last executing test programs: 1m1.698217394s ago: executing program 3 (id=126): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000840)='./file1\x00', 0x100, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000300)='./bus\x00') linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) unlink(&(0x7f0000000400)='./file0\x00') unlink(&(0x7f00000003c0)='./file1\x00') 1m1.62037776s ago: executing program 3 (id=127): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="930040cb", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) preadv(r2, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/182, 0xb6}], 0x37, 0xd6c40391, 0x0) 1m1.461095532s ago: executing program 3 (id=128): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/666], 0x24}, 0x1, 0x0, 0x0, 0x40000080}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x220380, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000014c0)={0x4, "ed388c54dd7cb8fcc648f4b95da2ac30bebbf8d4df1e3d86be43ef64c91aa2fc"}) read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r4, 0x2}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r2, 0x84, 0x25, &(0x7f0000000380)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x9f, 0x9}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000000340)={0x1, 0x44}, 0x8) 1m1.460784733s ago: executing program 3 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000100)='./file1\x00', 0x101400, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='autofs\x00', 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) open(&(0x7f0000000100)='./file1\x00', 0x101400, 0x12b) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='autofs\x00', 0x0, &(0x7f0000000380)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) 1m1.381223257s ago: executing program 3 (id=130): setns(0xc9, 0x80) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x4, @private1, 0x8}, 0x1c, 0x0}}], 0x1, 0x60040800) 56.930200997s ago: executing program 3 (id=174): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000840)='./file1\x00', 0x100, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000300)='./bus\x00') linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) unlink(&(0x7f0000000400)='./file0\x00') unlink(&(0x7f00000003c0)='./file1\x00') 56.871059528s ago: executing program 32 (id=174): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000840)='./file1\x00', 0x100, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000300)='./bus\x00') linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) unlink(&(0x7f0000000400)='./file0\x00') unlink(&(0x7f00000003c0)='./file1\x00') 34.160697041s ago: executing program 0 (id=432): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) read(0xffffffffffffffff, &(0x7f0000001380)=""/216, 0xd8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001480)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0xa8a4, 0x100000000, 0x0, 0x6, 0xf, 0x0, "777f0d0543002d89bd8c477dc928f53ffb7920a7ccf3631c06a972054726bd3833791d8d2fb971d8aa88d71327c212f4fb80f1dd7909c4f0af253c7d732d81dd", "d15cfcaddde8df557f4ff832478f479578e44d6932213631a9100dc94b12b6e23c871efa73af8b71b48659ebbc439428a9e43276d8d71315a4dcaa232f2fe8fd", "a1aea767e1d893b69cd404aca2db0a3de7e3bb5b5ab82ed93a764cc3b49f219c", [0xc, 0x7]}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100, 0x6, 0x2, 0x9, 0x7f, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000015c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001600)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001640)=ANY=[@ANYBLOB="034886dd010000000000140000006000002800082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000180)={0x20004, r4}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000240)=0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'ip6erspan0\x00', @random="e35eddd3e400"}) 34.029782396s ago: executing program 0 (id=434): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0803, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x2}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x8400, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_procfs(r0, &(0x7f0000000900)='stat\x00') socket$tipc(0x1e, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x9, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x5e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1e02, 0x2562}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x408f5) lseek(r5, 0x0, 0x4) 33.910618356s ago: executing program 0 (id=435): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000005e00816b00000000000000b20c00a2eefaf1a47463ed00800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fffffff}]}) r1 = syz_clone(0x2000111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0xffffffffffffffa8, &(0x7f00000000c0)={0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 32.98061358s ago: executing program 0 (id=439): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000040)) mkdir(&(0x7f0000001040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000001400)='./file0\x00') mkdir(&(0x7f0000000800)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='dir0/tracing_on\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) write$binfmt_format(r1, &(0x7f0000000940)='1\x00', 0x2) unlink(&(0x7f0000001440)='./file0\x00') link(&(0x7f0000001480)='./file1\x00', &(0x7f00000014c0)='./file0\x00') r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = socket$kcm(0x11, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000300), 0x4) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000380)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbbae50eaf07c3650596", 0x2b}, {&(0x7f0000000480)="0f56", 0x2}, {&(0x7f00000004c0)="6f735227c35b2d43", 0x8}], 0x3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYRESHEX=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020000002100020025bd8daaa2a3ccc3effcdf2b0210800340000005090000000108000d0003000091ed345bfc7161cc02"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4802) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000780), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000007c0)={0x80, 0x6, 0x2fb, 0x3, 0x0, 0x951, 0x0}) read$FUSE(r5, &(0x7f0000001500)={0x2020}, 0xffffffffffffffd5) r7 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) write(r7, &(0x7f0000000540)="18b47e350ee0414ef6416975098a8f6282fcf8ce2bbeff348cbfc71e33f0587c6031e738459a3d8f4e73d825f095f7ecda5f22f5bb13f0e2d9e47437ffac630664569e58b1797b936368ae350fc20e55b13f3d65eadfecc74808e2327c3b08c9b2264b58b1c4ad9703ae36b1cac10a34f1aa6d99d398e45d4b7c392d677096d8ec12894c770531825f967e591c2d3816f26b3647d08b5fa66ce7c5593822845844b51a7f0f8ed9e4c3fa7bc42ddcf1c1383d", 0xb2) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='logical_block_size\x00'}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f0000000100)=@str='active', 0x6) creat(&(0x7f0000000000)='dir0\x00', 0x0) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x10400, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) 32.910924987s ago: executing program 0 (id=440): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "f390"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x40000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x9a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2110028) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 32.599969649s ago: executing program 0 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000024c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002500)='./mnt\x00') r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x81, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="5a3fcb0cade8", 0x0, 0x800, 0x10064, 0xfffffffd, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) 32.586842781s ago: executing program 33 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000024c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002500)='./mnt\x00') r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0x81, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="5a3fcb0cade8", 0x0, 0x800, 0x10064, 0xfffffffd, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) 5.889605128s ago: executing program 5 (id=756): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./cgrp2\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) setuid(0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000800)=0xfffffffffffffffa) fcntl$setownex(r3, 0xf, &(0x7f0000000840)={0x2, r4}) close(r2) write(r1, &(0x7f0000000600)='+cpuset', 0x7) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000209000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r8) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f00002ab000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000440)="26640f55da0f93350f01c3b830010f00d00f787c003ef30f09f00fc0b80300360f01c526f30fc7750067ff36", 0x2c}], 0x1, 0x2, &(0x7f00000004c0)=[@dstype3={0x7, 0xa}], 0x1) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r9, 0xf1334f35af1741f5, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000000) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000900)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 3.899317605s ago: executing program 5 (id=766): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1a5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x4010aa0a, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.840819117s ago: executing program 4 (id=767): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b19ccccf84f531d9ec214627c11430c1", 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xf0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000140), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000300)=0x4, 0x4) bind$xdp(r2, &(0x7f0000000340)={0x2c, 0x4, 0x2, 0xfffffffd, 0x0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000104d0bff00000008000000000000004a", @ANYBLOB="7c90f320c1f15cd704a419438777c9d7b707e9277508b711c760e43046f5a2691769190c1037d9d61d0cd78a66d0b10d6110c671064e0fc3587c52e8f6c0eaf7f753a9190ffa5b1b1ba5805e4c240583c3c18e1f3f90b068d81477e6f3f3f1b1047486c0a6418172dba6a46bc790", @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0xcc014}, 0x815) 3.840484234s ago: executing program 4 (id=768): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@flakey={0x0, 0x8, 0x0, 0x70, 'flakey\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1024'}, 0x20, 0x3, 0x20, 0x1, ' 1 drop_writes'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000640)='./dm0\x00', 0x6180, r2) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000680)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000006c0)="01", 0x1, 0x0) 3.790952339s ago: executing program 5 (id=769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="41bef67646345fafa84d6ab4f1c189e553aa6d81ed48d01545fcd1b797eef994e4a17c53d7a785d9d3b3d9677776d9dda1e1c211ecbddc103998e865e9dc1ad896", 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/devices/system/memory/memory10/state/../file0\x00', 0x1ee) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000400)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000980)={r1}, &(0x7f00000009c0)=ANY=[], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r2, &(0x7f0000000240)='off', 0x3) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x25]}}]}) ioctl$SNDCTL_FM_4OP_ENABLE(r3, 0x4004510f, &(0x7f0000000040)=0x5) syz_open_dev$hidraw(&(0x7f00000002c0), 0xfffffdffffffffce, 0x101080) 3.710586953s ago: executing program 5 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x3f, &(0x7f00000002c0)=0x2, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000600000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff0000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010063030000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000fd00000000000000000500000005"], 0xf8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x101, 0x0, 0x4, 0xfffffffc, 0x5}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x5, 0xfffffffe, 0x1, 0x345}}]}]}}}]}, 0x68}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x180}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x1, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000900), 0x205, 0x8401) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000940), 0x7, 0x0) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000980)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000009c0)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/4096, 0x79c5}], 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x4003, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r6, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/116, 0x74}, {0x0}], 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x3, 0x7, 0x8d6c, 0x0, 0x3, 0x4}) socket(0x9, 0x800, 0x6) r10 = openat$md(0xffffffffffffff9c, &(0x7f0000000780)={'/dev/md', @named={'_syz', 0x0, '0'}}, 0x4000, 0x0) ioctl$IOC_PR_RELEASE(r10, 0x401070ca, &(0x7f0000000740)={0xd5b, 0x9}) openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x101001, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000000140)="b0", 0x1, 0x40811, &(0x7f0000000180)={0xa, 0x4e23, 0x1ff, @loopback, 0x2}, 0x1c) 3.709879662s ago: executing program 4 (id=771): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x22102, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e24, 0xa8, @loopback, 0x401}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x214, 0x5, 0x6, 0x101, 0x70bd27, 0x7, {0x5}, [@generic="6efa69201eab5e3b93721f3b3c649222b046e3576a2be546966c7a1f512cfaed075d5c388ecdcb74de98f7cb34cddc729178d4a930333afef37efe1cfed019a7a1fbfadf66d312233d58e202638fdbe3c9a701b4c23a53", @generic="ee4c621fe01871af8dbc0bd72966e42333e3aa76d6d3f31bf628b2be6c618a8a6061e06c61d748fc321ba600bb1f01c394b9765e085410696851242cee5feb8f93ff8c5799489a49592809930616f1c55f740044c3f145630cde8170fd5a2017522246e00481f304ceec7505688776f0085d52e0d2534c734672f55b0a1c62e8f83e140449a0d1d7d21513ed49497669d06161328a1ff678adb48e168a2921f976a606639a5c0d04", @typed={0x8, 0x97, 0x0, 0x0, @u32=0x6}, @generic="a9564b64fd1e25bdee3034c308f224afad4de8423d2578714b4774009dd521052f0ad8771010c52ed172ffb2e6b81c05b3edc03e0378493a9af9277119e91f996aa3701119ddfea637b9e7c5557527ebcf3ef0577dddcfe99ca1ec9ff67d3d1a847fd41c516e62b3ccfabd463640d1e8ea7b2f125cab7da7f1d84a4df13baad67eccfdb9fcaa9e6559ca4905eab771bacdb710fff7da4b7f864eebc6d22c58ea30f97612d18b6a5c315ceb7c15662ef07b4e6846e68b74e6503d05509a80f46f6ac1e1784d1a56d64902c28bb1d44b53ca438901bcbbca078d63f12c422d6ff75a3798b55fac0d5d0e36f3b935d8e73eff1a76144e7267"]}, 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x8089) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newrule={0x30, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x30}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000002c0)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x1c) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000007c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000800)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000840)={@local, 0x200}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000880)={@my=0x1, 0x7fff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x200100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x10) 3.699615511s ago: executing program 1 (id=772): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x0, r1}) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a070000003f7a7f1de20000000000000081b80000", 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x32) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xa, 0x13, 0x1007c, 0x0}) 3.258057356s ago: executing program 4 (id=774): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x4000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty, @local, @void, {@generic={0x8863}}}, 0x0) 2.810973269s ago: executing program 5 (id=779): syz_open_dev$ublk_chdev(&(0x7f0000000a80), 0x0, 0x127880) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r0, &(0x7f0000000a40)="5c783031303230333034203230303030303030303020302030dd197fa692f9ec327d", 0x22) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000007c0)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f0000000840)=""/157, 0x9d) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000900)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) shutdown(r1, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x3) r3 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000180)="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", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000700)={r4, 0x1f}, &(0x7f0000000740)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.599596922s ago: executing program 4 (id=780): r0 = socket$igmp(0x2, 0x3, 0x2) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x11}, 0x2, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x1, {}, {0xee00}, 0x46b1, 0xa}) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=@newpolicy={0x2ac, 0x13, 0x1, 0x70bd29, 0x25dfdbfd, {{@in=@empty, @in=@multicast1, 0x4e20, 0x5, 0x4e22, 0xfffc, 0x2, 0x0, 0x0, 0x0, r2, r3}, {0x2, 0x3c95, 0x2, 0xffffffff80000000, 0x8, 0x7, 0x3, 0x101}, {0x4, 0x327c, 0x2, 0x6}, 0x65, 0x0, 0x1, 0x0, 0x3, 0x1}, [@algo_auth={0xda, 0x1, {{'rmd160\x00'}, 0x490, "762e5c0030840e514a9d7aa876877088cf77882f795893c22fa1b39309aa5264f89405f0fc0b2561875c05ff7c77223a0af6d0b8bbaedbbc55fed1836b6fd873f4bf27b2e24debcbfe22f45b96d83e1b19155983f1d27c18855fafc42d219d7d71a55c01b05071d07d52cb17bdb9682d1392f853beb06cd422f83895a37db2cb7fd922e1389d4467fc5d4dba3fbe47535422"}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2c, 0x400}}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c, 0x5, 0x0, 0x3507, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3507, 0x7c8b4c9971d31f1a, 0xa}]}, @mark={0xc, 0x15, {0x35075b, 0x9}}, @lastused={0xc, 0xf, 0x4}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xdc, 0x3}}]}, 0x2ac}}, 0x4000) r4 = signalfd(r1, &(0x7f0000000480)={[0x8]}, 0x8) write$P9_RLINK(r4, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x4001, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000540)={0x0, r5, r1, 0x6, 0x7, '\x00', {0x7b, 0x7ff, 0x1ff, 0x8, 0x7, 0x851b, 0x771, 0xfffffffffffffffd, {0x2, 0x3363}, {0x4, 0x2}, {0x64f, 0x4}, 0x6, 0x80000000, 0xfff, 0x8, 0x6, 0xf, 0x4, 0x6, 0x4975, 0x0, '\x00', 0xd, 0x4dbf0cca, 0x5, 0xfff2}}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000000740)=0xd29a) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x28200, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) fsetxattr$security_ima(r1, &(0x7f00000008c0), &(0x7f0000000900)=@md5={0x1, "9fdec9416447df4183ca9ce92ac1a4b7"}, 0x11, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xa, 0x800, 0x8001, &(0x7f0000000940)={0xffffffffffffffff}) shutdown(r7, 0x1) write$rfkill(r4, &(0x7f0000000980)={0x1, 0x7, 0x2, 0x1, 0x1}, 0x8) connect$unix(r4, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000a40)={r8, 0xf}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read(r1, &(0x7f0000000a80)=""/114, 0x72) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) ioctl(r5, 