last executing test programs: 21.771813065s ago: executing program 3 (id=342): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x700, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 21.124695499s ago: executing program 3 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={0x0, 0x1100, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8021}, 0x40080) 21.123920622s ago: executing program 3 (id=351): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/23, 0x17}], 0x1, 0x6, 0x6) 21.12365924s ago: executing program 3 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000100)={r6, 0x80000}) 21.015418971s ago: executing program 3 (id=353): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 21.015160553s ago: executing program 3 (id=354): read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000002380)) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a000103a5bd7000fcffffff06"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$isdn_base(r5, &(0x7f0000002240)={0x22, 0x47, 0x63, 0x64, 0x1}, 0x6) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000002200)={0x9, 0x4}, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000002280)={0x0, 0xe00, 0x4, 0x3ebe, 0x9, 0x1}, &(0x7f00000022c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000002300)=@assoc_value={r6}, &(0x7f0000002340)=0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @multicast1}, 0x184, 0x0, 0x0, 0x0, 0x875f, &(0x7f0000000040)='veth0_to_hsr\x00', 0x400, 0x391, 0x9}) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000080)={0x0, 0xb, 0x6, 0xfd8c, 0x107bb1, 0x9, 0x80000b}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.93606429s ago: executing program 32 (id=354): read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000002380)) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdd218) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a000103a5bd7000fcffffff06"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$isdn_base(r5, &(0x7f0000002240)={0x22, 0x47, 0x63, 0x64, 0x1}, 0x6) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000002200)={0x9, 0x4}, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000002280)={0x0, 0xe00, 0x4, 0x3ebe, 0x9, 0x1}, &(0x7f00000022c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000002300)=@assoc_value={r6}, &(0x7f0000002340)=0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @multicast1}, 0x184, 0x0, 0x0, 0x0, 0x875f, &(0x7f0000000040)='veth0_to_hsr\x00', 0x400, 0x391, 0x9}) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000080)={0x0, 0xb, 0x6, 0xfd8c, 0x107bb1, 0x9, 0x80000b}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.406370395s ago: executing program 2 (id=523): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) syz_clone(0xf024100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000680)={0x2, 0x4}, 0x4) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 4.166158396s ago: executing program 2 (id=525): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (fail_nth: 8) 4.066283104s ago: executing program 2 (id=526): symlink(&(0x7f0000000040)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) 4.054978582s ago: executing program 2 (id=528): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x3a1a}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 3.966173954s ago: executing program 2 (id=529): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x3ff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6ec60000006f6465733d191f777b142bd096927607ff222df957607e79ef1406a8ce471497edb24de83b"]) r1 = socket(0x6, 0x80000, 0x400) fcntl$getown(r1, 0x9) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000100)) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.806033703s ago: executing program 1 (id=542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220d00000083090000004b110064b0a2b9ef"], 0x0}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}, 0x1, 0x7}, 0x4) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 2.373387189s ago: executing program 4 (id=551): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x3c) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2b, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2d, 'net_cls'}]}, 0x24) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x82, 0x372, 0x401, 0x3, 0x3, 0x657}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x58}}, 0x0) 2.373080333s ago: executing program 4 (id=552): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="27050200420014000600002fb96dbcf706e1c9dce80188a8db0f8d86498b3812b0164aebaff0", 0x26}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x400, @private2}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="5729df62fc342cbd6b582ff3f7d9fbed", 0x10}], 0x1, 0x0, 0x0, 0x40001}, 0x4008885) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r3 = dup(r1) r4 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d00000000000800060009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0x3, @empty, 0xffffffff}}}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e20, 0xff, @mcast2, 0x22}}, 0x8, 0x9}, &(0x7f0000000200)=0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{}], 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x34000) 2.285763033s ago: executing program 4 (id=554): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af8c381c7602e6db51242cf54ca32d247a1c51da4e9d7c1efc9137a077a04b9eb00c424064613a1cbb363af306b10bc50692411a7146d3fcad6debdfdf4c9c0d5179352800036c971d25cce3fdcc2f83d5b134d58497433272093664bf66b8f7b9e63aadb89a3715d5e3fc53909267d74f7619896ed5d52b59a64eff18ed9592138ef9d51fdabb32b13804c12d3d3654c47d396f387e58562bcc304c20d6c4276e12eae5ff40c3110f36634c281e5de644557f90318a90626cc2513956686c953fe590c9dd2f5a3780ec3c50f35b06e2450e2c7a20612b43f526171c6e0c8edfa3e7d7034d3d501420048cceadb1e93db39481", 0xf3}, {&(0x7f0000000000)="6074cc23a885f383769132d5df9f9580122335", 0x27}], 0x1000000000000364}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x9, 0x80008071, 0x3, 0x44e, 0x1, 0xb, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xffff, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xbe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x3, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xd, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x83, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3d8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4008) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af8c381c7602e6db51242cf54ca32d247a1c51da4e9d7c1efc9137a077a04b9eb00c424064613a1cbb363af306b10bc50692411a7146d3fcad6debdfdf4c9c0d5179352800036c971d25cce3fdcc2f83d5b134d58497433272093664bf66b8f7b9e63aadb89a3715d5e3fc53909267d74f7619896ed5d52b59a64eff18ed9592138ef9d51fdabb32b13804c12d3d3654c47d396f387e58562bcc304c20d6c4276e12eae5ff40c3110f36634c281e5de644557f90318a90626cc2513956686c953fe590c9dd2f5a3780ec3c50f35b06e2450e2c7a20612b43f526171c6e0c8edfa3e7d7034d3d501420048cceadb1e93db39481", 0xf3}, {&(0x7f0000000000)="6074cc23a885f383769132d5df9f9580122335", 0x27}], 0x1000000000000364}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async) socket(0x1e, 0x4, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x9, 0x80008071, 0x3, 0x44e, 0x1, 0xb, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xffff, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xbe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x3, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xd, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x83, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3d8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4008) (async) 2.235825329s ago: executing program 4 (id=555): unshare(0x4a000200) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, 0x0, 0x48043) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff8000, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="0107000031980200240012800e00010069703665727370616e"], 0x44}, 0x1, 0xba01, 0x0, 0x40080}, 0x810) 2.076217729s ago: executing program 4 (id=557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc7f253bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x71bd2b, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9b0d}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x50}}, 0x2000000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r7, &(0x7f0000000600)="566fbd5a8e5a838739", 0x9) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x9, 0x80000000, &(0x7f0000000140)}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000580)={0x1f, 0x5, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000003, 0x207, 0xe, 0xff, 0x3, 0x4, 0x5, 0x4, 0x3, 0x1b8, 0xf703, 0x5, 0x6, 0x102, 0xae, 0x6ff], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.075446679s ago: executing program 0 (id=558): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x800}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.856043254s ago: executing program 0 (id=559): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002e003f0026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="cc493b6d7728022f12addf8a738e93acfd37f5b5c97b9ce3f90000ca81ce61ac09518cc98ed3ba65c0601e18ac6f274c4e8dbf8787bccd536cdab10307bbb83048abfb556595eea64c0d067db23a3f38141caeb2f3f1168d6190f480ff94e814f51fb1eeac6aae15fb682070ce286ac734bca670159ca52c31e0edc907dd9ba7c264339eb1c0f2da8244298e0920931df348d265f767aa09545cccfbd5df7f677bdb00bab2ffb22d7a942817e6e8406efe4dca8a47bd3584535b1cf948f8da9d313eee63e9f94a74fbe85f1fbd893fb2ff6023eb61fa79d70625a41d9305b2f5e49cd9d9a3c6271580749caffe6dc035a799d3d6c21441fbdd2dc0c199ef928c86770ebd8785cedb70903bbc10730f66512bd16115070e9d67520c92eeff172a7a22c6c5afb57d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002e003f0026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="cc493b6d7728022f12addf8a738e93acfd37f5b5c97b9ce3f90000ca81ce61ac09518cc98ed3ba65c0601e18ac6f274c4e8dbf8787bccd536cdab10307bbb83048abfb556595eea64c0d067db23a3f38141caeb2f3f1168d6190f480ff94e814f51fb1eeac6aae15fb682070ce286ac734bca670159ca52c31e0edc907dd9ba7c264339eb1c0f2da8244298e0920931df348d265f767aa09545cccfbd5df7f677bdb00bab2ffb22d7a942817e6e8406efe4dca8a47bd3584535b1cf948f8da9d313eee63e9f94a74fbe85f1fbd893fb2ff6023eb61fa79d70625a41d9305b2f5e49cd9d9a3c6271580749caffe6dc035a799d3d6c21441fbdd2dc0c199ef928c86770ebd8785cedb70903bbc10730f66512bd16115070e9d67520c92eeff172a7a22c6c5afb57d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.746264255s ago: executing program 0 (id=560): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x45000, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x7c9b, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0x2, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x67f, 0x64, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xe0000000) 1.496236134s ago: executing program 4 (id=561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, r2, {0x6}}, 0x18) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x39e5ec3a, {0xec95}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty=0xe00, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000480), &(0x7f0000000700)=0x8) 1.446438716s ago: executing program 0 (id=562): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1.446263543s ago: executing program 0 (id=563): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.233219309s ago: executing program 0 (id=564): r0 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x20, 0x14, 0x7f}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb000008000300000000000a0001"], 0x5c}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x9}, 0x1c) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r7, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 1.126324694s ago: executing program 1 (id=565): r0 = socket(0x40000000015, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x80000) (async) epoll_create1(0x80000) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x6a, &(0x7f0000003380)=""/4082, 0xffffffffffffff2b}, 0xfffffffc}], 0x40000b8, 0x60010020, 0x0) (async) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x6a, &(0x7f0000003380)=""/4082, 0xffffffffffffff2b}, 0xfffffffc}], 0x40000b8, 0x60010020, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa8, 0xfffffffffffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x1002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x3, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x3, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r1, 0x0) (async) r7 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'macvlan1\x00'}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.065953681s ago: executing program 1 (id=566): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd22, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x1, 0x0, 0x0, 0x0, [0x0], [0x0, 0x2, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 1.065475247s ago: executing program 1 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000500000000000000000000000037000100ffffffff95aa20f6826bb4ab9439f3010000000000000016e4556f85ac5088f645b0d3311cfe61fc0128c9257a4679ee10dc200219627b1571c0d0f1410c4cfe293b5697f0eeb47b76a5d632"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 916.74964ms ago: executing program 2 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) connect(r0, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x4}}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d800a"], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 106.219769ms ago: executing program 1 (id=569): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x48042) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x4005, 0x101, 0x1fe}}) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000180)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r8, 0x2) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r9, 0xd) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}]}}}]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0xffff6f33, 0x4) 0s ago: executing program 1 (id=570): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x820004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (fail_nth: 9) kernel console output (not intermixed with test programs): dv0 [ 60.606837][ T6153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.637894][ T6141] veth0_vlan: entered promiscuous mode [ 60.644668][ T6141] veth1_vlan: entered promiscuous mode [ 60.663799][ T6141] veth0_macvtap: entered promiscuous mode [ 60.669516][ T6141] veth1_macvtap: entered promiscuous mode [ 60.682688][ T46] bridge_slave_1: left allmulticast mode [ 60.684999][ T46] bridge_slave_1: left promiscuous mode [ 60.688025][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.694499][ T46] bridge_slave_0: left allmulticast mode [ 60.696980][ T46] bridge_slave_0: left promiscuous mode [ 60.699519][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.846447][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.850565][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.855060][ T46] bond0 (unregistering): Released all slaves [ 60.860896][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.872780][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.901181][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.905124][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.924751][ T6153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.935654][ T6153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.941104][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.944463][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.948291][ T6153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.956252][ T6153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.053958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.058055][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.076926][ T804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.080427][ T804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.094677][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.119301][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.131309][ T46] hsr_slave_0: left promiscuous mode [ 61.137481][ T46] hsr_slave_1: left promiscuous mode [ 61.140427][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.144296][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.148092][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.151159][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.156544][ T46] veth1_macvtap: left promiscuous mode [ 61.158799][ T46] veth0_macvtap: left promiscuous mode [ 61.161419][ T46] veth1_vlan: left promiscuous mode [ 61.162646][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.162671][ T5931] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.164368][ T46] veth0_vlan: left promiscuous mode [ 61.242361][ T5935] Bluetooth: hci3: command 0x041b tx timeout [ 61.242600][ T5931] Bluetooth: hci1: command 0x041b tx timeout [ 61.349390][ T46] team0 (unregistering): Port device team_slave_1 removed [ 61.363876][ T46] team0 (unregistering): Port device team_slave_0 removed [ 61.466223][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.468817][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.474287][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.476618][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.569501][ T6257] tmpfs: Bad value for 'mpol' [ 61.609154][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.648213][ T6262] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 61.648863][ T6153] veth0_vlan: entered promiscuous mode [ 61.654967][ T6262] fuse: Unknown parameter 'ėäŽpń0x0000000000000004' [ 61.658206][ T6264] openvswitch: netlink: IP tunnel dst address not specified [ 61.666295][ T6153] veth1_vlan: entered promiscuous mode [ 61.672831][ T6264] trusted_key: syz.2.60 sent an empty control message without MSG_MORE. [ 61.685259][ T6153] veth0_macvtap: entered promiscuous mode [ 61.689313][ T6153] veth1_macvtap: entered promiscuous mode [ 61.691332][ T6267] netlink: set zone limit has 4 unknown bytes [ 61.700204][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.709900][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.725923][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.729028][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.747138][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.750376][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.783324][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.787885][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.817314][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.821831][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.953442][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 61.953459][ T40] audit: type=1400 audit(1773523972.221:252): avc: denied { connect } for pid=6276 comm="syz.1.45" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.980106][ T40] audit: type=1400 audit(1773523972.221:253): avc: denied { bind } for pid=6276 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.041739][ T40] audit: type=1400 audit(1773523972.301:254): avc: denied { create } for pid=6276 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.079759][ T40] audit: type=1400 audit(1773523972.341:255): avc: denied { read write } for pid=6279 comm="syz.2.63" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.088043][ T40] audit: type=1400 audit(1773523972.341:256): avc: denied { open } for pid=6279 comm="syz.2.63" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.117826][ T40] audit: type=1400 audit(1773523972.371:257): avc: denied { unmount } for pid=6141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 62.136263][ T40] audit: type=1400 audit(1773523972.401:258): avc: denied { create } for pid=6282 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.145670][ T40] audit: type=1400 audit(1773523972.411:259): avc: denied { write } for pid=6282 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.311767][ T40] audit: type=1400 audit(1773523972.571:260): avc: denied { create } for pid=6286 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.321115][ T40] audit: type=1400 audit(1773523972.581:261): avc: denied { ioctl } for pid=6286 comm="syz.0.66" path="socket:[16094]" dev="sockfs" ino=16094 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.441213][ T6294] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 62.462527][ T6286] delete_channel: no stack [ 62.627849][ T6280] syz.2.63 (6280): drop_caches: 2 [ 62.736078][ T6316] ptrace attach of "/syz-executor exec"[6320] was attempted by "/syz-executor exec"[6316] [ 62.772357][ T6324] Zero length message leads to an empty skb [ 63.241905][ T5931] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.252039][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.322132][ T5931] Bluetooth: hci3: command 0x041b tx timeout [ 63.323024][ T5935] Bluetooth: hci1: command 0x041b tx timeout [ 63.668746][ T6334] team_slave_1: entered promiscuous mode [ 63.671362][ T6334] team_slave_1: entered allmulticast mode [ 63.833980][ T6341] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.322481][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.331849][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.403546][ T5935] Bluetooth: hci1: command 0x041b tx timeout [ 65.403569][ T5931] Bluetooth: hci3: command 0x041b tx timeout [ 65.587213][ T6306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.694669][ T6357] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.786055][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 65.872118][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.893063][ T6379] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 65.895328][ T6379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.900579][ T6379] vhci_hcd vhci_hcd.0: Device attached [ 65.906520][ T6379] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 65.908913][ T6379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.911536][ T6379] vhci_hcd vhci_hcd.0: Device attached [ 65.914429][ T6384] vhci_hcd: connection closed [ 65.915259][ T6380] vhci_hcd: connection closed [ 65.918403][ T80] vhci_hcd vhci_hcd.0: stop threads [ 65.923030][ T80] vhci_hcd vhci_hcd.0: release socket [ 65.924843][ T80] vhci_hcd vhci_hcd.0: disconnect device [ 65.928748][ T80] vhci_hcd vhci_hcd.0: stop threads [ 65.930556][ T80] vhci_hcd vhci_hcd.0: release socket [ 65.932899][ T80] vhci_hcd vhci_hcd.0: disconnect device [ 65.950761][ T6359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 65.953022][ T6359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.955630][ T6359] vhci_hcd vhci_hcd.0: Device attached [ 65.958519][ T6387] vhci_hcd: connection closed [ 65.958703][ T80] vhci_hcd vhci_hcd.3: stop threads [ 65.962303][ T80] vhci_hcd vhci_hcd.3: release socket [ 65.964688][ T80] vhci_hcd vhci_hcd.3: disconnect device [ 65.967497][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.974315][ T6389] bond0: (slave rose0): Enslaving as an active interface with an up link [ 66.023059][ T29] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 66.026374][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.029467][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.039660][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.043560][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.046431][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.049903][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.060902][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.064295][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.067687][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.070550][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.073408][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.076716][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.079858][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.083052][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.086481][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.089355][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.092217][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.096852][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.099828][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.103129][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.106556][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.109388][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.112462][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.115945][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.120836][ T29] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 66.128080][ T29] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 66.132359][ T29] usb 7-1: Product: syz [ 66.133905][ T29] usb 7-1: Manufacturer: syz [ 66.135391][ T29] usb 7-1: SerialNumber: syz [ 66.148079][ T29] usb 7-1: config 0 descriptor?? [ 66.159737][ T29] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 66.384708][ T6416] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.470250][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 66.550650][ T6424] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 66.576014][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.102'. [ 66.744318][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 66.772459][ T6437] block nbd0: Device being setup by another task [ 66.889557][ T6449] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 67.085930][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 67.085941][ T40] audit: type=1400 audit(1773523977.351:313): avc: denied { create } for pid=6457 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.094875][ T40] audit: type=1400 audit(1773523977.361:314): avc: denied { write } for pid=6457 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.095252][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 67.103965][ T40] audit: type=1400 audit(1773523977.361:315): avc: denied { nlmsg_write } for pid=6457 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.117967][ T40] audit: type=1400 audit(1773523977.361:316): avc: denied { ioctl } for pid=6457 comm="syz.1.115" path="socket:[13605]" dev="sockfs" ino=13605 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.422252][ T40] audit: type=1400 audit(1773523977.691:317): avc: denied { open } for pid=6467 comm="syz.1.120" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.428944][ T5935] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 67.429816][ T40] audit: type=1400 audit(1773523977.691:318): avc: denied { write } for pid=6467 comm="syz.1.120" path="socket:[12556]" dev="sockfs" ino=12556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.442313][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 67.481868][ T5935] Bluetooth: hci1: command 0x041b tx timeout [ 67.487934][ T40] audit: type=1400 audit(1773523977.751:319): avc: denied { create } for pid=6469 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.494574][ T40] audit: type=1400 audit(1773523977.751:320): avc: denied { ioctl } for pid=6469 comm="syz.1.121" path="socket:[14592]" dev="sockfs" ino=14592 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.513711][ T40] audit: type=1400 audit(1773523977.781:321): avc: denied { read write } for pid=6153 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.522690][ T40] audit: type=1400 audit(1773523977.781:322): avc: denied { open } for pid=6153 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.593121][ T5931] block nbd0: Receive control failed (result -32) [ 67.595356][ T6434] block nbd0: shutting down sockets [ 67.597881][ T6472] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20003 [ 67.696354][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 67.701886][ T830] IPVS: starting estimator thread 0... [ 67.748799][ T6491] Bluetooth: MGMT ver 1.23 [ 67.809358][ T6496] netlink: 10 bytes leftover after parsing attributes in process `syz.3.130'. [ 67.813786][ T6482] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.069083][ T6507] FAULT_INJECTION: forcing a failure. [ 68.069083][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 68.074155][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(full) [ 68.074170][ T6507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.074176][ T6507] Call Trace: [ 68.074180][ T6507] [ 68.074184][ T6507] dump_stack_lvl+0x100/0x190 [ 68.074213][ T6507] should_fail_ex.cold+0x5/0xa [ 68.074227][ T6507] should_failslab+0xc2/0x120 [ 68.074239][ T6507] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 68.074254][ T6507] ? skb_clone+0x190/0x400 [ 68.074274][ T6507] skb_clone+0x190/0x400 [ 68.074288][ T6507] netlink_deliver_tap+0xaed/0xcc0 [ 68.074305][ T6507] netlink_unicast+0x70c/0x870 [ 68.074324][ T6507] ? __pfx_netlink_unicast+0x10/0x10 [ 68.074338][ T6507] ? __alloc_skb+0x5b7/0x710 [ 68.074352][ T6507] ? netlink_ack_tlv_len+0x4b/0x290 [ 68.074366][ T6507] netlink_ack+0x655/0xb80 [ 68.074386][ T6507] netlink_rcv_skb+0x333/0x420 [ 68.074401][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.074419][ T6507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.074440][ T6507] ? netlink_deliver_tap+0x1ae/0xcc0 [ 68.074456][ T6507] genl_rcv+0x28/0x40 [ 68.074472][ T6507] netlink_unicast+0x5aa/0x870 [ 68.074489][ T6507] ? __pfx_netlink_unicast+0x10/0x10 [ 68.074509][ T6507] netlink_sendmsg+0x8b0/0xda0 [ 68.074527][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.074541][ T6507] ? __might_fault+0x20/0x140 [ 68.074561][ T6507] ____sys_sendmsg+0x9e1/0xb70 [ 68.074577][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.074593][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.074617][ T6507] ___sys_sendmsg+0x190/0x1e0 [ 68.074635][ T6507] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.074670][ T6507] __sys_sendmsg+0x170/0x220 [ 68.074683][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.074706][ T6507] do_syscall_64+0x106/0xf80 [ 68.074720][ T6507] ? clear_bhb_loop+0x40/0x90 [ 68.074734][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.074745][ T6507] RIP: 0033:0x7f65ff19c799 [ 68.074754][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.074768][ T6507] RSP: 002b:00007f660008e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.074779][ T6507] RAX: ffffffffffffffda RBX: 00007f65ff415fa0 RCX: 00007f65ff19c799 [ 68.074786][ T6507] RDX: 0000000000000850 RSI: 0000200000000240 RDI: 0000000000000003 [ 68.074792][ T6507] RBP: 00007f660008e090 R08: 0000000000000000 R09: 0000000000000000 [ 68.074798][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.074804][ T6507] R13: 00007f65ff416038 R14: 00007f65ff415fa0 R15: 00007fff135a15d8 [ 68.074818][ T6507] [ 68.142163][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.331772][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 68.334816][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 68.337492][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.340626][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.344043][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.347513][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.351761][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.354903][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.442406][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 68.444971][ C1] usb 7-1: yurex_control_callback - control failed: -32 [ 68.451045][ T34] usb 7-1: USB disconnect, device number 2 [ 68.459898][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 68.561232][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 68.563157][ T56] usbtmc 5-1:16.0: can't read capabilities [ 68.636575][ T6532] (syz.3.142,6532,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 68.640261][ T6532] (syz.3.142,6532,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 