last executing test programs: 35.26047268s ago: executing program 2 (id=134): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002d80), 0x2c0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0], 0x5c}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002e80)='./proc\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x3, 0x4, &(0x7f0000002f80)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) mount(0x0, &(0x7f0000002fc0)='./proc\x00', &(0x7f0000003000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000003040)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r3, &(0x7f0000003080)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000030c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000003100)='./tracefs\x00', &(0x7f0000003140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003180)='./tracefs/instances/foo\x00', 0x1ff) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000031c0)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000003200), 0x521040) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000003240)={0x10004, 0x2, 0x5000, 0x2000, &(0x7f0000ff0000/0x2000)=nil, 0x0, r3}) (async) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000003300)={r5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003340)={0x1, &(0x7f0000003380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f0000000540)={'bond0\x00', @random="00009e0c1100"}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x28040a8, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000100)=""/1024, 0x400) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000002c80)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000002cc0)='fd', 0x0, r8) (async) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 35.205686743s ago: executing program 2 (id=138): r0 = io_uring_setup(0x4a86, &(0x7f0000000280)={0x0, 0x417c, 0x8000, 0x8001002, 0x1402b8}) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000025c0), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002600)={0x47, 0x1, 0x80, "b408754749573f7c17e6e724c609b9424f5a003870ac2600", 0x32314d4e}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000002440), 0x10) (async) listen(r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002340)=ANY=[@ANYBLOB="5eb61d8eb49dd8d7", @ANYRES64=0x3], 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000002480), 0x10) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f00000024c0)={0x1, 0x5}, 0x8) (async) sendmmsg(r6, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002580)='K', 0x1}], 0x1}}], 0x1, 0x4008040) (async) close_range(r0, 0xffffffffffffffff, 0x0) 35.131329925s ago: executing program 2 (id=142): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000540)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000580)={0x0, 0xf4c7, 0x800, 0x0, 0x3b3}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000640)=[0xffffffffffffffff], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x7, 0x8005, 0x40000060, 0x100007f, 0x17, "b9940b3413d0d200"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./gadget\x00', &(0x7f00000002c0)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r2, &(0x7f0000000340)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close(r2) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x161400, 0x0) syz_emit_ethernet(0xdf, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x4, 0x4e, 'Z', "5f787e116cbb3cc9feb13982c4e6843bb512f811d92e6e9b093df19b86424c24e2ff0264f3b8cb6379c77d3a419b8b84faeb570a71c822cf1a6352885037516669706290f06bfbb8b50943142c85529dd5765278bf77fec711b3f91f64547261ad2f9e6cf5041b8f08085d0fc0dea745976a4f6a2a1317119e4c901c2448672d553900f47e78700093d8663b5505d403a89442d6438ba80ae1286321c48ce43371a784c5f52369e7376496b6919bb8f651584b28175df088e0f0cde2bbc0c9294794d44f63ed"}}}}}, &(0x7f0000000200)={0x0, 0x2, [0x6aa, 0x1c1, 0xc2f, 0xac5]}) ioctl$I2C_PEC(r4, 0x708, 0x1ff) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$9p_fd(0x0, &(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), 0x1008441, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 35.061894046s ago: executing program 2 (id=143): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r1 = syz_io_uring_setup(0x7408, &(0x7f0000000980)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = io_uring_setup(0x1, &(0x7f0000000200)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)={&(0x7f0000000340), 0x1000}, &(0x7f0000000380)={&(0x7f00000003c0), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, &(0x7f0000000400)={0x0, 0x2}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000ac0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) (async) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 35.06131276s ago: executing program 2 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000001e00010302000000000000002d0000000000aa325f990000", 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0xfd, 0x1, 0x0, @private, @private=0xa010100}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x7ff}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140), 0xffffffffffffffff, 0xca521) pwrite64(r2, &(0x7f0000000240)="55a35f63f122853818b782a53b1d056794ceed8b467f35bb87d32a3d05236567575bf28c123d963478cfabddb4b063034bec6ed5a6941bb527abb3a7e35534c7a46c971d2a5b1b7483292bd17e11492073f1b23a99031ac91319e325cf1962fe883cd743a289208c6a97fa5445ad58fd0accfadecf2a67f090ddaaff5d6a172638fc61666ff2d77b622b86caad49f88d2a8e7a502c5620811843fb66b46a4f8b31940ad65067967f8a54720aa59452bf1d6aac22eb68615d252af1b48048ab47aad7d67ed0dda756926412bf8c79fc005ca2dd30867f68dbc23d9c61d6aed8587f35cb9b7b7a53590df19167509280fec601f919c0", 0xf5, 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x4, 0x3, 0xfffffff9, 0xa, "00000000020000000000002100", "00000001", "0052008f", '\x00', ["ec8ff93f5356497800", "004600000c000002ebfab0d0", "00f638000000007c0300", "ffe9ff0000000000000200"]}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000e00), 0x8, 0x42000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000e40)={0x7, {"c18029f9f2c7d36725d7a96e0ca6cfbe", "13ed6de8d7fe3c59abfad9e45f678935", "708eec7dabd5c3dfe086a230a5536586"}, 0x8, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000900), 0x1, 0x82702) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000940)={0x9}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x7, 0x40, 0x2, 0x648, 0x7, 0x9}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000480)='./file0\x00', 0x8fff5) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=[0x8], 0x0, 0x0, 0x1, 0x1, r10}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r8, 0x0) ptrace$setsig(0x4203, r10, 0x2, &(0x7f0000000600)={0xb, 0x1, 0x7f}) sendfile(r6, r6, 0x0, 0x7) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000980)={0x8, 0x0, r1}) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000dc0)={0x3, 0x0, 0x400, &(0x7f00000009c0)=[0xfb, 0xffff, 0x1, 0x10001, 0x0, 0xffffffffe39e0527, 0x9, 0x1, 0xffffffff80000000, 0x2, 0x5, 0x3, 0xd, 0x9, 0x5, 0xcc8, 0x7, 0x2, 0x7, 0x8, 0xfffffffffffffff1, 0x7f580f9a, 0x5, 0x8, 0x6, 0x4, 0x1, 0x4, 0x9, 0x0, 0x3, 0xffffffff, 0x40, 0x50ff, 0x6, 0x7, 0x0, 0x0, 0x7, 0x1ff, 0x2, 0x1ff, 0x7c2403b, 0x2, 0x37, 0x0, 0x5, 0x2, 0x3, 0x2, 0x7, 0x2b3b, 0x10000, 0x2, 0x48000, 0xb9, 0x1ff, 0x7918, 0xffffffffffffffff, 0xf, 0x1, 0x0, 0x2, 0x4, 0x6, 0x9, 0x9, 0x2, 0xb, 0x6, 0x2, 0x8, 0x9, 0xcbf8, 0x4, 0x7, 0x4, 0x5, 0xdf, 0x7, 0x0, 0x85, 0x401, 0x8, 0x1, 0xdb, 0x0, 0x0, 0x4, 0x401, 0x1, 0xffffffffffffff00, 0x4, 0x1, 0x6, 0x1, 0x8, 0xff, 0x10001, 0x8c, 0xd81, 0x7, 0x1538390a, 0x6, 0x4442, 0x3, 0x3, 0x5, 0x0, 0x2, 0x401, 0xc, 0x1, 0x6, 0x7fff, 0x8, 0x2be4, 0x920, 0x4, 0x5d, 0x5, 0xfffffffffffffff7, 0x9, 0x8000000000000, 0x40, 0x5, 0x0, 0x6]}) 34.940054266s ago: executing program 2 (id=146): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000d0048000005000000000000000000f8ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0xe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000d0048000005000000000000000000f8ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0xe}, 0x94) 19.928993159s ago: executing program 32 (id=146): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000d0048000005000000000000000000f8ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0xe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000d0048000005000000000000000000f8ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, 0xe}, 0x94) 960.922877ms ago: executing program 0 (id=527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000001c0)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@loopback, 0x12345678, 0x32}, @in=@loopback, {}, {0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="050000e6ffffff0000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080035000000000008002201"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20042010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendto(r0, &(0x7f00000001c0)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@loopback, 0x12345678, 0x32}, @in=@loopback, {}, {0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x138}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="050000e6ffffff0000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080035000000000008002201"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20042010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async) 959.795192ms ago: executing program 0 (id=529): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x8}]}) write$ppp(r8, &(0x7f00000002c0)='0L', 0x2) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10000, 0x2, 0x1f5}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 860.522951ms ago: executing program 3 (id=530): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) r1 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1c0) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) 859.892207ms ago: executing program 3 (id=531): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x5a, 0x4, 0xb, 0x4, 0x522}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x9, 0x8, 0x1}, 0x14) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000100)={0x5, 0x20, 0x1, 0x20, 0x8000000000000000}, 0x48) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x1, 0x800, 0x9, 0x7, 0xb, 0x4}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={r2, 0x2}, &(0x7f0000000240)=0x8) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x48) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) (async) write$bt_hci(r0, &(0x7f0000000300)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0x65, 0x8}}}, 0x7) (async) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r4, 0x84, 0x81, &(0x7f0000000340)={r3}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r6, 0x5}, 0x8) (async) getsockopt$SO_NETNS_COOKIE(r4, 0x1, 0x47, &(0x7f0000000400), &(0x7f0000000440)=0x8) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000480)={'TPROXY\x00'}, &(0x7f00000004c0)=0x1e) (async) write$bt_hci(r5, &(0x7f0000000500)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000540)={0x0, 'wg2\x00', 0x3}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, 0x8010, r0, 0x100000000) (async) r7 = open(&(0x7f0000000580)='./file0\x00', 0x280100, 0x168) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) (async) getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000780)={'wg0\x00', 0x0}) getpeername$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0xe, 0x7800, 0x0, 0x200, {{0x16, 0x4, 0x3, 0x5, 0x58, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0x5, [{@remote, 0xffff8000}, {@local, 0x9da8}, {@local, 0x7}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @end, @ssrr={0x89, 0x17, 0x84, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2b, 0x0, 0x7, 0x9, 0x24, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x7f800000, 0x401}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x19b69dd96e501a2c, &(0x7f00000009c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000a00)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000d40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)={0x2a0, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc7a1a12bb49a800c}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x118, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000d80)) (rerun: 64) 781.107644ms ago: executing program 3 (id=532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_emit_ethernet(0xfded, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb810040000800450000c8006400000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000090780000080affffa888000000000000589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7a308f764f0acaaf71264dc1ac910bb185ba61a72f7a3beec8b49edcccca0be89a6ea186a3001b9123cafe799252047eb4f8d1385618e3fceb41ea44f9d82048431a3c4f65a47e598017f1211ee6b2e1fb3d23e018b4435848416463f69b90c175fa4f778e38d0d9e1dc6df172740c7ad"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000380)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000003c0)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x3, 0x6}, 0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000004, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f}) r6 = accept(0xffffffffffffffff, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x100001, 0x0, {[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}}) 700.267192ms ago: executing program 1 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf25060000001c00e700e068f28ea1172de40b18b130cb42a365b9ce9ae27b129a499280eb15ae25424b492424f0542aef1d0a00e800080211000001000014001780040005000400010004000500040002001c00e70058293c9b82e0d1cc97c0b0b33e4e2baf76b481503162a2f11c00e700e6c6e32149c5f432"], 0x88}, 0x1, 0x0, 0x0, 0x2040}, 0x4040090) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="02000000a933393fd0eee24f5bf5f5c7a7de2abc0eece2bcfb191fae6b059403f3a9007f3098227d09cdfd", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf250600000008000400060000007c00038008000500e0000001060004000000000014000600fc000000000000000000000000000001080001000200000014000600fe88000000000000000000000000010114000600fc00000000000000000000000000000008000100010000000800010001000000140002006970766c616e3100000000000000000024000380060007004e20000008000500ac14142305000800090000000800010000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x60, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "04fd1aa34b9e0c1077ccc1111ba40137bbfb73ae1663e7c4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 698.945341ms ago: executing program 4 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x2, 0x48000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000009fe80000000000000000000000000002b86dd00"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 698.64775ms ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@dellinkprop={0x30c, 0x6d, 0x808, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5090}, [@IFLA_VF_PORTS={0x28c, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b1cf83189239e24790e70d342aa88a4"}, @IFLA_PORT_VF={0x8, 0x1, 0xe0}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "92c09f187569c2a0404992537a5bef24"}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x3, 0x2, 'bridge\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x5b88}, @IFLA_PORT_PROFILE={0x2c, 0x2, ':\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "327cc0a8a2ffcb750ed1ebc1cc891317"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "837b5a7660ca7519041d5cb52adb5c26"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f6a37d5e89a81454b92199c5c9698c1b"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "ab8495706f40f0fbdf96eb95d3830264"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fb58fdf377541149ab272b798cc6e83e"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80000000}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "27282ee85679b9fc73607c70344454c6"}, @IFLA_PORT_PROFILE={0x10, 0x2, '\\+^,+*+,-(-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "66efeff637a6f146e191a85f6ff68a88"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "494c18a9c2ea59a229206e6afa54ad92"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f63ffb8b16fae9040c26c7a27d3b42e9"}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ed911c1b6ba79d08088cd502cff0615b"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xb2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4e261f232d34d125729dbc0b637dc037"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x8, 0x2, '\xb5)]\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7de6ec5753c94ed5ebaab6256a6c04d1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0xa, 0x2, ']{}^+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x31}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ccd6f484beff7db03c8d948026fbd769"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8a97d5cfba1f5a534a8fd6cf94a284f1"}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aae5d09f1365fcde66b0c0c4dca14aaf"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5a29d3f3b1bb9d301d999cf69a2f4506"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}]}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4886a0cf88d4e826661e1eef69a159a2"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 