last executing test programs: 4m14.648577138s ago: executing program 32 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x104, 0x102a, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0xf0, 0x1, 0x0, 0x1, [@generic="9ea9049da060627a45736ba06155a471a7e3eb0b6a2eb2eddb08b98e29b5ab1bd5226629aa68f31eca1aacb0ca1bc082e04733ec0d4ef0b03f7045eedfecfc920a9ac79fd368e9f54cb3f25da3ae0784a970b403dca862c3133d05540d375af9bc20c9d68c8e4ed173431c9498ec7385b4f01adf39a929ebda92b86156a9118dbd0a1350201ca958ca9585f29e40a397f0a5a202735edb0db133a117a849a90e32f38e41c72e2a3430e1d2c7569c5765b3a774fe388f5548d345ec86f93adb3e2bec640b435eb265ca6a9ca119f16db8de7c7d5ed1a8a6587c73b2551eab9491f3612dd50c6ceafebb05cc5b"]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2dc48fe939532de82b9a6a7c945b0e93"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "1f45bb4ed98bf662d9a7063f254f2b42"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_PMKID={0x14, 0x55, "372933259af6a348b0d8548ec0f5cf31"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}]}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 3m51.463895578s ago: executing program 33 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0xfffffffffffff000) syz_genetlink_get_family_id$nl802154(0x0, r0) 3m43.809675411s ago: executing program 34 (id=941): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 3m30.230862573s ago: executing program 1 (id=1079): shutdown(0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) sendto$inet6(r1, &(0x7f0000000400)="5b3c639a4f7856e6096b38d35d025f8c974390dd5f4fb80cb29dab3884e4b2667bfaf8fc75aa96e4f206edca28288d45bc85594777c36f5ef87bdc43cdf1c0db6636c83b0a9d8da882423a9da03b3a87e902acce13089bd86dda3162a3e4d50ffa5b033fe50ff6623d2f4ef044a0461066b6411707a0f76995f6ac36a2a905c1bd0920bc181cd74a03b741247e5b37d64f00cad339eb29d53b870d42cdb957506f47318d370aab84251c5b65e4aecc8eaecd7eefcbe39ef4c670ef323d94a76a2075b7652ca09733efcaa19a894f459159c02104b4019ea1c41902ec46aea22633438f", 0xe3, 0x4008000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000780)=[{0x529, 0xa010, 0x0, 0x0}, {0x6, 0x1, 0x1000, &(0x7f0000001180)="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"}, {0x401, 0x12, 0xa3, &(0x7f0000000800)="8528997d3e06e30d7895528741e6c80e5bab0c8eb6cc4ef7a9a609e2a68c0d77db7b65a8d6308aebb2dcc009d87cbf873ba8caf6ff75e72dcc58e96e88d7fdfbbfa1c61526087d5f728b576aa449d6a943bad401cdc669a32d198758de5844111c2e3b122fcaa8d25d78add7c7c4ea69207fc971edda7ca226372584f11d0a65725d55cf19279099908af70ab30449f009df0448afc13812a6be881a023e865d556b4a753e3b133b3a0bf1c9f868e7552abf8a148472048385677808a9a6ec0820bd4654a328fb870dbf92db80541b863dbc6d7559e75e9bef1ded09e997b492c0c7"}, {0xf, 0x1, 0x2c, &(0x7f0000000180)="575c05376228c27719aad266a5411cfbaf1e20c1b2caea26b4eeace58f74a2a58be891fdf4abd458e27e4228"}, {0x749, 0x4000, 0xa9, &(0x7f0000000240)="a8a664589e70cff775f1b5c073bc9b8874e9eea3f56d5d39b86141ecee2d598f734aaad01b515cd8d2fd70fa4b2dbc53dd5544996ca94a12020525df163da3a5e900c63b533ea1ec916fc0c211033fb0bd6f3e1e393a130b3148363d9a5fd7a2955b00261937f7b518d098baf24d7687ecd53f6c611e92cfc61a3c8f83b17f26dacc472682e044c6eb38ecac819cbd3889110f8ee51ce78b13259a6cd06ca5049f1dfbf8088a6bf3ae"}, {0x7, 0x4000, 0x1000, &(0x7f0000002180)="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"}, {0x900, 0x0, 0xffffffffffffff02, &(0x7f0000000080)="dc9f5bc592125be4fae70f4747a6895725cdf388498323ff4e2819ccd15db424"}, {0x2, 0x10, 0xd0, &(0x7f0000000300)="18cb908db1762fa2c90234e2dd9c9713a5b0484465903b77efe0322ca8d19090a4d8dac3b9f5f959e630a6d15f443b740a10ce91f56b5e991e8420899aa59646389dde77b95cf6ccd3e63643c08d20c13f56939910d1907c20bf95d78d100e8004eb50d0afc1f961b66d8714f4f29300c73588bdab856ea1b7362812ae916c938011fd7f080558b4b6ed04d9a1a5e9efaa253367b63ccef07965bb061833377222dfae6187051dbcd70b7082b1ebb298a4694a6da32bb46e18027b886f97a542fd71d80430b6df4700bf08a75ffb45a8"}], 0x8}) fcntl$getown(r5, 0x9) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023b0001010140800904000702020600020524060000054300650e3479054bf9856cb22ec5a3fc1cac216229ffff0700ff00060905820200040990010905030240002a0b08"], 0x0) close(0x3) 3m29.480574098s ago: executing program 1 (id=1094): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000000000)=""/233, 0x97, 0x0) 3m29.479459781s ago: executing program 1 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x400000, 0x3, 0x2}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) ptrace(0x4207, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000efff00000000b7080000000000007b8af8ff00000000bfa200000000000007021800000000ffb703000008000000b70400000000000085000000030000009500000000000000e4c70a79742b1f9074cbc987d0848c1e89810a5104"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m29.278279427s ago: executing program 1 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080002000000000008000700", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf25010000000800020001000000060006000100000008000700", @ANYRES32=r3, @ANYBLOB="080005001d959f8256d53e7cae9c979d19b812a2ceffffffff08000100dfbf66e3166ca8576b22c9775769bc5f69254b8873c4", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m29.03463355s ago: executing program 1 (id=1100): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 3m28.968634973s ago: executing program 35 (id=1100): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 3m22.202861715s ago: executing program 2 (id=1150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000000)) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'io'}, {0x2d, 'rlimit'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'rlimit'}, {0x2d, 'perf_event'}, {0x2b, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'rlimit'}]}, 0x4c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xf, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x100, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x677a912d, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) close(0x3) 3m22.024366074s ago: executing program 2 (id=1157): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c55a699446abb5a1c0fe062570a33b87609d48d9a91", @ANYRES16=r0, @ANYBLOB="0100000000000000000100000000"], 0x14}}, 0x0) 3m22.023665296s ago: executing program 2 (id=1159): openat$vcsu(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88801, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001200030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000001c0012800b0001006d616373656300000c00028005000c0000000000140035"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0xa, 0x0, 0x2, 0x9, 0x3, 0x5}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x0, 0x1}}]}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000380)={0x0, 0x401}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRES8=r1, @ANYRESDEC=r0], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) 3m21.746459936s ago: executing program 2 (id=1163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x54000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x3, 0x4, '\x00', 0x9}, {0x5, 0x2}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3m21.584509106s ago: executing program 2 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)="5b87140752825a608dc335dc6318379e79bcf27c146152b9bc4bdd609f8f5df2a4a1cc731352848596b918c63debaffa3cad129f85e75ef79031705d94b85ae7e817e4bf082fcbde14eaff63ca9b9b8dcb851f8cf01a440257a76264dab3cbbc186393e0b3b921219d7aff30ebae1ab1d73052bb86d1668deda8cff7764b1c43dc4ad48c0d19659db20efe2242de07c6b0d21dc4ad88c04a8a900071230ff9574fe1c94fb16f03a401ee8a", 0xab}, {&(0x7f00000002c0)="93b6a114a66dc7c5830f1aada30e0cce8064cf219e6f99d283fbf2e9050afcba0424cf004f21e155a1f3aa", 0x2b}, {&(0x7f0000000380)="c77548121b6634e98eb3e3c929c0fa411c0045ee836c6aba504457511b976b5b4dcd53cae76476bf0bbb3c22da09149f341337dabb44c6ab5d9060c7807e4911fba6a81c233f441dc28f2a1e5759801233a42bd607396db5d99540488b512d0531fa035978ef558664258cb71d71c426bdeb78370260", 0x76}, {&(0x7f0000000400)="0473726337ff6cacea4b886e39fb9f42b59f504003303d274d1784bc25b91ef91638c200e28bc114ab1d70cc4e9b23a25a3369972b3ef2da5285eaba20b1ea506f0e72a590edc0427e456ca7fe51001e93412508e2600f5199edf06a0b5c46e47d1cd346d55c2ddea09c267fd0f470e08a1780af466028", 0x77}, {&(0x7f0000000480)="a67ba2499f1e3f87c0b537f65915e1de25bd9280f209a205c19e7efe61e9a5c947866d7bbdafef08becfcc224b6e4a8531a3bc698af8673cee0427dd12499d3a9295aa225420eb47787ebb5941b9ac4b7b14b494e099a811bf09945031ff6ad6b57f49f1a77f84dc4f7e3c1929adfef6f95aacf48eed0886f6bda8289fd2", 0x7e}, {&(0x7f0000000500)="1b627cafd90255b9c0cee6e92bac96d4be1668f572d165013698146384e388c44460b60f01956f5b9b1d63d0cc8540bc2689", 0x32}, {&(0x7f0000000540)="7d9bce7b18a9c9acc4a5591ddeee210a0152c39a0789d2aa34396d019fe0ba191c4d225da5f3b75cde0b11f2c68a421a639699cd6a473ac31c560553fdeb0f00069fb94d450547dbf9527357d28b7a42461804287e3dd774aa335af0502e56b983dd39cfb35939371ca88ff7da562d7bca", 0x71}, {&(0x7f00000005c0)="9f5abb6576020027464a2931507c77579ba735eae1ca0109b33419bc26a3e7396184c556fbbed01a7b64d576363a9bbcbc080b17a6487df21bb4327f5a624e060f786259ffdc249c9509544eaa86e857f1", 0x51}], 0x8, &(0x7f00000006c0)=[{0x70, 0x0, 0x3, "a28d2803766c26a694969121876a162530c3d46d1bfd6386511985c1c585d298e6807fa90f092dffac03897d789e2bb4c7b51b309775f85c47f5933e7262b1c62720a91edac4b01d1d497265524696b970355e2d47be236c3c"}, {0xb0, 0x0, 0x9, "a1a7667a4bed66ccf7b9b4d79dfda86f88dba1122b0d1ce52638c99f9cd9071af2f86a1ec1f3f52ed576afb03066701829fa94ee7ba23a7fc6c8f682c9bc749cb77d89508d48db75c1bdeff471b2ae40bb5dd367248495a2aa4886dbe009879a06122880f73abb0abb67fc269dfcd0c3d95f707dacfcd337fbad649c7157dddb37dae38eadfb56df193bfb3a3aba69f5bd6f9003609671e16f63201dd332c3"}, {0xc0, 0x10c, 0x0, "0f325dca6b3b4d13a7b83b3eb9e54273b18ea3eb1c1627c748de9b06ae665b6d9792a27bd0b0a97ae0e27ff5f530fcfd7b7a3203ce45dd956bf2b6f4e9222b7ae9a883cf4848f0b670e23880c6223f559c50793e1b4859f355f82a5236990128258fc5496ebf96822a6caada01fc676267154ff501ce75f4c897c89bc4db8d63c10745b845a2b4de975287fdaf14003028394ab7ba391b4d6367968e5b5c549c14ea5327bc74d07bc38e7b17"}, {0x70, 