0x9, &(0x7f0000000b00)) recvfrom$inet(r4, &(0x7f0000000b40)=""/99, 0x63, 0x62, &(0x7f0000000bc0)={0x2, 0x4e20, @private=0xa010102}, 0x10) pipe2(&(0x7f0000000c00)={0xffffffffffffffff}, 0x1800) ioctl$HIDIOCGSTRING(r9, 0x81044804, &(0x7f0000000c40)={0x25, "9d7b02defc94dc6f5e6a288953400067dc39c0d40591644ce696e0ff0b0a6995e56f97b9c8"}) 2.49863281s ago: executing program 4 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000008c0)={r2, 0x0, 0x30}, &(0x7f0000000900)={'enc=', 'pkcs1', ' hash=', {'sha512-arm64\x00'}}, 0x0, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, 0x0, 0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f0000000c00)='\v', 0x1) syz_usb_ep_read(r3, 0x1, 0xa1, &(0x7f0000000c40)=""/161) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000d00), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000d40)={0xfffffffa, 0x6, 0x0, 'queue1\x00', 0x5}) writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000e40)="268292", 0xff95}], 0x1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40045b0a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310327bd7000000000000900000008000300", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x26040011}, 0x4004000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) setresuid(0x0, 0xee00, 0xee01) write(r9, &(0x7f00000002c0)='1', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) 2.491350207s ago: executing program 5 (id=782): r0 = socket$inet(0x2, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7d, 0x4) shutdown(r0, 0x0) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r1) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x55) keyctl$unlink(0x9, r2, r1) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x34, 0x65, 0x38, 0x66, 0x30, 0x38, 0x31, 0x35, 0x457887045175b29a, 0x31, 0x63, 0x61, 0x37, 0x37, 0x36, 0x36]}, &(0x7f0000000380)={0x0, "b358e056f419e19a2f6bb6551b2dc1d9b7951bebf91abc0e9684df98b78a694d87bab74ad695bfd3310dce7a28fa5e0c59f73ecb079313f02f582a18edf78a29", 0x2e}, 0x48, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x3) fgetxattr(r5, &(0x7f0000000300)=ANY=[], 0x0, 0x0) write(r4, &(0x7f0000000100)='l', 0x1) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.537013145s ago: executing program 1 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) io_setup(0x3fd, &(0x7f0000000100)=0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) r2 = io_uring_setup(0x7, &(0x7f0000000480)={0x0, 0xc8a1, 0xc000, 0x3ffe, 0x800000c2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x3, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000640)=[{}], 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000700)='m', 0x1}]) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) (async) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x3, 0x1d61957dc1bd9d1e) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000780)=""/29) (async, rerun: 32) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f00000003c0)=0x2) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xcb, 0xe, 0x6, 0x4, 0x2, 0x3002, 0xf4, 0x1ded1507, 0x7fffffffffffb, 0x8a, 0xfffffffffffffffe, 0x1, 0x0, 0xd, 0xfffffffffffffffc, 0xbde], 0x5000, 0x67a64fa265d79513}) (async) mknodat$null(r4, &(0x7f0000000400)='./dev/sda1\x00', 0x1000, 0x103) 1.079849558s ago: executing program 2 (id=786): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x7, 0x2, 0x2}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x4, 0x2}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x9, @meta={0xb6e6112, 0x422c158c, 0x97cb, 0x39bc, 0x63f17600}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg/1:0:0:0\x00', 0x40800, 0x0) ioctl$BSG_SET_TIMEOUT(r4, 0x2201, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f0000000300)={0x2, @in={{0x2, 0x4e24, @local}}, 0x5}, &(0x7f00000003c0)=0x90) r5 = dup3(r2, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000400)={0x2, 0x1, 0x5, 0x7606, 'syz1\x00', 0x7}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000b80)={&(0x7f0000000440), 0xffffffae, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b40)}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000bc0), 0x202, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000c00)={0x8, "621b172ce313debdd88b1bfe0b44066b45c7109d8a648fc83f274fb18e3eaee2"}) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000c40)) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000c80)={0x3, 0x80000001, 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000cc0)=0x8) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) nanosleep(&(0x7f0000000d40)={r7, r8+60000000}, &(0x7f0000000d80)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x4) setsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f0000000e40)={@rand_addr=' \x01\x00', r10}, 0x14) bind(r5, &(0x7f0000000e80)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1}, 0x3}}, 0x80) r11 = syz_open_dev$usbmon(&(0x7f0000000f00), 0x2, 0x400040) ioctl$MON_IOCG_STATS(r11, 0x80089203, &(0x7f0000000f40)) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000000f80)='/dev/video37\x00') 520.661347ms ago: executing program 1 (id=787): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/rfcomm0\x00', 0x802, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e00050300000001fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB="08000900d5"], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) write$P9_RREAD(r1, &(0x7f0000000040)={0xb, 0x75, 0x1}, 0xb) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000300)) 447.883819ms ago: executing program 1 (id=788): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x80000005, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) 289.113743ms ago: executing program 1 (id=789): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x80000) memfd_create(&(0x7f00000004c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000180)=0x4) add_key$user(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000380), 0xc9, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x901891cbff212725, 0x4, &(0x7f0000000ac0)=@raw=[@map_idx_val={0x18, 0x6e4d4457ce3160b3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xe}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000a00)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480), &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='ecryptfs\x00', 0x0, &(0x7f0000000880)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000a40), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x300000c, 0x30, r1, 0x81000000) memfd_create(&(0x7f0000000a80)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendto$inet6(r3, &(0x7f0000000380)="4c0820507aff0d624793ef4878", 0xd, 0x2000c0c0, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c) fsopen(&(0x7f0000000340)='ext3\x00', 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) 200.824073ms ago: executing program 2 (id=790): syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="c87be6970899", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r0, &(0x7f0000000240)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/config.gz\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b00e4a2000008000200ac"], 0x54}}, 0x4000000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="910ab1e3a1d3335afe3201251c00128008000100687372000c000280", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000002c0)={0x3, 0x3, 0x16}) sendfile(r4, r4, 0x0, 0x6) read(r1, &(0x7f0000002bc0)=""/4096, 0x1000) read$FUSE(r1, &(0x7f0000003bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000005c00)={0x50, 0x0, r6, {0x7, 0x2d, 0x10c, 0x0, 0x7, 0x1000, 0x53d, 0x7fff, 0x0, 0x0, 0x80, 0x6}}, 0x50) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) mount$9p_virtio(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x8000, &(0x7f0000000b40)={'trans=virtio,', {[{@access_any}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') io_setup(0x0, &(0x7f0000000340)) read$FUSE(r9, &(0x7f0000000b80)={0x2020}, 0x2020) 198.434246ms ago: executing program 2 (id=791): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0xb}, 0x94) sendmsg$nl_route(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB="380000001a0001002dbd70000000000081808000000000000000000008000f00f3000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x8040) 110.55153ms ago: executing program 2 (id=792): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) tee(r0, r1, 0x8, 0x1) fchdir(r1) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@filename='./file0\x00', r3, &(0x7f0000000140)={0x7, 0x3, 0xf, 0x4, 0x5, 0x3, 0xfcd, 0x7}) recvfrom$unix(r2, &(0x7f00000001c0)=""/14, 0xe, 0x22, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280), 0x1) close(r2) write$binfmt_register(r2, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '', 0x3a, '/dev/swradio#\x00', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x4f, 0x43, 0x0, 0x43]}, 0x3b) copy_file_range(r1, &(0x7f0000000300)=0x6, r2, &(0x7f0000000340)=0x6, 0xf812, 0x0) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000000380)=0x7) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2d, 'cpuset'}, {0x2d, 'perf_event'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}]}, 0x2c) faccessat2(r1, &(0x7f0000000400)='./file0\x00', 0x47, 0x1100) write$proc_mixer(r2, &(0x7f0000000440)=[{'ALTPCM', @void}, {'CD', @val={' \'', 'Mic Capture'}}], 0x2d) mount$9p_unix(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800000, &(0x7f0000000540)={'trans=unix,', {[{@posixacl}, {@mmap}], [{@fowner_lt={'fowner<', r3}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsname={'fsname', 0x3d, ',^.\\'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/swradio#\x00'}}, {@subj_role={'subj_role', 0x3d, 'ALTPCM'}}]}}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000005c0)={0x800, [0x6, 0x85, 0x1ff, 0x81, 0x4, 0x5, 0x9, 0xfff9, 0x3, 0x9c, 0x7, 0x1f, 0x6, 0x6, 0x0, 0x7, 0xa, 0x2, 0x7, 0x101, 0x0, 0x80, 0x3, 0x2, 0x2, 0x5, 0x6, 0x6, 0x6, 0xfffb, 0xab6, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x100, 0xfff, 0x5, 0xf, 0x800, 0x6, 0x8, 0x9, 0x1, 0x4, 0x9], 0x7}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000640)=""/202) recvmsg$can_raw(r2, &(0x7f0000000a00)={&(0x7f0000000740)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/234, 0xea}], 0x3}, 0x2100) r5 = accept4$vsock_stream(r2, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000ac0), &(0x7f0000000b00), 0x2, 0x3) r6 = mq_open(&(0x7f0000000b40)='ALTPCM', 0x80, 0x5, &(0x7f0000000b80)={0x8, 0x2, 0x8000000000000001, 0x1}) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000002d40)={""/44, 0x0}, 0x80, 0x40, 0x0, 0x0) fstat(r1, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000000bc0)="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", 0x2000, &(0x7f0000003a40)={&(0x7f0000002bc0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x6, 0x8020000, 0x1, 0x1400, 0x2, 0x80c9, 0x0, 0x0, 0x4, 0x5ce}}, &(0x7f0000002c40)={0x18, 0xfffffffffffffff5, 0x0, {0x8}}, &(0x7f0000002c80)={0x18, 0x0, 0x9, {0x671f}}, &(0x7f0000002cc0)={0x18, 0x0, 0x5, {0x2b0}}, &(0x7f0000002d00)={0x18, 0xfffffffffffffffe, 0x7fffffffffffffff, {0x7}}, &(0x7f0000002dc0)={0x28, 0x0, 0x800, {{0xfffffffffffff800, 0x5, 0x1, r7}}}, &(0x7f0000002e00)={0x60, 0x0, 0x7, {{0x5, 0x4, 0x1, 0x52, 0x5, 0x1, 0x3, 0xe3}}}, &(0x7f0000002e80)={0x18, 0xfffffffffffffffe, 0x2, {0x8}}, &(0x7f0000002ec0)={0x1e, 0x0, 0xc, {'/dev/swradio#\x00'}}, &(0x7f0000002f00)={0x20, 0x0, 0x3, {0x0, 0x4}}, &(0x7f0000002f40)={0x78, 0x0, 0x8, {0xffffffffffffffff, 0xd, 0x0, {0x2, 0x1, 0xff9, 0x7, 0x2, 0xe, 0x3, 0xd, 0x8, 0x4000, 0x8, 0xee01, r4, 0xc3b, 0x5f}}}, &(0x7f0000002fc0)={0x90, 0x0, 0xffffffffffff0000, {0x3, 0x0, 0x200, 0x6, 0x2, 0xfffffffc, {0x1, 0x1, 0x9, 0x1ff, 0xb778, 0xf52e, 0x36f, 0x8, 0x0, 0x8000, 0x1, r3, r4, 0x6b68, 0x200}}}, &(0x7f0000003080)={0x48, 0x0, 0x4, [{0x3, 0x7fffffffffffffff, 0x1, 0xd48, '@'}, {0x5, 0x50, 0x0, 0x200}]}, &(0x7f0000003180)={0x518, 0xfffffffffffffffe, 0x3, [{{0x3, 0x0, 0x8a, 0x3, 0x2, 0x3cc, {0x6, 0x7, 0x45, 0x2, 0x401, 0xfffffffffffffffd, 0x2, 0x100, 0x2, 0xc000, 0x3ff, r3, r4, 0x3, 0x8}}, {0x4, 0x6, 0x6, 0xffffffff, 'cpuset'}}, {{0x6, 0x3, 0xffffffffffff0001, 0x603, 0x2, 0x3, {0x5, 0x1, 0x200, 0x0, 0xa9b6, 0x6, 0xffffffff, 0x2e838ab8, 0xe, 0x9000, 0x3, 0xee01, r4, 0x5, 0x3}}, {0x2, 0x7f, 0x7, 0x5, 'net_cls'}}, {{0x0, 0x1, 0x800, 0x7f000000000, 0x8550, 0x9, {0x4, 0x1, 0x4, 0x100000001, 0x0, 0x7, 0x9, 0x8cd2, 0x9, 0x4000, 0x7f, r3, r4, 0x3, 0x9}}, {0x4, 0xffffffffffffffff, 0x2, 0x2, '%&'}}, {{0x5, 0x1, 0x741, 0x61f8, 0x3, 0x0, {0x5, 0x4d, 0x8, 0xdf, 0x7d, 0x8000000000000001, 0x8001, 0x7fffffff, 0x3, 0x8000, 0xf5, r3, r4, 0xfe4, 0x3}}, {0x0, 0x2, 0x9, 0x80, '-)-@.}[\':'}}, {{0x1, 0x2, 0x0, 0x4af, 0x43, 0x7fffffff, {0x3, 0x3ad4, 0xbe78, 0x7, 0x0, 0x7, 0x1, 0x3, 0x5, 0x8000, 0x5, r3, r4, 0x401, 0x3}}, {0x6, 0x1, 0x1, 0x3, '('}}, {{0x200, 0x1, 0x8, 0x5c, 0x10001, 0x2, {0x0, 0x1, 0xfff, 0x9, 0x5, 0x7, 0xffffff7f, 0x5, 0x6, 0x0, 0xa79, r8, r4, 0x2}}, {0x2, 0xd98c, 0x2, 0x8, '&\x00'}}, {{0x5, 0x3, 0x8000000000000000, 0x4, 0xf862, 0x0, {0x6, 0x40, 0x7, 0x1, 0x0, 0xe, 0xb, 0x80, 0x6636, 0x8000, 0xd, r3, r4, 0x5, 0x2e154fd0}}, {0x4, 0x8, 0x1, 0x5, '\x8d'}}, {{0x4, 0x1, 0x5, 0x81, 0x1ff, 0xfffffff8, {0x4, 0xd458, 0x4, 0x8, 0x748d, 0x2, 0x473, 0x2, 0x9, 0x3000, 0x4, r3, r4, 0x8, 0xda}}, {0x5, 0x1, 0x1, 0x4, 'M'}}]}, &(0x7f0000003780)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x81, 0x2, 0x3, 0x9, {0x2, 0x8, 0x235d27c4, 0x5, 0x5, 0x5, 0x0, 0x3e, 0x4ed, 0x2000, 0x7, r3, r9, 0xd9a, 0x80000000}}, {0x0, 0x9}}}, &(0x7f0000003840)={0x20, 0x0, 0x7, {0x5, 0x0, 0x0, 0x8}}, &(0x7f0000003900)={0x130, 0xfffffffffffffff5, 0x6, {0x4, 0xff, 0x0, '\x00', {0x10, 0x7, 0xffff, 0x2, r3, r10, 0x8000, '\x00', 0x4, 0x8, 0x6, 0xfff, {0xbe, 0xf}, {0x1, 0x7}, {0x7, 0x3}, {0xffffffffffffffff, 0x1}, 0x3ff800, 0xfc3, 0x0, 0x4}}}}) syz_io_uring_setup(0x66df, &(0x7f0000003b00)={0x0, 0x7a3b, 0x550, 0x2, 0x16f}, &(0x7f0000003b80), &(0x7f0000003bc0), &(0x7f0000003c00)) 109.829657ms ago: executing program 2 (id=793): r0 = syz_open_dev$sg(&(0x7f0000000200), 0xfffffffffffffffc, 0x40000) fchmod(r0, 0x24) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000010680)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r4}, [@multipath={0x0, 0x50, 0x0, 0x188, 'multipath\x00', {'2 queue_mode rq', 0x20, '0', 0x20, 0x3, 0x20, 0x1, [{0x20, 'service-time 0', 0x20, 0x2, 0x20, '1', [{0x20, @ram_num={'1:', 0x1}, ' 1'}, {0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000 100'}]}, {0x20, 'io-affinity 0', 0x20, 0x3, 0x20, '0', [{0x20, @ram_num={'1:', 0x0}}, {0x20, @ram={'/dev/ram', 0x1}, ' 1'}, {0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1 1'}]}, {0x20, 'queue-length 0', 0x20, 0x4, 0x20, '2', [{0x20, @ram={'/dev/ram', 0x1}, ' 1000'}, {0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1000'}, {0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @ram_num={'1:', 0x1}}]}]}}]}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000010700)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x7, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 107.589383ms ago: executing program 1 (id=794): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x105480) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xc1, 0x3, 0xa, 0x0, "65ba375ec969ed7229b73173fb6a555a6b638eb39b85306a92c7ab010fefae10a1c367a5fcdf8d95555d8eb2e44f2ba21c276a075d3c103183eea17fef8d046e", "a7613d0d265b3240cbda8fc287f59db4211863e233f09275abf5963386b2b9bf", [0x2400000000000, 0x5]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x401, r0, 'id1\x00'}) write$tun(r1, &(0x7f0000000180)={@void, @void, @eth={@multicast, @empty, @void, {@mpls_uc={0x8847, {[], @generic="be065a558693b87542288293da0d7cd72ef6fc7611c14dfec3ddeaa7f95be6a5635f5e936d5104eae280de153b68a3c247a8a4c46b66f448ab528ab6cd15fc"}}}}}, 0x4d) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "b1485a8826ac6106", "6cf8b8eafb6853b87ab8c79a9093b3ea", "0272b607", "00315100aa8f40c5"}, 0x28) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0x1, 0x38, &(0x7f0000000240), &(0x7f0000000280)=0x4) tee(r1, r1, 0x8000000000000001, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x72, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2c6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x3, 0x918, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) r5 = dup2(r1, r1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r1, r3, &(0x7f0000000400)={0x0, 0x30c3, 0x40, 0x1, 0x17f}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x667b, 0x2000, 0x3, 0x1c9, 0x0, r4}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x564, 0x2, 0x1, 0xb0, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb967, 0x4, 0x3, 0x340, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa2c, 0x8, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001740)={0x2e, 0x74, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x1, 0xc14, 0x0, &(0x7f0000000740)=@buf_4k="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"}}, &(0x7f00000017c0)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000001840)={0x0, 0x7, 0x4, &(0x7f0000001800)={0x10, "53eebf768e2054f92f0177e569985fa46f6d7321a94c7e01f9b8c06936fd49d169"}}) r13 = socket(0x2c, 0x3, 0xc) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x4ce60, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001980)={0x2b, @rand_addr=0x64010102, 0x4e20, 0x2, 'sed\x00', 0x2b, 0x8, 0x27}, 0x2c) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000019c0)={{r11}, "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"}) r14 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x8, 0x2010, r9, 0x20000000) r15 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_ublk_add_dev(r9, r14, r10, r7, &(0x7f0000004a80)={0x2e, 0x12, 0x0, r15, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, r12, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004a40)=@new_dev={0x3, 0xd3a, 0x0, 0x0, 0x1000, 0xffffffff, r16, 0x0, 0x107}}}, &(0x7f0000004b00)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000004b40)={0x3, 0x3, 0x0, @broadcast, 'veth1_virt_wifi\x00'}) r17 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000004b80), 0x0, 0x0) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000004c00), r13) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r17, &(0x7f0000004d00)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x4000300}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c40)={0x50, r18, 0x100, 0x5, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xcc6f}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000004d40)={0x7, 0x80000, r8}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r19, &(0x7f0000004e80)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 0s ago: executing program 2 (id=795): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x2, 0x0) r1 = userfaultfd(0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000680)=0x3, 