last executing test programs: 2.030724207s ago: executing program 1 (id=497): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c0000cabaa574e9a2335ae2065a1bdee186f77ad47d84e87a5c354a96ac64f63ad2f5bdd96efb6410fda93f"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c0000cabaa574e9a2335ae2065a1bdee186f77ad47d84e87a5c354a96ac64f63ad2f5bdd96efb6410fda93f"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) 1.799569158s ago: executing program 1 (id=500): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000500)=@objname={'system_u:object_r:src_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x7, 0x20, './file0\x00'}, 0x66) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\x02\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffc, [[0x6, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x7, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x3fe, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x58df, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x4003}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.798122296s ago: executing program 3 (id=501): socket$nl_generic(0x10, 0x3, 0x10) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x100800, 0x0) (async) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x581380, 0x168) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') read(0xffffffffffffffff, &(0x7f0000000400)=""/119, 0x77) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x11}, 0x0, 0x124, 0x14c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x22, 0x9, 0x0, 0x1, 0x6, 0xb3c, 0x10, 0x20, 0x20}, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x9, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x1, 0x0, [0x34d, 0x4, 0x3, 0xb, 0x6, 0x2, 0x3da6, 0xd, 0x407, 0x7, 0x5, 0xe420, 0x3, 0x10, 0x7f, 0x2d], 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) (async) userfaultfd(0x800) 1.667437217s ago: executing program 3 (id=503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000040000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) 1.591652766s ago: executing program 1 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@svm={0xa, 0x1, 0x1080, {0xf000}, {"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"}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.590101796s ago: executing program 3 (id=506): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000121420002cbd7000fedbdf2508004f0005000000080015000400000008004b001300000008004b00130000000800150005000000e148050f9b5f7294141b39c5794b1817d5f121b6812d3847dc90c751dca10b220550a60fa70e8c4b83ebe6bf3a1e204824a19d1e99be5c93a0a9d8bc4f2b739cfdce1a816532f61ab63b52b06294239c0d3c"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x18}], 0x1, 0x0, 0xffad, 0x40}, 0x0) 1.588905341s ago: executing program 2 (id=507): setns(0xc9, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x4000000000009}, {0x8, 0xaef3, 0xa, 0x7, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x20, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1fa) mount(0x0, &(0x7f0000000200)='./ffs\x00', 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) landlock_create_ruleset(0x0, 0x0, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0xc, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r15 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r12, 0x2) syz_ublk_setup_queues(r15, r14, &(0x7f0000000180)={0x0, 0x3e0e, 0x1, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x157}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x3, 0xe5}}], 0x4, &(0x7f0000001f40)={0x2e, 0x8, 0x0, r15, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r13, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.489713944s ago: executing program 3 (id=508): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffeff}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x8084) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40001, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}], [{@smackfshat}, {@fsuuid={'fsuuid', 0x3d, {[0x20, 0x35, 0x65, 0x38, 0x0, 0x34, 0x36, 0x32], 0x2d, [0x37, 0x52, 0x66, 0x31], 0x2d, [0x32, 0x32, 0x35, 0x37], 0x2d, [0x30, 0x36, 0x36, 0x36], 0x2d, [0x36, 0x62, 0x38, 0x38, 0x37, 0x36, 0x39, 0x31]}}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x26) sendto$inet(r5, 0x0, 0x0, 0x4004004, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setns(0xc9, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x100000}, 0x20) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x80) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x21021, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000802180000", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) 1.419200456s ago: executing program 1 (id=510): r0 = msgget(0x0, 0x231) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800) (async, rerun: 32) msgrcv(r0, &(0x7f0000000040)={0x0, ""/20}, 0x1c, 0x3, 0x0) (rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x1000, 0x2, 0x8, 0xb, 0x3e, 0x9, 0x7f, 0x6, 0xfe, 0x5, 0x3}, {0x1000, 0x4000, 0x0, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x8}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xeeee0000, 0x8, 0x7, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0xce}, {0xeeee8000, 0x1, 0x9, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0xc000, 0xc, 0x5, 0xf, 0x7, 0x8, 0xe2, 0x0, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0000025, 0x0, 0x50000, 0x2024, 0x7, 0x0, 0x50000, [0x7, 0x9, 0x60, 0x4132]}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44008010}, 0x10840) (async, rerun: 32) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) r8 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) (async) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000009c0)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e20, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='batadv_slave_0\x00', 0xf2dc, 0xfffffffffffffffa, 0x3}) r9 = dup(r8) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r9, r14, &(0x7f0000000340)={0x0, 0xe9a6, 0x4000, 0x0, 0x2cd}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226c, 0x40, 0x0, 0x2e3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb05e, 0x2, 0x0, 0x310, 0x0, r10}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffe5, 0x0, 0x2, 0x12b, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee75, 0x400, 0x1, 0xe3, 0x0, r10}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r9, r14, &(0x7f00000001c0)={0x0, 0xb626, 0x200, 0x10000001, 0x28b, 0x0, r9}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa209, 0x8, 0x0, 0x79, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19f5, 0x800, 0x0, 0x3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26b6, 0x0, 0x1, 0x36}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3213, 0x100, 0x1, 0x3e4, 0x0, r15}}], 0x4, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.418114221s ago: executing program 3 (id=511): r0 = openat$comedi(0xffffff9c, &(0x7f0000001140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r0, 0xb6ae1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0xcd) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000016e7b400000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0xffffffffffff25d7}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket(0x23, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xf49c1a6d801e715d, 0xfff7}, {0x0, 0xffed}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_procfs(r1, &(0x7f00000001c0)='environ\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYBLOB="020000000600000072000008000f2763010001000d2d2d6cd9c35f061dda21848035a35100008000000000000000ffb48288a4ff1fc320cb60298af13c5d7b389a6cb568e4d8a2ea7da23633036a70ffac5bc83f48f8728d7062d9c2a809caf0fa4c8c777f1250d442aad03bb99bcf2471a16e6e6b8e54613549c0725ba79d806d57be704dbce74266ea0552195c93a45c3b122a78b5d3d0ef8eb6e98db341b377cd709226f9cd3af27a04c41d10c9968f3ce268843525581551b3daec7a86d569a84cc11d0117257454471ff801ccdf0bc7a5e76773f8e39a39b7859925cced22f1ffccc99f291244321c98fd837d22b4c31ac93835f0d0", @ANYBLOB='\x00'/20, @ANYRESOCT=r4, @ANYRES16=r3, @ANYRES64=r7, @ANYRES32=r2, @ANYRES16=r10, @ANYBLOB="5d54c9defe2be3f6142f2b7123a6891dd7628fbad4a1342727198404757aeb9ce35021ff80a96d7174bf810a66c28b8ff33a65f5", @ANYRES32=r1, @ANYRES8=r7, @ANYRESHEX=0x0, @ANYRES16=r10, @ANYRES64=r10, @ANYRES8=r2, @ANYRESHEX=r3], 0x48) syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.030429559s ago: executing program 1 (id=514): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl(r2, 0x4048aec9, &(0x7f0000000200)="0100") r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r4 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000740)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a31383036065594030c2f436572740000000061746520766572696669636174696f6e2045434453412073656c662d74657374696e672051612781c5df11392d82ac6b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030e2f436572746966696361746520766572696669636174696f6e2045434453412073006c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714e00009f90e177189fc2e70a82d08ae181a9717c5a730d26b95b1e248c739ff838f848b4ad1619c022c6a35d325b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d060302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee2925b32f67cc7367c54e88e311b6b93260c43d77f3ee1db32c786f4a96dea4dfb327dabcea67b4bb627727c19a594ce61bfa317f00", 0x215, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb25210014001f000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) socket$kcm(0x29, 0x5, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r9, 0xc0585609, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x200, 0xff, {0x0, 0xea60}, {0x2, 0x8, 0x7f, 0x9, 0xfe, 0x7, "6c4d5797"}, 0x96, 0x4, {}, 0x2}) socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000240)={{0x0, 0xf, 0xffffffff, 0x1, 0x6525043, 0x202000000000, 0x2, 0x5, 0x7, 0xfca, 0x4, 0x1000, 0x1, 0x800, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r10, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000090000000000000000000000940a0000000080029500000000000000"], &(0x7f00000003c0)='syzkaller\x00'}, 0x90) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x40001}, 0x0) fdatasync(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) 641.16884ms ago: executing program 0 (id=518): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000400)) (async) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000400)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000000), 0x1004) syz_pidfd_open(r1, 0x0) (async) r3 = syz_pidfd_open(r1, 0x0) ftruncate(r3, 0x7d6e6157) (async) ftruncate(r3, 0x7d6e6157) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x8, r1) (async) ptrace(0x8, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) (async) r5 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200fa5f2b7116ad12f80294c9ef9dab0d2760b244ed78785527f8c28ede6073b10a81d7e6f35a27ee8cae1ef27a9783c6cdadafc22088b6ea433d8df3498aabaea11369c698de4878606d78952780215732a99c6c2e98f", @ANYRES16=r7, @ANYBLOB="000327bd7000fedbdf25050000000c0016000004000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) accept4(r4, 0x0, 0x0, 0x80800) 511.010067ms ago: executing program 2 (id=519): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x20}, 0x4000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r2, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 509.539875ms ago: executing program 0 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f00000000c0)={0xa, 0x0, [{0x80000019, 0xf, 0x2, 0xffffffff, 0x2, 0x7, 0x9}, {0x40000001, 0x7, 0x6, 0xbd53, 0x3, 0x101, 0x3}, {0x80000000, 0x860, 0x7ee57b7370b324a6, 0x2, 0x1, 0x7ff, 0xb48dcc12}, {0x80000007, 0x5, 0x1, 0xfffffffa, 0x2, 0x1, 0x9}, {0x2, 0x3, 0x0, 0x6, 0x5, 0x7ff, 0x6}, {0xc0000001, 0x8, 0x509cde83038852d6, 0x0, 0x3f800000, 0xb, 0x9}, {0x80000002, 0x48e57da1, 0x4, 0x8, 0x6, 0x2, 0x8}, {0xc0000001, 0x2, 0x5, 0xffffffff, 0x4017a8d7, 0x9, 0x7}, {0xa, 0x200, 0x2, 0x2, 0x1, 0x5, 0x5}, {0x4, 0x8, 0x2, 0xa77, 0xc, 0x4, 0x57}]}) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f00000000c0)={0xa, 0x0, [{0x80000019, 0xf, 0x2, 0xffffffff, 0x2, 0x7, 0x9}, {0x40000001, 0x7, 0x6, 0xbd53, 0x3, 0x101, 0x3}, {0x80000000, 0x860, 0x7ee57b7370b324a6, 0x2, 0x1, 0x7ff, 0xb48dcc12}, {0x80000007, 0x5, 0x1, 0xfffffffa, 0x2, 0x1, 0x9}, {0x2, 0x3, 0x0, 0x6, 0x5, 0x7ff, 0x6}, {0xc0000001, 0x8, 0x509cde83038852d6, 0x0, 0x3f800000, 0xb, 0x9}, {0x80000002, 0x48e57da1, 0x4, 0x8, 0x6, 0x2, 0x8}, {0xc0000001, 0x2, 0x5, 0xffffffff, 0x4017a8d7, 0x9, 0x7}, {0xa, 0x200, 0x2, 0x2, 0x1, 0x5, 0x5}, {0x4, 0x8, 0x2, 0xa77, 0xc, 0x4, 0x57}]}) syz_genetlink_get_family_id$nl80211(0x0, r0) (async) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) creat(&(0x7f0000000280)='./file0\x00', 0x29) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x29) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040}, 0x724920aa0462fda4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000340)=""/174, 0xae}], 0x1, 0x2, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000fbdbdf25410000000c00990003000000380000000800a000050000000800a10094f60000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000120004000000a803060025801e80009c6208196502cfb8e4840f5bbc8832e3b68a9710bbde3e8e94f6bc1f42c53997fd62b3807c88f849700756dbeb1d377d26eca57f4a781ebe979d03ec80e76a3ebd97f4bb3d476b058436612a6fc635a974d819fdea5b3d742d50b64f31bb2ad6b0af"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000}, 0x10}, 0x94) 507.777915ms ago: executing program 2 (id=521): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="ac000000000701010000000000000000050000090c00034000000000000080010c00034000000000000000090900010073797a3100000000080005400000000154000780080001400000000308000240000000030800024000000649080001400000ffff080002000000000000000840000000050800024000000d93080001400000008108537640a334c24e0002400000000408000240000000070c00064000000000000008a20c0006400000000011d36c34"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) clock_gettime(0xf99cd02a85684025, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = dup2(r4, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) 402.106058ms ago: executing program 0 (id=522): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffe7e, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x44008800) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x00') getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2033) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r7, r8, 0x0, 0x0, 0x1000000}}}, 0x78) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r4, r8}}, './proc\x00'}) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth/../file0\x00', &(0x7f00000002c0)={0x0, 0x80, 0x1c}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40040020}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4008093) r12 = openat(r9, &(0x7f0000000180)='./proc/thread-self/fail-nth/../file0\x00', 0x0, 0x3a) write(r12, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x38, 0x2, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7, 0x7, 0x7}}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x20000000000) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x5}]}) 339.938541ms ago: executing program 2 (id=523): r0 = socket$xdp(0x2c, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind(r0, &(0x7f0000000180)=@caif=@util={0x25, "d6ba4103a8a742b5d947b5fd552224fb"}, 0x80) read(r2, &(0x7f0000002580)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) setresuid(0xee01, r1, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x2, r5}) close(r3) r6 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r6, &(0x7f0000000500)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x41, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000061ace3c96000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a3200000000fe08000140000000030900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000166140000001100010000000000000000"], 0xd4}}, 0x0) sendto$inet(r7, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000001280), 0x4) 256.240258ms ago: executing program 0 (id=524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000060000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) 254.799293ms ago: executing program 1 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001b80)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="12030800030016000c0045"], 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='nicvf0\x00', 0x10) 253.771196ms ago: executing program 2 (id=526): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', &(0x7f0000000200)={0x201, 0x40}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) open$dir(0x0, 0x4003, 0xb0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) 192.097893ms ago: executing program 0 (id=527): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x80044704, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x400000, 0xa, "3eccd8000000000000000010000000040100"}) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x311, 0x10, 0x0, 0x81, 0x42, @random="d6646a8c197c"}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) (async) listen(r0, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x1000000, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='measure uid>1', 0xd) dup3(r3, r4, 0x0) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0xff, @loopback}, 0x1c) (async) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0xff, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012bbd700011dbdf250800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) accept4(r0, 0x0, 0x0, 0x800) (async) accept4(r0, 0x0, 0x0, 0x800) 81.808747ms ago: executing program 0 (id=528): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(r0, 