0x107, 0x1000, "116327650f9496a94902d420e651639458857f5283b5fd50d46b24a5dbd4446e0dba60cddb538dbad9e63350cb9015f8e06adb690328d2a905ca4dd92adcdad8ba88b8521dc39e95046ecd788f983aee82d76ada60009fdc2467ce0500"}], 0x250}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4000003e, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r7, 0x0, &(0x7f0000000300)='LLL', 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r7, 0x2, 0x1c}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m21.583941931s ago: executing program 2 (id=1166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="37062dbd7000fcdbdf252000000008000300", @ANYRES32=r1, @ANYBLOB="1c002d80050004000100000005000100070000000800030009000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 3m5.560016043s ago: executing program 36 (id=1166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="37062dbd7000fcdbdf252000000008000300", @ANYRES32=r1, @ANYBLOB="1c002d80050004000100000005000100070000000800030009000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 2m50.658671683s ago: executing program 5 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@void, @val={0x0, 0x0, 0x6, 0xe803, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0xb, 0x1, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0x22) 2m50.510794369s ago: executing program 5 (id=1558): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @multicast1}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xf}, {0x7, 0xffe0}, {0x0, 0xb}}, [{0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x300488b5}, 0x41) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m49.789367633s ago: executing program 5 (id=1562): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x8, "87a6678cd7a9a3870b5016ba450590bd2cd64d"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3a) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 2m49.708194891s ago: executing program 5 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080)='sysfs\x00', 0x1294808, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0/../file0/../file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0/../file0/../file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) open(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x400000, 0x24) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) syz_pidfd_open(r1, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40091}, 0x4) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40091}, 0x4) 2m49.598414878s ago: executing program 5 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$nci(r0, &(0x7f0000000680)=""/88, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r2, 0xd, 0x70bd28, 0x25df5bff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) 2m45.55169325s ago: executing program 5 (id=1601): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m45.497091861s ago: executing program 37 (id=1601): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m34.712822104s ago: executing program 8 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200013, 0x0) 1m34.574155644s ago: executing program 8 (id=2290): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r2, @ANYBLOB="02002abd7000ffdbdf250e00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000080) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x800}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 1m34.475376328s ago: executing program 8 (id=2292): socket$inet6_sctp(0xa, 0x1, 0x84) 1m34.474874921s ago: executing program 8 (id=2293): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)="3dc362ea743480c064703e21968f5531693211f2496e860984d32b2c8ad6d62c6ea3fa1927fb991215f8288f4bf1acbfdb9b46deebc3016c6f57d410c67a3c25df3a8b94dd01e1c8b2ad1d32616fdf59221a9b9d615337abd97e01571339ec16c4a7db7f332b91d1af7dcf7a56318b59074fb53ed7fedf97bca9d03663ab9a28f0d7672c4bfba78d5d9aed28ff983c2b64790190a11daf861e15061ea15d29105c7e68d7ba95ed5eed47aac22f72125e959d749995288b3dd7119f17ed744786872c73b7308c7f534306b8722779e7e7f4637061e5c39897d8dbb0bc5327b44d81d470b8d59cc58b", 0xe8}, {&(0x7f0000000700)="8c820e619e367bd15694f3cc5cb7b18c0f7a51c1abcebe360579eb2826998ff24b7effc373db685da7c2abb60d5829f780cded35b3fc75d31f8a9f4f293bd2091ebc6188e53c4e3bdbd655ac1881825b56395fea1c1242e4031135973cddd5b76ae5175bdf6b49bb8e7716", 0x6b}], 0x2, &(0x7f00000008c0)=ANY=[], 0x1a0}, 0x80c1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="01000000", @ANYRESDEC=0x0, @ANYBLOB=':max']) bind$alg(r2, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog512,ctr-camellia-aesni)\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) pwritev(r4, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m34.125590515s ago: executing program 8 (id=2297): ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000000)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='fuse\x00', 0x0) fchdir(r0) r1 = socket(0xa, 0x2, 0x200) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000140)={@local, @remote}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000180)=0x7fffffff, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000200)={0x95b8, 0x1d, [{0x6}, {0xf}, {0xf}, {0x9, 0x1}, {0xd, 0x1}, {0x4}, {0x4, 0x1}, {0x6}, {0x0, 0x1}, {0x1}, {0x7}, {0x5, 0x1}, {0x7}, {0x8}, {0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0xb, 0x1}, {}, {0x6}, {0x9}, {0xb, 0x1}, {0xd}, {0xb}, {0x6, 0x1}, {0x8, 0x1}, {0x4}, {0xf, 0x1}]}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x100) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000280)=0x1) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000002c0)={0x6, 0x0, [{0x1, 0xd, 0x5, 0x0, 0xfffffff9, 0x6, 0x8}, {0xb, 0x5, 0x5, 0x7, 0x5, 0x101, 0x4}, {0xc0000001, 0x8, 0x2, 0x7, 0x3147, 0x0, 0x2}, {0x80000019, 0x657a, 0x1, 0x9, 0x200, 0x2, 0xfffffffb}, {0xd, 0xef5f, 0x4, 0x80, 0x1b1, 0x8, 0x41}, {0x7, 0x5, 0x5, 0xb7f, 0x6, 0x6, 0x3}]}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) bind$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) mount_setattr(r4, &(0x7f0000000440)='./file0\x00', 0x8000, &(0x7f0000000480)={0xa, 0x100000, 0x1a0000, {r4}}, 0x20) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x1, 0x1ff, 0x1, 0x5, 0x1, 0x0, [{0x7, 0xe0, 0x8, '\x00', 0x200c}]}) r6 = getpid() fcntl$lock(r0, 0x6, &(0x7f0000000540)={0x1, 0x4, 0x3b, 0x7, r6}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000580)=""/159, &(0x7f0000000640)=0x9f) syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), r3) r7 = accept$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10) splice(r7, &(0x7f0000000740)=0x92, r1, &(0x7f0000000780)=0x7, 0x4, 0x8) getsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r5, 0x8080583a, &(0x7f0000000840)={0x5, 0x7, 0x5, 0xdf, 0x8, 0x0, 0x7}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000008c0)={0xffffffffffffffff}) setsockopt$inet_buf(r8, 0x0, 0x27, &(0x7f0000000940)="c94555b68b493f960ba31d27532bd6c2c553b6a21d5342f0c6dcad4ed79999fa2b6a84933170b6d33ade4b9b41f0b136c22058aa3677e5e768d85845b00cebe39d81bebe1ff4b1b7b1655fe89659b53da6e9e2885ea71f8c87daec504da7cce55068682496bc331c5ba6a0c023d1e22c425537a93a9b1a0916f7042ea95f39435f0c008360918e4e10d38ec820639f1741d5089885930883650369c02bd50af7710d6c41b27891ab88cd5cfcac6f0433a7af097b3b4420dabf023a5d59cada1d104654ac57616854a2bcac1030f3d2a3c004cca423949bdfce", 0xd9) 1m33.82529743s ago: executing program 8 (id=2300): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "f57d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "f57d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m33.774420803s ago: executing program 38 (id=2300): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "f57d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "f57d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 33.04999173s ago: executing program 0 (id=3039): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) pwritev2(r1, &(0x7f00000015c0), 0x0, 0xfffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000001000c301000000000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r5 = getpid() getpriority(0x1, r5) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0xfffffff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write(r3, &(0x7f00000000c0)="9b636f", 0x3) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 29.828645425s ago: executing program 0 (id=3066): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0xc, 0xb, 0x8, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x7, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) gettid() (async) r7 = gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002840)={'\x00', 0x5, 0x4, 0x6, 0x9, 0x1, r7}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002840)={'\x00', 0x5, 0x4, 0x6, 0x9, 0x1, r7}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000b1c0)={0x2020}, 0x2020) (async) read$FUSE(r10, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r11, r12, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r11, r12, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000028c0)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) (async) getgroups(0x5, &(0x7f00000028c0)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0}, &(0x7f0000002940)=0xc) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r15, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r15, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r16, r17, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpgid(r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002980)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002980)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) r20 = getegid() r21 = syz_io_uring_complete(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000003c0)="801a76418a1efda94f8be8619c3df8670fd698842478dd346bbed1dc37e222a7bfa674f0a44cc2ce6fd7904abc9d832c8ffb6334e0c7dbbdab416626e8846b8f8ea5ad51468a0bb36c218fa6ab0d8ab65fc7a17475a05742a2dea4bd44e823017a69622666c67d7b12fa5009b9c219d1e3f744e1a7716fd28a366255b11e6c07c6669f0b4c6a30827d4be45065082f9fa6e265fcdeae118970a19fc501da6bf6b013729c583bbd4caa7cf848497b137793559db08ca494c6587629d091a5f95d", 0xc0}, {&(0x7f0000000480)="a721e06b9725cc925ae425ad89f81ffe8ae324cb18bed984d557ff1344cfa7c9aa5e9c3882df630dbcb03b66419bf6b17b220ed59e413763d6b7dc626238e7185aed17e75078c528e1ffdfb092038a108bd578d662495a075a4af38c9e2617ab905e8115ee29900b38b67fe926f60b5ec1c9", 0x72}, {&(0x7f0000000500)="8f4242a9f5c5fe26391bb41434e077a58892e7fcf1162e6f6401a4a8e1ec96e54366067f520c802bb5", 0x29}, {&(0x7f0000000540)="d835daaac3e8b107d8f383f1b0e5c7bb716ca4fe11afb4a47c64bb3637946a6cfd6fef7b51292386db92baafeeacd3b33dc5f02abf69427a2a86ae9e50c6334576d27edd6f284bbc6231a6ee961a86cc5ffa29cbb4226fd3dbc0a1cde7d6435713e250aeece6266cea7334ed2dd7437f4c01e77f331496a00318feba72ad780b14d2750ccc2caf8b1f5db3004cd341e8ee1c4a866831b004bc8004b37a026067087d1c76e517f3eb495f5422a9a4fd864dd02671", 0xb4}], 0x4, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x20, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r0, 0xffffffffffffffff, r15]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r5, r2, r5, r5, r2, r5, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r13}}}, @cred={{0x1c, 0x1, 0x2, {r7, r14, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x34, 0x1, 0x1, [r4, r2, r0, r5, r21, r6, r0, r2, r1]}}], 0x160, 0x4}, 0x4000081) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.67610958s ago: executing program 0 (id=3068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x2, 0x77, 0x2}}, 0x18) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x31, 0x0, @thr={&(0x7f00000001c0)="5fb8c2066c4187f3c974e1efa3072109179d178e419bbfc31dd1dc2a078cd73039a0bae4b9b2f281516c123f4c6d9e500651bb57500b8d8756ce1babcd64640c7c7f6e8929d23fcccdb9eb02da6cdb5bc4e184bf9502cf5d2ab1869dd41287ec87cb328ec8b49abce75c06cdc0e10774867e8ac1e6bbe4a95f4153cfbc215006c23b022a9a827f07dd59e7505fd065e234097119b93aaa226289348acfe3a09595c45f54ee77a2bb5592a42cd31161793e0268c94dd070f1fb928b8bb037a79cc87f438d41d8ae466eb384e242e916715533713f91831d1df0c92b411b924f0d398ce5c04708499437d50e947e80e64293e472816c", &(0x7f0000000340)="6e24752fe1c3e7aaaf2388e7b4f063e1d71ec255e64e37334a15962e13641ad65dbff48dce19ed61533c6b2376f6cddbc6c7db8f9e01f4657d68d1b3a67e36c1625ee2ab3c873c50642b0fab5d093a6779ff3fd794282f2be37e979f7a9b8ad0866262845266a2bb729ef4c8a6d2f9f843632378f8230309decf61ea2b"}}, &(0x7f0000000400)) 29.622779097s ago: executing program 0 (id=3069): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x43) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f0000000000)={'veth1_virt_wifi\x00', @multicast}) r3 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000100), 0x9) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="000000000010000054001280080001006774700048000280080007000000000a080004000000000014000800fe8000000000000000000000000000aa0800030005000000050005"], 0x84}, 0x1, 0x0, 0x0, 0x4048030}, 0x20044000) 29.473456087s ago: executing program 0 (id=3070): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x10001, 0x1, 0x4, &(0x7f00000000c0)=""/230}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x2, 0x651c29e9}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000240)={r0}, 0x1) r2 = memfd_secret(0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x2828, 0x0, 0xfffffffffffffc00, &(0x7f0000000280)=""/208}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000003c0)=0x8d7) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000400)=0x53b) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000440)={0xb0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x30500, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000540)=0x2) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000580)={0x3, 0x8}) sendto$unix(r3, &(0x7f00000005c0)="79ee1fc757b5d20e23328ebbffe32b3bb73ec2da08ca2ae56d845af11c358db955b1a450b361e42f4524c236f8d0ea6527a3d4cf79bc38a8ab7f384d43adec3df0983a06e40c64a2cb8f7873de5989b15f57ae669f03c66d3dcaa6fda9477d4bea0b430e69ee5da82fa5430ff869105ceadaa7729f98e8e448be6552f451721aa9e4771637a15b7d5f5be2b46ace62f7897153bb4a0b3f0635543ca9af93b99296ac68393ef63cdfddb7c7e3bd33ac2c87c66842d7519bb3b5b410d44b4013e4457e02fe105b6c4b0efbcbde36", 0xcd, 0x11, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000740)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000900)={0x20, r6, 0x9, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) close_range(r3, r2, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r2, 0x0, 0x25, 0x17, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0xee9e52448fa9c02c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0xfffffc01}}, './file0\x00'}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), &(0x7f0000000ac0)={'U+', 0x100000001}, 0x16, 0x1) open(&(0x7f0000000b00)='./file0\x00', 0x202000, 0x13) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000b40)=0x5) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000002c00)={0x3, 0x0, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=""/4096, &(0x7f0000002b80)=""/123, 0xeeee8000}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000002c40)=0xff, 0x4) r9 = signalfd4(r2, &(0x7f0000002c80)={[0x9]}, 0x8, 0x800) ioctl$IOMMU_DESTROY$hwpt(r9, 0x3b80, &(0x7f0000002cc0)={0x8, r5}) 29.206783613s ago: executing program 0 (id=3074): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) pwritev2(r1, &(0x7f00000015c0), 0x0, 0xfffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000001000c301000000000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r5 = getpid() getpriority(0x1, r5) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0xfffffff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write(r3, &(0x7f00000000c0)="9b636f", 0x3) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 29.127924679s ago: executing program 39 (id=3074): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) pwritev2(r1, &(0x7f00000015c0), 0x0, 0xfffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000001000c301000000000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r5 = getpid() getpriority(0x1, r5) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0xfffffff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write(r3, &(0x7f00000000c0)="9b636f", 0x3) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 24.994444596s ago: executing program 4 (id=3118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) 24.877464145s ago: executing program 4 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x922000000001, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="5da78d3d22fe881fe2001a8018000a8014000700ff0200000000000000000000fe00000114003500"/56], 0x50}}, 0x0) 24.87619778s ago: executing program 4 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 24.793866692s ago: executing program 4 (id=3122): r0 = socket(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, &(0x7f0000000240)}, 0x20) listen(r1, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f00000006c0)) recvfrom$unix(r4, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x880000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x800001, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x52, 0x0, &(0x7f00000002c0)) 24.793637124s ago: executing program 4 (id=3123): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002ac0)={0x20002000}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x4}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000040)) 23.571084122s ago: executing program 4 (id=3148): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000088b2000004000000be3a000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) setns(r6, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x2000000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, &(0x7f0000000180)=""/10, 0xa}, 0x10042) fcntl$notify(r0, 0x402, 0x34) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) 23.467734621s ago: executing program 40 (id=3148): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000088b2000004000000be3a000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) setns(r6, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x2000000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg$can_j1939(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, &(0x7f0000000180)=""/10, 0xa}, 0x10042) fcntl$notify(r0, 0x402, 0x34) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) 9.779413412s ago: executing program 3 (id=3293): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x44, r1, 0x917, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) acct(&(0x7f0000000040)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125f0900a42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc583f69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d9323d051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774504c02cebd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed903c340d494b92d19cc698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7b21a845c9cf0d1cc24aab47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e9506000000d88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb00000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10102, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') accept4$unix(r7, &(0x7f0000000080), &(0x7f0000000200)=0x6e, 0x40000) mmap$snddsp(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x810, r7, 0x4000) 8.860329985s ago: executing program 3 (id=3307): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000001140)=@bca={0x3, 