0x4) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x6f) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7b87f20f", @ANYRES8=r1, @ANYBLOB="105c362c8f702ef64b2d8f026c8e7b24bad586233d791fea10bca0fcd0a646c0956ad41cf605e49bf48ed28b3a1f608475e85b7ad62e34522d29414816139f4644493e0e59f6cf37e2c1e179abfbf248a46d6f6260c0a52826"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000280)="66b9360900000f32baa100b000ee0fc71fba4000b0e0ee0f017f5cbaf80c66b80e77b58e66efbafc0cb80000ef0f011eb84d260f01c5ba2100b8648cef0fe500", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0506580c"], 0x4) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e08070c085f16"], 0xb) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000080)={0x0, 0x5a, 0x0, 0x0, 0x1, 0xb73, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000100)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) r8 = socket(0x2b, 0x4, 0x1) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10060, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000005c0)={0xc, r7}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000140)={0x20, 0x3, 0x0, 0x3, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 63.204559][ T43] audit: type=1400 audit(1794206793.294:586): avc: denied { bind } for pid=7572 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.209660][ T43] audit: type=1400 audit(1794206793.294:587): avc: denied { write } for pid=7572 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.334728][ T35] usb 7-1: device descriptor read/64, error -71 [ 63.574442][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.704257][ T35] usb 7-1: device descriptor read/64, error -71 [ 63.814216][ T35] usb usb7-port1: attempt power cycle [ 64.154186][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.174732][ T35] usb 7-1: device descriptor read/8, error -71 [ 64.399567][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 64.414596][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.421028][ T7670] vcan0: tx drop: invalid da for name 0x0000000800000000 [ 64.434841][ T35] usb 7-1: device descriptor read/8, error -71 [ 64.525493][ T7675] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 64.545628][ T35] usb usb7-port1: unable to enumerate USB device [ 64.722116][ T7687] pim6reg: entered allmulticast mode [ 64.722600][ T7687] pim6reg: left allmulticast mode [ 64.769431][ T7688] pim6reg: entered allmulticast mode [ 64.769604][ T7689] pim6reg: left allmulticast mode [ 65.319937][ T7714] device-mapper: table: 248:6: ram8 too small for target: start=8, len=8320, dev_size=8192 [ 65.319954][ T7714] device-mapper: core: Cannot calculate initial queue limits [ 65.319959][ T7714] device-mapper: ioctl: unable to set up device queue for new table. [ 65.669113][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b5cc00: rx timeout, send abort [ 66.134633][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 66.170061][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b5cc00: abort rx timeout. Force session deactivation [ 66.534023][ T7788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.361'. [ 66.536845][ T7788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.361'. [ 66.636035][ T7800] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 66.894060][ T5898] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.066432][ T5898] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 67.067861][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65522, setting to 1024 [ 67.067886][ T5898] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 67.067916][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.070990][ T7803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.077622][ T5898] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 68.061032][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 68.061044][ T43] audit: type=1400 audit(1794206798.144:626): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 68.093004][ T43] audit: type=1400 audit(1794206798.174:627): avc: denied { write } for pid=7852 comm="syz.0.365" name="nullb" dev="configfs" ino=1998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.095992][ T43] audit: type=1400 audit(1794206798.184:628): avc: denied { write } for pid=7852 comm="syz.0.365" name="nullb" dev="configfs" ino=1998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.096166][ T43] audit: type=1400 audit(1794206798.184:629): avc: denied { remove_name } for pid=7852 comm="syz.0.365" name="my_nullb" dev="configfs" ino=23725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.096360][ T43] audit: type=1400 audit(1794206798.184:630): avc: denied { rmdir } for pid=7852 comm="syz.0.365" name="my_nullb" dev="configfs" ino=23725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.134825][ T855] usb 7-1: USB disconnect, device number 8 [ 68.136231][ T855] idmouse 7-1:1.0: disconnected [ 68.181832][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.366'. [ 68.182010][ T7858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62290 sclass=netlink_route_socket pid=7858 comm=syz.0.366 [ 68.182542][ T7858] syz_tun: left allmulticast mode [ 68.182553][ T7858] syz_tun: left promiscuous mode [ 68.182706][ T7858] bridge0: port 3(syz_tun) entered disabled state [ 68.192475][ T7858] batman_adv: batadv0: Adding interface: syz_tun [ 68.192490][ T7858] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.192516][ T7858] batman_adv: batadv0: Interface activated: syz_tun [ 68.199074][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 68.261538][ T43] audit: type=1400 audit(1794206798.344:631): avc: denied { write } for pid=7861 comm="syz.0.368" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.263593][ T43] audit: type=1400 audit(1794206798.344:632): avc: denied { kexec_image_load } for pid=7861 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 68.655378][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 68.655460][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.947995][ T43] audit: type=1400 audit(1794206799.034:633): avc: denied { ioctl } for pid=7871 comm="syz.1.371" path="socket:[24839]" dev="sockfs" ino=24839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.066102][ T43] audit: type=1400 audit(1794206799.154:634): avc: denied { mount } for pid=7871 comm="syz.1.371" name="/" dev="ramfs" ino=24869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.118525][ T43] audit: type=1400 audit(1794206799.204:635): avc: denied { read write } for pid=7885 comm="syz.4.373" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.195077][ T7887] ecryptfs_get_tree: kern_path() failed [ 69.197167][ T7887] Reading sb failed; rc = [-20] [ 69.923921][ T7898] syz_tun: entered allmulticast mode [ 70.069475][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 70.654160][ T7862] kexec: Could not allocate control_code_buffer [ 70.745461][ T7925] gfs2: path_lookup on c::: returned error -2 [ 70.819546][ T7927] kvm [7926]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 71.116371][ T7956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.116488][ T7956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.155523][ T7956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.221735][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221814][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.225381][ T65] cfg80211: failed to load regulatory.db [ 71.275581][ T7963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.275610][ T7963] block device autoloading is deprecated and will be removed. [ 71.276192][ T67] Bluetooth: hci1: unexpected event for opcode 0x080c [ 71.444341][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 71.483672][ T7970] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.520664][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 71.604996][ T35] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 71.606002][ T35] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 71.606022][ T35] usb 7-1: config 1 has no interface number 0 [ 71.607854][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.607872][ T35] usb 7-1: Product: syz [ 71.607883][ T35] usb 7-1: Manufacturer: syz [ 71.607895][ T35] usb 7-1: SerialNumber: syz [ 71.630434][ T35] usb 7-1: 3:0 : does not exist [ 71.630455][ T35] usb 7-1: 3:0 : does not exist [ 71.872357][ T7989] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 71.872381][ T7989] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 71.872403][ T7989] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 71.919792][ T7995] netlink: 14 bytes leftover after parsing attributes in process `syz.0.394'. [ 71.945536][ T1726] usb 7-1: USB disconnect, device number 9 [ 72.003842][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.044072][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.045654][ T7998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=7998 comm=syz.4.395 [ 72.046591][ T7995] bond0 (unregistering): Released all slaves [ 72.091555][ T8001] syz.1.397: attempt to access beyond end of device [ 72.091555][ T8001] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 72.091609][ T8001] gfs2: error -5 reading superblock [ 72.099029][ T8001] overlayfs: failed to resolve './file1/file0': -20 [ 72.142063][ T35] infiniband syz1: ib_query_port failed (-19) [ 72.178314][ T8007] FAULT_INJECTION: forcing a failure. [ 72.178314][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 72.178342][ T8007] CPU: 1 UID: 0 PID: 8007 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(full) [ 72.178362][ T8007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.178372][ T8007] Call Trace: [ 72.178394][ T8007] [ 72.178401][ T8007] dump_stack_lvl+0x100/0x190 [ 72.178472][ T8007] should_fail_ex.cold+0x5/0xa [ 72.178496][ T8007] should_failslab+0xc2/0x120 [ 72.178527][ T8007] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 72.178564][ T8007] ? rpc_ntop+0xb8/0x3b0 [ 72.178615][ T8007] ? __debug_object_init+0x2de/0x3d0 [ 72.178659][ T8007] ? xs_format_common_peer_addresses+0x2ca/0x430 [ 72.178690][ T8007] kstrdup+0x51/0xe0 [ 72.178719][ T8007] xs_format_common_peer_addresses+0x2ca/0x430 [ 72.178770][ T8007] ? __pfx_xs_format_common_peer_addresses+0x10/0x10 [ 72.178796][ T42] libceph: connect (1)0.0.0.0:6789 error -22 [ 72.178803][ T8007] ? lockdep_init_map_type+0x5c/0x250 [ 72.178837][ T8007] ? timer_init_key+0x150/0x310 [ 72.178875][ T8007] xs_setup_tcp+0x8d6/0xad0 [ 72.178902][ T8007] xprt_create_transport+0x16c/0x740 [ 72.178924][ T8007] rpc_create+0x3c2/0x840 [ 72.178947][ T8007] ? __pfx_rpc_create+0x10/0x10 [ 72.178981][ T42] libceph: mon0 (1)0.0.0.0:6789 connect error [ 72.178975][ T8007] ? bpf_ksym_find+0x128/0x1c0 [ 72.179026][ T8007] ? net_generic+0xea/0x2a0 [ 72.179056][ T8007] ? net_generic+0xea/0x2a0 [ 72.179081][ T8007] nfs_create_rpc_client+0x6a9/0x920 [ 72.179102][ T8007] ? __pfx_nfs_create_rpc_client+0x10/0x10 [ 72.179134][ T8007] ? lockdep_init_map_type+0x5c/0x250 [ 72.179157][ T8007] ? lockdep_init_map_type+0x5c/0x250 [ 72.179183][ T8007] nfs4_alloc_client+0x9a1/0xe30 [ 72.179215][ T8007] ? __pfx_nfs4_alloc_client+0x10/0x10 [ 72.179244][ T8007] ? lock_acquire+0x1d1/0x380 [ 72.179263][ T8007] ? net_generic+0x25/0x2a0 [ 72.179283][ T8007] ? nfs_get_client+0x849/0x1230 [ 72.179299][ T8007] ? nfs_get_client+0x849/0x1230 [ 72.179321][ T8007] nfs_get_client+0x87b/0x1230 [ 72.179339][ T8007] ? rcu_is_watching+0x13/0xc0 [ 72.179363][ T8007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.179410][ T8007] nfs4_set_client+0x3f6/0x640 [ 72.179432][ T8007] nfs4_init_server.isra.0+0x5be/0xf80 [ 72.179452][ T8007] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.179484][ T8007] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 72.179533][ T8007] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 72.179559][ T8007] nfs4_create_server+0x185/0x2b0 [ 72.179582][ T8007] nfs4_try_get_tree+0x93/0x140 [ 72.179603][ T8007] nfs_get_tree+0xa61/0x1440 [ 72.179637][ T8007] vfs_get_tree+0x92/0x320 [ 72.179673][ T8007] path_mount+0x7d0/0x2850 [ 72.179708][ T8007] ? __pfx_path_mount+0x10/0x10 [ 72.179732][ T8007] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.179758][ T8007] ? putname+0xb1/0x110 [ 72.179779][ T8007] ? kmem_cache_free+0x127/0x6c0 [ 72.179811][ T8007] ? __x64_sys_mount+0x293/0x310 [ 72.179833][ T8007] __x64_sys_mount+0x293/0x310 [ 72.179857][ T8007] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.179888][ T8007] do_syscall_64+0x123/0x7b0 [ 72.179910][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.179927][ T8007] RIP: 0033:0x7fd701f9fb19 [ 72.179943][ T8007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.179958][ T8007] RSP: 002b:00007fd702f48028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.179987][ T8007] RAX: ffffffffffffffda RBX: 00007fd702225fa0 RCX: 00007fd701f9fb19 [ 72.179998][ T8007] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 72.180010][ T8007] RBP: 00007fd702037b70 R08: 0000200000000140 R09: 0000000000000000 [ 72.180022][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.180032][ T8007] R13: 00007fd702226038 R14: 00007fd702225fa0 R15: 00007ffe3e6435b8 [ 72.180056][ T8007] [ 72.192348][ T7615] smbdirect: ib_dev[syz1] removed [ 72.210808][ T7989] siw: device registration error -19 [ 72.359747][ T8017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.367622][ T8017] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 72.409347][ T8021] device-mapper: raid: Choosing default region size of 4MiB [ 72.418292][ T8021] device-mapper: table: 248:3: raid: Component device(s) too small (-EINVAL) [ 72.418308][ T8021] device-mapper: ioctl: error adding target to table [ 72.435100][ T42] libceph: connect (1)0.0.0.0:6789 error -22 [ 72.435253][ T42] libceph: mon0 (1)0.0.0.0:6789 connect error [ 72.554173][ T1726] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 72.684111][ T1726] usb 9-1: device descriptor read/64, error -71 [ 72.703799][ T8035] TC_ACT_REPEAT abuse ? [ 72.724074][ T5903] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 72.884087][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 72.885134][ T5903] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 72.886316][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.886341][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.886373][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.889556][ T5903] usb 6-1: config 0 descriptor?? [ 72.924213][ T1726] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 72.945285][ T5898] libceph: connect (1)0.0.0.0:6789 error -22 [ 72.945384][ T5898] libceph: mon0 (1)0.0.0.0:6789 connect error [ 72.954137][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.053968][ T1726] usb 9-1: device descriptor read/64, error -71 [ 73.103989][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 73.104740][ T42] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.105820][ T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 73.105857][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.105874][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.105892][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.105910][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.105939][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.164495][ T1726] usb usb9-port1: attempt power cycle [ 73.296279][ T8026] fuse: Unknown parameter '' [ 73.299519][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 73.299582][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 73.301109][ T5903] usb 6-1: USB disconnect, device number 13 [ 73.301847][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 73.301862][ T43] audit: type=1400 audit(1794206803.384:652): avc: denied { read write } for pid=8025 comm="syz.1.406" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.302429][ T43] audit: type=1400 audit(1794206803.384:653): avc: denied { open } for pid=8025 comm="syz.1.406" path="/110/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 73.306506][ T43] audit: type=1400 audit(1794206803.394:654): avc: denied { ioctl } for pid=8025 comm="syz.1.406" path="socket:[25212]" dev="sockfs" ino=25212 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.312724][ T42] usb 5-1: GET_CAPABILITIES returned 0 [ 73.312761][ T42] usbtmc 5-1:16.0: can't read capabilities [ 73.523507][ T43] audit: type=1400 audit(1794206803.604:655): avc: denied { read } for pid=8034 comm="syz.0.409" path="socket:[26468]" dev="sockfs" ino=26468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.524041][ T1726] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 73.527837][ T42] usb 5-1: USB disconnect, device number 10 [ 73.544755][ T1726] usb 9-1: device descriptor read/8, error -71 [ 73.654021][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 73.803964][ T1726] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 73.804644][ T5903] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 73.807271][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.807284][ T5903] usb 6-1: Product: syz [ 73.807291][ T5903] usb 6-1: Manufacturer: syz [ 73.807298][ T5903] usb 6-1: SerialNumber: syz [ 73.827908][ T1726] usb 9-1: device descriptor read/8, error -71 [ 73.832183][ T855] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.934269][ T1726] usb usb9-port1: unable to enumerate USB device [ 74.117676][ T8037] FAULT_INJECTION: forcing a failure. [ 74.117676][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 74.117707][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(full) [ 74.117721][ T8037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.117728][ T8037] Call Trace: [ 74.117732][ T8037] [ 74.117737][ T8037] dump_stack_lvl+0x100/0x190 [ 74.117759][ T8037] should_fail_ex.cold+0x5/0xa [ 74.117781][ T8037] should_failslab+0xc2/0x120 [ 74.117796][ T8037] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.117812][ T8037] ? cuse_channel_open+0x65/0x8f0 [ 74.117837][ T8037] cuse_channel_open+0x65/0x8f0 [ 74.117849][ T8037] ? __pfx_cuse_channel_open+0x10/0x10 [ 74.117861][ T8037] misc_open+0x26d/0x450 [ 74.117895][ T8037] ? __pfx_misc_open+0x10/0x10 [ 74.117911][ T8037] chrdev_open+0x234/0x6a0 [ 74.117926][ T8037] ? __pfx_chrdev_open+0x10/0x10 [ 74.117941][ T8037] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 74.117968][ T8037] do_dentry_open+0x674/0x1470 [ 74.117979][ T8037] ? __pfx_chrdev_open+0x10/0x10 [ 74.117995][ T8037] vfs_open_consume+0xcc/0x460 [ 74.118013][ T8037] path_openat+0x1547/0x23f0 [ 74.118031][ T8037] ? __pfx_path_openat+0x10/0x10 [ 74.118049][ T8037] do_file_open+0x20e/0x430 [ 74.118065][ T8037] ? __pfx_do_file_open+0x10/0x10 [ 74.118090][ T8037] ? _raw_spin_unlock+0x28/0x50 [ 74.118100][ T8037] ? alloc_fd+0x471/0x7a0 [ 74.118118][ T8037] do_sys_openat2+0x163/0x1d0 [ 74.118132][ T8037] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.118151][ T8037] __x64_sys_openat+0x12d/0x210 [ 74.118166][ T8037] ? __pfx___x64_sys_openat+0x10/0x10 [ 74.118186][ T8037] do_syscall_64+0x123/0x7b0 [ 74.118201][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.118212][ T8037] RIP: 0033:0x7f8bd459fb19 [ 