0x0, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000080)=ANY=[], 0x1001) 80.449377ms ago: executing program 2 (id=529): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bdb0088680ebd55f070000080009000200000008000c00a80a000008000b000200000006000100080000000c000f0002000000000000003ebf3418b4d225742e5e56a616a5ff54dc13195bf5843f7f8ce2f8a3edf303d7d6abb484d1037283b8cbd64d33c41e4c08208b28571b28406f8fcc460e12a4e1dd10f216a1293eda71dd795943d3"], 0x40}}, 0xc010) 0s ago: executing program 3 (id=530): syz_usbip_server_init(0x1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"d28cbfec70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281be36882ff896da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401aff07b6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e815355d8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa901000000010000008dd78c219be7f0c53dddd4cea58ecac6cef53ed2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d28ccb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5061ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b00"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r1, 0x80081270, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) syz_open_dev$sg(&(0x7f0000000440), 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fe) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, r3, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') kernel console output (not intermixed with test programs): ce: batadv_slave_1 [ 49.748134][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.748156][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.764902][ T5723] hsr_slave_0: entered promiscuous mode [ 49.765665][ T5723] hsr_slave_1: entered promiscuous mode [ 49.766202][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 49.766293][ T5723] Cannot create hsr debugfs directory [ 49.845651][ T5736] hsr_slave_0: entered promiscuous mode [ 49.846382][ T5736] hsr_slave_1: entered promiscuous mode [ 49.847051][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 49.847070][ T5736] Cannot create hsr debugfs directory [ 49.950038][ T5728] hsr_slave_0: entered promiscuous mode [ 49.950579][ T5728] hsr_slave_1: entered promiscuous mode [ 49.950961][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 49.950975][ T5728] Cannot create hsr debugfs directory [ 50.262871][ T5723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.269225][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.287794][ T5723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.295974][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.311250][ T5723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.319689][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.327327][ T5723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.332765][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.375294][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.380730][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.383062][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.388047][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.388975][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.394188][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.394934][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.400247][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.475183][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.479413][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.480331][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.489070][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.489992][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.496740][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.510064][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.513555][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.532285][ T5730] Bluetooth: hci2: command tx timeout [ 50.541735][ T5730] Bluetooth: hci0: command tx timeout [ 50.611107][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.611696][ T5730] Bluetooth: hci1: command tx timeout [ 50.618046][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.618817][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.622310][ T5730] Bluetooth: hci3: command tx timeout [ 50.623901][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.625317][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.631103][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.632008][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.638397][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.686113][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.725385][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.750411][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.750505][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.771139][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.771188][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.780858][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.825176][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.829385][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.847088][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.847139][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.848188][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.848269][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.854905][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.868231][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.868279][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.882673][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.887558][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.887649][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.909668][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.936656][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.936704][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.953619][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.953714][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.167037][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.216529][ T5723] veth0_vlan: entered promiscuous mode [ 51.220492][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.224623][ T5723] veth1_vlan: entered promiscuous mode [ 51.261036][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.265022][ T5723] veth0_macvtap: entered promiscuous mode [ 51.269646][ T5736] veth0_vlan: entered promiscuous mode [ 51.288899][ T5723] veth1_macvtap: entered promiscuous mode [ 51.298570][ T5736] veth1_vlan: entered promiscuous mode [ 51.318443][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.328168][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.333874][ T5728] veth0_vlan: entered promiscuous mode [ 51.354419][ T5728] veth1_vlan: entered promiscuous mode [ 51.360347][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.382624][ T5736] veth0_macvtap: entered promiscuous mode [ 51.392199][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.398320][ T5736] veth1_macvtap: entered promiscuous mode [ 51.419166][ T5728] veth0_macvtap: entered promiscuous mode [ 51.438448][ T5728] veth1_macvtap: entered promiscuous mode [ 51.440818][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.440833][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.446521][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.462734][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.490109][ T5727] veth0_vlan: entered promiscuous mode [ 51.492634][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.492647][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.510362][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.521980][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.522015][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.522043][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.524415][ T5727] veth1_vlan: entered promiscuous mode [ 51.530155][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.573311][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.573398][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.573463][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.579152][ T5723] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.625938][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.625962][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.631842][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.632125][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.632459][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.675237][ T5727] veth0_macvtap: entered promiscuous mode [ 51.678192][ T5727] veth1_macvtap: entered promiscuous mode [ 51.717453][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.717477][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.739638][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.746801][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.746824][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.747463][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.797292][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.797308][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.816255][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816304][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816334][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816365][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816421][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.816451][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.868828][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.870513][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.891207][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.891233][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.037776][ T5884] ======================================================= [ 52.037776][ T5884] WARNING: The mand mount option has been deprecated and [ 52.037776][ T5884] and is ignored by this kernel. Remove the mand [ 52.037776][ T5884] option from the mount to silence this warning. [ 52.037776][ T5884] ======================================================= [ 52.322095][ T5871] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.495425][ T5871] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 52.497275][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.497303][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.611750][ T5730] Bluetooth: hci2: command tx timeout [ 52.622592][ T5730] Bluetooth: hci0: command tx timeout [ 52.702525][ T5730] Bluetooth: hci3: command tx timeout [ 52.702548][ T5730] Bluetooth: hci1: command tx timeout [ 52.924837][ T5871] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 52.938682][ T5871] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 52.943979][ T5871] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:056A:033B.0002/input/input5 [ 53.053341][ T5916] SELinux: Context system_u:object_r:dlm_control_device_ is not valid (left unmapped). [ 53.081982][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.232576][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 53.233286][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 53.235736][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 53.235756][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 53.235769][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.235781][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.235841][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.260973][ T43] kauditd_printk_skb: 83 callbacks suppressed [ 53.260990][ T43] audit: type=1400 audit(1790001218.643:251): avc: denied { write } for pid=5920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.272443][ T5918] infiniband syz1: set active [ 53.272996][ T5918] infiniband syz1: added syz_tun [ 53.283652][ T5918] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 53.283722][ T5918] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 53.283745][ T5918] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 53.309723][ T5918] RDS/IB: syz1: added [ 53.309901][ T5918] smc: adding ib device syz1 with port count 1 [ 53.309942][ T5918] smc: ib device syz1 port 1 has no pnetid [ 53.312285][ T43] audit: type=1400 audit(1790001218.703:252): avc: denied { write } for pid=5924 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.329485][ T5888] sg_write: data in/out 1073741788/217 bytes for SCSI command 0x9-- guessing data in; [ 53.329485][ T5888] program syz.0.1 not setting count and/or reply_len properly [ 53.399805][ T43] audit: type=1400 audit(1790001218.783:253): avc: denied { write } for pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.444552][ T50] usb 7-1: GET_CAPABILITIES returned 0 [ 53.444578][ T50] usbtmc 7-1:16.0: can't read capabilities [ 53.459117][ T43] audit: type=1400 audit(1790001218.843:254): avc: denied { write } for pid=5929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.541271][ T43] audit: type=1400 audit(1790001218.923:255): avc: denied { write } for pid=5931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.591769][ T43] audit: type=1400 audit(1790001218.973:256): avc: denied { write } for pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.654599][ T43] audit: type=1400 audit(1790001219.043:257): avc: denied { read } for pid=5933 comm="syz.1.13" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.655250][ T50] usb 7-1: USB disconnect, device number 2 [ 53.656153][ T43] audit: type=1400 audit(1790001219.043:258): avc: denied { open } for pid=5933 comm="syz.1.13" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.656502][ T43] audit: type=1400 audit(1790001219.043:259): avc: denied { ioctl } for pid=5933 comm="syz.1.13" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.837413][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 54.078324][ T43] audit: type=1400 audit(1790001219.463:260): avc: denied { map_create } for pid=5947 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.131979][ T5950] input: syz1 as /devices/virtual/input/input8 [ 54.317876][ T5964] capability: warning: `syz.2.22' uses 32-bit capabilities (legacy support in use) [ 54.691740][ T5730] Bluetooth: hci2: command tx timeout [ 54.691801][ T5732] Bluetooth: hci0: command tx timeout [ 54.771562][ T5732] Bluetooth: hci1: command tx timeout [ 54.771591][ T5732] Bluetooth: hci3: command tx timeout [ 55.994328][ T5801] usb 5-1: USB disconnect, device number 2 [ 56.047971][ T6004] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 56.314378][ T6027] overlayfs: failed to resolve './file1': -2 [ 56.515425][ T6036] Zero length message leads to an empty skb [ 56.597540][ T5730] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 56.771898][ T5730] Bluetooth: hci0: command tx timeout [ 56.771926][ T5730] Bluetooth: hci2: command tx timeout [ 56.813657][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.847729][ T6046] syzkaller0: entered promiscuous mode [ 56.847745][ T6046] syzkaller0: entered allmulticast mode [ 56.861665][ T5732] Bluetooth: hci3: command tx timeout [ 56.861703][ T5732] Bluetooth: hci1: command tx timeout [ 56.971529][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 56.971993][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.973121][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 56.973138][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 56.973149][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.973161][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.973180][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.988638][ T5730] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 57.181898][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 57.181924][ T35] usbtmc 7-1:16.0: can't read capabilities [ 57.204676][ T5730] Bluetooth: Unexpected continuation frame (len 12) [ 57.387203][ T35] usb 7-1: USB disconnect, device number 3 [ 57.769437][ T6079] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 57.770999][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 57.771014][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 57.861041][ T6083] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 58.200459][ T6128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 58.293103][ T6139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.60'. [ 58.311562][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 58.311578][ T43] audit: type=1400 audit(1790001223.693:345): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.336158][ T43] audit: type=1400 audit(1790001223.723:346): avc: denied { read write } for pid=6141 comm="syz.3.62" name="usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.336195][ T43] audit: type=1400 audit(1790001223.723:347): avc: denied { open } for pid=6141 comm="syz.3.62" path="/dev/usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.337695][ T43] audit: type=1400 audit(1790001223.723:348): avc: denied { bind } for pid=6141 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.338953][ T43] audit: type=1400 audit(1790001223.723:349): avc: denied { write } for pid=6141 comm="syz.3.62" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.339371][ T6143] program syz.3.