type=1800 audit(1789991549.068:2209): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 448.969955][T13164] ublk_ctrl_add_dev: invalid recovery flags 10 [ 449.111462][T12461] Bluetooth: hci0: Malformed LE Event: 0x02 [ 449.303960][ T43] audit: type=1800 audit(1789991549.468:2210): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163119 res=0 errno=0 [ 449.856408][ T43] audit: type=1800 audit(1789991550.018:2211): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 450.111495][ T43] audit: type=1800 audit(1789991550.278:2212): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 450.680531][ T43] audit: type=1800 audit(1789991550.848:2213): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 450.982557][ T43] audit: type=1800 audit(1789991551.148:2214): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 451.612954][ T43] audit: type=1800 audit(1789991551.778:2215): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 451.791730][ T43] audit: type=1800 audit(1789991551.958:2216): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 452.010636][T13187] FAULT_INJECTION: forcing a failure. [ 452.010636][T13187] name failslab, interval 1, probability 0, space 0, times 0 [ 452.010678][T13187] CPU: 1 UID: 0 PID: 13187 Comm: syz.4.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.010700][T13187] Tainted: [L]=SOFTLOCKUP [ 452.010711][T13187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.010724][T13187] Call Trace: [ 452.010747][T13187] [ 452.010772][T13187] dump_stack_lvl+0x100/0x190 [ 452.010891][T13187] should_fail_ex.cold+0x5/0xa [ 452.010967][T13187] should_failslab+0xc2/0x120 [ 452.011028][T13187] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 452.011110][T13187] ? __alloc_skb+0x140/0x710 [ 452.011237][T13187] __alloc_skb+0x140/0x710 [ 452.011267][T13187] ? __alloc_skb+0x5b7/0x710 [ 452.011316][T13187] ? __pfx___alloc_skb+0x10/0x10 [ 452.011347][T13187] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 452.011560][T13187] tipc_nl_compat_dumpit+0x15d/0x820 [ 452.011683][T13187] tipc_nl_compat_recv+0xa35/0xc40 [ 452.011787][T13187] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 452.011856][T13187] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 452.011882][T13187] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 452.012084][T13187] ? trace_contention_end+0x126/0x160 [ 452.012142][T13187] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 452.012264][T13187] genl_family_rcv_msg_doit+0x214/0x300 [ 452.012397][T13187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 452.012430][T13187] ? genl_get_cmd+0x3e7/0x760 [ 452.012706][T13187] ? __radix_tree_lookup+0x217/0x2b0 [ 452.012852][T13187] genl_rcv_msg+0x560/0x800 [ 452.013011][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.013080][T13187] ? __lock_acquire+0x5c0/0x1f40 [ 452.013106][T13187] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 452.013341][T13187] netlink_rcv_skb+0x159/0x420 [ 452.013380][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.013445][T13187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.013692][T13187] ? netlink_deliver_tap+0x1ae/0xcc0 [ 452.013844][T13187] genl_rcv+0x28/0x40 [ 452.013908][T13187] netlink_unicast+0x585/0x850 [ 452.013999][T13187] ? __pfx_netlink_unicast+0x10/0x10 [ 452.014202][T13187] netlink_sendmsg+0x8b0/0xda0 [ 452.014335][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.014458][T13187] ? apparmor_socket_sendmsg+0x165/0x280 [ 452.014586][T13187] ____sys_sendmsg+0xa4d/0xbe0 [ 452.014624][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.014741][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.014852][T13187] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 452.015024][T13187] ___sys_sendmsg+0x190/0x1e0 [ 452.015098][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.015149][T13187] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 452.015403][T13187] ? find_held_lock+0x2b/0x80 [ 452.015784][T13187] __sys_sendmsg+0x160/0x210 [ 452.015837][T13187] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.016047][T13187] ? __pfx_ksys_write+0x10/0x10 [ 452.016160][T13187] __do_fast_syscall_32+0x13a/0x8b0 [ 452.016200][T13187] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.016335][T13187] do_fast_syscall_32+0x32/0x70 [ 452.016399][T13187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.016425][T13187] RIP: 0023:0xf7f82fec [ 452.016482][T13187] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 452.016493][T13187] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 452.016518][T13187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 452.016530][T13187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.016543][T13187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.016554][T13187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.016566][T13187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.016826][T13187] [ 452.413805][ T43] audit: type=1800 audit(1789991552.578:2217): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 453.604573][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 453.604607][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 453.717441][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 453.717477][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 454.535358][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 454.535381][ T43] audit: type=1800 audit(1789991554.688:2220): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 454.644271][ T43] audit: type=1800 audit(1789991554.808:2221): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163138 res=0 errno=0 [ 454.824246][ T43] audit: type=1800 audit(1789991554.988:2222): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 454.978531][T13202] Bluetooth: MGMT ver 1.23 [ 455.547354][ T43] audit: type=1800 audit(1789991555.698:2223): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 456.109970][ T43] audit: type=1800 audit(1789991556.278:2224): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 456.296514][ T43] audit: type=1800 audit(1789991556.458:2225): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 456.484738][T13217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1331'. [ 457.000861][T13225] netlink: 'syz.6.1333': attribute type 8 has an invalid length. [ 457.035088][ T43] audit: type=1800 audit(1789991557.198:2226): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1332" name="p_chmask" dev="configfs" ino=36642 res=0 errno=0 [ 457.730013][ T43] audit: type=1800 audit(1789991557.898:2227): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 457.973029][ T43] audit: type=1800 audit(1789991558.138:2228): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 458.435609][ T43] audit: type=1800 audit(1789991558.598:2229): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 459.415839][T12870] syz.4.1247 (12870) used greatest stack depth: 16944 bytes left [ 459.654958][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 459.654977][ T43] audit: type=1800 audit(1789991559.818:2232): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 459.790134][ T43] audit: type=1800 