last executing test programs: 17.801068s ago: executing program 2 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/x86/nmi_longest_ns\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r1 = creat(&(0x7f0000000140)='./sys\x00', 0x100) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000200)={r4, 0x14e8}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x921, 0x400}, &(0x7f0000000280)=0x8) 17.800846322s ago: executing program 2 (id=197): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x80383, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x0, 0x10000, 0x2}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000500)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10009}, 0x1) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x9c00, 0x0, 0x0, @by_dev={r3}, [@multipath={0x0, 0x1000, 0x0, 0x70, 'multipath\x00', {'2 pg_init_retries 3', 0x20, '1 rdac'}}]}) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x80383, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x2082) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x0, 0x10000, 0x2}) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000500)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) (async) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) (async) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10009}, 0x1) (async) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x9c00, 0x0, 0x0, @by_dev={r3}, [@multipath={0x0, 0x1000, 0x0, 0x70, 'multipath\x00', {'2 pg_init_retries 3', 0x20, '1 rdac'}}]}) (async) 17.670886991s ago: executing program 2 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r4, 0x25, 0x8, @void}, 0x10) 17.662493701s ago: executing program 2 (id=199): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xbc, &(0x7f00000002c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x94) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000000c0)) timer_create(0x3, &(0x7f00000014c0)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000480)="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", &(0x7f0000001480)="d99a89c304d956766808a0c864cd90007fa3287b730c81230867775755195f7ff999"}}, &(0x7f0000001500)=0x0) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000001580)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 17.591077905s ago: executing program 2 (id=200): r0 = socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) read$FUSE(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x200008d4) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="8343fcf0c7a7b89fc621e47a7625b87066d9f56bf807cdfd1181b9e211876ce66a5db33632fd686d524b183198e2f732420ab9c3d7096e5070852adfd389c77a13c7f4b55d59faaa60caea9acf583f88417882607d071aebe9ce8c47fdb4aa73f0b36957cad9a42f6977565249260e710aa83fff3adc16907c4c2204270bb7b673b6f2f6c04596946d27e8e4000d01917c9cc65749ea1f5dfc5b57612b8a3334cd960cb6263b71ec72b672565447944594c16cf6eb9e51eb5443edf5d9fea7233b81299a0405f9f8b9a5cbd4d4165d3a776d6897ab6b4edc2250d52dda71c00d028485a52651dfc86ce9e6b5625fc80e1187492ae98b87a1", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES16=r2], 0x3c}}, 0x0) getpgrp(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006772650024000280050017000000000008000100", @ANYRES32=r3, @ANYBLOB="04000000000008000a00", @ANYRESHEX=r4, @ANYBLOB="08001300", @ANYRESHEX, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000008c0)={0x0, 0x15, &(0x7f0000000900)=[{&(0x7f0000000940)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r8 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', r7, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) truncate(&(0x7f00000006c0)='proc\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=[0x8], 0x0, 0x0, 0x1, 0x1, r11}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r9, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400000000ff5bdf2500000000", @ANYRES32=r7, @ANYBLOB="1000050042000500280012800b00010067656e657665000018000280140012"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000180)=""/164) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c000200000000fffffffc00007cedd643188c34e1000000", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=r2, @ANYRES64=r11], 0x3c}}, 0x6000801) 17.590716503s ago: executing program 2 (id=201): r0 = syz_open_dev$cec(&(0x7f0000000700), 0x0, 0x200) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000001c00)={0x5, 0x40, [0x9, 0x800, 0x7, 0x13], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400840008000600", @ANYRES32=r2], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x40810) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000001bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000840)=ANY=[@ANYBLOB='\fy)\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x130c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x105) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x35ff, 0x80e}, {0x9, 0x6}]}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f00000004c0)='./file0/file1\x00', 0xe2) 4.738089547s ago: executing program 0 (id=315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) (fail_nth: 8) 4.73684084s ago: executing program 0 (id=316): r0 = socket(0x10, 0x2, 0x7) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, 0x0, 0x80, 0xfffffffc, 0x1000}}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)='<', 0x1}], 0x1, 0x8, 0x3) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x1}) 4.420847057s ago: executing program 0 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x80000, @empty, 0xfffffffa}, 0x1c, 0x0}, 0x4044090) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r7 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) getgroups(0x4, &(0x7f0000000740)=[0xee01, 0xee01, 0xee00, 0xee00]) setfsgid(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendto(r9, &(0x7f00000006c0)="5c00000030000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/net/bridge0/bridge/vlan_stats_per_port\x00', 0x1, 0x0) (rerun: 64) write(r10, &(0x7f0000000680)='1', 0x1) (async) r11 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x58c66743fee8f43f, 0xb, 0xdc}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000480), 0x56) (async) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.793195319s ago: executing program 1 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, '\x00', "c02d2cd53c1fefe9b933987a9203485a416abf47a91a3fdce4a70162515eedcf00000000df"}}}}, 0x36) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.565147427s ago: executing program 32 (id=201): r0 = syz_open_dev$cec(&(0x7f0000000700), 0x0, 0x200) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000001c00)={0x5, 0x40, [0x9, 0x800, 0x7, 0x13], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400840008000600", @ANYRES32=r2], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x40810) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000001bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000840)=ANY=[@ANYBLOB='\fy)\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x130c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x105) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x35ff, 0x80e}, {0x9, 0x6}]}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f00000004c0)='./file0/file1\x00', 0xe2) 2.450614059s ago: executing program 0 (id=323): r0 = socket$inet6_sctp(0xa, 0x315b32b70f9d57e7, 0x84) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) mount(&(0x7f00000000c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x4, &(0x7f0000000180)='\xfb]),/\x00') sendto$inet6(r0, &(0x7f00000001c0)="d902840cca2398998f4e1b09be71e5ad1992d1947889dd13e4d58870ff00423dc0", 0x21, 0x20000010, &(0x7f0000000200)={0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x1, 0x7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r1, 0xf, 0x0, 0xb30d}, &(0x7f0000000300)=0x10) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) write(r0, &(0x7f00000003c0)="3d867f542d6fbe5753a11daf49dc88b868e9ed58dd7c4cf4fb86585d3fe660643758e1186e67832fa39ba292f768373ae13d77565b47df6ac6333c47b1e16d77674ab6631c0533befb2c82fe86da08e97ce1f078b23e00aa2a6567490f71a0da12dea24c4d242788247c1391bb532136cbc7de939aa925b05644a8e621d5fb9e40ef7c11c9741e4a8d34c833bdd05af48394366e208a22dda2ad84c1930229d53fa2fc63124db534bf0e18da931d23ec04bbfaad334294ccdd165dafe3aaed99d7a184622b09d439791ecf306261ae48490c1e4a5df445ef", 0xd8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xcb7d}}, './file0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x40, 0x6a, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2, 0x11, r3, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000680)={'nat\x00', 0x0, [0x21, 0x3, 0x5, 0xe01e, 0xd]}, &(0x7f0000000700)=0x54) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000740)=r2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000780)={r2, 0x5}, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/custom1\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000900)={@isdn={0x22, 0x4, 0x1, 0xff, 0xfd}, {&(0x7f0000000800)=""/174, 0xae}, &(0x7f00000008c0), 0x2}, 0xa0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r1, 0x4}, 0x8) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@const={0x3, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x8}}, @int={0xc, 0x0, 0x0, 0x1, 0x9, 0x80, 0x0, 0x4, 0x4}, @fwd={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x1ff}}, @func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000a80)=""/213, 0x80, 0xd5, 0x0, 0x2, 0x10000, @value=r7}, 0x28) r8 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000c00)=r8) syz_ublk_add_dev(r3, 0x0, r5, 0x0, &(0x7f0000000c80)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4ee, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c40)=@new_dev={0x4, 0x555, 0x0, 0x0, 0x1000, 0xffffffff, r8, 0x0, 0x40}}}, &(0x7f0000000d00)) pread64(r9, &(0x7f0000000d40)=""/133, 0x85, 0x400) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x3000001, 0x13, r3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000ec0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000e80), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0xe}}}, {{@arp={@loopback, @private=0xa010102, 0xffffff00, 0x0, 0xd, 0x8, {@mac=@remote, {[0xff, 0xff, 0x1fe, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x643, 0xd, 0x80, 0x3, 0x7, 0xa, 'wg1\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @loopback, @remote, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, 0x0, &(0x7f0000001340)='./file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001380)={r2, @in6={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa4}}}, &(0x7f0000001440)=0x84) sendmsg$nl_route(r3, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)=@ipv4_deladdr={0x4c, 0x15, 0x2, 0x70bd29, 0x25dfdbfd, {0x2, 0x1f, 0x88, 0xfe, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x40, 0x0, 0x6, 0xffffffff}}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}]}, 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x10) 2.449577763s ago: executing program 1 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="46000000130001f69142424237424242424242429442424242", 0x19) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) 2.361005655s ago: executing program 0 (id=326): timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xf1b}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000640)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000006c0)="a7a1e2bf54186178858976d571485d8ee8f1538a", 0x14}, {&(0x7f0000000700)="70f69046018d2d9965e63165dcc2c80cf82a71651cdce4a7cef1449192c2b1e89a56caa9195bb9c970ad7fbd7712b851e5083e83d962fd401135e967a4f387ffc8f3ca069bd44d4bfb1e87429b8b78f889ef27f721e42f861911cc0d851e4e04", 0x60}, {&(0x7f0000000780)="de63708f96da7beddecad3dd9ff0929326630cdd04c91db98daf9d0d79b87affe15a6c3e30727d4ed776671b2397ba1526b45a380338e077778387a469bdd04c81a31d18b98b93d631cd2a7c58e4432574d3d7b93a4c5f5c88010823fb2a1df542079b3e2e5639fa1d33c1d5afcc169f937fae7ec916cd85513244cbdc8520c8dc35a86a5410959e27e1e4ea858e65d9ed4892386fd6bdf065ce909851579f0eae3f43297a2f5a3b64644ad05db98c07ea17c83994cd4c81b6c61347d5b38434d777a63e500c5567a672a7dfce55a557412378d65f1137dfcb9bad2d070927d7cc11ee021fb14ac3855494c3906252fa", 0xf0}, {&(0x7f0000000880)="5ada85aef368be698ae6ec75cca6fc3e2342f8d2abb4669e8c1f95b5cff66a37462b7657d23a5f982e7108144ba7456200688f340aa5fa93c4ede9e3221b1043aefe7cda15836e2e6b946eb1e5650cf6134e0f096fa692cce6241c5012728d6e5511ca1a11fbd1c0a99417bbebbb52a54ad9f25beeef358e800402c6bd5e5b95021179c23f8e64312b666a8c5fd2682e6cd9b4f389ef8f2521e26a8bb6aa817ed741bb429676c8dbb869d70dbda9b7da56d607e02d05c2d9fc70aff20bf5be458afd502a66bfe41e4b55c066a8add952da49ecfcda601a22ff2c917ce92bdfc93b38", 0xe2}, {&(0x7f0000000980)="ddbf904e81b115f96fa39bfd4c35832cb09ab322f6ade75397156f7ceb1005d4b08a30f43487f299fb11017cc0c1b713d02b877682105ddbe983e1e5f1333c633e76188727", 0x45}, {&(0x7f0000000a00)="e8512401b7d8f5144a4d18e914794798240943a3119d789bae9982928ce1b4eabdef5d8faa1c041cb10fe626f58496a907493b7c2c60dc17f4c4e1d044cb0c2e75e31d04308db8f8dccfae5f9a26aae24fc830aa14f7abe99e8c4208397f01", 0x5f}, {&(0x7f0000000a80)="99c6748fc799b5f68055c22180b2132ca032a5b92b6b0c77338edfb2b70d59c79a3863d5927463a144339dadfd8190817015a23663692e0de6d5278da4351290fc74e1374a489a81b9cd176c60fa275c581bf117724d0ca5e6fe854c5a581ed34a1d4ccd2dea26c2a916dde78b024101db0bd40a25e8fb4032047995bb9692da3ee9ac454c6939fb5b8eadc08fddb0c44a95490c426edae3725d29074534538fc131f2479be3d6e556e7dccccda18260288413eeb7c0aff77b20f33b5114aa130c63545b61feef425d13f4", 0xcb}, {&(0x7f0000000b80)="bea0493815590f6ddb1a9acd126b503ca6456d7e75fe0c907d93510066fa9a0399ad2a487b875ff35874fd1f68ae715228b1c89839480151", 0x38}, {&(0x7f0000000bc0)="30f11da11cb85b7998424fa44b08e36214c37406e5bf0a40ef41af29d2fdd85d57aa2fc5299ac71dab027de78e45244ad84a5998b9d436cc4a07fe24529ebc8eead7ed4b0291a8930eeda376d9accbac20", 0x51}], 0x9, &(0x7f0000000d00)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe30}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0xf16a}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xc0}}], 0x2, 0x0) userfaultfd(0x80001) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffa5}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 2.073126905s ago: executing program 1 (id=330): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000004c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000500)={&(0x7f0000000540)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0xffffffff, 0x1, 0x5, 0xe, 0xc, 0x10031e}) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000002c0)={0xae, [0xff, 0x1], 0x6}, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000f948262dfda0a256a0a6c4e3c7fd58881dbbcbfa3dcfcd4f92e9c6bb84fccb818592689a870049a29356268ace52f4dd7c0d926848091a744d7ac8511f0905dc66c8d8b551a6ee51c1", @ANYRES16=r3, @ANYBLOB="08002dbd7000fedbdf252600000008000300", @ANYRES32=r4, @ANYBLOB="040093000400d00010009d0002000000490c0700a15c0200"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4054) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000002400090200000000fedbdf25080000080000000058beca0e39663f03b1218ab0a74ca6d1e52eee8ed0"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000001c0), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f0000000200), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001c40), &(0x7f0000001c80)=ANY=[], 0x0, 0x0) (async) fsopen(&(0x7f00000001c0)='exfat\x00', 0x1) write(0xffffffffffffffff, 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r9, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000240)={0x9, 0x4, 0x20fff}) (async) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r11, 0x100000000) 1.928444028s ago: executing program 3 (id=332): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0xc09c, 0x0, 0x880, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x5, 0x10000}) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0xfffffffffffffd32, 0x8800) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x20300, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000180)={0x603, 0x80, 0x3}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000240)='smaps_rollup\x00') (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x891d, &(0x7f0000000280)={'macsec0\x00', @ifru_ivalue=0x5}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xa}) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) r7 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000340)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) r9 = getegid() write$P9_RSTATu(r3, &(0x7f0000000440)={0x77, 0x7d, 0x1, {{0x0, 0x46, 0x200, 0x8, {0x1, 0x3}, 0x80040000, 0x101, 0x9, 0x8, 0x2, '@!', 0x7, '@&[*:$.', 0x2, '@+', 0x8, 'macsec0\x00'}, 0x1c, '/dev/dvb/adapter#/frontend#\x00', r8, r9}}, 0x77) (async) close(r0) (async) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000004c0)=""/4096) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000017c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1ec, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_IE={0x89, 0x2a, [@chsw_timing={0x68, 0x4, {0x894, 0x7}}, @random_vendor={0xdd, 0x52, "f4a82ae7a593fbad3de0ebb0dd99fb2770cee5e282cc6714ee84475f46ae96692394feb360418a0fdc8aa4ae98c311304495daf2e90105760f61b1db33c89b5538bba85a2574ca473074d7c1575d7ea27f80"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4, 0x66, @device_b, 0x8, 0xf, 0x5}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x1e, 0xfa, "e46f2125c5bcde6164bf4d1d5ace608642da6a595ca82d5e914e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_RRK={0x58, 0xfc, "b420f381ec7e8209d903408dafa5b3340031b2969a495d4769706640ce35ee20f34c83253e5baca5e70a17e5f70001ac35cbee4eb021bc4cddb31bb1b956415427296a752b00b9bfe8269b560e89e0abb6441086"}, @NL80211_ATTR_FILS_ERP_RRK={0x7a, 0xfc, "82c313cad429520be1cb2dd01d4abf6a4368a647ed4ccd87afc738a421627365b53e8d1612b89830a77973ad86497059abfd980869faa14d020ca78a2423096cde4d41b6616fa928fd3b56a111e2df76dd9bcd72d3aa9c30e158c8936f04857d48f499befef69afd921afbcc37a3cb27db9219083a3a"}, @NL80211_ATTR_FILS_ERP_RRK={0x11, 0xfc, "c9f45af813d3eb521b2c5f8110"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x90b}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "45ac1b51"}]]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) (async) symlinkat(&(0x7f0000001800)='./file0/file0\x00', r3, &(0x7f0000001840)='./file0\x00') ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000001880)) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f00000018c0)) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x6c26) (async) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r8, &(0x7f0000001900)) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000001940)) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001980)={'geneve0\x00', 0x9}) 1.925787344s ago: executing program 3 (id=333): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.924363819s ago: executing program 3 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x9, 0x9]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x4, 0x5, 0x9c, 