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.726238][ T6155] gretap0: entered promiscuous mode [ 58.727908][ T6155] macvlan2: entered promiscuous mode [ 58.730577][ T6155] gretap0: left promiscuous mode [ 59.093892][ T43] audit: type=1400 audit(1790001224.483:350): avc: denied { bind } for pid=6157 comm="syz.1.67" lport=49951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.217906][ T43] audit: type=1400 audit(1790001224.603:351): avc: denied { bind } for pid=6164 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.219144][ T43] audit: type=1400 audit(1790001224.603:352): avc: denied { ioctl } for pid=6164 comm="syz.3.68" path="socket:[12450]" dev="sockfs" ino=12450 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.302398][ T43] audit: type=1400 audit(1790001224.693:353): avc: denied { read write } for pid=6172 comm="syz.3.69" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.302445][ T43] audit: type=1400 audit(1790001224.693:354): avc: denied { open } for pid=6172 comm="syz.3.69" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.423394][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423506][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423579][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423649][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423705][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423761][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423817][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.423878][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.425901][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.426037][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6179 comm=syz.2.72 [ 59.429921][ T6179] netlink: 'syz.2.72': attribute type 3 has an invalid length. [ 59.440736][ T6179] netlink: 'syz.2.72': attribute type 3 has an invalid length. [ 59.731216][ T6202] sctp: [Deprecated]: syz.3.80 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.731216][ T6202] Use struct sctp_sack_info instead [ 59.734797][ T6202] sctp: [Deprecated]: syz.3.80 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.734797][ T6202] Use struct sctp_sack_info instead [ 60.534302][ T6227] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 60.565498][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.565522][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.645249][ T6230] macsec1: entered allmulticast mode [ 60.645271][ T6230] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 60.645347][ T6230] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 60.646047][ T6230] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 60.688204][ T6230] SELinux: invalid class [ 60.708850][ T6230] SELinux: failed to load policy [ 60.747624][ T6233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.91'. [ 61.146557][ T6253] capability: warning: `syz.3.96' uses deprecated v2 capabilities in a way that may be insecure [ 61.211267][ T6255] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 61.305687][ T6269] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 61.541750][ T35] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 61.692251][ T35] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 61.693915][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.693936][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 61.694946][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 61.694959][ T35] usb 8-1: SerialNumber: syz [ 61.696642][ T35] usb 8-1: config 0 descriptor?? [ 61.701711][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 61.701892][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 61.712224][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 61.712781][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 61.712806][ T35] usb 8-1: media controller created [ 61.715273][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.724053][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 61.724116][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 61.728751][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input9 [ 61.738322][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 61.738350][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 61.896441][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 61.896470][ T5815] dvb-usb: error while querying for an remote control event. [ 61.900645][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.900998][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.954710][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 61.976313][ T5800] usb 8-1: USB disconnect, device number 2 [ 61.997401][ T5800] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 62.135201][ T6278] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 62.135314][ T6278] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 62.206111][ T6283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.103'. [ 62.206585][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 62.241947][ T6285] openvswitch: netlink: Port -2140340220 exceeds max allowable 65535 [ 62.367565][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 62.492404][ T5800] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.520708][ T6297] FAULT_INJECTION: forcing a failure. [ 62.520708][ T6297] name failslab, interval 1, probability 0, space 0, times 1 [ 62.520741][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT(full) [ 62.520762][ T6297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.520773][ T6297] Call Trace: [ 62.520780][ T6297] [ 62.520788][ T6297] dump_stack_lvl+0x100/0x190 [ 62.520825][ T6297] should_fail_ex.cold+0x5/0xa [ 62.520850][ T6297] ? do_syscall_64+0x123/0x790 [ 62.520880][ T6297] should_failslab+0xc2/0x120 [ 62.520905][ T6297] __kmalloc_flags_noprof+0x122/0x8e0 [ 62.520935][ T6297] ? find_held_lock+0x2b/0x80 [ 62.520961][ T6297] ? __pcs_replace_empty_main+0x132/0x650 [ 62.520986][ T6297] ? __pcs_replace_empty_main+0x3fa/0x650 [ 62.521015][ T6297] __pcs_replace_empty_main+0x3fa/0x650 [ 62.521044][ T6297] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 62.521063][ T6297] ? inet_frag_find+0x3c0/0x21c0 [ 62.521094][ T6297] inet_frag_find+0x3c0/0x21c0 [ 62.521126][ T6297] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 62.521153][ T6297] ? lock_acquire+0x1d1/0x380 [ 62.521173][ T6297] ? ip_defrag+0xde/0x2710 [ 62.521192][ T6297] ? __pfx_inet_frag_find+0x10/0x10 [ 62.521219][ T6297] ? find_held_lock+0x2b/0x80 [ 62.521248][ T6297] ip_defrag+0x2eb/0x2710 [ 62.521280][ T6297] ? __pfx_ip_defrag+0x10/0x10 [ 62.521300][ T6297] ? __pfx_ip_rcv_finish+0x10/0x10 [ 62.521346][ T6297] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 62.521371][ T6297] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 62.521401][ T6297] ip_local_deliver+0x114/0x1f0 [ 62.521422][ T6297] ? __pfx_ip_local_deliver+0x10/0x10 [ 62.521442][ T6297] ip_rcv+0x33a/0x3c0 [ 62.521461][ T6297] ? __pfx_ip_rcv+0x10/0x10 [ 62.521481][ T6297] __netif_receive_skb_one_core+0x197/0x1e0 [ 62.521503][ T6297] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 62.521532][ T6297] ? lock_acquire+0x1d1/0x380 [ 62.521558][ T6297] __netif_receive_skb+0x1f/0x120 [ 62.521581][ T6297] netif_receive_skb+0x139/0x7d0 [ 62.521604][ T6297] ? __pfx_netif_receive_skb+0x10/0x10 [ 62.521634][ T6297] tun_rx_batched.isra.0+0x3f6/0x750 [ 62.521676][ T6297] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 62.521707][ T6297] ? tun_get_user+0x1e1e/0x3cc0 [ 62.521739][ T6297] tun_get_user+0x1f53/0x3cc0 [ 62.521771][ T6297] ? __lock_acquire+0x5c0/0x1f40 [ 62.521790][ T6297] ? __pfx_tun_get_user+0x10/0x10 [ 62.521814][ T6297] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 62.521849][ T6297] ? find_held_lock+0x2b/0x80 [ 62.521874][ T6297] ? tun_get+0x191/0x370 [ 62.521893][ T6297] ? tun_get+0x191/0x370 [ 62.521920][ T6297] tun_chr_write_iter+0xdc/0x200 [ 62.521969][ T6297] vfs_write+0x6af/0x1050 [ 62.521994][ T6297] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 62.522020][ T6297] ? __pfx_vfs_write+0x10/0x10 [ 62.522036][ T6297] ? find_held_lock+0x2b/0x80 [ 62.522076][ T6297] ksys_write+0x12a/0x250 [ 62.522095][ T6297] ? __pfx_ksys_write+0x10/0x10 [ 62.522121][ T6297] do_syscall_64+0x123/0x790 [ 62.522152][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.522173][ T6297] RIP: 0033:0x7f3f9af5e98e [ 62.522187][ T6297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.522204][ T6297] RSP: 002b:00007f3f9be6ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.522224][ T6297] RAX: ffffffffffffffda RBX: 00007f3f9be706c0 RCX: 00007f3f9af5e98e [ 62.522237][ T6297] RDX: 0000000000000032 RSI: 0000200000000b40 RDI: 00000000000000c8 [ 62.522250][ T6297] RBP: 00007f3f9b03506b R08: 0000000000000000 R09: 0000000000000000 [ 62.522260][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.522270][ T6297] R13: 00007f3f9b226038 R14: 00007f3f9b225fa0 R15: 00007fffd0acc388 [ 62.522296][ T6297] [ 62.559991][ T6299] SELinux: DCCP has been removed, pid=6299 comm=syz.3.109 [ 62.560279][ T6299] netlink: 'syz.3.109': attribute type 12 has an invalid length. [ 62.560290][ T6299] netlink: 'syz.3.109': attribute type 29 has an invalid length. [ 62.560298][ T6299] netlink: 148 bytes leftover after parsing attributes in process `syz.3.109'. [ 62.614242][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 62.614280][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 62.661582][ T5800] usb 7-1: Using ep0 maxpacket: 32 [ 62.663250][ T5800] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 62.664187][ T5800] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 62.664205][ T5800] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 62.667036][ T5800] usb 7-1: string descriptor 0 read error: -22 [ 62.667099][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.669575][ T6285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.694174][ T5800] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.694204][ T5800] usb 7-1: MIDIStreaming interface descriptor not found [ 62.742447][ T6309] overlayfs: conflicting options: userxattr,metacopy=on [ 62.794226][ T6309] bond1 (unregistering): Released all slaves [ 62.891966][ T25] usb 7-1: USB disconnect, device number 4 [ 63.434181][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 63.434196][ T43] audit: type=1400 audit(1790001228.823:416): avc: denied { create } for pid=6311 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.435885][ T43] audit: type=1400 audit(1790001228.823:417): avc: denied { setopt } for pid=6311 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.536782][ T43] audit: type=1400 audit(1790001228.923:418): avc: denied { write } for pid=6314 comm="syz.2.113" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.537864][ T43] audit: type=1400 audit(1790001228.923:419): avc: denied { map } for pid=6314 comm="syz.2.113" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.366511][ T43] audit: type=1400 audit(1790001229.753:420): avc: denied { write } for pid=6319 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.366563][ T43] audit: type=1400 audit(1790001229.753:421): avc: denied { nlmsg_write } for pid=6319 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.536097][ T6305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.536122][ T6305] nci: nci_start_poll: failed to set local general bytes [ 65.542361][ T6298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.605183][ T6333] netlink: 100 bytes leftover after parsing attributes in process `syz.3.120'. [ 65.607020][ T43] audit: type=1400 audit(1790001230.993:422): avc: denied { allowed } for pid=6329 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.620162][ T6335] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 65.620177][ T6335] netlink: 44 bytes leftover after parsing attributes in process `syz.2.118'. [ 65.620928][ T43] audit: type=1400 audit(1790001231.003:423): avc: denied { write } for pid=6334 comm="syz.2.118" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.635893][ T6337] nbd: must specify at least one socket [ 65.704453][ T43] audit: type=1400 audit(1790001231.093:424): avc: denied { mounton } for pid=6340 comm="syz.1.122" path="/25/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.704542][ T6341] tmpfs: Group quota block hardlimit too large. [ 65.755423][ T43] audit: type=1400 audit(1790001231.143:425): avc: denied { mounton } for pid=6345 comm="syz.3.125" path="/38/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 65.761337][ T6346] cramfs: checking physical address 0x000000002a520000 for linear cramfs image [ 65.767126][ T6346] cramfs: wrong magic [ 65.769521][ T6346] cramfs: wrong magic [ 65.954851][ T6386] nbd: must specify a size in bytes for the device [ 65.958755][ T6367] sctp: [Deprecated]: syz.1.129 (pid 6367) Use of int in max_burst socket option. [ 65.958755][ T6367] Use struct sctp_assoc_value instead [ 66.016626][ T6397] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.024064][ T6397] netlink: 'syz.2.131': attribute type 21 has an invalid length. [ 66.024138][ T6397] __nla_validate_parse: 2 callbacks suppressed [ 66.024150][ T6397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.131'. [ 66.024283][ T6397] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 66.024296][ T6397] netlink: 'syz.2.131': attribute type 5 has an invalid length. [ 66.024308][ T6397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.131'. [ 66.028375][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.028402][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.056914][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.057049][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 66.061502][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.061530][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.061547][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.061564][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.086036][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 66.185063][ T6411] syzkaller1: entered promiscuous mode [ 66.185085][ T6411] syzkaller1: entered allmulticast mode [ 66.208669][ T6411] selinux_netlink_send: 25 callbacks suppressed [ 66.208688][ T6411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6411 comm=syz.0.135 [ 66.352384][ T6430] warning: `syz.0.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.560185][ T6450] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 66.562730][ T6450] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 66.605453][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.618504][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.631705][ T6458] binder: 6457:6458 ioctl c0306201 200000000080 returned -14 [ 66.637899][ T6458] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.654135][ T6462] binder: 6457:6462 ioctl c0306201 2000000003c0 returned -14 [ 66.659005][ T6462] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 66.766196][ T6469] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.817485][ T6472] input: syz0 as /devices/virtual/input/input10 [ 66.847897][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 67.381466][ T58] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 67.542557][ T58] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 67.543390][ T58] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 67.543404][ T58] usb 8-1: config 0 has no interface number 0 [ 67.543421][ T58] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.543432][ T58] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 67.543444][ T58] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 67.543456][ T58] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 67.543468][ T58] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 67.543488][ T58] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.543507][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.549052][ T58] usb 8-1: config 0 descriptor?? [ 67.559755][ T6487] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.566981][ T58] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.640261][ T6501] xt_hashlimit: size too large, truncated to 1048576 [ 67.692076][ T6503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6503 comm=syz.0.159 [ 67.763208][ T5871] usb 8-1: USB disconnect, device number 3 [ 67.785532][ T5871] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 67.788620][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 67.833635][ T6505] ceph: No mds server is up or the cluster is laggy [ 67.914171][ T6516] tmpfs: Using encoding : utf8-12.1.0 [ 67.926457][ T6520] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 67.927337][ T6519] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 68.077159][ T6531] kvm: MWAIT instruction emulated as NOP! [ 68.252487][ T6551] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.300901][ T6553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=6553 comm=syz.0.171 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 68.533321][ T6577] netlink: 'syz.2.177': attribute type 63 has an invalid length. [ 68.533337][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 68.537090][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 68.537106][ T43] audit: type=1400 audit(1790001233.923:472): avc: denied { mount } for pid=6567 comm="syz.1.175" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.582010][ T6582] syz.3.179 (6582): attempted to duplicate a private mapping with mremap. This is not supported. [ 68.643670][ T6584] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.661228][ T6590] 9p: Unknown uid 00000000004294967295 [ 68.702142][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 68.703654][ T43] audit: type=1400 audit(1790001234.093:473): avc: denied { block_suspend } for pid=6591 comm="syz.2.182" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.704849][ T6593] FAULT_INJECTION: forcing a failure. [ 68.704849][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 