0xbc, "a8ea15a7758f1378fa43bd52dc1c58a94d49de8448ec12949600429f7a8d08980474981bb22f22d4f264ac037681501644919a07943838ed35cc7ab5e0a3676860c4c2baa7e04d00f3a86d9cd72e6170a828c20e832f1194d80a90feacd750e16c2c10e746724cadd42f5e8050bc427228a77b8eab6613c4ec47913a2c1ec03dd14b1655348984444b329241f042ba63ad1150830837fef8cdb117c746a0cc88de8503c43f07a0687dbf344b4e2c04facd54b98f2a1860b2611c0f9d"}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x8000, 0x2) 8.71078245s ago: executing program 3 (id=3308): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008", 0xa}], 0x1, 0xfffffffe, 0x2) r2 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 5.451507472s ago: executing program 3 (id=3334): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xffff}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x0, 0xa, 0xc4, "4ee7cf428cf3113ab80022015abf01835472f63805b21e4ba267c191225ecad977d5fe9c08b12223346974ae5d752070f23ec052a45a9f73b0c675d4e67506f9159f5ab507a6d501e2cd0abce28d2a11ddf40b533adf99b37c22a71f78ff8b1f062708117af284f048608940c478587a2759e3fdcaf6a0edad22367e971f9c65db5a06f54caf98d5f53b9e2c1357227e27a27ed1eda64f1d800dc82690bc6d91bcc3c11269b00509f7f392587c5244583e4697762dcdf5dba638a120372b2ff96759dadb"}, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, "6c9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.559344368s ago: executing program 7 (id=3361): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 3.559118138s ago: executing program 7 (id=3362): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) unshare(0x400) 2.559132744s ago: executing program 7 (id=3371): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$FUSE_ENTRY(r1, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x2, 0x7ffffffe, 0x10000, 0x2, 0x8, 0x400007, {0x1, 0x200000000000001, 0x6, 0xed65, 0x200000000006, 0x3, 0xffff, 0x101, 0x8, 0x1000, 0x848a, 0x0, 0x0, 0x1, 0xe}}}, 0x90) 2.510786217s ago: executing program 7 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2.393508963s ago: executing program 7 (id=3375): inotify_init1(0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) 2.265021837s ago: executing program 6 (id=3379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000000200), 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x64) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 2.200820341s ago: executing program 3 (id=3380): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x1) 2.114948409s ago: executing program 7 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@arm64={0x8, 0xe, 0x6, '\x00', 0x1}) 1.495988188s ago: executing program 9 (id=3386): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x1, 0x19, 0xfe, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0x100000, 0x100, 0x407}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 1.387337469s ago: executing program 9 (id=3387): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x2, 0x0, 0x58, 0xc, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x80}, 0x1, 0x7}, 0x0) 1.262045525s ago: executing program 9 (id=3388): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.261815302s ago: executing program 3 (id=3389): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000001480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x22, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xd, 0x7ddf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x81, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0xfb89}}}}}}}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) 1.144459336s ago: executing program 9 (id=3390): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f0000000080)) 1.144187576s ago: executing program 9 (id=3391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) getpeername$inet(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0xde7f, 0x51, 0xb, 0x3}, {0x1, 0xf2, 0x8, 0x68d}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000007000000000000000000000400"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 224.600335ms ago: executing program 6 (id=3392): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r1, r2) close_range(r3, 0xffffffffffffffff, 0x0) 151.604138ms ago: executing program 9 (id=3393): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7d0000000, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f00000001c0)) 151.394035ms ago: executing program 6 (id=3394): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480a5}, 0x4048800) 97.455094ms ago: executing program 6 (id=3395): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast}}}}) 93.840583ms ago: executing program 6 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000000200000000000014000500000000000000000000000000000000000c00090008"], 0x3c}}, 0x0) 0s ago: executing program 6 (id=3397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_NMI(r1, 0xae9a) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x900}, [@RTA_IIF={0x8, 0x3, r6}, @RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x34}}, 0xea5bc50b6199d77e) kernel console output (not intermixed with test programs): ppened) [ 291.298040][ T40] audit: type=1400 audit(2000000078.738:72330): avc: denied { write } for pid=14656 comm="syz.9.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.322105][T14659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 291.327842][T14659] ip6gretap1: entered promiscuous mode [ 291.368415][ T40] audit: type=1400 audit(2000000078.803:72331): avc: denied { bind } for pid=14660 comm="syz.6.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.375953][ T40] audit: type=1400 audit(2000000078.813:72332): avc: denied { setopt } for pid=14660 comm="syz.6.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.501041][ T40] audit: type=1400 audit(2000000078.925:72333): avc: denied { write } for pid=14609 comm="syz.0.2549" name="/" dev="9p" ino=72876103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.729403][T14674] FAULT_INJECTION: forcing a failure. [ 291.729403][T14674] name failslab, interval 1, probability 0, space 0, times 0 [ 291.734782][T14674] CPU: 3 UID: 0 PID: 14674 Comm: syz.6.2569 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.734809][T14674] Tainted: [L]=SOFTLOCKUP [ 291.734815][T14674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.734825][T14674] Call Trace: [ 291.734831][T14674] [ 291.734838][T14674] dump_stack_lvl+0x100/0x190 [ 291.734864][T14674] should_fail_ex.cold+0x5/0xa [ 291.734889][T14674] should_failslab+0xc2/0x120 [ 291.734908][T14674] __kmalloc_cache_noprof+0x7a/0x6f0 [ 291.734931][T14674] ? alloc_pipe_info+0x10e/0x590 [ 291.734958][T14674] alloc_pipe_info+0x10e/0x590 [ 291.734983][T14674] splice_direct_to_actor+0x78f/0xa30 [ 291.735007][T14674] ? mapping_seek_hole_data+0x1268/0x1770 [ 291.735024][T14674] ? __pfx_direct_splice_actor+0x10/0x10 [ 291.735051][T14674] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 291.735075][T14674] ? __pfx___might_resched+0x10/0x10 [ 291.735105][T14674] do_splice_direct+0x174/0x240 [ 291.735129][T14674] ? __pfx_do_splice_direct+0x10/0x10 [ 291.735153][T14674] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 291.735177][T14674] ? shmem_file_llseek+0xf9/0x1a0 [ 291.735202][T14674] ovl_copy_up_file+0x301/0x6e0 [ 291.735225][T14674] ? __pfx_ovl_copy_up_file+0x10/0x10 [ 291.735243][T14674] ? vfs_tmpfile+0x329/0x9a0 [ 291.735271][T14674] ovl_copy_up_one+0x2fc8/0x3ca0 [ 291.735287][T14674] ? stack_trace_save+0x8e/0xc0 [ 291.735314][T14674] ? kasan_save_stack+0x3f/0x50 [ 291.735331][T14674] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 291.735346][T14674] ? __kasan_slab_free+0x5f/0x80 [ 291.735361][T14674] ? kfree+0x223/0x6c0 [ 291.735381][T14674] ? tomoyo_path2_perm+0x2cd/0x700 [ 291.735401][T14674] ? security_path_link+0x12f/0x2a0 [ 291.735420][T14674] ? filename_linkat+0x33a/0x640 [ 291.735441][T14674] ? __x64_sys_linkat+0xf6/0x150 [ 291.735470][T14674] ? __lock_acquire+0x4a5/0x2630 [ 291.735494][T14674] ? __lock_acquire+0x4a5/0x2630 [ 291.735528][T14674] ? find_held_lock+0x2b/0x80 [ 291.735544][T14674] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 291.735560][T14674] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 291.735585][T14674] ? __lock_acquire+0x4a5/0x2630 [ 291.735608][T14674] ? cred_has_capability.isra.0+0x186/0x300 [ 291.735668][T14674] ? dget_parent+0xf8/0x5e0 [ 291.735694][T14674] ovl_copy_up_flags+0xf4/0x240 [ 291.735711][T14674] ovl_link+0x30/0x250 [ 291.735736][T14674] vfs_link+0x558/0xdd0 [ 291.735759][T14674] filename_linkat+0x399/0x640 [ 291.735787][T14674] ? __pfx_filename_linkat+0x10/0x10 [ 291.735821][T14674] ? do_getname+0x191/0x390 [ 291.735851][T14674] __x64_sys_linkat+0xf6/0x150 [ 291.735878][T14674] do_syscall_64+0x10b/0xf80 [ 291.735901][T14674] ? clear_bhb_loop+0x40/0x90 [ 291.735923][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.735941][T14674] RIP: 0033:0x7fd404b9cdd9 [ 291.735957][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.735995][T14674] RSP: 002b:00007fd405a04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 291.736014][T14674] RAX: ffffffffffffffda RBX: 00007fd404e15fa0 RCX: 00007fd404b9cdd9 [ 291.736026][T14674] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 291.736037][T14674] RBP: 00007fd405a04090 R08: 0000000000001000 R09: 0000000000000000 [ 291.736047][T14674] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 291.736057][T14674] R13: 00007fd404e16038 R14: 00007fd404e15fa0 R15: 00007fff3f73feb8 [ 291.736082][T14674] [ 292.497485][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2573'. [ 292.501012][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2573'. [ 292.513659][ T5879] usb 11-1: new full-speed USB device number 27 using dummy_hcd [ 292.649645][ T40] audit: type=1400 audit(2000000080.001:72334): avc: denied { read } for pid=14686 comm="syz.7.2574" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.674588][ T5879] usb 11-1: config 0 has no interfaces? [ 292.678309][ T5879] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.681443][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 292.684313][ T5879] usb 11-1: Product: syz [ 292.685898][ T5879] usb 11-1: Manufacturer: syz [ 292.687864][ T5879] usb 11-1: SerialNumber: syz [ 292.692291][ T5879] usb 11-1: config 0 descriptor?? [ 292.890278][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2575'. [ 292.893218][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2575'. [ 292.911231][T14681] xt_hashlimit: size too large, truncated to 1048576 [ 292.984977][ T5879] usb 11-1: USB disconnect, device number 27 [ 292.997564][T14696] overlay: Bad value for 'workdir' [ 293.120935][ T40] audit: type=1400 audit(2000000080.441:72335): avc: denied { read } for pid=14705 comm="syz.7.2580" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.130399][ T40] audit: type=1400 audit(2000000080.441:72336): avc: denied { open } for pid=14705 comm="syz.7.2580" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.187606][ T40] audit: type=1400 audit(2000000080.506:72337): avc: denied { write } for pid=14705 comm="syz.7.2580" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.243663][ T40] audit: type=1400 audit(2000000080.563:72338): avc: denied { setopt } for pid=14705 comm="syz.7.