68.661958][ T6532] (syz.3.142,6532,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 68.665708][ T6532] (syz.3.142,6532,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 68.713149][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.722861][ T56] IPVS: starting estimator thread 0... [ 68.818921][ T6553] FAT-fs (nullb0): bogus number of reserved sectors [ 68.824284][ T6553] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 68.830011][ T994] usb 5-1: USB disconnect, device number 3 [ 68.831791][ T6538] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.895044][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 68.934312][ T6551] Cannot find add_set index 1 as target [ 69.054287][ T6570] sp0: Synchronizing with TNC [ 69.059321][ T6569] [U] č`` [ 69.571825][ T5931] Bluetooth: hci1: command 0x041b tx timeout [ 69.590292][ T6596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6596 comm=syz.0.160 [ 69.597527][ T34] IPVS: starting estimator thread 0... [ 69.691825][ T6597] IPVS: using max 30 ests per chain, 72000 per kthread [ 70.272564][ T5931] block nbd1: Receive control failed (result -32) [ 70.272565][ T5935] block nbd1: Receive control failed (result -32) [ 70.274934][ T6589] block nbd1: shutting down sockets [ 71.301493][ T6614] FAULT_INJECTION: forcing a failure. [ 71.301493][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 71.306100][ T6614] CPU: 3 UID: 0 PID: 6614 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 71.306115][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.306121][ T6614] Call Trace: [ 71.306125][ T6614] [ 71.306130][ T6614] dump_stack_lvl+0x100/0x190 [ 71.306160][ T6614] should_fail_ex.cold+0x5/0xa [ 71.306174][ T6614] ? tomoyo_realpath_from_path+0xb6/0x690 [ 71.306194][ T6614] should_failslab+0xc2/0x120 [ 71.306205][ T6614] __kmalloc_noprof+0xe0/0x850 [ 71.306223][ T6614] tomoyo_realpath_from_path+0xb6/0x690 [ 71.306243][ T6614] tomoyo_path_number_perm+0x23c/0x580 [ 71.306255][ T6614] ? tomoyo_path_number_perm+0x22e/0x580 [ 71.306269][ T6614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 71.306296][ T6614] ? find_held_lock+0x2b/0x80 [ 71.306310][ T6614] ? __fget_files+0x215/0x3d0 [ 71.306320][ T6614] ? hook_file_ioctl_common+0x146/0x410 [ 71.306346][ T6614] ? __fget_files+0x21f/0x3d0 [ 71.306359][ T6614] security_file_ioctl+0xd3/0x230 [ 71.306374][ T6614] __x64_sys_ioctl+0xb7/0x210 [ 71.306392][ T6614] do_syscall_64+0x106/0xf80 [ 71.306410][ T6614] ? clear_bhb_loop+0x40/0x90 [ 71.306423][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.306434][ T6614] RIP: 0033:0x7f10ca39c799 [ 71.306443][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.306453][ T6614] RSP: 002b:00007f10c85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.306464][ T6614] RAX: ffffffffffffffda RBX: 00007f10ca615fa0 RCX: 00007f10ca39c799 [ 71.306471][ T6614] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000004 [ 71.306477][ T6614] RBP: 00007f10c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 71.306483][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.306489][ T6614] R13: 00007f10ca616038 R14: 00007f10ca615fa0 R15: 00007fff6496a8d8 [ 71.306503][ T6614] [ 71.306507][ T6614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.478898][ T6616] sctp: [Deprecated]: syz.1.167 (pid 6616) Use of int in maxseg socket option. [ 71.478898][ T6616] Use struct sctp_assoc_value instead [ 71.641965][ T5935] Bluetooth: hci1: command 0x041b tx timeout [ 71.831868][ T6622] block nbd1: Device being setup by another task [ 71.985232][ T6562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.161159][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 72.161175][ T40] audit: type=1400 audit(1773523982.421:354): avc: denied { ioctl } for pid=6637 comm="syz.2.174" path="socket:[16585]" dev="sockfs" ino=16585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.163085][ T6638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.174'. [ 72.163919][ T40] audit: type=1400 audit(1773523982.431:355): avc: denied { bind } for pid=6637 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.183154][ T40] audit: type=1326 audit(1773523982.441:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6641 comm="syz.3.175" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65ff19c799 code=0x0 [ 72.280428][ T6645] binder: 6644:6645 ioctl c0306201 200000000040 returned -22 [ 72.283953][ T6645] binder: 6644:6645 ioctl c0306201 200000000640 returned -22 [ 72.340171][ T6649] libceph: secret too big 289 [ 72.396927][ T40] audit: type=1400 audit(1773523982.661:357): avc: denied { allowed } for pid=6650 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.478561][ T40] audit: type=1400 audit(1773523982.741:358): avc: denied { read } for pid=6663 comm="syz.2.180" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.488151][ T40] audit: type=1400 audit(1773523982.741:359): avc: denied { open } for pid=6663 comm="syz.2.180" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.503156][ T40] audit: type=1400 audit(1773523982.771:360): avc: denied { ioctl } for pid=6663 comm="syz.2.180" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.583676][ T5935] block nbd1: Receive control failed (result -32) [ 72.592702][ T6621] block nbd1: shutting down sockets [ 72.639423][ T40] audit: type=1400 audit(1773523982.901:361): avc: denied { watch } for pid=6665 comm="syz.2.181" path="/sys/power/sync_on_suspend" dev="sysfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.648271][ T40] audit: type=1400 audit(1773523982.901:362): avc: denied { watch_sb watch_reads } for pid=6665 comm="syz.2.181" path="/sys/power/sync_on_suspend" dev="sysfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 72.694152][ T40] audit: type=1400 audit(1773523982.961:363): avc: denied { execute } for pid=6665 comm="syz.2.181" path="/sys/power/sync_on_suspend" dev="sysfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 72.895054][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.351851][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.363768][ T6708] dummy0: entered promiscuous mode [ 73.368431][ T6708] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 73.373934][ T6708] hsr1: entered allmulticast mode [ 73.376230][ T6708] dummy0: entered allmulticast mode [ 73.378584][ T6708] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 73.511916][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 73.516905][ T9] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 73.520586][ T9] usb 8-1: config 0 has no interface number 0 [ 73.523723][ T9] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.528524][ T9] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 73.534700][ T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 73.538688][ T9] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 73.542577][ T9] usb 8-1: Product: syz [ 73.544559][ T9] usb 8-1: SerialNumber: syz [ 73.549978][ T9] usb 8-1: config 0 descriptor?? [ 73.557240][ T9] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 73.562934][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input6 [ 73.829355][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 73.829995][ T5995] usb 8-1: USB disconnect, device number 2 [ 73.831752][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 73.844809][ T5995] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.013831][ T6730] netlink: 'syz.0.205': attribute type 4 has an invalid length. [ 74.019278][ T6730] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.205'. [ 74.091788][ T6736] process 'syz.0.206' launched './file2' with NULL argv: empty string added [ 74.625290][ T6745] fuse: Unknown parameter '00000000000000000005' [ 74.849979][ T6765] syzkaller0: entered promiscuous mode [ 74.852485][ T6765] syzkaller0: entered allmulticast mode [ 75.032806][ T5931] block nbd0: Receive control failed (result -32) [ 75.033184][ T5935] block nbd0: Receive control failed (result -32) [ 75.035636][ T6742] block nbd0: shutting down sockets [ 75.123513][ T6783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6783 comm=syz.3.219 [ 75.291775][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.361981][ T6799] FAULT_INJECTION: forcing a failure. [ 75.361981][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 75.367483][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(full) [ 75.367505][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.367515][ T6799] Call Trace: [ 75.367522][ T6799] [ 75.367530][ T6799] dump_stack_lvl+0x100/0x190 [ 75.367572][ T6799] should_fail_ex.cold+0x5/0xa [ 75.367594][ T6799] ? tomoyo_realpath_from_path+0xb6/0x690 [ 75.367628][ T6799] should_failslab+0xc2/0x120 [ 75.367645][ T6799] __kmalloc_noprof+0xe0/0x850 [ 75.367674][ T6799] tomoyo_realpath_from_path+0xb6/0x690 [ 75.367704][ T6799] tomoyo_path_number_perm+0x23c/0x580 [ 75.367724][ T6799] ? tomoyo_path_number_perm+0x22e/0x580 [ 75.367746][ T6799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.367792][ T6799] ? find_held_lock+0x2b/0x80 [ 75.367814][ T6799] ? __fget_files+0x215/0x3d0 [ 75.367831][ T6799] ? hook_file_ioctl_common+0x146/0x410 [ 75.367863][ T6799] ? __fget_files+0x21f/0x3d0 [ 75.367885][ T6799] security_file_ioctl+0xd3/0x230 [ 75.367909][ T6799] __x64_sys_ioctl+0xb7/0x210 [ 75.367935][ T6799] do_syscall_64+0x106/0xf80 [ 75.367961][ T6799] ? clear_bhb_loop+0x40/0x90 [ 75.367983][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.368001][ T6799] RIP: 0033:0x7f65ff19c799 [ 75.368016][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.368032][ T6799] RSP: 002b:00007f660008e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.368049][ T6799] RAX: ffffffffffffffda RBX: 00007f65ff415fa0 RCX: 00007f65ff19c799 [ 75.368059][ T6799] RDX: 0000200000000340 RSI: 000000008050640a RDI: 0000000000000003 [ 75.368069][ T6799] RBP: 00007f660008e090 R08: 0000000000000000 R09: 0000000000000000 [ 75.368079][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.368088][ T6799] R13: 00007f65ff416038 R14: 00007f65ff415fa0 R15: 00007fff135a15d8 [ 75.368111][ T6799] [ 75.368118][ T6799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.454919][ T34] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.460551][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.464589][ T34] usb 7-1: Product: syz [ 75.466164][ T34] usb 7-1: Manufacturer: syz [ 75.467720][ T34] usb 7-1: SerialNumber: syz [ 75.480745][ T34] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.501837][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.502342][ T56] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.661800][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 75.666008][ T5930] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.668586][ T5930] usb 5-1: config 0 has no interface number 0 [ 75.670676][ T5930] usb 5-1: config 0 interface 1 has no altsetting 0 [ 75.675605][ T5930] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 75.678543][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.681131][ T5930] usb 5-1: Product: syz [ 75.686485][ T5930] usb 5-1: Manufacturer: syz [ 75.688069][ T5930] usb 5-1: SerialNumber: syz [ 75.690822][ T5930] usb 5-1: config 0 descriptor?? [ 75.694709][ T5930] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 75.697621][ T5930] usb 5-1: selecting invalid altsetting 1 [ 75.699551][ T5930] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 75.704989][ T5930] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 75.708503][ T5930] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 75.712223][ T5930] usb 5-1: media controller created [ 75.720566][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.727980][ T6805] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 75.742278][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.891753][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 75.895923][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 75.896723][ T5930] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 75.899527][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 75.903212][ T5930] zl10353_read_register: readreg error (reg=127, ret==-32) [ 75.907136][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.909339][ T5930] usb 5-1: selecting invalid altsetting 0 [ 75.912567][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.914613][ T5930] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 75.942495][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.945416][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.949237][ T3249] usb 7-1: USB disconnect, device number 3 [ 76.111755][ T6104] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.150578][ T5930] usb 5-1: USB disconnect, device number 4 [ 76.161765][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 76.164378][ T34] usbtmc 8-1:16.0: can't read capabilities [ 76.273008][ T6104] usb 6-1: config index 0 descriptor too short (expected 40711, got 146) [ 76.275732][ T6104] usb 6-1: config 99 has too many interfaces: 35, using maximum allowed: 32 [ 76.278722][ T6104] usb 6-1: config 99 has an invalid descriptor of length 244, skipping remainder of the config [ 76.282178][ T6104] usb 6-1: config 99 has 0 interfaces, different from the descriptor's value: 35 [ 76.285890][ T6104] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.289004][ T6104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.291562][ T6104] usb 6-1: SerialNumber: syz [ 76.364723][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.365164][ T9] usb 8-1: USB disconnect, device number 3 [ 76.473435][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 76.482244][ T6812] vlan2: entered allmulticast mode [ 76.484560][ T6812] vlan0: entered allmulticast mode [ 76.486892][ T6812] veth0_vlan: entered allmulticast mode [ 76.499362][ T6104] usb 6-1: USB disconnect, device number 2 [ 76.522958][ T56] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 76.526051][ T56] ath9k_htc: Failed to initialize the device [ 76.531529][ T3249] usb 7-1: ath9k_htc: USB layer deinitialized [ 76.540246][ T5931] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 76.545571][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 77.317864][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 77.317876][ T40] audit: type=1400 audit(1773523987.581:396): avc: denied { create } for pid=6831 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.328481][ T40] audit: type=1400 audit(1773523987.591:397): avc: denied { write } for pid=6831 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.898577][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037effc00: rx timeout, send abort [ 77.912223][ T40] audit: type=1400 audit(1773523988.181:398): avc: denied { read } for pid=5319 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 77.921391][ T40] audit: type=1400 audit(1773523988.181:399): avc: denied { search } for pid=5319 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.942968][ T40] audit: type=1400 audit(1773523988.181:400): avc: denied { search } for pid=5319 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.951994][ T40] audit: type=1400 audit(1773523988.181:401): avc: denied { add_name } for pid=5319 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.959010][ T40] audit: type=1400 audit(1773523988.181:402): avc: denied { create } for pid=5319 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.970708][ T40] audit: type=1400 audit(1773523988.181:403): avc: denied { append open } for pid=5319 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.978204][ T40] audit: type=1400 audit(1773523988.181:404): avc: denied { getattr } for pid=5319 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.058670][ T40] audit: type=1400 audit(1773523988.321:405): avc: denied { create } for pid=6880 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.086503][ T6884] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 78.094656][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.100560][ T6884] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.200274][ T6894] comedi comedi3: dt2817: I/O port conflict (0x20d00,5) [ 78.211970][ T6894] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5136 sclass=netlink_xfrm_socket pid=6894 comm=syz.0.246 [ 78.402844][ C3] vcan0: j1939_tp_rxtimer: 0xffff888037effc00: abort rx timeout. Force session deactivation [ 78.403931][ T6918] binder: 6917:6918 ioctl 40046205 0 returned -22 [ 78.496553][ T6923] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 78.532984][ T6924] tipc: Enabling of bearer rejected, failed to enable media [ 78.677671][ T6930] IPv6: syztnl0: Disabled Multicast RS [ 79.286582][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'. [ 79.329963][ T994] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.531819][ T994] usb 7-1: Using ep0 maxpacket: 32 [ 79.538368][ T994] usb 7-1: unable to get BOS descriptor or descriptor too short [ 79.542494][ T994] usb 7-1: config 1 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.547090][ T994] usb 7-1: config 1 interface 0 has no altsetting 0 [ 79.550898][ T994] usb 7-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40 [ 79.555076][ T994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.558619][ T994] usb 7-1: Product: syz [ 79.560570][ T994] usb 7-1: Manufacturer: syz [ 79.563409][ T994] usb 7-1: SerialNumber: syz [ 80.236070][ T6978] Invalid logical block size (3840) [ 80.294681][ T6985] netlink: zone id is out of range [ 80.296487][ T6985] netlink: zone id is out of range [ 80.298856][ T6985] netlink: zone id is out of range [ 80.301316][ T6985] netlink: zone id is out of range [ 80.304148][ T6985] netlink: zone id is out of range [ 80.309109][ T6985] netlink: zone id is out of range [ 80.312144][ T6985] netlink: zone id is out of range [ 80.314692][ T6985] netlink: zone id is out of range [ 80.316956][ T6985] netlink: zone id is out of range [ 80.319218][ T6985] netlink: zone id is out of range [ 80.404910][ T6982] SELinux: failed to load policy [ 80.470880][ T6993] fuseblk: Unknown parameter 'uid<00000000000000000000' [ 80.524719][ T6997] FAULT_INJECTION: forcing a failure. [ 80.524719][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.530008][ T6997] CPU: 3 UID: 0 PID: 6997 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.530034][ T6997] Tainted: [L]=SOFTLOCKUP [ 80.530040][ T6997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.530050][ T6997] Call Trace: [ 80.530056][ T6997] [ 80.530062][ T6997] dump_stack_lvl+0x100/0x190 [ 80.530103][ T6997] should_fail_ex.cold+0x5/0xa [ 80.530125][ T6997] _copy_from_user+0x2e/0xd0 [ 80.530158][ T6997] copy_msghdr_from_user+0x9f/0x4f0 [ 80.530197][ T6997] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.530236][ T6997] ___sys_sendmsg+0x106/0x1e0 [ 80.530263][ T6997] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.530318][ T6997] __sys_sendmsg+0x170/0x220 [ 80.530341][ T6997] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.530377][ T6997] do_syscall_64+0x106/0xf80 [ 80.530398][ T6997] ? clear_bhb_loop+0x40/0x90 [ 80.530420][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.530437][ T6997] RIP: 0033:0x7f65ff19c799 [ 80.530451][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.530466][ T6997] RSP: 002b:00007f660008e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.530483][ T6997] RAX: ffffffffffffffda RBX: 00007f65ff415fa0 RCX: 00007f65ff19c799 [ 80.530493][ T6997] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 80.530503][ T6997] RBP: 00007f660008e090 R08: 0000000000000000 R09: 0000000000000000 [ 80.530513][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.530522][ T6997] R13: 00007f65ff416038 R14: 00007f65ff415fa0 R15: 00007fff135a15d8 [ 80.530545][ T6997] [ 80.633104][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.674723][ T7002] FAULT_INJECTION: forcing a failure. [ 80.674723][ T7002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.680090][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.3.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.680108][ T7002] Tainted: [L]=SOFTLOCKUP [ 80.680112][ T7002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.680118][ T7002] Call Trace: [ 80.680123][ T7002] [ 80.680127][ T7002] dump_stack_lvl+0x100/0x190 [ 80.680148][ T7002] should_fail_ex.cold+0x5/0xa [ 80.680163][ T7002] _copy_from_user+0x2e/0xd0 [ 80.680181][ T7002] copy_msghdr_from_user+0x9f/0x4f0 [ 80.680200][ T7002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.680220][ T7002] ? __pfx__kstrtoull+0x10/0x10 [ 80.680236][ T7002] ___sys_sendmsg+0x106/0x1e0 [ 80.680254][ T7002] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.680277][ T7002] ? find_held_lock+0x2b/0x80 [ 80.680300][ T7002] __sys_sendmmsg+0x205/0x430 [ 80.680315][ T7002] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.680332][ T7002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.680353][ T7002] ? fput+0x79/0x100 [ 80.680365][ T7002] ? ksys_write+0x1ac/0x250 [ 80.680381][ T7002] ? __pfx_ksys_write+0x10/0x10 [ 80.680400][ T7002] __x64_sys_sendmmsg+0x9c/0x100 [ 80.680413][ T7002] ? lockdep_hardirqs_on+0x78/0x100 [ 80.680427][ T7002] do_syscall_64+0x106/0xf80 [ 80.680440][ T7002] ? clear_bhb_loop+0x40/0x90 [ 80.680453][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.680464][ T7002] RIP: 0033:0x7f65ff19c799 [ 80.680473][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.680483][ T7002] RSP: 002b:00007f660008e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.680493][ T7002] RAX: ffffffffffffffda RBX: 00007f65ff415fa0 RCX: 00007f65ff19c799 [ 80.680500][ T7002] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000004 [ 80.680506][ T7002] RBP: 00007f660008e090 R08: 0000000000000000 R09: 0000000000000000 [ 80.680512][ T7002] R10: 0000000004008440 R11: 0000000000000246 R12: 0000000000000001 [ 80.680518][ T7002] R13: 00007f65ff416038 R14: 00007f65ff415fa0 R15: 00007fff135a15d8 [ 80.680531][ T7002] [ 80.793640][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.798990][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.803477][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.809170][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.809406][ T7007] vivid-000: ================= START STATUS ================= [ 80.813541][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.817037][ T7007] vivid-000: Test Pattern: 75% Colorbar [ 80.820824][ T29] usb 6-1: config 0 descriptor?? [ 80.823531][ T7007] vivid-000: Fill Percentage of Frame: 100 [ 80.827735][ T7007] vivid-000: Horizontal Movement: No Movement [ 80.830368][ T7007] vivid-000: Vertical Movement: No Movement [ 80.833106][ T7007] vivid-000: OSD Text Mode: All [ 80.834906][ T7007] vivid-000: Show Border: false [ 80.836986][ T7007] vivid-000: Show Square: false [ 80.838789][ T7007] vivid-000: Sensor Flipped Horizontally: false [ 80.840939][ T7007] vivid-000: Sensor Flipped Vertically: false [ 80.843832][ T7007] vivid-000: Insert SAV Code in Image: false [ 80.845855][ T7007] vivid-000: Insert EAV Code in Image: false [ 80.848267][ T7007] vivid-000: Insert Video Guard Band: false [ 80.850323][ T7007] vivid-000: Reduced Framerate: false [ 80.852439][ T7007] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 80.855450][ T7007] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 80.858194][ T7007] vivid-000: Enable Capture Cropping: true grabbed [ 80.860889][ T7007] vivid-000: Enable Capture Composing: true grabbed [ 80.864523][ T7007] vivid-000: Enable Capture Scaler: true grabbed [ 80.867017][ T7007] vivid-000: Timestamp Source: End of Frame [ 80.869015][ T7007] vivid-000: Colorspace: sRGB [ 80.870773][ T7007] vivid-000: Transfer Function: Default [ 80.872747][ T7007] vivid-000: Y'CbCr Encoding: Default [ 80.874847][ T7007] vivid-000: HSV Encoding: Hue 0-179 [ 80.877154][ T7007] vivid-000: Quantization: Default [ 80.879340][ T7007] vivid-000: Apply Alpha To Red Only: false [ 80.881309][ T7007] vivid-000: Standard Aspect Ratio: 4x3 [ 80.883742][ T7007] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 80.886463][ T7007] vivid-000: DV Timings: 640x480p59 inactive [ 80.888803][ T7007] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 80.891633][ T7007] vivid-000: Maximum EDID Blocks: 2 [ 80.893633][ T7007] vivid-000: Limited RGB Range (16-235): false [ 80.896321][ T7007] vivid-000: Rx RGB Quantization Range: Automatic [ 80.898670][ T7007] vivid-000: Power Present: 0x00000001 [ 80.900850][ T7007] tpg source WxH: 320x240 (Y'CbCr) [ 80.903042][ T7007] tpg field: 1 [ 80.904404][ T7007] tpg crop: (0,0)/320x240 [ 80.906250][ T7007] tpg compose: (0,0)/320x240 [ 80.908201][ T7007] tpg colorspace: 8 [ 80.909571][ T7007] tpg transfer function: 0/2 [ 80.911065][ T7007] tpg Y'CbCr encoding: 0/1 [ 80.913034][ T7007] tpg quantization: 0/2 [ 80.914826][ T7007] tpg RGB range: 0/2 [ 80.916125][ T7007] vivid-000: ================== END STATUS ================== [ 81.200690][ T994] usbhid 7-1:1.0: can't add hid device: -71 [ 81.203011][ T994] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 81.213083][ T994] usb 7-1: USB disconnect, device number 4 [ 81.250762][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 81.608815][ T7013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.283'. [ 81.624914][ T7013] ip6tnl3: entered promiscuous mode [ 81.963297][ T7031] hugetlbfs: Bad value '$nd/controlC#' for mount option 'size' [ 81.963297][ T7031] [ 82.017391][ T7034] fuse: Bad value for 'fd' [ 82.033346][ T7034] batman_adv: batadv0: Adding interface: dummy0 [ 82.036070][ T7034] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.050131][ T7034] batman_adv: batadv0: Interface activated: dummy0 [ 82.051334][ T7035] usb usb1: usbfs: process 7035 (syz.2.291) did not claim interface 0 before use [ 82.425375][ T7058] binder: BINDER_SET_CONTEXT_MGR already set [ 82.428514][ T7058] binder: 7057:7058 ioctl 4018620d 200000000040 returned -16 [ 82.455743][ T29] usb 6-1: USB disconnect, device number 3 [ 82.475265][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.302'. [ 82.552661][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 82.552676][ T40] audit: type=1400 audit(1773523992.839:438): avc: denied { sqpoll } for pid=7064 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.785224][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.821912][ T5995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.879728][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.903501][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.908881][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.912721][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.916345][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.920029][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.943230][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.993933][ T5995] usb 7-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 82.997575][ T5995] usb 7-1: config 1 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.011739][ T5995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.016745][ T5995] usb 7-1: New USB device found, idVendor=0458, idProduct=9317, bcdDevice=f5.2f [ 83.019726][ T5995] usb 7-1: New USB device strings: Mfr=66, Product=2, SerialNumber=3 [ 83.030669][ T5995] usb 7-1: Product: č”ļŽˆā¤€č§„ę‚³ļ¹ŗå¤—ģ“‚å„ī­ˆļ‡”éæģŖ¦Ā€ [ 83.034010][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.037608][ T5995] usb 7-1: Manufacturer: syz [ 83.039213][ T5995] usb 7-1: SerialNumber: ķ‡æļ„Œäƒœī˜¢ä™•č‡øė“„å‘‹äø•ī˜®ä¢é—®į›ä“ä¾«ĒÆā£·į²‡ļ¢¦č¶ėˆøč’œč‘…ć»‹ģ†°å«ź“®āŽœå“„ė„§ä‹”å©ē¼°ę‘ŗģ…¢ī©Øį‚±ŁŽā ²āæ­É®ēŽ‹č‹šä·Ź”āž²å°µź›»į—‘ķ”–ķµėž“é¶ź²Œé³³Ń‡ēŸ„į©ŠäŠøź‘¤éÆŗī‹†ä„™ć¶¾ćœēæøē¢Žį—²ę“Šģ¦® [ 83.050013][ T40] audit: type=1400 audit(1773523993.329:439): avc: denied { read } for pid=7077 comm="syz.1.306" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.056438][ T7079] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.063135][ T7081] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 83.069138][ T40] audit: type=1400 audit(1773523993.349:440): avc: denied { write } for pid=7077 comm="syz.1.306" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.098605][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 83.205319][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.207776][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.210229][ T7075] bridge_slave_0: entered allmulticast mode [ 83.213995][ T7075] bridge_slave_0: entered promiscuous mode [ 83.217494][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.220536][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.223339][ T7075] bridge_slave_1: entered allmulticast mode [ 83.226523][ T7075] bridge_slave_1: entered promiscuous mode [ 83.256672][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.285768][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.331933][ T61] bridge_slave_1: left allmulticast mode [ 83.334210][ T61] bridge_slave_1: left promiscuous mode [ 83.336541][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.341318][ T61] bridge_slave_0: left allmulticast mode [ 83.343353][ T61] bridge_slave_0: left promiscuous mode [ 83.345361][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.520039][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.525805][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.532571][ T61] bond0 (unregistering): (slave team0): Releasing backup interface [ 83.538018][ T61] bond0 (unregistering): Released all slaves [ 83.543594][ T7101] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.547790][ T7075] team0: Port device team_slave_0 added [ 83.558094][ T7075] team0: Port device team_slave_1 added [ 83.591606][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.595018][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.610062][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.622766][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.625831][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.637836][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.674758][ T7110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42526 sclass=netlink_route_socket pid=7110 comm=syz.1.314 [ 83.735891][ T7075] hsr_slave_0: entered promiscuous mode [ 83.738579][ T7075] hsr_slave_1: entered promiscuous mode [ 83.741591][ T7075] debugfs: 'hsr0' already exists in 'hsr' [ 83.744812][ T7075] Cannot create hsr debugfs directory [ 83.864126][ T61] hsr_slave_0: left promiscuous mode [ 83.866265][ T61] hsr_slave_1: left promiscuous mode [ 83.868260][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.881991][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.884998][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.898977][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.901876][ T61] batman_adv: batadv0: Interface deactivated: dummy0 [ 83.903972][ T61] batman_adv: batadv0: Removing interface: dummy0 [ 83.907676][ T61] veth1_macvtap: left promiscuous mode [ 83.909462][ T61] veth0_macvtap: left promiscuous mode [ 83.911350][ T61] veth1_vlan: left promiscuous mode [ 83.913506][ T61] veth0_vlan: left promiscuous mode [ 84.016044][ T61] team0 (unregistering): Port device team_slave_1 removed [ 84.025558][ T61] team0 (unregistering): Port device team_slave_0 removed [ 84.269371][ T40] audit: type=1400 audit(1773523994.549:441): avc: denied { mount } for pid=7125 comm="syz.0.316" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.287662][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.536067][ T7075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.544987][ T7075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.550449][ T7075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.557067][ T7075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.583735][ T61] IPVS: stop unused estimator thread 0... [ 84.615798][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.629340][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.636108][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.638528][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.647817][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.650974][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.681764][ T3249] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.800227][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.820978][ T7075] veth0_vlan: entered promiscuous mode [ 84.827115][ T7075] veth1_vlan: entered promiscuous mode [ 84.832368][ T3249] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 84.836414][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.839348][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.842981][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.845966][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.847757][ T7075] veth0_macvtap: entered promiscuous mode [ 84.848799][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.854643][ T7075] veth1_macvtap: entered promiscuous mode [ 84.854920][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.861548][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.866039][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.868697][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.873797][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.876974][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.880088][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.884749][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884995][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.887948][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.891160][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.893785][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.899337][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.902014][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.902752][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.906302][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.908644][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.915570][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.919157][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.922930][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.925825][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.929954][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.934081][ T3249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.937046][ T3249] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.940528][ T3249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.942078][ T3249] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.945669][ T3249] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.948302][ T3249] usb 5-1: Product: syz [ 84.949688][ T3249] usb 5-1: Manufacturer: syz [ 84.951240][ T3249] usb 5-1: SerialNumber: syz [ 84.954543][ T3249] usb 5-1: config 0 descriptor?? [ 84.956321][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.959216][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.963988][ T3249] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.983812][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.986433][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.997416][ T40] audit: type=1400 audit(1773523995.279:442): avc: denied { mounton } for pid=7075 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.005326][ T5931] Bluetooth: hci1: command tx timeout [ 85.059540][ T40] audit: type=1400 audit(1773523995.339:443): avc: denied { read } for pid=7161 comm="syz.3.321" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.067523][ T40] audit: type=1400 audit(1773523995.339:444): avc: denied { open } for pid=7161 comm="syz.3.321" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.075835][ T40] audit: type=1400 audit(1773523995.339:445): avc: denied { ioctl } for pid=7161 comm="syz.3.321" path="/dev/usbmon2" dev="devtmpfs" ino=743 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.085898][ T40] audit: type=1400 audit(1773523995.339:446): avc: denied { ioctl } for pid=7161 comm="syz.3.321" path="/dev/usbmon2" dev="devtmpfs" ino=743 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.478019][ T5995] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 85.485417][ T5995] usb 7-1: USB disconnect, device number 5 [ 85.562746][ T40] audit: type=1326 audit(1773523995.849:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.325" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaf799c799 code=0x0 [ 85.812253][ T7181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.020859][ T7192] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 86.024007][ T7192] netlink: 232 bytes leftover after parsing attributes in process `syz.1.329'. [ 86.028148][ T7193] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 86.030788][ T7193] netlink: 232 bytes leftover after parsing attributes in process `syz.1.329'. [ 86.086605][ T7195] capability: warning: `syz.1.330' uses deprecated v2 capabilities in a way that may be insecure [ 86.104297][ T5935] block nbd3: Receive control failed (result -32) [ 86.104386][ T5936] block nbd3: Receive control failed (result -32) [ 86.104433][ T7171] block nbd3: shutting down sockets [ 86.195754][ T7199] tmpfs: Bad value for 'mpol' [ 86.517469][ T5935] Bluetooth: hci2: unexpected event for opcode 0x080f [ 86.519092][ T7211] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.335'. [ 86.605808][ T1335] cfg80211: failed to load regulatory.db [ 86.615721][ T5935] block nbd1: Receive control failed (result -32) [ 86.615723][ T5936] block nbd1: Receive control failed (result -32) [ 86.632287][ T7205] block nbd1: shutting down sockets [ 87.081945][ T5936] Bluetooth: hci1: command tx timeout [ 87.242289][ T5931] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 87.243253][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 87.274526][ T5930] usb 5-1: USB disconnect, device number 5 [ 87.283680][ T5930] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 87.922439][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 87.922454][ T40] audit: type=1400 audit(1773523998.209:452): avc: denied { unmount } for pid=7075 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.147474][ T7234] syzkaller0: entered promiscuous mode [ 88.151724][ T7234] syzkaller0: entered allmulticast mode [ 88.205924][ T40] audit: type=1400 audit(1773523998.489:453): avc: denied { watch } for pid=7235 comm="syz.1.343" path="/89/file0/control" dev="9p" ino=71827835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.314267][ T5936] block nbd0: Receive control failed (result -32) [ 88.314303][ T5931] block nbd0: Receive control failed (result -32) [ 88.319414][ T7226] block nbd0: shutting down sockets [ 88.367380][ T7238] gfs2: error -5 reading superblock [ 88.373132][ T40] audit: type=1400 audit(1773523998.659:454): avc: denied { read } for pid=7237 comm="syz.0.345" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.382895][ T40] audit: type=1400 audit(1773523998.659:455): avc: denied { open } for pid=7237 comm="syz.0.345" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.505219][ T7243] evm: overlay not supported [ 88.541851][ T7241] block nbd0: Device being setup by another task [ 88.585282][ T40] audit: type=1326 audit(1773523998.869:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7239 comm="syz.0.346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2f39c799 code=0x0 [ 88.686565][ T5931] block nbd0: Receive control failed (result -32) [ 88.695006][ T7252] netlink: 'syz.1.349': attribute type 2 has an invalid length. [ 88.698624][ T7252] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 88.703313][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 88.722669][ T7240] block nbd0: shutting down sockets [ 88.827192][ T7261] netlink: 228 bytes leftover after parsing attributes in process `syz.3.352'. [ 88.830993][ T7261] netlink: 228 bytes leftover after parsing attributes in process `syz.3.352'. [ 88.891202][ T40] audit: type=1400 audit(1773523999.169:457): avc: denied { mounton } for pid=7262 comm="syz.3.353" path="/12/file1/file0" dev="autofs" ino=19318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 88.909802][ T40] audit: type=1400 audit(1773523999.189:458): avc: denied { unmount } for pid=7075 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.162473][ T5931] Bluetooth: hci1: command tx timeout [ 89.407667][ T7268] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 89.684779][ T7284] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.852403][ T7290] block nbd2: Device being setup by another task [ 89.885938][ T40] audit: type=1326 audit(1773524000.169:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.2.364" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x0 [ 89.986627][ T5931] block nbd2: Receive control failed (result -32) [ 89.991894][ T7288] block nbd2: shutting down sockets [ 90.189527][ T40] audit: type=1400 audit(1773524000.469:460): avc: denied { name_bind } for pid=7299 comm="syz.0.366" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.197640][ T40] audit: type=1400 audit(1773524000.479:461): avc: denied { name_connect } for pid=7299 comm="syz.0.366" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.204042][ T7300] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 90.325068][ T7306] FAULT_INJECTION: forcing a failure. [ 90.325068][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.330923][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.0.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.330950][ T7306] Tainted: [L]=SOFTLOCKUP [ 90.330956][ T7306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.330967][ T7306] Call Trace: [ 90.330973][ T7306] [ 90.330980][ T7306] dump_stack_lvl+0x100/0x190 [ 90.331021][ T7306] should_fail_ex.cold+0x5/0xa [ 90.331044][ T7306] _copy_from_user+0x2e/0xd0 [ 90.331078][ T7306] copy_msghdr_from_user+0x9f/0x4f0 [ 90.331111][ T7306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.331151][ T7306] ___sys_sendmsg+0x106/0x1e0 [ 90.331180][ T7306] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.331237][ T7306] __sys_sendmsg+0x170/0x220 [ 90.331259][ T7306] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.331296][ T7306] do_syscall_64+0x106/0xf80 [ 90.331318][ T7306] ? clear_bhb_loop+0x40/0x90 [ 90.331340][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.331357][ T7306] RIP: 0033:0x7f7d2f39c799 [ 90.331372][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.331387][ T7306] RSP: 002b:00007f7d30229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.331404][ T7306] RAX: ffffffffffffffda RBX: 00007f7d2f615fa0 RCX: 00007f7d2f39c799 [ 90.331415][ T7306] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000006 [ 90.331425][ T7306] RBP: 00007f7d30229090 R08: 0000000000000000 R09: 0000000000000000 [ 90.331435][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.331445][ T7306] R13: 00007f7d2f616038 R14: 00007f7d2f615fa0 R15: 00007fff808eaa58 [ 90.331470][ T7306] [ 90.650048][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 90.726019][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 90.728983][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 90.738269][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 90.742601][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.747117][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.751010][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.754426][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.808106][ T7332] syzkaller0: entered promiscuous mode [ 90.808121][ T7332] syzkaller0: entered allmulticast mode [ 90.927954][ T5931] block nbd2: Receive control failed (result -32) [ 90.928041][ T5936] block nbd2: Receive control failed (result -32) [ 90.952638][ T7324] block nbd2: shutting down sockets [ 91.082478][ C1] net_ratelimit: 107 callbacks suppressed [ 91.082497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 91.241771][ T5931] Bluetooth: hci1: command tx timeout [ 91.316946][ T5931] block nbd0: Receive control failed (result -32) [ 91.316981][ T5936] block nbd0: Receive control failed (result -32) [ 91.382694][ T7346] block nbd0: shutting down sockets [ 91.481783][ T994] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.631804][ T994] usb 6-1: Using ep0 maxpacket: 16 [ 91.635464][ T994] usb 6-1: config 0 has no interfaces? [ 91.640480][ T994] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.644141][ T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.646912][ T994] usb 6-1: SerialNumber: syz [ 91.651130][ T994] usb 6-1: config 0 descriptor?? [ 91.858762][ T994] usb 6-1: USB disconnect, device number 4 [ 92.455017][ T7376] __nla_validate_parse: 1 callbacks suppressed [ 92.455034][ T7376] netlink: 120 bytes leftover after parsing attributes in process `syz.1.392'. [ 92.461141][ T7376] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 92.463953][ T7376] netlink: 64 bytes leftover after parsing attributes in process `syz.1.392'. [ 92.660640][ T7378] macsec0: entered promiscuous mode [ 92.663950][ T7378] macsec0: entered allmulticast mode [ 92.666935][ T7378] veth1_macvtap: entered allmulticast mode [ 92.786596][ T7398] SELinux: failed to load policy [ 92.789892][ T7398] tipc: Started in network mode [ 92.791625][ T7398] tipc: Node identity 84e, cluster identity 4711 [ 92.794892][ T7398] tipc: Node number set to 2126 [ 92.867402][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 92.871143][ T7400] FAULT_INJECTION: forcing a failure. [ 92.871143][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.877014][ T7400] CPU: 3 UID: 0 PID: 7400 Comm: syz.0.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.877031][ T7400] Tainted: [L]=SOFTLOCKUP [ 92.877035][ T7400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.877042][ T7400] Call Trace: [ 92.877045][ T7400] [ 92.877050][ T7400] dump_stack_lvl+0x100/0x190 [ 92.877072][ T7400] should_fail_ex.cold+0x5/0xa [ 92.877086][ T7400] _copy_to_user+0x32/0xd0 [ 92.877106][ T7400] simple_read_from_buffer+0xcb/0x170 [ 92.877125][ T7400] proc_fail_nth_read+0x1af/0x230 [ 92.877140][ T7400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.877157][ T7400] ? rw_verify_area+0xce/0x6d0 [ 92.877171][ T7400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.877187][ T7400] vfs_read+0x1e4/0xb30 [ 92.877205][ T7400] ? __pfx_vfs_read+0x10/0x10 [ 92.877221][ T7400] ? __fget_files+0x215/0x3d0 [ 92.877240][ T7400] ? __fget_files+0x21f/0x3d0 [ 92.877254][ T7400] ksys_read+0x12a/0x250 [ 92.877271][ T7400] ? __pfx_ksys_read+0x10/0x10 [ 92.877292][ T7400] do_syscall_64+0x106/0xf80 [ 92.877305][ T7400] ? clear_bhb_loop+0x40/0x90 [ 92.877319][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.877330][ T7400] RIP: 0033:0x7f7d2f35cfce [ 92.877339][ T7400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.877350][ T7400] RSP: 002b:00007f7d30228fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.877361][ T7400] RAX: ffffffffffffffda RBX: 00007f7d302296c0 RCX: 00007f7d2f35cfce [ 92.877368][ T7400] RDX: 000000000000000f RSI: 00007f7d302290a0 RDI: 0000000000000005 [ 92.877374][ T7400] RBP: 00007f7d30229090 R08: 0000000000000000 R09: 0000000000000000 [ 92.877381][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.877386][ T7400] R13: 00007f7d2f616038 R14: 00007f7d2f615fa0 R15: 00007fff808eaa58 [ 92.877401][ T7400] [ 92.952869][ T6104] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.091904][ T6104] usb 7-1: device descriptor read/64, error -71 [ 93.143870][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 93.143887][ T40] audit: type=1400 audit(1773524003.429:484): avc: denied { ioctl } for pid=7403 comm="syz.0.402" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.331877][ T6104] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 93.400697][ T7411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7411 comm=syz.1.405 [ 93.461823][ T6104] usb 7-1: device descriptor read/64, error -71 [ 93.466800][ T40] audit: type=1400 audit(1773524003.749:485): avc: denied { getopt } for pid=7414 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.543854][ T40] audit: type=1400 audit(1773524003.819:486): avc: denied { setopt } for pid=7422 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.572200][ T6104] usb usb7-port1: attempt power cycle [ 93.666181][ T7437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.414'. [ 93.748654][ T7444] comedi comedi4: bad chanlist[0]=0x000007ff chan=2047 range length=2 [ 93.780959][ T7448] FAULT_INJECTION: forcing a failure. [ 93.780959][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 93.788019][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.0.