639.683004ms ago: executing program 4 (id=536): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000600)='\b', 0x1) sendfile(r2, r3, &(0x7f0000000640), 0xfffb) fcntl$addseals(r3, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x392fc000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0xc080aed2, 0x0) 639.369513ms ago: executing program 1 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/vulnerabilities/meltdown\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/64, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') r5 = accept$packet(r0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000500)=@req={0xa, 0x9, 0x4, 0x8001}, 0x10) pread64(r4, &(0x7f0000000140)=""/172, 0xac, 0xe0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000002c0)=0x4, 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000340)=[{&(0x7f0000000380)=' ', 0x100120}], 0x1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 591.75003ms ago: executing program 1 (id=538): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000580)={0x28, 0x2, r3, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) madvise(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000005c0)={0x28, 0x0, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000600)}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000240)=""/161, &(0x7f0000000300)=0xa1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0xc4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb0, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1f, 0x569, 0x0, 0x6, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cc2, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xc4}}, 0x0) 590.462201ms ago: executing program 3 (id=539): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf25080000000600040058be"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2400, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCATTCHAN(r4, 0x40047457, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 481.94368ms ago: executing program 3 (id=540): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) unshare(0x64000600) 480.954661ms ago: executing program 1 (id=541): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000740)=0x85) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000300)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000340)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0xd, 0x3, 0x4, 0x9, 0x0, r0, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r8, 0x0, 0xe, 0x0, &(0x7f0000001bc0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 350.578332ms ago: executing program 4 (id=542): mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f00000002c0)={0x200008, 0x100000, 0x20000}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r2, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x490, &(0x7f0000000100)='barrier') removexattr(&(0x7f0000000040)='\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00') 334.137944ms ago: executing program 0 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() process_vm_writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000e80)=""/248, 0xf8}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f0000000c00)=""/232, 0xe8}, {&(0x7f0000000d00)=""/73, 0x49}, {&(0x7f00000006c0)=""/81, 0x51}], 0x5, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/58, 0x3a}, {&(0x7f0000000800)=""/68, 0x44}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000b00)=""/244, 0xf4}], 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0xf0, 0x29, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc209, 0x0, 0x0, 0x3}, {0x10, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x80, 0x80}}, 0xf0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000ac0)) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 291.76961ms ago: executing program 4 (id=544): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000000)='./file1\x00', 0x148) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x8, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000200)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', r1, r2, 0x100) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0x0, 0x0}, &(0x7f00000001c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) 291.266367ms ago: executing program 3 (id=545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000b00736970000c00070000000000000000000800090064f70000090006006e6f6e65000000000800080000000000080005"], 0x58}}, 0x0) r4 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000000040)=[@assoc={0x18}], 0x18, 0x880}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) clock_nanosleep(0x9, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001840)=""/53, 0x35}, {&(0x7f0000001880)=""/190, 0xbe}], 0x2}, 0x81}], 0x1, 0x40000141, 0x0) 217.685895ms ago: executing program 1 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', r0, 0xee01, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) fchownat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x1000) 217.094829ms ago: executing program 4 (id=547): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x800, 0x5ef3, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 151.812935ms ago: executing program 0 (id=548): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x62ec9298}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xe, 0x18, 0x5d, 0x14a}, {0xbc, 0xa, 0x9, 0xfff}, {0x4, 0x9, 0x3, 0x8}]}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44011) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000280)={'team0\x00', 0x8, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000003c0)=0x3424, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000700)={r2, 0x1, 0x6, @remote}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x4, 0x0, [{0x2, 0x62, &(0x7f0000000740)=""/98}, {0x58000, 0x3d, &(0x7f00000007c0)=""/61}, {0xdddd0000, 0xb9, &(0x7f0000000800)=""/185}, {0x1000, 0x7e, &(0x7f00000008c0)=""/126}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x8, 0x1200) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000a40)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000a80)={0xfffffffffffffffd, 0xb4, 0x4, 0xda, 0x6, 0x0, [{0x2, 0xfffffffffffffffb, 0x3, '\x00', 0x1002}, {0x2, 0x337, 0x10001, '\x00', 0x804}, {0x9, 0x3, 0x2, '\x00', 0x1008}, {0xfffffffffffffffa, 0x8, 0xfffffffffffffff7, '\x00', 0x3008}, {0xca52, 0x3, 0x2}, {0x9, 0x67af, 0x9, '\x00', 0x200}]}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000d00)) connect$vsock_stream(r0, &(0x7f0000000d40)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000d80)={0x28, 0x0, 0x2711, @local}, 0x10) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000dc0), 0x208000, 0x0) bind$xdp(r0, &(0x7f0000000e00)={0x2c, 0x2, r2, 0x21, r4}, 0x10) r5 = signalfd4(r3, &(0x7f0000000e40)={[0x6]}, 0x8, 0x80800) name_to_handle_at(r5, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)=@nfs={0x90, 0x24, {0xfffffff8, 0x15347bd8, 0x8, 0x80, "4d58a1fa5ef08f0f8c9ee0d312103414828d22ee0185e22dbbee58d95d57aa88331672934f8b572400a5ada56b3babcfec09191133005928d5544019f89cbc62c50006d738dec75e5c9306b8654a6b1eb870e9da55efa9639d58c8d542fa295fe7c459feab0caf00f41b95a2a60acbb6d0552f7e39f341ce7792dc6fabb4eda0"}}, &(0x7f0000000f80), 0x600) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)) 61.50092ms ago: executing program 0 (id=549): creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000000500f0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020010080000001823000067f45b13fd17c449f0129eb50469a363c75498269bcabda47e27edeb9ab74669d892e62f42950a1ed27bd8d9820e3ded468e890279f5e5a79489f608d92c41247d9843c79540e51da263653bea67278d26539a2a995e51890602b2d772a510d341263793b2e193132ca8fe1b802279af6d8262baa3754a937931a20a351d7775034ec197", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000000500f0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020010080000001823000067f45b13fd17c449f0129eb50469a363c75498269bcabda47e27edeb9ab74669d892e62f42950a1ed27bd8d9820e3ded468e890279f5e5a79489f608d92c41247d9843c79540e51da263653bea67278d26539a2a995e51890602b2d772a510d341263793b2e193132ca8fe1b802279af6d8262baa3754a937931a20a351d7775034ec197", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0) mount(&(0x7f0000000340)=@filename='./dev/sda1\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0)='ext4\x00', 0x8410, 0x0) 59.277267ms ago: executing program 4 (id=550): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x70d, 0x2, {0x0}, {0xee01}, 0xff, 0x100000000}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f00000192c0)={0xffffffffffffffff}) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000019300), 0xffffffffffffffff) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019380)={&(0x7f00000193c0)={0x48, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000194c0)={&(0x7f0000019240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000019480)={&(0x7f0000019440)={0x2c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4044085) (async) migrate_pages(r0, 0x345d, 0x0, &(0x7f0000019280)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r5 = syz_open_dev$midi(&(0x7f0000019080), 0xfffffffffffffffc, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000191c0)={&(0x7f0000239000/0x4000)=nil, &(0x7f00005e1000/0x1000)=nil, &(0x7f000006c000/0x1000)=nil, &(0x7f00004bc000/0x7000)=nil, &(0x7f000009e000/0x3000)=nil, &(0x7f000006a000/0x400000)=nil, &(0x7f000036e000/0x1000)=nil, &(0x7f00002e4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00001d3000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000190c0)="2c5290ad8395c24e265994356f51a96a187f4d7ba3391b5946365d806e69a6b6050d26e879982be30d8978bfbece21da412e72660e61852d5c0c8a3b616f3e57f007381f68bf1b3903abc23b755d06ff5186d3152ee31275cad9c5dbd9827bc833151bae360f2c941f756052ac34bf52910842fa08f8e321867593e96b789a5e07480d57ca3731358b4be71355494aff646b506565300c71e31b8782776706d3c04ebdb51ff09f2841ad8aa70e93d73eaf2efe016f3d62d1dcbe590bb5833957c72e5d44f07879f26610", 0xca, r5}, 0x68) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') pread64(r7, &(0x7f0000000080)=""/102376, 0xfffffe8f, 0xfff) mmap(&(0x7f00001f6000/0x1000)=nil, 0x1000, 0x2, 0x82011, r6, 0x0) 0s ago: executing program 0 (id=551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./debug/lru_gen\x00', 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x1008, 0x0, 0x58, 'snapshot\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'PO', 0x20, '128', ' 1 discard_zeroes_cow'}}]}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/189) kernel console output (not intermixed with test programs): netdevsim2 netdevsim1: renamed from eth1 [ 38.468675][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.469510][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.473166][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.480043][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.481960][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.494262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.494327][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.580572][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.594094][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.601640][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.601684][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.605827][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.605872][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.623394][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.673313][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.701427][ T5771] veth0_vlan: entered promiscuous mode [ 38.712323][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.713222][ T5771] veth1_vlan: entered promiscuous mode [ 38.740563][ T5784] veth0_vlan: entered promiscuous mode [ 38.742770][ T5771] veth0_macvtap: entered promiscuous mode [ 38.745855][ T5771] veth1_macvtap: entered promiscuous mode [ 38.749793][ T5784] veth1_vlan: entered promiscuous mode [ 38.762780][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.771957][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.774906][ T5784] veth0_macvtap: entered promiscuous mode [ 38.783557][ T5784] veth1_macvtap: entered promiscuous mode [ 38.797684][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.798056][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.798724][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.816701][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.820863][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.830392][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.846753][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.846781][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.846798][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.846816][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.858404][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.858415][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.891696][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.891707][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.911508][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.912161][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.912173][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.924409][ T5772] veth0_vlan: entered promiscuous mode [ 38.927025][ T5787] Bluetooth: hci2: command tx timeout [ 38.927039][ T5786] Bluetooth: hci3: command tx timeout [ 38.927321][ T5776] Bluetooth: hci0: command tx timeout [ 38.927326][ T5134] Bluetooth: hci1: command tx timeout [ 38.940869][ T5772] veth1_vlan: entered promiscuous mode [ 38.942209][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.942219][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.968649][ T5773] veth0_vlan: entered promiscuous mode [ 38.970355][ T5772] veth0_macvtap: entered promiscuous mode [ 38.973576][ T5773] veth1_vlan: entered promiscuous mode [ 38.974695][ T5772] veth1_macvtap: entered promiscuous mode [ 38.977466][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983685][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.990580][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.991754][ T5771] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.003587][ T5773] veth0_macvtap: entered promiscuous mode [ 39.013247][ T5773] veth1_macvtap: entered promiscuous mode [ 39.017595][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.017620][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.017638][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.017656][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.041281][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.044264][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.056550][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056631][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056700][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.056882][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058918][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.058927][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.081763][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.081780][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.116096][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.116263][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.116274][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.122925][ T5935] ip_tables: iptables: counters copy to user failed while replacing table [ 39.123716][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.128759][ T5935] Could not find key with description: [syzlecryptfs_fne] [ 39.128767][ T5935] process_request_key_err: No key [ 39.128771][ T5935] Could not find valid key in user session keyring for sig specified in mount option: [syzlecryptfs_fne] [ 39.128777][ T5935] One or more global auth toks could not properly register; rc = [-2] [ 39.128796][ T5935] Error validating options; rc = [-2] [ 39.136268][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.136278][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.202882][ T5943] comedi comedi2: comedi_config --init_data is deprecated [ 39.240565][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8'. [ 39.241634][ T5949] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8'. [ 39.286894][ T5947] mmap: syz.0.7 (5947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.366125][ T5959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.367618][ T5959] bond0: (slave bond1): Enslaving as an active interface with an up link [ 39.379400][ T5961] TC_ACT_REPEAT abuse ? [ 39.403278][ T5964] fuse: Unknown parameter 'fl' [ 39.407295][ T5964] fuse: Bad value for 'fd' [ 39.408992][ T5964] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12'. [ 39.441181][ T5969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.488639][ T5979] capability: warning: `syz.0.17' uses 