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.634384][ T5884] usb 5-1: USB disconnect, device number 23 [ 293.967317][T14722] lo speed is unknown, defaulting to 1000 [ 294.079720][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2587'. [ 294.142702][T14733] syzkaller0: entered promiscuous mode [ 294.145123][T14733] syzkaller0: entered allmulticast mode [ 294.154474][T14733] tipc: Enabled bearer , priority 0 [ 294.167151][T14731] tipc: Resetting bearer [ 294.201844][T14731] tipc: Disabling bearer [ 294.281027][T14735] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2589'. [ 294.525062][T14755] netlink: 'syz.0.2595': attribute type 30 has an invalid length. [ 294.537480][ T101] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.537549][T14755] netlink: 'syz.0.2595': attribute type 30 has an invalid length. [ 294.541355][ T101] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.555777][T14753] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 294.561523][T14754] xt_TCPMSS: Only works on TCP SYN packets [ 294.566388][ T101] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.570482][ T101] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.628513][ T5884] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 294.799659][ T5884] usb 11-1: Using ep0 maxpacket: 8 [ 294.803341][ T5884] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 294.811367][ T5884] usb 11-1: config 0 has no interface number 0 [ 294.813580][ T5884] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.821226][ T5884] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 294.830240][ T5884] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.835892][ T5884] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.838841][T14769] SELinux: unknown common [ 294.840888][ T5884] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 294.846718][T14769] SELinux: failed to load policy [ 294.846778][ T5884] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.875713][T14777] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 294.883156][ T5884] usb 11-1: config 0 descriptor?? [ 294.906282][ T5884] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 295.107222][ T5879] usb 11-1: USB disconnect, device number 28 [ 295.113092][ T5879] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 295.434695][T14811] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 295.699529][ T7877] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 295.868404][ T7877] usb 11-1: Using ep0 maxpacket: 8 [ 295.873699][ T7877] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 295.877880][ T7877] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.882459][ T7877] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.886758][ T7877] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.891294][ T7877] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.897116][ T7877] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.902182][ T7877] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.951806][T14834] syzkaller0: entered promiscuous mode [ 295.956632][T14834] syzkaller0: entered allmulticast mode [ 295.966902][T14838] __nla_validate_parse: 6 callbacks suppressed [ 295.966919][T14838] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2620'. [ 296.141143][T14811] overlay: Unknown parameter ' ' [ 296.143663][ T7877] usb 11-1: usb_control_msg returned -32 [ 296.146350][ T7877] usbtmc 11-1:16.0: can't read capabilities [ 296.285247][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 296.453522][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.466405][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.470467][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.476375][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 296.487750][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 296.495621][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.502426][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.507800][ T9] usb 5-1: Product: syz [ 296.511947][ T9] usb 5-1: Manufacturer: syz [ 296.542240][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 296.548185][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 296.550731][ T9] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 296.553808][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 296.737541][T14844] ubi: mtd0 is already attached to ubi31 [ 296.768304][T14844] overlayfs: failed lookup in lower (newroot/43, name='file1', err=-40): overlapping layers [ 296.779596][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 296.779607][ T40] audit: type=1400 audit(2000000083.866:72350): avc: denied { link } for pid=14843 comm="syz.0.2622" name="#aa" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.791071][ T40] audit: type=1400 audit(2000000083.866:72351): avc: denied { rename } for pid=14843 comm="syz.0.2622" name="#ab" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.804379][ T9] usb 5-1: USB disconnect, device number 24 [ 298.115038][ T1488] usb 11-1: USB disconnect, device number 29 [ 298.136388][T14866] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 298.140703][T14866] SELinux: failed to load policy [ 298.147192][ T40] audit: type=1400 audit(2000000085.139:72352): avc: denied { block_suspend } for pid=14863 comm="syz.0.2625" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 298.175866][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 298.179845][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 298.183638][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 298.294912][T14877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.330599][ T40] audit: type=1400 audit(2000000085.316:72353): avc: denied { view } for pid=14884 comm="syz.0.2630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 298.386042][ T40] audit: type=1400 audit(2000000085.373:72354): avc: denied { mounton } for pid=14888 comm="syz.0.2632" path="/47/file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 298.386056][T14889] fuse: Bad value for 'fd' [ 298.386856][T14889] fuse: Bad value for 'fd' [ 298.428400][ T40] audit: type=1400 audit(2000000085.410:72355): avc: denied { mount } for pid=14894 comm="syz.7.2633" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 298.439183][ T40] audit: type=1400 audit(2000000085.419:72356): avc: denied { remount } for pid=14894 comm="syz.7.2633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.459520][ T40] audit: type=1400 audit(2000000085.438:72357): avc: denied { unmount } for pid=9606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.515541][ T40] audit: type=1400 audit(2000000085.485:72358): avc: denied { read append } for pid=14905 comm="syz.7.2636" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 298.525532][ T40] audit: type=1400 audit(2000000085.485:72359): avc: denied { open } for pid=14905 comm="syz.7.2636" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 298.595711][T14908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 298.702175][ T5879] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 298.748441][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2638'. [ 298.836971][T14945] hugetlbfs: Bad value '$' for mount option 'size' [ 298.836971][T14945] [ 298.852589][T14941] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2647'. [ 298.861963][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 298.867452][ T5879] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 298.874868][ T5879] usb 5-1: config 0 has no interface number 0 [ 298.880731][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.887921][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 298.893056][ T5879] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.897976][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.904118][ T5879] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 298.907970][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.915065][ T5879] usb 5-1: config 0 descriptor?? [ 298.915450][T14949] o2cb: This node has not been configured. [ 298.916729][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2648'. [ 298.921817][ T5879] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 298.929165][T14949] o2cb: Cluster check failed. Fix errors before retrying. [ 298.931930][T14949] (syz.7.2650,14949,1):user_dlm_register:674 ERROR: status = -22 [ 298.936980][T14949] (syz.7.2650,14949,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 