68.704885][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.2.182 Not tainted syzkaller #0 PREEMPT(full) [ 68.704904][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.704915][ T6593] Call Trace: [ 68.704921][ T6593] [ 68.704928][ T6593] dump_stack_lvl+0x100/0x190 [ 68.704982][ T6593] should_fail_ex.cold+0x5/0xa [ 68.705005][ T6593] should_failslab+0xc2/0x120 [ 68.705030][ T6593] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.705044][ T6593] ? __asan_memcpy+0x3c/0x60 [ 68.705055][ T6593] ? __kernfs_new_node+0xd2/0xa10 [ 68.705081][ T6593] __kernfs_new_node+0xd2/0xa10 [ 68.705101][ T6593] ? kernfs_add_one+0x611/0xaa0 [ 68.705118][ T6593] ? kernfs_add_one+0x611/0xaa0 [ 68.705137][ T6593] ? __pfx___kernfs_new_node+0x10/0x10 [ 68.705205][ T6593] ? lock_acquire+0x1d1/0x380 [ 68.705223][ T6593] ? kernfs_root+0x23/0x2a0 [ 68.705304][ T6593] ? find_held_lock+0x2b/0x80 [ 68.705327][ T6593] ? kernfs_root+0xee/0x2a0 [ 68.705348][ T6593] ? kernfs_root+0xee/0x2a0 [ 68.705367][ T6593] kernfs_create_dir_ns+0xa6/0x2b0 [ 68.705381][ T6593] sysfs_create_dir_ns+0x13a/0x2b0 [ 68.705398][ T6593] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.705412][ T6593] ? find_held_lock+0x2b/0x80 [ 68.705427][ T6593] ? kobject_add_internal+0x25f/0x930 [ 68.705454][ T6593] ? kobject_add_internal+0x25f/0x930 [ 68.705470][ T6593] ? class_dir_child_ns_type+0xd/0x60 [ 68.705491][ T6593] kobject_add_internal+0x2c8/0x930 [ 68.705507][ T6593] kobject_add+0x16a/0x1e0 [ 68.705521][ T6593] ? __pfx_kobject_add+0x10/0x10 [ 68.705541][ T6593] ? kobject_put+0xb9/0x640 [ 68.705558][ T6593] device_add+0x294/0x1970 [ 68.705575][ T6593] ? __pfx_dev_set_name+0x10/0x10 [ 68.705584][ T6593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.705597][ T6593] ? __pfx_device_add+0x10/0x10 [ 68.705613][ T6593] ? lockdep_init_map_type+0x5c/0x250 [ 68.705626][ T6593] ? __init_waitqueue_head+0xca/0x150 [ 68.705642][ T6593] wakeup_source_device_create+0x243/0x2e0 [ 68.705660][ T6593] wakeup_source_sysfs_add+0x1c/0x90 [ 68.705677][ T6593] wakeup_source_register+0x154/0x3e0 [ 68.705691][ T6593] ep_create_wakeup_source+0x1df/0x2e0 [ 68.705708][ T6593] ? __mutex_unlock_slowpath+0x35d/0x930 [ 68.705725][ T6593] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 68.705744][ T6593] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 68.705760][ T6593] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 68.705780][ T6593] do_epoll_ctl_file+0x1e26/0x36e0 [ 68.705802][ T6593] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 68.705818][ T6593] ? lock_acquire+0x1d1/0x380 [ 68.705829][ T6593] ? __fget_files+0x34/0x3d0 [ 68.705855][ T6593] ? find_held_lock+0x2b/0x80 [ 68.705873][ T6593] ? __fget_files+0x215/0x3d0 [ 68.705891][ T6593] ? __fget_files+0x21f/0x3d0 [ 68.705911][ T6593] ? do_epoll_ctl+0xfd/0x1a0 [ 68.705928][ T6593] do_epoll_ctl+0xfd/0x1a0 [ 68.705948][ T6593] ? __pfx_do_epoll_ctl+0x10/0x10 [ 68.705972][ T6593] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 68.705991][ T6593] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 68.706015][ T6593] do_syscall_64+0x123/0x790 [ 68.706036][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.706048][ T6593] RIP: 0033:0x7fcc68f9e159 [ 68.706059][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.706070][ T6593] RSP: 002b:00007fcc69f33028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 68.706082][ T6593] RAX: ffffffffffffffda RBX: 00007fcc69225fa0 RCX: 00007fcc68f9e159 [ 68.706089][ T6593] RDX: 000000000000000b RSI: 0000000000000001 RDI: 000000000000000a [ 68.706095][ T6593] RBP: 00007fcc6903506b R08: 0000000000000000 R09: 0000000000000000 [ 68.706101][ T6593] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 68.706107][ T6593] R13: 00007fcc69226038 R14: 00007fcc69225fa0 R15: 00007ffc68eb6988 [ 68.706121][ T6593] [ 68.707197][ T6593] kobject: kobject_add_internal failed for wakeup23 (error: -12 parent: wakeup) [ 68.782060][ T6588] netlink: 'syz.0.180': attribute type 9 has an invalid length. [ 68.840172][ T1163] IPVS: starting estimator thread 0... [ 68.870045][ T43] audit: type=1400 audit(1790001234.253:474): avc: denied { mount } for pid=6596 comm="syz.2.184" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.873927][ T43] audit: type=1400 audit(1790001234.263:475): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.938581][ T43] audit: type=1400 audit(1790001234.323:476): avc: denied { getopt } for pid=6603 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.943262][ T6599] IPVS: using max 43 ests per chain, 103200 per kthread [ 69.016010][ T6611] scsi_strcpy_devinfo: vendor string '¼Q<ò?ÎÝcS4¶F6o+É,r' is too long [ 69.016024][ T6611] scsi_strcpy_devinfo: model string ']RT6XåÕà‡öQÔå›æœü…ôÆ2˽2?j†d‡}u89Oÿuû’dG4ñäÄÎS­4hx­ªõ¯Ilà§\jª/K#WX[Ïjõ—*¨óé0ÕiC' is too long [ 69.016785][ T6611] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 69.036670][ T6611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.060394][ T6611] bond2: (slave bridge1): making interface the new active one [ 69.064347][ T6611] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 69.115107][ T43] audit: type=1400 audit(1790001234.503:477): avc: denied { read } for pid=6613 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.257985][ T43] audit: type=1400 audit(1790001234.643:478): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.288400][ T43] audit: type=1400 audit(1790001234.673:479): avc: denied { ioctl } for pid=6628 comm="syz.0.194" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.307889][ T6632] FAULT_INJECTION: forcing a failure. [ 69.307889][ T6632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.307938][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(full) [ 69.307961][ T6632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.307972][ T6632] Call Trace: [ 69.307979][ T6632] [ 69.307987][ T6632] dump_stack_lvl+0x100/0x190 [ 69.308033][ T6632] should_fail_ex.cold+0x5/0xa [ 69.308054][ T6632] ? prepare_alloc_pages+0x16d/0x5b0 [ 69.308082][ T6632] should_fail_alloc_page+0xeb/0x140 [ 69.308107][ T6632] prepare_alloc_pages+0x1f0/0x5b0 [ 69.308133][ T6632] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 69.308158][ T6632] ? stack_trace_save+0x8e/0xc0 [ 69.308174][ T6632] ? __pfx_stack_trace_save+0x10/0x10 [ 69.308189][ T6632] ? stack_depot_save_flags+0x27/0x9f0 [ 69.308212][ T6632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.308231][ T6632] ? kasan_save_stack+0x3f/0x50 [ 69.308248][ T6632] ? kasan_save_stack+0x30/0x50 [ 69.308265][ T6632] ? kasan_save_track+0x14/0x30 [ 69.308282][ T6632] ? __kasan_kmalloc+0xaa/0xb0 [ 69.308331][ T6632] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 69.308358][ T6632] ? mon_bin_open+0x1a8/0x470 [ 69.308382][ T6632] ? chrdev_open+0x234/0x6a0 [ 69.308402][ T6632] ? do_dentry_open+0x6ab/0x14d0 [ 69.308422][ T6632] ? vfs_open+0x82/0x3f0 [ 69.308440][ T6632] ? path_openat+0x19fa/0x2440 [ 69.308461][ T6632] ? do_file_open+0x20e/0x430 [ 69.308479][ T6632] ? do_sys_openat2+0x10f/0x1e0 [ 69.308500][ T6632] ? __x64_sys_openat+0x12d/0x210 [ 69.308538][ T6632] ? do_syscall_64+0x123/0x790 [ 69.308568][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.308601][ T6632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.308623][ T6632] ? policy_nodemask+0xed/0x4f0 [ 69.308647][ T6632] alloc_pages_mpol+0x201/0x550 [ 69.308672][ T6632] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 69.308700][ T6632] alloc_pages_noprof+0x1a/0x160 [ 69.308724][ T6632] get_zeroed_page_noprof+0x18/0xb0 [ 69.308744][ T6632] mon_alloc_buff+0xce/0x1b0 [ 69.308764][ T6632] mon_bin_open+0x207/0x470 [ 69.308782][ T6632] ? __pfx_mon_bin_open+0x10/0x10 [ 69.308800][ T6632] chrdev_open+0x234/0x6a0 [ 69.308820][ T6632] ? __pfx_chrdev_open+0x10/0x10 [ 69.308841][ T6632] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 69.308870][ T6632] do_dentry_open+0x6ab/0x14d0 [ 69.308887][ T6632] ? __pfx_chrdev_open+0x10/0x10 [ 69.308920][ T6632] vfs_open+0x82/0x3f0 [ 69.308947][ T6632] path_openat+0x19fa/0x2440 [ 69.308972][ T6632] ? __pfx_path_openat+0x10/0x10 [ 69.308999][ T6632] do_file_open+0x20e/0x430 [ 69.309021][ T6632] ? __pfx_do_file_open+0x10/0x10 [ 69.309057][ T6632] ? _raw_spin_unlock+0x28/0x50 [ 69.309078][ T6632] ? alloc_fd+0x471/0x7a0 [ 69.309105][ T6632] do_sys_openat2+0x10f/0x1e0 [ 69.309132][ T6632] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.309152][ T6632] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 69.309181][ T6632] __x64_sys_openat+0x12d/0x210 [ 69.309205][ T6632] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.309237][ T6632] do_syscall_64+0x123/0x790 [ 69.309263][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.309280][ T6632] RIP: 0033:0x7f3f9af5e98e [ 69.309296][ T6632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.309311][ T6632] RSP: 002b:00007f3f9be6fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.309331][ T6632] RAX: ffffffffffffffda RBX: 00007f3f9be706c0 RCX: 00007f3f9af5e98e [ 69.309343][ T6632] RDX: 0000000000000000 RSI: 00007f3f9be6fc00 RDI: ffffffffffffff9c [ 69.309352][ T6632] RBP: 00007f3f9be6fc00 R08: 0000000000000000 R09: 0000000000000000 [ 69.309362][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 69.309372][ T6632] R13: 00007f3f9b226038 R14: 00007f3f9b225fa0 R15: 00007fffd0acc388 [ 69.309394][ T6632] [ 69.312775][ T6632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28688 sclass=netlink_route_socket pid=6632 comm=syz.1.189 [ 70.366804][ T6666] FAULT_INJECTION: forcing a failure. [ 70.366804][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 70.366837][ T6666] CPU: 3 UID: 0 PID: 6666 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 70.366860][ T6666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.366871][ T6666] Call Trace: [ 70.366878][ T6666] [ 70.366886][ T6666] dump_stack_lvl+0x100/0x190 [ 70.366938][ T6666] should_fail_ex.cold+0x5/0xa [ 70.366981][ T6666] should_failslab+0xc2/0x120 [ 70.367013][ T6666] __kmalloc_cache_noprof+0x91/0x6d0 [ 70.367048][ T6666] ? __pfx_vicodec_s_ctrl+0x10/0x10 [ 70.367076][ T6666] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 70.367107][ T6666] ? __pfx_queue_init+0x10/0x10 [ 70.367125][ T6666] v4l2_m2m_ctx_init+0x4d/0x380 [ 70.367155][ T6666] vicodec_open+0xafc/0xf70 [ 70.367180][ T6666] v4l2_open+0x1d2/0x490 [ 70.367210][ T6666] ? __pfx_v4l2_open+0x10/0x10 [ 70.367236][ T6666] chrdev_open+0x234/0x6a0 [ 70.367259][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 70.367281][ T6666] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 70.367313][ T6666] do_dentry_open+0x6ab/0x14d0 [ 70.367333][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 70.367357][ T6666] vfs_open+0x82/0x3f0 [ 70.367383][ T6666] path_openat+0x19fa/0x2440 [ 70.367410][ T6666] ? __pfx_path_openat+0x10/0x10 [ 70.367440][ T6666] do_file_open+0x20e/0x430 [ 70.367464][ T6666] ? __pfx_do_file_open+0x10/0x10 [ 70.367500][ T6666] ? _raw_spin_unlock+0x28/0x50 [ 70.367529][ T6666] ? alloc_fd+0x471/0x7a0 [ 70.367559][ T6666] do_sys_openat2+0x10f/0x1e0 [ 70.367589][ T6666] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.367622][ T6666] __x64_sys_openat+0x12d/0x210 [ 70.367649][ T6666] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.367686][ T6666] do_syscall_64+0x123/0x790 [ 70.367715][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.367734][ T6666] RIP: 0033:0x7eff3f15e98e [ 70.367750][ T6666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.367767][ T6666] RSP: 002b:00007eff4010fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.367785][ T6666] RAX: ffffffffffffffda RBX: 00007eff401106c0 RCX: 00007eff3f15e98e [ 70.367798][ T6666] RDX: 0000000000000002 RSI: 00007eff4010fc00 RDI: ffffffffffffff9c [ 70.367808][ T6666] RBP: 00007eff4010fc00 R08: 0000000000000000 R09: 0000000000000000 [ 70.367819][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 70.367843][ T6666] R13: 00007eff3f426038 R14: 00007eff3f425fa0 R15: 00007ffefb46f508 [ 70.367867][ T6666] [ 70.635546][ T6676] syzkaller0: entered promiscuous mode [ 70.635571][ T6676] syzkaller0: entered allmulticast mode [ 70.760057][ T43] audit: type=1400 audit(1790001236.143:480): avc: denied { ioctl } for pid=6678 comm="syz.2.207" path="socket:[15606]" dev="sockfs" ino=15606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.789462][ T43] audit: type=1400 audit(1790001236.173:481): avc: denied { nlmsg_read } for pid=6678 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.131714][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 71.293726][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 71.294889][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.294930][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.294950][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.294970][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.294990][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.296185][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.296220][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.296239][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.296258][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.296278][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.299002][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.299039][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 71.299060][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.299078][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.299098][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 71.303584][ T9] usb 7-1: string descriptor 0 read error: -22 [ 71.303697][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.321956][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 71.356484][ T6646] input: syz1 as /devices/virtual/input/input11 [ 71.497463][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.497521][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.819997][ T6695] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.836930][ T5871] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 71.840119][ T6699] befs: (loop0): No write support. Marking filesystem read-only [ 71.840518][ T6699] befs: (loop0): unable to read superblock [ 71.887264][ T5871] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 71.929429][ T6707] scsi_nl_rcv_msg: discarding partial message [ 71.929669][ T6707] device-mapper: ioctl: device name cannot contain '/' [ 72.093677][ T5871] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 72.142234][ T5871] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 72.151666][ T5800] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.282082][ T5800] usb 5-1: device descriptor read/64, error -71 [ 72.531728][ T5800] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.603001][ T30] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 72.658246][ T6695] ceph: No mds server is up or the cluster is laggy [ 72.658291][ T6701] ceph: No mds server is up or the cluster is laggy [ 72.661909][ T5800] usb 5-1: device descriptor read/64, error -71 [ 72.664827][ T5871] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 72.782109][ T5800] usb usb5-port1: attempt power cycle [ 73.131513][ T5800] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.135273][ T6719] FAULT_INJECTION: forcing a failure. [ 73.135273][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 73.135306][ T6719] CPU: 2 UID: 0 PID: 6719 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 73.135328][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.135339][ T6719] Call Trace: [ 73.135349][ T6719] [ 73.135357][ T6719] dump_stack_lvl+0x100/0x190 [ 73.135410][ T6719] should_fail_ex.cold+0x5/0xa [ 73.135446][ T6719] should_failslab+0xc2/0x120 [ 73.135480][ T6719] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 73.135506][ T6719] ? __kasan_kmalloc+0xaa/0xb0 [ 73.135530][ T6719] ? property_entries_dup.part.0+0x2e1/0x9f0 [ 73.135557][ T6719] kstrdup+0x51/0xe0 [ 73.135574][ T6719] property_entries_dup.part.0+0x2e1/0x9f0 [ 73.135599][ T6719] ? __pfx_dev_set_name+0x10/0x10 [ 73.135614][ T6719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.135641][ T6719] fwnode_create_software_node+0xad/0x3f0 [ 73.135664][ T6719] device_create_managed_software_node+0x103/0x270 [ 73.135690][ T6719] iommufd_test+0x3007/0x6600 [ 73.135715][ T6719] ? __lock_acquire+0x5c0/0x1f40 [ 73.135739][ T6719] ? __lock_acquire+0x5c0/0x1f40 [ 73.135758][ T6719] ? __pfx_iommufd_test+0x10/0x10 [ 73.135778][ T6719] ? tomoyo_path_number_perm+0x188/0x580 [ 73.135813][ T6719] ? lock_acquire+0x1d1/0x380 [ 73.135835][ T6719] ? __might_fault+0xc5/0x140 [ 73.135866][ T6719] ? find_held_lock+0x2b/0x80 [ 73.135895][ T6719] ? __might_fault+0xc5/0x140 [ 73.135935][ T6719] iommufd_fops_ioctl+0x358/0x520 [ 73.135978][ T6719] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.136002][ T6719] ? __fget_files+0x34/0x3d0 [ 73.136036][ T6719] ? selinux_file_ioctl+0x13b/0x290 [ 73.136055][ T6719] ? selinux_file_ioctl+0xb6/0x290 [ 73.136077][ T6719] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 73.136100][ T6719] __x64_sys_ioctl+0x18e/0x210 [ 73.136121][ T6719] do_syscall_64+0x123/0x790 [ 73.136160][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.136180][ T6719] RIP: 0033:0x7eff5b79e159 [ 73.136196][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.136212][ T6719] RSP: 002b:00007eff5c5c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.136231][ T6719] RAX: ffffffffffffffda RBX: 00007eff5ba25fa0 RCX: 00007eff5b79e159 [ 73.136245][ T6719] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 73.136259][ T6719] RBP: 00007eff5b83506b R08: 0000000000000000 R09: 0000000000000000 [ 73.136269][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.136303][ T6719] R13: 00007eff5ba26038 R14: 00007eff5ba25fa0 R15: 00007ffc04338298 [ 73.136330][ T6719] [ 73.136507][ T6719] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 73.166936][ T5800] usb 5-1: device descriptor read/8, error -71 [ 73.352331][ T5799] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.352386][ T5799] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.353221][ T5799] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.353254][ T5799] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.420394][ T6734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.441940][ T5800] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.461973][ T6742] program syz.1.