audit(1789991559.958:2233): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 459.917421][ T43] audit: type=1800 audit(1789991560.058:2234): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 460.015001][ T43] audit: type=1800 audit(1789991560.178:2235): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 460.214681][T13250] futex_wake_op: syz.1.1337 tries to shift op by 144; fix this program [ 460.308741][ T43] audit: type=1800 audit(1789991560.478:2236): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 460.534111][T13255] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 460.534139][T13255] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 460.534152][T13255] PKCS7: Unsupported data type 106 [ 460.680386][ T43] audit: type=1800 audit(1789991560.848:2237): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 460.942384][ T43] audit: type=1800 audit(1789991561.108:2238): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 461.178132][ T43] audit: type=1800 audit(1789991561.348:2239): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 461.401286][ T43] audit: type=1800 audit(1789991561.568:2240): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 461.683362][ T43] audit: type=1800 audit(1789991561.848:2241): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 462.966730][T13286] FAULT_INJECTION: forcing a failure. [ 462.966730][T13286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.966762][T13286] CPU: 0 UID: 0 PID: 13286 Comm: syz.1.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.966781][T13286] Tainted: [L]=SOFTLOCKUP [ 462.966789][T13286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.966799][T13286] Call Trace: [ 462.966813][T13286] [ 462.966829][T13286] dump_stack_lvl+0x100/0x190 [ 462.966915][T13286] should_fail_ex.cold+0x5/0xa [ 462.967073][T13286] _copy_from_user+0x2e/0xd0 [ 462.967133][T13286] rfcomm_sock_setsockopt+0x70b/0x7d0 [ 462.967225][T13286] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 462.967343][T13286] ? aa_sock_opt_perm+0x114/0x1e0 [ 462.967424][T13286] ? __pfx_rfcomm_sock_setsockopt+0x10/0x10 [ 462.967494][T13286] do_sock_setsockopt+0xf3/0x1d0 [ 462.967651][T13286] __sys_setsockopt+0x119/0x190 [ 462.967776][T13286] __ia32_sys_setsockopt+0xbc/0x160 [ 462.967814][T13286] ? __do_fast_syscall_32+0xb3/0x8b0 [ 462.967865][T13286] ? lockdep_hardirqs_on+0x7d/0x110 [ 462.967941][T13286] __do_fast_syscall_32+0x13a/0x8b0 [ 462.967991][T13286] ? lockdep_hardirqs_on+0x7d/0x110 [ 462.968066][T13286] do_fast_syscall_32+0x32/0x70 [ 462.968118][T13286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.968156][T13286] RIP: 0023:0xf7f04fec [ 462.968219][T13286] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 462.968231][T13286] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 462.968258][T13286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000012 [ 462.968273][T13286] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000000000004 [ 462.968287][T13286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.968303][T13286] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.968318][T13286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.968603][T13286] [ 463.883855][T13291] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1350'. [ 463.884002][T13291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1350'. [ 464.374229][T13301] FAULT_INJECTION: forcing a failure. [ 464.374229][T13301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.374272][T13301] CPU: 0 UID: 0 PID: 13301 Comm: syz.6.1352 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.374291][T13301] Tainted: [L]=SOFTLOCKUP [ 464.374298][T13301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.374307][T13301] Call Trace: [ 464.374320][T13301] [ 464.374334][T13301] dump_stack_lvl+0x100/0x190 [ 464.374416][T13301] should_fail_ex.cold+0x5/0xa [ 464.374552][T13301] _copy_to_user+0x32/0xd0 [ 464.374631][T13301] simple_read_from_buffer+0xcb/0x170 [ 464.374722][T13301] proc_fail_nth_read+0x1af/0x230 [ 464.374833][T13301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.374913][T13301] ? rw_verify_area+0xce/0x6d0 [ 464.374960][T13301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.375033][T13301] vfs_read+0x1e4/0xb40 [ 464.375133][T13301] ? lock_acquire+0x1d1/0x380 [ 464.375180][T13301] ? __fget_files+0x34/0x3d0 [ 464.375211][T13301] ? __pfx_vfs_read+0x10/0x10 [ 464.375231][T13301] ? find_held_lock+0x2b/0x80 [ 464.375282][T13301] ? __fget_files+0x215/0x3d0 [ 464.375448][T13301] ? __fget_files+0x21f/0x3d0 [ 464.375605][T13301] ksys_read+0x12a/0x250 [ 464.375673][T13301] ? __pfx_ksys_read+0x10/0x10 [ 464.375838][T13301] do_int80_emulation+0x166/0x650 [ 464.375967][T13301] asm_int80_emulation+0x1a/0x20 [ 464.376009][T13301] RIP: 0023:0xf71b75ab [ 464.376036][T13301] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 464.376051][T13301] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 464.376070][T13301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 464.376081][T13301] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 464.376091][T13301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.376101][T13301] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.376112][T13301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.376382][T13301] [ 464.865917][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 464.865941][ T43] audit: type=1800 audit(1789991565.028:2252): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 464.968060][T13306] FAULT_INJECTION: forcing a failure. [ 464.968060][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 464.968116][T13306] CPU: 3 UID: 0 PID: 13306 Comm: syz.1.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.968142][T13306] Tainted: [L]=SOFTLOCKUP [ 464.968156][T13306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.968171][T13306] Call Trace: [ 464.968196][T13306] [ 464.968209][T13306] dump_stack_lvl+0x100/0x190 [ 464.968275][T13306] should_fail_ex.cold+0x5/0xa [ 464.968427][T13306] should_failslab+0xc2/0x120 [ 464.968512][T13306] kmem_cache_alloc_noprof+0x92/0x6a0 [ 464.968548][T13306] ? xfd_validate_state+0x129/0x190 [ 464.968586][T13306] ? new_userfaultfd+0x7d/0x400 [ 464.968713][T13306] new_userfaultfd+0x7d/0x400 [ 464.968834][T13306] __ia32_sys_userfaultfd+0x4b/0xb0 [ 464.968867][T13306] __do_fast_syscall_32+0x13a/0x8b0 [ 464.968970][T13306] do_fast_syscall_32+0x32/0x70 [ 464.969045][T13306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.969091][T13306] RIP: 0023:0xf7f04fec [ 464.969162][T13306] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 464.969177][T13306] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 464.969193][T13306] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 464.969202][T13306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.969211][T13306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.969220][T13306] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.969230][T13306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.969483][T13306] [ 464.985637][T13309] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 464.986930][T13310] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 