32-bit capabilities (legacy support in use) [ 39.565288][ T5984] Zero length message leads to an empty skb [ 39.677622][ T5998] vti0: entered allmulticast mode [ 39.713486][ T6008] syz.1.24 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.900093][ T6024] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 39.900148][ T6024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 39.905570][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 40.013497][ T6027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 40.013740][ T6027] CIFS: Attempting to mount //::1/share [ 40.017860][ T6027] CIFS: VFS: Error connecting to socket. Aborting operation. [ 40.017929][ T6027] CIFS: VFS: cifs_mount failed w/return code = -111 [ 40.020016][ T6027] process 'syz.2.30' launched '/dev/fd/6' with NULL argv: empty string added [ 40.583494][ T6044] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.586778][ T6044] bond2: (slave lo): Enslaving as an active interface with an up link [ 40.587750][ T6044] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 40.588412][ T6045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 40.706506][ T5646] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.732242][ T6053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.877583][ T5646] usb 5-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00 [ 40.881180][ T5646] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.881214][ T5646] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.881231][ T5646] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.881261][ T5646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.888266][ T5646] net1080 5-1:1.0: probe with driver net1080 failed with error -22 [ 40.936896][ T6056] affs: No valid root block on device nullb0 [ 40.961204][ T6057] block nbd3: shutting down sockets [ 40.992898][ T6065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.992911][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 41.006731][ T5776] Bluetooth: hci1: command tx timeout [ 41.006760][ T5776] Bluetooth: hci3: command tx timeout [ 41.006779][ T5776] Bluetooth: hci0: command tx timeout [ 41.006795][ T5776] Bluetooth: hci2: command tx timeout [ 41.102052][ T5879] usb 5-1: USB disconnect, device number 2 [ 41.407272][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.546567][ T5879] usb 5-1: device descriptor read/64, error -71 [ 41.556565][ T5868] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 41.706977][ T5868] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 41.707765][ T5868] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 41.707786][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 41.707799][ T5868] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.707810][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 41.707822][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 41.708527][ T5868] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 41.708550][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 41.708562][ T5868] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.708574][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 41.708585][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 41.709286][ T5868] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 41.709304][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 41.709316][ T5868] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.709327][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 41.709339][ T5868] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 41.711475][ T5868] usb 8-1: string descriptor 0 read error: -22 [ 41.711529][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.720632][ T5868] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 41.789683][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.926487][ T5879] usb 5-1: device descriptor read/64, error -71 [ 42.036795][ T5879] usb usb5-port1: attempt power cycle [ 42.318139][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 42.318151][ T42] audit: type=1400 audit(1792932549.641:272): avc: denied { setopt } for pid=6097 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.375175][ T6098] netlink: 168 bytes leftover after parsing attributes in process `syz.2.50'. [ 42.376981][ T6053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.386627][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.407587][ T5879] usb 5-1: device descriptor read/8, error -71 [ 42.442365][ T6053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.493412][ T62] usb 8-1: USB disconnect, device number 2 [ 42.504663][ T6053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.524052][ T6104] netlink: 220 bytes leftover after parsing attributes in process `syz.3.52'. [ 42.524069][ T6104] tc_dump_action: action bad kind [ 42.578508][ T42] audit: type=1400 audit(1792932549.901:273): avc: denied { execute } for pid=6105 comm="syz.3.53" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 42.600366][ T42] audit: type=1400 audit(1792932549.921:274): avc: denied { name_bind } for pid=6108 comm="syz.2.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.610539][ T6111] tipc: Started in network mode [ 42.610561][ T6111] tipc: Node identity ac1414aa, cluster identity 4711 [ 42.611076][ T6111] tipc: New replicast peer: 172.20.20.187 [ 42.615617][ T6111] tipc: Enabled bearer , priority 10 [ 42.646703][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.648283][ T6117] FAULT_INJECTION: forcing a failure. [ 42.648283][ T6117] name fail_futex, interval 1, probability 0, space 0, times 1 [ 42.648301][ T6117] CPU: 2 UID: 0 PID: 6117 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) [ 42.648313][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.648319][ T6117] Call Trace: [ 42.648337][ T6117] [ 42.648341][ T6117] dump_stack_lvl+0x100/0x190 [ 42.648361][ T6117] should_fail_ex.cold+0x5/0xa [ 42.648380][ T6117] get_futex_key+0x1c9/0x13e0 [ 42.648399][ T6117] ? __pfx_get_futex_key+0x10/0x10 [ 42.648419][ T6117] futex_wake+0xf4/0x5e0 [ 42.648435][ T6117] ? __pfx_futex_wake+0x10/0x10 [ 42.648450][ T6117] ? percpu_counter_add_batch+0xb9/0x230 [ 42.648467][ T6117] ? errseq_sample+0x51/0x70 [ 42.648479][ T6117] ? file_init_path+0x48e/0x670 [ 42.648517][ T6117] do_futex+0x2b2/0x440 [ 42.648531][ T6117] ? __pfx_do_futex+0x10/0x10 [ 42.648543][ T6117] ? fd_install+0x223/0x580 [ 42.648562][ T6117] __x64_sys_futex+0x34f/0x4d0 [ 42.648579][ T6117] ? __sys_socket+0xac/0x260 [ 42.648598][ T6117] ? __pfx___x64_sys_futex+0x10/0x10 [ 42.648615][ T6117] do_syscall_64+0x123/0x790 [ 42.648628][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.648641][ T6117] RIP: 0033:0x7f1eab59f559 [ 42.648651][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.648662][ T6117] RSP: 002b:00007f1eac45f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.648673][ T6117] RAX: ffffffffffffffda RBX: 00007f1eab825fa8 RCX: 00007f1eab59f559 [ 42.648679][ T6117] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1eab825fac [ 42.648686][ T6117] RBP: 00007f1eab825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 42.648692][ T6117] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 42.648698][ T6117] R13: 00007f1eab826038 R14: 00007fff9f4207a0 R15: 00007fff9f420888 [ 42.648713][ T6117] [ 42.651641][ T42] audit: type=1400 audit(1792932549.971:275): avc: denied { mmap_zero } for pid=6119 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 42.669094][ T5879] usb 5-1: device descriptor read/8, error -71 [ 42.703998][ T42] audit: type=1400 audit(1792932550.021:276): avc: denied { read write } for pid=6119 comm="syz.3.57" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 42.704401][ T42] audit: type=1400 audit(1792932550.021:277): avc: denied { open } for pid=6119 comm="syz.3.57" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 42.704810][ T42] audit: type=1400 audit(1792932550.021:278): avc: denied { ioctl } for pid=6119 comm="syz.3.57" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x40084d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 42.735444][ T42] audit: type=1400 audit(1792932550.051:279): avc: denied { mounton } for pid=6126 comm="syz.3.60" path="/proc/62/task" dev="proc" ino=10456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 42.737188][ T42] audit: type=1400 audit(1792932550.061:280): avc: denied { create } for pid=6126 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.738165][ T42] audit: type=1400 audit(1792932550.061:281): avc: denied { create } for pid=6125 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.777045][ T5879] usb usb5-port1: unable to enumerate USB device [ 42.782746][ T6128] VFS: Mount too revealing [ 42.801888][ T6132] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 1, id = 0 [ 42.855732][ T6138] FAULT_INJECTION: forcing a failure. [ 42.855732][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 42.855759][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 42.855775][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.855783][ T6138] Call Trace: [ 42.855788][ T6138] [ 42.855794][ T6138] dump_stack_lvl+0x100/0x190 [ 42.855820][ T6138] should_fail_ex.cold+0x5/0xa [ 42.855843][ T6138] should_failslab+0xc2/0x120 [ 42.855886][ T6138] __kmalloc_noprof+0xfc/0x840 [ 42.855918][ T6138] ? sk_prot_alloc+0x10b/0x2a0 [ 42.855941][ T6138] sk_prot_alloc+0x10b/0x2a0 [ 42.855961][ T6138] sk_alloc+0x36/0xe80 [ 42.855977][ T6138] __netlink_create+0x5e/0x2c0 [ 42.855989][ T6138] ? __wake_up+0x3f/0x60 [ 42.856006][ T6138] netlink_create+0x293/0x610 [ 42.856019][ T6138] ? __pfx_rtnetlink_bind+0x10/0x10 [ 42.856036][ T6138] __sock_create+0x339/0x860 [ 42.856059][ T6138] __sys_socket+0x14d/0x260 [ 42.856079][ T6138] ? __pfx___sys_socket+0x10/0x10 [ 42.856105][ T6138] __x64_sys_socket+0x72/0xb0 [ 42.856124][ T6138] ? lockdep_hardirqs_on+0x7d/0x110 [ 42.856147][ T6138] do_syscall_64+0x123/0x790 [ 42.856162][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.856176][ T6138] RIP: 0033:0x7f8933f9f559 [ 42.856188][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.856200][ T6138] RSP: 002b:00007f8934e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 42.856214][ T6138] RAX: ffffffffffffffda RBX: 00007f8934226090 RCX: 00007f8933f9f559 [ 42.856223][ T6138] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 42.856232][ T6138] RBP: 00007f8934036b20 R08: 0000000000000000 R09: 0000000000000000 [ 42.856240][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.856248][ T6138] R13: 00007f8934226128 R14: 00007f8934226090 R15: 00007ffd2d770bb8 [ 42.856267][ T6138] [ 42.869127][ T6137] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.086900][ T5134] Bluetooth: hci2: command tx timeout [ 43.086939][ T5776] Bluetooth: hci0: command tx timeout [ 43.086967][ T5776] Bluetooth: hci3: command tx timeout [ 43.086986][ T5776] Bluetooth: hci1: command tx timeout [ 43.227612][ T6145] FAULT_INJECTION: forcing a failure. [ 43.227612][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 43.227632][ T6145] CPU: 2 UID: 0 PID: 6145 Comm: syz.2.66 Not tainted syzkaller #0 PREEMPT(full) [ 43.227644][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.227650][ T6145] Call Trace: [ 43.227654][ T6145] [ 43.227659][ T6145] dump_stack_lvl+0x100/0x190 [ 43.227679][ T6145] should_fail_ex.cold+0x5/0xa [ 43.227696][ T6145] should_failslab+0xc2/0x120 [ 43.227712][ T6145] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 43.227726][ T6145] ? lock_acquire+0x1d1/0x380 [ 43.227740][ T6145] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 43.227754][ T6145] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 43.227771][ T6145] kstrdup+0x51/0xe0 [ 43.227788][ T6145] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 43.227803][ T6145] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 43.227820][ T6145] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 43.227843][ T6145] selinux_socket_post_create+0x363/0x7e0 [ 43.227907][ T6145] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 43.227934][ T6145] ? tcp_v6_init_sock+0x15/0xb0 [ 43.227958][ T6145] ? __pfx_tcp_v6_init_sock+0x10/0x10 [ 43.227982][ T6145] ? inet6_create+0xb34/0x12b0 [ 43.228017][ T6145] security_socket_post_create+0xaf/0x270 [ 43.228046][ T6145] __sock_create+0x70b/0x860 [ 43.228076][ T6145] __sys_socket+0x14d/0x260 [ 43.228093][ T6145] ? fput+0x7c/0x100 [ 43.228109][ T6145] ? __pfx___sys_socket+0x10/0x10 [ 43.228123][ T6145] ? ksys_write+0x1ac/0x250 [ 43.228135][ T6145] ? __pfx_ksys_write+0x10/0x10 [ 43.228151][ T6145] __x64_sys_socket+0x72/0xb0 [ 43.228166][ T6145] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.228182][ T6145] do_syscall_64+0x123/0x790 [ 43.228194][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.228205][ T6145] RIP: 0033:0x7f9bbc19f559 [ 43.228214][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.228224][ T6145] RSP: 002b:00007f9bbd04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.228236][ T6145] RAX: ffffffffffffffda RBX: 00007f9bbc425fa0 RCX: 00007f9bbc19f559 [ 43.228243][ T6145] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 43.228249][ T6145] RBP: 00007f9bbc236b20 R08: 0000000000000000 R09: 0000000000000000 [ 43.228255][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.228261][ T6145] R13: 00007f9bbc426038 R14: 00007f9bbc425fa0 R15: 00007ffdff4b1788 [ 43.228276][ T6145] [ 43.300879][ T6149] SQUASHFS error: Failed to read block 0x0: -5 [ 43.300921][ T6149] unable to read squashfs_super_block [ 43.342444][ T6154] capability: warning: `syz.2.68' uses deprecated v2 capabilities in a way that may be insecure [ 43.522150][ T6162] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 43.522162][ T6162] overlayfs: missing 'lowerdir' [ 43.565285][ T6164] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 43.634902][ T6173] smc: net device lo applied user defined pnetid SYZ2 [ 43.737916][ T5646] tipc: Node number set to 2886997162 [ 43.882135][ T46] IPVS: starting estimator thread 0... [ 43.969643][ T6211] IPVS: using max 44 ests per chain, 105600 per kthread [ 44.020756][ T6229] ======================================================= [ 44.020756][ T6229] WARNING: The mand mount option has been deprecated and [ 44.020756][ T6229] and is ignored by this kernel. Remove the mand [ 44.020756][ T6229] option from the mount to silence this warning. [ 44.020756][ T6229] ======================================================= [ 44.516528][ T5777] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.676920][ T5777] usb 5-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 44.677782][ T5777] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.677813][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.684711][ T5777] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 44.703851][ T5777] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 44.834362][ T6238] Could not find key with description: [syz] [ 44.834376][ T6238] process_request_key_err: No key [ 44.834383][ T6238] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 44.834391][ T6238] One or more global auth toks could not properly register; rc = [-2] [ 44.834416][ T6238] Error validating options; rc = [-2] [ 44.899094][ T62] usb 5-1: USB disconnect, device number 7 [ 44.902554][ T62] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 44.902858][ T62] metro_usb 5-1:1.0: device disconnected [ 44.929496][ T6247] netlink: 56 bytes leftover after parsing attributes in process `syz.3.91'. [ 45.071506][ T6253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.072116][ T6253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.166505][ T5134] Bluetooth: hci2: command tx timeout [ 45.166529][ T5134] Bluetooth: hci1: command tx timeout [ 45.166542][ T5134] Bluetooth: hci3: command tx timeout [ 45.166554][ T5134] Bluetooth: hci0: command tx timeout [ 45.242761][ T6261] bond1: option downdelay: invalid value (18446744073709551615) [ 45.242781][ T6261] bond1: option downdelay: allowed values 0 - 2147483647 [ 45.244786][ T6261] bond1 (unregistering): Released all slaves [ 45.635598][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 45.654140][ T6296] xt_hashlimit: size too large, truncated to 1048576 [ 45.654191][ T6296] xt_hashlimit: max too large, truncated to 1048576 [ 45.672488][ T6299] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 45.693065][ T6299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.717574][ T6299] kvm [6298]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 45.719192][ T6304] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 45.719949][ T6306] kvm [6298]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 46.332628][ T6323] device-mapper: table: 248:0: zero-length target [ 46.332638][ T6323] device-mapper: ioctl: error adding target to table [ 46.333716][ T6323] netlink: 'syz.3.113': attribute type 11 has an invalid length. [ 46.387092][ T6329] syzkaller0: entered promiscuous mode [ 46.387110][ T6329] syzkaller0: entered allmulticast mode [ 46.528570][ T6339] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 46.832599][ T6361] ip6t_hbh: too many supported opts specified [ 46.991829][ T6371] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 47.005255][ T6370] IPVS: stopping backup sync thread 6371 ... [ 47.142556][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'. [ 47.165756][ T6382] overlayfs: failed to get inode (-116) [ 47.166071][ T6382] overlayfs: failed to get inode (-116) [ 47.219836][ T6386] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.267452][ T6392] FAULT_INJECTION: forcing a failure. [ 47.267452][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 47.267486][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.2.131 Tainted: G L syzkaller #0 PREEMPT(full) [ 47.267511][ T6392] Tainted: [L]=SOFTLOCKUP [ 47.267517][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.267527][ T6392] Call Trace: [ 47.267561][ T6392] [ 47.267569][ T6392] dump_stack_lvl+0x100/0x190 [ 47.267667][ T6392] should_fail_ex.cold+0x5/0xa [ 47.267725][ T6392] should_failslab+0xc2/0x120 [ 47.267778][ T6392] kmem_cache_alloc_noprof+0x92/0x6a0 [ 47.267811][ T6392] ? __pfx_map_id_range_down+0x10/0x10 [ 47.267882][ T6392] ? rcu_is_watching+0x13/0xc0 [ 47.267911][ T6392] ? security_inode_alloc+0x3b/0x2c0 [ 47.267955][ T6392] security_inode_alloc+0x3b/0x2c0 [ 47.267984][ T6392] inode_init_always_gfp+0xc6f/0xfb0 [ 47.268028][ T6392] alloc_inode+0x8e/0x250 [ 47.268052][ T6392] sock_alloc+0x42/0x240 [ 47.268082][ T6392] __sock_create+0xc2/0x860 [ 47.268112][ T6392] __sys_socket+0x14d/0x260 [ 47.268140][ T6392] ? __pfx___sys_socket+0x10/0x10 [ 47.268176][ T6392] __x64_sys_socket+0x72/0xb0 [ 47.268202][ T6392] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.268237][ T6392] do_syscall_64+0x123/0x790 [ 47.268258][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.268279][ T6392] RIP: 0033:0x7f9bbc19f559 [ 47.268296][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.268313][ T6392] RSP: 002b:00007f9bbd04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 47.268332][ T6392] RAX: ffffffffffffffda RBX: 00007f9bbc425fa0 RCX: 00007f9bbc19f559 [ 47.268345][ T6392] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 47.268356][ T6392] RBP: 00007f9bbc236b20 R08: 0000000000000000 R09: 0000000000000000 [ 47.268373][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.268383][ T6392] R13: 00007f9bbc426038 R14: 00007f9bbc425fa0 R15: 00007ffdff4b1788 [ 47.268409][ T6392] [ 47.268431][ T6392] socket: no more sockets [ 47.387124][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 47.387138][ T42] audit: type=1400 audit(1792932554.711:399): avc: denied { write } for pid=6398 comm="syz.2.134" name="instances" dev="tracefs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.387322][ T42] audit: type=1400 audit(1792932554.711:400): avc: denied { add_name } for pid=6398 comm="syz.2.134" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.388269][ T42] audit: type=1400 audit(1792932554.711:401): avc: denied { create } for pid=6398 comm="syz.2.134" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 47.390637][ T6399] FAULT_INJECTION: forcing a failure. [ 47.390637][ T6399] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.390666][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.2.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 47.390688][ T6399] Tainted: [L]=SOFTLOCKUP [ 47.390694][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.390703][ T6399] Call Trace: [ 47.390708][ T6399] [ 47.390715][ T6399] dump_stack_lvl+0x100/0x190 [ 47.390744][ T6399] should_fail_ex.cold+0x5/0xa [ 47.390766][ T6399] ? prepare_alloc_pages+0x16d/0x5b0 [ 47.390791][ T6399] should_fail_alloc_page+0xeb/0x140 [ 47.390815][ T6399] prepare_alloc_pages+0x1f0/0x5b0 [ 47.390842][ T6399] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 47.390861][ T6399] ? __pfx_stack_trace_save+0x10/0x10 [ 47.390902][ T6399] ? kasan_save_stack+0x3f/0x50 [ 47.390927][ T6399] ? kasan_save_stack+0x30/0x50 [ 47.390945][ T6399] ? kasan_save_track+0x14/0x30 [ 47.390964][ T6399] ? __kasan_kmalloc+0xaa/0xb0 [ 47.390982][ T6399] ? __kmalloc_node_noprof+0x342/0x870 [ 47.391000][ T6399] ? __rb_allocate_pages+0x241/0xff0 [ 47.391020][ T6399] ? rb_allocate_cpu_buffer+0x9d1/0x2780 [ 47.391041][ T6399] ? alloc_buffer+0x4ad/0x1610 [ 47.391061][ T6399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 47.391078][ T6399] ? instance_mkdir+0xca/0x140 [ 47.391108][ T6399] ? vfs_mkdir+0x367/0x850 [ 47.391127][ T6399] ? __x64_sys_mkdirat+0x89/0xc0 [ 47.391151][ T6399] ? do_syscall_64+0x123/0x790 [ 47.391167][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.391215][ T6399] alloc_pages_node_noprof+0x93/0x200 [ 47.391233][ T6399] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 47.391255][ T6399] ? __rb_allocate_pages+0x241/0xff0 [ 47.391278][ T6399] alloc_cpu_data+0x20/0x120 [ 47.391297][ T6399] __rb_allocate_pages+0xac3/0xff0 [ 47.391317][ T6399] ? rb_allocate_cpu_buffer+0x461/0x2780 [ 47.391344][ T6399] rb_allocate_cpu_buffer+0x9d1/0x2780 [ 47.391379][ T6399] ? __pfx_rb_allocate_cpu_buffer+0x10/0x10 [ 47.391403][ T6399] ? __kasan_kmalloc+0xaa/0xb0 [ 47.391424][ T6399] ? __kmalloc_noprof+0x350/0x840 [ 47.391443][ T6399] ? alloc_buffer+0x2f0/0x1610 [ 47.391469][ T6399] alloc_buffer+0x4ad/0x1610 [ 47.391507][ T6399] __ring_buffer_alloc+0x2d/0x40 [ 47.391532][ T6399] allocate_trace_buffer+0x150/0xa30 [ 47.391555][ T6399] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 47.391578][ T6399] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 47.391603][ T6399] ? lockdep_init_map_type+0x5c/0x250 [ 47.391650][ T6399] trace_array_create_systems+0x582/0xc30 [ 47.391677][ T6399] instance_mkdir+0xca/0x140 [ 47.391700][ T6399] tracefs_syscall_mkdir+0x10e/0x180 [ 47.391734][ T6399] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 47.391767][ T6399] vfs_mkdir+0x367/0x850 [ 47.391790][ T6399] filename_mkdirat+0x48b/0x5e0 [ 47.391818][ T6399] ? __pfx_filename_mkdirat+0x10/0x10 [ 47.391868][ T6399] ? strncpy_from_user+0x19d/0x2d0 [ 47.391902][ T6399] ? do_getname+0x191/0x390 [ 47.391926][ T6399] __x64_sys_mkdirat+0x89/0xc0 [ 47.391947][ T6399] do_syscall_64+0x123/0x790 [ 47.391960][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.391971][ T6399] RIP: 0033:0x7f9bbc19f559 [ 47.391981][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.391991][ T6399] RSP: 002b:00007f9bbd04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 47.392002][ T6399] RAX: ffffffffffffffda RBX: 00007f9bbc425fa0 RCX: 00007f9bbc19f559 [ 47.392008][ T6399] RDX: 00000000000001ff RSI: 0000200000003180 RDI: ffffffffffffff9c [ 47.392014][ T6399] RBP: 00007f9bbc236b20 R08: 0000000000000000 R09: 0000000000000000 [ 47.392020][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.392026][ T6399] R13: 00007f9bbc426038 R14: 00007f9bbc425fa0 R15: 00007ffdff4b1788 [ 47.392040][ T6399] [ 47.394073][ T42] audit: type=1400 audit(1792932554.711:402): avc: denied { create } for pid=6398 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.394391][ T42] audit: type=1400 audit(1792932554.711:403): avc: denied { ioctl } for pid=6398 comm="syz.2.134" path="socket:[13135]" dev="sockfs" ino=13135 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.396183][ T42] audit: type=1400 audit(1792932554.711:404): avc: denied { remount } for pid=6398 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.594230][ T63] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.619494][ T42] audit: type=1400 audit(1792932554.941:405): avc: denied { write } for pid=6405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.658095][ T42] audit: type=1400 audit(1792932554.981:406): avc: denied { write } for pid=6408 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.687489][ T46] rpcbind: server 127.0.0.1 not responding, timed out [ 63.677097][ T42] audit: type=1400 audit(1792932571.001:407): avc: denied { create } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.678346][ T42] audit: type=1400 audit(1792932571.001:408): avc: denied { listen } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.688193][ T42] audit: type=1400 audit(1792932571.011:409): avc: denied { unmount } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.698323][ T42] audit: type=1400 audit(1792932571.011:410): avc: denied { bind } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.702380][ T42] audit: type=1400 audit(1792932571.021:411): avc: denied { write } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.702831][ T42] audit: type=1400 audit(1792932571.021:412): avc: denied { setopt } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.702859][ T42] audit: type=1400 audit(1792932571.021:413): avc: denied { connect } for pid=6420 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.725112][ T6437] ip6t_hbh: too many supported opts specified [ 63.725257][ T6439] geneve1: entered allmulticast mode [ 63.779995][ T42] audit: type=1400 audit(1792932571.101:414): avc: denied { read } for pid=6444 comm="syz.2.143" path="socket:[10700]" dev="sockfs" ino=10700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.781268][ T6446] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 63.783216][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 63.815297][ T6449] ip_tables: iptables: counters copy to user failed while replacing table [ 63.819894][ T42] audit: type=1400 audit(1792932571.141:415): avc: denied { create } for pid=6448 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.820981][ T42] audit: type=1400 audit(1792932571.141:416): avc: denied { append } for pid=6448 comm="syz.2.145" name="cec0" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.831235][ T6452] batman_adv: batadv0: Adding interface: syzkaller0 [ 63.831248][ T6452] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.831266][ T6452] batman_adv: batadv0: Interface activated: syzkaller0 [ 63.916621][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.076483][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 64.078627][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.078650][ T9] usb 5-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 64.081763][ T9] usb 5-1: string descriptor 0 read error: -22 [ 64.081813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.087173][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 64.087198][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 64.103208][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 64.109890][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.110788][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 64.110811][ T9] usb 5-1: media controller created [ 64.111041][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111049][ T9] dw2102: i2c transfer failed. [ 64.111063][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111069][ T9] dw2102: i2c transfer failed. [ 64.111074][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111080][ T9] dw2102: i2c transfer failed. [ 64.111085][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111091][ T9] dw2102: i2c transfer failed. [ 64.111096][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111102][ T9] dw2102: i2c transfer failed. [ 64.111107][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 64.111113][ T9] dw2102: i2c transfer failed. [ 64.111117][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 64.145325][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.157548][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 64.157560][ T9] dw2102: command 0x0e transfer failed. [ 64.157564][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 64.157569][ T9] dw2102: command 0x0e transfer failed. [ 64.477311][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 64.477325][ T9] dw2102: command 0x0e transfer failed. [ 64.477329][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 64.477335][ T9] dw2102: command 0x0e transfer failed. [ 64.477339][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 64.477344][ T9] dw2102: command 0x51 transfer failed. [ 64.479032][ T6422] dvb-usb: bulk message failed: -22 (6/0) [ 64.479043][ T6422] dw2102: i2c transfer failed. [ 64.479994][ T6419] dvb-usb: bulk message failed: -22 (6/0) [ 64.480004][ T6419] dw2102: i2c transfer failed. [ 64.498495][ T9] DVB: Unable to find symbol ds3000_attach() [ 64.498501][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 64.547087][ T9] rc_core: IR keymap rc-su3000 not found [ 64.547098][ T9] Registered IR keymap rc-empty [ 64.548119][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 64.549382][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 64.552479][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 64.552491][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 64.552498][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 64.553853][ T9] usb 5-1: USB disconnect, device number 8 [ 64.605787][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 64.654332][ T6450] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 64.661625][ T6450] batman_adv: batadv0: Removing interface: syzkaller0 [ 64.746315][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.214143][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 65.283659][ T6488] netlink: 120 bytes leftover after parsing attributes in process `syz.1.155'. [ 65.289278][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 65.299651][ T6483] team1: entered promiscuous mode [ 65.299695][ T6483] team1: entered allmulticast mode [ 65.300005][ T6483] 8021q: adding VLAN 0 to HW filter on device team1 [ 65.362645][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.387913][ T6495] ip_tables: iptables: counters copy to user failed while replacing table [ 65.404608][ T6497] netlink: 'syz.1.158': attribute type 19 has an invalid length. [ 65.421705][ T6499] program syz.0.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.421888][ T6499] ata1.00: non-matching transfer count (32/133) [ 65.454605][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 65.487916][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 65.622699][ T6534] overlayfs: missing 'lowerdir' [ 65.664765][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 65.706156][ T6553] ip_tables: iptables: counters copy to user failed while replacing table [ 65.712639][ T6555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6555 comm=syz.1.175 [ 65.770459][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 65.789551][ T6568] 8021q: VLANs not supported on tunl0 [ 66.274467][ T6582] block nbd1: shutting down sockets [ 66.834407][ T6614] FAULT_INJECTION: forcing a failure. [ 66.834407][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 66.834439][ T6614] CPU: 3 UID: 0 PID: 6614 Comm: syz.1.193 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 66.834466][ T6614] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 66.834473][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.834482][ T6614] Call Trace: [ 66.834512][ T6614] [ 66.834525][ T6614] dump_stack_lvl+0x100/0x190 [ 66.834616][ T6614] should_fail_ex.cold+0x5/0xa [ 66.834668][ T6614] should_failslab+0xc2/0x120 [ 66.834719][ T6614] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.834752][ T6614] ? __pfx_map_id_range_down+0x10/0x10 [ 66.834792][ T6614] ? rcu_is_watching+0x13/0xc0 [ 66.834818][ T6614] ? security_inode_alloc+0x3b/0x2c0 [ 66.834856][ T6614] security_inode_alloc+0x3b/0x2c0 [ 66.834881][ T6614] inode_init_always_gfp+0xc6f/0xfb0 [ 66.834923][ T6614] alloc_inode+0x8e/0x250 [ 66.834943][ T6614] sock_alloc+0x42/0x240 [ 66.834971][ T6614] __sock_create+0xc2/0x860 [ 66.835021][ T6614] __sys_socket+0x14d/0x260 [ 66.835044][ T6614] ? fput+0x7c/0x100 [ 66.835073][ T6614] ? __pfx___sys_socket+0x10/0x10 [ 66.835096][ T6614] ? ksys_write+0x1ac/0x250 [ 66.835118][ T6614] ? __pfx_ksys_write+0x10/0x10 [ 66.835146][ T6614] __x64_sys_socket+0x72/0xb0 [ 66.835170][ T6614] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.835205][ T6614] do_syscall_64+0x123/0x790 [ 66.835225][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.835244][ T6614] RIP: 0033:0x7f1eab59f559 [ 66.835260][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.835276][ T6614] RSP: 002b:00007f1eac45f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 66.835295][ T6614] RAX: ffffffffffffffda RBX: 00007f1eab825fa0 RCX: 00007f1eab59f559 [ 66.835307][ T6614] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 66.835318][ T6614] RBP: 00007f1eab636b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.835328][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.835339][ T6614] R13: 00007f1eab826038 R14: 00007f1eab825fa0 R15: 00007fff9f420888 [ 66.835363][ T6614] [ 66.835409][ T6614] socket: no more sockets [ 66.852056][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.852616][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.934807][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.010584][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 67.150067][ T6654] netlink: 