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.463751][ T5800] usb 5-1: device descriptor read/8, error -71 [ 73.571740][ T5800] usb usb5-port1: unable to enumerate USB device [ 73.651611][ T5801] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 73.806086][ T5801] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.806953][ T5801] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.806970][ T5801] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.808602][ T5801] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.808616][ T5801] usb 8-1: Product: syz [ 73.808623][ T5801] usb 8-1: Manufacturer: syz [ 73.808630][ T5801] usb 8-1: SerialNumber: syz [ 73.810283][ T5801] usb 8-1: config 0 descriptor?? [ 73.816862][ T5801] usb 8-1: selecting invalid altsetting 0 [ 74.022359][ T5800] usb 8-1: USB disconnect, device number 4 [ 74.832458][ T5808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.973250][ T6764] can0: slcan on ttynull. [ 74.992300][ T5808] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 74.993365][ T5808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.993409][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.016569][ T5808] as10x_usb: device has been detected [ 75.017179][ T5808] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 75.031099][ T5808] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 75.059517][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 75.059534][ T43] audit: type=1400 audit(1790001240.443:503): avc: denied { firmware_load } for pid=5808 comm="kworker/1:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 75.060348][ T5808] as10x_usb: error during firmware upload part1 [ 75.060770][ T5808] Registered device Abilis Systems DVB-Titan [ 75.070122][ T43] audit: type=1400 audit(1790001240.453:504): avc: denied { write } for pid=6766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.121605][ T43] audit: type=1400 audit(1790001240.503:505): avc: denied { write } for pid=6769 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.341556][ T5815] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.491663][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 75.494103][ T5815] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 75.494934][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.494949][ T5815] usb 5-1: config 0 has no interfaces? [ 75.496539][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.496639][ T5815] usb 5-1: Product: syz [ 75.496650][ T5815] usb 5-1: Manufacturer: syz [ 75.496658][ T5815] usb 5-1: SerialNumber: syz [ 75.518713][ T5815] usb 5-1: config 0 descriptor?? [ 75.654938][ T5808] usb 7-1: USB disconnect, device number 5 [ 75.693689][ T43] audit: type=1400 audit(1790001241.083:506): avc: denied { create } for pid=6776 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.694431][ T43] audit: type=1400 audit(1790001241.083:507): avc: denied { connect } for pid=6776 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.724129][ T43] audit: type=1400 audit(1790001241.113:508): avc: denied { read write } for pid=6763 comm="syz.0.233" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.724163][ T43] audit: type=1400 audit(1790001241.113:509): avc: denied { open } for pid=6763 comm="syz.0.233" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.724534][ T43] audit: type=1400 audit(1790001241.113:510): avc: denied { ioctl } for pid=6763 comm="syz.0.233" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.730031][ T5871] usb 5-1: USB disconnect, device number 7 [ 75.765823][ T5815] usb 6-1: USB disconnect, device number 2 [ 75.786043][ T43] audit: type=1400 audit(1790001241.173:511): avc: denied { write } for pid=6778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.817043][ T5815] Unregistered device Abilis Systems DVB-Titan [ 75.819465][ T5815] as10x_usb: device has been disconnected [ 75.844715][ T43] audit: type=1400 audit(1790001241.233:512): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.913463][ T6763] can0 (unregistered): slcan off ttynull. [ 76.173952][ T6793] gre1: entered promiscuous mode [ 76.208191][ T6793] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 76.392916][ T6806] MINIX-fs: blocksize too small for device [ 76.431250][ T6813] __nla_validate_parse: 34 callbacks suppressed [ 76.431264][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 76.431274][ T6813] tipc: Started in network mode [ 76.431285][ T6813] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 76.436579][ T6813] tipc: Enabled bearer , priority 10 [ 76.544644][ T6826] support for the xor transformation has been removed. [ 76.611118][ T6829] fuse: Bad value for 'fd' [ 76.625244][ T42] cfg80211: failed to load regulatory.db [ 76.643579][ T6837] xt_hashlimit: size too large, truncated to 1048576 [ 76.703196][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.710501][ T6839] bridge_slave_0 (unregistering): left allmulticast mode [ 76.710526][ T6839] bridge_slave_0 (unregistering): left promiscuous mode [ 76.710573][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.885728][ T6845] SELinux: policydb version 1048595 does not match my version range 15-35 [ 76.885770][ T6845] SELinux: failed to load policy [ 76.899946][ T6849] program syz.1.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.321544][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.452543][ T50] usb 6-1: device descriptor read/64, error -71 [ 77.554287][ T5801] tipc: Node number set to 4269801491 [ 77.691597][ T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 77.823847][ T50] usb 6-1: device descriptor read/64, error -71 [ 77.866416][ T6889] fuse: Bad value for 'user_id' [ 77.866439][ T6889] fuse: Bad value for 'user_id' [ 77.867178][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 77.934703][ T50] usb usb6-port1: attempt power cycle [ 78.020744][ T6897] ip6erspan0: entered allmulticast mode [ 78.036085][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 78.036110][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 78.036124][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 78.271484][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.292242][ T50] usb 6-1: device descriptor read/8, error -71 [ 78.400184][ T6906] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 78.410137][ T1036] IPVS: starting estimator thread 0... [ 78.531573][ T6909] IPVS: using max 43 ests per chain, 103200 per kthread [ 78.533156][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.552372][ T50] usb 6-1: device descriptor read/8, error -71 [ 78.613728][ T6923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6923 comm=syz.3.277 [ 78.663964][ T50] usb usb6-port1: unable to enumerate USB device [ 79.012149][ T690] wlan1: Trigger new scan to find an IBSS to join [ 79.301524][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.451709][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 79.454601][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 79.454652][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 79.458661][ T9] usb 7-1: string descriptor 0 read error: -22 [ 79.458771][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.466442][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 79.466488][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 79.469718][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 79.477830][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.479142][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 79.479188][ T9] usb 7-1: media controller created [ 79.479247][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479258][ T9] dw2102: i2c transfer failed. [ 79.479271][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479280][ T9] dw2102: i2c transfer failed. [ 79.479290][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479300][ T9] dw2102: i2c transfer failed. [ 79.479309][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479319][ T9] dw2102: i2c transfer failed. [ 79.479329][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479337][ T9] dw2102: i2c transfer failed. [ 79.479347][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.479356][ T9] dw2102: i2c transfer failed. [ 79.479362][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 79.491252][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.507118][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 79.507136][ T9] dw2102: command 0x0e transfer failed. [ 79.507141][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 79.507150][ T9] dw2102: command 0x0e transfer failed. [ 79.825736][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 79.825764][ T9] dw2102: command 0x0e transfer failed. [ 79.825772][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 79.826219][ T9] dw2102: command 0x0e transfer failed. [ 79.826228][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 79.826238][ T9] dw2102: command 0x51 transfer failed. [ 79.855505][ T9] DVB: Unable to find symbol ds3000_attach() [ 79.855523][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 79.901819][ T9] rc_core: IR keymap rc-su3000 not found [ 79.901840][ T9] Registered IR keymap rc-empty [ 79.914189][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 79.923647][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input12 [ 79.936526][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 79.936550][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 79.936561][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 79.950690][ T9] usb 7-1: USB disconnect, device number 6 [ 80.027825][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 80.052160][ T5730] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.227645][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 80.227664][ T43] audit: type=1400 audit(1790001245.613:538): avc: denied { setopt } for pid=6957 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.228086][ T6960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.286'. [ 80.251182][ T6958] Process accounting resumed [ 80.253222][ T6960] bond3: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 80.311807][ T6960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.286'. [ 80.312863][ T6960] bond3: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 80.354322][ T6965] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 80.370622][ T6970] loop9: detected capacity change from 0 to 7 [ 80.376009][ T6970] Dev loop9: unable to read RDB block 7 [ 80.376034][ T6970] loop9: unable to read partition table [ 80.376131][ T6970] loop9: partition table beyond EOD, truncated [ 80.376408][ T43] audit: type=1400 audit(1790001245.763:539): avc: denied { create } for pid=6971 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 80.377644][ T6970] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.507996][ T43] audit: type=1400 audit(1790001245.893:540): avc: denied { mount } for pid=6979 comm="syz.1.292" name="/" dev="autofs" ino=17475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 80.535782][ T43] audit: type=1400 audit(1790001245.923:541): avc: denied { ioctl } for pid=6984 comm="syz.3.294" path="socket:[14213]" dev="sockfs" ino=14213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.539599][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539631][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539647][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539665][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539681][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539697][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539713][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539729][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.539744][ T6986] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 80.637287][ T43] audit: type=1400 audit(1790001246.023:542): avc: denied { set_context_mgr } for pid=6987 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.736417][ T7003] loop0: detected capacity change from 0 to 3904 [ 80.755082][ T7001] syz_tun: entered promiscuous mode [ 80.786216][ T7003] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 80.786237][ T7003] ldm_validate_privheads(): Disk read failed. [ 80.791111][ T7003] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''. [ 80.791134][ T7003] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 80.791141][ T7003] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 80.791149][ T7003] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 80.791158][ T7003] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 80.791197][ T7003] loop0: [ 80.791207][ T7003] loop0: partition table partially beyond EOD, truncated [ 80.890710][ T7010] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 80.945090][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 81.134698][ T7029] process 'syz.3.307' launched './file0' with NULL argv: empty string added [ 81.201611][ T50] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.341604][ T50] usb 6-1: device descriptor read/64, error -71 [ 81.547397][ T43] audit: type=1400 audit(1790001246.933:543): avc: denied { create } for pid=7032 comm="syz.0.309" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.548036][ T43] audit: type=1400 audit(1790001246.933:544): avc: denied { read write } for pid=7032 comm="syz.0.309" name="file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.548343][ T43] audit: type=1400 audit(1790001246.933:545): avc: denied { open } for pid=7032 comm="syz.0.309" path="/75/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.548651][ T43] audit: type=1400 audit(1790001246.933:546): avc: denied { ioctl } for pid=7032 comm="syz.0.309" path="/75/file0" dev="tmpfs" ino=419 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.594886][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.739611][ T50] usb 6-1: device descriptor read/64, error -71 [ 81.807599][ T43] audit: type=1400 audit(1790001247.193:547): avc: denied { read } for pid=7045 comm="syz.2.311" path="socket:[17730]" dev="sockfs" ino=17730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.817655][ T7048] overlayfs: failed to resolve './file1/file0': -2 [ 81.852697][ T50] usb usb6-port1: attempt power cycle [ 81.982214][ T690] wlan1: Trigger new scan to find an IBSS to join [ 82.201531][ T50] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.211274][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.220939][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.222246][ T50] usb 6-1: device descriptor read/8, error -71 [ 82.227692][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.232419][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.237490][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.242470][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.247206][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.252394][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.257374][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.264321][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.272900][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.279431][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.287404][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.292518][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.297417][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.302669][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.307111][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.312594][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.317426][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.322925][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.327769][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.332737][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.337448][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.342263][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.346773][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.351242][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.356059][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.360468][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.365257][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.371306][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.378496][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.383683][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.389844][ T7059] ISOFS: Unable to identify CD-ROM format. [ 82.471718][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 82.502379][ T50] usb 6-1: device descriptor read/8, error -71 [ 82.615708][ T50] usb usb6-port1: unable to enumerate USB device [ 82.846837][ T7067] lo: entered allmulticast mode [ 82.847291][ T7067] tunl0: entered allmulticast mode [ 82.847537][ T7067] gre0: entered allmulticast mode [ 82.847724][ T7067] gretap0: entered allmulticast mode [ 82.847939][ T7067] erspan0: entered allmulticast mode [ 82.848121][ T7067] ip_vti0: entered allmulticast mode [ 82.848510][ T7067] ip6_vti0: entered allmulticast mode [ 82.848769][ T7067] sit0: entered allmulticast mode [ 82.848951][ T7067] ip6tnl0: entered allmulticast mode [ 82.849132][ T7067] ip6gre0: entered allmulticast mode [ 82.849304][ T7067] syz_tun: entered allmulticast mode [ 82.849539][ T7067] ip6gretap0: entered allmulticast mode [ 82.849797][ T7067] bridge0: entered allmulticast mode [ 82.850048][ T7067] vcan0: entered allmulticast mode [ 82.850262][ T7067] bond0: entered allmulticast mode [ 82.850272][ T7067] bond_slave_0: entered allmulticast mode [ 82.850282][ T7067] bond_slave_1: entered allmulticast mode [ 82.850567][ T7067] team0: entered allmulticast mode [ 82.850577][ T7067] team_slave_0: entered allmulticast mode [ 82.850586][ T7067] team_slave_1: entered allmulticast mode [ 82.850866][ T7067] dummy0: entered allmulticast mode [ 82.851190][ T7067] nlmon0: entered allmulticast mode [ 82.851568][ T7067] batadv0: entered allmulticast mode [ 82.851841][ T7067] vxcan0: entered allmulticast mode [ 82.852100][ T7067] vxcan1: entered allmulticast mode [ 82.852405][ T7067] veth0: entered allmulticast mode [ 82.852701][ T7067] veth1: entered allmulticast mode [ 82.852899][ T7067] wg0: entered allmulticast mode [ 82.853138][ T7067] wg1: entered allmulticast mode [ 82.853383][ T7067] wg2: entered allmulticast mode [ 82.853566][ T7067] veth0_to_bridge: entered allmulticast mode [ 82.854106][ T7067] veth1_to_bridge: entered allmulticast mode [ 82.854555][ T7067] veth0_to_bond: entered allmulticast mode [ 82.854932][ T7067] veth1_to_bond: entered allmulticast mode [ 82.855327][ T7067] veth0_to_team: entered allmulticast mode [ 82.855798][ T7067] veth1_to_team: entered allmulticast mode [ 82.856635][ T7067] veth0_to_batadv: entered allmulticast mode [ 82.856856][ T7067] batadv_slave_0: entered allmulticast mode [ 82.857068][ T7067] veth1_to_batadv: entered allmulticast mode [ 82.857279][ T7067] batadv_slave_1: entered allmulticast mode [ 82.857480][ T7067] xfrm0: entered allmulticast mode [ 82.857671][ T7067] veth0_to_hsr: entered allmulticast mode [ 82.857880][ T7067] hsr_slave_0: entered allmulticast mode [ 82.858081][ T7067] veth1_to_hsr: entered allmulticast mode [ 82.858283][ T7067] hsr_slave_1: entered allmulticast mode [ 82.858488][ T7067] hsr0: entered allmulticast mode [ 82.858697][ T7067] veth1_virt_wifi: entered allmulticast mode [ 82.858907][ T7067] veth0_virt_wifi: entered allmulticast mode [ 82.859107][ T7067] virt_wifi0: entered allmulticast mode [ 82.859177][ T7067] veth1_vlan: entered allmulticast mode [ 82.859378][ T7067] veth0_vlan: entered allmulticast mode [ 82.859721][ T7067] vlan0: entered allmulticast mode [ 82.859938][ T7067] vlan1: entered allmulticast mode [ 82.860187][ T7067] macvlan0: entered allmulticast mode [ 82.860482][ T7067] macvlan1: entered allmulticast mode [ 82.860707][ T7067] ipvlan0: entered allmulticast mode [ 82.860777][ T7067] ipvlan1: entered allmulticast mode [ 82.860843][ T7067] veth1_macvtap: entered allmulticast mode [ 82.861083][ T7067] veth0_macvtap: entered allmulticast mode [ 82.861306][ T7067] macvtap0: entered allmulticast mode [ 82.861682][ T7067] macsec0: entered allmulticast mode [ 82.861889][ T7067] geneve0: entered allmulticast mode [ 82.862673][ T7067] geneve1: entered allmulticast mode [ 82.862994][ T7067] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 82.863287][ T7067] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 82.863558][ T7067] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 82.863826][ T7067] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 82.864199][ T7067] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 82.864508][ T7067] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 82.864758][ T7067] bond1: entered allmulticast mode [ 82.864836][ T7067] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode [ 82.864911][ T7067] mac80211_hwsim hwsim11 wlan3: entered allmulticast mode [ 82.865000][ T7067] bond2: entered allmulticast mode [ 82.865010][ T7067] bridge1: entered allmulticast mode [ 82.865773][ T7067] vlan2: entered allmulticast mode [ 82.866070][ T7067] bond3: entered allmulticast mode [ 82.866134][ T7067] : entered allmulticast mode [ 82.939124][ T7072] vlan2: entered promiscuous mode [ 82.939140][ T7072] batadv0: entered promiscuous mode [ 82.939247][ T7072] vlan2: entered allmulticast mode [ 82.939255][ T7072] batadv0: entered allmulticast mode [ 83.012272][ T7074] syzkaller0: entered promiscuous mode [ 83.012290][ T7074] syzkaller0: entered allmulticast mode [ 83.100882][ T7092] lo speed is unknown, defaulting to 1000 [ 83.104557][ T7092] lo speed is unknown, defaulting to 1000 [ 83.109356][ T7092] lo speed is unknown, defaulting to 1000 [ 83.159084][ T7091] sg_write: data in/out 1288467979/114 bytes for SCSI command 0xe2-- guessing data in; [ 83.159084][ T7091] program syz.3.322 not setting count and/or reply_len properly [ 83.169950][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 83.355752][ T7092] infiniband syz2: set active [ 83.355805][ T5815] lo speed is unknown, defaulting to 1000 [ 83.355853][ T7092] infiniband syz2: added lo [ 83.364786][ T7092] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 83.364810][ T7092] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 83.364833][ T7092] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 83.395030][ T7092] RDS/IB: syz2: added [ 83.395058][ T7092] smc: adding ib device syz2 with port count 1 [ 83.395071][ T7092] smc: ib device syz2 port 1 has no pnetid [ 83.395111][ T5815] lo speed is unknown, defaulting to 1000 [ 83.395670][ T7092] lo speed is unknown, defaulting to 1000 [ 83.398371][ T7110] trusted_key: encrypted_key: insufficient parameters specified [ 83.497269][ T7092] lo speed is unknown, defaulting to 1000 [ 83.561659][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.592358][ T7092] lo speed is unknown, defaulting to 1000 [ 83.683701][ T7092] lo speed is unknown, defaulting to 1000 [ 83.711614][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 83.712587][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.713574][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.713610][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.723502][ T50] usb 5-1: config 0 descriptor?? [ 83.828699][ T7112] syzkaller0: left promiscuous mode [ 83.828785][ T7112] syzkaller0: left allmulticast mode [ 83.892570][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 83.892598][ T7112] nbd: illegal input index 201326592 [ 83.934953][ T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.937078][ T50] usb 5-1: USB disconnect, device number 8 [ 83.949993][ T7119] netlink: 'syz.3.328': attribute type 11 has an invalid length. [ 83.950011][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.328'. [ 84.085507][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 84.158857][ T7128] bond0: entered promiscuous mode [ 84.158874][ T7128] bond_slave_0: entered promiscuous mode [ 84.159047][ T7128] bond_slave_1: entered promiscuous mode [ 84.163838][ T7128] ipvlan1: entered promiscuous mode [ 84.164604][ T7128] ipvlan1: left promiscuous mode [ 84.167270][ T7128] bond0: left promiscuous mode [ 84.167287][ T7128] bond_slave_0: left promiscuous mode [ 84.167479][ T7128] bond_slave_1: left promiscuous mode [ 84.381653][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.427366][ T7143] sg_write: data in/out 54/14 bytes for SCSI command 0xa-- guessing data in; [ 84.427366][ T7143] program syz.1.338 not setting count and/or reply_len properly [ 84.552392][ T50] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 84.553500][ T50] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 84.553522][ T50] usb 8-1: config 1 has no interface number 0 [ 84.557073][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.557096][ T50] usb 8-1: Product: syz [ 84.557108][ T50] usb 8-1: Manufacturer: syz [ 84.557119][ T50] usb 8-1: SerialNumber: syz [ 84.578665][ T50] usb 8-1: 3:1 : does not exist [ 84.578688][ T50] usb 8-1: 3:2 : does not exist [ 84.708432][ T5800] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 84.862857][ T7145] ceph: No mds server is up or the cluster is laggy [ 84.931903][ T1036] wlan1: Creating new IBSS network, BSSID 9e:3a:1d:2f:4d:f2 [ 85.201565][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 85.201589][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 85.246146][ T7155] netlink: 'syz.2.341': attribute type 26 has an invalid length. [ 85.307851][ T5799] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.307927][ T5799] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.307961][ T5799] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.307996][ T5799] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.316617][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 85.316638][ T43] audit: type=1400 audit(1790001250.703:564): avc: denied { accept } for pid=7159 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.319069][ T43] audit: type=1400 audit(1790001250.703:565): avc: denied { read } for pid=7159 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.322343][ T50] usb 8-1: USB disconnect, device number 5 [ 85.326539][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 85.326575][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 85.327812][ T7160] trusted_key: encrypted_key: insufficient parameters specified [ 85.758941][ T43] audit: type=1400 audit(1790001251.143:566): avc: denied { read append } for pid=7179 comm="syz.1.348" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.759406][ T43] audit: type=1400 audit(1790001251.143:567): avc: denied { open } for pid=7179 comm="syz.1.348" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.939112][ T7193] overlayfs: unescaped trailing colons in lowerdir mount option. [ 85.957088][ T43] audit: type=1400 audit(1790001251.343:568): avc: denied { setattr } for pid=7185 comm="syz.0.350" name="/" dev="9p" ino=71827651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.106737][ T7195] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 86.127727][ T7195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.283728][ T7204] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 86.508862][ T7221] fuse: Bad value for 'fd' [ 86.594465][ T7180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.595511][ T7180] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.612289][ T7180] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.616863][ T7180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.617249][ T7180] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.619920][ T7180] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.631727][ T7180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.631765][ T7180] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.636516][ T7180] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.647462][ T7180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.647526][ T7180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.652888][ T7180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.742123][ T43] audit: type=1400 audit(1790001252.133:569): avc: denied { write } for pid=7228 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.746172][ T43] audit: type=1400 audit(1790001252.133:570): avc: denied { create } for pid=7228 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.756039][ T7231] FAULT_INJECTION: forcing a failure. [ 86.756039][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 86.756085][ T7231] CPU: 2 UID: 0 PID: 7231 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 86.756114][ T7231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.756132][ T7231] Call Trace: [ 86.756140][ T7231] [ 86.756148][ T7231] dump_stack_lvl+0x100/0x190 [ 86.756241][ T7231] should_fail_ex.cold+0x5/0xa [ 86.756277][ T7231] should_failslab+0xc2/0x120 [ 86.756318][ T7231] __kmalloc_noprof+0xfc/0x840 [ 86.756342][ T7231] ? lsm_blob_alloc+0x68/0x90 [ 86.756374][ T7231] lsm_blob_alloc+0x68/0x90 [ 86.756400][ T7231] security_sk_alloc+0x2d/0x290 [ 86.756424][ T7231] sk_prot_alloc+0x1d1/0x2a0 [ 86.756459][ T7231] sk_alloc+0x36/0xe80 [ 86.756485][ T7231] inet_create+0x3a0/0x1060 [ 86.756518][ T7231] ? inet_create+0x94/0x1060 [ 86.756548][ T7231] __sock_create+0x339/0x860 [ 86.756571][ T7231] mptcp_subflow_create_socket+0xec/0xa30 [ 86.756603][ T7231] ? mptcp_release_cb+0x48a/0x710 [ 86.756635][ T7231] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 86.756660][ T7231] ? lock_acquire+0x1d1/0x380 [ 86.756684][ T7231] __mptcp_nmpc_sk+0x17f/0x880 [ 86.756708][ T7231] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 86.756734][ T7231] ? __local_bh_enable_ip+0xa5/0x120 [ 86.756758][ T7231] mptcp_getsockopt+0xce7/0xe50 [ 86.756782][ T7231] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 86.756801][ T7231] ? __asan_memset+0x23/0x50 [ 86.756819][ T7231] ? _copy_from_user+0x59/0xd0 [ 86.756842][ T7231] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 86.756870][ T7231] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 86.756902][ T7231] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 86.756931][ T7231] do_sock_getsockopt+0x50a/0x6e0 [ 86.756963][ T7231] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 86.756996][ T7231] ? __fget_files+0x34/0x3d0 [ 86.757020][ T7231] ? find_held_lock+0x2b/0x80 [ 86.757052][ T7231] ? __fget_files+0x21f/0x3d0 [ 86.757080][ T7231] __sys_getsockopt+0x148/0x260 [ 86.757110][ T7231] ? __x64_sys_getsockopt+0xbd/0x160 [ 86.757132][ T7231] __x64_sys_getsockopt+0xbd/0x160 [ 86.757154][ T7231] ? do_syscall_64+0xae/0x790 [ 86.757180][ T7231] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.757207][ T7231] do_syscall_64+0x123/0x790 [ 86.757236][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.757256][ T7231] RIP: 0033:0x7f3f9af9e159 [ 86.757273][ T7231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.757293][ T7231] RSP: 002b:00007f3f9be70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 86.757321][ T7231] RAX: ffffffffffffffda RBX: 00007f3f9b225fa0 RCX: 00007f3f9af9e159 [ 86.757337][ T7231] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000007 [ 86.757355][ T7231] RBP: 00007f3f9b03506b R08: 0000000000000000 R09: 0000000000000000 [ 86.757369][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.757382][ T7231] R13: 00007f3f9b226038 R14: 00007f3f9b225fa0 R15: 00007fffd0acc388 [ 86.757409][ T7231] [ 86.766106][ T43] audit: type=1400 audit(1790001252.153:571): avc: denied { write } for pid=7228 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.769220][ T43] audit: type=1400 audit(1790001252.153:572): avc: denied { connect } for pid=7228 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.776211][ T43] audit: type=1400 audit(1790001252.163:573): avc: denied { ioctl } for pid=7228 comm="syz.1.361" path="socket:[19358]" dev="sockfs" ino=19358 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.067151][ T7257] vlan0: entered promiscuous mode [ 87.073544][ T7257] team0: Port device vlan0 added [ 87.195593][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.200391][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.441502][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.532631][ T7295] input: syz1 as /devices/virtual/input/input13 [ 87.550089][ T7295] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 87.571955][ T5815] usb 5-1: device descriptor read/64, error -71 [ 87.580817][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.657377][ T7296] netlink: 14 bytes leftover after parsing attributes in process `syz.2.371'. [ 87.811618][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.811736][ T5815] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 87.902252][ T5732] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 87.961534][ T5815] usb 5-1: device descriptor read/64, error -71 [ 88.071933][ T5815] usb usb5-port1: attempt power cycle [ 88.421523][ T5815] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.442352][ T5815] usb 5-1: device descriptor read/8, error -71 [ 88.469524][ T7336] EXT4-fs (loop2): unable to read superblock [ 88.595602][ T7343] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 88.681860][ T5815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 88.694732][ T5730] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.694836][ T5730] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.694874][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.702327][ T5815] usb 5-1: device descriptor read/8, error -71 [ 88.750542][ T7349] affs: No valid root block on device nullb0 [ 88.812743][ T5815] usb usb5-port1: unable to enumerate USB device [ 89.094143][ T7367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=306 sclass=netlink_route_socket pid=7367 comm=syz.1.392 [ 89.249301][ T7373] bond2 (unregistering): Released all slaves [ 89.319020][ T7371] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 89.320923][ T7371] bond2 (unregistering): Released all slaves [ 89.738519][ T7398] binder: 7397:7398 ioctl 40046205 0 returned -22 [ 89.892716][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.034335][ T7416] bond1: peer notification delay (681) is not a multiple of miimon (100), value rounded to 600 ms [ 90.034356][ T7416] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 90.035693][ T7416] bond1 (unregistering): Released all slaves [ 90.071854][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 