465.040393][T13306] nbd: must specify a device to reconfigure [ 465.233266][T13313] netlink: 'syz.6.1355': attribute type 2 has an invalid length. [ 465.661701][ T43] audit: type=1800 audit(1789991565.828:2253): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 465.935628][ T43] audit: type=1800 audit(1789991566.098:2254): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 466.565489][ T43] audit: type=1800 audit(1789991566.728:2255): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 466.855963][ T43] audit: type=1800 audit(1789991567.018:2256): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 467.123518][ T43] audit: type=1800 audit(1789991567.278:2257): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 467.333450][ T43] audit: type=1800 audit(1789991567.488:2258): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 467.498620][ T43] audit: type=1800 audit(1789991567.668:2259): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 467.637410][ T43] audit: type=1800 audit(1789991567.798:2260): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 467.660584][ T43] audit: type=1800 audit(1789991567.828:2261): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163290 res=0 errno=0 [ 468.406640][T13349] netlink: 'syz.4.1365': attribute type 2 has an invalid length. [ 468.620176][T13352] FAULT_INJECTION: forcing a failure. [ 468.620176][T13352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.620227][T13352] CPU: 1 UID: 0 PID: 13352 Comm: syz.6.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.620250][T13352] Tainted: [L]=SOFTLOCKUP [ 468.620257][T13352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.620267][T13352] Call Trace: [ 468.620279][T13352] [ 468.620293][T13352] dump_stack_lvl+0x100/0x190 [ 468.620369][T13352] should_fail_ex.cold+0x5/0xa [ 468.620426][T13352] ? prepare_alloc_pages+0x16d/0x5b0 [ 468.620546][T13352] should_fail_alloc_page+0xeb/0x140 [ 468.620614][T13352] prepare_alloc_pages+0x1f0/0x5b0 [ 468.620739][T13352] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 468.620895][T13352] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 468.621005][T13352] ? check_buffer+0x13f/0x820 [ 468.621060][T13352] ? __pfx_trace_clock_local+0x10/0x10 [ 468.621179][T13352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 468.621282][T13352] ? __pfx_trace_clock_local+0x10/0x10 [ 468.621415][T13352] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 468.621625][T13352] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 468.621740][T13352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.621804][T13352] ? policy_nodemask+0xed/0x4f0 [ 468.621921][T13352] alloc_pages_mpol+0x201/0x550 [ 468.622021][T13352] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 468.622065][T13352] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 468.622222][T13352] folio_alloc_mpol_noprof+0x36/0x260 [ 468.622317][T13352] vma_alloc_folio_noprof+0xed/0x1d0 [ 468.622362][T13352] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 468.622584][T13352] do_anonymous_page+0xac9/0x2050 [ 468.622763][T13352] ? __pfx_do_anonymous_page+0x10/0x10 [ 468.622802][T13352] ? rcu_read_unlock+0x2d/0xb0 [ 468.622858][T13352] ? rcu_read_unlock+0x2d/0xb0 [ 468.622906][T13352] ? __pte_offset_map+0x179/0x310 [ 468.623004][T13352] __handle_mm_fault+0x1ff3/0x2f60 [ 468.623189][T13352] ? __pfx___handle_mm_fault+0x10/0x10 [ 468.623214][T13352] ? __pfx_mt_find+0x10/0x10 [ 468.623517][T13352] ? find_vma+0xbf/0x140 [ 468.623567][T13352] ? __pfx_find_vma+0x10/0x10 [ 468.623709][T13352] handle_mm_fault+0x363/0xa20 [ 468.623838][T13352] do_user_addr_fault+0x745/0x12f0 [ 468.624029][T13352] exc_page_fault+0x6f/0xd0 [ 468.624102][T13352] asm_exc_page_fault+0x26/0x30 [ 468.624139][T13352] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 468.624174][T13352] Code: 00 e8 94 3b e5 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 bc 81 57 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 468.624192][T13352] RSP: 0018:ffffc900077ef9e8 EFLAGS: 00050246 [ 468.624217][T13352] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 0000000000000005 [ 468.624232][T13352] RDX: 0000000000000001 RSI: ffff888062868000 RDI: 0000000080002140 [ 468.624246][T13352] RBP: ffffc900077efbf0 R08: 0000000000000000 R09: ffffed100c50d000 [ 468.624261][T13352] R10: ffff888062868004 R11: 0000000000000001 R12: ffff888062868000 [ 468.624275][T13352] R13: 0000000000000000 R14: 0000000080002140 R15: 0000000000000005 [ 468.624520][T13352] ? _copy_to_iter+0x4b4/0x1720 [ 468.624675][T13352] ? __pfx__copy_to_iter+0x10/0x10 [ 468.624701][T13352] ? _raw_spin_unlock+0x28/0x50 [ 468.624865][T13352] ? proc_oom_score+0xe6/0x120 [ 468.624986][T13352] seq_read_iter+0xdab/0x1270 [ 468.625241][T13352] seq_read+0x344/0x4d0 [ 468.625323][T13352] ? __pfx_seq_read+0x10/0x10 [ 468.625483][T13352] ? common_file_perm+0x266/0x500 [ 468.625690][T13352] ? rw_verify_area+0xce/0x6d0 [ 468.625726][T13352] ? __pfx_seq_read+0x10/0x10 [ 468.625777][T13352] vfs_read+0x1e4/0xb40 [ 468.625853][T13352] ? lock_acquire+0x1d1/0x380 [ 468.625901][T13352] ? __fget_files+0x34/0x3d0 [ 468.625965][T13352] ? __pfx_vfs_read+0x10/0x10 [ 468.626001][T13352] ? find_held_lock+0x2b/0x80 [ 468.626045][T13352] ? __fget_files+0x215/0x3d0 [ 468.626164][T13352] ? __fget_files+0x21f/0x3d0 [ 468.626349][T13352] ksys_read+0x12a/0x250 [ 468.626400][T13352] ? __pfx_ksys_read+0x10/0x10 [ 468.626428][T13352] ? ksys_write+0x1ac/0x250 [ 468.626484][T13352] ? __pfx_ksys_write+0x10/0x10 [ 468.626625][T13352] __do_fast_syscall_32+0x13a/0x8b0 [ 468.626660][T13352] ? lockdep_hardirqs_on+0x7d/0x110 [ 468.626761][T13352] do_fast_syscall_32+0x32/0x70 [ 468.626837][T13352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.626884][T13352] RIP: 0023:0xf707efec [ 468.626919][T13352] Code: Unable to access opcode bytes at 0xf707efc2. [ 468.626928][T13352] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 468.626945][T13352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002140 [ 468.626956][T13352] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.626966][T13352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.626976][T13352] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 468.626987][T13352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.627243][T13352] [ 469.334821][T13360] autofs: Bad value for 'fd' [ 470.075318][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 470.075343][ T43] audit: type=1800 audit(1789991570.238:2269): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 470.270574][ T43] audit: type=1800 audit(1789991570.438:2270): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 470.568994][ T43] audit: type=1800 audit(1789991570.738:2271): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 470.951353][T13383] FAULT_INJECTION: forcing a failure. [ 470.951353][T13383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.951399][T13383] CPU: 0 UID: 0 PID: 13383 Comm: syz.1.