0x7ff]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8081) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={0x0, 0x2800, &(0x7f00000007c0)={&(0x7f0000000800)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd80000000df2505000000200001800d0001007564703a73797a32000000000c000280080004"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.924217929s ago: executing program 3 (id=335): openat$md_node(0xffffffffffffff9c, &(0x7f0000000300)='./md0\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './dev/sda1\x00'}) mkdirat(r0, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './mnt/../file0\x00'}) write(r1, &(0x7f0000000240)="a1657cacbab9c25e95673251ffd1c17ece770a07f677dd58453646bba8d669494bedba6425a505edac89b086b9e14af981013fc12705492b573d339eedb794eff95dd4eff0c5d313e07690f2921ec6391ea5e88fddae491438629e2e3f3c17557286ae32b281a293d56c88b66b7548c3f2c87d345234b2704f45358203a6c344e103f37e49068473de9002f78ccdc52590343edaf8544e7f18482fc828aa4747f8864eb9e043506bf1fa", 0xaa) setxattr$system_posix_acl(&(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 1.773426539s ago: executing program 1 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000340)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x18) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110001000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110001000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) 1.772734685s ago: executing program 3 (id=337): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000640)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000006c0)="a7a1e2bf54186178858976d571485d8ee8f1538a", 0x14}, {&(0x7f0000000700)="70f69046018d2d9965e63165dcc2c80cf82a71651cdce4a7cef1449192c2b1e89a56caa9195bb9c970ad7fbd7712b851e5083e83d962fd401135e967a4f387ffc8f3ca069bd44d4bfb1e87429b8b78f889ef27f721e42f861911cc0d851e4e04", 0x60}, {&(0x7f0000000780)="de63708f96da7beddecad3dd9ff0929326630cdd04c91db98daf9d0d79b87affe15a6c3e30727d4ed776671b2397ba1526b45a380338e077778387a469bdd04c81a31d18b98b93d631cd2a7c58e4432574d3d7b93a4c5f5c88010823fb2a1df542079b3e2e5639fa1d33c1d5afcc169f937fae7ec916cd85513244cbdc8520c8dc35a86a5410959e27e1e4ea858e65d9ed4892386fd6bdf065ce909851579f0eae3f43297a2f5a3b64644ad05db98c07ea17c83994cd4c81b6c61347d5b38434d777a63e500c5567a672a7dfce55a557412378d65f1137dfcb9bad2d070927d7cc11ee021fb14ac3855494c3906252fa", 0xf0}, {&(0x7f0000000880)="5ada85aef368be698ae6ec75cca6fc3e2342f8d2abb4669e8c1f95b5cff66a37462b7657d23a5f982e7108144ba7456200688f340aa5fa93c4ede9e3221b1043aefe7cda15836e2e6b946eb1e5650cf6134e0f096fa692cce6241c5012728d6e5511ca1a11fbd1c0a99417bbebbb52a54ad9f25beeef358e800402c6bd5e5b95021179c23f8e64312b666a8c5fd2682e6cd9b4f389ef8f2521e26a8bb6aa817ed741bb429676c8dbb869d70dbda9b7da56d607e02d05c2d9fc70aff20bf5be458afd502a66bfe41e4b55c066a8add952da49ecfcda601a22ff2c917ce92bdfc93b38", 0xe2}, {&(0x7f0000000980)="ddbf904e81b115f96fa39bfd4c35832cb09ab322f6ade75397156f7ceb1005d4b08a30f43487f299fb11017cc0c1b713d02b877682105ddbe983e1e5f1333c633e76188727", 0x45}, {&(0x7f0000000a00)="e8512401b7d8f5144a4d18e914794798240943a3119d789bae9982928ce1b4eabdef5d8faa1c041cb10fe626f58496a907493b7c2c60dc17f4c4e1d044cb0c2e75e31d04308db8f8dccfae5f9a26aae24fc830aa14f7abe99e8c4208397f01", 0x5f}, {&(0x7f0000000a80)="99c6748fc799b5f68055c22180b2132ca032a5b92b6b0c77338edfb2b70d59c79a3863d5927463a144339dadfd8190817015a23663692e0de6d5278da4351290fc74e1374a489a81b9cd176c60fa275c581bf117724d0ca5e6fe854c5a581ed34a1d4ccd2dea26c2a916dde78b024101db0bd40a25e8fb4032047995bb9692da3ee9ac454c6939fb5b8eadc08fddb0c44a95490c426edae3725d29074534538fc131f2479be3d6e556e7dccccda18260288413eeb7c0aff77b20f33b5114aa130c63545b61feef425d13f4", 0xcb}, {&(0x7f0000000b80)="bea0493815590f6ddb1a9acd126b503ca6456d7e75fe0c907d93510066fa9a0399ad2a487b875ff35874fd1f68ae715228b1c89839480151", 0x38}, {&(0x7f0000000bc0)="30f11da11cb85b7998424fa44b08e36214c37406e5bf0a40ef41af29d2fdd85d57aa2fc5299ac71dab027de78e45244ad84a5998b9d436cc4a07fe24529ebc8eead7ed4b0291a8930eeda376d9accbac20", 0x51}], 0x9, &(0x7f0000000d00)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe30}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0xf16a}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xc0}}], 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x0, 0x2, 0x3}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x183c81) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffa5}}]}}, 0x0) 1.558556094s ago: executing program 1 (id=338): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='X\x00', 0x2}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="58010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="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"], 0x158}}, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103282, 0x0) write$nsim_bool(r7, &(0x7f0000000e00)='1', 0x1) setns(r6, 0x20000) r8 = syz_open_dev$sndctrl(&(0x7f0000000e40), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000000e80)=""/184) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0x3, &(0x7f00000003c0)=0x6, 0x4) sendto$inet(r11, &(0x7f0000000400)="1ce0", 0xffeb, 0x0, &(0x7f0000000440)={0x2, 0x0, @private}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="40010000100001040000000000000000ac1414aa0000000000000000000000006401010100000000000000000000000000000000000000000200000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffdfffff7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000003000000000000000000000002000509000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x140}}, 0x0) syz_emit_ethernet(0x3e9, &(0x7f0000000f40)={@multicast, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x3db, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x2da, 0x2f, 0x1, @remote, @mcast1, {[@dstopts={0x0, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd8, 0x1, [], "c2118451d825f77ccb9b5cf2951e087877889bd7dacc481e1b5b2c51114ecf31f7c5a86e7144bf28e8d287328c364c93b4b73572ab9a39ed894216e223726ac8efeee9df36a65be528326757a9ab2a503c8d741d9dba5a90866504890ab3e009cd3ba4ef006961b92baa63e73d2cae2b9e212533958506d24901c598eea9be5ec3186cc6b88bd89b0011fc886aa48e23a585e3330a28930041973ee0244add53cd096c8a6eae56e1a1b7f6d456490f2025e90b61b8a56edae1ac909d4b19ee38e1fad966c5699d0644c5dbb012a72ec04a953a5dcb6ff6c9"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x100, 0xb], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xf54], "d3ef6e5774f344ee8518f3e6429b204114603d442539dec1e9b92dc9c82927a03fa8555e8af73b4f8746ef5f881dc43c98f1"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "39c3d655a9766b923c46f2259f57c8b79ea0a6d0a070d9688f9c694a131cdee722f423f37eed"}}}}, @ipv4=@tipc={{0x23, 0x4, 0x0, 0x4, 0xb7, 0x64, 0x0, 0xa4, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0xdb, 0x3, 0xf, [{@private=0xa010102, 0xfff}, {@multicast2, 0x2}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}, {@multicast2, 0x770c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x5b47}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x2, 0x10, "e8d1b8d9fbe8e07058108bed77d1"}, {0x2, 0xb, "638b35118581a2c57b"}, {0x5, 0xf, "7b5d63ca6af736cf8cffb263e6"}, {0x0, 0x5, "b96861"}, {0x5, 0x5, "fdea6c"}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x1, 0xa, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7, 0x2, 0x2, 0x4, 0x0, 0x0, 0x4e22, 0x4e20}, 0x2, 0x2}, 0x3}}, [0x0, 0x0, 0x0]}}]}}}}}}, 0x0) r13 = dup(r10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f0000000480)={0x0, @adiantum, 0x0, @desc2}) writev(r9, &(0x7f0000000680)=[{&(0x7f00000006c0)="2e1221b23bb601c494d3df173e75fe0188a8", 0x12}, {&(0x7f0000000700)="aa4bf8efd1b7", 0x6}], 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r4, 0x1f, 0x0, 0x82b, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 975.412468ms ago: executing program 1 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000c4) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000700)={0x4, {"0dbad96fff0154ff08ff002084000100", "3dfab0438ae8a5e3a639f105b5e9f977"}, 0x4000c, 0x7}) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000480)=""/1, 0x1}], 0x20, 0x1, 0x7fff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000001900)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x24}}, 0x0) sendmsg$can_raw(r6, &(0x7f0000001980)={&(0x7f00000019c0)={0x1d, r8}, 0x10, &(0x7f0000001a00)={&(0x7f0000001a40)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x39, 0x1, 0x0, 0x0, "958b6289b467fa6e7800e5effd24e3373810e0bc2571c7013fe2c74f733178cb264a9b41baca04ef05588497100f7df9f0a3ddeb12ddba10108056fd50853766"}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$packet(r5, &(0x7f0000000900)="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", 0x1000, 0x4, &(0x7f0000001ac0)={0x11, 0x1, r8, 0x1, 0xaf, 0x6, @random="d68d742c0250"}, 0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r10) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1067ba3c", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf2502000000"], 0x14}}, 0x10) setsockopt$inet6_group_source_req(r5, 0x29, 0x3c, &(0x7f0000000000)={0x2, {{0xa, 0x4e20, 0x4, @mcast1, 0x39}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x4}}}, 0x108) 784.544926ms ago: executing program 0 (id=340): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000001c0)={0x1, 0xffffffff, 0xffbfffff, 0x6, 0xc0030, 0x3fb}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x98) link(&(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='./sys/bus/usb/devices/usb2/power/level\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000780)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000800)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000840)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = open(&(0x7f0000000880)='./file0\x00', 0x0, 0x0) mkdirat(r8, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r9 = open(&(0x7f0000000940)='.\x00', 0x4000, 0x0) renameat2(r8, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f0000000a00)='./file0\x00', 0x2) ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000a40)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r10, &(0x7f0000000300)="6f6ec6564281bdcb83fe76ee13669821561956d3e4ed48440a58993e262e69c0ff5a3f00300628171399fe7d2e9efd6e2665f99292c1159f0150d34c3d769caf2f3fe9a2d25ef7e121e4e31202c39ca7459a09bea34ae5e0066e3396c182ff38bea4fee7da4b67f353f7f9763bb7525a233bf8a9f8a3b64c1421d4c2672551a0ae5397e1d6227a748b97fd01d5323512e95a7120bb7e739b08ca9732d4e5ba6555432bfc106521469ba289974de295799fde468570212df18fc7007e07115581cb860200c558", 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c0002800500100007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 283.701383ms ago: executing program 4 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000380)='fill\n', 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003140)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0x600488c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"3c67672adacafa9cb9fbc7e37be521556614a8a67415d45e68693b1dc71474fb"}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x8a340, 0x0) write$P9_RSTATu(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20f) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r0, 0xff98000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={0x0}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0408f108b225bd70"], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) mkdirat(r1, &(0x7f0000000c80)='./config\x00', 0x1cf) mount(0x0, &(0x7f0000000cc0)='./config\x00', &(0x7f0000000d00)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000d40)='./config/usb_gadget/g1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000006c0)=@newchain={0x70, 0x64, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x0, 0x9}, {0x4, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0xb0, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_LINK={0x8, 0x3, 0x335d}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x8c5) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d80)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd24, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x400c010) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000020000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 251.322781ms ago: executing program 4 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$alg(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000094000040001800b00010065787468647200002c00028008000440000096ed870003080007400000001708000640000000712933c1000000000008000340fffffffd0900010073790430000000000900020073797a32000000001400000011000100"/148], 0x94}}, 0x0) 161.111128ms ago: executing program 3 (id=342): mkdir(&(0x7f0000000440)='./file0\x00', 0x88) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000002c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @local}, 0x3, 0xffff, 0x1, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x109, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) 160.836538ms ago: executing program 4 (id=343): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000000)=0x3, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x3, 0x2, 0x3, 0x10, 0x5, 0xf2}, @ipv6=@generic={0x7, 0x6, "6dcc43", 0x2d6, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @empty, {[@fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x1f, 0x68}, @hopopts={0x3b, 0x16, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x5e, 0x4, [0xb]}}, @enc_lim, @calipso={0x7, 0x50, {0x1, 0x12, 0x7, 0x0, [0xffffffff80000001, 0x9fdb, 0xfffffffffffffff9, 0x8, 0x3, 0x0, 0x9, 0x80, 0x50]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xeb, 0x3, [0x4d, 0x40, 0x7, 0x8]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0xc, 0xc, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0x17}, @private1, @mcast2, @local]}, @dstopts={0x0, 0x11, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x50, {0x3, 0x12, 0x80, 0x8001, [0x401, 0x73, 0x6, 0x6e8, 0x0, 0x7, 0x0, 0xe3, 0x2]}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x6}]}, @fragment={0x6c, 0x0, 0x7, 0x1, 0x0, 0x1c, 0x65}, @fragment={0x7da9ddd042b976ee, 0x0, 0x3b, 0x0, 0x0, 0x2, 0x64}, @routing={0x11, 0x8, 0x0, 0x8, 0x0, [@loopback, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @hopopts={0x0, 0x4, '\x00', [@pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5c, [0x72f, 0x80]}}, @pad1, @jumbo={0xc2, 0x4, 0x7f}]}], "8a690ddbd5fb9a9121f08e05d01d5c8ec5f13b57210416ee30dd68b83adde05b94415d2f7564cacb7cd9b261bcf043bd08946ee5ed72c990292034fe415c99b3bdd81384b45d61a14856c7a92ace6a50709fd0d06d5644ce99b55e695bcd4ea208299ae502910f6ed640806755000e274b1ae5c883f86591f88621b19b86dc106f28a46ca884"}}}, 0x308) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 0s ago: executing program 4 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x6, 0x10001, 0x7e, 0x4, 0x4, 0x80000, 0x2, 0x5, 0x100, 0x0, 0x9, 0x2000000000000, 0x5, 0x6, 0x80000000b, 0x4000000000200, 0x0, 0x2, 0x100000, 0x10000000000f48, 0x8, 0x29}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x17, 0x301, 0x70bd2c, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c910}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)) ppoll(&(0x7f0000000300)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./debug\x00', &(0x7f0000000040)='dax\x00', 0x81, 0x0) r4 = fsopen(&(0x7f0000000340)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='sysfs\x00', &(0x7f0000000440)='\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r5, &(0x7f0000000100)=""/190, 0xbe) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): red forwarding state [ 38.394095][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.397071][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.397899][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.402632][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.405695][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.410965][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.415188][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.416733][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.416795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.435522][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.445301][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445346][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.470991][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.471074][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.563276][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.567189][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 38.567200][ T42] audit: type=1400 audit(1793140871.465:171): avc: denied { sys_module } for pid=5776 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.582227][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.591629][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.596821][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.596907][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.609568][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.615806][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.615898][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.622097][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.622176][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.632053][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.632096][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.819979][ T5781] Bluetooth: hci1: command tx timeout [ 38.819984][ T5140] Bluetooth: hci0: command tx timeout [ 38.820174][ T5781] Bluetooth: hci3: command tx timeout [ 38.820179][ T5140] Bluetooth: hci2: command tx timeout [ 38.825015][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.855306][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.856140][ T5776] veth0_vlan: entered promiscuous mode [ 38.862568][ T5776] veth1_vlan: entered promiscuous mode [ 38.886084][ T5770] veth0_vlan: entered promiscuous mode [ 38.891784][ T5776] veth0_macvtap: entered promiscuous mode [ 38.894038][ T5770] veth1_vlan: entered promiscuous mode [ 38.896329][ T5776] veth1_macvtap: entered promiscuous mode [ 38.912766][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.917963][ T5770] veth0_macvtap: entered promiscuous mode [ 38.921404][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.921666][ T5770] veth1_macvtap: entered promiscuous mode [ 38.923307][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.938600][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.941481][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.947942][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.990604][ T5771] veth0_vlan: entered promiscuous mode [ 39.021814][ T5771] veth1_vlan: entered promiscuous mode [ 39.050205][ T5779] veth0_vlan: entered promiscuous mode [ 39.052625][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.052638][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.073171][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.073183][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.075930][ T5779] veth1_vlan: entered promiscuous mode [ 39.103029][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.103049][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.108138][ T5771] veth0_macvtap: entered promiscuous mode [ 39.122919][ T42] audit: type=1400 audit(1793140872.025:172): avc: denied { mount } for pid=5776 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.125668][ T5771] veth1_macvtap: entered promiscuous mode [ 39.128563][ T42] audit: type=1400 audit(1793140872.025:173): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/syzkaller.g5iD7G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.128588][ T42] audit: type=1400 audit(1793140872.025:174): avc: denied { mount } for pid=5776 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.132397][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.132407][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.135677][ T42] audit: type=1400 audit(1793140872.035:175): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/syzkaller.g5iD7G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.137766][ T42] audit: type=1400 audit(1793140872.035:176): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/syzkaller.g5iD7G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.142670][ T42] audit: type=1400 audit(1793140872.045:177): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.164052][ T42] audit: type=1400 audit(1793140872.065:178): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.164762][ T42] audit: type=1400 audit(1793140872.065:179): avc: denied { mount } for pid=5776 comm="syz-executor" name="/" dev="gadgetfs" ino=9759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.170856][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.171174][ T5779] veth0_macvtap: entered promiscuous mode [ 39.173437][ T5779] veth1_macvtap: entered promiscuous mode [ 39.189338][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.189977][ T5636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190423][ T5636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190501][ T5636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190645][ T5636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.203578][ T5636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.203661][ T5636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.205517][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.212805][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.217913][ T42] audit: type=1400 audit(1793140872.115:180): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 39.264015][ T5776] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.293115][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.293127][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.308917][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.308929][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.318400][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.318415][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.333569][ T409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.333582][ T409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.339184][ T5636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339271][ T5636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339487][ T5636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339681][ T5636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339710][ T5636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339736][ T5636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339764][ T5636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339790][ T5636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339815][ T5636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.359767][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.435310][ T5784] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 39.472170][ T5960] FAULT_INJECTION: forcing a failure. [ 39.472170][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.472227][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 39.472248][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.472266][ T5960] Call Trace: [ 39.472274][ T5960] [ 39.472281][ T5960] dump_stack_lvl+0x100/0x190 [ 39.472313][ T5960] should_fail_ex.cold+0x5/0xa [ 39.472339][ T5960] _copy_from_user+0x2e/0xd0 [ 39.472363][ T5960] rfcomm_dev_ioctl+0x305/0x1d80 [ 39.472382][ T5960] ? bt_sock_ioctl+0x1df/0x580 [ 39.472410][ T5960] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 39.472436][ T5960] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 39.472451][ T5960] ? tomoyo_path_number_perm+0x28f/0x580 [ 39.472481][ T5960] ? tomoyo_path_number_perm+0x188/0x580 [ 39.472510][ T5960] rfcomm_sock_ioctl+0xcc/0xf0 [ 39.472535][ T5960] sock_do_ioctl+0x118/0x280 [ 39.472560][ T5960] ? __pfx_sock_do_ioctl+0x10/0x10 [ 39.472580][ T5960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.472611][ T5960] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 39.472632][ T5960] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 39.472653][ T5960] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 39.472708][ T5960] sock_ioctl+0x599/0x6b0 [ 39.472734][ T5960] ? __pfx_sock_ioctl+0x10/0x10 [ 39.472764][ T5960] ? selinux_file_ioctl+0x1e0/0x290 [ 39.472781][ T5960] ? selinux_file_ioctl+0x1e7/0x290 [ 39.472799][ T5960] ? __pfx_sock_ioctl+0x10/0x10 [ 39.472822][ T5960] __x64_sys_ioctl+0x18e/0x210 [ 39.472850][ T5960] do_syscall_64+0x123/0x790 [ 39.472871][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.472889][ T5960] RIP: 0033:0x7f188ad9f559 [ 39.472903][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.472919][ T5960] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.472936][ T5960] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 39.472946][ T5960] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 39.472956][ T5960] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 39.472966][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.472976][ T5960] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 39.473000][ T5960] [ 39.684827][ T5975] bond1: entered allmulticast mode [ 39.788433][ T5978] Bluetooth: MGMT ver 1.23 [ 39.836261][ T5982] syzkaller0: entered promiscuous mode [ 39.836281][ T5982] syzkaller0: entered allmulticast mode [ 39.961033][ T5985] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 39.961083][ T5985] ipvlan0: entered allmulticast mode [ 39.961092][ T5985] veth0_vlan: entered allmulticast mode [ 39.963370][ T5985] team0: Device ipvlan0 failed to register rx_handler [ 40.142996][ T5997] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19'. [ 40.233525][ T6000] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 40.233955][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 40.244573][ T6000] bond1: (slave bond_slave_0): Device is not our slave [ 40.244593][ T6000] bond1: option active_slave: invalid value (bond_slave_0) [ 40.247850][ T6000] bond1 (unregistering): Released all slaves [ 40.459122][ T5860] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.621986][ T5860] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 40.623316][ T5860] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 40.625158][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.625175][ T5860] usb 6-1: Product: syz [ 40.625186][ T5860] usb 6-1: Manufacturer: syz [ 40.625196][ T5860] usb 6-1: SerialNumber: syz [ 40.699685][ T6015] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.707590][ T6015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6015 comm=syz.0.25 [ 40.864508][ T5860] rtl8150 6-1:1.0: couldn't reset the device [ 40.865381][ T5860] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.870291][ T5860] usb 6-1: USB disconnect, device number 2 [ 40.899458][ T5773] Bluetooth: hci0: command tx timeout [ 40.899481][ T5773] Bluetooth: hci1: command tx timeout [ 40.899492][ T5773] Bluetooth: hci3: command tx timeout [ 40.943310][ T5140] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 41.385193][ T6032] evm: overlay not supported [ 41.415798][ T6036] FAULT_INJECTION: forcing a failure. [ 41.415798][ T6036] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.415833][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 41.415853][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.415863][ T6036] Call Trace: [ 41.415869][ T6036] [ 41.415876][ T6036] dump_stack_lvl+0x100/0x190 [ 41.415907][ T6036] should_fail_ex.cold+0x5/0xa [ 41.415929][ T6036] ? prepare_alloc_pages+0x16d/0x5b0 [ 41.415955][ T6036] should_fail_alloc_page+0xeb/0x140 [ 41.415982][ T6036] prepare_alloc_pages+0x1f0/0x5b0 [ 41.416005][ T6036] ? __kernel_text_address+0xd/0x30 [ 41.416027][ T6036] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 41.416053][ T6036] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 41.416084][ T6036] ? look_up_lock_class+0x55/0x120 [ 41.416103][ T6036] ? register_lock_class+0x3f/0x7b0 [ 41.416127][ T6036] ? find_held_lock+0x2b/0x80 [ 41.416144][ T6036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.416163][ T6036] ? ima_match_policy+0x8b8/0x23e0 [ 41.416193][ T6036] ? __lock_acquire+0x5c0/0x1f40 [ 41.416230][ T6036] ? __lock_acquire+0x5c0/0x1f40 [ 41.416252][ T6036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.416281][ T6036] ? policy_nodemask+0xed/0x4f0 [ 41.416309][ T6036] alloc_pages_mpol+0x201/0x560 [ 41.416336][ T6036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 41.416368][ T6036] alloc_pages_noprof+0x1a/0x160 [ 41.416386][ T6036] __pud_alloc+0x3b/0x690 [ 41.416411][ T6036] __handle_mm_fault+0x1078/0x2f60 [ 41.416443][ T6036] ? __pfx___handle_mm_fault+0x10/0x10 [ 41.416468][ T6036] ? __pfx_mt_find+0x10/0x10 [ 41.416503][ T6036] ? find_vma+0xbf/0x140 [ 41.416522][ T6036] ? __pfx_find_vma+0x10/0x10 [ 41.416547][ T6036] handle_mm_fault+0x363/0xa20 [ 41.416579][ T6036] do_user_addr_fault+0x745/0x12f0 [ 41.416612][ T6036] exc_page_fault+0x6f/0xd0 [ 41.416639][ T6036] asm_exc_page_fault+0x26/0x30 [ 41.416684][ T6036] RIP: 0010:_copy_from_user+0x93/0xd0 [ 41.416707][ T6036] Code: b0 d6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 cc 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 ab [ 41.416723][ T6036] RSP: 0018:ffffc90003d47b48 EFLAGS: 00050246 [ 41.416738][ T6036] RAX: 0000000000000001 RBX: 00002000000004c0 RCX: 0000000000000018 [ 41.416749][ T6036] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc90003d47bf8 [ 41.416760][ T6036] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520007a8f81 [ 41.416771][ T6036] R10: ffffc90003d47c0f R11: 0000000000000000 R12: 0000000000000000 [ 41.416781][ T6036] R13: ffffc90003d47bf8 R14: 00000000800452d3 R15: 00002000000004c0 [ 41.416811][ T6036] ? _copy_from_user+0x87/0xd0 [ 41.416833][ T6036] rfcomm_dev_ioctl+0x305/0x1d80 [ 41.416852][ T6036] ? bt_sock_ioctl+0x1df/0x580 [ 41.416879][ T6036] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 41.416905][ T6036] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 41.416922][ T6036] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.416954][ T6036] ? tomoyo_path_number_perm+0x188/0x580 [ 41.416985][ T6036] rfcomm_sock_ioctl+0xcc/0xf0 [ 41.417012][ T6036] sock_do_ioctl+0x118/0x280 [ 41.417037][ T6036] ? __pfx_sock_do_ioctl+0x10/0x10 [ 41.417060][ T6036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.417090][ T6036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.417110][ T6036] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 41.417132][ T6036] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.417156][ T6036] sock_ioctl+0x599/0x6b0 [ 41.417182][ T6036] ? __pfx_sock_ioctl+0x10/0x10 [ 41.417213][ T6036] ? selinux_file_ioctl+0x1e0/0x290 [ 41.417229][ T6036] ? selinux_file_ioctl+0x1e7/0x290 [ 41.417248][ T6036] ? __pfx_sock_ioctl+0x10/0x10 [ 41.417270][ T6036] __x64_sys_ioctl+0x18e/0x210 [ 41.417291][ T6036] do_syscall_64+0x123/0x790 [ 41.417310][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.417327][ T6036] RIP: 0033:0x7f0c2639f559 [ 41.417358][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.417374][ T6036] RSP: 002b:00007f0c271f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.417389][ T6036] RAX: ffffffffffffffda RBX: 00007f0c26625fa0 RCX: 00007f0c2639f559 [ 41.417400][ T6036] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 41.417410][ T6036] RBP: 00007f0c271f3090 R08: 0000000000000000 R09: 0000000000000000 [ 41.417420][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.417430][ T6036] R13: 00007f0c26626038 R14: 00007f0c26625fa0 R15: 00007ffcc3eb8788 [ 41.417455][ T6036] [ 41.426112][ T6038] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.35'. [ 41.426126][ T6038] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.35'. [ 41.749615][ T6065] FAULT_INJECTION: forcing a failure. [ 41.749615][ T6065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.749636][ T6065] CPU: 2 UID: 0 PID: 6065 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(full) [ 41.749648][ T6065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.749654][ T6065] Call Trace: [ 41.749658][ T6065] [ 41.749662][ T6065] dump_stack_lvl+0x100/0x190 [ 41.749683][ T6065] should_fail_ex.cold+0x5/0xa [ 41.749698][ T6065] ? prepare_alloc_pages+0x16d/0x5b0 [ 41.749714][ T6065] should_fail_alloc_page+0xeb/0x140 [ 41.749730][ T6065] prepare_alloc_pages+0x1f0/0x5b0 [ 41.749745][ T6065] ? rcu_is_watching+0x13/0xc0 [ 41.749758][ T6065] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 41.749773][ T6065] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 41.749792][ T6065] ? look_up_lock_class+0x55/0x120 [ 41.749805][ T6065] ? register_lock_class+0x3f/0x7b0 [ 41.749820][ T6065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.749831][ T6065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.749846][ T6065] ? __lock_acquire+0x5c0/0x1f40 [ 41.749867][ T6065] ? __lock_acquire+0x5c0/0x1f40 [ 41.749880][ T6065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.749903][ T6065] ? policy_nodemask+0xed/0x4f0 [ 41.749920][ T6065] alloc_pages_mpol+0x201/0x560 [ 41.749937][ T6065] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 41.749953][ T6065] ? find_held_lock+0x2b/0x80 [ 41.749962][ T6065] ? __pud_alloc+0x4f6/0x690 [ 41.749976][ T6065] ? __pud_alloc+0x4f6/0x690 [ 41.749990][ T6065] alloc_pages_noprof+0x1a/0x160 [ 41.750001][ T6065] __pmd_alloc+0x3b/0x950 [ 41.750014][ T6065] ? __pud_alloc+0x4fb/0x690 [ 41.750028][ T6065] __handle_mm_fault+0xa9d/0x2f60 [ 41.750047][ T6065] ? __pfx___handle_mm_fault+0x10/0x10 [ 41.750063][ T6065] ? __pfx_mt_find+0x10/0x10 [ 41.750083][ T6065] ? find_vma+0xbf/0x140 [ 41.750094][ T6065] ? __pfx_find_vma+0x10/0x10 [ 41.750107][ T6065] handle_mm_fault+0x363/0xa20 [ 41.750126][ T6065] do_user_addr_fault+0x745/0x12f0 [ 41.750146][ T6065] exc_page_fault+0x6f/0xd0 [ 41.750163][ T6065] asm_exc_page_fault+0x26/0x30 [ 41.750173][ T6065] RIP: 0010:_copy_from_user+0x93/0xd0 [ 41.750186][ T6065] Code: b0 d6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 cc 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 ab [ 41.750196][ T6065] RSP: 0018:ffffc9000173fb48 EFLAGS: 00050246 [ 41.750206][ T6065] RAX: 0000000000000001 RBX: 00002000000004c0 RCX: 0000000000000018 [ 41.750212][ T6065] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc9000173fbf8 [ 41.750218][ T6065] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520002e7f81 [ 41.750225][ T6065] R10: ffffc9000173fc0f R11: 0000000000000000 R12: 0000000000000000 [ 41.750231][ T6065] R13: ffffc9000173fbf8 R14: 00000000800452d3 R15: 00002000000004c0 [ 41.750244][ T6065] ? _copy_from_user+0x87/0xd0 [ 41.750257][ T6065] rfcomm_dev_ioctl+0x305/0x1d80 [ 41.750268][ T6065] ? bt_sock_ioctl+0x1df/0x580 [ 41.750285][ T6065] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 41.750301][ T6065] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 41.750311][ T6065] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.750331][ T6065] ? tomoyo_path_number_perm+0x188/0x580 [ 41.750349][ T6065] rfcomm_sock_ioctl+0xcc/0xf0 [ 41.750365][ T6065] sock_do_ioctl+0x118/0x280 [ 41.750372][ T5140] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 41.750380][ T6065] ? __pfx_sock_do_ioctl+0x10/0x10 [ 41.750394][ T6065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.750412][ T6065] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.750424][ T6065] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 41.750439][ T6065] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.750453][ T6065] sock_ioctl+0x599/0x6b0 [ 41.750469][ T6065] ? __pfx_sock_ioctl+0x10/0x10 [ 41.750488][ T6065] ? selinux_file_ioctl+0x1e0/0x290 [ 41.750498][ T6065] ? selinux_file_ioctl+0x1e7/0x290 [ 41.750509][ T6065] ? __pfx_sock_ioctl+0x10/0x10 [ 41.750525][ T6065] __x64_sys_ioctl+0x18e/0x210 [ 41.750539][ T6065] do_syscall_64+0x123/0x790 [ 41.750551][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.750561][ T6065] RIP: 0033:0x7f188ad9f559 [ 41.750570][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.750579][ T6065] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.750589][ T6065] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 41.750595][ T6065] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 41.750601][ T6065] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 41.750607][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.750613][ T6065] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 41.750626][ T6065] [ 41.859297][ T5784] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 42.076876][ T6089] size and base must be multiples of 4 kiB [ 42.076895][ T6089] CPU: 2 UID: 0 PID: 6089 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) [ 42.076914][ T6089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.076923][ T6089] Call Trace: [ 42.076929][ T6089] [ 42.076936][ T6089] dump_stack_lvl+0x100/0x190 [ 42.076970][ T6089] mtrr_add.cold+0x74/0x87 [ 42.076991][ T6089] mtrr_ioctl+0x25a/0xcf0 [ 42.077011][ T6089] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 42.077033][ T6089] ? __pfx_mtrr_ioctl+0x10/0x10 [ 42.077053][ T6089] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 42.077076][ T6089] ? __fget_files+0x34/0x3d0 [ 42.077117][ T6089] ? __pfx_mtrr_ioctl+0x10/0x10 [ 42.077138][ T6089] proc_reg_unlocked_ioctl+0x229/0x320 [ 42.077159][ T6089] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 42.077182][ T6089] __x64_sys_ioctl+0x18e/0x210 [ 42.077208][ T6089] do_syscall_64+0x123/0x790 [ 42.077230][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.077250][ T6089] RIP: 0033:0x7fa706d9f559 [ 42.077265][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.077281][ T6089] RSP: 002b:00007fa707c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.077300][ T6089] RAX: ffffffffffffffda RBX: 00007fa707025fa0 RCX: 00007fa706d9f559 [ 42.077312][ T6089] RDX: 0000200000000940 RSI: 0000000040104d01 RDI: 0000000000000006 [ 42.077324][ T6089] RBP: 