90.071869][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 90.334233][ T7447] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.334464][ T7447] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.345990][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 90.378790][ T7447] team0: Port device team_slave_0 removed [ 90.641190][ T7467] fuse: Unknown parameter 'subj_user' [ 90.771584][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.771904][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 90.782104][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.782145][ T66] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.951736][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 90.952981][ T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 90.953788][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.963505][ T10] usb 6-1: config 0 descriptor?? [ 90.984854][ T10] as10x_usb: device has been detected [ 90.985587][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 90.990028][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 90.990044][ T43] audit: type=1400 audit(1790001256.373:588): avc: denied { lock } for pid=7496 comm="syz.3.423" path="socket:[17188]" dev="sockfs" ino=17188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 90.999254][ T7497] FAULT_INJECTION: forcing a failure. [ 90.999254][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 90.999291][ T7497] CPU: 3 UID: 0 PID: 7497 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(full) [ 90.999314][ T7497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.999326][ T7497] Call Trace: [ 90.999333][ T7497] [ 90.999340][ T7497] dump_stack_lvl+0x100/0x190 [ 90.999373][ T7497] should_fail_ex.cold+0x5/0xa [ 90.999398][ T7497] should_failslab+0xc2/0x120 [ 90.999420][ T7497] __kmalloc_noprof+0xfc/0x840 [ 90.999440][ T7497] ? lsm_blob_alloc+0x68/0x90 [ 90.999470][ T7497] lsm_blob_alloc+0x68/0x90 [ 90.999498][ T7497] security_sk_alloc+0x2d/0x290 [ 90.999520][ T7497] sk_prot_alloc+0x1d1/0x2a0 [ 90.999551][ T7497] sk_alloc+0x36/0xe80 [ 90.999574][ T7497] unix_create1+0xa6/0x700 [ 90.999601][ T7497] unix_create+0x10f/0x1b0 [ 90.999617][ T7497] __sock_create+0x339/0x860 [ 90.999636][ T7497] __sys_socketpair+0x261/0x5b0 [ 90.999653][ T7497] ? __pfx___sys_socketpair+0x10/0x10 [ 90.999669][ T7497] ? xfd_validate_state+0x129/0x190 [ 90.999691][ T7497] __x64_sys_socketpair+0x96/0x100 [ 90.999707][ T7497] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.999730][ T7497] do_syscall_64+0x123/0x790 [ 90.999753][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.999770][ T7497] RIP: 0033:0x7eff5b79e159 [ 90.999787][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.999803][ T7497] RSP: 002b:00007eff5c5c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 90.999820][ T7497] RAX: ffffffffffffffda RBX: 00007eff5ba25fa0 RCX: 00007eff5b79e159 [ 90.999832][ T7497] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 90.999843][ T7497] RBP: 00007eff5b83506b R08: 0000000000000000 R09: 0000000000000000 [ 90.999853][ T7497] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 90.999863][ T7497] R13: 00007eff5ba26038 R14: 00007eff5ba25fa0 R15: 00007ffc04338298 [ 90.999887][ T7497] [ 91.008974][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 91.031938][ T7499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 91.031967][ T7499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.032675][ T5084] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 91.040099][ T10] as10x_usb: error during firmware upload part1 [ 91.040547][ T10] Registered device nBox DVB-T Dongle [ 91.050230][ T43] audit: type=1400 audit(1790001256.433:589): avc: denied { bind } for pid=7498 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.081279][ T7499] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.181032][ T43] audit: type=1400 audit(1790001256.563:590): avc: denied { setattr } for pid=7502 comm="syz.2.425" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.294624][ T43] audit: type=1400 audit(1790001256.683:591): avc: denied { shutdown } for pid=7511 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.294886][ T43] audit: type=1400 audit(1790001256.683:592): avc: denied { read } for pid=7511 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.318406][ T5808] usb 6-1: USB disconnect, device number 11 [ 91.341964][ T5808] Unregistered device nBox DVB-T Dongle [ 91.345130][ T7512] program syz.2.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.345974][ T5808] as10x_usb: device has been disconnected [ 91.433410][ T7519] fuse: Bad value for 'group_id' [ 91.433435][ T7519] fuse: Bad value for 'group_id' [ 91.487943][ T7521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.431'. [ 91.533695][ T7523] tipc: Started in network mode [ 91.533715][ T7523] tipc: Node identity 1000001, cluster identity 4369 [ 91.533726][ T7523] tipc: Node number set to 16777217 [ 91.534142][ T7523] tipc: Cannot configure node identity twice [ 91.535542][ T7524] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 91.669086][ T43] audit: type=1400 audit(1790001257.053:593): avc: denied { mounton } for pid=7535 comm="syz.3.436" path="/120/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 91.706311][ T43] audit: type=1400 audit(1790001257.093:594): avc: denied { getopt } for pid=7535 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.706771][ T43] audit: type=1400 audit(1790001257.093:595): avc: denied { bind } for pid=7535 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.729243][ T7550] TCP: TCP_TX_DELAY enabled [ 91.822400][ T7555] FAULT_INJECTION: forcing a failure. [ 91.822400][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 91.822423][ T7555] CPU: 2 UID: 0 PID: 7555 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 91.822436][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.822443][ T7555] Call Trace: [ 91.822447][ T7555] [ 91.822452][ T7555] dump_stack_lvl+0x100/0x190 [ 91.822475][ T7555] should_fail_ex.cold+0x5/0xa [ 91.822506][ T7555] should_failslab+0xc2/0x120 [ 91.822524][ T7555] __kmalloc_cache_noprof+0x91/0x6d0 [ 91.822542][ T7555] ? ceph_create_client+0x68/0x370 [ 91.822560][ T7555] ceph_create_client+0x68/0x370 [ 91.822575][ T7555] ceph_get_tree+0x1a4/0x1fd0 [ 91.822593][ T7555] ? bpf_lsm_capable+0x9/0x10 [ 91.822610][ T7555] ? security_capable+0x80/0x260 [ 91.822630][ T7555] vfs_get_tree+0x92/0x320 [ 91.822649][ T7555] vfs_cmd_create+0xd7/0x2a0 [ 91.822662][ T7555] __do_sys_fsconfig+0x55a/0xcb0 [ 91.822675][ T7555] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 91.822695][ T7555] do_syscall_64+0x123/0x790 [ 91.822714][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.822727][ T7555] RIP: 0033:0x7eff5b79e159 [ 91.822737][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.822748][ T7555] RSP: 002b:00007eff5c5c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 91.822759][ T7555] RAX: ffffffffffffffda RBX: 00007eff5ba25fa0 RCX: 00007eff5b79e159 [ 91.822766][ T7555] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 91.822773][ T7555] RBP: 00007eff5b83506b R08: 0000000000000000 R09: 0000000000000000 [ 91.822779][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.822785][ T7555] R13: 00007eff5ba26038 R14: 00007eff5ba25fa0 R15: 00007ffc04338298 [ 91.822800][ T7555] [ 91.835794][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 91.836656][ T7557] fuse: Unknown parameter 'roo0000' [ 91.899401][ T43] audit: type=1400 audit(1790001257.283:596): avc: denied { connect } for pid=7558 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.901791][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 91.925733][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.442'. [ 91.971525][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.013220][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.442'. [ 92.013308][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.442'. [ 92.013377][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.442'. [ 92.055702][ T7571] netlink: 'syz.1.446': attribute type 6 has an invalid length. [ 92.073574][ T7569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7569 comm=syz.3.445 [ 92.081549][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.081593][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.081622][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.081650][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.145927][ T7578] netlink: 'syz.1.448': attribute type 11 has an invalid length. [ 92.200046][ T7583] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 92.221677][ T7583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.239710][ T7584] gretap1: entered promiscuous mode [ 92.372008][ T58] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 92.390057][ T7601] tipc: Started in network mode [ 92.390085][ T7601] tipc: Node identity 7f000001, cluster identity 4711 [ 92.398949][ T7601] tipc: Enabled bearer , priority 10 [ 92.432548][ T5808] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.502289][ T58] usb 6-1: device descriptor read/64, error -71 [ 92.582381][ T5808] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.583273][ T5808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.583296][ T5808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.583307][ T5808] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.583328][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.585564][ T5808] usb 8-1: config 0 descriptor?? [ 92.656983][ T7604] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 92.669938][ T7604] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 92.670272][ T7604] program syz.0.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.741538][ T58] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 92.851758][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.851802][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.872043][ T58] usb 6-1: device descriptor read/64, error -71 [ 92.982405][ T58] usb usb6-port1: attempt power cycle [ 93.016277][ T5808] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.042067][ T43] audit: type=1400 audit(1790001258.433:597): avc: denied { read write } for pid=7618 comm="syz.2.461" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.134270][ T7628] netlink: 'syz.2.463': attribute type 12 has an invalid length. [ 93.316991][ T7635] xt_hashlimit: size too large, truncated to 1048576 [ 93.321675][ T58] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 93.345180][ T58] usb 6-1: device descriptor read/8, error -71 [ 93.393636][ T9] tipc: Node number set to 2130706433 [ 93.487219][ T7642] IPv6: sit1: Disabled Multicast RS [ 93.488561][ T7642] sit1: entered allmulticast mode [ 93.582301][ T58] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 93.607452][ T58] usb 6-1: device descriptor read/8, error -71 [ 93.712344][ T58] usb usb6-port1: unable to enumerate USB device [ 93.766171][ T7658] tipc: New replicast peer: 172.20.20.187 [ 93.768062][ T7658] tipc: Enabled bearer , priority 10 [ 94.105010][ T7681] jffs2: notice: (7681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.413897][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 94.562836][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 94.564519][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.567219][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.567245][ T25] usb 5-1: Product: syz [ 94.567258][ T25] usb 5-1: Manufacturer: syz [ 94.567270][ T25] usb 5-1: SerialNumber: syz [ 94.578257][ T25] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 94.578412][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 94.580283][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 94.580354][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 94.580412][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 94.580467][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 94.580523][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 94.580579][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 94.590058][ T25] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 94.846896][ T7684] kvm: user requested TSC rate below hardware speed [ 94.878536][ T7707] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.878712][ T7707] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 94.931826][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.931857][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.932303][ T66] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 95.033128][ T5815] usb 5-1: USB disconnect, device number 13 [ 95.050005][ T5815] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 95.063606][ T5815] keyspan 5-1:1.0: device disconnected [ 95.130554][ T7727] gre1: entered promiscuous mode [ 95.140036][ T5801] usb 8-1: USB disconnect, device number 6 [ 95.283667][ T7739] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 95.294208][ T7741] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 95.294228][ T7741] __nla_validate_parse: 40 callbacks suppressed [ 95.294235][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.495'. [ 95.326387][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.494'. [ 95.326428][ T7739] bond0: ARP target 8.4.0.0 is already present [ 95.326450][ T7739] bond0: option arp_ip_target: invalid value (1032) [ 95.338035][ T7741] smpboot: CPU 1 is now offline [ 95.592663][ T7755] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 95.639846][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.640946][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.644022][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.644337][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.644595][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.644849][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.645115][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.645389][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.645659][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.645993][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.684650][ T7761] Bluetooth: MGMT ver 1.23 [ 95.712158][ T7761] netlink: 'syz.3.499': attribute type 3 has an invalid length. [ 95.712216][ T7761] netlink: 'syz.3.499': attribute type 6 has an invalid length. [ 95.712232][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.3.499'. [ 95.794778][ T7768] EXT4-fs: Conflicting test_dummy_encryption options [ 95.796687][ T7764] Config c/1 of g1 needs at least one function. [ 95.798546][ T7764] udc dummy_udc.0: failed to start g1: -22 [ 95.798565][ T7764] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 95.818440][ T7764] UDC core: g1: couldn't find an available UDC or it's busy [ 95.944093][ T7775] MTD: Couldn't look up './proc/thread-self/fail-nth': -15 [ 95.978607][ T7787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=7787 comm=syz.3.506 [ 96.039247][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 96.039261][ T43] audit: type=1400 audit(1790001261.423:626): avc: denied { create } for pid=7788 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.061008][ T43] audit: type=1400 audit(1790001261.443:627): avc: denied { cmd } for pid=7785 comm="iou-wrk-7786" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 96.069881][ T43] audit: type=1400 audit(1790001261.453:628): avc: denied { sys_admin } for pid=7788 comm="syz.3.508" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 96.086224][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 96.137296][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 96.137598][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 96.211918][ T111] smc: removing ib device syz1 [ 96.374989][ T43] audit: type=1400 audit(1790001261.763:629): avc: denied { sqpoll } for pid=7807 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.381176][ T7795] net_ratelimit: 3256 callbacks suppressed [ 96.381192][ T7795] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 96.388729][ T43] audit: type=1400 audit(1790001261.773:630): avc: denied { create } for pid=7807 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.413154][ T5815] infiniband syz1: ib_query_port failed (-19) [ 96.422520][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 96.422690][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 96.478724][ T111] smbdirect: ib_dev[syz1] removed [ 96.485826][ T7812] ip6gre1: entered promiscuous mode [ 96.485843][ T7812] ip6gre1: entered allmulticast mode [ 96.579615][ T7814] netlink: 'syz.1.514': attribute type 3 has an invalid length. [ 96.603652][ T5732] Bluetooth: hci3: unexpected event for opcode 0x080d [ 96.756962][ T7824] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 96.805247][ T7824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.830010][ T7824] bond3: (slave gretap1): making interface the new active one [ 96.835544][ T7824] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 96.885788][ T7796] ceph: No mds server is up or the cluster is laggy [ 97.033574][ T43] audit: type=1400 audit(1790001262.423:631): avc: denied { write } for pid=7837 comm="syz.2.521" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.033640][ T7838] random: crng reseeded on system resumption [ 97.043873][ T43] audit: type=1400 audit(1790001262.433:632): avc: denied { write } for pid=7834 comm="syz.0.520" name="anycast6" dev="proc" ino=4026532968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.231174][ T7846] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.362477][ T43] audit: type=1400 audit(1790001262.753:633): avc: denied { bind } for pid=7854 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.363126][ T43] audit: type=1400 audit(1790001262.753:634): avc: denied { setopt } for pid=7854 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.364395][ T43] audit: type=1400 audit(1790001262.753:635): avc: denied { listen } for pid=7854 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.613379][ T5799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.613910][ T5799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.640998][ T7859] [ 97.641877][ T7859] ====================================================== [ 97.644150][ T7859] WARNING: possible circular locking dependency detected [ 97.647365][ T7859] syzkaller #0 Not tainted [ 97.649108][ T7859] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 97.651359][ T7859] syz.0.528/7859 is trying to acquire lock: [ 97.653340][ T7859] ffff888020589dc0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 97.657116][ T7859] [ 97.657116][ T7859] but task is already holding lock: [ 97.659614][ T7859] ffffffff9047ffc0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 97.663213][ T7859] [ 97.663213][ T7859] which lock already depends on the new lock. [ 97.663213][ T7859] [ 97.666699][ T7859] [ 97.666699][ T7859] the existing dependency chain (in reverse order) is: [ 97.669599][ T7859] [ 97.669599][ T7859] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 97.672218][ T7859] lock_acquire+0x1d1/0x380 [ 97.673882][ T7859] __mutex_lock+0x1a4/0x1bd0 [ 97.675441][ T7859] tcm_alloc_inst+0x5f/0x1e0 [ 97.677035][ T7859] try_get_usb_function_instance+0x136/0x1f0 [ 97.679019][ T7859] usb_get_function_instance+0x16/0x70 [ 97.680839][ T7859] function_make+0x18c/0x3f0 [ 97.682441][ T7859] configfs_mkdir+0x525/0xd40 [ 97.684121][ T7859] vfs_mkdir+0x364/0x850 [ 97.685746][ T7859] filename_mkdirat+0x48b/0x5e0 [ 97.687543][ T7859] __x64_sys_mkdirat+0x89/0xc0 [ 97.689350][ T7859] do_syscall_64+0x123/0x790 [ 97.691085][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.693186][ T7859] [ 97.693186][ T7859] -> #2 (func_lock){+.