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.788037][ T7448] Tainted: [L]=SOFTLOCKUP [ 93.788041][ T7448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.788048][ T7448] Call Trace: [ 93.788051][ T7448] [ 93.788056][ T7448] dump_stack_lvl+0x100/0x190 [ 93.788079][ T7448] should_fail_ex.cold+0x5/0xa [ 93.788093][ T7448] ? tomoyo_encode2+0xfb/0x3c0 [ 93.788107][ T7448] should_failslab+0xc2/0x120 [ 93.788118][ T7448] __kmalloc_noprof+0xe0/0x850 [ 93.788137][ T7448] tomoyo_encode2+0xfb/0x3c0 [ 93.788154][ T7448] tomoyo_encode+0x29/0x50 [ 93.788169][ T7448] tomoyo_realpath_from_path+0x18c/0x690 [ 93.788188][ T7448] tomoyo_path_number_perm+0x23c/0x580 [ 93.788201][ T7448] ? tomoyo_path_number_perm+0x22e/0x580 [ 93.788215][ T7448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.788243][ T7448] ? find_held_lock+0x2b/0x80 [ 93.788257][ T7448] ? __fget_files+0x215/0x3d0 [ 93.788268][ T7448] ? hook_file_ioctl_common+0x146/0x410 [ 93.788288][ T7448] ? __fget_files+0x21f/0x3d0 [ 93.788301][ T7448] security_file_ioctl+0xd3/0x230 [ 93.788317][ T7448] __x64_sys_ioctl+0xb7/0x210 [ 93.788335][ T7448] do_syscall_64+0x106/0xf80 [ 93.788349][ T7448] ? clear_bhb_loop+0x40/0x90 [ 93.788362][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.788373][ T7448] RIP: 0033:0x7f7d2f39c799 [ 93.788383][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.788393][ T7448] RSP: 002b:00007f7d30229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.788404][ T7448] RAX: ffffffffffffffda RBX: 00007f7d2f615fa0 RCX: 00007f7d2f39c799 [ 93.788411][ T7448] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000004 [ 93.788417][ T7448] RBP: 00007f7d30229090 R08: 0000000000000000 R09: 0000000000000000 [ 93.788424][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.788430][ T7448] R13: 00007f7d2f616038 R14: 00007f7d2f615fa0 R15: 00007fff808eaa58 [ 93.788444][ T7448] [ 93.788454][ T7448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.922180][ T6104] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.942719][ T6104] usb 7-1: device descriptor read/8, error -71 [ 93.998409][ T7452] x_tables: duplicate underflow at hook 3 [ 94.059746][ T40] audit: type=1400 audit(1773524004.339:487): avc: denied { read } for pid=7456 comm="syz.0.421" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.066960][ T40] audit: type=1400 audit(1773524004.339:488): avc: denied { open } for pid=7456 comm="syz.0.421" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.181878][ T6104] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.212579][ T6104] usb 7-1: device descriptor read/8, error -71 [ 94.331944][ T6104] usb usb7-port1: unable to enumerate USB device [ 94.351813][ T830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.503369][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.506928][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.509965][ T830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.514561][ T830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.517838][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.522684][ T830] usb 5-1: config 0 descriptor?? [ 95.133447][ T7464] input: syz1 as /devices/virtual/input/input7 [ 95.140146][ T40] audit: type=1400 audit(1773524005.419:489): avc: denied { read } for pid=5322 comm="acpid" name="event4" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.149902][ T40] audit: type=1400 audit(1773524005.419:490): avc: denied { open } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2909 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.157548][ T40] audit: type=1400 audit(1773524005.419:491): avc: denied { ioctl } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2909 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.171112][ T830] usbhid 5-1:0.0: can't add hid device: -71 [ 95.173905][ T830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 95.178109][ T830] usb 5-1: USB disconnect, device number 7 [ 95.351215][ T7487] vivid-003: ================= START STATUS ================= [ 95.354825][ T7487] vivid-003: Radio HW Seek Mode: Bounded [ 95.357708][ T7487] vivid-003: Radio Programmable HW Seek: false [ 95.360261][ T7487] vivid-003: RDS Rx I/O Mode: Block I/O [ 95.363679][ T7487] vivid-003: Generate RBDS Instead of RDS: false [ 95.366174][ T7487] vivid-003: RDS Reception: true [ 95.368264][ T7487] vivid-003: RDS Program Type: 0 inactive [ 95.370587][ T7487] vivid-003: RDS PS Name: inactive [ 95.373890][ T7487] vivid-003: RDS Radio Text: inactive [ 95.376184][ T7487] vivid-003: RDS Traffic Announcement: false inactive [ 95.379018][ T7487] vivid-003: RDS Traffic Program: false inactive [ 95.381747][ T7487] vivid-003: RDS Music: false inactive [ 95.384096][ T7487] vivid-003: ================== END STATUS ================== [ 95.466754][ T40] audit: type=1400 audit(1773524005.749:492): avc: denied { append } for pid=7492 comm="syz.1.430" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.717315][ T7503] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.739540][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 95.766939][ T7505] overlayfs: failed to resolve './file1': -2 [ 95.961791][ T7510] block nbd0: Device being setup by another task [ 95.999841][ T40] audit: type=1326 audit(1773524006.279:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.0.436" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2f39c799 code=0x0 [ 96.109940][ T5936] block nbd0: Receive control failed (result -32) [ 96.111795][ T56] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.152093][ T7509] block nbd0: shutting down sockets [ 96.275972][ T56] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.279342][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.282210][ T56] usb 7-1: Product: syz [ 96.284445][ T56] usb 7-1: Manufacturer: syz [ 96.286218][ T56] usb 7-1: SerialNumber: syz [ 96.297258][ T56] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.315288][ T6104] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.427823][ T7517] FAULT_INJECTION: forcing a failure. [ 96.427823][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.434557][ T7517] CPU: 1 UID: 0 PID: 7517 Comm: syz.1.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.434578][ T7517] Tainted: [L]=SOFTLOCKUP [ 96.434582][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.434589][ T7517] Call Trace: [ 96.434594][ T7517] [ 96.434598][ T7517] dump_stack_lvl+0x100/0x190 [ 96.434622][ T7517] should_fail_ex.cold+0x5/0xa [ 96.434638][ T7517] _copy_from_user+0x2e/0xd0 [ 96.434659][ T7517] kstrtouint_from_user+0xd6/0x1d0 [ 96.434674][ T7517] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 96.434688][ T7517] ? __lock_acquire+0x4a5/0x2630 [ 96.434709][ T7517] ? lock_acquire+0x1cf/0x380 [ 96.434731][ T7517] proc_fail_nth_write+0x83/0x220 [ 96.434748][ T7517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.434768][ T7517] vfs_write+0x2aa/0x1070 [ 96.434788][ T7517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.434805][ T7517] ? __pfx_vfs_write+0x10/0x10 [ 96.434827][ T7517] ? __fget_files+0x215/0x3d0 [ 96.434851][ T7517] ? __fget_files+0x21f/0x3d0 [ 96.434877][ T7517] ksys_write+0x12a/0x250 [ 96.434905][ T7517] ? __pfx_ksys_write+0x10/0x10 [ 96.434931][ T7517] do_syscall_64+0x106/0xf80 [ 96.434946][ T7517] ? clear_bhb_loop+0x40/0x90 [ 96.434960][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.434972][ T7517] RIP: 0033:0x7f10ca35cfce [ 96.434982][ T7517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.434994][ T7517] RSP: 002b:00007f10c85f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.435011][ T7517] RAX: ffffffffffffffda RBX: 00007f10c85f66c0 RCX: 00007f10ca35cfce [ 96.435018][ T7517] RDX: 0000000000000001 RSI: 00007f10c85f60a0 RDI: 0000000000000004 [ 96.435025][ T7517] RBP: 00007f10c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.435032][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.435038][ T7517] R13: 00007f10ca616038 R14: 00007f10ca615fa0 R15: 00007fff6496a8d8 [ 96.435054][ T7517] [ 96.525457][ T50] usb 7-1: USB disconnect, device number 10 [ 96.946732][ T7545] FAULT_INJECTION: forcing a failure. [ 96.946732][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.953136][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.0.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.953163][ T7545] Tainted: [L]=SOFTLOCKUP [ 96.953169][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.953179][ T7545] Call Trace: [ 96.953195][ T7545] [ 96.953201][ T7545] dump_stack_lvl+0x100/0x190 [ 96.953236][ T7545] should_fail_ex.cold+0x5/0xa [ 96.953258][ T7545] _copy_to_user+0x32/0xd0 [ 96.953295][ T7545] simple_read_from_buffer+0xcb/0x170 [ 96.953326][ T7545] proc_fail_nth_read+0x1af/0x230 [ 96.953354][ T7545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.953379][ T7545] ? rw_verify_area+0xce/0x6d0 [ 96.953400][ T7545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.953426][ T7545] vfs_read+0x1e4/0xb30 [ 96.953457][ T7545] ? __pfx_vfs_read+0x10/0x10 [ 96.953480][ T7545] ? __fget_files+0x215/0x3d0 [ 96.953503][ T7545] ? __fget_files+0x21f/0x3d0 [ 96.953527][ T7545] ksys_read+0x12a/0x250 [ 96.953559][ T7545] ? __pfx_ksys_read+0x10/0x10 [ 96.953584][ T7545] ? fdget+0x18b/0x210 [ 96.953612][ T7545] do_syscall_64+0x106/0xf80 [ 96.953641][ T7545] ? clear_bhb_loop+0x40/0x90 [ 96.953688][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.953707][ T7545] RIP: 0033:0x7f7d2f35cfce [ 96.953721][ T7545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.953738][ T7545] RSP: 002b:00007f7d30207fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.953758][ T7545] RAX: ffffffffffffffda RBX: 00007f7d302086c0 RCX: 00007f7d2f35cfce [ 96.953771][ T7545] RDX: 000000000000000f RSI: 00007f7d302080a0 RDI: 000000000000000a [ 96.953781][ T7545] RBP: 00007f7d30208090 R08: 0000000000000000 R09: 0000000000000000 [ 96.953791][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.953801][ T7545] R13: 00007f7d2f616128 R14: 00007f7d2f616090 R15: 00007fff808eaa58 [ 96.953827][ T7545] [ 97.118708][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 97.124574][ T7549] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.381942][ T7560] block nbd0: Device being setup by another task [ 97.401863][ T6104] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 97.406257][ T6104] ath9k_htc: Failed to initialize the device [ 97.409370][ T50] usb 7-1: ath9k_htc: USB layer deinitialized [ 97.459113][ T5936] block nbd0: Receive control failed (result -32) [ 97.465097][ T7557] block nbd0: shutting down sockets [ 97.744448][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 97.931173][ T7578] syzkaller0: entered promiscuous mode [ 97.933305][ T7578] syzkaller0: entered allmulticast mode [ 98.351137][ T7592] netlink: 'syz.2.465': attribute type 3 has an invalid length. [ 98.394305][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 98.394317][ T40] audit: type=1400 audit(1773524008.679:505): avc: denied { shutdown } for pid=7593 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.407499][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 98.549778][ T7597] tipc: Started in network mode [ 98.552929][ T7597] tipc: Node identity 84e, cluster identity 4711 [ 98.555749][ T7597] tipc: Node number set to 2126 [ 98.763986][ T40] audit: type=1326 audit(1773524009.049:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7601 comm="syz.2.470" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x0 [ 98.864694][ T5931] block nbd2: Receive control failed (result -32) [ 98.864713][ T5936] block nbd2: Receive control failed (result -32) [ 98.871258][ T7603] block nbd2: shutting down sockets [ 99.095174][ T7609] overlayfs: failed to resolve './file0': -2 [ 99.512345][ T5930] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.553617][ T7619] syzkaller0: entered promiscuous mode [ 99.555514][ T7619] syzkaller0: entered allmulticast mode [ 99.671796][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 99.674910][ T5930] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 99.678199][ T5930] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 99.682073][ T5930] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.686057][ T5930] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 99.691855][ T5930] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.694785][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.697364][ T5930] usb 5-1: Product: syz [ 99.698791][ T5930] usb 5-1: Manufacturer: syz [ 99.700308][ T5930] usb 5-1: SerialNumber: syz [ 99.707760][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 99.712809][ T5930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input8 [ 99.733484][ T7622] syz.2.476 (7622) used greatest stack depth: 18728 bytes left [ 99.931822][ T5930] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 99.934623][ T5930] (id 0x00) [ 99.991844][ T5930] rc_core: IR keymap rc-imon-pad not found [ 99.994376][ T5930] Registered IR keymap rc-empty [ 99.996516][ T5930] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 100.000298][ T5930] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.018356][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 100.123296][ T5930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 100.130418][ T5930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input9 [ 100.144072][ T5930] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:8> initialized [ 100.173246][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 100.182253][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7646 comm=syz.2.484 [ 100.188851][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7646 comm=syz.2.484 [ 100.194470][ T7646] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 100.197597][ T7646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.484'. [ 100.273796][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 100.627359][ T994] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.631730][ T7662] FAULT_INJECTION: forcing a failure. [ 100.631730][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 100.636607][ T7662] CPU: 2 UID: 0 PID: 7662 Comm: syz.1.