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.951431][T13383] Tainted: [L]=SOFTLOCKUP [ 470.951448][T13383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.951467][T13383] Call Trace: [ 470.951505][T13383] [ 470.951533][T13383] dump_stack_lvl+0x100/0x190 [ 470.951658][T13383] should_fail_ex.cold+0x5/0xa [ 470.951747][T13383] _copy_to_user+0x32/0xd0 [ 470.951870][T13383] simple_read_from_buffer+0xcb/0x170 [ 470.951987][T13383] proc_fail_nth_read+0x1af/0x230 [ 470.952063][T13383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.952191][T13383] ? rw_verify_area+0xce/0x6d0 [ 470.952266][T13383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.952309][T13383] vfs_read+0x1e4/0xb40 [ 470.952396][T13383] ? lock_acquire+0x1d1/0x380 [ 470.952447][T13383] ? __fget_files+0x34/0x3d0 [ 470.952512][T13383] ? __pfx_vfs_read+0x10/0x10 [ 470.952547][T13383] ? find_held_lock+0x2b/0x80 [ 470.952628][T13383] ? __fget_files+0x215/0x3d0 [ 470.952733][T13383] ? __fget_files+0x21f/0x3d0 [ 470.952941][T13383] ksys_read+0x12a/0x250 [ 470.952987][T13383] ? __pfx_ksys_read+0x10/0x10 [ 470.953214][T13383] do_int80_emulation+0x166/0x650 [ 470.953304][T13383] asm_int80_emulation+0x1a/0x20 [ 470.953340][T13383] RIP: 0023:0xf71075ab [ 470.953401][T13383] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 470.953421][T13383] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 470.953451][T13383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53c65d0 [ 470.953467][T13383] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 470.953482][T13383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.953502][T13383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 470.953518][T13383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.953801][T13383] [ 471.483080][ T43] audit: type=1800 audit(1789991571.648:2272): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 471.718687][T13387] netlink: 'syz.1.1374': attribute type 2 has an invalid length. [ 471.725135][ T43] audit: type=1800 audit(1789991571.888:2273): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 472.300980][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 472.318923][ T43] audit: type=1800 audit(1789991572.478:2274): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 472.383453][ T43] audit: type=1800 audit(1789991572.548:2275): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1375" name="delay_use" dev="sysfs" ino=62372 res=0 errno=0 [ 473.068141][ T43] audit: type=1800 audit(1789991573.228:2276): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 473.489885][T13410] autofs: Bad value for 'fd' [ 473.933011][ T43] audit: type=1800 audit(1789991574.098:2277): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 474.397767][ T43] audit: type=1800 audit(1789991574.568:2278): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 474.955703][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 475.461032][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 475.461058][ T43] audit: type=1800 audit(1789991575.628:2282): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 475.527637][T13426] netlink: 'syz.6.1382': attribute type 8 has an invalid length. [ 475.689637][ T43] audit: type=1800 audit(1789991575.858:2283): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 475.883160][ T43] audit: type=1800 audit(1789991576.048:2284): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 476.074208][T13434] netlink: 'syz.2.1384': attribute type 2 has an invalid length. [ 476.450240][ T43] audit: type=1800 audit(1789991576.618:2285): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 476.694118][ T43] audit: type=1800 audit(1789991576.858:2286): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 476.840916][ T43] audit: type=1800 audit(1789991577.008:2287): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 477.237523][ T43] audit: type=1326 audit(1789991577.398:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.4.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 477.237948][ T43] audit: type=1326 audit(1789991577.398:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.4.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 477.279205][ T43] audit: type=1326 audit(1789991577.438:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.4.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 477.286062][ T43] audit: type=1326 audit(1789991577.448:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.4.1389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 477.690431][T13452] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1390'. [ 477.889055][T13452] syz.6.1390: attempt to access beyond end of device [ 477.889055][T13452] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 477.889103][T13452] gfs2: error -5 reading superblock [ 478.555081][T13463] FAULT_INJECTION: forcing a failure. [ 478.555081][T13463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.555116][T13463] CPU: 3 UID: 0 PID: 13463 Comm: syz.1.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.555139][T13463] Tainted: [L]=SOFTLOCKUP [ 478.555147][T13463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.555159][T13463] Call Trace: [ 478.555174][T13463] [ 478.555193][T13463] dump_stack_lvl+0x100/0x190 [ 478.555291][T13463] should_fail_ex.cold+0x5/0xa [ 478.555456][T13463] _copy_to_user+0x32/0xd0 [ 478.555542][T13463] simple_read_from_buffer+0xcb/0x170 [ 478.555654][T13463] proc_fail_nth_read+0x1af/0x230 [ 478.555775][T13463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.555848][T13463] ? rw_verify_area+0xce/0x6d0 [ 478.555897][T13463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.555973][T13463] vfs_read+0x1e4/0xb40 [ 478.556109][T13463] ? lock_acquire+0x1d1/0x380 [ 478.556144][T13463] ? __fget_files+0x34/0x3d0 [ 478.556177][T13463] ? __pfx_vfs_read+0x10/0x10 [ 478.556213][T13463] ? find_held_lock+0x2b/0x80 [ 478.556267][T13463] ? __fget_files+0x215/0x3d0 [ 478.556460][T13463] ? __fget_files+0x21f/0x3d0 [ 478.556617][T13463] ksys_read+0x12a/0x250 [ 478.556686][T13463] ? __pfx_ksys_read+0x10/0x10 [ 478.556849][T13463] do_int80_emulation+0x166/0x650 [ 478.556985][T13463] asm_int80_emulation+0x1a/0x20 [ 478.557018][T13463] RIP: 0023:0xf71075ab [ 478.557047][T13463] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 478.557062][T13463] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 478.557081][T13463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 478.557092][T13463] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 478.557103][T13463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.557113][T13463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 478.557124][T13463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.557378][T13463] [ 478.715448][T13455] FAULT_INJECTION: forcing a failure. [ 478.715448][T13455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 478.715486][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.6.