'syz.1.204': attribute type 27 has an invalid length. [ 67.170780][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.171417][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.205991][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.209258][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.309201][ T6658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.309269][ T6658] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.314414][ T6658] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.320341][ T6658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.320402][ T6658] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.325713][ T6658] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.330126][ T6658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.330211][ T6658] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.332677][ T6658] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.334241][ T6658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.334421][ T6658] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.335185][ T6658] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.486573][ T6674] random: crng reseeded on system resumption [ 67.514189][ T6673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.533190][ T5134] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 67.533519][ T5134] Bluetooth: hci0: unexpected event for opcode 0x203e [ 67.580185][ T6673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.628091][ T6673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.686332][ T6673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.778952][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786569][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786592][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.797301][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.150321][ T5134] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 68.211188][ T6702] netlink: 'syz.3.215': attribute type 4 has an invalid length. [ 68.692344][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 68.692362][ T42] audit: type=1400 audit(1792932576.011:468): avc: denied { create } for pid=6712 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rds_socket permissive=1 [ 68.692947][ T42] audit: type=1400 audit(1792932576.011:469): avc: denied { create } for pid=6712 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 68.693259][ T42] audit: type=1400 audit(1792932576.011:470): avc: denied { write } for pid=6712 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 68.869072][ T42] audit: type=1400 audit(1792932576.191:471): avc: denied { create } for pid=6736 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 68.871207][ T5134] Bluetooth: hci1: unexpected event for opcode 0x201c [ 68.877224][ T42] audit: type=1400 audit(1792932576.191:472): avc: denied { mount } for pid=6736 comm="syz.3.224" name="/" dev="ramfs" ino=14819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.926522][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.971631][ T42] audit: type=1400 audit(1792932576.291:473): avc: denied { read } for pid=6752 comm="syz.1.226" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.971821][ T42] audit: type=1400 audit(1792932576.291:474): avc: denied { open } for pid=6752 comm="syz.1.226" path="/dev/input/event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.975413][ T42] audit: type=1400 audit(1792932576.291:475): avc: denied { ioctl } for pid=6752 comm="syz.1.226" path="/dev/input/event1" dev="devtmpfs" ino=943 ioctlcmd=0x80044584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.977819][ T6754] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 68.977830][ T6754] netlink: 17 bytes leftover after parsing attributes in process `syz.0.225'. [ 68.985754][ T6750] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.990102][ T6753] jffs2: Unknown parameter 'lowerdir' [ 69.028999][ T42] audit: type=1400 audit(1792932576.351:476): avc: denied { write } for pid=6755 comm="syz.0.227" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.033298][ T6756] input: syz0 as /devices/virtual/input/input6 [ 69.071180][ T6756] syz.0.227 (6756) used greatest stack depth: 18472 bytes left [ 69.327452][ T5134] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.416661][ T5134] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.241183][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241328][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241410][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241564][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241641][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241712][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241782][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241853][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.241923][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 70.320549][ T42] audit: type=1400 audit(1792932577.641:477): avc: denied { create } for pid=6781 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.551360][ T6787] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 70.553841][ T6787] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 70.754627][ T6750] IPVS: starting estimator thread 0... [ 70.817077][ T6799] netlink: 'syz.3.240': attribute type 30 has an invalid length. [ 70.825463][ T6799] bond3: option arp_missed_max: invalid value (0) [ 70.825477][ T6799] bond3: option arp_missed_max: allowed values 1 - 255 [ 70.826312][ T6799] bond3 (unregistering): Released all slaves [ 70.836588][ T6795] IPVS: using max 44 ests per chain, 105600 per kthread [ 70.943324][ T6803] ip_tables: iptables: counters copy to user failed while replacing table [ 70.984393][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984466][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984524][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984582][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984642][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984699][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984758][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984823][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.984930][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985043][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985150][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985259][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985390][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985500][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985609][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985718][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985862][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.985976][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.986088][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.986196][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.986323][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993463][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993563][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993624][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993684][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993743][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993802][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993861][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993918][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.993976][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994038][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994095][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994154][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994211][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994268][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994326][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994387][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994457][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994517][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994573][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994631][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994688][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994744][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994801][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994859][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994916][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.994973][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995034][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995096][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995161][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995221][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995277][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995335][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995392][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.995448][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996356][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996563][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996625][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996682][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996738][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996797][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996856][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996916][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.996972][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 70.997037][ T6806] device-mapper: ioctl: Unable to rename non-existent device, to CRP-syzd0 [ 71.009040][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.104161][ T6737] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.180563][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.185948][ T3301] cfg80211: failed to load regulatory.db [ 71.199150][ T6817] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.199210][ T6817] block device autoloading is deprecated and will be removed. [ 71.280023][ T6818] md: ram6 does not have a valid v1.1 superblock, not importing! [ 71.280068][ T6818] md: md_import_device returned -22 [ 71.281258][ T5134] Bluetooth: hci1: unexpected event 0x1c length: 3 < 5 [ 71.292110][ T6817] FAULT_INJECTION: forcing a failure. [ 71.292110][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 71.292130][ T6817] CPU: 3 UID: 0 PID: 6817 Comm: syz.3.246 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 71.292146][ T6817] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 71.292152][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.292158][ T6817] Call Trace: [ 71.292162][ T6817] [ 71.292167][ T6817] dump_stack_lvl+0x100/0x190 [ 71.292187][ T6817] should_fail_ex.cold+0x5/0xa [ 71.292206][ T6817] should_failslab+0xc2/0x120 [ 71.292222][ T6817] __kmalloc_noprof+0xfc/0x840 [ 71.292236][ T6817] ? xfrm_hash_alloc+0xcf/0x100 [ 71.292251][ T6817] xfrm_hash_alloc+0xcf/0x100 [ 71.292263][ T6817] xfrm_net_init+0x35f/0xcf0 [ 71.292278][ T6817] ? __pfx_xfrm_net_init+0x10/0x10 [ 71.292290][ T6817] ops_init+0x1e2/0x5f0 [ 71.292304][ T6817] setup_net+0x118/0x3a0 [ 71.292316][ T6817] ? __pfx_setup_net+0x10/0x10 [ 71.292330][ T6817] ? bpf_lsm_namespace_init+0x9/0x10 [ 71.292361][ T6817] copy_net_ns+0x340/0x7a0 [ 71.292377][ T6817] create_new_namespaces+0x3ea/0xac0 [ 71.292418][ T6817] unshare_nsproxy_namespaces+0xf6/0x210 [ 71.292435][ T6817] ksys_unshare+0x44f/0x980 [ 71.292456][ T6817] ? __pfx_ksys_unshare+0x10/0x10 [ 71.292474][ T6817] __x64_sys_unshare+0x31/0x40 [ 71.292487][ T6817] do_syscall_64+0x123/0x790 [ 71.292500][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.292512][ T6817] RIP: 0033:0x7f8933f9f559 [ 71.292521][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.292532][ T6817] RSP: 002b:00007f8934ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.292543][ T6817] RAX: ffffffffffffffda RBX: 00007f8934225fa0 RCX: 00007f8933f9f559 [ 71.292550][ T6817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 71.292557][ T6817] RBP: 00007f8934036b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.292563][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.292568][ T6817] R13: 00007f8934226038 R14: 00007f8934225fa0 R15: 00007ffd2d770bb8 [ 71.292582][ T6817] [ 71.406706][ T5134] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.486629][ T5134] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.577840][ T5134] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 71.577878][ T5134] Bluetooth: hci0: Injecting HCI hardware error event [ 71.578481][ T5134] Bluetooth: hci0: hardware error 0x00 [ 72.098130][ T6829] JFS: charset not found [ 72.752731][ T6835] device-mapper: ioctl: Unable to rename non-existent device, to syza3 [ 72.904127][ T6847] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.923090][ T6850] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 73.099493][ T6858] device-mapper: ioctl: The device has no table. [ 73.167003][ T5776] Bluetooth: hci4: command 0x1003 tx timeout [ 73.168042][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.486484][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.576496][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.646527][ T5134] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 73.792394][ T6889] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 73.795989][ T6889] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 73.836654][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.007291][ T62] usb 6-1: Using ep0 maxpacket: 32 [ 74.009770][ T62] usb 6-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 74.010643][ T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.010656][ T62] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.010672][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.012201][ T62] usb 6-1: config 0 descriptor?? [ 74.028231][ T6901] 9pnet_fd: p9_fd_create_unix (6901): problem connecting socket: ./cgroup: -111 [ 74.029092][ T6901] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 74.041772][ T6901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.129003][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 74.129020][ T42] audit: type=1400 audit(1792932581.451:499): avc: denied { read } for pid=6903 comm="syz.3.267" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.132214][ T42] audit: type=1400 audit(1792932581.451:500): avc: denied { ioctl } for pid=6903 comm="syz.3.267" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.175429][ T6910] sd 0:0:0:0: PR command failed: 1026 [ 74.175465][ T6910] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 74.175485][ T6910] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 74.176966][ T6909] sd 0:0:0:0: PR command failed: 1026 [ 74.176987][ T6909] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 74.177008][ T6909] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 74.180259][ T42] audit: type=1400 audit(1792932581.501:501): avc: denied { name_bind } for pid=6908 comm="syz.0.268" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.282686][ T42] audit: type=1400 audit(1792932581.601:502): avc: denied { read } for pid=6884 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.486497][ T2420] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.636469][ T2420] usb 8-1: Using ep0 maxpacket: 32 [ 74.636950][ T2420] usb 8-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.637801][ T2420] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 74.637819][ T2420] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.637836][ T2420] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.637848][ T2420] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.637861][ T2420] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.642726][ T2420] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.642741][ T2420] usb 8-1: Product: syz [ 74.642748][ T2420] usb 8-1: Manufacturer: syz [ 74.642754][ T2420] usb 8-1: SerialNumber: syz [ 74.644175][ T2420] usb 8-1: config 0 descriptor?? [ 74.645797][ T2420] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.659142][ T2420] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.688158][ T42] audit: type=1400 audit(1792932582.011:503): avc: denied { watch } for pid=6924 comm="syz.0.272" path="/57" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.689862][ T42] audit: type=1400 audit(1792932582.011:504): avc: denied { create } for pid=6924 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.691963][ T42] audit: type=1400 audit(1792932582.011:505): avc: denied { setopt } for pid=6924 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.849128][ T42] audit: type=1400 audit(1792932582.171:506): avc: denied { watch_reads } for pid=6915 comm="syz.3.270" path="/95/file0" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.854511][ T42] audit: type=1400 