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.636634][ T7662] Tainted: [L]=SOFTLOCKUP [ 100.636640][ T7662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.636651][ T7662] Call Trace: [ 100.636657][ T7662] [ 100.636664][ T7662] dump_stack_lvl+0x100/0x190 [ 100.636706][ T7662] should_fail_ex.cold+0x5/0xa [ 100.636729][ T7662] ? tomoyo_encode2+0xfb/0x3c0 [ 100.636758][ T7662] should_failslab+0xc2/0x120 [ 100.636776][ T7662] __kmalloc_noprof+0xe0/0x850 [ 100.636800][ T7662] ? d_absolute_path+0x136/0x1b0 [ 100.636829][ T7662] tomoyo_encode2+0xfb/0x3c0 [ 100.636858][ T7662] tomoyo_encode+0x29/0x50 [ 100.636880][ T7662] tomoyo_realpath_from_path+0x18c/0x690 [ 100.636911][ T7662] tomoyo_path_number_perm+0x23c/0x580 [ 100.636936][ T7662] ? tomoyo_path_number_perm+0x22e/0x580 [ 100.636958][ T7662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.637003][ T7662] ? find_held_lock+0x2b/0x80 [ 100.637024][ T7662] ? __fget_files+0x215/0x3d0 [ 100.637040][ T7662] ? hook_file_ioctl_common+0x146/0x410 [ 100.637073][ T7662] ? __fget_files+0x21f/0x3d0 [ 100.637094][ T7662] security_file_ioctl+0xd3/0x230 [ 100.637119][ T7662] __x64_sys_ioctl+0xb7/0x210 [ 100.637146][ T7662] do_syscall_64+0x106/0xf80 [ 100.637173][ T7662] ? clear_bhb_loop+0x40/0x90 [ 100.637194][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.637212][ T7662] RIP: 0033:0x7f10ca39c799 [ 100.637226][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.637241][ T7662] RSP: 002b:00007f10c85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.637258][ T7662] RAX: ffffffffffffffda RBX: 00007f10ca615fa0 RCX: 00007f10ca39c799 [ 100.637269][ T7662] RDX: 0000200000000340 RSI: 000000008050640a RDI: 0000000000000003 [ 100.637278][ T7662] RBP: 00007f10c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.637288][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.637298][ T7662] R13: 00007f10ca616038 R14: 00007f10ca615fa0 R15: 00007fff6496a8d8 [ 100.637323][ T7662] [ 100.637339][ T7662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.786986][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 100.805195][ T994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.808906][ T994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.812446][ T994] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.816600][ T994] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.819825][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.827271][ T994] usb 7-1: config 0 descriptor?? [ 100.833661][ T7664] ufs: You didn't specify the type of your ufs filesystem [ 100.833661][ T7664] [ 100.833661][ T7664] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 100.833661][ T7664] [ 100.833661][ T7664] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 100.849970][ T7664] ufs: failed to set blocksize [ 100.866943][ T7664] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 100.928131][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 100.944400][ T7669] netlink: 344 bytes leftover after parsing attributes in process `syz.1.491'. [ 100.995473][ T7673] overlay: Unknown parameter 'uid<00000000000000016832' [ 101.450532][ T7659] input: syz1 as /devices/virtual/input/input10 [ 101.486159][ T994] usbhid 7-1:0.0: can't add hid device: -71 [ 101.488705][ T994] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 101.493128][ T994] usb 7-1: USB disconnect, device number 11 [ 102.057495][ T7682] syzkaller0: entered promiscuous mode [ 102.060085][ T7682] syzkaller0: entered allmulticast mode [ 102.071738][ T7675] comedi comedi3: reset error (fatal) [ 102.216772][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 102.262296][ T7613] imon:send_packet: task interrupted [ 102.265461][ T7613] imon:send_packet: packet tx failed (-512) [ 102.271947][ T5930] usb 5-1: USB disconnect, device number 8 [ 102.277008][ T7613] imon:vfd_write: send packet #0 failed [ 102.446268][ T7698] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 102.559431][ T7701] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 102.708195][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.262364][ T7712] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 103.290422][ T7712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.297276][ T7712] __nla_validate_parse: 2 callbacks suppressed [ 103.297293][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 103.314919][ T7712] bond1: (slave geneve2): making interface the new active one [ 103.319814][ T7712] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.338824][ T40] audit: type=1400 audit(1773524013.619:507): avc: denied { ioctl } for pid=7711 comm="syz.0.506" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.526398][ T7717] overlayfs: failed to resolve './file0': -2 [ 103.638831][ T7722] can0: slcan on ptm0. [ 103.722013][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 103.892030][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.043114][ T50] usb 6-1: config 0 has no interfaces? [ 104.045773][ T50] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.049064][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.055892][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.060529][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.061786][ T50] usb 6-1: SerialNumber: syz [ 104.064061][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.065820][ T50] usb 6-1: config 0 descriptor?? [ 104.071076][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.073898][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.223056][ T7741] xt_cluster: node mask cannot exceed total number of nodes [ 104.265439][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 104.272376][ T50] usb 6-1: USB disconnect, device number 5 [ 104.310555][ T1167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.388514][ T1167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.415450][ T7721] can0 (unregistered): slcan off ptm0. [ 104.444747][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.447842][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.451028][ T7732] bridge_slave_0: entered allmulticast mode [ 104.455200][ T7732] bridge_slave_0: entered promiscuous mode [ 104.459943][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.463649][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.466850][ T7732] bridge_slave_1: entered allmulticast mode [ 104.470786][ T7732] bridge_slave_1: entered promiscuous mode [ 104.511799][ T1167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.522510][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.529123][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.558057][ T7732] team0: Port device team_slave_0 added [ 104.563600][ T7732] team0: Port device team_slave_1 added [ 104.592944][ T1167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.612586][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.615058][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.624699][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.631014][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.634115][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.645439][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.681310][ T7732] hsr_slave_0: entered promiscuous mode [ 104.684834][ T7732] hsr_slave_1: entered promiscuous mode [ 104.687794][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 104.690081][ T7732] Cannot create hsr debugfs directory [ 104.761317][ T1167] bridge_slave_1: left allmulticast mode [ 104.761822][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 104.764297][ T1167] bridge_slave_1: left promiscuous mode [ 104.769893][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.774465][ T1167] bridge_slave_0: left allmulticast mode [ 104.776755][ T1167] bridge_slave_0: left promiscuous mode [ 104.779342][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.920644][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.926823][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.932547][ T1167] bond0 (unregistering): Released all slaves [ 104.984421][ T7760] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 105.041173][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 105.062020][ T5931] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 105.062877][ T7732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.064279][ T40] audit: type=1400 audit(1773524015.349:508): avc: denied { map } for pid=7762 comm="syz.1.515" path="socket:[24352]" dev="sockfs" ino=24352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.080766][ T7732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.110953][ T7732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.117453][ T7770] overlayfs: failed to resolve './file0': -2 [ 105.154616][ T7732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.292994][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.295810][ T40] audit: type=1326 audit(1773524015.579:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.518" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ca39c799 code=0x0 [ 105.302323][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.311654][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.314966][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.326388][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.329327][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.361273][ T40] audit: type=1400 audit(1773524015.639:510): avc: denied { connect } for pid=7790 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.371228][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.398211][ T5931] block nbd1: Receive control failed (result -32) [ 105.402663][ T5936] block nbd1: Receive control failed (result -32) [ 105.406038][ T7773] block nbd1: shutting down sockets [ 105.416944][ T1167] hsr_slave_0: left promiscuous mode [ 105.419884][ T1167] hsr_slave_1: left promiscuous mode [ 105.425780][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.428977][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.437331][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.439907][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.446711][ T1167] veth1_macvtap: left promiscuous mode [ 105.448850][ T1167] veth0_macvtap: left promiscuous mode [ 105.450884][ T1167] veth1_vlan: left promiscuous mode [ 105.454140][ T1167] veth0_vlan: left promiscuous mode [ 105.584808][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 105.593275][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 105.718434][ T7811] FAULT_INJECTION: forcing a failure. [ 105.718434][ T7811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.725506][ T7811] CPU: 3 UID: 0 PID: 7811 Comm: syz.2.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.725524][ T7811] Tainted: [L]=SOFTLOCKUP [ 105.725528][ T7811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.725534][ T7811] Call Trace: [ 105.725538][ T7811] [ 105.725543][ T7811] dump_stack_lvl+0x100/0x190 [ 105.725570][ T7811] should_fail_ex.cold+0x5/0xa [ 105.725585][ T7811] _copy_to_user+0x32/0xd0 [ 105.725628][ T7811] simple_read_from_buffer+0xcb/0x170 [ 105.725648][ T7811] proc_fail_nth_read+0x1af/0x230 [ 105.725663][ T7811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.725680][ T7811] ? rw_verify_area+0xce/0x6d0 [ 105.725694][ T7811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.725709][ T7811] vfs_read+0x1e4/0xb30 [ 105.725727][ T7811] ? __pfx_vfs_read+0x10/0x10 [ 105.725743][ T7811] ? __fget_files+0x215/0x3d0 [ 105.725757][ T7811] ? __fget_files+0x21f/0x3d0 [ 105.725772][ T7811] ksys_read+0x12a/0x250 [ 105.725789][ T7811] ? __pfx_ksys_read+0x10/0x10 [ 105.725809][ T7811] do_syscall_64+0x106/0xf80 [ 105.725827][ T7811] ? clear_bhb_loop+0x40/0x90 [ 105.725841][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.725853][ T7811] RIP: 0033:0x7faaf795cfce [ 105.725862][ T7811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.725873][ T7811] RSP: 002b:00007faaf8878fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.725884][ T7811] RAX: ffffffffffffffda RBX: 00007faaf88796c0 RCX: 00007faaf795cfce [ 105.725891][ T7811] RDX: 000000000000000f RSI: 00007faaf88790a0 RDI: 0000000000000003 [ 105.725897][ T7811] RBP: 00007faaf8879090 R08: 0000000000000000 R09: 0000000000000000 [ 105.725903][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.725909][ T7811] R13: 00007faaf7c16038 R14: 00007faaf7c15fa0 R15: 00007ffed3d0a388 [ 105.725924][ T7811] [ 105.840837][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.841561][ T7820] overlayfs: failed to resolve './file0': -2 [ 106.012200][ T7842] tmpfs: Unknown parameter 'nĘ' [ 106.021255][ T40] audit: type=1326 audit(1773524016.299:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.032386][ T40] audit: type=1326 audit(1773524016.299:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.039789][ T40] audit: type=1326 audit(1773524016.299:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.051290][ T40] audit: type=1326 audit(1773524016.299:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.059083][ T40] audit: type=1326 audit(1773524016.299:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.069846][ T40] audit: type=1326 audit(1773524016.309:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.077193][ T40] audit: type=1326 audit(1773524016.309:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.2.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf799c799 code=0x50000 [ 106.093494][ T7732] veth0_vlan: entered promiscuous mode [ 106.101189][ T7732] veth1_vlan: entered promiscuous mode [ 106.107987][ T7848] FAULT_INJECTION: forcing a failure. [ 106.107987][ T7848] name failslab, interval 1, probability 0, space 0, times 0 [ 106.113485][ T7848] CPU: 3 UID: 0 PID: 7848 Comm: syz.1.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.113503][ T7848] Tainted: [L]=SOFTLOCKUP [ 106.113507][ T7848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.113514][ T7848] Call Trace: [ 106.113518][ T7848] [ 106.113522][ T7848] dump_stack_lvl+0x100/0x190 [ 106.113543][ T7848] should_fail_ex.cold+0x5/0xa [ 106.113558][ T7848] should_failslab+0xc2/0x120 [ 106.113569][ T7848] __kmalloc_cache_noprof+0x7a/0x6f0 [ 106.113583][ T7848] ? p9_fid_create+0x45/0x460 [ 106.113626][ T7848] ? __pfx_v9fs_fid_find_inode+0x10/0x10 [ 106.113647][ T7848] ? v9fs_fid_find+0x1d7/0x380 [ 106.113665][ T7848] p9_fid_create+0x45/0x460 [ 106.113680][ T7848] p9_client_attach+0x91/0x2b0 [ 106.113697][ T7848] ? __pfx_p9_client_attach+0x10/0x10 [ 106.113712][ T7848] ? v9fs_fid_lookup+0x4cb/0xec0 [ 106.113732][ T7848] v9fs_fid_lookup+0x96f/0xec0 [ 106.113751][ T7848] v9fs_vfs_lookup+0x1a1/0x5b0 [ 106.113764][ T7848] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 106.113777][ T7848] ? lockdep_init_map_type+0x5c/0x250 [ 106.113789][ T7848] ? lockdep_init_map_type+0x5c/0x250 [ 106.113802][ T7848] __lookup_slow+0x251/0x460 [ 106.113817][ T7848] ? __pfx___lookup_slow+0x10/0x10 [ 106.113844][ T7848] lookup_slow+0x50/0x70 [ 106.113858][ T7848] path_lookupat+0x5e8/0xc40 [ 106.113877][ T7848] filename_lookup+0x202/0x590 [ 106.113894][ T7848] ? stack_depot_save_flags+0x27/0x9d0 [ 106.113907][ T7848] ? __pfx_filename_lookup+0x10/0x10 [ 106.113925][ T7848] ? kasan_save_stack+0x3f/0x50 [ 106.113955][ T7848] filename_linkat+0x145/0x640 [ 106.113971][ T7848] ? __pfx_filename_linkat+0x10/0x10 [ 106.113988][ T7848] ? do_getname+0x191/0x390 [ 106.114003][ T7848] __x64_sys_link+0x81/0xb0 [ 106.114022][ T7848] do_syscall_64+0x106/0xf80 [ 106.114036][ T7848] ? clear_bhb_loop+0x40/0x90 [ 106.114049][ T7848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.114060][ T7848] RIP: 0033:0x7f10ca39c799 [ 106.114083][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.114094][ T7848] RSP: 002b:00007f10c85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 106.114105][ T7848] RAX: ffffffffffffffda RBX: 00007f10ca615fa0 RCX: 00007f10ca39c799 [ 106.114112][ T7848] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000001c0 [ 106.114119][ T7848] RBP: 00007f10c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.114125][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.114131][ T7848] R13: 00007f10ca616038 R14: 00007f10ca615fa0 R15: 00007fff6496a8d8 [ 106.114146][ T7848] [ 106.123815][ T7850] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 106.138289][ T7732] veth0_macvtap: entered promiscuous mode [ 106.138493][ T5936] Bluetooth: hci4: command tx timeout [ 106.244542][ T7732] veth1_macvtap: entered promiscuous mode [ 