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.715505][T13455] Tainted: [L]=SOFTLOCKUP [ 478.715513][T13455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.715522][T13455] Call Trace: [ 478.715537][T13455] [ 478.715553][T13455] dump_stack_lvl+0x100/0x190 [ 478.715638][T13455] should_fail_ex.cold+0x5/0xa [ 478.715676][T13455] ? rb_commit+0x129/0x9d0 [ 478.715801][T13455] get_futex_key+0x293/0x14f0 [ 478.715886][T13455] ? __pfx_get_futex_key+0x10/0x10 [ 478.715964][T13455] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 478.716143][T13455] futex_wake+0xf4/0x5e0 [ 478.716184][T13455] ? trace_event_buffer_commit+0x20a/0xa80 [ 478.716309][T13455] ? __pfx_futex_wake+0x10/0x10 [ 478.716408][T13455] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 478.716454][T13455] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 478.716662][T13455] do_futex+0x2b2/0x440 [ 478.716723][T13455] ? __pfx_do_futex+0x10/0x10 [ 478.716745][T13455] ? __might_fault+0xc5/0x140 [ 478.716960][T13455] mm_exit_exec_release+0x256/0x2f0 [ 478.717020][T13455] do_exit+0x707/0x2ae0 [ 478.717182][T13455] ? __pfx_do_exit+0x10/0x10 [ 478.717263][T13455] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 478.717304][T13455] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 478.717400][T13455] do_group_exit+0xd5/0x2a0 [ 478.717529][T13455] get_signal+0x1ec7/0x21e0 [ 478.717677][T13455] ? putname+0xb1/0x110 [ 478.717782][T13455] ? __pfx_get_signal+0x10/0x10 [ 478.717871][T13455] ? do_futex+0x190/0x440 [ 478.717969][T13455] arch_do_signal_or_restart+0x91/0x7a0 [ 478.718067][T13455] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.718213][T13455] ? xfd_validate_state+0x129/0x190 [ 478.718403][T13455] exit_to_user_mode_loop+0x139/0x700 [ 478.718440][T13455] ? rcu_is_watching+0x13/0xc0 [ 478.718526][T13455] __do_fast_syscall_32+0x59f/0x8b0 [ 478.718674][T13455] do_fast_syscall_32+0x32/0x70 [ 478.718717][T13455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.718744][T13455] RIP: 0023:0xf707efec [ 478.718788][T13455] Code: Unable to access opcode bytes at 0xf707efc2. [ 478.718798][T13455] RSP: 002b:00000000f544c5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 478.718821][T13455] RAX: fffffffffffffe00 RBX: 00000000f7475020 RCX: 0000000000000080 [ 478.718833][T13455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7475024 [ 478.718845][T13455] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 478.718858][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.718870][T13455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.719126][T13455] [ 479.025355][T13466] kernel read not supported for file /config.gz (pid: 13466 comm: syz.2.1393) [ 479.165796][T13469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1393'. [ 479.355711][T13468] : entered promiscuous mode [ 480.120555][T13487] netlink: 'syz.4.1398': attribute type 8 has an invalid length. [ 480.559456][ T43] kauditd_printk_skb: 101 callbacks suppressed [ 480.559480][ T43] audit: type=1800 audit(1789991580.728:2393): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 481.365296][ T43] audit: type=1800 audit(1789991581.528:2394): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 481.656938][ T43] audit: type=1800 audit(1789991581.818:2395): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 481.916787][ T43] audit: type=1800 audit(1789991582.078:2396): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 482.202672][ T43] audit: type=1800 audit(1789991582.368:2397): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 482.461650][ T43] audit: type=1800 audit(1789991582.628:2398): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 482.672287][ T43] audit: type=1800 audit(1789991582.838:2399): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 482.976122][ T43] audit: type=1800 audit(1789991583.138:2400): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 483.329163][ T43] audit: type=1800 audit(1789991583.498:2401): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 483.545082][ T43] audit: type=1800 audit(1789991583.708:2402): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 483.789213][T13539] netlink: 'syz.4.1413': attribute type 8 has an invalid length. [ 484.987501][T13552] : entered promiscuous mode [ 485.634096][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 485.634114][ T43] audit: type=1800 audit(1789991585.798:2410): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 485.774277][ T43] audit: type=1800 audit(1789991585.938:2411): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 485.941363][ T43] audit: type=1800 audit(1789991586.098:2412): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 486.142238][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.177531][T12461] Bluetooth: hci0: Malformed LE Event: 0x0b [ 486.213055][T13565] netlink: 'syz.6.1421': attribute type 1 has an invalid length. [ 486.213084][T13565] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1421'. [ 486.213105][T13565] netlink: 'syz.6.1421': attribute type 2 has an invalid length. [ 486.213124][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1421'. [ 486.424746][ T43] audit: type=1800 audit(1789991586.588:2413): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 487.024773][ T43] audit: type=1800 audit(1789991587.188:2414): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 487.603835][ T43] audit: type=1800 audit(1789991587.768:2415): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 487.735630][T12461] Bluetooth: hci0: command 0x0406 tx timeout [ 488.250186][ T43] audit: type=1800 audit(1789991588.408:2416): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 488.459635][ T43] audit: type=1800 audit(1789991588.628:2417): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 488.665510][ T43] audit: type=1800 audit(1789991588.828:2418): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 488.918475][ T43] audit: type=1800 audit(1789991589.088:2419): pid=13600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1429" name="p_chmask" dev="configfs" ino=40030 res=0 errno=0 [ 489.525872][T13603] FAULT_INJECTION: forcing a failure. [ 489.525872][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 489.525918][T13603] CPU: 2 UID: 0 PID: 13603 Comm: syz.2.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.525946][T13603] Tainted: [L]=SOFTLOCKUP [ 489.525959][T13603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.525975][T13603] Call Trace: [ 489.526003][T13603] [ 489.526034][T13603] dump_stack_lvl+0x100/0x190 [ 489.526120][T13603] should_fail_ex.cold+0x5/0xa [ 489.526220][T13603] should_failslab+0xc2/0x120 [ 489.526286][T13603] kmem_cache_alloc_noprof+0x92/0x6a0 [ 489.526327][T13603] ? xfd_validate_state+0x129/0x190 [ 489.526399][T13603] ? new_userfaultfd+0x7d/0x400 [ 489.526501][T13603] new_userfaultfd+0x7d/0x400 [ 489.526603][T13603] __ia32_sys_userfaultfd+0x4b/0xb0 [ 489.526679][T13603] __do_fast_syscall_32+0x13a/0x8b0 [ 489.526763][T13603] do_fast_syscall_32+0x32/0x70 [ 489.526818][T13603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.526856][T13603] RIP: 0023:0xf6feefec [ 489.526918][T13603] Code: Unable to access opcode bytes at 0xf6feefc2. [ 489.526937][T13603] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 489.526966][T13603] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 489.526983][T13603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.526999][T13603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.527015][T13603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 