74.118230][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.118241][ T8037] RSP: 002b:00007f8bd54d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.118252][ T8037] RAX: ffffffffffffffda RBX: 00007f8bd4825fa0 RCX: 00007f8bd459fb19 [ 74.118259][ T8037] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 74.118266][ T8037] RBP: 00007f8bd4637b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.118273][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.118279][ T8037] R13: 00007f8bd4826038 R14: 00007f8bd4825fa0 R15: 00007fffa897e858 [ 74.118294][ T8037] [ 74.210795][ T7961] ceph: No mds server is up or the cluster is laggy [ 74.304610][ T8045] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 74.304654][ T8045] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.304826][ T8045] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 74.304836][ T8045] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 74.362546][ T43] audit: type=1400 audit(1794206804.444:656): avc: denied { create } for pid=8048 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.363039][ T43] audit: type=1400 audit(1794206804.444:657): avc: denied { setopt } for pid=8048 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.363482][ T43] audit: type=1400 audit(1794206804.444:658): avc: denied { ioctl } for pid=8048 comm="syz.2.414" path="socket:[26480]" dev="sockfs" ino=26480 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.547202][ T2426] usb 6-1: USB disconnect, device number 14 [ 74.570041][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.570739][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.570849][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.570961][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571078][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571185][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571294][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571399][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571519][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571625][ T8054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.895621][ T855] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 74.896466][ T855] ath9k_htc: Failed to initialize the device [ 74.898550][ T2426] usb 6-1: ath9k_htc: USB layer deinitialized [ 75.025019][ T8065] FAULT_INJECTION: forcing a failure. [ 75.025019][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 75.025048][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(full) [ 75.025068][ T8065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.025079][ T8065] Call Trace: [ 75.025085][ T8065] [ 75.025093][ T8065] dump_stack_lvl+0x100/0x190 [ 75.025127][ T8065] should_fail_ex.cold+0x5/0xa [ 75.025157][ T8065] should_failslab+0xc2/0x120 [ 75.025181][ T8065] __kmalloc_noprof+0xfc/0x840 [ 75.025209][ T8065] ? lsm_blob_alloc+0x68/0x90 [ 75.025258][ T8065] lsm_blob_alloc+0x68/0x90 [ 75.025280][ T8065] security_prepare_creds+0x2d/0x290 [ 75.025304][ T8065] prepare_creds+0x5d6/0x950 [ 75.025344][ T8065] lookup_user_key+0x1150/0x14f0 [ 75.025374][ T8065] ? __pfx_lookup_user_key+0x10/0x10 [ 75.025414][ T8065] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 75.025448][ T8065] ? __x64_sys_futex+0x34f/0x4d0 [ 75.025468][ T8065] ? __x64_sys_futex+0x358/0x4d0 [ 75.025495][ T8065] keyctl_session_to_parent+0x28/0xae0 [ 75.025526][ T8065] __do_sys_keyctl+0x2b1/0x5a0 [ 75.025554][ T8065] do_syscall_64+0x123/0x7b0 [ 75.025580][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.025600][ T8065] RIP: 0033:0x7fd701f9fb19 [ 75.025616][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.025634][ T8065] RSP: 002b:00007fd702f48028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 75.025655][ T8065] RAX: ffffffffffffffda RBX: 00007fd702225fa0 RCX: 00007fd701f9fb19 [ 75.025666][ T8065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 75.025677][ T8065] RBP: 00007fd702037b70 R08: 0000000000000000 R09: 0000000000000000 [ 75.025689][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.025699][ T8065] R13: 00007fd702226038 R14: 00007fd702225fa0 R15: 00007ffe3e6435b8 [ 75.025726][ T8065] [ 75.030161][ T43] audit: type=1400 audit(1794206805.114:659): avc: denied { connect } for pid=8064 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.257972][ T8071] bridge0: port 3(syz_tun) entered blocking state [ 75.258060][ T8071] bridge0: port 3(syz_tun) entered disabled state [ 75.258175][ T8071] syz_tun: entered allmulticast mode [ 75.258982][ T8071] syz_tun: entered promiscuous mode [ 75.259264][ T8071] bridge0: port 3(syz_tun) entered blocking state [ 75.259305][ T8071] bridge0: port 3(syz_tun) entered forwarding state [ 75.348008][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348061][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348105][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348147][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348193][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348237][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348280][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348323][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348366][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348416][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348460][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348503][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348546][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348590][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348654][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348704][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348751][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348798][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348843][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348889][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348937][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.348982][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349025][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349068][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349110][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349154][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349197][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349240][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349284][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349330][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349372][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349414][ T8080] device-mapper: ioctl: Invalid ioctl structure: name syze1, dev f807 [ 75.349698][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.349708][ T8079] device-mapper: ioctl: error adding target to table [ 75.349894][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.349902][ T8079] device-mapper: ioctl: error adding target to table [ 75.350061][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350069][ T8079] device-mapper: ioctl: error adding target to table [ 75.350227][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350235][ T8079] device-mapper: ioctl: error adding target to table [ 75.350392][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350401][ T8079] device-mapper: ioctl: error adding target to table [ 75.350558][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350567][ T8079] device-mapper: ioctl: error adding target to table [ 75.350729][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350737][ T8079] device-mapper: ioctl: error adding target to table [ 75.350891][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.350899][ T8079] device-mapper: ioctl: error adding target to table [ 75.351061][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.351069][ T8079] device-mapper: ioctl: error adding target to table [ 75.351227][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.351235][ T8079] device-mapper: ioctl: error adding target to table [ 75.351390][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.351398][ T8079] device-mapper: ioctl: error adding target to table [ 75.351552][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.351560][ T8079] device-mapper: ioctl: error adding target to table [ 75.351718][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.351726][ T8079] device-mapper: ioctl: error adding target to table [ 75.352530][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.352546][ T8079] device-mapper: ioctl: error adding target to table [ 75.352925][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.352938][ T8079] device-mapper: ioctl: error adding target to table [ 75.353270][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.353283][ T8079] device-mapper: ioctl: error adding target to table [ 75.353593][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.353606][ T8079] device-mapper: ioctl: error adding target to table [ 75.354045][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.354059][ T8079] device-mapper: ioctl: error adding target to table [ 75.354404][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.354417][ T8079] device-mapper: ioctl: error adding target to table [ 75.354749][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.354762][ T8079] device-mapper: ioctl: error adding target to table [ 75.355077][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.355090][ T8079] device-mapper: ioctl: error adding target to table [ 75.355349][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.355358][ T8079] device-mapper: ioctl: error adding target to table [ 75.355523][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.355532][ T8079] device-mapper: ioctl: error adding target to table [ 75.355695][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.355703][ T8079] device-mapper: ioctl: error adding target to table [ 75.355858][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.355867][ T8079] device-mapper: ioctl: error adding target to table [ 75.356022][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356030][ T8079] device-mapper: ioctl: error adding target to table [ 75.356189][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356198][ T8079] device-mapper: ioctl: error adding target to table [ 75.356366][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356374][ T8079] device-mapper: ioctl: error adding target to table [ 75.356530][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356538][ T8079] device-mapper: ioctl: error adding target to table [ 75.356723][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356732][ T8079] device-mapper: ioctl: error adding target to table [ 75.356890][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.356898][ T8079] device-mapper: ioctl: error adding target to table [ 75.357053][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.357061][ T8079] device-mapper: ioctl: error adding target to table [ 75.357221][ T8079] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 75.357229][ T8079] device-mapper: ioctl: error adding target to table [ 75.601747][ T43] audit: type=1400 audit(1794206805.684:660): avc: denied { associate } for pid=8095 comm="syz.2.427" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.943973][ T42] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 76.097435][ T42] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 76.099240][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.099264][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.321066][ T42] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 76.327377][ T8112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.334434][ T42] wwan wwan0: port wwan0qmi0 attached [ 76.512851][ T43] audit: type=1400 audit(1794206806.594:661): avc: denied { read write } for pid=8102 comm="syz.2.429" name="cdc-wdm0" dev="devtmpfs" ino=3009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 76.564068][ T5943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 76.568253][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.568508][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.569472][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.569486][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.569792][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.569805][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.570326][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.570339][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.570676][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.570688][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.570991][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.571004][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.571318][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.571331][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.571694][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.571707][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.572079][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.572092][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.574807][ C2] qmi_wwan 7-1:1.0: nonzero urb status received: -71 [ 76.574828][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - 0 bytes [ 76.620269][ T42] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 22:a2:1b:0d:bb:8d [ 76.623800][ T42] usb 7-1: USB disconnect, device number 10 [ 76.623889][ C2] qmi_wwan 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 76.629311][ T42] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 76.714384][ T5943] usb 9-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.715267][ T5943] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.715284][ T5943] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.715302][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.717302][ T8112] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 76.720570][ T5943] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.755127][ T42] wwan wwan0: port wwan0qmi0 disconnected [ 76.922611][ T5943] usb 9-1: USB disconnect, device number 7 [ 77.130926][ T8112] FAULT_INJECTION: forcing a failure. [ 77.130926][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 77.130946][ T8112] CPU: 2 UID: 0 PID: 8112 Comm: syz.4.433 Not tainted syzkaller #0 PREEMPT(full) [ 77.130959][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.130966][ T8112] Call Trace: [ 77.130975][ T8112] [ 77.130980][ T8112] dump_stack_lvl+0x100/0x190 [ 77.131009][ T8112] should_fail_ex.cold+0x5/0xa [ 77.131027][ T8112] should_failslab+0xc2/0x120 [ 77.131051][ T8112] __kmalloc_noprof+0xfc/0x840 [ 77.131075][ T8112] ? lockdep_init_map_type+0x5c/0x250 [ 77.131096][ T8112] ? ops_init+0x77/0x5f0 [ 77.131117][ T8112] ops_init+0x77/0x5f0 [ 77.131132][ T8112] setup_net+0x118/0x3a0 [ 77.131146][ T8112] ? __pfx_setup_net+0x10/0x10 [ 77.131160][ T8112] ? bpf_lsm_namespace_init+0x9/0x10 [ 77.131181][ T8112] copy_net_ns+0x340/0x7a0 [ 77.131197][ T8112] create_new_namespaces+0x3ea/0xac0 [ 77.131223][ T8112] unshare_nsproxy_namespaces+0xf6/0x210 [ 77.131239][ T8112] ksys_unshare+0x44f/0x980 [ 77.131253][ T8112] ? __pfx_ksys_unshare+0x10/0x10 [ 77.131274][ T8112] __x64_sys_unshare+0x31/0x40 [ 77.131288][ T8112] do_syscall_64+0x123/0x7b0 [ 77.131311][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.131323][ T8112] RIP: 0033:0x7fd05a99fb19 [ 77.131333][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.131345][ T8112] RSP: 002b:00007fd05b8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.131357][ T8112] RAX: ffffffffffffffda RBX: 00007fd05ac25fa0 RCX: 00007fd05a99fb19 [ 77.131364][ T8112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 77.131371][ T8112] RBP: 00007fd05aa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.131377][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.131384][ T8112] R13: 00007fd05ac26038 R14: 00007fd05ac25fa0 R15: 00007fff6c4384b8 [ 77.131399][ T8112] [ 77.505864][ T8120] batman_adv: batadv0: Interface deactivated: syz_tun [ 77.522632][ T8120] batman_adv: batadv0: Removing interface: syz_tun [ 77.745355][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.807440][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.862552][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.907303][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.908838][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.909853][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.911172][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.911951][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.934313][ T8139] md: couldn't update array info. -22 [ 77.950634][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.955433][ T8139] md: could not open device unknown-block(1,5). [ 77.955479][ T8139] md: md_import_device returned -16 [ 78.037812][ T5863] bridge_slave_1: left allmulticast mode [ 78.037828][ T5863] bridge_slave_1: left promiscuous mode [ 78.037936][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.040866][ T5863] bridge_slave_0: left allmulticast mode [ 78.040880][ T5863] bridge_slave_0: left promiscuous mode [ 78.041909][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.163535][ T5863] bond1 (unregistering): (slave gretap1): Releasing active interface [ 78.194476][ T5863] bond1 (unregistering): Released all slaves [ 78.250771][ T8140] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.271024][ T5863] tipc: Left network mode [ 78.350192][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 78.350206][ T43] audit: type=1400 audit(1794206808.434:676): avc: denied { write } for pid=8158 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.386571][ T5496] 8021q: adding VLAN 0 to HW filter on device eth6 [ 78.471985][ T43] audit: type=1400 audit(1794206808.554:677): avc: denied { write } for pid=8164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.530962][ T43] audit: type=1400 audit(1794206808.614:678): avc: denied { write } for pid=8168 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.581933][ T5496] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.639807][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.639949][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.640049][ T8140] bridge_slave_0: entered allmulticast mode [ 78.651373][ T8140] bridge_slave_0: entered promiscuous mode [ 78.661016][ T5863] hsr_slave_0: left promiscuous mode [ 78.661604][ T5863] hsr_slave_1: left promiscuous mode [ 78.663790][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.663801][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.672676][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.672688][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.679075][ T5863] veth1_macvtap: left promiscuous mode [ 78.679107][ T5863] veth0_macvtap: left promiscuous mode [ 78.679194][ T5863] veth1_vlan: left promiscuous mode [ 78.679249][ T5863] veth0_vlan: left promiscuous mode [ 78.800888][ T43] audit: type=1400 audit(1794206808.884:679): avc: denied { accept } for pid=8173 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.867331][ T5863] team0 (unregistering): Port device team_slave_1 removed [ 78.872325][ T5863] team0 (unregistering): Port device team_slave_0 removed [ 78.929475][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.929652][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.929715][ T8140] bridge_slave_1: entered allmulticast mode [ 78.930415][ T8140] bridge_slave_1: entered promiscuous mode [ 78.952642][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.955279][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.969320][ T8140] team0: Port device team_slave_0 added [ 78.970507][ T8140] team0: Port device team_slave_1 added [ 78.980944][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.980954][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.980966][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.981762][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.981769][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.981781][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.988592][ T43] audit: type=1400 audit(1794206809.074:680): avc: denied { write } for pid=8176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.001846][ T8140] hsr_slave_0: entered promiscuous mode [ 79.002255][ T8140] hsr_slave_1: entered promiscuous mode [ 79.002539][ T8140] debugfs: 'hsr0' already exists in 'hsr' [ 79.002547][ T8140] Cannot create hsr debugfs directory [ 79.051517][ T43] audit: type=1400 audit(1794206809.134:681): avc: denied { write } for pid=8179 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.104232][ T5943] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 79.119759][ T5496] 8021q: adding VLAN 0 to HW filter on device eth8 [ 79.140748][ T8140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.142518][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.142918][ T8140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.146794][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.147737][ T8140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.152140][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.153034][ T8140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.160170][ T8140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.182007][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.182053][ T8140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.182154][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.182226][ T8140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.191165][ T43] audit: type=1400 audit(1794206809.274:682): avc: denied { write } for pid=8182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.221964][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.228069][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.228524][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.237573][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.242530][ T43] audit: type=1400 audit(1794206809.324:683): avc: denied { write } for pid=8191 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.245019][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.245097][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.248298][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.248372][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.274660][ T5943] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 79.279436][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.279456][ T5943] usb 7-1: Product: syz [ 79.279468][ T5943] usb 7-1: Manufacturer: syz [ 79.279481][ T5943] usb 7-1: SerialNumber: syz [ 79.292703][ T5496] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.537882][ T43] audit: type=1400 audit(1794206809.624:684): avc: denied { bind } for pid=8210 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.540278][ T43] audit: type=1400 audit(1794206809.624:685): avc: denied { append } for pid=8210 comm="syz.4.446" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.580089][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.707993][ T5863] bond0: (slave bond_slave_0): interface is now down [ 79.708009][ T5863] bond0: (slave bond_slave_1): interface is now down [ 79.724546][ T5595] bond0: (slave bond_slave_0): interface is now down [ 79.724561][ T5595] bond0: (slave bond_slave_1): interface is now down [ 79.729423][ T8140] veth0_vlan: entered promiscuous mode [ 79.731775][ T5943] rtl8150 7-1:1.0: couldn't reset the device [ 79.731944][ T5943] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 79.741053][ T5943] usb 7-1: USB disconnect, device number 11 [ 79.753724][ T8140] veth1_vlan: entered promiscuous mode [ 79.757452][ T5863] bond0: (slave bond_slave_0): interface is now down [ 79.757465][ T5863] bond0: (slave bond_slave_1): interface is now down [ 79.761490][ T5863] bond0: now running without any active interface! [ 79.765969][ T8227] device-mapper: table: 248:8: writecache: Origin data device lookup failed (-EBUSY) [ 79.765983][ T8227] device-mapper: ioctl: error adding target to table [ 79.767933][ T8224] device-mapper: table: 248:8: integrity: Device lookup failed (-EBUSY) [ 79.767945][ T8224] device-mapper: ioctl: error adding target to table [ 79.788073][ T8140] veth0_macvtap: entered promiscuous mode [ 79.792809][ T8140] veth1_macvtap: entered promiscuous mode [ 79.801452][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.807096][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.834901][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.835134][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861845][ T7617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.861864][ T7617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.878119][ T7615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.878132][ T7615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.885419][ T5863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.887217][ T5863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.934808][ T5789] Bluetooth: hci0: command tx timeout [ 80.129167][ T8248] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 80.151454][ T8250] FAULT_INJECTION: forcing a failure. [ 80.151454][ T8250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.151483][ T8250] CPU: 2 UID: 0 PID: 8250 Comm: syz.1.453 Not tainted syzkaller #0 PREEMPT(full) [ 80.151495][ T8250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.151501][ T8250] Call Trace: [ 80.151509][ T8250] [ 80.151514][ T8250] dump_stack_lvl+0x100/0x190 [ 80.151544][ T8250] should_fail_ex.cold+0x5/0xa [ 80.151561][ T8250] should_fail_alloc_page+0xeb/0x140 [ 80.151582][ T8250] prepare_alloc_pages+0x1f0/0x5b0 [ 80.151603][ T8250] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 80.151620][ T8250] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.151641][ T8250] ? rcu_is_watching+0x13/0xc0 [ 80.151658][ T8250] ? trace_hrtimer_start+0x77/0x220 [ 80.151678][ T8250] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 80.151694][ T8250] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.151710][ T8250] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 80.151732][ T8250] ? rcu_is_watching+0x13/0xc0 [ 80.151744][ T8250] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 80.151759][ T8250] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.151775][ T8250] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 80.151792][ T8250] ? rcu_is_watching+0x13/0xc0 [ 80.151806][ T8250] ? __lock_acquire+0x5c0/0x1f40 [ 80.151822][ T8250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.151852][ T8250] ? policy_nodemask+0xed/0x5e0 [ 80.151867][ T8250] alloc_pages_mpol+0x201/0x560 [ 80.151881][ T8250] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.151894][ T8250] ? futex_unqueue+0x133/0x2c0 [ 80.151909][ T8250] folio_alloc_mpol_noprof+0x36/0x260 [ 80.151924][ T8250] vma_alloc_folio_noprof+0xed/0x1d0 [ 80.151939][ T8250] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 80.151958][ T8250] do_anonymous_page+0xac9/0x2050 [ 80.151975][ T8250] ? __pfx_do_anonymous_page+0x10/0x10 [ 80.151987][ T8250] ? rcu_read_unlock+0x2d/0xb0 [ 80.151999][ T8250] ? rcu_read_unlock+0x2d/0xb0 [ 80.152014][ T8250] __handle_mm_fault+0x1eeb/0x2f40 [ 80.152028][ T8250] ? lock_vma_under_rcu+0x11d/0x590 [ 80.152039][ T8250] ? __pfx___handle_mm_fault+0x10/0x10 [ 80.152054][ T8250] ? lock_vma_under_rcu+0x17c/0x590 [ 80.152073][ T8250] handle_mm_fault+0x363/0xa30 [ 80.152088][ T8250] do_user_addr_fault+0x59c/0x12f0 [ 80.152109][ T8250] exc_page_fault+0x6f/0xd0 [ 80.152121][ T8250] asm_exc_page_fault+0x26/0x30 [ 80.152132][ T8250] RIP: 0033:0x7fd701e66ec6 [ 80.152141][ T8250] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ba 17 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 80.152151][ T8250] RSP: 002b:00007fd702f45f60 EFLAGS: 00010206 [ 80.152160][ T8250] RAX: 0000000000000000 RBX: 00007fd702225fa0 RCX: 0000000000000000 [ 80.152166][ T8250] RDX: 0000200000000080 RSI: 0000200000000080 RDI: 00007fd70203866a [ 80.152172][ T8250] RBP: 00007fd702037b70 R08: 00007fd701e53a30 R09: 0000000000000000 [ 80.152178][ T8250] R10: 0000000000000000 R11: 0000200000000080 R12: 0000000000000024 [ 80.152184][ T8250] R13: 0000200000000080 R14: 0000000000000000 R15: 00007ffe3e6435b8 [ 80.152198][ T8250] [ 80.152728][ T8250] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 80.274959][ T8258] __nla_validate_parse: 59 callbacks suppressed [ 80.274985][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 80.275919][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 80.297724][ T8258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.365545][ T8264] netlink: 'syz.4.458': attribute type 8 has an invalid length. [ 80.384729][ T5898] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 80.534168][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 80.534926][ T5898] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.535507][ T5898] usb 6-1: config 0 has no interfaces? [ 80.537571][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.537592][ T5898] usb 6-1: Product: syz [ 80.537605][ T5898] usb 6-1: Manufacturer: syz [ 80.537618][ T5898] usb 6-1: SerialNumber: syz [ 80.543502][ T5898] usb 6-1: config 0 descriptor?? [ 80.679576][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 80.693492][ T8296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.747701][ T2426] usb 6-1: USB disconnect, device number 15 [ 80.760475][ T8302] macvlan2: entered promiscuous mode [ 80.760496][ T8302] macvlan2: entered allmulticast mode [ 80.761410][ T8302] bond2: (slave macvlan2): Opening slave failed [ 80.811613][ C2] vcan0: j1939_tp_rxtimer: 0xffff888057086400: rx timeout, send abort [ 81.031539][ T8324] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 81.031856][ T8325] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 81.088092][ T8328] mmap: syz.2.474 (8328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.102610][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.477'. [ 81.115387][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 81.193598][ T8346] syzkaller0: entered promiscuous mode [ 81.193618][ T8346] syzkaller0: entered allmulticast mode [ 81.210196][ T8346] tipc: Started in network mode [ 81.210222][ T8346] tipc: Node identity 5643771f730b, cluster identity 4711 [ 81.211861][ T8346] tipc: Enabled bearer , priority 0 [ 81.214824][ T8346] tipc: Resetting bearer [ 81.215656][ T8346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.215682][ T8346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.218709][ T8345] tipc: Resetting bearer [ 81.231623][ T8345] tipc: Disabling bearer [ 81.282681][ T8351] netlink: zone id is out of range [ 81.282730][ T8350] netlink: zone id is out of range [ 81.288488][ T8351] netlink: set zone limit has 4 unknown bytes [ 81.289137][ T8350] netlink: set zone limit has 4 unknown bytes [ 81.311672][ C2] vcan0: j1939_tp_rxtimer: 0xffff888057086400: abort rx timeout. Force session deactivation [ 81.336977][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 81.389320][ T8358] jffs2: notice: (8358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.400497][ T8365] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.435854][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.487'. [ 81.588127][ T8387] device-mapper: table: 248:9: : unknown target type [ 81.588141][ T8387] device-mapper: ioctl: error adding target to table [ 81.633965][ T2426] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 81.754025][ T1718] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 81.795230][ T2426] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 81.796169][ T2426] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.796190][ T2426] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.796204][ T2426] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.796239][ T2426] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 81.796265][ T2426] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 81.797688][ T2426] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.797707][ T2426] usb 9-1: Product: syz [ 81.797719][ T2426] usb 9-1: Manufacturer: syz [ 81.803852][ T2426] cdc_wdm 9-1:1.0: skipping garbage [ 81.803936][ T2426] cdc_wdm 9-1:1.0: skipping garbage [ 81.806191][ T2426] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 81.806201][ T2426] cdc_wdm 9-1:1.0: Unknown control protocol [ 81.883996][ T5898] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 81.914808][ T1718] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 81.915648][ T1718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.915664][ T1718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.915676][ T1718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.915695][ T1718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.918441][ T1718] usb 6-1: config 0 descriptor?? [ 82.005447][ T855] usb 9-1: USB disconnect, device number 8 [ 82.014731][ T5789] Bluetooth: hci0: command tx timeout [ 82.034061][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 82.034870][ T5898] usb 10-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00 [ 82.036054][ T5898] usb 10-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 82.036085][ T5898] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.036105][ T5898] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 82.036126][ T5898] usb 10-1: config 0 interface 0 has no altsetting 0 [ 82.036149][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.038081][ T5898] usb 10-1: config 0 descriptor?? [ 82.326642][ T1718] hid_parser_main: 22 callbacks suppressed [ 82.326657][ T1718] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.326672][ T1718] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.341340][ T1718] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.375993][ T8395] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 82.380243][ T8395] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 82.480485][ T5898] hid-multitouch 0003:1FD2:6007.0005: hiddev1,hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 82.565540][ T11] usb 6-1: USB disconnect, device number 16 [ 82.643989][ T42] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 82.660979][ T5943] usb 10-1: USB disconnect, device number 2 [ 82.800221][ T8401] Bluetooth: MGMT ver 1.23 [ 82.825609][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 82.826215][ T42] usb 9-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 82.828670][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.828685][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.828695][ T42] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.828714][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.830044][ T42] usb 9-1: config 0 descriptor?? [ 83.161518][ T8407] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 83.179645][ T8407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.201225][ T8407] bond2: (slave geneve2): making interface the new active one [ 83.202983][ T8407] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 83.220010][ T8410] bridge0: port 3(syzkaller0) entered blocking state [ 83.220153][ T8410] bridge0: port 3(syzkaller0) entered disabled state [ 83.220255][ T8410] syzkaller0: entered allmulticast mode [ 83.221602][ T8410] syzkaller0: entered promiscuous mode [ 83.222148][ T8410] bridge0: port 3(syzkaller0) entered blocking state [ 83.222238][ T8410] bridge0: port 3(syzkaller0) entered forwarding state [ 83.233827][ T8410] bridge0: port 3(syzkaller0) entered disabled state [ 83.246492][ T8410] syzkaller0 (unregistering): left allmulticast mode [ 83.246509][ T8410] syzkaller0 (unregistering): left promiscuous mode [ 83.246551][ T8410] bridge0: port 3(syzkaller0) entered disabled state [ 83.249659][ T42] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0006/input/input14 [ 83.345872][ T42] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0006/input/input15 [ 83.364843][ T42] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 83.475110][ T8397] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 83.475154][ T8397] netlink: 96 bytes leftover after parsing attributes in process `syz.4.495'. [ 83.479599][ T65] usb 9-1: USB disconnect, device number 9 [ 83.607424][ T8432] netlink: 'syz.1.504': attribute type 11 has an invalid length. [ 83.607444][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.504'. [ 83.653431][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 83.653450][ T43] audit: type=1400 audit(1794206813.734:708): avc: denied { read write } for pid=8438 comm="syz.1.505" name="uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.653648][ T43] audit: type=1400 audit(1794206813.734:709): avc: denied { open } for pid=8438 comm="syz.1.505" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 83.696498][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 83.732425][ T8441] hsr_slave_1 (unregistering): left promiscuous mode [ 83.738440][ T43] audit: type=1400 audit(1794206813.824:710): avc: denied { setopt } for pid=8442 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.746937][ T43] audit: type=1400 audit(1794206813.834:711): avc: denied { create } for pid=8442 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.748774][ T43] audit: type=1400 audit(1794206813.834:712): avc: denied { map } for pid=8440 comm="syz.2.506" path="socket:[30014]" dev="sockfs" ino=30014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.748818][ T43] audit: type=1400 audit(1794206813.834:713): avc: denied { read } for pid=8440 comm="syz.2.506" path="socket:[30014]" dev="sockfs" ino=30014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.756836][ T5943] wacom 0003:056A:0043.0007: item fetching failed at offset 8/33 [ 83.757330][ T5943] wacom 0003:056A:0043.0007: parse failed [ 83.757379][ T5943] wacom 