00007fa706e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 42.077334][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.077345][ T6089] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 42.077371][ T6089] [ 42.079168][ T5879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.136775][ T6096] FAULT_INJECTION: forcing a failure. [ 42.136775][ T6096] name failslab, interval 1, probability 0, space 0, times 1 [ 42.136803][ T6096] CPU: 2 UID: 0 PID: 6096 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(full) [ 42.136815][ T6096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.136821][ T6096] Call Trace: [ 42.136825][ T6096] [ 42.136829][ T6096] dump_stack_lvl+0x100/0x190 [ 42.136885][ T6096] should_fail_ex.cold+0x5/0xa [ 42.136902][ T6096] should_failslab+0xc2/0x120 [ 42.136918][ T6096] kmem_cache_alloc_noprof+0x92/0x6a0 [ 42.136932][ T6096] ? __pud_alloc+0x4f6/0x690 [ 42.136945][ T6096] ? __pmd_alloc+0xbf/0x950 [ 42.136961][ T6096] __pmd_alloc+0xbf/0x950 [ 42.136974][ T6096] ? __pud_alloc+0x4fb/0x690 [ 42.136988][ T6096] __handle_mm_fault+0xa9d/0x2f60 [ 42.137007][ T6096] ? __pfx___handle_mm_fault+0x10/0x10 [ 42.137022][ T6096] ? __pfx_mt_find+0x10/0x10 [ 42.137059][ T6096] ? find_vma+0xbf/0x140 [ 42.137071][ T6096] ? __pfx_find_vma+0x10/0x10 [ 42.137084][ T6096] handle_mm_fault+0x363/0xa20 [ 42.137103][ T6096] do_user_addr_fault+0x745/0x12f0 [ 42.137123][ T6096] exc_page_fault+0x6f/0xd0 [ 42.137140][ T6096] asm_exc_page_fault+0x26/0x30 [ 42.137151][ T6096] RIP: 0010:_copy_from_user+0x93/0xd0 [ 42.137167][ T6096] Code: b0 d6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 cc 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 ab [ 42.137177][ T6096] RSP: 0018:ffffc90004877b48 EFLAGS: 00050246 [ 42.137192][ T6096] RAX: 0000000000000001 RBX: 00002000000004c0 RCX: 0000000000000018 [ 42.137199][ T6096] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc90004877bf8 [ 42.137205][ T6096] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff5200090ef81 [ 42.137211][ T6096] R10: ffffc90004877c0f R11: 0000000000000000 R12: 0000000000000000 [ 42.137217][ T6096] R13: ffffc90004877bf8 R14: 00000000800452d3 R15: 00002000000004c0 [ 42.137231][ T6096] ? _copy_from_user+0x87/0xd0 [ 42.137244][ T6096] rfcomm_dev_ioctl+0x305/0x1d80 [ 42.137256][ T6096] ? bt_sock_ioctl+0x1df/0x580 [ 42.137273][ T6096] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 42.137290][ T6096] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 42.137300][ T6096] ? tomoyo_path_number_perm+0x28f/0x580 [ 42.137319][ T6096] ? tomoyo_path_number_perm+0x188/0x580 [ 42.137338][ T6096] rfcomm_sock_ioctl+0xcc/0xf0 [ 42.137354][ T6096] sock_do_ioctl+0x118/0x280 [ 42.137379][ T6096] ? __pfx_sock_do_ioctl+0x10/0x10 [ 42.137393][ T6096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.137412][ T6096] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 42.137425][ T6096] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 42.137438][ T6096] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 42.137451][ T6096] sock_ioctl+0x599/0x6b0 [ 42.137467][ T6096] ? __pfx_sock_ioctl+0x10/0x10 [ 42.137487][ T6096] ? selinux_file_ioctl+0x1e0/0x290 [ 42.137499][ T6096] ? selinux_file_ioctl+0x1e7/0x290 [ 42.137510][ T6096] ? __pfx_sock_ioctl+0x10/0x10 [ 42.137526][ T6096] __x64_sys_ioctl+0x18e/0x210 [ 42.137541][ T6096] do_syscall_64+0x123/0x790 [ 42.137552][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.137563][ T6096] RIP: 0033:0x7f188ad9f559 [ 42.137572][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.137581][ T6096] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.137590][ T6096] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 42.137596][ T6096] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 42.137602][ T6096] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 42.137608][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.137614][ T6096] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 42.137628][ T6096] [ 42.230012][ T5879] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 42.231110][ T5879] usb 7-1: config index 0 descriptor too short (expected 65445, got 45) [ 42.233563][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.233580][ T5879] usb 7-1: Product: syz [ 42.233591][ T5879] usb 7-1: Manufacturer: syz [ 42.233603][ T5879] usb 7-1: SerialNumber: syz [ 42.366122][ T6111] Zero length message leads to an empty skb [ 42.492779][ T5879] rtl8150 7-1:1.0: couldn't reset the device [ 42.492913][ T5879] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 42.498727][ T5879] usb 7-1: USB disconnect, device number 2 [ 42.616220][ T6122] FAULT_INJECTION: forcing a failure. [ 42.616220][ T6122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.616240][ T6122] CPU: 3 UID: 0 PID: 6122 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 42.616255][ T6122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.616261][ T6122] Call Trace: [ 42.616265][ T6122] [ 42.616269][ T6122] dump_stack_lvl+0x100/0x190 [ 42.616290][ T6122] should_fail_ex.cold+0x5/0xa [ 42.616305][ T6122] ? prepare_alloc_pages+0x16d/0x5b0 [ 42.616321][ T6122] should_fail_alloc_page+0xeb/0x140 [ 42.616337][ T6122] prepare_alloc_pages+0x1f0/0x5b0 [ 42.616354][ T6122] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 42.616368][ T6122] ? find_held_lock+0x2b/0x80 [ 42.616379][ T6122] ? is_bpf_text_address+0x8a/0x1a0 [ 42.616390][ T6122] ? bpf_ksym_find+0x128/0x1c0 [ 42.616403][ T6122] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 42.616418][ T6122] ? is_bpf_text_address+0x94/0x1a0 [ 42.616429][ T6122] ? kernel_text_address+0x8d/0x100 [ 42.616442][ T6122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 42.616454][ T6122] ? arch_stack_walk+0xa6/0xf0 [ 42.616475][ T6122] ? stack_trace_save+0x8e/0xc0 [ 42.616487][ T6122] ? __pfx_stack_trace_save+0x10/0x10 [ 42.616504][ T6122] ? kasan_save_stack+0x3f/0x50 [ 42.616517][ T6122] ? kasan_save_stack+0x30/0x50 [ 42.616529][ T6122] ? kasan_save_track+0x14/0x30 [ 42.616542][ T6122] ? __kasan_slab_alloc+0x89/0x90 [ 42.616555][ T6122] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 42.616567][ T6122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.616585][ T6122] ? policy_nodemask+0xed/0x4f0 [ 42.616602][ T6122] alloc_pages_mpol+0x201/0x560 [ 42.616618][ T6122] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 42.616638][ T6122] alloc_pages_noprof+0x1a/0x160 [ 42.616673][ T6122] pte_alloc_one+0x1c/0x3d0 [ 42.616685][ T6122] __pte_alloc+0x6d/0x380 [ 42.616698][ T6122] ? __pfx___pte_alloc+0x10/0x10 [ 42.616713][ T6122] do_anonymous_page+0x1307/0x2050 [ 42.616735][ T6122] ? find_held_lock+0x2b/0x80 [ 42.616750][ T6122] ? __pmd_alloc+0x3f6/0x950 [ 42.616769][ T6122] ? __pmd_alloc+0x3f6/0x950 [ 42.616788][ T6122] ? __pfx_do_anonymous_page+0x10/0x10 [ 42.616811][ T6122] ? do_raw_spin_unlock+0x145/0x1e0 [ 42.616835][ T6122] ? _raw_spin_unlock+0x28/0x50 [ 42.616861][ T6122] ? __pmd_alloc+0x3fb/0x950 [ 42.616884][ T6122] __handle_mm_fault+0x1ff3/0x2f60 [ 42.616916][ T6122] ? __pfx___handle_mm_fault+0x10/0x10 [ 42.616936][ T6122] ? __pfx_mt_find+0x10/0x10 [ 42.616957][ T6122] ? find_vma+0xbf/0x140 [ 42.616969][ T6122] ? __pfx_find_vma+0x10/0x10 [ 42.616983][ T6122] handle_mm_fault+0x363/0xa20 [ 42.617002][ T6122] do_user_addr_fault+0x745/0x12f0 [ 42.617021][ T6122] exc_page_fault+0x6f/0xd0 [ 42.617039][ T6122] asm_exc_page_fault+0x26/0x30 [ 42.617050][ T6122] RIP: 0010:_copy_from_user+0x93/0xd0 [ 42.617065][ T6122] Code: b0 d6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 cc 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 ab [ 42.617075][ T6122] RSP: 0018:ffffc900046c7b48 EFLAGS: 00050246 [ 42.617084][ T6122] RAX: 0000000000000001 RBX: 00002000000004c0 RCX: 0000000000000018 [ 42.617091][ T6122] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc900046c7bf8 [ 42.617097][ T6122] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520008d8f81 [ 42.617103][ T6122] R10: ffffc900046c7c0f R11: 0000000000000000 R12: 0000000000000000 [ 42.617112][ T6122] R13: ffffc900046c7bf8 R14: 00000000800452d3 R15: 00002000000004c0 [ 42.617126][ T6122] ? _copy_from_user+0x87/0xd0 [ 42.617139][ T6122] rfcomm_dev_ioctl+0x305/0x1d80 [ 42.617150][ T6122] ? bt_sock_ioctl+0x1df/0x580 [ 42.617167][ T6122] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 42.617187][ T6122] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 42.617197][ T6122] ? tomoyo_path_number_perm+0x28f/0x580 [ 42.617217][ T6122] ? tomoyo_path_number_perm+0x188/0x580 [ 42.617235][ T6122] rfcomm_sock_ioctl+0xcc/0xf0 [ 42.617251][ T6122] sock_do_ioctl+0x118/0x280 [ 42.617267][ T6122] ? __pfx_sock_do_ioctl+0x10/0x10 [ 42.617281][ T6122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.617300][ T6122] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 42.617312][ T6122] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 42.617325][ T6122] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 42.617339][ T6122] sock_ioctl+0x599/0x6b0 [ 42.617360][ T6122] ? __pfx_sock_ioctl+0x10/0x10 [ 42.617378][ T6122] ? selinux_file_ioctl+0x1e0/0x290 [ 42.617388][ T6122] ? selinux_file_ioctl+0x1e7/0x290 [ 42.617399][ T6122] ? __pfx_sock_ioctl+0x10/0x10 [ 42.617415][ T6122] __x64_sys_ioctl+0x18e/0x210 [ 42.617430][ T6122] do_syscall_64+0x123/0x790 [ 42.617442][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.617452][ T6122] RIP: 0033:0x7fa706d9f559 [ 42.617461][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.617470][ T6122] RSP: 002b:00007fa707c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.617479][ T6122] RAX: ffffffffffffffda RBX: 00007fa707025fa0 RCX: 00007fa706d9f559 [ 42.617486][ T6122] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 42.617492][ T6122] RBP: 00007fa707c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 42.617498][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.617504][ T6122] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 42.617517][ T6122] [ 42.738169][ T5140] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 42.744604][ T6126] bond1: Removing last arp target with arp_interval on [ 42.781579][ T6135] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 42.782372][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 42.979825][ T5773] Bluetooth: hci0: command 0x040f tx timeout [ 42.979896][ T5140] Bluetooth: hci3: command tx timeout [ 43.088037][ T6153] FAULT_INJECTION: forcing a failure. [ 43.088037][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 43.088057][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 43.088069][ T6153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.088075][ T6153] Call Trace: [ 43.088079][ T6153] [ 43.088083][ T6153] dump_stack_lvl+0x100/0x190 [ 43.088104][ T6153] should_fail_ex.cold+0x5/0xa [ 43.088120][ T6153] should_failslab+0xc2/0x120 [ 43.088136][ T6153] kmem_cache_alloc_noprof+0x92/0x6a0 [ 43.088150][ T6153] ? ptlock_alloc+0x1f/0x70 [ 43.088179][ T6153] ptlock_alloc+0x1f/0x70 [ 43.088195][ T6153] pte_alloc_one+0x82/0x3d0 [ 43.088206][ T6153] __pte_alloc+0x6d/0x380 [ 43.088218][ T6153] ? __pfx___pte_alloc+0x10/0x10 [ 43.088233][ T6153] do_anonymous_page+0x1307/0x2050 [ 43.088251][ T6153] ? find_held_lock+0x2b/0x80 [ 43.088261][ T6153] ? __pmd_alloc+0x3f6/0x950 [ 43.088274][ T6153] ? __pmd_alloc+0x3f6/0x950 [ 43.088288][ T6153] ? __pfx_do_anonymous_page+0x10/0x10 [ 43.088304][ T6153] ? do_raw_spin_unlock+0x145/0x1e0 [ 43.088320][ T6153] ? _raw_spin_unlock+0x28/0x50 [ 43.088336][ T6153] ? __pmd_alloc+0x3fb/0x950 [ 43.088351][ T6153] __handle_mm_fault+0x1ff3/0x2f60 [ 43.088374][ T6153] ? __pfx___handle_mm_fault+0x10/0x10 [ 43.088390][ T6153] ? __pfx_mt_find+0x10/0x10 [ 43.088410][ T6153] ? find_vma+0xbf/0x140 [ 43.088422][ T6153] ? __pfx_find_vma+0x10/0x10 [ 43.088436][ T6153] handle_mm_fault+0x363/0xa20 [ 43.088455][ T6153] do_user_addr_fault+0x745/0x12f0 [ 43.088474][ T6153] exc_page_fault+0x6f/0xd0 [ 43.088492][ T6153] asm_exc_page_fault+0x26/0x30 [ 43.088502][ T6153] RIP: 0010:_copy_from_user+0x93/0xd0 [ 43.088517][ T6153] Code: b0 d6 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 19 cc 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 05 ab [ 43.088527][ T6153] RSP: 0018:ffffc90004fefb48 EFLAGS: 00050246 [ 43.088536][ T6153] RAX: 0000000000000001 RBX: 00002000000004c0 RCX: 0000000000000018 [ 43.088542][ T6153] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffc90004fefbf8 [ 43.088549][ T6153] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520009fdf81 [ 43.088555][ T6153] R10: ffffc90004fefc0f R11: 0000000000000000 R12: 0000000000000000 [ 43.088561][ T6153] R13: ffffc90004fefbf8 R14: 00000000800452d3 R15: 00002000000004c0 [ 43.088574][ T6153] ? _copy_from_user+0x87/0xd0 [ 43.088588][ T6153] rfcomm_dev_ioctl+0x305/0x1d80 [ 43.088599][ T6153] ? bt_sock_ioctl+0x1df/0x580 [ 43.088620][ T6153] ? __pfx_bt_sock_ioctl+0x10/0x10 [ 43.088667][ T6153] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 43.088684][ T6153] ? tomoyo_path_number_perm+0x28f/0x580 [ 43.088717][ T6153] ? tomoyo_path_number_perm+0x188/0x580 [ 43.088749][ T6153] rfcomm_sock_ioctl+0xcc/0xf0 [ 43.088774][ T6153] sock_do_ioctl+0x118/0x280 [ 43.088797][ T6153] ? __pfx_sock_do_ioctl+0x10/0x10 [ 43.088819][ T6153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.088847][ T6153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 43.088869][ T6153] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 43.088888][ T6153] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 43.088902][ T6153] sock_ioctl+0x599/0x6b0 [ 43.088918][ T6153] ? __pfx_sock_ioctl+0x10/0x10 [ 43.088947][ T6153] ? selinux_file_ioctl+0x1e0/0x290 [ 43.088964][ T6153] ? selinux_file_ioctl+0x1e7/0x290 [ 43.088981][ T6153] ? __pfx_sock_ioctl+0x10/0x10 [ 43.089021][ T6153] __x64_sys_ioctl+0x18e/0x210 [ 43.089044][ T6153] do_syscall_64+0x123/0x790 [ 43.089063][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.089082][ T6153] RIP: 0033:0x7f0c2639f559 [ 43.089095][ T6153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.089109][ T6153] RSP: 002b:00007f0c271f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.089124][ T6153] RAX: ffffffffffffffda RBX: 00007f0c26625fa0 RCX: 00007f0c2639f559 [ 43.089134][ T6153] RDX: 00002000000004c0 RSI: 00000000800452d3 RDI: 0000000000000004 [ 43.089144][ T6153] RBP: 00007f0c271f3090 R08: 0000000000000000 R09: 0000000000000000 [ 43.089151][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.089158][ T6153] R13: 00007f0c26626038 R14: 00007f0c26625fa0 R15: 00007ffcc3eb8788 [ 43.089172][ T6153] [ 43.460236][ T5140] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 43.460295][ T5140] Bluetooth: hci2: Injecting HCI hardware error event [ 43.461159][ T5773] Bluetooth: hci2: hardware error 0x00 [ 43.849355][ T1494] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 43.870239][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 43.870256][ T42] audit: type=1400 audit(1793140876.775:283): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.024791][ T1494] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 44.027556][ T1494] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 44.030881][ T1494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.030902][ T1494] usb 5-1: Product: syz [ 44.030914][ T1494] usb 5-1: Manufacturer: syz [ 44.030925][ T1494] usb 5-1: SerialNumber: syz [ 44.031191][ T42] audit: type=1400 audit(1793140876.935:284): avc: denied { create } for pid=6174 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.033224][ T42] audit: type=1400 audit(1793140876.935:285): avc: denied { sys_admin } for pid=6174 comm="syz.1.90" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 44.078891][ T42] audit: type=1400 audit(1793140876.975:286): avc: denied { bind } for pid=6174 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.114386][ T6179] trusted_key: encrypted_key: insufficient parameters specified [ 44.118503][ T6179] Could not find key with description: [syz] [ 44.118515][ T6179] process_request_key_err: No key [ 44.118523][ T6179] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 44.118532][ T6179] One or more global auth toks could not properly register; rc = [-2] [ 44.118568][ T6179] Error validating options; rc = [-2] [ 44.171453][ T5140] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 44.171481][ T5140] Bluetooth: hci2: unexpected event for opcode 0x204b [ 44.289505][ T1494] rtl8150 5-1:1.0: couldn't reset the device [ 44.289737][ T1494] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 44.294485][ T1494] usb 5-1: USB disconnect, device number 2 [ 44.463858][ T6196] FAULT_INJECTION: forcing a failure. [ 44.463858][ T6196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.463887][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT(full) [ 44.463906][ T6196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.463915][ T6196] Call Trace: [ 44.463921][ T6196] [ 44.463928][ T6196] dump_stack_lvl+0x100/0x190 [ 44.463960][ T6196] should_fail_ex.cold+0x5/0xa [ 44.463987][ T6196] _copy_to_user+0x32/0xd0 [ 44.464010][ T6196] simple_read_from_buffer+0xcb/0x170 [ 44.464037][ T6196] proc_fail_nth_read+0x1af/0x230 [ 44.464065][ T6196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.464093][ T6196] ? rw_verify_area+0xce/0x6d0 [ 44.464113][ T6196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.464137][ T6196] vfs_read+0x1e4/0xb40 [ 44.464158][ T6196] ? lock_acquire+0x1d1/0x380 [ 44.464179][ T6196] ? __fget_files+0x34/0x3d0 [ 44.464204][ T6196] ? __pfx_vfs_read+0x10/0x10 [ 44.464222][ T6196] ? find_held_lock+0x2b/0x80 [ 44.464238][ T6196] ? __fget_files+0x215/0x3d0 [ 44.464266][ T6196] ? __fget_files+0x21f/0x3d0 [ 44.464298][ T6196] ksys_read+0x12a/0x250 [ 44.464318][ T6196] ? __pfx_ksys_read+0x10/0x10 [ 44.464346][ T6196] do_syscall_64+0x123/0x790 [ 44.464366][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.464383][ T6196] RIP: 0033:0x7f0c2635fd8e [ 44.464398][ T6196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.464415][ T6196] RSP: 002b:00007f0c271f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.464433][ T6196] RAX: ffffffffffffffda RBX: 00007f0c271f36c0 RCX: 00007f0c2635fd8e [ 44.464445][ T6196] RDX: 000000000000000f RSI: 00007f0c271f30a0 RDI: 0000000000000003 [ 44.464455][ T6196] RBP: 00007f0c271f3090 R08: 0000000000000000 R09: 0000000000000000 [ 44.464465][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.464475][ T6196] R13: 00007f0c26626038 R14: 00007f0c26625fa0 R15: 00007ffcc3eb8788 [ 44.464498][ T6196] [ 44.502039][ T5140] Bluetooth: hci4: command 0x1003 tx timeout [ 44.502138][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 44.564625][ T6203] netlink: 7164 bytes leftover after parsing attributes in process `syz.2.102'. [ 44.564673][ T6203] netlink: 7164 bytes leftover after parsing attributes in process `syz.2.102'. [ 44.612780][ T42] audit: type=1400 audit(1793140877.515:287): avc: denied { create } for pid=6206 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.614763][ T42] audit: type=1400 audit(1793140877.515:288): avc: denied { ioctl } for pid=6206 comm="syz.3.104" path="socket:[9189]" dev="sockfs" ino=9189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.688294][ T42] audit: type=1400 audit(1793140877.585:289): avc: denied { write } for pid=6212 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.688749][ T42] audit: type=1400 audit(1793140877.585:290): avc: denied { read } for pid=6212 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.692911][ T42] audit: type=1400 audit(1793140877.595:291): avc: denied { read write } for pid=6212 comm="syz.3.106" name="vbi5" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 44.692952][ T42] audit: type=1400 audit(1793140877.595:292): avc: denied { open } for pid=6212 comm="syz.3.106" path="/dev/vbi5" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 44.775011][ T6219] xt_IDLETIMER: timeout value is zero [ 44.892385][ T6240] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 44.905777][ T6240] bond1: entered allmulticast mode [ 44.908075][ T6244] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 44.940873][ T5784] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 44.942911][ T6245] bond2: entered allmulticast mode [ 44.980372][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 44.980415][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 44.981186][ T5140] Bluetooth: hci1: hardware error 0x00 [ 45.059364][ T5784] Bluetooth: hci3: command tx timeout [ 45.059402][ T5784] Bluetooth: hci0: command 0x040f tx timeout [ 45.112559][ T6264] ecryptfs_validate_options: eCryptfs doesn't support cipher: a [ 45.112581][ T6264] Error validating options; rc = [-22] [ 45.112945][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 45.119751][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 45.329836][ T6285] CIFS: Attempting to mount //127.0.0.1/share [ 45.384243][ T6286] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=6912 len=0) [ 45.384967][ T6285] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=6912 len=0) [ 45.388909][ T6292] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 45.393515][ T6291] bridge0: port 3(syz_tun) entered blocking state [ 45.393591][ T6291] bridge0: port 3(syz_tun) entered disabled state [ 45.393687][ T6291] syz_tun: entered allmulticast mode [ 45.394477][ T6291] syz_tun: entered promiscuous mode [ 45.394802][ T6291] bridge0: port 3(syz_tun) entered blocking state [ 45.394845][ T6291] bridge0: port 3(syz_tun) entered forwarding state [ 45.519153][ T5860] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 45.549745][ T5773] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 45.702943][ T5860] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 45.703791][ T5860] usb 7-1: config index 0 descriptor too short (expected 65445, got 45) [ 45.705281][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.705294][ T5860] usb 7-1: Product: syz [ 45.705300][ T5860] usb 7-1: Manufacturer: syz [ 45.705307][ T5860] usb 7-1: SerialNumber: syz [ 45.724467][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.724740][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.724899][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725087][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725250][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725429][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725585][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725772][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.725926][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.726079][ T6318] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 45.934457][ T5860] rtl8150 7-1:1.0: couldn't reset the device [ 45.934595][ T5860] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 45.940176][ T5860] usb 7-1: USB disconnect, device number 3 [ 46.162680][ T6285] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with RawNTLMSSP: -11 [ 46.162876][ T6285] CIFS: VFS: cifs_mount failed w/return code = -11 [ 46.536794][ T6335] netlink: 104 bytes leftover after parsing attributes in process `syz.0.143'. [ 46.926914][ T6359] overlay: Unknown parameter 'dont_measure' [ 46.928789][ T6360] overlay: Unknown parameter 'dont_measure' [ 47.029187][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 47.061713][ T5140] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 47.119164][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.139167][ T5140] Bluetooth: hci0: command 0x040f tx timeout [ 47.185088][ T6365] random: crng reseeded on system resumption [ 47.189604][ T9] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 47.190751][ T9] usb 7-1: config index 0 descriptor too short (expected 65445, got 45) [ 47.192767][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.192786][ T9] usb 7-1: Product: syz [ 47.192796][ T9] usb 7-1: Manufacturer: syz [ 47.192807][ T9] usb 7-1: SerialNumber: syz [ 47.250177][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 47.250194][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 47.270419][ T29] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 47.272258][ T29] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 47.274087][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.274106][ T29] usb 5-1: Product: syz [ 47.274117][ T29] usb 5-1: Manufacturer: syz [ 47.274129][ T29] usb 5-1: SerialNumber: syz [ 47.430765][ T9] rtl8150 7-1:1.0: couldn't reset the device [ 47.430894][ T9] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 47.436840][ T9] usb 7-1: USB disconnect, device number 4 [ 47.471856][ T6372] syz.1.159 uses obsolete (PF_INET,SOCK_PACKET) [ 47.480561][ T6372] netlink: 144 bytes leftover after parsing attributes in process `syz.1.159'. [ 47.515673][ T29] rtl8150 5-1:1.0: couldn't reset the device [ 47.515807][ T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 47.520062][ T29] usb 5-1: USB disconnect, device number 3 [ 47.626059][ T6382] ip_tables: iptables: counters copy to user failed while replacing table [ 47.957572][ T5140] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 48.119075][ T6423] vivid-001: ================= START STATUS ================= [ 48.119133][ T6423] vivid-001: Radio HW Seek Mode: Bounded [ 48.119150][ T6423] vivid-001: Radio Programmable HW Seek: false [ 48.119166][ T6423] vivid-001: RDS Rx I/O Mode: Block I/O [ 48.119179][ T6423] vivid-001: Generate RBDS Instead of RDS: false [ 48.119197][ T6423] vivid-001: RDS Reception: true [ 48.119214][ T6423] vivid-001: RDS Program Type: 0 inactive [ 48.119233][ T6423] vivid-001: RDS PS Name: inactive [ 48.119251][ T6423] vivid-001: RDS Radio Text: inactive [ 48.119269][ T6423] vivid-001: RDS Traffic Announcement: false inactive [ 48.119288][ T6423] vivid-001: RDS Traffic Program: false inactive [ 48.119307][ T6423] vivid-001: RDS Music: false inactive [ 48.119326][ T6423] vivid-001: ================== END STATUS ================== [ 48.121568][ T6423] ======================================================= [ 48.121568][ T6423] WARNING: The mand mount option has been deprecated and [ 48.121568][ T6423] and is ignored by this kernel. Remove the mand [ 48.121568][ T6423] option from the mount to silence this warning. [ 48.121568][ T6423] ======================================================= [ 48.123587][ T6423] FAT-fs (nullb0): bogus number of reserved sectors [ 48.123604][ T6423] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 48.172525][ T6429] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 48.172540][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.173584][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 48.440153][ T5879] usb 44-1: SetAddress Request (2) to port 0 [ 48.440207][ T5879] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.466394][ T6435] netlink: 92 bytes leftover after parsing attributes in process `syz.1.185'. [ 48.496610][ T6437] gadgetfs: bound to dummy_udc driver [ 48.609122][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.692201][ T6430] vhci_hcd: connection reset by peer [ 48.695128][ T5636] vhci_hcd vhci_hcd.3: stop threads [ 48.695559][ T5636] vhci_hcd vhci_hcd.3: release socket [ 48.697825][ T5636] vhci_hcd vhci_hcd.3: disconnect device [ 48.778668][ T5140] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 48.779673][ T5140] Bluetooth: hci0: unexpected event for opcode 0x204b [ 48.786845][ T29] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 48.792936][ T6455] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 48.792961][ T29] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 48.795257][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.795275][ T29] usb 5-1: Product: syz [ 48.795286][ T29] usb 5-1: Manufacturer: syz [ 48.795297][ T29] usb 5-1: SerialNumber: syz [ 48.914076][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 48.914094][ T42] audit: type=1400 audit(1793140881.815:349): avc: denied { mount } for pid=6461 comm="syz.2.196" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 48.932764][ T42] audit: type=1400 audit(1793140881.835:350): avc: denied { unmount } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 48.966012][ T42] audit: type=1400 audit(1793140881.865:351): avc: denied { read write } for pid=6465 comm="syz.2.197" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.966319][ T42] audit: type=1400 audit(1793140881.865:352): avc: denied { open } for pid=6465 comm="syz.2.197" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 48.966793][ T42] audit: type=1400 audit(1793140881.865:353): avc: denied { ioctl } for pid=6465 comm="syz.2.197" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.010179][ T6468] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 49.045873][ T29] rtl8150 5-1:1.0: couldn't reset the device [ 49.046109][ T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 49.053044][ T29] usb 5-1: USB disconnect, device number 4 [ 49.059125][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.128981][ T42] audit: type=1400 audit(1793140882.025:354): avc: denied { create } for pid=6477 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 49.132553][ T42] audit: type=1400 audit(1793140882.035:355): avc: denied { write } for pid=6477 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 49.133345][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.200'. [ 49.209914][ T5872] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 49.210868][ T5872] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 49.212746][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.212762][ T5872] usb 6-1: Product: syz [ 49.212774][ T5872] usb 6-1: Manufacturer: syz [ 49.212784][ T5872] usb 6-1: SerialNumber: syz [ 49.340462][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.368800][ T42] audit: type=1400 audit(1793140882.265:356): avc: denied { write } for pid=6482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.378033][ T6485] FAULT_INJECTION: forcing a failure. [ 49.378033][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.378061][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 49.378081][ T6485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.378091][ T6485] Call Trace: [ 49.378097][ T6485] [ 49.378104][ T6485] dump_stack_lvl+0x100/0x190 [ 49.378184][ T6485] should_fail_ex.cold+0x5/0xa [ 49.378212][ T6485] _copy_from_user+0x2e/0xd0 [ 49.378236][ T6485] __sys_bpf+0x2f5/0x4b60 [ 49.378268][ T6485] ? __pfx___sys_bpf+0x10/0x10 [ 49.378292][ T6485] ? find_held_lock+0x2b/0x80 [ 49.378308][ T6485] ? get_pid_task+0xfc/0x250 [ 49.378332][ T6485] ? get_pid_task+0xfc/0x250 [ 49.378364][ T6485] ? find_held_lock+0x2b/0x80 [ 49.378387][ T6485] ? rcu_read_lock_any_held+0x6a/0x90 [ 49.378421][ T6485] ? find_held_lock+0x2b/0x80 [ 49.378438][ T6485] ? ksys_write+0x190/0x250 [ 49.378460][ T6485] ? ksys_write+0x190/0x250 [ 49.378482][ T6485] ? lock_acquire+0x1d1/0x380 [ 49.378519][ T6485] ? fput+0x7c/0x100 [ 49.378536][ T6485] ? ksys_write+0x1ac/0x250 [ 49.378558][ T6485] ? __x64_sys_bpf+0xce/0x140 [ 49.378576][ T6485] __x64_sys_bpf+0xce/0x140 [ 49.378597][ T6485] ? do_syscall_64+0xae/0x790 [ 49.378639][ T6485] do_syscall_64+0x123/0x790 [ 49.378659][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.378678][ T6485] RIP: 0033:0x7f188ad9f559 [ 49.378693][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.378706][ T6485] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.378736][ T6485] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 49.378747][ T6485] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000001c [ 49.378758][ T6485] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 49.378768][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.378779][ T6485] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 49.378804][ T6485] [ 49.438532][ T42] audit: type=1400 audit(1793140882.335:357): avc: denied { write } for pid=6487 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.465274][ T5872] rtl8150 6-1:1.0: couldn't reset the device [ 49.465402][ T5872] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 49.468197][ T5872] usb 6-1: USB disconnect, device number 3 [ 49.539524][ T42] audit: type=1400 audit(1793140882.445:358): avc: denied { accept } for pid=6494 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.654805][ T5140] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 49.654838][ T5140] Bluetooth: hci0: unexpected event for opcode 0x204b [ 49.799673][ T6515] FAULT_INJECTION: forcing a failure. [ 49.799673][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 49.799701][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(full) [ 49.799719][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.799728][ T6515] Call Trace: [ 49.799734][ T6515] [ 49.799740][ T6515] dump_stack_lvl+0x100/0x190 [ 49.799770][ T6515] should_fail_ex.cold+0x5/0xa [ 49.799793][ T6515] should_failslab+0xc2/0x120 [ 49.799822][ T6515] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.799840][ T6515] ? bpf_xdp_link_attach+0x18c/0x8f0 [ 49.799881][ T6515] bpf_xdp_link_attach+0x18c/0x8f0 [ 49.799901][ T6515] ? __fget_files+0x34/0x3d0 [ 49.799924][ T6515] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 49.799943][ T6515] ? find_held_lock+0x2b/0x80 [ 49.799960][ T6515] ? __fget_files+0x215/0x3d0 [ 49.799993][ T6515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.800021][ T6515] __sys_bpf+0x3c31/0x4b60 [ 49.800049][ T6515] ? __pfx___sys_bpf+0x10/0x10 [ 49.800071][ T6515] ? find_held_lock+0x2b/0x80 [ 49.800085][ T6515] ? get_pid_task+0xfc/0x250 [ 49.800107][ T6515] ? get_pid_task+0xfc/0x250 [ 49.800137][ T6515] ? find_held_lock+0x2b/0x80 [ 49.800157][ T6515] ? rcu_read_lock_any_held+0x6a/0x90 [ 49.800174][ T6515] ? find_held_lock+0x2b/0x80 [ 49.800188][ T6515] ? ksys_write+0x190/0x250 [ 49.800207][ T6515] ? ksys_write+0x190/0x250 [ 49.800226][ T6515] ? lock_acquire+0x1d1/0x380 [ 49.800262][ T6515] ? fput+0x7c/0x100 [ 49.800276][ T6515] ? ksys_write+0x1ac/0x250 [ 49.800298][ T6515] ? __x64_sys_bpf+0xce/0x140 [ 49.800319][ T6515] __x64_sys_bpf+0xce/0x140 [ 49.800342][ T6515] ? do_syscall_64+0xae/0x790 [ 49.800359][ T6515] do_syscall_64+0x123/0x790 [ 49.800377][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.800393][ T6515] RIP: 0033:0x7fba14b9f559 [ 49.800407][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.800421][ T6515] RSP: 002b:00007fba159fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.800438][ T6515] RAX: ffffffffffffffda RBX: 00007fba14e25fa0 RCX: 00007fba14b9f559 [ 49.800448][ T6515] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000001c [ 49.800457][ T6515] RBP: 00007fba159fd090 R08: 0000000000000000 R09: 0000000000000000 [ 49.800467][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.800476][ T6515] R13: 00007fba14e26038 R14: 00007fba14e25fa0 R15: 00007ffc64219768 [ 49.800499][ T6515] [ 50.092530][ T6519] FAULT_INJECTION: forcing a failure. [ 50.092530][ T6519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.092560][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) [ 50.092598][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.092610][ T6519] Call Trace: [ 50.092640][ T6519] [ 50.092648][ T6519] dump_stack_lvl+0x100/0x190 [ 50.092683][ T6519] should_fail_ex.cold+0x5/0xa [ 50.092708][ T6519] ? prepare_alloc_pages+0x16d/0x5b0 [ 50.092736][ T6519] should_fail_alloc_page+0xeb/0x140 [ 50.092763][ T6519] prepare_alloc_pages+0x1f0/0x5b0 [ 50.092794][ T6519] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 50.092823][ T6519] ? __lock_acquire+0x5c0/0x1f40 [ 50.092852][ T6519] ? lock_acquire+0x1d1/0x380 [ 50.092876][ T6519] ? __update_page_owner_handle+0x63/0x530 [ 50.092914][ T6519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.092936][ T6519] ? find_held_lock+0x2b/0x80 [ 50.092954][ T6519] ? xa_load+0x149/0x2c0 [ 50.092976][ T6519] ? xa_load+0x149/0x2c0 [ 50.092992][ T6519] ? __css_rstat_updated+0x1ce/0x590 [ 50.093024][ T6519] ? __pfx___css_rstat_updated+0x10/0x10 [ 50.093050][ T6519] ? __pfx_xa_load+0x10/0x10 [ 50.093084][ T6519] ? __lock_acquire+0x5c0/0x1f40 [ 50.093107][ T6519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.093132][ T6519] ? policy_nodemask+0xed/0x4f0 [ 50.093163][ T6519] alloc_pages_mpol+0x201/0x560 [ 50.093192][ T6519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.093214][ T6519] ? do_raw_spin_lock+0x128/0x260 [ 50.093241][ T6519] ? find_held_lock+0x2b/0x80 [ 50.093257][ T6519] ? __swap_cache_alloc_folio+0x374/0xc50 [ 50.093280][ T6519] folio_alloc_mpol_noprof+0x36/0x260 [ 50.093298][ T6519] __swap_cache_alloc_folio+0x3d7/0xc50 [ 50.093324][ T6519] ? __pfx___swap_cache_alloc_folio+0x10/0x10 [ 50.093343][ T6519] ? swap_cache_get_folio+0x28d/0x360 [ 50.093365][ T6519] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 50.093388][ T6519] ? get_swap_device+0x1e5/0x260 [ 50.093415][ T6519] swap_cache_read_folio+0x47/0x150 [ 50.093434][ T6519] read_swap_cache_async+0xea/0x440 [ 50.093457][ T6519] ? __pfx_read_swap_cache_async+0x10/0x10 [ 50.093478][ T6519] ? find_held_lock+0x2b/0x80 [ 50.093493][ T6519] ? swapin_walk_pmd_entry+0x2ec/0x620 [ 50.093520][ T6519] ? swapin_walk_pmd_entry+0x2ec/0x620 [ 50.093553][ T6519] swapin_walk_pmd_entry+0x310/0x620 [ 50.093583][ T6519] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 50.093619][ T6519] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 50.093663][ T6519] walk_pgd_range+0xbef/0x1e00 [ 50.093693][ T6519] ? __lock_acquire+0x5c0/0x1f40 [ 50.093722][ T6519] ? __pfx_walk_pgd_range+0x10/0x10 [ 50.093743][ T6519] ? do_raw_spin_lock+0x128/0x260 [ 50.093776][ T6519] __walk_page_range+0x171/0x850 [ 50.093794][ T6519] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.093827][ T6519] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.093857][ T6519] ? rcu_is_watching+0x13/0xc0 [ 50.093883][ T6519] walk_page_range_vma_unsafe+0x209/0x8f0 [ 50.093907][ T6519] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 50.093926][ T6519] ? find_held_lock+0x2b/0x80 [ 50.093953][ T6519] walk_page_range_vma+0x63/0x90 [ 50.093976][ T6519] madvise_vma_behavior+0xe82/0x2310 [ 50.094006][ T6519] ? mas_prev+0xa4/0x100 [ 50.094031][ T6519] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 50.094061][ T6519] ? mas_walk+0x260/0x310 [ 50.094078][ T6519] ? find_vma_prev+0xd8/0x150 [ 50.094100][ T6519] ? __pfx_find_vma_prev+0x10/0x10 [ 50.094122][ T6519] ? lock_acquire+0x1d1/0x380 [ 50.094158][ T6519] madvise_walk_vmas+0x30e/0xc50 [ 50.094189][ T6519] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 50.094218][ T6519] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.094247][ T6519] ? lock_acquire+0x1d1/0x380 [ 50.094273][ T6519] madvise_do_behavior+0x1ea/0x510 [ 50.094296][ T6519] ? __pfx_madvise_do_behavior+0x10/0x10 [ 50.094324][ T6519] ? down_read+0x136/0x4c0 [ 50.094357][ T6519] do_madvise+0x238/0x290 [ 50.094383][ T6519] ? __pfx_do_madvise+0x10/0x10 [ 50.094409][ T6519] ? do_futex+0x190/0x440 [ 50.094433][ T6519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.094467][ T6519] __x64_sys_madvise+0xa9/0x110 [ 50.094492][ T6519] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.094509][ T6519] do_syscall_64+0x123/0x790 [ 50.094529][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.094549][ T6519] RIP: 0033:0x7fa706d9f559 [ 50.094563][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.094582][ T6519] RSP: 002b:00007fa707c1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 50.094603][ T6519] RAX: ffffffffffffffda RBX: 00007fa707025fa0 RCX: 00007fa706d9f559 [ 50.094616][ T6519] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 50.094627][ T6519] RBP: 00007fa706e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.094636][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.094645][ T6519] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 50.094673][ T6519] [ 50.289071][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.460759][ T9] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 50.461966][ T9] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 50.464084][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.464103][ T9] usb 5-1: Product: syz [ 50.464115][ T9] usb 5-1: Manufacturer: syz [ 50.464126][ T9] usb 5-1: SerialNumber: syz [ 50.468640][ T6549] FAULT_INJECTION: forcing a failure. [ 50.468640][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.468657][ T6549] CPU: 3 UID: 0 PID: 6549 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) [ 50.468669][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.468676][ T6549] Call Trace: [ 50.468680][ T6549] [ 50.468684][ T6549] dump_stack_lvl+0x100/0x190 [ 50.468704][ T6549] should_fail_ex.cold+0x5/0xa [ 50.468720][ T6549] _copy_from_user+0x2e/0xd0 [ 50.468734][ T6549] copy_msghdr_from_user+0x9f/0x4c0 [ 50.468751][ T6549] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 50.468770][ T6549] ? lock_acquire+0x1d1/0x380 [ 50.468784][ T6549] ? get_pid_task+0x2a/0x250 [ 50.468801][ T6549] ___sys_sendmsg+0x106/0x1e0 [ 50.468817][ T6549] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.468838][ T6549] ? get_pid_task+0x106/0x250 [ 50.468858][ T6549] ? find_held_lock+0x2b/0x80 [ 50.468876][ T6549] __sys_sendmsg+0x160/0x210 [ 50.468889][ T6549] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.468908][ T6549] do_syscall_64+0x123/0x790 [ 50.468921][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.468932][ T6549] RIP: 0033:0x7f188ad9f559 [ 50.468941][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.468950][ T6549] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.468961][ T6549] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 50.468968][ T6549] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000004 [ 50.468974][ T6549] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 50.468980][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.468986][ T6549] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 50.469012][ T6549] [ 50.709271][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 50.709467][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 50.716940][ T9] usb 5-1: USB disconnect, device number 5 [ 50.731829][ T5140] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 50.731856][ T5140] Bluetooth: hci0: unexpected event for opcode 0x204b [ 50.909191][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 51.069714][ T5889] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 51.072068][ T5889] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 51.074140][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.074160][ T5889] usb 6-1: Product: syz [ 51.074172][ T5889] usb 6-1: Manufacturer: syz [ 51.074185][ T5889] usb 6-1: SerialNumber: syz [ 51.291155][ T6575] FAULT_INJECTION: forcing a failure. [ 51.291155][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 51.291176][ T6575] CPU: 3 UID: 0 PID: 6575 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) [ 51.291188][ T6575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.291195][ T6575] Call Trace: [ 51.291198][ T6575] [ 51.291203][ T6575] dump_stack_lvl+0x100/0x190 [ 51.291224][ T6575] should_fail_ex.cold+0x5/0xa [ 51.291241][ T6575] should_failslab+0xc2/0x120 [ 51.291256][ T6575] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 51.291271][ T6575] ? __d_alloc+0x34/0xad0 [ 51.291284][ T6575] __d_alloc+0x34/0xad0 [ 51.291293][ T6575] ? __pfx_idr_alloc_u32+0x10/0x10 [ 51.291308][ T6575] d_alloc_pseudo+0x1c/0xc0 [ 51.291322][ T6575] alloc_file_pseudo+0x118/0x290 [ 51.291334][ T6575] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 51.291348][ T6575] __anon_inode_getfile+0xe8/0x280 [ 51.291365][ T6575] bpf_link_prime+0x200/0x4c0 [ 51.291382][ T6575] bpf_xdp_link_attach+0x27a/0x8f0 [ 51.291397][ T6575] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 51.291409][ T6575] ? find_held_lock+0x2b/0x80 [ 51.291420][ T6575] ? __fget_files+0x215/0x3d0 [ 51.291443][ T6575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.291462][ T6575] __sys_bpf+0x3c31/0x4b60 [ 51.291480][ T6575] ? __pfx___sys_bpf+0x10/0x10 [ 51.291494][ T6575] ? find_held_lock+0x2b/0x80 [ 51.291504][ T6575] ? get_pid_task+0xfc/0x250 [ 51.291520][ T6575] ? get_pid_task+0xfc/0x250 [ 51.291539][ T6575] ? find_held_lock+0x2b/0x80 [ 51.291555][ T6575] ? rcu_read_lock_any_held+0x6a/0x90 [ 51.291571][ T6575] ? find_held_lock+0x2b/0x80 [ 51.291585][ T6575] ? ksys_write+0x190/0x250 [ 51.291603][ T6575] ? ksys_write+0x190/0x250 [ 51.291624][ T6575] ? lock_acquire+0x1d1/0x380 [ 51.291657][ T6575] ? fput+0x7c/0x100 [ 51.291670][ T6575] ? ksys_write+0x1ac/0x250 [ 51.291692][ T6575] ? __x64_sys_bpf+0xce/0x140 [ 51.291713][ T6575] __x64_sys_bpf+0xce/0x140 [ 51.291737][ T6575] ? do_syscall_64+0xae/0x790 [ 51.291753][ T6575] do_syscall_64+0x123/0x790 [ 51.291769][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.291788][ T6575] RIP: 0033:0x7f188ad9f559 [ 51.291803][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.291818][ T6575] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.291835][ T6575] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 51.291848][ T6575] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000001c [ 51.291856][ T6575] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 51.291865][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.291874][ T6575] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 51.291894][ T6575] [ 51.296219][ T6573] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 51.346120][ T5889] rtl8150 6-1:1.0: couldn't reset the device [ 51.346315][ T5889] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 51.361867][ T5889] usb 6-1: USB disconnect, device number 4 [ 51.409704][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 51.848954][ T6604] FAULT_INJECTION: forcing a failure. [ 51.848954][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 51.848974][ T6604] CPU: 3 UID: 0 PID: 6604 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 51.848987][ T6604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.849007][ T6604] Call Trace: [ 51.849012][ T6604] [ 51.849017][ T6604] dump_stack_lvl+0x100/0x190 [ 51.849038][ T6604] should_fail_ex.cold+0x5/0xa [ 51.849055][ T6604] should_failslab+0xc2/0x120 [ 51.849071][ T6604] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 51.849084][ T6604] ? __alloc_skb+0x5b7/0x710 [ 51.849096][ T6604] ? __alloc_skb+0x140/0x710 [ 51.849109][ T6604] __alloc_skb+0x140/0x710 [ 51.849119][ T6604] ? __alloc_skb+0x5b7/0x710 [ 51.849130][ T6604] ? __pfx___alloc_skb+0x10/0x10 [ 51.849140][ T6604] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 51.849157][ T6604] netlink_alloc_large_skb+0x69/0x150 [ 51.849171][ T6604] netlink_sendmsg+0x755/0x10c0 [ 51.849191][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.849208][ T6604] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.849225][ T6604] ? ____sys_sendmsg+0xa99/0xc30 [ 51.849239][ T6604] ____sys_sendmsg+0xa99/0xc30 [ 51.849253][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.849268][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.849286][ T6604] ? lock_acquire+0x1d1/0x380 [ 51.849299][ T6604] ? get_pid_task+0x2a/0x250 [ 51.849316][ T6604] ___sys_sendmsg+0x190/0x1e0 [ 51.849333][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.849348][ T6604] ? get_pid_task+0x106/0x250 [ 51.849369][ T6604] ? find_held_lock+0x2b/0x80 [ 51.849388][ T6604] __sys_sendmsg+0x160/0x210 [ 51.849400][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.849420][ T6604] do_syscall_64+0x123/0x790 [ 51.849433][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.849444][ T6604] RIP: 0033:0x7fa706d9f559 [ 51.849453][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.849463][ T6604] RSP: 002b:00007fa707c1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.849474][ T6604] RAX: ffffffffffffffda RBX: 00007fa707025fa0 RCX: 00007fa706d9f559 [ 51.849480][ T6604] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000004 [ 51.849486][ T6604] RBP: 00007fa707c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.849492][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.849498][ T6604] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 51.849512][ T6604] [ 51.974185][ T6609] fuse: Bad value for 'rootmode' [ 52.030129][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.116869][ T6612] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 52.179996][ T50] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 52.181293][ T50] usb 8-1: config index 0 descriptor too short (expected 65445, got 45) [ 52.183808][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.183828][ T50] usb 8-1: Product: syz [ 52.183840][ T50] usb 8-1: Manufacturer: syz [ 52.183853][ T50] usb 8-1: SerialNumber: syz [ 52.286885][ T6615] FAULT_INJECTION: forcing a failure. [ 52.286885][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 52.286906][ T6615] CPU: 3 UID: 0 PID: 6615 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 52.286919][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.286926][ T6615] Call Trace: [ 52.286930][ T6615] [ 52.286934][ T6615] dump_stack_lvl+0x100/0x190 [ 52.286955][ T6615] should_fail_ex.cold+0x5/0xa [ 52.286972][ T6615] should_failslab+0xc2/0x120 [ 52.287010][ T6615] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.287029][ T6615] ? d_instantiate+0x8a/0xb0 [ 52.287047][ T6615] ? alloc_empty_file+0x5b/0x1c0 [ 52.287068][ T6615] alloc_empty_file+0x5b/0x1c0 [ 52.287088][ T6615] alloc_file_pseudo+0x17e/0x290 [ 52.287106][ T6615] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 52.287145][ T6615] __anon_inode_getfile+0xe8/0x280 [ 52.287171][ T6615] bpf_link_prime+0x200/0x4c0 [ 52.287194][ T6615] bpf_xdp_link_attach+0x27a/0x8f0 [ 52.287218][ T6615] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 52.287236][ T6615] ? find_held_lock+0x2b/0x80 [ 52.287256][ T6615] ? __fget_files+0x215/0x3d0 [ 52.287288][ T6615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.287308][ T6615] __sys_bpf+0x3c31/0x4b60 [ 52.287327][ T6615] ? __pfx___sys_bpf+0x10/0x10 [ 52.287341][ T6615] ? find_held_lock+0x2b/0x80 [ 52.287351][ T6615] ? get_pid_task+0xfc/0x250 [ 52.287366][ T6615] ? get_pid_task+0xfc/0x250 [ 52.287386][ T6615] ? find_held_lock+0x2b/0x80 [ 52.287399][ T6615] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.287411][ T6615] ? find_held_lock+0x2b/0x80 [ 52.287420][ T6615] ? ksys_write+0x190/0x250 [ 52.287433][ T6615] ? ksys_write+0x190/0x250 [ 52.287446][ T6615] ? lock_acquire+0x1d1/0x380 [ 52.287469][ T6615] ? fput+0x7c/0x100 [ 52.287478][ T6615] ? ksys_write+0x1ac/0x250 [ 52.287493][ T6615] ? __x64_sys_bpf+0xce/0x140 [ 52.287507][ T6615] __x64_sys_bpf+0xce/0x140 [ 52.287522][ T6615] ? do_syscall_64+0xae/0x790 [ 52.287534][ T6615] do_syscall_64+0x123/0x790 [ 52.287546][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.287558][ T6615] RIP: 0033:0x7fba14b9f559 [ 52.287567][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.287578][ T6615] RSP: 002b:00007fba159fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.287589][ T6615] RAX: ffffffffffffffda RBX: 00007fba14e25fa0 RCX: 00007fba14b9f559 [ 52.287596][ T6615] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000001c [ 52.287603][ T6615] RBP: 00007fba159fd090 R08: 0000000000000000 R09: 0000000000000000 [ 52.287609][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.287615][ T6615] R13: 00007fba14e26038 R14: 00007fba14e25fa0 R15: 00007ffc64219768 [ 52.287629][ T6615] [ 52.437594][ T50] rtl8150 8-1:1.0: couldn't reset the device [ 52.437827][ T50] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 52.451067][ T50] usb 8-1: USB disconnect, device number 2 [ 52.819376][ T5140] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 52.819469][ T5140] Bluetooth: hci0: Injecting HCI hardware error event [ 52.820921][ T5140] Bluetooth: hci0: hardware error 0x00 [ 53.069513][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 53.090354][ T5773] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 53.090383][ T5773] Bluetooth: hci0: unexpected event for opcode 0x204b [ 53.230428][ T5860] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 53.232100][ T5860] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 53.233894][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.233913][ T5860] usb 6-1: Product: syz [ 53.233926][ T5860] usb 6-1: Manufacturer: syz [ 53.233937][ T5860] usb 6-1: SerialNumber: syz [ 53.472959][ T5860] rtl8150 6-1:1.0: couldn't reset the device [ 53.473095][ T5860] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.475956][ T5860] usb 6-1: USB disconnect, device number 5 [ 53.478513][ T5788] udevd[5788]: setting mode of /dev/bus/usb/006/005 to 020664 failed: No such file or directory [ 53.478610][ T5788] udevd[5788]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 53.540330][ T5879] usb 44-1: device descriptor read/8, error -110 [ 53.648920][ T6647] FAULT_INJECTION: forcing a failure. [ 53.648920][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.648943][ T6647] CPU: 2 UID: 0 PID: 6647 Comm: syz.3.257 Not tainted syzkaller #0 PREEMPT(full) [ 53.648955][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.648961][ T6647] Call Trace: [ 53.648966][ T6647] [ 53.648970][ T6647] dump_stack_lvl+0x100/0x190 [ 53.649049][ T6647] should_fail_ex.cold+0x5/0xa [ 53.649066][ T6647] _copy_from_iter+0x1f4/0x16c0 [ 53.649082][ T6647] ? __asan_memset+0x23/0x50 [ 53.649095][ T6647] ? __pfx__copy_from_iter+0x10/0x10 [ 53.649108][ T6647] ? __pfx___alloc_skb+0x10/0x10 [ 53.649129][ T6647] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 53.649146][ T6647] netlink_sendmsg+0x8f5/0x10c0 [ 53.649163][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.649179][ T6647] ? selinux_socket_sendmsg+0x198/0x2f0 [ 53.649198][ T6647] ? ____sys_sendmsg+0xa99/0xc30 [ 53.649214][ T6647] ____sys_sendmsg+0xa99/0xc30 [ 53.649228][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.649243][ T6647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.649261][ T6647] ? lock_acquire+0x1d1/0x380 [ 53.649275][ T6647] ? get_pid_task+0x2a/0x250 [ 53.649292][ T6647] ___sys_sendmsg+0x190/0x1e0 [ 53.649308][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.649324][ T6647] ? get_pid_task+0x106/0x250 [ 53.649344][ T6647] ? find_held_lock+0x2b/0x80 [ 53.649363][ T6647] __sys_sendmsg+0x160/0x210 [ 53.649376][ T6647] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.649395][ T6647] do_syscall_64+0x123/0x790 [ 53.649425][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.649437][ T6647] RIP: 0033:0x7f188ad9f559 [ 53.649446][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.649456][ T6647] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.649474][ T6647] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 53.649480][ T6647] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000004 [ 53.649487][ T6647] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 53.649493][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.649499][ T6647] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 53.649513][ T6647] [ 53.747773][ T6653] FAULT_INJECTION: forcing a failure. [ 53.747773][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 53.747793][ T6653] CPU: 2 UID: 0 PID: 6653 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 53.747806][ T6653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.747812][ T6653] Call Trace: [ 53.747816][ T6653] [ 53.747820][ T6653] dump_stack_lvl+0x100/0x190 [ 53.747842][ T6653] should_fail_ex.cold+0x5/0xa [ 53.747862][ T6653] should_failslab+0xc2/0x120 [ 53.747878][ T6653] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.747892][ T6653] ? security_file_alloc+0x34/0x2c0 [ 53.747906][ T6653] security_file_alloc+0x34/0x2c0 [ 53.747917][ T6653] init_file+0x95/0x480 [ 53.747934][ T6653] alloc_empty_file+0x79/0x1c0 [ 53.747946][ T6653] alloc_file_pseudo+0x17e/0x290 [ 53.747957][ T6653] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 53.747972][ T6653] __anon_inode_getfile+0xe8/0x280 [ 53.747990][ T6653] bpf_link_prime+0x200/0x4c0 [ 53.748007][ T6653] bpf_xdp_link_attach+0x27a/0x8f0 [ 53.748022][ T6653] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 53.748034][ T6653] ? find_held_lock+0x2b/0x80 [ 53.748045][ T6653] ? __fget_files+0x215/0x3d0 [ 53.748068][ T6653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.748087][ T6653] __sys_bpf+0x3c31/0x4b60 [ 53.748106][ T6653] ? __pfx___sys_bpf+0x10/0x10 [ 53.748131][ T6653] ? find_held_lock+0x2b/0x80 [ 53.748141][ T6653] ? get_pid_task+0xfc/0x250 [ 53.748157][ T6653] ? get_pid_task+0xfc/0x250 [ 53.748177][ T6653] ? find_held_lock+0x2b/0x80 [ 53.748190][ T6653] ? rcu_read_lock_any_held+0x6a/0x90 [ 53.748202][ T6653] ? find_held_lock+0x2b/0x80 [ 53.748211][ T6653] ? ksys_write+0x190/0x250 [ 53.748224][ T6653] ? ksys_write+0x190/0x250 [ 53.748237][ T6653] ? lock_acquire+0x1d1/0x380 [ 53.748260][ T6653] ? fput+0x7c/0x100 [ 53.748269][ T6653] ? ksys_write+0x1ac/0x250 [ 53.748284][ T6653] ? __x64_sys_bpf+0xce/0x140 [ 53.748299][ T6653] __x64_sys_bpf+0xce/0x140 [ 53.748314][ T6653] ? do_syscall_64+0xae/0x790 [ 53.748327][ T6653] do_syscall_64+0x123/0x790 [ 53.748338][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.748354][ T6653] RIP: 0033:0x7f188ad9f559 [ 53.748363][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.748373][ T6653] RSP: 002b:00007f188bbed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.748384][ T6653] RAX: ffffffffffffffda RBX: 00007f188b025fa0 RCX: 00007f188ad9f559 [ 53.748391][ T6653] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000001c [ 53.748397][ T6653] RBP: 00007f188bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 53.748404][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.748410][ T6653] R13: 00007f188b026038 R14: 00007f188b025fa0 R15: 00007ffca8c52758 [ 53.748424][ T6653] [ 53.794307][ T6655] process 'syz.3.261' launched './file0' with NULL argv: empty string added [ 53.919133][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.929642][ T5879] usb usb44-port1: attempt power cycle [ 53.977253][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 53.977267][ T42] audit: type=1400 audit(1793140886.875:381): avc: denied { watch watch_reads } for pid=6659 comm="syz.1.263" path="/67" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.015427][ T5773] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 54.015453][ T5773] Bluetooth: hci0: unexpected event for opcode 0x204b [ 54.071196][ T34] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 54.073930][ T34] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 54.076155][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.076175][ T34] usb 5-1: Product: syz [ 54.076195][ T34] usb 5-1: Manufacturer: syz [ 54.076207][ T34] usb 5-1: SerialNumber: syz [ 54.180117][ T6673] FAULT_INJECTION: forcing a failure. [ 54.180117][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.180211][ T6673] CPU: 3 UID: 0 PID: 6673 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 54.180232][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.180243][ T6673] Call Trace: [ 54.180249][ T6673] [ 54.180256][ T6673] dump_stack_lvl+0x100/0x190 [ 54.180288][ T6673] should_fail_ex.cold+0x5/0xa [ 54.180329][ T6673] _copy_from_iter+0x1f4/0x16c0 [ 54.180351][ T6673] ? __asan_memset+0x23/0x50 [ 54.180369][ T6673] ? __pfx__copy_from_iter+0x10/0x10 [ 54.180387][ T6673] ? __pfx___alloc_skb+0x10/0x10 [ 54.180403][ T6673] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 54.180429][ T6673] netlink_sendmsg+0x8f5/0x10c0 [ 54.180452][ T6673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.180475][ T6673] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.180499][ T6673] ? ____sys_sendmsg+0xa99/0xc30 [ 54.180518][ T6673] ____sys_sendmsg+0xa99/0xc30 [ 54.180538][ T6673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.180558][ T6673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.180584][ T6673] ? lock_acquire+0x1d1/0x380 [ 54.180628][ T6673] ? get_pid_task+0x2a/0x250 [ 54.180653][ T6673] ___sys_sendmsg+0x190/0x1e0 [ 54.180676][ T6673] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.180697][ T6673] ? get_pid_task+0x106/0x250 [ 54.180726][ T6673] ? find_held_lock+0x2b/0x80 [ 54.180753][ T6673] __sys_sendmsg+0x160/0x210 [ 54.180770][ T6673] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.180799][ T6673] do_syscall_64+0x123/0x790 [ 54.180819][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.180837][ T6673] RIP: 0033:0x7fa706d9f559 [ 54.180851][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.180867][ T6673] RSP: 002b:00007fa707c1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.180886][ T6673] RAX: ffffffffffffffda RBX: 00007fa707025fa0 RCX: 00007fa706d9f559 [ 54.180897][ T6673] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000004 [ 54.180907][ T6673] RBP: 00007fa707c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 54.180917][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.180926][ T6673] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 54.180947][ T6673] [ 54.241838][ T42] audit: type=1400 audit(1793140887.145:382): avc: denied { read } for pid=6674 comm="syz.1.270" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 54.242054][ T42] audit: type=1400 audit(1793140887.145:383): avc: denied { open } for pid=6674 comm="syz.1.270" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 54.326667][ T34] rtl8150 5-1:1.0: couldn't reset the device [ 54.326890][ T34] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 54.330337][ T34] usb 5-1: USB disconnect, device number 6 [ 54.519645][ T5879] usb usb44-port1: unable to enumerate USB device [ 54.633138][ T42] audit: type=1400 audit(1793140887.535:384): avc: denied { override_creds } for pid=6682 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.633187][ T42] audit: type=1400 audit(1793140887.535:385): avc: denied { cmd } for pid=6682 comm="syz.3.273" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 54.739869][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 54.743362][ T42] audit: type=1400 audit(1793140887.645:386): avc: denied { create } for pid=6686 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.871050][ T42] audit: type=1400 audit(1793140887.775:387): avc: denied { getopt } for pid=6696 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.899168][ T5140] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 54.909785][ T50] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 54.911785][ T50] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 54.914810][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.914828][ T50] usb 6-1: Product: syz [ 54.914841][ T50] usb 6-1: Manufacturer: syz [ 54.914853][ T50] usb 6-1: SerialNumber: syz [ 55.161028][ T50] rtl8150 6-1:1.0: couldn't reset the device [ 55.161263][ T50] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 55.166128][ T50] usb 6-1: USB disconnect, device number 6 [ 55.170357][ T5872] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.309141][ T5872] usb 8-1: device descriptor read/64, error -71 [ 55.569090][ T5872] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.683121][ T42] audit: type=1400 audit(1793140888.585:388): avc: denied { create } for pid=6710 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.684178][ T42] audit: type=1400 audit(1793140888.585:389): avc: denied { ioctl } for pid=6710 comm="syz.1.281" path="socket:[15486]" dev="sockfs" ino=15486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.690440][ T42] audit: type=1400 audit(1793140888.585:390): avc: denied { mounton } for pid=6710 comm="syz.1.281" path="/75/file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.690590][ T6711] fuse: Bad value for 'fd' [ 55.699112][ T5872] usb 8-1: device descriptor read/64, error -71 [ 55.810549][ T5872] usb usb8-port1: attempt power cycle [ 56.088191][ T6714] FAULT_INJECTION: forcing a failure. [ 56.088191][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 56.088221][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 56.088242][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.088253][ T6714] Call Trace: [ 56.088259][ T6714] [ 56.088267][ T6714] dump_stack_lvl+0x100/0x190 [ 56.088299][ T6714] should_fail_ex.cold+0x5/0xa [ 56.088331][ T6714] should_failslab+0xc2/0x120 [ 56.088357][ T6714] __kmalloc_noprof+0xfc/0x840 [ 56.088380][ T6714] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 56.088414][ T6714] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 56.088445][ T6714] genl_family_rcv_msg_doit+0xc7/0x300 [ 56.088472][ T6714] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 56.088506][ T6714] ? bpf_lsm_capable+0x9/0x10 [ 56.088530][ T6714] ? security_capable+0x80/0x260 [ 56.088561][ T6714] genl_rcv_msg+0x560/0x800 [ 56.088613][ T6714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.088640][ T6714] ? __lock_acquire+0x5c0/0x1f40 [ 56.088661][ T6714] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 56.088694][ T6714] ? __lock_acquire+0x5c0/0x1f40 [ 56.088721][ T6714] netlink_rcv_skb+0x159/0x420 [ 56.088743][ T6714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.088768][ T6714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.088800][ T6714] ? netlink_deliver_tap+0x1ae/0xb50 [ 56.088824][ T6714] genl_rcv+0x28/0x40 [ 56.088846][ T6714] netlink_unicast+0x668/0x950 [ 56.088872][ T6714] ? __pfx_netlink_unicast+0x10/0x10 [ 56.088901][ T6714] netlink_sendmsg+0x9ac/0x10c0 [ 56.088928][ T6714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.088956][ T6714] ? selinux_socket_sendmsg+0x198/0x2f0 [ 56.088986][ T6714] ? ____sys_sendmsg+0xa99/0xc30 [ 56.089025][ T6714] ____sys_sendmsg+0xa99/0xc30 [ 56.089046][ T6714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.089071][ T6714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.089102][ T6714] ? lock_acquire+0x1d1/0x380 [ 56.089123][ T6714] ? get_pid_task+0x2a/0x250 [ 56.089151][ T6714] ___sys_sendmsg+0x190/0x1e0 [ 56.089179][ T6714] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.089204][ T6714] ? get_pid_task+0x106/0x250 [ 56.089241][ T6714] ? find_held_lock+0x2b/0x80 [ 56.089276][ T6714] __sys_sendmsg+0x160/0x210 [ 56.089297][ T6714] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.089337][ T6714] do_syscall_64+0x123/0x790 [ 56.089359][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.089378][ T6714] RIP: 0033:0x7fba14b9f559 [ 56.089393][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.089409][ T6714] RSP: 002b:00007fba159fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.089426][ T6714] RAX: ffffffffffffffda RBX: 00007fba14e25fa0 RCX: 00007fba14b9f559 [ 56.089436][ T6714] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000004 [ 56.089446][ T6714] RBP: 00007fba159fd090 R08: 0000000000000000 R09: 0000000000000000 [ 56.089456][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.089465][ T6714] R13: 00007fba14e26038 R14: 00007fba14e25fa0 R15: 00007ffc64219768 [ 56.089490][ T6714] [ 56.149263][ T5872] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 56.169851][ T5872] usb 8-1: device descriptor read/8, error -71 [ 56.409132][ T5872] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 56.429875][ T5872] usb 8-1: device descriptor read/8, error -71 [ 56.541746][ T5872] usb usb8-port1: unable to enumerate USB device [ 56.554398][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 56.589563][ T6725] FAULT_INJECTION: forcing a failure. [ 56.589563][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.589591][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 56.589609][ T6725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.589619][ T6725] Call Trace: [ 56.589625][ T6725] [ 56.589632][ T6725] dump_stack_lvl+0x100/0x190 [ 56.589662][ T6725] should_fail_ex.cold+0x5/0xa [ 56.589687][ T6725] _copy_to_user+0x32/0xd0 [ 56.589710][ T6725] simple_read_from_buffer+0xcb/0x170 [ 56.589744][ T6725] proc_fail_nth_read+0x1af/0x230 [ 56.589772][ T6725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.589798][ T6725] ? rw_verify_area+0xce/0x6d0 [ 56.589817][ T6725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.589842][ T6725] vfs_read+0x1e4/0xb40 [ 56.589863][ T6725] ? lock_acquire+0x1d1/0x380 [ 56.589883][ T6725] ? __fget_files+0x34/0x3d0 [ 56.589907][ T6725] ? __pfx_vfs_read+0x10/0x10 [ 56.589925][ T6725] ? find_held_lock+0x2b/0x80 [ 56.589941][ T6725] ? __fget_files+0x215/0x3d0 [ 56.589969][ T6725] ? __fget_files+0x21f/0x3d0 [ 56.590000][ T6725] ksys_read+0x12a/0x250 [ 56.590020][ T6725] ? __pfx_ksys_read+0x10/0x10 [ 56.590040][ T6725] ? trace_hardirqs_off+0x70/0x170 [ 56.590063][ T6725] do_syscall_64+0x123/0x790 [ 56.590084][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.590102][ T6725] RIP: 0033:0x7fa706d5fd8e [ 56.590115][ T6725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.590130][ T6725] RSP: 002b:00007fa707c1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.590146][ T6725] RAX: ffffffffffffffda RBX: 00007fa707c1c6c0 RCX: 00007fa706d5fd8e [ 56.590157][ T6725] RDX: 000000000000000f RSI: 00007fa707c1c0a0 RDI: 0000000000000006 [ 56.590167][ T6725] RBP: 00007fa707c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 56.590176][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.590186][ T6725] R13: 00007fa707026038 R14: 00007fa707025fa0 R15: 00007fff6aa5f1f8 [ 56.590210][ T6725] [ 56.600572][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.770894][ T29] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 56.771804][ T29] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 56.774043][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.774063][ T29] usb 5-1: Product: syz [ 56.774075][ T29] usb 5-1: Manufacturer: syz [ 56.774086][ T29] usb 5-1: SerialNumber: syz [ 57.021797][ T29] rtl8150 5-1:1.0: couldn't reset the device [ 57.022004][ T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 57.028207][ T29] usb 5-1: USB disconnect, device number 7 [ 57.309297][ T5938] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 57.459984][ T5938] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 57.460897][ T5938] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 57.462473][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.462486][ T5938] usb 6-1: Product: syz [ 57.462493][ T5938] usb 6-1: Manufacturer: syz [ 57.462500][ T5938] usb 6-1: SerialNumber: syz [ 57.701091][ T5938] rtl8150 6-1:1.0: couldn't reset the device [ 57.701461][ T5938] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 57.710987][ T5938] usb 6-1: USB disconnect, device number 7 [ 58.573531][ T6761] nbd: must specify a size in bytes for the device [ 58.594361][ T6761] nvme_fabrics: missing parameter 'traddr=%s' [ 59.219324][ T1025] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 59.279162][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.369569][ T1025] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 59.370468][ T1025] usb 8-1: config index 0 descriptor too short (expected 65445, got 45) [ 59.372063][ T1025] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.372075][ T1025] usb 8-1: Product: syz [ 59.372082][ T1025] usb 8-1: Manufacturer: syz [ 59.372089][ T1025] usb 8-1: SerialNumber: syz [ 59.430415][ T5872] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 59.431232][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.431246][ T5872] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.433673][ T5872] usb 5-1: string descriptor 0 read error: -22 [ 59.433775][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.437686][ T5872] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 59.437863][ T5872] etas_es58x 5-1:1.0: could not retrieve the product info string [ 59.534090][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 59.534103][ T42] audit: type=1400 audit(1793140892.435:399): avc: denied { write } for pid=6789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.605446][ T42] audit: type=1400 audit(1793140892.505:400): avc: denied { write } for pid=6792 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.608239][ T1025] rtl8150 8-1:1.0: couldn't reset the device [ 59.608418][ T1025] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 59.614616][ T1025] usb 8-1: USB disconnect, device number 7 [ 59.652698][ T5494] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 59.653116][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 59.653951][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 59.654176][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 59.654508][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 59.654728][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 59.654793][ T5494] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 59.680117][ T29] usb 5-1: USB disconnect, device number 8 [ 59.687570][ T29] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 59.734388][ T42] audit: type=1400 audit(1793140892.635:401): avc: denied { write } for pid=6797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.799450][ T42] audit: type=1400 audit(1793140892.705:402): avc: denied { write } for pid=6800 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.874723][ T42] audit: type=1400 audit(1793140892.775:403): avc: denied { write } for pid=6802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.944008][ T42] audit: type=1400 audit(1793140892.845:404): avc: denied { write } for pid=6805 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.025409][ T42] audit: type=1400 audit(1793140892.925:405): avc: denied { write } for pid=6807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.093210][ T42] audit: type=1400 audit(1793140892.995:406): avc: denied { write } for pid=6810 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.100644][ T5938] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.143117][ T6813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.303'. [ 60.143373][ T6813] netlink: get zone limit has 4 unknown bytes [ 60.250234][ T6815] bond3: entered promiscuous mode [ 60.250511][ T6815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.252843][ T5938] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 60.254708][ T5938] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 60.258477][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.258497][ T5938] usb 6-1: Product: syz [ 60.258507][ T5938] usb 6-1: Manufacturer: syz [ 60.258520][ T5938] usb 6-1: SerialNumber: syz [ 60.285067][ T6818] tipc: Started in network mode [ 60.285084][ T6818] tipc: Node identity 1000001, cluster identity 4371 [ 60.285093][ T6818] tipc: Node number set to 16777217 [ 60.285518][ T6818] tipc: Cannot configure node identity twice [ 60.286944][ T6818] tipc: New replicast peer: 127.0.0.1 [ 60.287756][ T6818] tipc: Enabled bearer , priority 10 [ 60.292455][ T6819] tipc: Enabling of bearer rejected, already enabled [ 60.501332][ T1025] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 60.503502][ T5938] rtl8150 6-1:1.0: couldn't reset the device [ 60.503631][ T5938] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 60.509129][ T5938] usb 6-1: USB disconnect, device number 8 [ 60.520066][ T6831] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 60.520645][ T42] audit: type=1400 audit(1793140893.425:407): avc: denied { append } for pid=6829 comm="syz.0.309" name="event1" dev="devtmpfs" ino=2894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.528956][ T42] audit: type=1400 audit(1793140893.435:408): avc: denied { ioctl } for pid=6829 comm="syz.0.309" path="/dev/input/event1" dev="devtmpfs" ino=2894 ioctlcmd=0x40084503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.639227][ T1025] usb 8-1: device descriptor read/64, error -71 [ 60.889249][ T1025] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 61.069161][ T1025] usb 8-1: device