489.527031][T13603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.527332][T13603] [ 489.741246][T13603] nbd: must specify a device to reconfigure [ 489.855616][T13610] : entered promiscuous mode [ 490.749860][T13619] netlink: 'syz.2.1432': attribute type 8 has an invalid length. [ 490.818088][T13618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1433'. [ 491.295345][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 491.295371][ T43] audit: type=1800 audit(1789991591.448:2425): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 491.641815][ T43] audit: type=1800 audit(1789991591.808:2426): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 491.774707][ T43] audit: type=1800 audit(1789991591.938:2427): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 491.856206][ T9412] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 492.054730][ T9412] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 492.076870][ T9412] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.096135][ T9412] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 492.096158][ T9412] usb 7-1: Product: syz [ 492.096169][ T9412] usb 7-1: Manufacturer: syz [ 492.096179][ T9412] usb 7-1: SerialNumber: syz [ 492.336748][ T43] audit: type=1800 audit(1789991592.498:2428): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 492.419765][ T43] audit: type=1800 audit(1789991592.578:2429): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163769 res=0 errno=0 [ 492.484248][ T43] audit: type=1800 audit(1789991592.648:2430): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163801 res=0 errno=0 [ 492.530562][ T43] audit: type=1800 audit(1789991592.688:2431): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163776 res=0 errno=0 [ 492.609863][ T43] audit: type=1800 audit(1789991592.778:2432): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=163777 res=0 errno=0 [ 492.728452][ T9412] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 492.792756][T13643] FAULT_INJECTION: forcing a failure. [ 492.792756][T13643] name failslab, interval 1, probability 0, space 0, times 0 [ 492.792803][T13643] CPU: 2 UID: 0 PID: 13643 Comm: syz.4.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.792825][T13643] Tainted: [L]=SOFTLOCKUP [ 492.792833][T13643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 492.792844][T13643] Call Trace: [ 492.792860][T13643] [ 492.792877][T13643] dump_stack_lvl+0x100/0x190 [ 492.792974][T13643] should_fail_ex.cold+0x5/0xa [ 492.793106][T13643] should_failslab+0xc2/0x120 [ 492.793146][T13643] __kmalloc_noprof+0xfc/0x840 [ 492.793173][T13643] ? rcu_is_watching+0x13/0xc0 [ 492.793217][T13643] ? tomoyo_realpath_from_path+0xb6/0x690 [ 492.793388][T13643] tomoyo_realpath_from_path+0xb6/0x690 [ 492.793506][T13643] tomoyo_check_open_permission+0x2af/0x3c0 [ 492.793588][T13643] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 492.793767][T13643] ? hook_file_open+0x248/0x8e0 [ 492.794257][T13643] tomoyo_file_open+0x6b/0x90 [ 492.794338][T13643] security_file_open+0xb5/0x1e0 [ 492.794406][T13643] do_dentry_open+0x588/0x14d0 [ 492.794573][T13643] vfs_open+0x82/0x3f0 [ 492.794737][T13643] path_openat+0x19fa/0x2440 [ 492.794833][T13643] ? __pfx_path_openat+0x10/0x10 [ 492.794944][T13643] ? trace_event_buffer_commit+0x20a/0xa80 [ 492.795057][T13643] do_file_open+0x20e/0x430 [ 492.795146][T13643] ? __pfx_do_file_open+0x10/0x10 [ 492.795177][T13643] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 492.795571][T13643] ? _raw_spin_unlock+0x28/0x50 [ 492.795604][T13643] ? alloc_fd+0x471/0x7a0 [ 492.795827][T13643] do_sys_openat2+0x10f/0x1e0 [ 492.795873][T13643] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.795946][T13643] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 492.796015][T13643] ? __fget_files+0x21f/0x3d0 [ 492.796167][T13643] __ia32_sys_creat+0xcb/0x120 [ 492.796212][T13643] ? __pfx___ia32_sys_creat+0x10/0x10 [ 492.796297][T13643] ? __pfx_ksys_write+0x10/0x10 [ 492.796412][T13643] ? __do_fast_syscall_32+0xb3/0x8b0 [ 492.796492][T13643] __do_fast_syscall_32+0x13a/0x8b0 [ 492.796523][T13643] ? lockdep_hardirqs_on+0x7d/0x110 [ 492.796604][T13643] do_fast_syscall_32+0x32/0x70 [ 492.796669][T13643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.796713][T13643] RIP: 0023:0xf7f82fec [ 492.796783][T13643] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 492.796797][T13643] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 492.796824][T13643] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 000000000000000c [ 492.796834][T13643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.796842][T13643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.796851][T13643] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 492.796860][T13643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.797111][T13643] [ 492.816355][ T43] audit: type=1800 audit(1789991592.978:2433): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=163798 res=0 errno=0 [ 492.831719][T13643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.871170][ T43] audit: type=1800 audit(1789991593.028:2434): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=163799 res=0 errno=0 [ 492.874469][ T9412] usb 7-1: USB disconnect, device number 26 [ 493.161073][ T9412] usblp0: removed [ 493.919248][T13661] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 494.812046][ T9410] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 495.016922][ T9410] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 495.041493][ T9410] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.048512][ T9410] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.106211][ T9410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.106237][ T9410] usb 7-1: Product: syz [ 495.106250][ T9410] usb 7-1: Manufacturer: syz [ 495.106264][ T9410] usb 7-1: SerialNumber: syz [ 495.255143][ T9410] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 495.444282][ T9410] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 495.731838][T13684] FAULT_INJECTION: forcing a failure. [ 495.731838][T13684] name failslab, interval 1, probability 0, space 0, times 0 [ 495.731887][T13684] CPU: 2 UID: 0 PID: 13684 Comm: syz.4.