106.259263][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.265933][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.272412][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.278328][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.281196][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.289879][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.348196][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.356820][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.376558][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.381556][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.444304][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.464762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.594086][ T7863] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 106.606244][ T5936] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 106.703125][ T7868] overlayfs: failed to resolve './file0': -2 [ 106.774576][ T7870] syzkaller0: refused to change device tx_queue_len [ 106.788313][ T7870] ip6erspan0: entered promiscuous mode [ 107.020588][ T7874] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 107.335108][ T7892] overlayfs: failed to resolve './file1': -2 [ 107.391783][ T5995] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 107.394436][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 107.460394][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 107.491892][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.522181][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 107.534221][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 107.558251][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.561148][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 107.564161][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.569488][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.575810][ T5995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.578720][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.585538][ T5995] usb 6-1: config 0 descriptor?? [ 107.769323][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 107.892359][ T7925] syzkaller0: entered promiscuous mode [ 107.895722][ T7925] syzkaller0: entered allmulticast mode [ 108.171394][ T7926] kvm_intel: kvm [7924]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4905 [ 108.208340][ T7882] input: syz1 as /devices/virtual/input/input11 [ 108.211795][ T5936] Bluetooth: hci4: command tx timeout [ 108.238890][ T7926] kvm: kvm [7924]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1b00 [ 108.240640][ T5995] usbhid 6-1:0.0: can't add hid device: -71 [ 108.248266][ T5995] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.259452][ T5995] usb 6-1: USB disconnect, device number 6 [ 108.521841][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.875046][ T7955] MINIX-fs: unable to read superblock [ 109.809430][ T7962] syzkaller0: refused to change device tx_queue_len [ 109.822530][ T7962] ip6erspan0: entered promiscuous mode [ 109.931849][ T7964] FAULT_INJECTION: forcing a failure. [ 109.931849][ T7964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.937677][ T7964] CPU: 2 UID: 0 PID: 7964 Comm: syz.1.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.937705][ T7964] Tainted: [L]=SOFTLOCKUP [ 109.937711][ T7964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.937722][ T7964] Call Trace: [ 109.937729][ T7964] [ 109.937737][ T7964] dump_stack_lvl+0x100/0x190 [ 109.937780][ T7964] should_fail_ex.cold+0x5/0xa [ 109.937799][ T7964] ? drm_open+0x1a0/0x3e0 [ 109.937828][ T7964] should_fail_alloc_page+0xeb/0x140 [ 109.937850][ T7964] prepare_alloc_pages+0x1f0/0x5f0 [ 109.937875][ T7964] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 109.937903][ T7964] ? stack_trace_save+0x8e/0xc0 [ 109.937927][ T7964] ? __pfx_stack_trace_save+0x10/0x10 [ 109.937951][ T7964] ? stack_depot_save_flags+0x27/0x9d0 [ 109.937976][ T7964] ? irqentry_exit+0x180/0x670 [ 109.938005][ T7964] ? lockdep_hardirqs_on+0x78/0x100 [ 109.938028][ T7964] ? irqentry_exit+0x180/0x670 [ 109.938051][ T7964] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.938084][ T7964] ? pt_compute_best_pgsize+0x196/0x2e0 [ 109.938110][ T7964] ? clflush_cache_range+0x68/0x90 [ 109.938132][ T7964] ? __map_range_leaf+0x94e/0xbd0 [ 109.938181][ T7964] __folio_alloc_noprof+0x13/0x2f0 [ 109.938209][ T7964] iommu_alloc_pages_node_sz+0x11e/0x320 [ 109.938236][ T7964] ? __pfx_iommu_alloc_pages_node_sz+0x10/0x10 [ 109.938263][ T7964] ? _pt_iter_first.constprop.0+0x29b/0x5f0 [ 109.938292][ T7964] __map_range+0x396/0xf10 [ 109.938318][ T7964] ? __pfx___map_range+0x10/0x10 [ 109.938349][ T7964] ? _pt_iter_first.constprop.0+0x29b/0x5f0 [ 109.938377][ T7964] __map_range+0x772/0xf10 [ 109.938404][ T7964] ? __pfx___map_range+0x10/0x10 [ 109.938431][ T7964] ? kernel_text_address+0x8d/0x100 [ 109.938451][ T7964] ? __kernel_text_address+0xd/0x30 [ 109.938476][ T7964] ? _pt_iter_first.constprop.0+0x29b/0x5f0 [ 109.938503][ T7964] __map_range+0x772/0xf10 [ 109.938530][ T7964] ? __pfx___map_range+0x10/0x10 [ 109.938560][ T7964] ? pt_compute_best_pgsize+0x196/0x2e0 [ 109.938584][ T7964] ? iommu_dma_map_sg+0xacd/0x1230 [ 109.938602][ T7964] ? __dma_map_sg_attrs+0x1e9/0x5f0 [ 109.938631][ T7964] pt_iommu_vtdss_map_pages+0x471/0xb80 [ 109.938663][ T7964] ? __pfx_pt_iommu_vtdss_map_pages+0x10/0x10 [ 109.938694][ T7964] ? __lock_acquire+0x4a5/0x2630 [ 109.938732][ T7964] ? iommu_pgsize+0x2b8/0x320 [ 109.938766][ T7964] iommu_map_nosync+0x33d/0x740 [ 109.938797][ T7964] ? __pfx_iommu_map_nosync+0x10/0x10 [ 109.938822][ T7964] ? lock_acquire+0x1cf/0x380 [ 109.938850][ T7964] ? find_held_lock+0x2b/0x80 [ 109.938873][ T7964] ? iommu_map_sg+0x600/0x9f0 [ 109.938897][ T7964] ? iommu_map_sg+0x600/0x9f0 [ 109.938924][ T7964] iommu_map_sg+0x1c1/0x9f0 [ 109.938956][ T7964] iommu_dma_map_sg+0xb03/0x1230 [ 109.938990][ T7964] __dma_map_sg_attrs+0x1e9/0x5f0 [ 109.939020][ T7964] dma_map_sgtable+0x78/0x100 [ 109.939050][ T7964] system_heap_map_dma_buf+0x66/0xf0 [ 109.939077][ T7964] dma_buf_map_attachment+0x161/0x5d0 [ 109.939103][ T7964] dma_buf_map_attachment_unlocked+0x9e/0x160 [ 109.939128][ T7964] drm_gem_prime_import_dev+0x13d/0x420 [ 109.939156][ T7964] virtgpu_gem_prime_import+0x16c/0x7e0 [ 109.939174][ T7964] ? __pfx___mutex_lock+0x10/0x10 [ 109.939199][ T7964] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 109.939223][ T7964] ? do_raw_spin_lock+0x128/0x260 [ 109.939248][ T7964] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.939273][ T7964] ? __pfx_virtgpu_gem_prime_import+0x10/0x10 [ 109.939291][ T7964] drm_gem_prime_fd_to_handle+0x1a3/0x5e0 [ 109.939319][ T7964] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 109.939345][ T7964] drm_ioctl_kernel+0x1f3/0x3e0 [ 109.939363][ T7964] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 109.939389][ T7964] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 109.939414][ T7964] drm_ioctl+0x5e6/0xc60 [ 109.939441][ T7964] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 109.939467][ T7964] ? __pfx_drm_ioctl+0x10/0x10 [ 109.939495][ T7964] ? selinux_file_ioctl+0x139/0x290 [ 109.939519][ T7964] ? selinux_file_ioctl+0xb4/0x290 [ 109.939545][ T7964] ? __pfx_drm_ioctl+0x10/0x10 [ 109.939564][ T7964] __x64_sys_ioctl+0x18e/0x210 [ 109.939594][ T7964] do_syscall_64+0x106/0xf80 [ 109.939615][ T7964] ? clear_bhb_loop+0x40/0x90 [ 109.939654][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.939671][ T7964] RIP: 0033:0x7f10ca39c799 [ 109.939686][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.939703][ T7964] RSP: 002b:00007f10c85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.939720][ T7964] RAX: ffffffffffffffda RBX: 00007f10ca615fa0 RCX: 00007f10ca39c799 [ 109.939731][ T7964] RDX: 00002000000000c0 RSI: 00000000c00c642e RDI: 0000000000000005 [ 109.939741][ T7964] RBP: 00007f10c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.939751][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.939761][ T7964] R13: 00007f10ca616038 R14: 00007f10ca615fa0 R15: 00007fff6496a8d8 [ 109.939786][ T7964] [ 110.041855][ T5995] ------------[ cut here ]------------ [ 110.159578][ T5995] [CRTC:37:crtc-0] vblank wait timed out [ 110.162299][ T5995] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#1: kworker/1:4/5995 [ 110.168362][ T5995] Modules linked in: [ 110.171337][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.176272][ T5995] Tainted: [L]=SOFTLOCKUP [ 110.178638][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.183617][ T5995] Workqueue: events drm_fb_helper_damage_work [ 110.186259][ T5995] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 110.190762][ T5995] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d c8 44 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 13 62 65 fc e9 7c fe ff ff e8 99 [ 110.199707][ T5995] RSP: 0018:ffffc90003b876f0 EFLAGS: 00010246 [ 110.202502][ T5995] RAX: 0000000000000000 RBX: ffff888100be0040 RCX: 1ffff1102017c023 [ 110.205959][ T5995] RDX: ffff8880284867a0 RSI: 0000000000000025 RDI: ffffffff90e49de0 [ 110.209457][ T5995] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 110.213009][ T5995] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 110.216581][ T5995] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888036784900 [ 110.220121][ T5995] FS: 0000000000000000(0000) GS:ffff8880d6442000(0000) knlGS:0000000000000000 [ 110.224211][ T5995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.227124][ T5995] CR2: 0000200000001000 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 110.230741][ T5995] Call Trace: [ 110.232347][ T5995] [ 110.233710][ T5995] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 110.237058][ T5995] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.239710][ T5995] ? lockdep_hardirqs_on+0x78/0x100 [ 110.241804][ T7943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.242095][ T5995] ? __pfx_autoremove_wake_function+0x10/0x10 [ 110.248505][ T5995] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 110.252104][ T5995] drm_atomic_helper_commit_tail+0xff/0x130 [ 110.254907][ T5995] commit_tail+0x338/0x430 [ 110.256949][ T5995] drm_atomic_helper_commit+0x303/0x380 [ 110.256976][ T5995] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 110.256998][ T5995] drm_atomic_commit+0x230/0x300 [ 110.257018][ T5995] ? __pfx_drm_atomic_commit+0x10/0x10 [ 110.257038][ T5995] ? __pfx___drm_printfn_info+0x10/0x10 [ 110.257065][ T5995] ? modeset_lock+0x114/0x6d0 [ 110.257099][ T5995] drm_atomic_helper_dirtyfb+0x603/0x790 [ 110.257132][ T5995] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 110.257172][ T5995] ? do_raw_spin_lock+0x128/0x260 [ 110.257203][ T5995] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 110.257230][ T5995] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 110.257258][ T5995] drm_fb_helper_damage_work+0x348/0x640 [ 110.257282][ T5995] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 110.257303][ T5995] ? rcu_is_watching+0x12/0xc0 [ 110.257330][ T5995] process_one_work+0xa23/0x19a0 [ 110.257363][ T5995] ? __pfx_process_one_work+0x10/0x10 [ 110.257391][ T5995] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 110.257413][ T5995] worker_thread+0x5ef/0xe50 [ 110.257446][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 110.257469][ T5995] ? kthread+0x13a/0x450 [ 110.257486][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 110.257504][ T5995] kthread+0x370/0x450 [ 110.257520][ T5995] ? __pfx_kthread+0x10/0x10 [ 110.257540][ T5995] ret_from_fork+0x754/0xd80 [ 110.257560][ T5995] ? __pfx_ret_from_fork+0x10/0x10 [ 110.257601][ T5995] ? __switch_to+0x7b4/0x1120 [ 110.257627][ T5995] ? __pfx_kthread+0x10/0x10 [ 110.257647][ T5995] ret_from_fork_asm+0x1a/0x30 [ 110.257684][ T5995] [ 110.257695][ T5995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.257711][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.257737][ T5995] Tainted: [L]=SOFTLOCKUP [ 110.257744][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.257757][ T5995] Workqueue: events drm_fb_helper_damage_work [ 110.257777][ T5995] Call Trace: [ 110.257783][ T5995] [ 110.257790][ T5995] dump_stack_lvl+0x100/0x190 [ 110.257820][ T5995] vpanic+0x552/0x970 [ 110.257839][ T5995] ? __pfx_vpanic+0x10/0x10 [ 110.257864][ T5995] panic+0xd1/0xe0 [ 110.257881][ T5995] ? __pfx_panic+0x10/0x10 [ 110.257906][ T5995] ? check_panic_on_warn+0x1f/0x90 [ 110.257935][ T5995] check_panic_on_warn.cold+0x19/0x34 [ 110.257957][ T5995] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 110.257976][ T5995] __warn.cold+0x191/0x348 [ 110.258000][ T5995] __report_bug+0x296/0x3d0 [ 110.258020][ T5995] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 110.258044][ T5995] ? __pfx___report_bug+0x10/0x10 [ 110.258063][ T5995] ? lockdep_hardirqs_on+0x78/0x100 [ 110.258101][ T5995] report_bug_entry+0xe1/0x290 [ 110.258124][ T5995] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 110.258145][ T5995] handle_bug+0x1cd/0x2a0 [ 110.258172][ T5995] exc_invalid_op+0x17/0x50 [ 110.258198][ T5995] asm_exc_invalid_op+0x1a/0x20 [ 110.258215][ T5995] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 110.258239][ T5995] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d c8 44 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 13 62 65 fc e9 7c fe ff ff e8 99 [ 110.258256][ T5995] RSP: 0018:ffffc90003b876f0 EFLAGS: 00010246 [ 110.258270][ T5995] RAX: 0000000000000000 RBX: ffff888100be0040 RCX: 1ffff1102017c023 [ 110.258284][ T5995] RDX: ffff8880284867a0 RSI: 0000000000000025 RDI: ffffffff90e49de0 [ 110.258296][ T5995] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 110.258307][ T5995] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 110.258318][ T5995] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888036784900 [ 110.258350][ T5995] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 110.258372][ T5995] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.258393][ T5995] ? lockdep_hardirqs_on+0x78/0x100 [ 110.258421][ T5995] ? __pfx_autoremove_wake_function+0x10/0x10 [ 110.258449][ T5995] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 110.258479][ T5995] drm_atomic_helper_commit_tail+0xff/0x130 [ 110.258501][ T5995] commit_tail+0x338/0x430 [ 110.258529][ T5995] drm_atomic_helper_commit+0x303/0x380 [ 110.258550][ T5995] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 110.258572][ T5995] drm_atomic_commit+0x230/0x300 [ 110.258589][ T5995] ? __pfx_drm_atomic_commit+0x10/0x10 [ 110.258606][ T5995] ? __pfx___drm_printfn_info+0x10/0x10 [ 110.258630][ T5995] ? modeset_lock+0x114/0x6d0 [ 110.258661][ T5995] drm_atomic_helper_dirtyfb+0x603/0x790 [ 110.258691][ T5995] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 110.258730][ T5995] ? do_raw_spin_lock+0x128/0x260 [ 110.258759][ T5995] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 110.258785][ T5995] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 110.258814][ T5995] drm_fb_helper_damage_work+0x348/0x640 [ 110.258835][ T5995] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 110.258858][ T5995] ? rcu_is_watching+0x12/0xc0 [ 110.258883][ T5995] process_one_work+0xa23/0x19a0 [ 110.258915][ T5995] ? __pfx_process_one_work+0x10/0x10 [ 110.258943][ T5995] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 110.258966][ T5995] worker_thread+0x5ef/0xe50 [ 110.258993][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 110.259013][ T5995] ? kthread+0x13a/0x450 [ 110.259031][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 110.259048][ T5995] kthread+0x370/0x450 [ 110.259066][ T5995] ? __pfx_kthread+0x10/0x10 [ 110.259086][ T5995] ret_from_fork+0x754/0xd80 [ 110.259105][ T5995] ? __pfx_ret_from_fork+0x10/0x10 [ 110.259127][ T5995] ? __switch_to+0x7b4/0x1120 [ 110.259148][ T5995] ? __pfx_kthread+0x10/0x10 [ 110.259167][ T5995] ret_from_fork_asm+0x1a/0x30 [ 110.259200][ T5995] [ 110.260024][ T5995] Kernel Offset: disabled