0003:056A:0043.0007: probe with driver wacom failed with error -22 [ 83.757624][ T43] audit: type=1400 audit(1794206813.844:714): avc: denied { connect } for pid=8440 comm="syz.2.506" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.759082][ T8444] xt_hashlimit: size too large, truncated to 1048576 [ 83.773571][ T43] audit: type=1400 audit(1794206813.854:715): avc: denied { read } for pid=8140 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.773912][ T43] audit: type=1400 audit(1794206813.854:716): avc: denied { open } for pid=8140 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.776180][ T43] audit: type=1400 audit(1794206813.864:717): avc: denied { ioctl } for pid=8140 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.874953][ T8449] Failed to decode metaid 5 dlen 4 err -22 [ 83.877256][ T8449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=8449 comm=syz.5.508 [ 84.107305][ T5789] Bluetooth: hci0: command tx timeout [ 84.272081][ T8485] dlm: no locking on control device [ 84.282527][ T8483] netlink: 'syz.2.519': attribute type 16 has an invalid length. [ 84.890028][ T8515] ip_tables: iptables: counters copy to user failed while replacing table [ 84.957606][ T8515] netlink: 'syz.1.526': attribute type 11 has an invalid length. [ 85.034073][ T1718] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 85.041163][ T8526] Invalid ELF header type: 3 != 1 [ 85.108812][ T8532] geneve3: entered promiscuous mode [ 85.108832][ T8532] geneve3: entered allmulticast mode [ 85.134027][ T5595] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.134965][ T5595] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.134996][ T5595] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.135022][ T5595] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.163123][ T8537] loop0: detected capacity change from 0 to 4096 [ 85.185259][ T1718] usb 9-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 85.188080][ T1718] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 85.188094][ T1718] usb 9-1: Product: syz [ 85.188101][ T1718] usb 9-1: Manufacturer: syz [ 85.188108][ T1718] usb 9-1: SerialNumber: syz [ 85.190245][ T1718] usb 9-1: config 0 descriptor?? [ 85.227934][ T8537] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 85.227949][ T8537] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.227976][ T8537] loop0: [ 85.357342][ T8545] 0x000000000003-0x000000010001 : "" [ 85.370324][ T8545] ftl_cs: FTL header corrupt! [ 85.392468][ T5943] usb 9-1: USB disconnect, device number 10 [ 85.950233][ T8558] ip_tables: iptables: counters copy to user failed while replacing table [ 85.998858][ T8562] Set syz0 is full, maxelem 2 reached [ 86.047918][ T8568] syzkaller1: entered promiscuous mode [ 86.047931][ T8568] syzkaller1: entered allmulticast mode [ 86.159214][ T8577] ip_tables: iptables: counters copy to user failed while replacing table [ 86.174128][ T5789] Bluetooth: hci0: command tx timeout [ 86.219451][ T7615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.219466][ T7615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.712072][ T8598] FAULT_INJECTION: forcing a failure. [ 86.712072][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 86.712101][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.2.549 Not tainted syzkaller #0 PREEMPT(full) [ 86.712122][ T8598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.712134][ T8598] Call Trace: [ 86.712150][ T8598] [ 86.712158][ T8598] dump_stack_lvl+0x100/0x190 [ 86.712206][ T8598] should_fail_ex.cold+0x5/0xa [ 86.712235][ T8598] should_failslab+0xc2/0x120 [ 86.712278][ T8598] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 86.712321][ T8598] ? alloc_inode+0x183/0x250 [ 86.712353][ T8598] alloc_inode+0x183/0x250 [ 86.712372][ T8598] alloc_anon_inode+0x28/0x3b0 [ 86.712401][ T8598] anon_inode_make_secure_inode+0x2f/0x140 [ 86.712437][ T8598] __anon_inode_getfile+0x1cf/0x280 [ 86.712457][ T8598] ? _copy_to_user+0xaf/0xd0 [ 86.712493][ T8598] io_uring_setup.cold+0x197d/0x1c7e [ 86.712521][ T8598] ? __pfx_io_uring_setup+0x10/0x10 [ 86.712554][ T8598] ? find_held_lock+0x2b/0x80 [ 86.712632][ T8598] ? __pfx___x64_sys_futex+0x10/0x10 [ 86.712674][ T8598] __x64_sys_io_uring_setup+0xc2/0x170 [ 86.712701][ T8598] do_syscall_64+0x123/0x7b0 [ 86.712756][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.712777][ T8598] RIP: 0033:0x7f5c18d9fb19 [ 86.712794][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.712813][ T8598] RSP: 002b:00007f5c19d44028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 86.712833][ T8598] RAX: ffffffffffffffda RBX: 00007f5c19025fa0 RCX: 00007f5c18d9fb19 [ 86.712845][ T8598] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000f06 [ 86.712856][ T8598] RBP: 00007f5c18e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 86.712868][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.712879][ T8598] R13: 00007f5c19026038 R14: 00007f5c19025fa0 R15: 00007fff64320dd8 [ 86.712906][ T8598] [ 87.208529][ T8623] smc: removing ib device rxe0 [ 87.228827][ T8623] smbdirect: ib_dev[rxe0] removed [ 87.398812][ T8629] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 87.398864][ T8629] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 87.398872][ T8629] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 87.398877][ T8629] One or more global auth toks could not properly register; rc = [-22] [ 87.398894][ T8629] Error validating options; rc = [-22] [ 87.430781][ T8633] __nla_validate_parse: 5 callbacks suppressed [ 87.430798][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.559'. [ 87.779015][ T8652] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 87.811138][ T8654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.828037][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 87.828126][ T8651] bridge_slave_1: left allmulticast mode [ 87.828145][ T8651] bridge_slave_1: left promiscuous mode [ 87.828408][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.831806][ T8651] bridge_slave_0: left allmulticast mode [ 87.831827][ T8651] bridge_slave_0: left promiscuous mode [ 87.833366][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.100986][ T8672] jffs2: notice: (8672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.101013][ T8676] overlayfs: failed to resolve './bus': -2 [ 88.114089][ T7616] IPVS: starting estimator thread 0... [ 88.223974][ T8677] IPVS: using max 43 ests per chain, 103200 per kthread [ 88.279603][ T8684] input: syz0 as /devices/virtual/input/input16 [ 88.383466][ T8694] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 88.383828][ T8693] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 88.414609][ T8701] vcan0: tx address claim with dest, not broadcast [ 88.680162][ T43] kauditd_printk_skb: 179 callbacks suppressed [ 88.680175][ T43] audit: type=1400 audit(1794206818.764:897): avc: denied { create } for pid=8712 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.724148][ T65] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 88.792505][ T43] audit: type=1400 audit(1794206818.874:898): avc: denied { write } for pid=8729 comm="syz.4.582" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.883945][ T65] usb 10-1: Using ep0 maxpacket: 32 [ 88.884383][ T65] usb 10-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 88.885198][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.886772][ T65] usb 10-1: config 0 descriptor?? [ 88.896058][ T65] as10x_usb: device has been detected [ 88.896370][ T65] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 88.917903][ T65] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 88.938003][ T65] as10x_usb: error during firmware upload part1 [ 88.938419][ T65] Registered device nBox DVB-T Dongle [ 88.941515][ T43] audit: type=1400 audit(1794206819.024:899): avc: denied { firmware_load } for pid=65 comm="kworker/3:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 89.064982][ T43] audit: type=1400 audit(1794206819.154:900): avc: denied { search } for pid=8752 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.065027][ T43] audit: type=1400 audit(1794206819.154:901): avc: denied { search } for pid=8752 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.065062][ T43] audit: type=1400 audit(1794206819.154:902): avc: denied { search } for pid=8752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.065095][ T43] audit: type=1400 audit(1794206819.154:903): avc: denied { search } for pid=8752 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.068866][ T43] audit: type=1400 audit(1794206819.154:904): avc: denied { read } for pid=8756 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.069551][ T43] audit: type=1400 audit(1794206819.154:905): avc: denied { read open } for pid=8756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.069591][ T43] audit: type=1400 audit(1794206819.154:906): avc: denied { getattr } for pid=8756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.100285][ T8754] FAULT_INJECTION: forcing a failure. [ 89.100285][ T8754] name fail_futex, interval 1, probability 0, space 0, times 0 [ 89.100315][ T8754] CPU: 3 UID: 0 PID: 8754 Comm: syz.4.585 Not tainted syzkaller #0 PREEMPT(full) [ 89.100336][ T8754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.100348][ T8754] Call Trace: [ 89.100366][ T8754] [ 89.100375][ T8754] dump_stack_lvl+0x100/0x190 [ 89.100427][ T8754] should_fail_ex.cold+0x5/0xa [ 89.100455][ T8754] get_futex_key+0xf5d/0x13e0 [ 89.100512][ T8754] ? __pfx_get_futex_key+0x10/0x10 [ 89.100532][ T8754] ? __mutex_unlock_slowpath+0x35d/0x930 [ 89.100589][ T8754] futex_wake+0xf4/0x5e0 [ 89.100615][ T8754] ? __pfx_futex_wake+0x10/0x10 [ 89.100642][ T8754] ? lock_acquire+0x1d1/0x380 [ 89.100676][ T8754] ? detach_task_ctx_data+0x83/0x490 [ 89.100706][ T8754] do_futex+0x2b2/0x440 [ 89.100727][ T8754] ? __pfx_do_futex+0x10/0x10 [ 89.100745][ T8754] ? __might_fault+0xc5/0x140 [ 89.100789][ T8754] mm_exit_exec_release+0x256/0x2f0 [ 89.100811][ T8754] do_exit+0x6d8/0x2a00 [ 89.100833][ T8754] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.100860][ T8754] ? __pfx_do_exit+0x10/0x10 [ 89.100882][ T8754] ? do_raw_spin_lock+0x128/0x260 [ 89.100898][ T8754] ? find_held_lock+0x2b/0x80 [ 89.100914][ T8754] ? get_signal+0xa28/0x22e0 [ 89.100946][ T8754] do_group_exit+0xd5/0x2a0 [ 89.100972][ T8754] get_signal+0x1f58/0x22e0 [ 89.100990][ T8754] ? __pfx_futex_wait+0x10/0x10 [ 89.101021][ T8754] ? __pfx_get_signal+0x10/0x10 [ 89.101043][ T8754] ? do_futex+0x190/0x440 [ 89.101065][ T8754] arch_do_signal_or_restart+0x91/0x7e0 [ 89.101085][ T8754] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.101118][ T8754] exit_to_user_mode_loop+0x139/0x700 [ 89.101144][ T8754] ? rcu_is_watching+0x13/0xc0 [ 89.101166][ T8754] do_syscall_64+0x661/0x7b0 [ 89.101190][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.101208][ T8754] RIP: 0033:0x7fd05a99fb19 [ 89.101223][ T8754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.101239][ T8754] RSP: 002b:00007fd05b8fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 89.101255][ T8754] RAX: fffffffffffffe00 RBX: 00007fd05ac25fa8 RCX: 00007fd05a99fb19 [ 89.101266][ T8754] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd05ac25fa8 [ 89.101276][ T8754] RBP: 00007fd05ac25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 89.101286][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.101296][ T8754] R13: 00007fd05ac26038 R14: 00007fff6c4383d0 R15: 00007fff6c4384b8 [ 89.101321][ T8754] [ 89.111501][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.578'. [ 89.499351][ T8790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.588'. [ 89.557678][ T8801] netlink: 156 bytes leftover after parsing attributes in process `syz.1.589'. [ 89.558889][ T8801] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 89.559295][ T8801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.759822][ T8817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.770444][ T8810] xt_hashlimit: size too large, truncated to 1048576 [ 89.878339][ T8826] netlink: set zone limit has 4 unknown bytes [ 90.020654][ T8846] netlink: 45 bytes leftover after parsing attributes in process `syz.1.597'. [ 90.081654][ T8846] Format for adding new port is "id [perm_addr]" (uint MAC). [ 90.082070][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'. [ 90.535233][ T8862] team0: No ports can be present during mode change [ 90.541816][ T8862] kvm: pic: single mode not supported [ 90.541933][ T8862] kvm: pic: level sensitive irq not supported [ 90.640373][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.602'. [ 90.776151][ T8878] MINIX-fs: blocksize too small for device [ 90.811909][ T8880] misc userio: The device must be registered before sending interrupts [ 91.102855][ T8890] netlink: 'syz.1.606': attribute type 12 has an invalid length. [ 91.102874][ T8890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.606'. [ 91.159082][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 91.161671][ T8897] netlink: 'syz.1.608': attribute type 11 has an invalid length. [ 91.213414][ T8906] netlink: 'syz.1.610': attribute type 12 has an invalid length. [ 91.460624][ T8916] FAULT_INJECTION: forcing a failure. [ 91.460624][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.460644][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(full) [ 91.460656][ T8916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.460663][ T8916] Call Trace: [ 91.460680][ T8916] [ 91.460685][ T8916] dump_stack_lvl+0x100/0x190 [ 91.460708][ T8916] should_fail_ex.cold+0x5/0xa [ 91.460727][ T8916] strncpy_from_user+0x3b/0x2d0 [ 91.460761][ T8916] do_getname+0x78/0x390 [ 91.460788][ T8916] do_fchownat+0xc6/0x1f0 [ 91.460804][ T8916] ? __pfx_do_fchownat+0x10/0x10 [ 91.460828][ T8916] __x64_sys_lchown+0x7e/0xc0 [ 91.460842][ T8916] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.460856][ T8916] do_syscall_64+0x123/0x7b0 [ 91.460871][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.460883][ T8916] RIP: 0033:0x7fd701f9fb19 [ 91.460893][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.460903][ T8916] RSP: 002b:00007fd702f48028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 91.460914][ T8916] RAX: ffffffffffffffda RBX: 00007fd702225fa0 RCX: 00007fd701f9fb19 [ 91.460922][ T8916] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000480 [ 91.460929][ T8916] RBP: 00007fd702037b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.460935][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.460942][ T8916] R13: 00007fd702226038 R14: 00007fd702225fa0 R15: 00007ffe3e6435b8 [ 91.460957][ T8916] [ 91.468781][ T2426] usb 10-1: USB disconnect, device number 3 [ 91.476581][ T2426] Unregistered device nBox DVB-T Dongle [ 91.477934][ T2426] as10x_usb: device has been disconnected [ 91.499918][ T8919] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 91.499932][ T8919] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.500165][ T8919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.641267][ T8930] xt_hashlimit: size too large, truncated to 1048576 [ 91.643723][ T8931] random: crng reseeded on system resumption [ 91.733969][ T42] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 91.885909][ T42] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 91.886711][ T42] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.887285][ T8952] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 91.888526][ T42] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.890166][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.890179][ T42] usb 6-1: Product: syz [ 91.890187][ T42] usb 6-1: Manufacturer: syz [ 91.890194][ T42] usb 6-1: SerialNumber: syz [ 91.894105][ T42] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 91.901678][ T42] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 91.905237][ T42] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 92.022527][ T8957] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 92.072248][ T8961] IPVS: Unknown mcast interface: vcan0 [ 92.081351][ T8963] comedi comedi2: comedi_test: 8 microvolt, 2 microsecond waveform attached [ 92.082525][ T8961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.107852][ T8963] netlink: 'syz.5.628': attribute type 1 has an invalid length. [ 92.445234][ T8999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=8999 comm=syz.5.641 [ 92.488647][ T9001] syzkaller0: entered promiscuous mode [ 92.488662][ T9001] syzkaller0: entered allmulticast mode [ 92.496859][ T9001] tipc: Started in network mode [ 92.496883][ T9001] tipc: Node identity 1a2d327b20bd, cluster identity 4711 [ 92.497326][ T9001] tipc: Enabled bearer , priority 0 [ 92.500918][ T9000] tipc: Resetting bearer [ 92.514889][ T9000] tipc: Disabling bearer [ 92.563123][ T9003] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 92.570292][ T9006] syzkaller0: entered promiscuous mode [ 92.570312][ T9006] syzkaller0: entered allmulticast mode [ 92.604069][ T9011] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 92.650210][ T9022] gadgetfs: bound to dummy_udc driver [ 92.885361][ T5943] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.885694][ C0] gadgetfs: connected [ 92.887552][ T5943] gadgetfs: disconnected [ 93.049843][ T9035] netlink: 'syz.5.652': attribute type 10 has an invalid length. [ 93.063336][ T9035] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 93.067671][ T9035] team0: Port device wlan0 added [ 93.095555][ T9039] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 93.095586][ T9039] syzkaller1: Refused to change device type [ 93.097410][ T9042] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 93.097469][ T9045] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 93.097514][ T9045] syzkaller1: Refused to change device type [ 93.631446][ T8919] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 93.636792][ T11] usb 6-1: USB disconnect, device number 17 [ 93.645726][ T11] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 93.648949][ T11] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 93.649550][ T11] ti_usb_3410_5052 6-1:2.0: device disconnected [ 93.713329][ T9062] Unknown options in mask 6 [ 93.724874][ T43] kauditd_printk_skb: 82 callbacks suppressed [ 93.724885][ T43] audit: type=1400 audit(1794206823.814:989): avc: denied { accept } for pid=9063 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 93.793398][ T43] audit: type=1400 audit(1794206823.874:990): avc: denied { ioctl } for pid=9063 comm="syz.4.662" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.091777][ T9079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.091891][ T9079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.091921][ T9079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.109433][ T9079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.123276][ T9081] syzkaller1: entered promiscuous mode [ 94.123296][ T9081] syzkaller1: entered allmulticast mode [ 94.172926][ T43] audit: type=1400 audit(1794206824.254:991): avc: denied { ioctl } for pid=9084 comm="syz.1.667" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.220291][ T9087] __nla_validate_parse: 3 callbacks suppressed [ 94.220305][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.668'. [ 94.223057][ T43] audit: type=1400 audit(1794206824.304:992): avc: denied { mounton } for pid=9088 comm="syz.4.669" path="/106/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 94.328797][ T9096] comedi comedi0: unsupported base address 0x3 [ 94.331395][ T9098] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 94.416355][ T43] audit: type=1326 audit(1794206824.504:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.2.672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c18d9fb19 code=0x7ffc0000 [ 94.416383][ T43] audit: type=1326 audit(1794206824.504:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.2.672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c18d9fb19 code=0x7ffc0000 [ 94.463953][ T11] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 94.615433][ T43] audit: type=1400 audit(1794206824.704:995): avc: denied { shutdown } for pid=9113 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.633988][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 94.635678][ T11] usb 9-1: New USB device found: idVendor=056a, idProduct=0057, bcdDevice=0.40 [ 94.638228][ T11] usb 9-1: config 1 interface 0 has no altsetting 0 [ 94.640229][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.640249][ T11] usb 9-1: Product: syz [ 94.640259][ T11] usb 9-1: Manufacturer: ዓ쇝僳写꽧彔嗱諲䓙좗砬࿊橎ၠ⅟驽ﯔ㫽猫꠩뒱閗읿諳Ἐ權ꞌ챠韡ⶳ鿛縕㜲茊嘌׏ꜘ䜈਒ꘙ욺⇉싁뎮჉╓琧匕挌尿♭繸媄봷1풿늍櫧ႎ撌椷䓼揣㌨甃弚䭸ꍣᔝ繡鳞ङ딌礰뗬꥚ڨ쐢⨉淤蔨ꕂꧡ刊礨摣嬔⤞퉺歶藾ᕴ噣堮⚠೛쓃ຬ坮袒쓢】응᯳鬙逖暟鮿ꣀ [ 94.640289][ T11] usb 9-1: SerialNumber: syz [ 94.693954][ T855] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 94.864511][ T855] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.864552][ T855] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 94.866262][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.866285][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.866298][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.867675][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.867696][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.867708][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.868423][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.868443][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.868454][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.869167][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.869187][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.869199][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.869897][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.869916][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.869928][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.870624][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.870644][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.870655][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.871361][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.871380][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.871392][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.872084][ T855] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.872104][ T855] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.872115][ T855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.873552][ T855] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.873563][ T855] usb 7-1: Product: syz [ 94.873570][ T855] usb 7-1: Manufacturer: syz [ 94.873577][ T855] usb 7-1: SerialNumber: syz [ 94.876272][ T855] usb 7-1: config 0 descriptor?? [ 94.882606][ T855] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 95.055820][ T11] usbhid 9-1:1.0: can't add hid device: -71 [ 95.056368][ T11] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 95.062443][ T11] usb 9-1: USB disconnect, device number 11 [ 95.162621][ T2426] libceph: connect (1)[c::]:6789 error -101 [ 95.163017][ T2426] libceph: mon0 (1)[c::]:6789 connect error [ 95.170225][ T43] audit: type=1400 audit(1794206825.254:996): avc: denied { write } for pid=9128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.185276][ T9134] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 95.185292][ T9134] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.185306][ T9134] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 95.185315][ T9134] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 95.185321][ T9134] page dumped because: unmovable page [ 95.185326][ T9134] page_owner tracks the page as allocated [ 95.185330][ T9134] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5774, tgid 5774 (syz-executor), ts 36907971612 [ 95.185346][ T9134] post_alloc_hook+0xfd/0x120 [ 95.185410][ T9134] get_page_from_freelist+0x112f/0x3640 [ 95.185424][ T9134] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 95.185438][ T9134] alloc_pages_mpol+0x201/0x560 [ 95.185456][ T9134] alloc_pages_noprof+0x1a/0x160 [ 95.185469][ T9134] __vmalloc_node_range_noprof+0x899/0x1440 [ 95.185480][ T9134] vmalloc_user_noprof+0x9e/0xe0 [ 95.185491][ T9134] kcov_ioctl+0x4d/0x750 [ 95.185507][ T9134] __x64_sys_ioctl+0x18e/0x210 [ 95.185555][ T9134] do_syscall_64+0x123/0x7b0 [ 95.185596][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.185606][ T9134] page_owner free stack trace missing [ 95.188196][ T43] audit: type=1400 audit(1794206825.274:997): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.188275][ T43] audit: type=1400 audit(1794206825.274:998): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.190629][ T10] libceph: connect (1)[c::]:6789 error -101 [ 95.190723][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 95.195313][ T2426] libceph: connect (1)[c::]:6789 error -101 [ 95.195404][ T2426] libceph: mon0 (1)[c::]:6789 connect error [ 95.220139][ T855] libceph: connect (1)[c::]:6789 error -101 [ 95.220277][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 95.256866][ T9151] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50000 [ 95.256881][ T9151] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.256896][ T9151] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 95.256905][ T9151] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 95.256910][ T9151] page dumped because: unmovable page [ 95.256916][ T9151] page_owner tracks the page as allocated [ 95.256920][ T9151] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5774, tgid 5774 (syz-executor), ts 36907971612 [ 95.256936][ T9151] post_alloc_hook+0xfd/0x120 [ 95.256952][ T9151] get_page_from_freelist+0x112f/0x3640 [ 95.256967][ T9151] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 95.256981][ T9151] alloc_pages_mpol+0x201/0x560 [ 95.256993][ T9151] alloc_pages_noprof+0x1a/0x160 [ 95.257006][ T9151] __vmalloc_node_range_noprof+0x899/0x1440 [ 95.257017][ T9151] vmalloc_user_noprof+0x9e/0xe0 [ 95.257028][ T9151] kcov_ioctl+0x4d/0x750 [ 95.257036][ T9151] __x64_sys_ioctl+0x18e/0x210 [ 95.257046][ T9151] do_syscall_64+0x123/0x7b0 [ 95.257057][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.257068][ T9151] page_owner free stack trace missing [ 95.454518][ T11] libceph: connect (1)[c::]:6789 error -101 [ 95.454623][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 95.454637][ T2426] libceph: connect (1)[c::]:6789 error -101 [ 95.454733][ T2426] libceph: mon0 (1)[c::]:6789 connect error [ 95.474292][ T855] libceph: connect (1)[c::]:6789 error -101 [ 95.474437][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 95.658259][ T9159] netlink: 192 bytes leftover after parsing attributes in process `syz.4.680'. [ 95.964341][ T2426] libceph: connect (1)[c::]:6789 error -101 [ 95.964341][ T11] libceph: connect (1)[c::]:6789 error -101 [ 95.964504][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 95.964504][ T2426] libceph: mon0 (1)[c::]:6789 connect error [ 95.985502][ T855] libceph: connect (1)[c::]:6789 error -101 [ 95.985640][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 95.987033][ T9134] ceph: No mds server is up or the cluster is laggy [ 96.026205][ T9133] ceph: No mds server is up or the cluster is laggy [ 96.026500][ T9132] ceph: No mds server is up or the cluster is laggy [ 96.106408][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.156614][ T5789] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 96.174411][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.347405][ T9182] hub 1-0:1.0: USB hub found [ 96.347554][ T9182] hub 1-0:1.0: 6 ports detected [ 96.514359][ T2426] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 96.662347][ T9192] netlink: 'syz.4.689': attribute type 9 has an invalid length. [ 96.662362][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 96.674394][ T9192] netlink: 'syz.4.689': attribute type 9 has an invalid length. [ 96.674408][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 96.684275][ T5863] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.684769][ T5863] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.684810][ T5863] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.684871][ T5863] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.706744][ T2426] usb 1-1: New USB device found: idVendor=0627, idProduct=0001, bcdDevice=0.00 [ 96.720304][ T2426] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 96.720329][ T2426] usb 1-1: Product: QEMU USB Tablet [ 96.720342][ T2426] usb 1-1: Manufacturer: QEMU [ 96.720354][ T2426] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 96.745762][ T2426] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input18 [ 96.809819][ T2426] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 96.954859][ T5789] Bluetooth: hci1: Invalid response length for 0x20a3 [ 96.954879][ T5789] Bluetooth: hci1: unexpected event for opcode 0x20a3 [ 97.478966][ T42] usb 7-1: USB disconnect, device number 12 [ 97.490084][ T42] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 97.537473][ T9212] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.695'. [ 97.540554][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.695'. [ 97.613568][ T9219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9219 comm=syz.2.698 [ 98.264374][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.742032][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 98.742051][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 98.751268][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 98.751280][ T43] audit: type=1400 audit(1794206828.834:1026): avc: denied { search } for pid=9224 comm="syz.5.700" name="/" dev="configfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.751393][ T43] audit: type=1400 audit(1794206828.834:1027): avc: denied { search } for pid=9224 comm="syz.5.700" name="usb_gadget" dev="configfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.755820][ T43] audit: type=1400 audit(1794206828.844:1028): avc: denied { create } for pid=9224 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.977603][ T43] audit: type=1400 audit(1794206829.064:1029): avc: denied { unmount } for pid=8140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.023557][ T9240] netlink: 'syz.5.703': attribute type 12 has an invalid length. [ 99.064301][ T5595] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.064326][ T5595] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.064344][ T5595] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.064360][ T5595] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.441885][ T43] audit: type=1400 audit(1794206829.524:1030): avc: denied { write } for pid=9244 comm="syz.1.705" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.456989][ T43] audit: type=1400 audit(1794206829.544:1031): avc: denied { connect } for pid=9242 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.461937][ T43] audit: type=1400 audit(1794206829.544:1032): avc: denied { read } for pid=9242 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.485919][ T43] audit: type=1400 audit(1794206829.574:1033): avc: denied { write } for pid=9218 comm="syz.2.698" name="functions" dev="configfs" ino=11690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.486122][ T43] audit: type=1400 audit(1794206829.574:1034): avc: denied { add_name } for pid=9218 comm="syz.2.698" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.486144][ T43] audit: type=1400 audit(1794206829.574:1035): avc: denied { create } for pid=9218 comm="syz.2.698" name="mass_storage.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 99.486290][ T9219] LUN: removable file: (no medium) [ 99.705292][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 99.792672][ T9270] syzkaller1: entered promiscuous mode [ 99.792687][ T9270] syzkaller1: entered allmulticast mode [ 99.802958][ T9269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.816026][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'. [ 99.982238][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 99.986264][ T9292] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20001 [ 100.187746][ T9296] FAULT_INJECTION: forcing a failure. [ 100.187746][ T9296] name failslab, interval 1, probability 0, space 0, times 0 [ 100.187774][ T9296] CPU: 0 UID: 0 PID: 9296 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT(full) [ 100.187793][ T9296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.187804][ T9296] Call Trace: [ 100.187827][ T9296] [ 100.187834][ T9296] dump_stack_lvl+0x100/0x190 [ 100.187886][ T9296] should_fail_ex.cold+0x5/0xa [ 100.187915][ T9296] should_failslab+0xc2/0x120 [ 100.187948][ T9296] __kmalloc_noprof+0xfc/0x840 [ 100.187986][ T9296] ? __alloc_workqueue+0x5d8/0x1900 [ 100.188026][ T9296] __alloc_workqueue+0x5d8/0x1900 [ 100.188062][ T9296] ? __pfx_persistent_ctr+0x10/0x10 [ 100.188094][ T9296] alloc_workqueue_noprof+0xc7/0x130 [ 100.188119][ T9296] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 100.188147][ T9296] ? __kasan_kmalloc+0xaa/0xb0 [ 100.188166][ T9296] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 100.188190][ T9296] ? persistent_ctr+0x52/0x480 [ 100.188208][ T9296] ? persistent_ctr+0x1e7/0x480 [ 100.188229][ T9296] persistent_ctr+0x256/0x480 [ 100.188249][ T9296] ? __pfx_persistent_ctr+0x10/0x10 [ 100.188266][ T9296] dm_exception_store_create+0x442/0x790 [ 100.188287][ T9296] ? __pfx_dm_exception_store_create+0x10/0x10 [ 100.188304][ T9296] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 100.188327][ T9296] ? snapshot_ctr+0x16b/0x1fd0 [ 100.188358][ T9296] snapshot_ctr+0x408/0x1fd0 [ 100.188390][ T9296] ? kasan_save_track+0x14/0x30 [ 100.188408][ T9296] ? __pfx_snapshot_ctr+0x10/0x10 [ 100.188433][ T9296] ? dm_split_args+0xc1/0x570 [ 100.188452][ T9296] ? rcu_is_watching+0x13/0xc0 [ 100.188478][ T9296] ? dm_split_args+0xc1/0x570 [ 100.188496][ T9296] ? kfree+0x1e5/0x6d0 [ 100.188551][ T9296] ? skip_spaces+0xee/0x130 [ 100.188616][ T9296] dm_table_add_target+0x58b/0xee0 [ 100.188642][ T9296] ? __pfx_dm_table_add_target+0x10/0x10 [ 100.188666][ T9296] ? dm_table_create+0x2d3/0x3d0 [ 100.188690][ T9296] table_load+0x3b9/0x7b0 [ 100.188713][ T9296] ? __pfx_table_load+0x10/0x10 [ 100.188728][ T9296] ? __might_fault+0xc5/0x140 [ 100.188749][ T9296] ? __might_fault+0xc5/0x140 [ 100.188783][ T9296] ctl_ioctl+0x4d2/0xcc0 [ 100.188808][ T9296] ? __pfx_table_load+0x10/0x10 [ 100.188826][ T9296] ? __pfx_ctl_ioctl+0x10/0x10 [ 100.188888][ T9296] ? selinux_file_ioctl+0x1e0/0x290 [ 100.188918][ T9296] dm_ctl_ioctl+0x22/0x30 [ 100.188936][ T9296] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 100.188957][ T9296] __x64_sys_ioctl+0x18e/0x210 [ 100.188987][ T9296] do_syscall_64+0x123/0x7b0 [ 100.189025][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.189044][ T9296] RIP: 0033:0x7fd701f9fb19 [ 100.189059][ T9296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.189075][ T9296] RSP: 002b:00007fd702f48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.189103][ T9296] RAX: ffffffffffffffda RBX: 00007fd702225fa0 RCX: 00007fd701f9fb19 [ 100.189114][ T9296] RDX: 0000200000000d00 RSI: 00000000c138fd09 RDI: 0000000000000006 [ 100.189125][ T9296] RBP: 00007fd702037b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.189135][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.189145][ T9296] R13: 00007fd702226038 R14: 00007fd702225fa0 R15: 00007ffe3e6435b8 [ 100.189171][ T9296] [ 100.189364][ T9296] device-mapper: persistent snapshot: couldn't start header metadata update thread [ 100.189874][ T9296] device-mapper: table: 248:4: snapshot-merge: Couldn't create exception store (-EINVAL) [ 100.189891][ T9296] device-mapper: ioctl: error adding target to table [ 100.344905][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.550653][ T9313] netlink: 'syz.2.717': attribute type 3 has an invalid length. [ 100.550674][ T9313] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 100.623090][ T9317] tipc: Cannot configure node identity twice [ 100.681900][ T9322] team0: Device xfrm0 is of different type [ 100.736531][ T9332] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.904001][ T11] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 100.926057][ T1718] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.939312][ T9339] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.956803][ T9341] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 100.956895][ T9341] qnx6: wrong signature (magic) in superblock #1. [ 100.956900][ T9341] qnx6: unable to read the first superblock [ 101.035739][ T9343] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 101.048983][ T11] usb 7-1: device descriptor read/64, error -71 [ 101.077169][ T1718] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 101.078112][ T1718] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 101.078125][ T1718] usb 10-1: config 1 has no interface number 0 [ 101.079902][ T1718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.079919][ T1718] usb 10-1: Product: syz [ 101.079929][ T1718] usb 10-1: Manufacturer: syz [ 101.079939][ T1718] usb 10-1: SerialNumber: syz [ 101.095346][ T1718] usb 10-1: 3:229 : does not exist [ 101.095366][ T1718] usb 10-1: 3:0 : does not exist [ 101.144874][ T9348] netlink: 'syz.4.727': attribute type 10 has an invalid length. [ 101.146525][ T9350] netlink: 'syz.4.727': attribute type 10 has an invalid length. [ 101.198246][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 101.292655][ T5943] usb 10-1: USB disconnect, device number 4 [ 101.296779][ T11] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 101.423997][ T11] usb 7-1: device descriptor read/64, error -71 [ 101.493974][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 101.544306][ T11] usb usb7-port1: attempt power cycle [ 101.623981][ T10] usb 6-1: device descriptor read/64, error -71 [ 101.864839][ T10] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 101.884036][ T11] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 101.904448][ T11] usb 7-1: device descriptor read/8, error -71 [ 101.994031][ T10] usb 6-1: device descriptor read/64, error -71 [ 102.106435][ T10] usb usb6-port1: attempt power cycle [ 102.154023][ T11] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 102.175581][ T11] usb 7-1: device descriptor read/8, error -71 [ 102.285220][ T11] usb usb7-port1: unable to enumerate USB device [ 102.454028][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 102.484680][ T10] usb 6-1: device descriptor read/8, error -71 [ 102.512035][ T9381] usb 1-1: USB disconnect, device number 3 [ 102.744131][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 102.774716][ T10] usb 6-1: device descriptor read/8, error -71 [ 102.894440][ T10] usb usb6-port1: unable to enumerate USB device [ 102.919922][ T9383] FAULT_INJECTION: forcing a failure. [ 102.919922][ T9383] name failslab, interval 1, probability 0, space 0, times 0 [ 102.919949][ T9383] CPU: 1 UID: 0 PID: 9383 Comm: syz.5.735 Not tainted syzkaller #0 PREEMPT(full) [ 102.919967][ T9383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.919977][ T9383] Call Trace: [ 102.920022][ T9383] [ 102.920030][ T9383] dump_stack_lvl+0x100/0x190 [ 102.920102][ T9383] should_fail_ex.cold+0x5/0xa [ 102.920127][ T9383] should_failslab+0xc2/0x120 [ 102.920161][ T9383] __kmalloc_noprof+0xfc/0x840 [ 102.920197][ T9383] ? lsm_blob_alloc+0x68/0x90 [ 102.920232][ T9383] lsm_blob_alloc+0x68/0x90 [ 102.920252][ T9383] security_prepare_creds+0x2d/0x290 [ 102.920273][ T9383] prepare_creds+0x5d6/0x950 [ 102.920307][ T9383] ovl_override_creator_creds+0x110/0x310 [ 102.920349][ T9383] ovl_create_or_link+0x185/0x370 [ 102.920370][ T9383] ovl_create_object+0x2c3/0x3b0 [ 102.920387][ T9383] ? __pfx_ovl_create_object+0x10/0x10 [ 102.920407][ T9383] ? inode_permission+0x377/0x630 [ 102.920453][ T9383] ovl_mkdir+0x30/0x40 [ 102.920470][ T9383] vfs_mkdir+0x36d/0x8a0 [ 102.920519][ T9383] filename_mkdirat+0x4c4/0x630 [ 102.920547][ T9383] ? __pfx_filename_mkdirat+0x10/0x10 [ 102.920569][ T9383] ? strncpy_from_user+0x19d/0x2d0 [ 102.920615][ T9383] ? do_getname+0x191/0x390 [ 102.920642][ T9383] __x64_sys_mkdirat+0x89/0xc0 [ 102.920665][ T9383] do_syscall_64+0x123/0x7b0 [ 102.920721][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.920740][ T9383] RIP: 0033:0x7f0ea579fb19 [ 102.920755][ T9383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.920770][ T9383] RSP: 002b:00007f0ea65b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.920800][ T9383] RAX: ffffffffffffffda RBX: 00007f0ea5a25fa0 RCX: 00007f0ea579fb19 [ 102.920812][ T9383] RDX: 00000000000001ff RSI: 0000200000000a40 RDI: ffffffffffffff9c [ 102.920823][ T9383] RBP: 00007f0ea5837b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.920834][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.920846][ T9383] R13: 00007f0ea5a26038 R14: 00007f0ea5a25fa0 R15: 00007ffd259061c8 [ 102.920872][ T9383] [ 102.930857][ T9383] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 102.949262][ T5193] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 102.949275][ T5193] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 102.949301][ T5193] loop0: [ 103.110459][ T9390] /dev/nullb0: Can't open blockdev [ 103.999108][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 103.999168][ T43] audit: type=1400 audit(1794206834.084:1060): avc: denied { mount } for pid=9434 comm="syz.2.747" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 104.000197][ T43] audit: type=1400 audit(1794206834.084:1061): avc: denied { search } for pid=9434 comm="syz.2.747" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 104.000605][ T43] audit: type=1400 audit(1794206834.084:1062): avc: denied { read write } for pid=9434 comm="syz.2.747" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 104.000997][ T43] audit: type=1400 audit(1794206834.084:1063): avc: denied { open } for pid=9434 comm="syz.2.747" path="/203/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 104.002105][ T43] audit: type=1400 audit(1794206834.084:1064): avc: denied { ioctl } for pid=9434 comm="syz.2.747" path="/203/nfsd/portlist" dev="nfsd" ino=13 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 104.076601][ T43] audit: type=1400 audit(1794206834.164:1065): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 104.086195][ T5782] svc: failed to register nfsdv3 RPC service (errno 5). [ 104.086212][ T5782] failed to unregister tcp with rpcbind [ 104.122407][ T43] audit: type=1400 audit(1794206834.204:1066): avc: denied { write } for pid=9437 comm="syz.2.748" name="dynamic_events" dev="tracefs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 104.141022][ T9439] device-mapper: table: 248:1: integrity: Device lookup failed (-EBUSY) [ 104.141039][ T9439] device-mapper: ioctl: error adding target to table [ 104.256421][ T43] audit: type=1400 audit(1794206834.344:1067): avc: denied { setopt } for pid=9446 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.268898][ T9445] hub 1-0:1.0: USB hub found [ 104.269035][ T9445] hub 1-0:1.0: 6 ports detected [ 104.320710][ T43] audit: type=1400 audit(1794206834.404:1068): avc: denied { remount } for pid=9448 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 104.358888][ T9452] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.363601][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.753'. [ 104.426378][ T10] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 104.454316][ T43] audit: type=1400 audit(1794206834.544:1069): avc: denied { mounton } for pid=9458 comm="syz.1.755" path="/192/file0" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.455674][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.455839][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.455972][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456103][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456312][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456465][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456623][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456760][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.456891][ T9459] ip_tables: iptables: counters copy to user failed while replacing table [ 104.607791][ T10] usb 1-1: New USB device found: idVendor=0627, idProduct=0001, bcdDevice=0.00 [ 104.630479][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 104.630497][ T10] usb 1-1: Product: QEMU USB Tablet [ 104.630504][ T10] usb 1-1: Manufacturer: QEMU [ 104.630511][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 104.650727][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input19 [ 104.708010][ T10] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 105.290653][ T9493] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 105.290943][ T9492] kvm: kvm [9491]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x4000003d) [ 105.300344][ T9493] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.933974][ T9497] libceph: resolve '0' (ret=-3): failed [ 105.968264][ T9497] nvme_fabrics: no handler found for transport r. [ 106.411293][ T9413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.510129][ T9508] loop2: detected capacity change from 0 to 8 [ 106.610455][ T9515] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 106.624873][ T9515] device-mapper: table: 248:7: flakey: Device lookup failed (-EBUSY) [ 106.624945][ T9515] device-mapper: ioctl: error adding target to table [ 106.707258][ T9508] Dev loop2: unable to read RDB block 8 [ 106.707283][ T9508] loop2: unable to read partition table [ 106.707380][ T9508] loop2: partition table beyond EOD, truncated [ 106.707405][ T9508] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 106.778841][ T9527] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 107.438685][ T9562] device-mapper: table: 248:1: snapshot: Cannot get origin device (-EBUSY) [ 107.438757][ T9562] device-mapper: ioctl: error adding target to table [ 108.112838][ T9581] tmpfs: Unknown parameter 'h' [ 108.155554][ T2426] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 108.305763][ T2426] usb 9-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 108.309676][ T2426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.309701][ T2426] usb 9-1: Product: syz [ 108.309714][ T2426] usb 9-1: Manufacturer: syz [ 108.309727][ T2426] usb 9-1: SerialNumber: syz [ 108.736666][ T2426] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 108.824002][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 108.826453][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.891490][ T9589] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 109.084810][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 109.084824][ T43] audit: type=1400 audit(1794206839.174:1091): avc: denied { read write } for pid=9577 comm="syz.4.781" name="lp0" dev="devtmpfs" ino=3320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 109.085773][ T43] audit: type=1400 audit(1794206839.174:1092): avc: denied { open } for pid=9577 comm="syz.4.781" path="/dev/usb/lp0" dev="devtmpfs" ino=3320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 109.395603][ T9595] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 109.979422][ T9603] xt_hashlimit: size too large, truncated to 1048576 [ 110.131994][ T43] audit: type=1400 audit(1794206840.214:1093): avc: denied { append } for pid=9606 comm="syz.1.789" name="event2" dev="devtmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.140877][ T9607] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 110.140905][ T9607] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 110.140918][ T9607] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 110.140927][ T9607] One or more global auth toks could not properly register; rc = [-22] [ 110.140956][ T9607] Error validating options; rc = [-22] [ 110.201463][ T9609] netlink: 'syz.2.790': attribute type 11 has an invalid length. [ 110.201477][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.2.790'. [ 110.205134][ T9609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.790'. [ 110.322216][ T43] audit: type=1400 audit(1794206840.404:1094): avc: denied { setattr } for pid=9615 comm="syz.2.793" name="sg2" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.424805][ T43] audit: type=1400 audit(1794206840.514:1095): avc: denied { read append } for pid=9619 comm="syz.1.794" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.425173][ T43] audit: type=1400 audit(1794206840.514:1096): avc: denied { open } for pid=9619 comm="syz.1.794" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.425880][ T43] audit: type=1400 audit(1794206840.514:1097): avc: denied { ioctl } for pid=9619 comm="syz.1.794" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5000940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.431168][ T43] audit: type=1400 audit(1794206840.514:1098): avc: denied { ioctl } for pid=9621 comm="syz.2.795" path="/226/md0" dev="tmpfs" ino=1294 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.444001][ T9620] loop0: detected capacity change from 4096 to 4095 [ 110.464160][ T9622] md: couldn't update array info. -22 [ 110.484539][ T9622] [ 110.485549][ T9622] ====================================================== [ 110.488306][ T9622] WARNING: possible circular locking dependency detected [ 110.491025][ T9622] syzkaller #0 Tainted: G L [ 110.493457][ T9622] ------------------------------------------------------ [ 110.495783][ T9622] syz.2.795/9622 is trying to acquire lock: [ 110.498203][ T9622] ffffffff90be60e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 110.501948][ T9622] [ 110.501948][ T9622] but task is already holding lock: [ 110.504927][ T9622] ffff888027e40358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 110.508429][ T9622] [ 110.508429][ T9622] which lock already depends on the new lock. [ 110.508429][ T9622] [ 110.512505][ T9622] [ 110.512505][ T9622] the existing dependency chain (in reverse order) is: [ 110.516106][ T9622] [ 110.516106][ T9622] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 110.519455][ T9622] lock_acquire+0x1d1/0x380 [ 110.521564][ T9622] __mutex_lock+0x19f/0x1c10 [ 110.523713][ T9622] md_alloc+0x3d0/0x10c0 [ 110.525699][ T9622] md_probe+0x73/0xf0 [ 110.527567][ T9622] blk_probe_dev+0x149/0x1e0 [ 110.529667][ T9622] blk_request_module+0x16/0xc0 [ 110.531855][ T9622] blkdev_get_no_open+0x9b/0xf0 [ 110.534040][ T9622] blkdev_open+0x141/0x4f0 [ 110.536064][ T9622] do_dentry_open+0x674/0x1470 [ 110.538240][ T9622] vfs_open_consume+0xcc/0x460 [ 110.540412][ T9622] path_openat+0x1547/0x23f0 [ 110.542560][ T9622] do_file_open+0x20e/0x430 [ 110.544621][ T9622] do_sys_openat2+0x163/0x1d0 [ 110.546742][ T9622] __x64_sys_openat+0x12d/0x210 [ 110.548935][ T9622] do_syscall_64+0x123/0x7b0 [ 110.551025][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.553593][ T9622] [ 110.553593][ T9622] -> #1 (disks_mutex){+.+.}-{4:4}: [ 110.556512][ T9622] lock_acquire+0x1d1/0x380 [ 110.558567][ T9622] __mutex_lock+0x19f/0x1c10 [ 110.560666][ T9622] md_alloc+0x3e/0x10c0 [ 110.562597][ T9622] md_probe+0x73/0xf0 [ 110.564477][ T9622] blk_probe_dev+0x149/0x1e0 [ 110.566558][ T9622] blk_request_module+0x16/0xc0 [ 110.568750][ T9622] blkdev_get_no_open+0x9b/0xf0 [ 110.570924][ T9622] blkdev_open+0x141/0x4f0 [ 110.572972][ T9622] do_dentry_open+0x674/0x1470 [ 110.575116][ T9622] vfs_open_consume+0xcc/0x460 [ 110.577284][ T9622] path_openat+0x1547/0x23f0 [ 110.579371][ T9622] do_file_open+0x20e/0x430 [ 110.581456][ T9622] do_sys_openat2+0x163/0x1d0 [ 110.583577][ T9622] __x64_sys_openat+0x12d/0x210 [ 110.585759][ T9622] do_syscall_64+0x123/0x7b0 [ 110.587845][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.590385][ T9622] [ 110.590385][ T9622] -> #0 (major_names_lock){+.+.}-{4:4}: [ 110.593480][ T9622] check_prev_add+0xeb/0xe60 [ 110.595567][ T9622] __lock_acquire+0x1528/0x1f40 [ 110.597748][ T9622] lock_acquire+0x1d1/0x380 [ 110.599804][ T9622] __mutex_lock+0x19f/0x1c10 [ 110.601827][ T9622] blk_probe_dev+0x28/0x1e0 [ 110.603852][ T9622] blk_request_module+0x16/0xc0 [ 110.606047][ T9622] blkdev_get_no_open+0x9b/0xf0 [ 110.608229][ T9622] bdev_file_open_by_dev+0x70/0x210 [ 110.609472][ T9627] ip6gre1: entered promiscuous mode [ 110.609484][ T9627] ip6gre1: entered allmulticast mode [ 110.614776][ T9622] md_import_device+0x120/0x360 [ 110.616974][ T9622] md_add_new_disk+0x307/0x1820 [ 110.619141][ T9622] md_ioctl+0x2c1d/0x3700 [ 110.621152][ T9622] blkdev_ioctl+0x5ad/0x6f0 [ 110.623207][ T9622] __x64_sys_ioctl+0x18e/0x210 [ 110.625363][ T9622] do_syscall_64+0x123/0x7b0 [ 110.627455][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.630052][ T9622] [ 110.630052][ T9622] other info that might help us debug this: [ 110.630052][ T9622] [ 110.634113][ T9622] Chain exists of: [ 110.634113][ T9622] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 110.634113][ T9622] [ 110.639426][ T9622] Possible unsafe locking scenario: [ 110.639426][ T9622] [ 110.642458][ T9622] CPU0 CPU1 [ 110.644640][ T9622] ---- ---- [ 110.646812][ T9622] lock(&mddev->reconfig_mutex); [ 110.648852][ T9622] lock(disks_mutex); [ 110.651518][ T9622] lock(&mddev->reconfig_mutex); [ 110.654562][ T9622] lock(major_names_lock); [ 110.656434][ T9622] [ 110.656434][ T9622] *** DEADLOCK *** [ 110.656434][ T9622] [ 110.659313][ T9622] locks held by syz.2.795/9622: 1, on CPU#2: [ 110.661770][ T9622] #0: ffff888027e40358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 110.665702][ T9622] [ 110.665702][ T9622] stack backtrace: [ 110.668103][ T9622] CPU: 2 UID: 0 PID: 9622 Comm: syz.2.795 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.672015][ T9622] Tainted: [L]=SOFTLOCKUP [ 110.673787][ T9622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.677845][ T9622] Call Trace: [ 110.679251][ T9622] [ 110.680501][ T9622] dump_stack_lvl+0x100/0x190 [ 110.682447][ T9622] print_circular_bug.cold+0x178/0x1be [ 110.684688][ T9622] check_noncircular+0x146/0x160 [ 110.686735][ T9622] ? __pfx_get_page_from_freelist+0x10/0x10 [ 110.688785][ T9622] check_prev_add+0xeb/0xe60 [ 110.690690][ T9622] __lock_acquire+0x1528/0x1f40 [ 110.692719][ T9622] lock_acquire+0x1d1/0x380 [ 110.694580][ T9622] ? blk_probe_dev+0x28/0x1e0 [ 110.696513][ T9622] ? __pfx___might_resched+0x10/0x10 [ 110.698676][ T9622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.701159][ T9622] __mutex_lock+0x19f/0x1c10 [ 110.703056][ T9622] ? blk_probe_dev+0x28/0x1e0 [ 110.704996][ T9622] ? blk_probe_dev+0x28/0x1e0 [ 110.706914][ T9622] ? lock_acquire+0x1d1/0x380 [ 110.708851][ T9622] ? find_inode_fast+0xa5/0xa30 [ 110.710830][ T9622] ? find_held_lock+0x2b/0x80 [ 110.712772][ T9622] ? __pfx___mutex_lock+0x10/0x10 [ 110.714938][ T9622] ? find_inode_fast+0x1fa/0xa30 [ 110.716967][ T9622] ? ilookup+0x184/0x210 [ 110.718704][ T9622] ? blk_probe_dev+0x28/0x1e0 [ 110.720650][ T9622] blk_probe_dev+0x28/0x1e0 [ 110.722514][ T9622] blk_request_module+0x16/0xc0 [ 110.724508][ T9622] blkdev_get_no_open+0x9b/0xf0 [ 110.726486][ T9622] bdev_file_open_by_dev+0x70/0x210 [ 110.728342][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.1.796 [ 110.730667][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 110.736636][ T9622] md_import_device+0x120/0x360 [ 110.738627][ T9622] md_add_new_disk+0x307/0x1820 [ 110.740638][ T9622] md_ioctl+0x2c1d/0x3700 [ 110.742406][ T9622] ? __pfx_md_ioctl+0x10/0x10 [ 110.744330][ T9622] ? do_vfs_ioctl+0x226/0x13e0 [ 110.746296][ T9622] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.749055][ T9622] ? __fget_files+0x34/0x3d0 [ 110.750722][ T9622] ? __pfx_md_ioctl+0x10/0x10 [ 110.752500][ T9622] blkdev_ioctl+0x5ad/0x6f0 [ 110.754355][ T9622] ? __pfx_blkdev_ioctl+0x10/0x10 [ 110.756400][ T9622] ? selinux_file_ioctl+0x1e0/0x290 [ 110.758599][ T9622] ? selinux_file_ioctl+0x1e7/0x290 [ 110.760724][ T9622] ? __pfx_blkdev_ioctl+0x10/0x10 [ 110.762759][ T9622] __x64_sys_ioctl+0x18e/0x210 [ 110.764691][ T9622] do_syscall_64+0x123/0x7b0 [ 110.766568][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.768948][ T9622] RIP: 0033:0x7f5c18d9fb19 [ 110.770751][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.778316][ T9622] RSP: 002b:00007f5c19d44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.781836][ T9622] RAX: ffffffffffffffda RBX: 00007f5c19025fa0 RCX: 00007f5c18d9fb19 [ 110.784996][ T9622] RDX: 0000200000000100 RSI: 0000000040140921 RDI: 0000000000000003 [ 110.788133][ T9622] RBP: 00007f5c18e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.791223][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.794339][ T9622] R13: 00007f5c19026038 R14: 00007f5c19025fa0 R15: 00007fff64320dd8 [ 110.797458][ T9622] [ 110.835766][ T9622] md: could not open device unknown-block(0,0). [ 110.835807][ T9622] md: md_import_device returned -6 [ 110.908675][ T1718] usb 9-1: USB disconnect, device number 12 [ 110.912314][ T1718] usblp0: removed