+.}-{4:4}: [ 97.695741][ T7859] lock_acquire+0x1d1/0x380 [ 97.697388][ T7859] __mutex_lock+0x1a4/0x1bd0 [ 97.698981][ T7859] try_get_usb_function_instance+0x26/0x1f0 [ 97.701088][ T7859] usb_get_function_instance+0x16/0x70 [ 97.702947][ T7859] function_make+0x18c/0x3f0 [ 97.704590][ T7859] configfs_mkdir+0x525/0xd40 [ 97.706230][ T7859] vfs_mkdir+0x364/0x850 [ 97.707837][ T7859] filename_mkdirat+0x48b/0x5e0 [ 97.709567][ T7859] __x64_sys_mkdirat+0x89/0xc0 [ 97.711248][ T7859] do_syscall_64+0x123/0x790 [ 97.712974][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.715018][ T7859] [ 97.715018][ T7859] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 97.717585][ T7859] lock_acquire+0x1d1/0x380 [ 97.719290][ T7859] __mutex_lock+0x1a4/0x1bd0 [ 97.721019][ T7859] configfs_rmdir+0x5ae/0x950 [ 97.722667][ T7859] vfs_rmdir+0x328/0x8a0 [ 97.724243][ T7859] filename_rmdir+0x31a/0x5c0 [ 97.725922][ T7859] __x64_sys_rmdir+0x46/0x70 [ 97.727607][ T7859] do_syscall_64+0x123/0x790 [ 97.729457][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.731653][ T7859] [ 97.731653][ T7859] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 97.734400][ T7859] check_prev_add+0xeb/0xe60 [ 97.736046][ T7859] __lock_acquire+0x1528/0x1f40 [ 97.737778][ T7859] lock_acquire+0x1d1/0x380 [ 97.739389][ T7859] down_write+0x8b/0x1f0 [ 97.740966][ T7859] configfs_depend_item_unlocked+0xf3/0x6a0 [ 97.742997][ T7859] usbg_make_tpg+0x251/0x610 [ 97.744657][ T7859] target_fabric_make_tpg+0xab/0x8c0 [ 97.746525][ T7859] configfs_mkdir+0x525/0xd40 [ 97.748306][ T7859] vfs_mkdir+0x364/0x850 [ 97.749974][ T7859] filename_mkdirat+0x48b/0x5e0 [ 97.751828][ T7859] __x64_sys_mkdirat+0x89/0xc0 [ 97.753584][ T7859] do_syscall_64+0x123/0x790 [ 97.755258][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.757326][ T7859] [ 97.757326][ T7859] other info that might help us debug this: [ 97.757326][ T7859] [ 97.760574][ T7859] Chain exists of: [ 97.760574][ T7859] &sb->s_type->i_mutex_key#25 --> func_lock --> tpg_instances_lock [ 97.760574][ T7859] [ 97.764887][ T7859] Possible unsafe locking scenario: [ 97.764887][ T7859] [ 97.767241][ T7859] CPU0 CPU1 [ 97.768988][ T7859] ---- ---- [ 97.770752][ T7859] lock(tpg_instances_lock); [ 97.772286][ T7859] lock(func_lock); [ 97.774335][ T7859] lock(tpg_instances_lock); [ 97.776626][ T7859] lock(&sb->s_type->i_mutex_key#25); [ 97.778370][ T7859] [ 97.778370][ T7859] *** DEADLOCK *** [ 97.778370][ T7859] [ 97.781058][ T7859] locks held by syz.0.528/7859: 4, last CPU#0: [ 97.783068][ T7859] #0: ffff8880239ee460 (sb_writers#22){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 97.786175][ T7859] #1: ffff88803e3e1900 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 97.789623][ T7859] #2: ffffffff8ffb2e28 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 97.792686][ T7859] #3: ffffffff9047ffc0 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 97.795779][ T7859] [ 97.795779][ T7859] stack backtrace: [ 97.797686][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.0.528 Not tainted syzkaller #0 PREEMPT(full) [ 97.800588][ T7859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.803982][ T7859] Call Trace: [ 97.805171][ T7859] [ 97.806195][ T7859] dump_stack_lvl+0x100/0x190 [ 97.807731][ T7859] print_circular_bug.cold+0x178/0x1be [ 97.809478][ T7859] check_noncircular+0x146/0x160 [ 97.811086][ T7859] check_prev_add+0xeb/0xe60 [ 97.812615][ T7859] __lock_acquire+0x1528/0x1f40 [ 97.814195][ T7859] ? rcu_is_watching+0x13/0xc0 [ 97.815718][ T7859] lock_acquire+0x1d1/0x380 [ 97.817193][ T7859] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 97.819225][ T7859] ? __pfx___might_resched+0x10/0x10 [ 97.821075][ T7859] down_write+0x8b/0x1f0 [ 97.822520][ T7859] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 97.824686][ T7859] ? __pfx_down_write+0x10/0x10 [ 97.826351][ T7859] ? kstrtou16+0xde/0x130 [ 97.827760][ T7859] configfs_depend_item_unlocked+0xf3/0x6a0 [ 97.829693][ T7859] usbg_make_tpg+0x251/0x610 [ 97.831183][ T7859] ? __pfx_usbg_make_tpg+0x10/0x10 [ 97.832832][ T7859] ? find_held_lock+0x2b/0x80 [ 97.834366][ T7859] ? __pfx_usbg_make_tpg+0x10/0x10 [ 97.836082][ T7859] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 97.837966][ T7859] target_fabric_make_tpg+0xab/0x8c0 [ 97.839662][ T7859] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 97.841681][ T7859] configfs_mkdir+0x525/0xd40 [ 97.843284][ T7859] ? may_create+0x285/0x440 [ 97.844978][ T7859] ? __pfx_configfs_mkdir+0x10/0x10 [ 97.846663][ T7859] vfs_mkdir+0x364/0x850 [ 97.848049][ T7859] filename_mkdirat+0x48b/0x5e0 [ 97.849650][ T7859] ? __pfx_filename_mkdirat+0x10/0x10 [ 97.851358][ T7859] ? strncpy_from_user+0x19d/0x2d0 [ 97.853007][ T7859] ? do_getname+0x191/0x390 [ 97.854501][ T7859] __x64_sys_mkdirat+0x89/0xc0 [ 97.856052][ T7859] do_syscall_64+0x123/0x790 [ 97.857551][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.859413][ T7859] RIP: 0033:0x7eff3f19e159 [ 97.860899][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.867035][ T7859] RSP: 002b:00007eff40110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 97.869855][ T7859] RAX: ffffffffffffffda RBX: 00007eff3f425fa0 RCX: 00007eff3f19e159 [ 97.872440][ T7859] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 97.875142][ T7859] RBP: 00007eff3f23506b R08: 0000000000000000 R09: 0000000000000000 [ 97.877968][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.880542][ T7859] R13: 00007eff3f426038 R14: 00007eff3f425fa0 R15: 00007ffefb46f508 [ 97.883122][ T7859] [ 97.945991][ T5799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.946015][ T5799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.037321][ T5799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.037352][ T5799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.135040][ T5799] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 98.137179][ T5799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.137201][ T5799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.260681][ T5799] bridge_slave_1: left allmulticast mode [ 98.260705][ T5799] bridge_slave_1: left promiscuous mode [ 98.260821][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.264234][ T5799] bridge_slave_0: left allmulticast mode [ 98.264254][ T5799] bridge_slave_0: left promiscuous mode [ 98.264359][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.328046][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.329278][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.329860][ T5799] bond0 (unregistering): Released all slaves [ 98.331152][ T5799] bond1 (unregistering): Released all slaves [ 98.390173][ T5799] tipc: Disabling bearer [ 98.390289][ T5799] tipc: Left network mode [ 98.447006][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 98.569227][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.615483][ T5799] hsr_slave_0: left promiscuous mode [ 98.616006][ T5799] hsr_slave_1: left promiscuous mode [ 98.616322][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.616334][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.616654][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.616668][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.618621][ T5799] veth1_macvtap: left promiscuous mode [ 98.618643][ T5799] veth0_macvtap: left promiscuous mode [ 98.618677][ T5799] veth1_vlan: left promiscuous mode [ 98.618702][ T5799] veth0_vlan: left promiscuous mode [ 98.703346][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 98.705627][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 98.727210][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.883631][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 98.897623][ T5799] IPVS: stop unused estimator thread 0... [ 98.945310][ T5799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.945341][ T5799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.990940][ T5799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.990969][ T5799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.052383][ T5799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.052407][ T5799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.103188][ T5799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.103212][ T5799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.189914][ T5799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.189950][ T5799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.207778][ T5799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.207802][ T5799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.255338][ T5799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.255363][ T5799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.295515][ T5799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.295542][ T5799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.311642][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 99.347274][ T5799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.347298][ T5799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.385618][ T5799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.385641][ T5799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.436745][ T5799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.436769][ T5799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.438852][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 99.460657][ T5799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.460695][ T5799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.559221][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 99.587689][ T5799] bridge_slave_1: left allmulticast mode [ 99.587727][ T5799] bridge_slave_1: left promiscuous mode [ 99.587804][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.597763][ T5799] bridge_slave_1: left promiscuous mode [ 99.597920][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.598853][ T5799] bridge_slave_0: left promiscuous mode [ 99.598954][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.608881][ T5799] bridge_slave_1: left allmulticast mode [ 99.608912][ T5799] bridge_slave_1: left promiscuous mode [ 99.609033][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.610203][ T5799] bridge_slave_0: left allmulticast mode [ 99.610222][ T5799] bridge_slave_0: left promiscuous mode [ 99.610326][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.745078][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.746185][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.746740][ T5799] bond0 (unregistering): Released all slaves [ 99.772723][ T5799] bond2 (unregistering): (slave bridge1): Releasing active interface [ 99.778667][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.779689][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.780612][ T5799] bond0 (unregistering): Released all slaves [ 99.783642][ T5799] bond1 (unregistering): Released all slaves [ 99.795447][ T5799] bond2 (unregistering): Released all slaves [ 99.799452][ T5799] bond3 (unregistering): Released all slaves [ 99.807225][ T5799] bond4 (unregistering): Released all slaves [ 99.844231][ T5799] bond3 (unregistering): (slave gretap1): Releasing active interface [ 99.856463][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.857431][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.858156][ T5799] bond0 (unregistering): Released all slaves [ 99.859810][ T5799] bond1 (unregistering): Released all slaves [ 99.865502][ T5799] bond2 (unregistering): Released all slaves [ 99.867564][ T5799] bond3 (unregistering): Released all slaves [ 99.957357][ T5799] tipc: Disabling bearer [ 99.957550][ T5799] tipc: Left network mode [ 99.966284][ T5799] tipc: Disabling bearer [ 99.966614][ T5799] tipc: Left network mode [ 100.008531][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 100.156741][ T5439] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.259838][ T5439] 8021q: adding VLAN 0 to HW filter on device eth11 [ 100.356914][ T5439] 8021q: adding VLAN 0 to HW filter on device eth12 [ 100.455230][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13 [ 100.535051][ T5799] hsr_slave_0: left promiscuous mode [ 100.535532][ T5799] hsr_slave_1: left promiscuous mode [ 100.535907][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.535924][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.536977][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.536992][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.546673][ T5799] hsr_slave_0: left promiscuous mode [ 100.560245][ T5799] hsr_slave_1: left promiscuous mode [ 100.566517][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.566535][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.568075][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.568092][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.587792][ T5799] hsr_slave_0: left promiscuous mode [ 100.588405][ T5799] hsr_slave_1: left promiscuous mode [ 100.588733][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.588747][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.589360][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.589371][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.600275][ T5799] veth1_macvtap: left promiscuous mode [ 100.600308][ T5799] veth0_macvtap: left promiscuous mode [ 100.600376][ T5799] veth1_vlan: left promiscuous mode [ 100.607769][ T5799] veth1_macvtap: left promiscuous mode [ 100.607791][ T5799] veth0_macvtap: left promiscuous mode [ 100.607825][ T5799] veth1_vlan: left promiscuous mode [ 100.607849][ T5799] veth0_vlan: left promiscuous mode [ 100.615301][ T5799] veth1_macvtap: left promiscuous mode [ 100.615331][ T5799] veth0_macvtap: left promiscuous mode [ 100.615400][ T5799] veth1_vlan: left promiscuous mode [ 100.615439][ T5799] veth0_vlan: left promiscuous mode [ 100.744941][ T5799] team0 (unregistering): Port device vlan0 removed [ 100.807353][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 100.810116][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 100.908592][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 100.910820][ T5799] team0 (unregistering): Port device team_slave_0 removed [ 100.970252][ T5799] team0 (unregistering): Port device team_slave_1 removed [ 100.993735][ T5439] 8021q: adding VLAN 0 to HW filter on device eth14 [ 101.045133][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 101.045148][ T43] audit: type=1400 audit(1790001266.433:675): avc: denied { write } for pid=7965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.093132][ T43] audit: type=1400 audit(1790001266.483:676): avc: denied { write } for pid=7968 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.119520][ T5439] 8021q: adding VLAN 0 to HW filter on device eth15 [ 101.206805][ T43] audit: type=1400 audit(1790001266.593:677): avc: denied { write } for pid=7972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.258610][ T43] audit: type=1400 audit(1790001266.643:678): avc: denied { write } for pid=7975 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.298833][ T5439] 8021q: adding VLAN 0 to HW filter on device eth16 [ 101.361495][ T43] audit: type=1400 audit(1790001266.743:679): avc: denied { write } for pid=7978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.399856][ T43] audit: type=1400 audit(1790001266.783:680): avc: denied { write } for pid=7981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.450355][ T5439] 8021q: adding VLAN 0 to HW filter on device eth17 [ 101.770973][ T5799] IPVS: stop unused estimator thread 0...