299.015578][T14964] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 299.110613][T14974] lo speed is unknown, defaulting to 1000 [ 299.186613][T14981] gfs2: not a GFS2 filesystem [ 299.208499][T14984] netlink: 'syz.6.2661': attribute type 4 has an invalid length. [ 299.291052][T14991] fuse: Bad value for 'fd' [ 299.305394][T14991] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 299.370895][T14987] netlink: 'syz.9.2662': attribute type 1 has an invalid length. [ 299.415241][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2664'. [ 299.573587][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2670'. [ 299.839576][T15028] syzkaller0: entered promiscuous mode [ 299.841804][T15028] syzkaller0: entered allmulticast mode [ 299.933866][T15032] bond0: (slave macvlan2): Opening slave failed [ 300.148035][T15039] syz_tun (unregistering): left allmulticast mode [ 300.260833][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.279281][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2682'. [ 300.299875][T15056] team0: Port device team_slave_0 removed [ 300.302503][ T13] smc: removing ib device syz1 [ 300.406618][ T13] smbdirect: ib_dev[syz1] removed [ 300.620089][T15068] SELinux: ebitmap: truncated map [ 300.649853][T15068] SELinux: failed to load policy [ 300.882149][T15084] netdevsim netdevsim7 ªªªªªª: renamed from netdevsim0 (while UP) [ 300.992014][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.996617][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.557936][T15103] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 301.664026][ T5879] usb 5-1: USB disconnect, device number 25 [ 301.672055][ T5879] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 301.728927][T15115] input: syz0 as /devices/virtual/input/input29 [ 301.741264][T15118] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 301.743965][T15118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.766744][T15118] vhci_hcd vhci_hcd.0: Device attached [ 301.771419][T15119] vhci_hcd: connection closed [ 301.771594][ T71] vhci_hcd vhci_hcd.7: stop threads [ 301.776240][ T71] vhci_hcd vhci_hcd.7: release socket [ 301.783648][ T71] vhci_hcd vhci_hcd.7: disconnect device [ 301.811693][T15126] FAULT_INJECTION: forcing a failure. [ 301.811693][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.817813][T15126] CPU: 2 UID: 0 PID: 15126 Comm: syz.9.2702 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.817839][T15126] Tainted: [L]=SOFTLOCKUP [ 301.817844][T15126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.817852][T15126] Call Trace: [ 301.817858][T15126] [ 301.817866][T15126] dump_stack_lvl+0x100/0x190 [ 301.817902][T15126] should_fail_ex.cold+0x5/0xa [ 301.817928][T15126] __fpu_restore_sig+0x100/0x1340 [ 301.817951][T15126] ? __lock_acquire+0x4a5/0x2630 [ 301.817974][T15126] ? __pfx___fpu_restore_sig+0x10/0x10 [ 301.818008][T15126] ? __might_fault+0xc5/0x140 [ 301.818037][T15126] fpu__restore_sig+0x151/0x190 [ 301.818060][T15126] restore_sigcontext+0x4cb/0x6a0 [ 301.818078][T15126] ? __pfx_restore_sigcontext+0x10/0x10 [ 301.818114][T15126] ? __pfx_restore_altstack+0x10/0x10 [ 301.818135][T15126] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.818173][T15126] ? lockdep_hardirqs_on+0x78/0x100 [ 301.818194][T15126] __do_sys_rt_sigreturn+0x229/0x2c0 [ 301.818212][T15126] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 301.818233][T15126] ? rcu_is_watching+0x12/0xc0 [ 301.818261][T15126] do_syscall_64+0x10b/0xf80 [ 301.818284][T15126] ? clear_bhb_loop+0x40/0x90 [ 301.818304][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.818324][T15126] RIP: 0033:0x7f23f739cdd7 [ 301.818339][T15126] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 301.818356][T15126] RSP: 002b:00007f23f8316028 EFLAGS: 00000246 [ 301.818376][T15126] RAX: 0000000000000109 RBX: 00007f23f7615fa0 RCX: 00007f23f739cdd9 [ 301.818389][T15126] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 301.818401][T15126] RBP: 00007f23f8316090 R08: 0000000000001000 R09: 0000000000000000 [ 301.818412][T15126] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 301.818421][T15126] R13: 00007f23f7616038 R14: 00007f23f7615fa0 R15: 00007ffe4dd98398 [ 301.818445][T15126] [ 301.864237][T15124] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd6": -EINTR [ 301.953785][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.955326][T15123] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd6": -EINTR [ 301.970796][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.420744][T15151] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 302.450392][T15151] kvm: pic: level sensitive irq not supported [ 302.450789][T15151] kvm: pic: non byte read [ 302.566968][T15165] gfs2: error -5 reading superblock [ 302.606290][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 302.606301][ T40] audit: type=1400 audit(2000000089.322:72375): avc: denied { ioctl } for pid=15167 comm="syz.0.2713" path="socket:[68415]" dev="sockfs" ino=68415 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.652602][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2715'. [ 302.668345][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2715'. [ 302.719063][T15177] netlink: 'syz.9.2716': attribute type 1 has an invalid length. [ 302.737584][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2713'. [ 302.741909][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 302.748405][T15177] bond5: entered promiscuous mode [ 302.751089][T15177] bond5: entered allmulticast mode [ 302.753692][T15177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.757745][ T40] audit: type=1400 audit(2000000089.462:72376): avc: denied { getopt } for pid=15167 comm="syz.0.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.803246][T15181] netlink: 'syz.9.2717': attribute type 49 has an invalid length. [ 302.830856][T15169] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 302.875191][ T40] audit: type=1400 audit(2000000089.565:72377): avc: denied { connect } for pid=15185 comm="syz.7.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.890447][ T40] audit: type=1400 audit(2000000089.593:72378): avc: denied { write } for pid=15188 comm="syz.9.2720" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.890591][T15190] random: crng reseeded on system resumption [ 302.898256][ T40] audit: type=1400 audit(2000000089.593:72379): avc: denied { open } for pid=15188 comm="syz.9.2720" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.911511][ T40] audit: type=1400 audit(2000000089.612:72380): avc: denied { ioctl } for pid=15188 comm="syz.9.2720" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.928675][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2721'. [ 303.055396][T15195] Invalid logical block size (160) [ 303.055582][ T40] audit: type=1400 audit(2000000089.743:72381): avc: denied { create } for pid=15200 comm="syz.7.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 303.057968][T15201] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2725'. [ 303.069245][ T40] audit: type=1400 audit(2000000089.743:72382): avc: denied { write } for pid=15200 comm="syz.7.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 303.089372][T15201] bond9: entered promiscuous mode [ 303.091091][T15201] bond9: entered allmulticast mode [ 303.179167][T15211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=15211 comm=syz.6.2728 [ 303.294781][ T7877] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 303.343828][T15220] netlink: 'syz.7.2731': attribute type 1 has an invalid length. [ 303.347209][T15220] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2731'. [ 303.356876][T15220] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2731'. [ 303.414981][T15227] tmpfs: Unknown parameter 'audit' [ 303.493626][ T7877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.499957][ T7877] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.508196][ T7877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.523049][ T7877] usb 5-1: config 0 descriptor?? [ 303.811026][ T40] audit: type=1800 audit(2000000090.445:72383): pid=15245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2737" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 303.846207][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2738'. [ 303.854890][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2738'. [ 303.889089][ T9] hid_parser_main: 24 callbacks suppressed [ 303.889108][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.894606][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.897024][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.899399][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.901814][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.905215][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.907644][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.910048][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.912523][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.915607][ T9] hid-generic 0005:000B:0009.0009: unknown main item tag 0x0 [ 303.942355][ T9] hid-generic 0005:000B:0009.0009: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 303.962929][ T7877] usbhid 5-1:0.0: can't add hid device: -71 [ 303.964964][ T7877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 303.975467][ T7877] usb 5-1: USB disconnect, device number 26 [ 303.990282][ T40] audit: type=1400 audit(2000000090.622:72384): avc: denied { read } for pid=15250 comm="syz.7.