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.731912][T13684] Tainted: [L]=SOFTLOCKUP [ 495.731925][T13684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.731940][T13684] Call Trace: [ 495.731970][T13684] [ 495.731991][T13684] dump_stack_lvl+0x100/0x190 [ 495.732054][T13684] should_fail_ex.cold+0x5/0xa [ 495.732178][T13684] should_failslab+0xc2/0x120 [ 495.732254][T13684] kmem_cache_alloc_noprof+0x92/0x6a0 [ 495.732338][T13684] ? xfd_validate_state+0x129/0x190 [ 495.732377][T13684] ? new_userfaultfd+0x7d/0x400 [ 495.732506][T13684] new_userfaultfd+0x7d/0x400 [ 495.732627][T13684] __ia32_sys_userfaultfd+0x4b/0xb0 [ 495.732671][T13684] __do_fast_syscall_32+0x13a/0x8b0 [ 495.732812][T13684] do_fast_syscall_32+0x32/0x70 [ 495.732887][T13684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.732934][T13684] RIP: 0023:0xf7f82fec [ 495.733005][T13684] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 495.733019][T13684] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 495.733049][T13684] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 495.733058][T13684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.733067][T13684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.733076][T13684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.733085][T13684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.733371][T13684] [ 495.758308][ T9410] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 496.121945][T13684] nbd: must specify a device to reconfigure [ 496.335246][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 496.335270][ T43] audit: type=1800 audit(1789991596.498:2457): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164064 res=0 errno=0 [ 496.359448][T13661] nvme nvme0: failed to connect socket: -512 [ 496.360681][T13661] [ 496.363344][T13661] ====================================================== [ 496.365662][T13661] WARNING: possible circular locking dependency detected [ 496.367887][T13661] syzkaller #0 Tainted: G L [ 496.370089][T13661] ------------------------------------------------------ [ 496.372539][T13661] syz.6.1438/13661 is trying to acquire lock: [ 496.374647][T13661] ffff88801e917540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 496.377957][T13661] [ 496.377957][T13661] but task is already holding lock: [ 496.380281][T13661] ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 496.383097][T13661] [ 496.383097][T13661] which lock already depends on the new lock. [ 496.383097][T13661] [ 496.386294][T13661] [ 496.386294][T13661] the existing dependency chain (in reverse order) is: [ 496.389071][T13661] [ 496.389071][T13661] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 496.391479][T13661] lock_acquire+0x1d1/0x380 [ 496.393140][T13661] __mutex_lock+0x1a4/0x1bd0 [ 496.394784][T13661] nvmf_dev_show+0x26/0x210 [ 496.396425][T13661] seq_read_iter+0x32f/0x1270 [ 496.398175][T13661] seq_read+0x344/0x4d0 [ 496.399774][T13661] vfs_read+0x1e4/0xb40 [ 496.401417][T13661] ksys_read+0x12a/0x250 [ 496.402965][T13661] __do_fast_syscall_32+0x13a/0x8b0 [ 496.404808][T13661] do_fast_syscall_32+0x32/0x70 [ 496.406519][T13661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.408678][T13661] [ 496.408678][T13661] -> #3 (&p->lock){+.+.}-{4:4}: [ 496.410881][T13661] lock_acquire+0x1d1/0x380 [ 496.412699][T13661] __mutex_lock+0x1a4/0x1bd0 [ 496.414486][T13661] seq_read_iter+0xe1/0x1270 [ 496.416279][T13661] kernfs_fop_read_iter+0x46c/0x610 [ 496.418271][T13661] __kernel_read+0x397/0xad0 [ 496.419891][T13661] integrity_kernel_read+0x7e/0xb0 [ 496.421683][T13661] ima_calc_file_hash_tfm+0x25e/0x350 [ 496.423586][T13661] ima_calc_file_hash+0x1e3/0x380 [ 496.425361][T13661] ima_collect_measurement+0x94f/0xb30 [ 496.427281][T13661] process_measurement+0xdfe/0x2350 [ 496.429125][T13661] ima_file_check+0xcc/0x120 [ 496.430771][T13661] security_file_post_open+0xc4/0x210 [ 496.432757][T13661] path_openat+0x5cd/0x2440 [ 496.434407][T13661] do_file_open+0x20e/0x430 [ 496.436031][T13661] do_sys_openat2+0x10f/0x1e0 [ 496.437686][T13661] __x64_sys_openat+0x12d/0x210 [ 496.439385][T13661] do_syscall_64+0x121/0x770 [ 496.441020][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.443059][T13661] [ 496.443059][T13661] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 496.445788][T13661] lock_acquire+0x1d1/0x380 [ 496.447389][T13661] __mutex_lock+0x1a4/0x1bd0 [ 496.449022][T13661] process_measurement+0x5ab/0x2350 [ 496.450822][T13661] ima_file_check+0xcc/0x120 [ 496.452488][T13661] security_file_post_open+0xc4/0x210 [ 496.454382][T13661] path_openat+0x5cd/0x2440 [ 496.455981][T13661] do_file_open+0x20e/0x430 [ 496.457727][T13661] file_open_name+0x1c3/0x3e0 [ 496.459424][T13661] filp_open+0x2e/0x50 [ 496.460933][T13661] kernel_read_file_from_path_initns+0xec/0x240 [ 496.463159][T13661] _request_firmware+0x733/0x13c0 [ 496.464967][T13661] request_firmware+0x35/0x50 [ 496.466637][T13661] reg_reload_regdb+0x85/0x460 [ 496.468314][T13661] genl_family_rcv_msg_doit+0x214/0x300 [ 496.470247][T13661] genl_rcv_msg+0x560/0x800 [ 496.471933][T13661] netlink_rcv_skb+0x159/0x420 [ 496.473615][T13661] genl_rcv+0x28/0x40 [ 496.475076][T13661] netlink_unicast+0x585/0x850 [ 496.476777][T13661] netlink_sendmsg+0x8b0/0xda0 [ 496.478428][T13661] ____sys_sendmsg+0xa4d/0xbe0 [ 496.480102][T13661] ___sys_sendmsg+0x190/0x1e0 [ 496.481722][T13661] __sys_sendmsg+0x160/0x210 [ 496.483348][T13661] __do_fast_syscall_32+0x13a/0x8b0 [ 496.485199][T13661] do_fast_syscall_32+0x32/0x70 [ 496.486954][T13661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.489234][T13661] [ 496.489234][T13661] -> #1 (cb_lock){++++}-{4:4}: [ 496.491455][T13661] lock_acquire+0x1d1/0x380 [ 496.493124][T13661] down_read+0x99/0x4c0 [ 496.494626][T13661] genl_release+0x7e/0x1d0 [ 496.496198][T13661] netlink_release+0x105e/0x2000 [ 496.497943][T13661] __sock_release+0xb3/0x260 [ 496.499599][T13661] sock_close+0x1c/0x30 [ 496.501122][T13661] __fput+0x3ff/0xb50 [ 496.502608][T13661] fput_close_sync+0x118/0x250 [ 496.504298][T13661] __x64_sys_close+0x8b/0x120 [ 496.505947][T13661] do_syscall_64+0x121/0x770 [ 496.507583][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.508728][ T43] audit: type=1800 audit(1789991596.588:2458): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=163978 res=0 errno=0 [ 496.508969][ T43] audit: type=1800 audit(1789991596.618:2459): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=163981 res=0 errno=0 [ 496.522196][T13661] [ 496.522196][T13661] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 496.525432][T13661] check_prev_add+0xeb/0xe60 [ 496.527093][T13661] __lock_acquire+0x1528/0x1f40 [ 496.528834][T13661] lock_acquire+0x1d1/0x380 [ 496.530444][T13661] down_write+0x8b/0x1f0 [ 496.532017][T13661] __sock_release+0x86/0x260 [ 496.533660][T13661] sock_close+0x1c/0x30 [ 496.535170][T13661] __fput+0x3ff/0xb50 [ 496.536779][T13661] __fput_sync+0xd7/0x100 [ 496.538434][T13661] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 496.540493][T13661] nvme_tcp_configure_admin_queue+0x26/0x530 [ 496.542583][T13661] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 496.544360][T13661] nvme_tcp_create_ctrl+0x970/0xd90 [ 496.546529][T13661] nvmf_dev_write+0x4ee/0xb60 [ 496.548349][T13661] vfs_write+0x2aa/0x1050 [ 496.550237][T13661] ksys_write+0x12a/0x250 [ 496.551900][T13661] __do_fast_syscall_32+0x13a/0x8b0 [ 496.553751][T13661] do_fast_syscall_32+0x32/0x70 [ 496.555464][T13661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.557655][T13661] [ 496.557655][T13661] other info that might help us debug this: [ 496.557655][T13661] [ 496.560821][T13661] Chain exists of: [ 496.560821][T13661] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 496.560821][T13661] [ 496.565175][T13661] Possible unsafe locking scenario: [ 496.565175][T13661] [ 496.567549][T13661] CPU0 CPU1 [ 496.569248][T13661] ---- ---- [ 496.570933][T13661] lock(nvmf_dev_mutex); [ 496.572370][T13661] lock(&p->lock); [ 496.574363][T13661] lock(nvmf_dev_mutex); [ 