audit(1792932582.171:507): avc: denied { append } for pid=6915 comm="syz.3.270" name="dvr0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.859877][ T2420] usb 8-1: USB disconnect, device number 3 [ 74.860002][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 74.864138][ T2420] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 75.452874][ T42] audit: type=1400 audit(1792932582.771:508): avc: denied { connect } for pid=6935 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.604132][ T6942] xt_connbytes: Forcing CT accounting to be enabled [ 75.682201][ T6945] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 75.716980][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 75.996697][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 76.559275][ T5868] usb 6-1: USB disconnect, device number 2 [ 76.628855][ T6965] __nla_validate_parse: 58 callbacks suppressed [ 76.628868][ T6965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.285'. [ 77.243036][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.243094][ T6972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.791488][ T7002] ip_tables: iptables: counters copy to user failed while replacing table [ 78.427800][ T7010] netlink: 'syz.3.298': attribute type 14 has an invalid length. [ 78.427819][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 78.438237][ T7010] netlink: 'syz.3.298': attribute type 14 has an invalid length. [ 78.438254][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 78.457612][ T5821] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.457649][ T5821] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.457676][ T5821] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.457704][ T5821] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.692674][ T12] smpboot: CPU 1 is now offline [ 79.049557][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.051992][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.052757][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.055384][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.056264][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.064632][ T7042] syzkaller0: entered promiscuous mode [ 79.064649][ T7042] syzkaller0: entered allmulticast mode [ 79.079158][ T7037] tipc: Started in network mode [ 79.079173][ T7037] tipc: Node identity bea3629931f1, cluster identity 4711 [ 79.079655][ T7037] tipc: Enabled bearer , priority 0 [ 79.094905][ T7037] tipc: Resetting bearer [ 79.125699][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 79.136130][ T7035] tipc: Resetting bearer [ 79.146155][ T7035] tipc: Disabling bearer [ 79.155133][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 79.155144][ T42] audit: type=1400 audit(1792932586.471:531): avc: denied { write } for pid=7046 comm="syz.1.308" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.155513][ T42] audit: type=1400 audit(1792932586.471:532): avc: denied { open } for pid=7046 comm="syz.1.308" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.156017][ T42] audit: type=1400 audit(1792932586.471:533): avc: denied { ioctl } for pid=7046 comm="syz.1.308" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.289491][ T42] audit: type=1400 audit(1792932586.611:534): avc: denied { append } for pid=7056 comm="syz.1.309" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.363871][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.394486][ T7040] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.406765][ T42] audit: type=1400 audit(1792932586.721:535): avc: denied { bind } for pid=7061 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.460961][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.468216][ T7067] netlink: 88 bytes leftover after parsing attributes in process `syz.0.313'. [ 79.522376][ T7072] zswap: compressor l not available [ 79.531372][ T42] audit: type=1400 audit(1792932586.851:536): avc: denied { create } for pid=7068 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.546105][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.556226][ T7072] syzkaller0: entered promiscuous mode [ 79.556245][ T7072] syzkaller0: entered allmulticast mode [ 79.559900][ T42] audit: type=1400 audit(1792932586.881:537): avc: denied { setopt } for pid=7068 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.562356][ T42] audit: type=1400 audit(1792932586.881:538): avc: denied { write } for pid=7068 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.610971][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.683644][ T7081] ip_tables: iptables: counters copy to user failed while replacing table [ 79.726767][ T42] audit: type=1400 audit(1792932587.041:539): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 79.727749][ T62] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 79.751764][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.751845][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.751947][ T7040] bridge_slave_0: entered allmulticast mode [ 79.753253][ T7040] bridge_slave_0: entered promiscuous mode [ 79.765810][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.765851][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.765916][ T7040] bridge_slave_1: entered allmulticast mode [ 79.766866][ T7040] bridge_slave_1: entered promiscuous mode [ 79.797602][ T12] bridge_slave_1: left allmulticast mode [ 79.797638][ T12] bridge_slave_1: left promiscuous mode [ 79.798527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.804109][ T12] bridge_slave_0: left allmulticast mode [ 79.804127][ T12] bridge_slave_0: left promiscuous mode [ 79.804292][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.808398][ T62] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 79.965270][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.971647][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.973059][ T12] bond0 (unregistering): Released all slaves [ 79.980113][ T12] bond1 (unregistering): Released all slaves [ 80.001884][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.005009][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.035642][ T42] audit: type=1400 audit(1792932587.351:540): avc: denied { getopt } for pid=7092 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.054219][ T7040] team0: Port device team_slave_0 added [ 80.062030][ T7040] team0: Port device team_slave_1 added [ 80.079162][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.079173][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.079185][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.080315][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.080324][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.080342][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.134239][ T12] tipc: Disabling bearer [ 80.141510][ T12] tipc: Left network mode [ 80.153263][ T7040] hsr_slave_0: entered promiscuous mode [ 80.153706][ T7040] hsr_slave_1: entered promiscuous mode [ 80.154066][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 80.154078][ T7040] Cannot create hsr debugfs directory [ 80.312744][ T7115] MTD: Couldn't look up 'mtd0/file0': -2 [ 80.523460][ T12] hsr_slave_0: left promiscuous mode [ 80.524074][ T12] hsr_slave_1: left promiscuous mode [ 80.524501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.524518][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.525226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.525236][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.538605][ T12] veth1_macvtap: left promiscuous mode [ 80.538635][ T12] veth0_macvtap: left promiscuous mode [ 80.538711][ T12] veth1_vlan: left promiscuous mode [ 80.538750][ T12] veth0_vlan: left promiscuous mode [ 80.696018][ T12] team0 (unregistering): Port device team_slave_1 removed [ 80.708037][ T12] team0 (unregistering): Port device team_slave_0 removed [ 80.847172][ T12] smc: removing net device lo with user defined pnetid SYZ2 [ 81.087547][ T5786] Bluetooth: hci4: command tx timeout [ 83.107706][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.127508][ T7040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.162438][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.165814][ T7040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.169868][ T5786] Bluetooth: hci4: command tx timeout [ 83.181524][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.182459][ T7040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.188875][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.189272][ T7040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.200619][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.218619][ T7148] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 83.219547][ T7147] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 83.287704][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.303063][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.312734][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.312779][ T6750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.325913][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.325961][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.354083][ T7040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.354097][ T7040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.360008][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.724464][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 83.784255][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.919594][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5 [ 83.922457][ T7232] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.922473][ T7232] UDF-fs: Scanning with blocksize 2048 failed [ 83.923343][ T7232] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 83.923354][ T7232] UDF-fs: Scanning with blocksize 4096 failed [ 83.973540][ T7040] veth0_vlan: entered promiscuous mode [ 83.981004][ T7040] veth1_vlan: entered promiscuous mode [ 84.000717][ T7040] veth0_macvtap: entered promiscuous mode [ 84.003132][ T7040] veth1_macvtap: entered promiscuous mode [ 84.011413][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.018610][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.067029][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.067048][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.096542][ T6731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.096555][ T6731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.116956][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.117627][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.117648][ T5871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.117665][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.144524][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6 [ 84.216853][ T7254] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.251633][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 84.251652][ T42] audit: type=1400 audit(1792932591.571:565): avc: denied { bind } for pid=7253 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.252175][ T42] audit: type=1400 audit(1792932591.571:566): avc: denied { listen } for pid=7253 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.526029][ T7267] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 84.532978][ T7267] 8021q: VLANs not supported on ip6gre0 [ 84.552352][ T7242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.577341][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.584131][ T7272] netlink: 'syz.1.350': attribute type 9 has an invalid length. [ 84.596765][ T42] audit: type=1400 audit(1792932591.921:567): avc: denied { connect } for pid=7270 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.598140][ T42] audit: type=1400 audit(1792932591.921:568): avc: denied { getopt } for pid=7270 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.599157][ T42] audit: type=1400 audit(1792932591.921:569): avc: denied { getopt } for pid=7270 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.600104][ T42] audit: type=1400 audit(1792932591.921:570): avc: denied { setopt } for pid=7270 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.628142][ T42] audit: type=1400 audit(1792932591.951:571): avc: denied { mounton } for pid=7275 comm="syz.1.351" path="/71/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.686754][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.693959][ T7279] loop0: detected capacity change from 0 to 3904 [ 84.698243][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 84.698263][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 84.703787][ T7281] geneve2: entered promiscuous mode [ 84.703800][ T7281] geneve2: entered allmulticast mode [ 84.706727][ T42] audit: type=1400 audit(1792932592.021:572): avc: denied { mount } for pid=7278 comm="syz.4.352" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 84.731258][ T42] audit: type=1400 audit(1792932592.051:573): avc: denied { unmount } for pid=7040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 84.737011][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.737400][ T42] audit: type=1804 audit(1792932592.051:574): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.351" name="/newroot/71/file0" dev="fuse" ino=1 res=1 errno=0 [ 84.849424][ T7302] comedi comedi4: bad chanlist[0]=0x0000000b chan=11 range length=2 [ 84.868305][ T7305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=7305 comm=syz.4.358 [ 84.868627][ T7305] netlink: 'syz.4.358': attribute type 14 has an invalid length. [ 84.868636][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 84.870407][ T7306] bridge1: entered promiscuous mode [ 84.870419][ T7306] bridge1: entered allmulticast mode [ 84.875691][ T7305] netlink: 'syz.4.358': attribute type 14 has an invalid length. [ 84.875705][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 84.880946][ T7308] bridge2: entered promiscuous mode [ 84.880957][ T7308] bridge2: entered allmulticast mode [ 84.886512][ T5871] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.886535][ T5871] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.886552][ T5871] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.886569][ T5871] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.917474][ T7310] device-mapper: table: 248:2: striped: Couldn't parse stripe destination (-ENOENT) [ 84.917496][ T7310] device-mapper: ioctl: error adding target to table [ 84.926173][ T7310] device-mapper: table: 248:2: striped: Couldn't parse stripe destination (-ENOENT) [ 84.926192][ T7310] device-mapper: ioctl: error adding target to table [ 84.961321][ T7319] syzkaller0: entered promiscuous mode [ 84.961334][ T7319] syzkaller0: entered allmulticast mode [ 85.026545][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.045623][ T7331] batman_adv: batadv0: Adding interface: veth0 [ 85.045635][ T7331] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.045651][ T7331] batman_adv: batadv0: Interface activated: veth0 [ 85.050021][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.050041][ T7331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.065999][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.066014][ T7331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.068214][ T7331] batman_adv: batadv0: Interface deactivated: veth0 [ 85.073100][ T7331] batman_adv: batadv0: Removing interface: veth0 [ 85.083844][ T7333] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.083864][ T7333] block device autoloading is deprecated and will be removed. [ 85.103600][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.246605][ T5786] Bluetooth: hci4: command tx timeout [ 85.610307][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 85.610329][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 85.670524][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.670917][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.771493][ T7400] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.797282][ T7400] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.797368][ T7410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.797379][ T7410] block device autoloading is deprecated and will be removed. [ 85.803696][ T7416] ublk_ctrl_add_dev: invalid recovery flags 10 [ 85.939833][ T7410] md/raid1:md1: active with 1 out of 3 mirrors [ 85.940557][ T7410] md1: detected capacity change from 0 to 4096 [ 85.960343][ T7425] md/raid:md4: invalid chunk size 0 [ 85.960356][ T7425] md: pers->run() failed ... [ 85.960642][ T7434] md: md4 stopped. [ 86.031969][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 86.134540][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.216347][ T7471] Bluetooth: MGMT ver 1.23 [ 86.218934][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 86.490796][ T7481] netlink: 64 bytes leftover after parsing attributes in process `syz.4.391'. [ 86.552953][ T7494] tmpfs: Bad value for 'mpol' [ 86.553071][ T7494] tmpfs: Bad value for 'mpol' [ 86.553175][ T7494] tmpfs: Bad value for 'mpol' [ 86.553278][ T7494] tmpfs: Bad value for 'mpol' [ 86.553382][ T7494] tmpfs: Bad value for 'mpol' [ 86.553481][ T7494] tmpfs: Bad value for 'mpol' [ 86.553579][ T7494] tmpfs: Bad value for 'mpol' [ 86.553679][ T7494] tmpfs: Bad value for 'mpol' [ 86.553778][ T7494] tmpfs: Bad value for 'mpol' [ 86.553875][ T7494] tmpfs: Bad value for 'mpol' [ 86.553972][ T7494] tmpfs: Bad value for 'mpol' [ 86.554068][ T7494] tmpfs: Bad value for 'mpol' [ 86.554164][ T7494] tmpfs: Bad value for 'mpol' [ 86.554261][ T7494] tmpfs: Bad value for 'mpol' [ 86.554362][ T7494] tmpfs: Bad value for 'mpol' [ 86.554460][ T7494] tmpfs: Bad value for 'mpol' [ 86.554557][ T7494] tmpfs: Bad value for 'mpol' [ 86.554654][ T7494] tmpfs: Bad value for 'mpol' [ 86.554751][ T7494] tmpfs: Bad value for 'mpol' [ 86.554856][ T7494] tmpfs: Bad value for 'mpol' [ 86.554953][ T7494] tmpfs: Bad value for 'mpol' [ 86.555354][ T7494] tmpfs: Bad value for 'mpol' [ 86.560226][ T7494] tmpfs: Bad value for 'mpol' [ 86.560346][ T7494] tmpfs: Bad value for 'mpol' [ 86.560445][ T7494] tmpfs: Bad value for 'mpol' [ 86.560543][ T7494] tmpfs: Bad value for 'mpol' [ 86.563787][ T7494] tmpfs: Bad value for 'mpol' [ 86.563904][ T7494] tmpfs: Bad value for 'mpol' [ 86.564002][ T7494] tmpfs: Bad value for 'mpol' [ 86.564107][ T7494] tmpfs: Bad value for 'mpol' [ 86.564203][ T7494] tmpfs: Bad value for 'mpol' [ 86.564304][ T7494] tmpfs: Bad value for 'mpol' [ 86.564406][ T7494] tmpfs: Bad value for 'mpol' [ 86.564510][ T7494] tmpfs: Bad value for 'mpol' [ 86.564607][ T7494] tmpfs: Bad value for 'mpol' [ 86.564706][ T7494] tmpfs: Bad value for 'mpol' [ 86.565977][ T7494] tmpfs: Bad value for 'mpol' [ 86.566089][ T7494] tmpfs: Bad value for 'mpol' [ 86.566191][ T7494] tmpfs: Bad value for 'mpol' [ 86.566295][ T7494] tmpfs: Bad value for 'mpol' [ 86.566462][ T7494] tmpfs: Bad value for 'mpol' [ 86.566565][ T7494] tmpfs: Bad value for 'mpol' [ 86.566670][ T7494] tmpfs: Bad value for 'mpol' [ 86.566771][ T7494] tmpfs: Bad value for 'mpol' [ 86.566869][ T7494] tmpfs: Bad value for 'mpol' [ 86.566970][ T7494] tmpfs: Bad value for 'mpol' [ 86.568435][ T7494] tmpfs: Bad value for 'mpol' [ 86.568542][ T7494] tmpfs: Bad value for 'mpol' [ 86.568643][ T7494] tmpfs: Bad value for 'mpol' [ 86.568742][ T7494] tmpfs: Bad value for 'mpol' [ 86.568838][ T7494] tmpfs: Bad value for 'mpol' [ 86.568935][ T7494] tmpfs: Bad value for 'mpol' [ 86.569032][ T7494] tmpfs: Bad value for 'mpol' [ 86.569131][ T7494] tmpfs: Bad value for 'mpol' [ 86.570400][ T7494] tmpfs: Bad value for 'mpol' [ 86.570529][ T7494] tmpfs: Bad value for 'mpol' [ 86.570631][ T7494] tmpfs: Bad value for 'mpol' [ 86.570751][ T7494] tmpfs: Bad value for 'mpol' [ 86.570849][ T7494] tmpfs: Bad value for 'mpol' [ 86.570949][ T7494] tmpfs: Bad value for 'mpol' [ 86.571046][ T7494] tmpfs: Bad value for 'mpol' [ 86.571186][ T7494] tmpfs: Bad value for 'mpol' [ 86.571286][ T7494] tmpfs: Bad value for 'mpol' [ 86.572564][ T7494] tmpfs: Bad value for 'mpol' [ 86.572671][ T7494] tmpfs: Bad value for 'mpol' [ 86.606769][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.695174][ T7497] XFS (sr0): Invalid superblock magic number [ 86.765968][ T7508] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.397'. [ 86.772760][ T7504] program syz.0.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.797726][ T7510] device-mapper: table: 248:4: striped: Invalid stripe count (-EINVAL) [ 86.797740][ T7510] device-mapper: ioctl: error adding target to table [ 86.883049][ T7523] tap0: tun_chr_ioctl cmd 1074025678 [ 86.883063][ T7523] tap0: group set to 0 [ 87.021937][ T7465] ima: policy update failed [ 87.117131][ T7535] netlink: 'syz.4.406': attribute type 21 has an invalid length. [ 87.121534][ T7535] nfs: Bad value for 'mountport' [ 87.326521][ T5786] Bluetooth: hci4: command tx timeout [ 87.345676][ T7552] can: request_module (can-proto-0) failed. [ 87.706591][ T1482] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.750748][ T7559] loop7: detected capacity change from 0 to 7 [ 87.756517][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.756596][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.757596][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.757631][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.757763][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.757790][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.757901][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.757927][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.758503][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.758531][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.758676][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.758703][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.759025][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.759053][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.759069][ T7559] ldm_validate_partition_table(): Disk read failed. [ 87.761108][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.761181][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.765008][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.765067][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.765905][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.765961][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.771446][ T7559] Dev loop7: unable to read RDB block 0 [ 87.773001][ T7559] loop7: unable to read partition table [ 87.773086][ T7559] loop7: partition table beyond EOD, truncated [ 87.773103][ T7559] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 87.829564][ T7561] kernel profiling enabled (shift: 0) [ 87.856586][ T1482] usb 8-1: device descriptor read/64, error -71 [ 87.981248][ T7570] fuse: Unknown parameter 'f{0x0000000000000003' [ 88.011698][ T7573] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 88.011858][ T7573] 8021q: VLANs not supported on tunl0 [ 88.096599][ T1482] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 88.246579][ T1482] usb 8-1: device descriptor read/64, error -71 [ 88.359194][ T1482] usb usb8-port1: attempt power cycle [ 88.381558][ T7581] batman_adv: batadv0: Adding interface: dummy0 [ 88.381569][ T7581] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.381584][ T7581] batman_adv: batadv0: Interface activated: dummy0 [ 88.382785][ T7581] netlink: 'syz.4.419': attribute type 10 has an invalid length. [ 88.382802][ T7581] batadv0: entered promiscuous mode [ 88.382811][ T7581] batadv0: entered allmulticast mode [ 88.383228][ T7581] bridge0: port 3(batadv0) entered blocking state [ 88.383273][ T7581] bridge0: port 3(batadv0) entered disabled state [ 88.384576][ T7581] bridge0: port 3(batadv0) entered blocking state [ 88.384621][ T7581] bridge0: port 3(batadv0) entered forwarding state [ 88.696507][ T1482] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.727213][ T1482] usb 8-1: device descriptor read/8, error -71 [ 88.886645][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 88.886658][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 88.942930][ T7604] FAULT_INJECTION: forcing a failure. [ 88.942930][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 88.942964][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.0.427 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 88.942990][ T7604] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 88.942998][ T7604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.943009][ T7604] Call Trace: [ 88.943044][ T7604] [ 88.943052][ T7604] dump_stack_lvl+0x100/0x190 [ 88.943148][ T7604] should_fail_ex.cold+0x5/0xa [ 88.943215][ T7604] should_failslab+0xc2/0x120 [ 88.943268][ T7604] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 88.943301][ T7604] ? selinux_socket_create+0xe7/0x590 [ 88.943336][ T7604] ? sock_alloc_inode+0x26/0x2c0 [ 88.943367][ T7604] ? __pfx_sock_alloc_inode+0x10/0x10 [ 88.943390][ T7604] sock_alloc_inode+0x26/0x2c0 [ 88.943414][ T7604] ? __pfx_sock_alloc_inode+0x10/0x10 [ 88.943435][ T7604] alloc_inode+0x68/0x250 [ 88.943469][ T7604] sock_alloc+0x42/0x240 [ 88.943491][ T7604] __sock_create+0xc2/0x860 [ 88.943522][ T7604] __sys_socket+0x14d/0x260 [ 88.943548][ T7604] ? __pfx___sys_socket+0x10/0x10 [ 88.943579][ T7604] __x64_sys_socket+0x72/0xb0 [ 88.943602][ T7604] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.943682][ T7604] do_syscall_64+0x123/0x790 [ 88.943703][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.943725][ T7604] RIP: 0033:0x7fd8b639f559 [ 88.943741][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.943759][ T7604] RSP: 002b:00007fd8b45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.943779][ T7604] RAX: ffffffffffffffda RBX: 00007fd8b6625fa0 RCX: 00007fd8b639f559 [ 88.943791][ T7604] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 88.943800][ T7604] RBP: 00007fd8b6436b20 R08: 0000000000000000 R09: 0000000000000000 [ 88.943810][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.943822][ T7604] R13: 00007fd8b6626038 R14: 00007fd8b6625fa0 R15: 00007ffd5ce70728 [ 88.943846][ T7604] [ 88.965727][ T7604] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.987284][ T1482] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 89.046659][ T1482] usb 8-1: device descriptor read/8, error -71 [ 89.159334][ T1482] usb usb8-port1: unable to enumerate USB device [ 89.181826][ T7613] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.262889][ T7619] Illegal XDP return value 3243972558 on prog (id 41) dev syz_tun, expect packet loss! [ 89.265275][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 89.265285][ T42] audit: type=1400 audit(1792932596.581:678): avc: denied { setattr } for pid=7618 comm="syz.4.430" name="v4l-touch0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.306879][ T5786] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 89.307013][ T42] audit: type=1400 audit(1792932596.631:679): avc: denied { ioctl } for pid=7621 comm="syz.4.432" path="socket:[20682]" dev="sockfs" ino=20682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.307363][ T5786] Bluetooth: hci3: unexpected event for opcode 0x203e [ 89.307473][ T7624] random: crng reseeded on system resumption [ 89.315283][ T7623] random: crng reseeded on system resumption [ 89.315912][ T42] audit: type=1400 audit(1792932596.631:680): avc: denied { getattr } for pid=7621 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.471060][ T42] audit: type=1400 audit(1792932596.791:681): avc: denied { write } for pid=7637 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.474170][ T42] audit: type=1400 audit(1792932596.791:682): avc: denied { ioctl } for pid=7637 comm="syz.4.436" path="socket:[20088]" dev="sockfs" ino=20088 ioctlcmd=0x4058587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.517841][ T7646] kvm [7645]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 89.520501][ T42] audit: type=1400 audit(1792932596.841:683): avc: denied { mounton } for pid=7645 comm="syz.4.438" path="/file0" dev="ramfs" ino=20779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 89.524761][ T7646] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.524780][ T7646] overlayfs: failed to set xattr on upper [ 89.524787][ T7646] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.524793][ T7646] overlayfs: ...falling back to index=off. [ 89.524799][ T7646] overlayfs: ...falling back to uuid=null. [ 89.524806][ T7646] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 89.525437][ T42] audit: type=1400 audit(1792932596.841:684): avc: denied { mount } for pid=7645 comm="syz.4.438" name="/" dev="overlay" ino=20779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.591556][ T7650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.618631][ T7650] syzkaller0: entered promiscuous mode [ 89.618647][ T7650] syzkaller0: entered allmulticast mode [ 90.287284][ T1482] net_ratelimit: 17 callbacks suppressed [ 90.287305][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.494275][ T42] audit: type=1400 audit(1792932597.811:685): avc: denied { write } for pid=7657 comm="syz.3.443" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.499456][ T42] audit: type=1400 audit(1792932597.821:686): avc: denied { ioctl } for pid=7657 comm="syz.3.443" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x40603d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.589721][ T7653] macvlan0: entered promiscuous mode [ 90.627558][ T7658] batman_adv: batadv0: Adding interface: syz_tun [ 90.627578][ T7658] batman_adv: batadv0: Interface activated: syz_tun [ 90.847842][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.922656][ T42] audit: type=1400 audit(1792932598.241:687): avc: denied { listen } for pid=7670 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.257454][ T7684] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 91.337164][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.714453][ T7725] FAULT_INJECTION: forcing a failure. [ 91.714453][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 91.714476][ T7725] CPU: 2 UID: 0 PID: 7725 Comm: syz.4.454 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 91.714493][ T7725] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 91.714498][ T7725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.714504][ T7725] Call Trace: [ 91.714508][ T7725] [ 91.714513][ T7725] dump_stack_lvl+0x100/0x190 [ 91.714533][ T7725] should_fail_ex.cold+0x5/0xa [ 91.714552][ T7725] should_failslab+0xc2/0x120 [ 91.714568][ T7725] __kmalloc_noprof+0xfc/0x840 [ 91.714584][ T7725] ? tomoyo_encode2+0xfb/0x3c0 [ 91.714599][ T7725] tomoyo_encode2+0xfb/0x3c0 [ 91.714612][ T7725] tomoyo_encode+0x29/0x50 [ 91.714621][ T7725] tomoyo_realpath_from_path+0x18c/0x690 [ 91.714636][ T7725] tomoyo_path_number_perm+0x23c/0x580 [ 91.714652][ T7725] ? tomoyo_path_number_perm+0x22e/0x580 [ 91.714669][ T7725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.714697][ T7725] ? find_held_lock+0x2b/0x80 [ 91.714733][ T7725] ? d_splice_alias_ops+0x2e8/0x1350 [ 91.714756][ T7725] ? current_check_access_path+0x25c/0x420 [ 91.714772][ T7725] ? __pfx_current_check_access_path+0x10/0x10 [ 91.714787][ T7725] ? do_raw_spin_unlock+0x145/0x1e0 [ 91.714805][ T7725] ? simple_lookup+0xfc/0x1d0 [ 91.714830][ T7725] ? lookup_one_qstr_excl+0xaf/0x250 [ 91.714845][ T7725] tomoyo_path_mkdir+0x9b/0xe0 [ 91.714859][ T7725] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 91.714873][ T7725] ? lock_acquire+0x1d1/0x380 [ 91.714889][ T7725] security_path_mkdir+0x154/0x2e0 [ 91.714909][ T7725] filename_mkdirat+0x168/0x5e0 [ 91.714927][ T7725] ? __pfx_filename_mkdirat+0x10/0x10 [ 91.714944][ T7725] ? strncpy_from_user+0x19d/0x2d0 [ 91.714967][ T7725] ? do_getname+0x191/0x390 [ 91.714979][ T7725] __x64_sys_mkdirat+0x89/0xc0 [ 91.714996][ T7725] do_syscall_64+0x123/0x790 [ 91.715009][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.715022][ T7725] RIP: 0033:0x7fef3459f559 [ 91.715031][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.715041][ T7725] RSP: 002b:00007fef3542d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 91.715053][ T7725] RAX: ffffffffffffffda RBX: 00007fef34825fa0 RCX: 00007fef3459f559 [ 91.715060][ T7725] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.715067][ T7725] RBP: 00007fef34636b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.715073][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.715080][ T7725] R13: 00007fef34826038 R14: 00007fef34825fa0 R15: 00007ffd6db8c7e8 [ 91.715096][ T7725] [ 91.715107][ T7725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.842972][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.842993][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.915916][ T7741] __nla_validate_parse: 12 callbacks suppressed [ 91.915929][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 91.924887][ T7743] ip_tables: iptables: counters copy to user failed while replacing table [ 91.968259][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 91.968274][ T7748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.460'. [ 91.968282][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 91.993229][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 92.366695][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.856141][ T7763] Cannot find add_set index 65532 as target [ 92.901619][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7765 comm=syz.1.465 [ 92.910375][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7765 comm=syz.1.465 [ 93.009055][ T7771] tun0: tun_chr_ioctl cmd 1074025675 [ 93.009074][ T7771] tun0: persist disabled [ 93.009089][ T7772] tun0: tun_chr_ioctl cmd 1074025675 [ 93.009106][ T7772] tun0: persist disabled [ 93.328578][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 93.328650][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 93.329264][ T5786] Bluetooth: hci3: hardware error 0x00 [ 93.408386][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 