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.120465][T15265] overlayfs: missing 'lowerdir' [ 304.129580][T15265] overlayfs: missing 'lowerdir' [ 304.325888][T15282] fuseblk: Unknown parameter 'group_id900000000000000000000' [ 304.755849][T15288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=15288 comm=syz.0.2751 [ 305.148624][T15298] sctp: [Deprecated]: syz.6.2755 (pid 15298) Use of int in maxseg socket option. [ 305.148624][T15298] Use struct sctp_assoc_value instead [ 305.199766][T15300] mac80211_hwsim hwsim30 ªªªªª;: renamed from wlan0 [ 305.371199][T15314] wg1: entered promiscuous mode [ 305.373272][T15314] wg1: entered allmulticast mode [ 305.446920][T15323] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 305.634721][T15343] netlink: 'syz.9.2770': attribute type 1 has an invalid length. [ 305.638398][T15343] netlink: 'syz.9.2770': attribute type 1 has an invalid length. [ 305.809693][T15363] Cannot find map_set index 3 as target [ 305.973985][T15379] IPVS: Unknown mcast interface: pim6reg1 [ 306.041973][T15367] Bluetooth: MGMT ver 1.23 [ 306.059073][T15367] Bluetooth: hci1: too big key_count value 41344 [ 306.120519][T15395] syzkaller0: entered promiscuous mode [ 306.122286][T15395] syzkaller0: entered allmulticast mode [ 306.137731][T15395] ocfs2: Unknown parameter 'usrquota' [ 306.140511][T15395] ufs: You didn't specify the type of your ufs filesystem [ 306.140511][T15395] [ 306.140511][T15395] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 306.140511][T15395] [ 306.140511][T15395] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 306.151995][T15395] ufs: ufs_fill_super(): bad magic number [ 306.162356][T15367] lo speed is unknown, defaulting to 1000 [ 306.415733][T15365] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 306.651450][T15433] macvlan0: entered promiscuous mode [ 306.669563][T15433] netlink: zone id is out of range [ 306.675734][T15433] netlink: zone id is out of range [ 306.677545][T15433] netlink: del zone limit has 8 unknown bytes [ 306.931354][T15454] can0: slcan on ttyS3. [ 307.024995][T15448] can0 (unregistered): slcan off ttyS3. [ 307.035691][ T34] libceph: connect (1)[c::]:6789 error -99 [ 307.038244][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 307.057511][T15467] netlink: 'syz.7.2805': attribute type 1 has an invalid length. [ 307.090382][ T6739] libceph: connect (1)[b::]:6789 error -99 [ 307.098278][ T6739] libceph: mon0 (1)[b::]:6789 connect error [ 307.114420][T15467] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 307.119462][T15467] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 307.161142][T15473] bond10: (slave gretap1): making interface the new active one [ 307.188133][T15473] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 307.314127][ T34] libceph: connect (1)[c::]:6789 error -99 [ 307.319293][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 307.378799][ T5879] libceph: connect (1)[b::]:6789 error -99 [ 307.382997][ T5879] libceph: mon0 (1)[b::]:6789 connect error [ 307.433305][T15484] bridge0: entered promiscuous mode [ 307.435239][T15484] bridge0: entered allmulticast mode [ 307.684898][ T53] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.858103][ T34] libceph: connect (1)[c::]:6789 error -99 [ 307.860910][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 307.895374][T15462] ceph: No mds server is up or the cluster is laggy [ 307.896960][T15468] ceph: No mds server is up or the cluster is laggy [ 307.923416][ T5879] libceph: connect (1)[b::]:6789 error -99 [ 307.925443][ T5879] libceph: mon0 (1)[b::]:6789 connect error [ 308.090432][T15512] __nla_validate_parse: 21 callbacks suppressed [ 308.090449][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2814'. [ 308.847470][T15537] [U]  [ 308.935951][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 308.935961][ T40] audit: type=1326 audit(298.352:72395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.0.2828" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6b19cdd9 code=0x0 [ 309.070023][T15565] tipc: Enabling of bearer rejected, failed to enable media [ 309.113243][T15567] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2833'. [ 309.114089][T15569] overlayfs: failed to resolve './bus': -2 [ 309.117304][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'. [ 309.250139][T15575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.509993][T15583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2838'. [ 309.615823][T15589] 0x0000000074f8-0x000000027517 : "" [ 309.617689][T15589] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 309.625628][T15589] ftl_cs: FTL header corrupt! [ 309.871399][ T40] audit: type=1400 audit(299.232:72396): avc: denied { write } for pid=15601 comm="syz.0.2843" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 309.944110][ T40] audit: type=1400 audit(299.306:72397): avc: denied { write } for pid=15606 comm="syz.0.2844" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.945041][T15607] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 309.956334][T15607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2844'. [ 310.037012][T15610] program syz.9.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.138814][T15614] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 310.223380][T15621] kAFS: unable to lookup cell '‘ƒÎ' [ 310.316345][T15625] syzkaller0: entered promiscuous mode [ 310.318630][T15625] syzkaller0: entered allmulticast mode [ 310.329093][ T40] audit: type=1400 audit(299.662:72398): avc: denied { connect } for pid=15628 comm="syz.7.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.333308][T15625] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2851'. [ 310.344106][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2851'. [ 310.349645][ T40] audit: type=1400 audit(299.681:72399): avc: denied { accept } for pid=15628 comm="syz.7.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.391193][T15628] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 310.455830][T15632] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 310.696305][T15653] binder: 15652:15653 ioctl 80105873 200000000000 returned -22 [ 310.892198][ T40] audit: type=1400 audit(300.186:72400): avc: denied { name_bind 0x1000000 } for pid=15660 comm="syz.7.2863" path="socket:[71038]" dev="sockfs" ino=71038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.939270][T15662] openvswitch: netlink: Missing valid actions attribute. [ 310.941717][T15662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.067909][T15664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24463 sclass=netlink_route_socket pid=15664 comm=syz.6.2864 [ 312.665888][T15666] wg1: left promiscuous mode [ 312.670836][T15666] macvlan0: left promiscuous mode [ 312.672575][T15666] bridge2: left promiscuous mode [ 312.675639][T15666] bond3: left promiscuous mode [ 312.677475][T15666] bond4: left promiscuous mode [ 312.679317][T15666] geneve3: left promiscuous mode [ 312.681577][T15666] ip6erspan0: left promiscuous mode [ 312.704934][ T40] audit: type=1400 audit(301.880:72401): avc: denied { append } for pid=15667 comm="syz.0.2865" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.705009][T15670] fuse: Unknown parameter '`cQ½¤' [ 312.736580][T15672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2866'. [ 312.802728][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2866'. [ 312.806909][T15672] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2866'. [ 312.835311][ T40] audit: type=1400 audit(302.001:72402): avc: denied { write } for pid=15680 comm="syz.7.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 312.848108][ T40] audit: type=1400 audit(302.011:72403): avc: denied { audit_read } for pid=15680 comm="syz.7.2870" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.855600][T15677] netlink: 'syz.9.2868': attribute type 1 has an invalid length. [ 312.876504][T15677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.887225][T15677] bond6: entered allmulticast mode [ 312.893043][ T5817] IPVS: starting estimator thread 0... [ 312.987495][T15686] IPVS: using max 48 ests per chain, 115200 per kthread [ 313.007794][T15698] EXT4-fs: Conflicting test_dummy_encryption options [ 313.015177][T15698] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 313.150543][ T40] audit: type=1400 audit(302.301:72404): avc: denied { read } for pid=15702 comm="syz.6.2877" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 313.167185][T15706] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.176900][T15706] block device autoloading is deprecated and will be removed. [ 313.246800][T15706] tmpfs: Unknown parameter 'usrquotad' [ 313.364361][T15724] netlink: 'syz.6.2884': attribute type 7 has an invalid length. [ 313.389592][T15720] x_tables: duplicate underflow at hook 1 [ 313.393585][T15720] x_tables: duplicate underflow at hook 1 [ 313.487918][T15730] __nla_validate_parse: 6 callbacks suppressed [ 313.487930][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2886'. [ 313.493079][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2886'. [ 314.241676][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 314.245631][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 314.351262][T15769] syzkaller0: entered promiscuous mode [ 314.353132][T15769] syzkaller0: entered allmulticast mode [ 314.581179][T15774] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 314.691353][T15783] lo speed is unknown, defaulting to 1000 [ 314.709822][T15781] syzkaller1: entered promiscuous mode [ 314.711676][T15781] syzkaller1: entered allmulticast mode [ 314.923195][T15793] program syz.9.