496.576532][T13661] lock(&sb->s_type->i_mutex_key#13); [ 496.578329][T13661] [ 496.578329][T13661] *** DEADLOCK *** [ 496.578329][T13661] [ 496.580854][T13661] locks held by syz.6.1438/13661: 1, last CPU#2: [ 496.582858][T13661] #0: ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 496.586200][T13661] [ 496.586200][T13661] stack backtrace: [ 496.588096][T13661] CPU: 2 UID: 0 PID: 13661 Comm: syz.6.1438 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.591548][T13661] Tainted: [L]=SOFTLOCKUP [ 496.593193][T13661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.596470][T13661] Call Trace: [ 496.597567][T13661] [ 496.598530][T13661] dump_stack_lvl+0x100/0x190 [ 496.600185][T13661] print_circular_bug.cold+0x178/0x1be [ 496.602176][T13661] check_noncircular+0x146/0x160 [ 496.603923][T13661] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 496.606392][T13661] check_prev_add+0xeb/0xe60 [ 496.608069][T13661] __lock_acquire+0x1528/0x1f40 [ 496.609733][T13661] ? do_fast_syscall_32+0x32/0x70 [ 496.611378][T13661] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.613591][T13661] lock_acquire+0x1d1/0x380 [ 496.615130][T13661] ? __sock_release+0x86/0x260 [ 496.616748][T13661] ? __pfx___might_resched+0x10/0x10 [ 496.618604][T13661] down_write+0x8b/0x1f0 [ 496.619968][T13661] ? __sock_release+0x86/0x260 [ 496.621549][T13661] ? __pfx_down_write+0x10/0x10 [ 496.623184][T13661] ? __pfx_locks_remove_file+0x10/0x10 [ 496.625035][T13661] __sock_release+0x86/0x260 [ 496.626552][T13661] ? __pfx_sock_close+0x10/0x10 [ 496.628148][T13661] sock_close+0x1c/0x30 [ 496.629519][T13661] __fput+0x3ff/0xb50 [ 496.630887][T13661] ? kfree+0x22b/0x6d0 [ 496.632406][T13661] __fput_sync+0xd7/0x100 [ 496.633825][T13661] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 496.635934][T13661] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 496.637949][T13661] nvme_tcp_configure_admin_queue+0x26/0x530 [ 496.640026][T13661] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 496.641784][T13661] ? mark_held_locks+0x40/0x70 [ 496.643420][T13661] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 496.645354][T13661] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.647282][T13661] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 496.647447][ T43] audit: type=1800 audit(1789991596.808:2460): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=163994 res=0 errno=0 [ 496.655445][T13661] ? nvme_change_ctrl_state+0xc0/0x440 [ 496.657336][T13661] nvme_tcp_create_ctrl+0x970/0xd90 [ 496.659109][T13661] nvmf_dev_write+0x4ee/0xb60 [ 496.660769][T13661] vfs_write+0x2aa/0x1050 [ 496.662231][T13661] ? __pfx_nvmf_dev_write+0x10/0x10 [ 496.663904][T13661] ? lock_acquire+0x1d1/0x380 [ 496.665427][T13661] ? __fget_files+0x34/0x3d0 [ 496.667053][T13661] ? __pfx_vfs_write+0x10/0x10 [ 496.668606][T13661] ? find_held_lock+0x2b/0x80 [ 496.670192][T13661] ? __fget_files+0x215/0x3d0 [ 496.671950][T13661] ? __fget_files+0x215/0x3d0 [ 496.673612][T13661] ? __fget_files+0x21f/0x3d0 [ 496.675384][T13661] ksys_write+0x12a/0x250 [ 496.676856][T13661] ? __pfx_ksys_write+0x10/0x10 [ 496.678672][T13661] __do_fast_syscall_32+0x13a/0x8b0 [ 496.680443][T13661] do_fast_syscall_32+0x32/0x70 [ 496.682053][T13661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.684098][T13661] RIP: 0023:0xf707efec [ 496.685505][T13661] Code: Unable to access opcode bytes at 0xf707efc2. [ 496.687697][T13661] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 496.690722][T13661] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 496.693384][T13661] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.695931][T13661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.698475][T13661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 496.700997][T13661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.703917][T13661] [ 496.706656][ C2] hpet: Lost 21 RTC interrupts [ 496.925671][ T43] audit: type=1800 audit(1789991597.088:2461): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=164025 res=0 errno=0 [ 497.098377][ T43] audit: type=1800 audit(1789991597.268:2462): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 497.176413][T13669] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 497.994564][ T43] audit: type=1800 audit(1789991598.158:2463): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 501.027519][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.027793][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.023223][ T10] usb 7-1: USB disconnect, device number 27 [ 503.262360][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 503.311004][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 503.328545][ T10] ti_usb_3410_5052 7-1:2.0: device disconnected [ 503.380209][ T6774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.815687][ T6774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.012156][ T6774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.219279][ T6774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.530769][ T43] audit: type=1800 audit(1789991604.698:2464): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164188 res=0 errno=0 [ 504.548866][ T43] audit: type=1800 audit(1789991604.718:2465): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164193 res=0 errno=0 [ 504.557033][ T43] audit: type=1800 audit(1789991604.718:2466): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164197 res=0 errno=0 [ 504.565374][ T43] audit: type=1800 audit(1789991604.728:2467): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164196 res=0 errno=0 [ 504.579698][ T43] audit: type=1800 audit(1789991604.748:2468): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=164199 res=0 errno=0 [ 504.673473][ T43] audit: type=1800 audit(1789991604.838:2469): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164274 res=0 errno=0 [ 504.696837][ T43] audit: type=1800 audit(1789991604.858:2470): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164279 res=0 errno=0 [ 504.706396][ T43] audit: type=1800 audit(1789991604.868:2471): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164283 res=0 errno=0 [ 504.714094][ T43] audit: type=1800 audit(1789991604.878:2472): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164360 res=0 errno=0 [ 504.716177][ T43] audit: type=1800 audit(1789991604.878:2473): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164282 res=0 errno=0 [ 504.819048][ T6774] bridge_slave_1: left allmulticast mode [ 504.819087][ T6774] bridge_slave_1: left promiscuous mode [ 504.820293][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.839716][ T6774] bridge_slave_0: left allmulticast mode [ 504.839743][ T6774] bridge_slave_0: left promiscuous mode [ 504.840895][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.048346][ T6774] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 506.048376][ T6774] bridge1 (unregistering): left promiscuous mode [ 506.120517][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.161430][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.175621][ T6774] bond0 (unregistering): Released all slaves [ 506.235800][ T6774] bond1 (unregistering): Released all slaves