93.419475][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.888294][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.446723][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.910211][ T7741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.974046][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 94.974059][ T42] audit: type=1400 audit(1792932602.291:701): avc: denied { write } for pid=7845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.974086][ T42] audit: type=1400 audit(1792932602.291:702): avc: denied { create } for pid=7845 comm="dhcpcd-run-hook" name="resolv.conf.tun0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.974106][ T42] audit: type=1400 audit(1792932602.291:703): avc: denied { write } for pid=7845 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.tun0.link" dev="tmpfs" ino=2519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.974155][ T42] audit: type=1400 audit(1792932602.291:704): avc: denied { append } for pid=7845 comm="dhcpcd-run-hook" name="resolv.conf.tun0.link" dev="tmpfs" ino=2519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.047017][ T42] audit: type=1400 audit(1792932602.371:705): avc: denied { listen } for pid=7847 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.047607][ T42] audit: type=1400 audit(1792932602.371:706): avc: denied { write } for pid=7847 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.048520][ T42] audit: type=1400 audit(1792932602.371:707): avc: denied { write } for pid=7860 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.050009][ T42] audit: type=1400 audit(1792932602.371:708): avc: denied { unlink } for pid=7860 comm="rm" name="resolv.conf.tun0.link" dev="tmpfs" ino=2519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.052285][ T7850] jffs2: notice: (7850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.127846][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 95.129994][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.133920][ T42] audit: type=1400 audit(1792932602.451:709): avc: denied { write } for pid=7867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.206143][ T42] audit: type=1400 audit(1792932602.521:710): avc: denied { write } for pid=7875 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.237278][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 95.240177][ T7873] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 95.326631][ T9] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 95.408218][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 95.458055][ T9] usb 9-1: device descriptor read/64, error -71 [ 95.487433][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.487901][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.666996][ T7899] device-mapper: table: 248:3: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 95.667013][ T7899] device-mapper: ioctl: error adding target to table [ 95.696545][ T9] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 95.765036][ T7905] lo: entered promiscuous mode [ 95.771218][ T7905] tunl0: entered promiscuous mode [ 95.774639][ T7905] gre0: entered promiscuous mode [ 95.781666][ T7905] gretap0: entered promiscuous mode [ 95.785889][ T7905] erspan0: entered promiscuous mode [ 95.791528][ T7905] ip_vti0: entered promiscuous mode [ 95.792886][ T7905] ip6_vti0: entered promiscuous mode [ 95.810444][ T7905] sit0: entered promiscuous mode [ 95.814217][ T7905] ip6tnl0: entered promiscuous mode [ 95.816125][ T7905] ip6gre0: entered promiscuous mode [ 95.826195][ T7905] syz_tun: entered promiscuous mode [ 95.828233][ T9] usb 9-1: device descriptor read/64, error -71 [ 95.873242][ T7905] ip6gretap0: entered promiscuous mode [ 95.875506][ T7905] bridge0: entered promiscuous mode [ 95.875704][ T7905] vcan0: entered promiscuous mode [ 95.876717][ T7905] bond0: entered promiscuous mode [ 95.876739][ T7905] bond_slave_0: entered promiscuous mode [ 95.876877][ T7905] bond_slave_1: entered promiscuous mode [ 95.878330][ T7905] team0: entered promiscuous mode [ 95.878340][ T7905] team_slave_0: entered promiscuous mode [ 95.878422][ T7905] team_slave_1: entered promiscuous mode [ 95.882433][ T7905] dummy0: entered promiscuous mode [ 95.888968][ T7905] nlmon0: entered promiscuous mode [ 95.889656][ T7905] vxcan0: entered promiscuous mode [ 95.891294][ T7905] vxcan1: entered promiscuous mode [ 95.891697][ T7905] veth0: entered promiscuous mode [ 95.895111][ T7905] veth1: entered promiscuous mode [ 95.898477][ T7905] wg0: entered promiscuous mode [ 95.904082][ T7905] wg1: entered promiscuous mode [ 95.907589][ T7905] wg2: entered promiscuous mode [ 95.908302][ T7905] veth0_to_bridge: entered promiscuous mode [ 95.913726][ T7905] veth1_to_bridge: entered promiscuous mode [ 95.919102][ T7905] veth0_to_bond: entered promiscuous mode [ 95.925022][ T7905] veth1_to_bond: entered promiscuous mode [ 95.928729][ T7905] veth0_to_team: entered promiscuous mode [ 95.935801][ T7905] veth1_to_team: entered promiscuous mode [ 95.939683][ T9] usb usb9-port1: attempt power cycle [ 95.948158][ T7905] veth0_to_batadv: entered promiscuous mode [ 95.950422][ T7905] batadv_slave_0: entered promiscuous mode [ 95.953703][ T7905] veth1_to_batadv: entered promiscuous mode [ 95.960060][ T7905] batadv_slave_1: entered promiscuous mode [ 95.961541][ T7905] xfrm0: entered promiscuous mode [ 95.966307][ T7905] veth0_to_hsr: entered promiscuous mode [ 95.971052][ T7905] veth1_to_hsr: entered promiscuous mode [ 95.978337][ T7905] hsr0: entered promiscuous mode [ 95.981721][ T7905] veth1_virt_wifi: entered promiscuous mode [ 95.985253][ T7905] veth0_virt_wifi: entered promiscuous mode [ 95.986825][ T7905] virt_wifi0: entered promiscuous mode [ 95.996639][ T7905] vlan0: entered promiscuous mode [ 96.001170][ T7905] vlan1: entered promiscuous mode [ 96.009316][ T7905] macvlan0: entered promiscuous mode [ 96.011709][ T7905] macvlan1: entered promiscuous mode [ 96.014564][ T7905] ipvlan0: entered promiscuous mode [ 96.014637][ T7905] ipvlan1: entered promiscuous mode [ 96.022393][ T7905] macvtap0: entered promiscuous mode [ 96.025827][ T7905] macsec0: entered promiscuous mode [ 96.030693][ T7905] geneve0: entered promiscuous mode [ 96.035480][ T7905] geneve1: entered promiscuous mode [ 96.040269][ T7905] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 96.042310][ T7905] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 96.045577][ T7905] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 96.051081][ T7905] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 96.060201][ T7905] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 96.066108][ T7905] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 96.072805][ T7905] veth1_vlan.1: entered promiscuous mode [ 96.072984][ T7905] vxlan0: entered promiscuous mode [ 96.073056][ T7905] bond1: entered promiscuous mode [ 96.075202][ T7905] bond2: entered promiscuous mode [ 96.076264][ T7905] syztnl0: entered promiscuous mode [ 96.098273][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.098313][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.098403][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.098431][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.174668][ T7922] syz_tun: entered allmulticast mode [ 96.277063][ T9] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 96.297052][ T9] usb 9-1: device descriptor read/8, error -71 [ 96.309517][ T7942] sctp: [Deprecated]: syz.3.490 (pid 7942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.309517][ T7942] Use struct sctp_sack_info instead [ 96.376792][ T7951] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.474650][ T7964] FAULT_INJECTION: forcing a failure. [ 96.474650][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 96.474681][ T7964] CPU: 3 UID: 0 PID: 7964 Comm: syz.0.496 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 96.474708][ T7964] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 96.474715][ T7964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.474726][ T7964] Call Trace: [ 96.474754][ T7964] [ 96.474762][ T7964] dump_stack_lvl+0x100/0x190 [ 96.474854][ T7964] should_fail_ex.cold+0x5/0xa [ 96.474906][ T7964] should_failslab+0xc2/0x120 [ 96.474962][ T7964] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.474994][ T7964] ? __pfx_map_id_range_down+0x10/0x10 [ 96.475034][ T7964] ? rcu_is_watching+0x13/0xc0 [ 96.475061][ T7964] ? security_inode_alloc+0x3b/0x2c0 [ 96.475102][ T7964] security_inode_alloc+0x3b/0x2c0 [ 96.475129][ T7964] inode_init_always_gfp+0xc6f/0xfb0 [ 96.475173][ T7964] alloc_inode+0x8e/0x250 [ 96.475198][ T7964] sock_alloc+0x42/0x240 [ 96.475228][ T7964] __sock_create+0xc2/0x860 [ 96.475268][ T7964] __sys_socketpair+0x1ec/0x580 [ 96.475298][ T7964] ? __pfx___sys_socketpair+0x10/0x10 [ 96.475326][ T7964] ? xfd_validate_state+0x129/0x190 [ 96.475366][ T7964] __x64_sys_socketpair+0x96/0x100 [ 96.475396][ T7964] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.475433][ T7964] do_syscall_64+0x123/0x790 [ 96.475454][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.475473][ T7964] RIP: 0033:0x7fd8b639f559 [ 96.475490][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.475508][ T7964] RSP: 002b:00007fd8b45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 96.475527][ T7964] RAX: ffffffffffffffda RBX: 00007fd8b6625fa0 RCX: 00007fd8b639f559 [ 96.475540][ T7964] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 96.475551][ T7964] RBP: 00007fd8b6436b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.475561][ T7964] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 96.475572][ T7964] R13: 00007fd8b6626038 R14: 00007fd8b6625fa0 R15: 00007ffd5ce70728 [ 96.475597][ T7964] [ 96.475647][ T7964] socket: no more sockets [ 96.533824][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.536480][ T9] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 96.575381][ T9] usb 9-1: device descriptor read/8, error -71 [ 96.677903][ T9] usb usb9-port1: unable to enumerate USB device [ 96.770005][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.770095][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.967183][ T8006] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 96.967198][ T8006] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 97.038020][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 0 H[ 97.097036][ T5786] Bluetooth: hci2: setting up ROME/QCA6390 [ 97.140217][ T8019] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 97.156230][ T8019] pci 0000:00:00.0: Adding to iommu group 0 [ 97.318285][ T8032] netlink: 'syz.1.515': attribute type 7 has an invalid length. [ 97.406753][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.567953][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.596761][ T8049] netlink: 96 bytes leftover after parsing attributes in process `syz.3.520'. [ 97.605281][ T8047] ptp ptp0: only physical clock in use now [ 97.846786][ T8072] jffs2: notice: (8072) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.855111][ T8072] overlayfs: failed to resolve './bus': -2 [ 97.897123][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 98.058436][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.147273][ T8104] bridge_slave_0: left allmulticast mode [ 98.147290][ T8104] bridge_slave_0: left promiscuous mode [ 98.147420][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.264231][ T8113] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 98.363970][ T8118] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 98.374386][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.377416][ T8118] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.393113][ T8121] batman_adv: batadv0: Adding interface: veth0 [ 98.393123][ T8121] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.393138][ T8121] batman_adv: batadv0: Interface activated: veth0 [ 98.393942][ T8118] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.482116][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.483213][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.483626][ T8121] batman_adv: batadv0: Interface deactivated: veth0 [ 98.483637][ T8121] batman_adv: batadv0: Removing interface: veth0 [ 98.521291][ T8127] NILFS (loop4): device size too small [ 98.538870][ T8129] netlink: 92 bytes leftover after parsing attributes in process `syz.0.543'. [ 98.540496][ T8129] xt_NETMAP: bad MAP_IPS. [ 98.542912][ T8129] netlink: 'syz.0.543': attribute type 32 has an invalid length. [ 98.542922][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 98.570106][ T8129] bond3: option coupled_control: invalid value (128) [ 98.570969][ T8129] bond3 (unregistering): Released all slaves [ 98.619483][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.945139][ T8156] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 98.947598][ T8156] CPU: 2 UID: 0 PID: 8156 Comm: syz.0.551 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 98.951628][ T8156] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 98.953391][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.956706][ T8156] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 98.959101][ T8156] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 39 f1 [ 98.966537][ T8156] RSP: 0018:ffffc90005b77718 EFLAGS: 00010246 [ 98.968511][ T8156] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 98.971571][ T8156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.974738][ T8156] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 98.977788][ T8156] R10: 00000000ffffffff R11: 0000000000000001 R12: 0000000000000000 [ 98.980598][ T8156] R13: ffffc90005b77870 R14: 00000000ffffffff R15: ffffc90005b77a10 [ 98.983764][ T8156] FS: 00007fd8b45f66c0(0000) GS:ffff8880d46b4000(0000) knlGS:0000000000000000 [ 98.986768][ T8156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.989436][ T8156] CR2: 0000200000019300 CR3: 000000005869d000 CR4: 0000000000352ef0 [ 98.992582][ T8156] Call Trace: [ 98.993722][ T8156] [ 98.994724][ T8156] dm_calculate_queue_limits+0x38f/0xeb0 [ 98.996985][ T8156] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 98.999448][ T8156] ? mempool_init_noprof+0x3a/0x50 [ 99.001377][ T8156] ? kasan_save_track+0x14/0x30 [ 99.003024][ T8156] ? bioset_init+0x3e8/0x8a0 [ 99.004919][ T8156] ? __pfx_bioset_init+0x10/0x10 [ 99.006941][ T8156] dm_setup_md_queue+0xe2/0x550 [ 99.008636][ T8156] ? dm_table_complete+0xaa6/0x1c90 [ 99.010376][ T8156] ? dm_table_complete+0xbc0/0x1c90 [ 99.012481][ T8156] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 99.014352][ T8156] ? __pfx_dm_table_complete+0x10/0x10 [ 99.016198][ T8156] ? dm_table_create+0x2d3/0x3d0 [ 99.018197][ T8156] table_load+0x4e8/0x7b0 [ 99.019841][ T8156] ? __pfx_table_load+0x10/0x10 [ 99.021402][ T8156] ? __might_fault+0xc5/0x140 [ 99.023210][ T8156] ? __might_fault+0xc5/0x140 [ 99.025140][ T8156] ctl_ioctl+0x4d2/0xcc0 [ 99.026551][ T8156] ? __pfx_table_load+0x10/0x10 [ 99.028356][ T8156] ? __pfx_ctl_ioctl+0x10/0x10 [ 99.030291][ T8156] ? selinux_file_ioctl+0x1e0/0x290 [ 99.032341][ T8156] dm_ctl_ioctl+0x22/0x30 [ 99.033730][ T8156] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 99.035514][ T8156] __x64_sys_ioctl+0x18e/0x210 [ 99.037445][ T8156] do_syscall_64+0x123/0x790 [ 99.038950][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.041040][ T8156] RIP: 0033:0x7fd8b639f559 [ 99.042837][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.049873][ T8156] RSP: 002b:00007fd8b45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.052483][ T8156] RAX: ffffffffffffffda RBX: 00007fd8b6625fa0 RCX: 00007fd8b639f559 [ 99.055578][ T8156] RDX: 00002000000006c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 99.058684][ T8156] RBP: 00007fd8b6436b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.061329][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.064314][ T8156] R13: 00007fd8b6626038 R14: 00007fd8b6625fa0 R15: 00007ffd5ce70728 [ 99.066878][ T8156] [ 99.068175][ T8156] Modules linked in: [ 99.070363][ T8156] ---[ end trace 0000000000000000 ]--- [ 99.077896][ T8156] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 99.077935][ T8156] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 39 f1 [ 99.077952][ T8156] RSP: 0018:ffffc90005b77718 EFLAGS: 00010246 [ 99.077968][ T8156] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 99.077980][ T8156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.077991][ T8156] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 99.078000][ T8156] R10: 00000000ffffffff R11: 0000000000000001 R12: 0000000000000000 [ 99.078011][ T8156] R13: ffffc90005b77870 R14: 00000000ffffffff R15: ffffc90005b77a10 [ 99.078023][ T8156] FS: 00007fd8b45f66c0(0000) GS:ffff8880d46b4000(0000) knlGS:0000000000000000 [ 99.078058][ T8156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.078072][ T8156] CR2: 0000200000019300 CR3: 000000005869d000 CR4: 0000000000352ef0 [ 99.078085][ T8156] Kernel panic - not syncing: Fatal exception [ 99.115042][ T8156] Kernel Offset: disabled [ 99.116678][ T8156] Rebooting in 86400 seconds..