descriptor read/64, error -71 [ 61.153146][ T6840] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.160981][ T6841] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 61.221535][ T1025] usb usb8-port1: attempt power cycle [ 61.549131][ T1494] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 61.671387][ T1025] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 61.729889][ T1025] usb 8-1: device descriptor read/8, error -71 [ 61.770250][ T1494] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 61.771241][ T1494] usb 6-1: config index 0 descriptor too short (expected 65445, got 45) [ 61.772937][ T1494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.772950][ T1494] usb 6-1: Product: syz [ 61.772957][ T1494] usb 6-1: Manufacturer: syz [ 61.772964][ T1494] usb 6-1: SerialNumber: syz [ 61.922943][ T6852] FAULT_INJECTION: forcing a failure. [ 61.922943][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.922963][ T6852] CPU: 3 UID: 0 PID: 6852 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT(full) [ 61.922975][ T6852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.922982][ T6852] Call Trace: [ 61.922986][ T6852] [ 61.922990][ T6852] dump_stack_lvl+0x100/0x190 [ 61.923059][ T6852] should_fail_ex.cold+0x5/0xa [ 61.923077][ T6852] _copy_to_user+0x32/0xd0 [ 61.923093][ T6852] simple_read_from_buffer+0xcb/0x170 [ 61.923112][ T6852] proc_fail_nth_read+0x1af/0x230 [ 61.923130][ T6852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.923149][ T6852] ? rw_verify_area+0xce/0x6d0 [ 61.923160][ T6852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.923177][ T6852] vfs_read+0x1e4/0xb40 [ 61.923191][ T6852] ? lock_acquire+0x1d1/0x380 [ 61.923209][ T6852] ? __fget_files+0x34/0x3d0 [ 61.923225][ T6852] ? __pfx_vfs_read+0x10/0x10 [ 61.923237][ T6852] ? find_held_lock+0x2b/0x80 [ 61.923248][ T6852] ? __fget_files+0x215/0x3d0 [ 61.923267][ T6852] ? __fget_files+0x21f/0x3d0 [ 61.923286][ T6852] ksys_read+0x12a/0x250 [ 61.923300][ T6852] ? __pfx_ksys_read+0x10/0x10 [ 61.923317][ T6852] do_syscall_64+0x123/0x790 [ 61.923347][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.923358][ T6852] RIP: 0033:0x7fba14b5fd8e [ 61.923367][ T6852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.923378][ T6852] RSP: 002b:00007fba159fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.923396][ T6852] RAX: ffffffffffffffda RBX: 00007fba159fd6c0 RCX: 00007fba14b5fd8e [ 61.923403][ T6852] RDX: 000000000000000f RSI: 00007fba159fd0a0 RDI: 0000000000000003 [ 61.923409][ T6852] RBP: 00007fba159fd090 R08: 0000000000000000 R09: 0000000000000000 [ 61.923415][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.923421][ T6852] R13: 00007fba14e26038 R14: 00007fba14e25fa0 R15: 00007ffc64219768 [ 61.923436][ T6852] [ 61.999194][ T1025] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 62.013414][ T1494] rtl8150 6-1:1.0: couldn't reset the device [ 62.013546][ T1494] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 62.018470][ T1494] usb 6-1: USB disconnect, device number 9 [ 62.030685][ T1025] usb 8-1: device descriptor read/8, error -71 [ 62.129507][ T1025] usb usb8-port1: unable to enumerate USB device [ 62.360974][ T6860] syzkaller0: entered promiscuous mode [ 62.360995][ T6860] syzkaller0: entered allmulticast mode [ 64.320255][ T6890] Bluetooth: hci0: too big key_count value 62977 [ 64.330867][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.333752][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.335866][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.337140][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.337677][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.565545][ T6912] faux_driver vgem: [drm] Unknown color mode 135167; guessing buffer size. [ 64.585918][ T6888] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.765293][ T6931] tipc: Started in network mode [ 64.765310][ T6931] tipc: Node identity ac14140f, cluster identity 4711 [ 64.765465][ T6931] tipc: New replicast peer: 255.255.255.255 [ 64.765786][ T6931] tipc: Enabled bearer , priority 10 [ 64.849185][ T6936] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.857859][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 64.857878][ T42] audit: type=1400 audit(1793140897.725:425): avc: denied { link } for pid=6934 comm="syz.1.336" name="#25" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.859263][ T42] audit: type=1400 audit(1793140897.725:426): avc: denied { rename } for pid=6934 comm="syz.1.336" name="#26" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.959146][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 65.002698][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.002780][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.002837][ T6888] bridge_slave_0: entered allmulticast mode [ 65.003527][ T6888] bridge_slave_0: entered promiscuous mode [ 65.008802][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.008877][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.009068][ T6888] bridge_slave_1: entered allmulticast mode [ 65.010414][ T6888] bridge_slave_1: entered promiscuous mode [ 65.032011][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.034454][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.055827][ T6888] team0: Port device team_slave_0 added [ 65.057754][ T6888] team0: Port device team_slave_1 added [ 65.072044][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.072063][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.072076][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.072929][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.072937][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.072950][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.092074][ T6888] hsr_slave_0: entered promiscuous mode [ 65.092472][ T6888] hsr_slave_1: entered promiscuous mode [ 65.092785][ T6888] debugfs: 'hsr0' already exists in 'hsr' [ 65.092797][ T6888] Cannot create hsr debugfs directory [ 65.140466][ T34] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 65.141638][ T34] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 65.144356][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.144371][ T34] usb 5-1: Product: syz [ 65.144378][ T34] usb 5-1: Manufacturer: syz [ 65.144386][ T34] usb 5-1: SerialNumber: syz [ 65.155047][ T42] audit: type=1400 audit(1793140898.045:427): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.179706][ T6888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.181605][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.182043][ T6888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.183495][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.183829][ T6888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.185511][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.185846][ T6888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.187239][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.216493][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.216561][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.216670][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.216719][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.219954][ T42] audit: type=1400 audit(1793140898.095:428): avc: denied { write } for pid=6944 comm="syz.1.338" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.261118][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.323214][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.327096][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.333129][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.337563][ T42] audit: type=1400 audit(1793140898.225:429): avc: denied { ioctl } for pid=6944 comm="syz.1.338" path="socket:[17904]" dev="sockfs" ino=17904 ioctlcmd=0x400c6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.339123][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.339193][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.344118][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.344190][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.396111][ T34] rtl8150 5-1:1.0: couldn't reset the device [ 65.396170][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.396338][ T34] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 65.401016][ T34] usb 5-1: USB disconnect, device number 9 [ 65.469145][ T50] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 65.531648][ T5636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.680190][ T50] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 65.681079][ T50] usb 8-1: config index 0 descriptor too short (expected 65445, got 45) [ 65.682774][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.682786][ T50] usb 8-1: Product: syz [ 65.682793][ T50] usb 8-1: Manufacturer: syz [ 65.682800][ T50] usb 8-1: SerialNumber: syz [ 65.794196][ T42] audit: type=1400 audit(1793140898.675:430): avc: denied { create } for pid=6963 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.796426][ T42] audit: type=1400 audit(1793140898.675:431): avc: denied { ioctl } for pid=6963 comm="syz.1.339" path="socket:[16952]" dev="sockfs" ino=16952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.854324][ T42] audit: type=1400 audit(1793140898.745:432): avc: denied { ioctl } for pid=6963 comm="syz.1.339" path="socket:[16956]" dev="sockfs" ino=16956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.943048][ T5879] tipc: Node number set to 2886997007 [ 65.948145][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.970979][ T50] rtl8150 8-1:1.0: couldn't reset the device [ 65.971151][ T50] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 65.974718][ T50] usb 8-1: USB disconnect, device number 12 [ 66.139794][ T5636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.217725][ T6888] veth0_vlan: entered promiscuous mode [ 66.222227][ T6888] veth1_vlan: entered promiscuous mode [ 66.252717][ T6888] veth0_macvtap: entered promiscuous mode [ 66.257772][ T6888] veth1_macvtap: entered promiscuous mode [ 66.270326][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.277895][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.319344][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.319511][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.319530][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.319547][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.352285][ T409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.352299][ T409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.366466][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.366485][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.369540][ T5140] Bluetooth: hci4: command tx timeout [ 66.414124][ T42] audit: type=1400 audit(1793140899.325:433): avc: denied { mounton } for pid=6888 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.415544][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.427767][ T5636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.451797][ T42] audit: type=1400 audit(1793140899.355:434): avc: denied { mounton } for pid=6888 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 66.510664][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 66.708045][ T5636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.924986][ T41] ------------[ cut here ]------------ [ 67.924997][ T41] [CRTC:40:crtc-0] vblank wait timed out [ 67.925015][ T41] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1927 at drm_atomic_helper_wait_for_vblanks.part.0+0x733/0x890, CPU#1: kworker/1:1/41 [ 67.933502][ T41] Modules linked in: [ 67.934840][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.938145][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.941757][ T41] Workqueue: events drm_fb_helper_damage_work [ 67.943910][ T41] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x739/0x890 [ 67.947011][ T41] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d dd c6 8a 0c 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 e8 da 23 fc e9 7c fe ff ff e8 9e [ 67.952990][ T41] RSP: 0018:ffffc900007576c0 EFLAGS: 00010246 [ 67.954889][ T41] RAX: 0000000000000000 RBX: ffff888100780040 RCX: 1ffff110200f0022 [ 67.957482][ T41] RDX: ffff8880244d7880 RSI: 0000000000000028 RDI: ffffffff927518f0 [ 67.959944][ T41] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 67.962429][ T41] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 67.964890][ T41] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805b4c2000 [ 67.967463][ T41] FS: 0000000000000000(0000) GS:ffff8880d4598000(0000) knlGS:0000000000000000 [ 67.970267][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.972329][ T41] CR2: 00007f7beddfb6b0 CR3: 0000000058e54000 CR4: 0000000000352ef0 [ 67.974810][ T41] Call Trace: [ 67.975868][ T41] [ 67.976967][ T41] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 67.979317][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.981247][ T41] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.982873][ T41] ? __pfx_autoremove_wake_function+0x10/0x10 [ 67.984816][ T41] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 67.986917][ T41] drm_atomic_helper_commit_tail+0xff/0x130 [ 67.988776][ T41] commit_tail.isra.0+0x33e/0x420 [ 67.990362][ T41] drm_atomic_helper_commit+0x303/0x380 [ 67.992095][ T41] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 67.993994][ T41] drm_atomic_commit+0x230/0x300 [ 67.995542][ T41] ? __pfx_drm_atomic_commit+0x10/0x10 [ 67.997349][ T41] ? __pfx___drm_printfn_info+0x10/0x10 [ 67.999100][ T41] ? modeset_lock+0x114/0x6d0 [ 68.000575][ T41] drm_atomic_helper_dirtyfb+0x603/0x790 [ 68.002305][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 68.004231][ T41] ? do_raw_spin_lock+0x128/0x260 [ 68.005820][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 68.007832][ T41] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 68.009774][ T41] drm_fb_helper_damage_work+0x4c8/0xab0 [ 68.011531][ T41] ? process_one_work+0xa2c/0x1b10 [ 68.013154][ T41] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 68.015073][ T41] ? process_one_work+0x906/0x1b10 [ 68.016697][ T41] ? process_one_work+0x906/0x1b10 [ 68.018380][ T41] process_one_work+0xac7/0x1b10 [ 68.019938][ T41] ? __pfx_process_one_work+0x10/0x10 [ 68.021638][ T41] ? lock_acquire+0x1d1/0x380 [ 68.023127][ T41] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 68.025056][ T41] worker_thread+0x5ef/0xe50 [ 68.026540][ T41] ? kthread+0x13a/0x450 [ 68.027888][ T41] ? __pfx_worker_thread+0x10/0x10 [ 68.029626][ T41] kthread+0x373/0x450 [ 68.030918][ T41] ? __pfx_kthread+0x10/0x10 [ 68.032382][ T41] ret_from_fork+0x730/0xd60 [ 68.033876][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 68.035493][ T41] ? __switch_to+0x800/0x10e0 [ 68.037028][ T41] ? __pfx_kthread+0x10/0x10 [ 68.038583][ T41] ret_from_fork_asm+0x1a/0x30 [ 68.040097][ T41] [ 68.041253][ T41] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.043498][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.046366][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.049475][ T41] Workqueue: events drm_fb_helper_damage_work [ 68.051344][ T41] Call Trace: [ 68.052387][ T41] [ 68.053324][ T41] dump_stack_lvl+0x100/0x190 [ 68.054786][ T41] vpanic+0x553/0x970 [ 68.056082][ T41] ? __pfx_vpanic+0x10/0x10 [ 68.057512][ T41] panic+0xd1/0xe0 [ 68.058683][ T41] ? __pfx_panic+0x10/0x10 [ 68.060077][ T41] check_panic_on_warn.cold+0x19/0x34 [ 68.061737][ T41] ? drm_atomic_helper_wait_for_vblanks.part.0+0x733/0x890 [ 68.063955][ T41] __warn.cold+0x191/0x318 [ 68.065359][ T41] __report_bug+0x30f/0x440 [ 68.066809][ T41] ? drm_atomic_helper_wait_for_vblanks.part.0+0x733/0x890 [ 68.069057][ T41] ? __pfx___report_bug+0x10/0x10 [ 68.070629][ T41] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.072250][ T41] report_bug_entry+0xe2/0x290 [ 68.073756][ T41] ? drm_atomic_helper_wait_for_vblanks.part.0+0x739/0x890 [ 68.076013][ T41] handle_bug+0x1cd/0x2a0 [ 68.077383][ T41] exc_invalid_op+0x17/0x50 [ 68.078802][ T41] asm_exc_invalid_op+0x1a/0x20 [ 68.080337][ T41] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x739/0x890 [ 68.082800][ T41] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d dd c6 8a 0c 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 e8 da 23 fc e9 7c fe ff ff e8 9e [ 68.088733][ T41] RSP: 0018:ffffc900007576c0 EFLAGS: 00010246 [ 68.090616][ T41] RAX: 0000000000000000 RBX: ffff888100780040 RCX: 1ffff110200f0022 [ 68.093058][ T41] RDX: ffff8880244d7880 RSI: 0000000000000028 RDI: ffffffff927518f0 [ 68.095495][ T41] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 68.097949][ T41] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 68.100393][ T41] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805b4c2000 [ 68.102845][ T41] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 68.105180][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.107010][ T41] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.108552][ T41] ? __pfx_autoremove_wake_function+0x10/0x10 [ 68.110402][ T41] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 68.112389][ T41] drm_atomic_helper_commit_tail+0xff/0x130 [ 68.114254][ T41] commit_tail.isra.0+0x33e/0x420 [ 68.115840][ T41] drm_atomic_helper_commit+0x303/0x380 [ 68.117602][ T41] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 68.119492][ T41] drm_atomic_commit+0x230/0x300 [ 68.120998][ T41] ? __pfx_drm_atomic_commit+0x10/0x10 [ 68.122694][ T41] ? __pfx___drm_printfn_info+0x10/0x10 [ 68.124416][ T41] ? modeset_lock+0x114/0x6d0 [ 68.125900][ T41] drm_atomic_helper_dirtyfb+0x603/0x790 [ 68.127662][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 68.129604][ T41] ? do_raw_spin_lock+0x128/0x260 [ 68.131185][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 68.133110][ T41] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 68.135004][ T41] drm_fb_helper_damage_work+0x4c8/0xab0 [ 68.136790][ T41] ? process_one_work+0xa2c/0x1b10 [ 68.138389][ T41] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 68.140301][ T41] ? process_one_work+0x906/0x1b10 [ 68.141904][ T41] ? process_one_work+0x906/0x1b10 [ 68.143500][ T41] process_one_work+0xac7/0x1b10 [ 68.145054][ T41] ? __pfx_process_one_work+0x10/0x10 [ 68.146756][ T41] ? lock_acquire+0x1d1/0x380 [ 68.148152][ T41] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 68.149958][ T41] worker_thread+0x5ef/0xe50 [ 68.151351][ T41] ? kthread+0x13a/0x450 [ 68.152690][ T41] ? __pfx_worker_thread+0x10/0x10 [ 68.154341][ T41] kthread+0x373/0x450 [ 68.155636][ T41] ? __pfx_kthread+0x10/0x10 [ 68.157128][ T41] ret_from_fork+0x730/0xd60 [ 68.158579][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 68.160178][ T41] ? __switch_to+0x800/0x10e0 [ 68.161673][ T41] ? __pfx_kthread+0x10/0x10 [ 68.163145][ T41] ret_from_fork_asm+0x1a/0x30 [ 68.164682][ T41] [ 69.239104][ T41] Shutting down cpus with NMI [ 69.241361][ T41] Kernel Offset: disabled [ 69.242748][ T41] Rebooting in 86400 seconds..