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.934733][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2905'. [ 314.956397][T15793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.968371][T15793] kvm: pic: level sensitive irq not supported [ 314.968668][T15793] kvm: pic: non byte read [ 314.974129][T15793] kvm: pic: level sensitive irq not supported [ 314.974415][T15793] kvm: pic: non byte read [ 314.980961][T15793] kvm: pic: level sensitive irq not supported [ 314.981276][T15793] kvm: pic: non byte read [ 314.987558][T15793] kvm: pic: level sensitive irq not supported [ 314.987898][T15793] kvm: pic: non byte read [ 314.992729][T15793] kvm: pic: level sensitive irq not supported [ 314.993018][T15793] kvm: pic: non byte read [ 314.998333][T15793] kvm: pic: level sensitive irq not supported [ 314.998791][T15793] kvm: pic: non byte read [ 315.004136][T15793] kvm: pic: level sensitive irq not supported [ 315.004774][T15793] kvm: pic: non byte read [ 315.009603][T15793] kvm: pic: level sensitive irq not supported [ 315.009890][T15793] kvm: pic: non byte read [ 315.014496][T15793] kvm: pic: level sensitive irq not supported [ 315.014778][T15793] kvm: pic: non byte read [ 315.155183][T15804] syzkaller0: entered promiscuous mode [ 315.159742][T15804] syzkaller0: entered allmulticast mode [ 315.209537][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2909'. [ 315.216034][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2909'. [ 315.226946][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2910'. [ 315.262592][T15813] Invalid logical block size (-4) [ 315.283419][T15813] loop4: detected capacity change from 0 to 7 [ 315.300092][T15813] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 315.305756][T15813] loop4: partition table partially beyond EOD, truncated [ 315.309993][T15813] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 315.316921][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 315.316930][ T40] audit: type=1400 audit(304.332:72416): avc: denied { bind } for pid=15818 comm="syz.9.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.319379][T15815] tipc: Enabling of bearer rejected, failed to enable media [ 315.450684][ T40] audit: type=1400 audit(304.453:72417): avc: denied { read } for pid=15832 comm="syz.6.2917" name="file0" dev="tmpfs" ino=3569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.464171][ T40] audit: type=1400 audit(304.453:72418): avc: denied { open } for pid=15832 comm="syz.6.2917" path="/502/file0" dev="tmpfs" ino=3569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.475865][ T40] audit: type=1400 audit(304.453:72419): avc: denied { ioctl } for pid=15832 comm="syz.6.2917" path="/502/file0" dev="tmpfs" ino=3569 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.480899][T15837] hugetlbfs: Bad value '$ ' for mount option 'size' [ 315.480899][T15837] [ 315.486697][ T40] audit: type=1400 audit(304.472:72420): avc: denied { getopt } for pid=15836 comm="syz.0.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.524873][T15840] syzkaller0: entered promiscuous mode [ 315.526712][T15840] syzkaller0: entered allmulticast mode [ 315.532075][ T40] audit: type=1400 audit(304.537:72421): avc: denied { write } for pid=15839 comm="syz.9.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.545636][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2920'. [ 315.560107][T15847] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 315.560839][T15846] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 315.591686][T15847] bond7: entered promiscuous mode [ 315.593616][T15847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.604023][T15847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.606550][T15847] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 315.610081][T15847] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 315.617065][T15847] bond7: (slave ip6gre2): making interface the new active one [ 315.620071][T15847] ip6gre2: entered promiscuous mode [ 315.623712][T15847] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 315.879859][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2927'. [ 315.904317][ T9] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 316.086130][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 316.090489][ T9] usb 11-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 316.094600][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.102639][ T9] usb 11-1: config 0 descriptor?? [ 316.108821][ T9] as10x_usb: device has been detected [ 316.111717][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 316.127375][ T9] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 316.140631][ T40] audit: type=1400 audit(305.090:72422): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 316.155948][ T40] audit: type=1400 audit(305.118:72423): avc: denied { create } for pid=15878 comm="syz.7.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.163426][ T9] as10x_usb: error during firmware upload part1 [ 316.166411][ T9] Registered device nBox DVB-T Dongle [ 316.221728][T15884] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 316.324911][ T5817] usb 11-1: USB disconnect, device number 30 [ 316.330122][T15853] netlink: 'syz.6.2924': attribute type 7 has an invalid length. [ 316.341190][ T5817] Unregistered device nBox DVB-T Dongle [ 316.341975][ T5817] as10x_usb: device has been disconnected [ 316.343202][T15887] efs: cannot read volume header [ 317.062097][T15904] xt_CT: No such helper "pptp" [ 317.190826][ T40] audit: type=1400 audit(306.082:72424): avc: denied { read } for pid=15909 comm="syz.6.2937" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 317.200029][ T40] audit: type=1400 audit(306.082:72425): avc: denied { open } for pid=15909 comm="syz.6.2937" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.320486][T15926] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 318.406885][T15936] macsec1: entered promiscuous mode [ 318.428760][T15936] macsec1: entered allmulticast mode [ 318.441981][T15945] fuse: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ' [ 318.477641][T15950] SELinux: failed to load policy [ 318.677728][T15966] netlink: 'syz.7.2953': attribute type 5 has an invalid length. [ 318.683815][T15966] netlink: 'syz.7.2953': attribute type 5 has an invalid length. [ 318.692247][T15966] netlink: 'syz.7.2953': attribute type 5 has an invalid length. [ 318.878214][T15997] can0: slcan on ttynull. [ 318.982436][T15996] can0 (unregistered): slcan off ttynull. [ 319.166471][T16006] __nla_validate_parse: 2 callbacks suppressed [ 319.166486][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.197994][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.208520][T16006] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.221357][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.236459][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.245202][T16006] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.248348][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.251975][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.255105][T16006] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.258113][T16006] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2963'. [ 319.286195][T16010] 9p: Bad value for 'wfdno' [ 319.345769][T16009] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 319.430159][T16023] syzkaller1: entered promiscuous mode [ 319.432064][T16023] syzkaller1: entered allmulticast mode [ 319.443167][T16026] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 319.449330][T16026] program syz.6.2969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.473662][T16028] random: crng reseeded on system resumption [ 319.523180][T16030] lo speed is unknown, defaulting to 1000 [ 320.108177][T16087] overlayfs: workdir and upperdir must be separate subtrees [ 320.205604][T16100] binder: 16098:16100 ioctl c0306201 200000000640 returned -22 [ 320.241288][T16104] openvswitch: netlink: Flow key attr not present in new flow. [ 320.317620][ T1474] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 320.327257][T16105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 320.330907][T16105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.404084][T16108] lo speed is unknown, defaulting to 1000 [ 320.481005][ T1474] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.489746][ T1474] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 320.492654][ T1474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 320.495229][ T1474] usb 5-1: Product: syz [ 320.508423][ T1474] usb 5-1: Manufacturer: syz [ 320.510002][ T1474] usb 5-1: SerialNumber: syz [ 320.644675][T16112] kvm: pic: single mode not supported [ 320.646010][T16112] kvm: pic: level sensitive irq not supported [ 320.961483][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 320.961494][ T40] audit: type=1400 audit(309.610:72439): avc: denied { map } for pid=16117 comm="syz.7.2994" path="socket:[71566]" dev="sockfs" ino=71566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 321.021574][ T40] audit: type=1400 audit(309.666:72440): avc: denied { mount } for pid=16121 comm="syz.7.2995" name="/" dev="ramfs" ino=71571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 321.114199][T16124] 9p: Bad value for 'version' [ 321.394320][ T40] audit: type=1400 audit(310.012:72441): avc: denied { ioctl } for pid=16131 comm="syz.6.2998" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 322.035346][ T40] audit: type=1400 audit(310.611:72442): avc: denied { read } for pid=16156 comm="syz.6.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.141433][T16164] FAULT_INJECTION: forcing a failure. [ 322.141433][T16164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.146494][T16164] CPU: 2 UID: 0 PID: 16164 Comm: syz.6.3010 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.146512][T16164] Tainted: [L]=SOFTLOCKUP [ 322.146516][T16164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.146522][T16164] Call Trace: [ 322.146526][T16164] [ 322.146531][T16164] dump_stack_lvl+0x100/0x190 [ 322.146556][T16164] should_fail_ex.cold+0x5/0xa [ 322.146572][T16164] _copy_to_user+0x32/0xd0 [ 322.146596][T16164] simple_read_from_buffer+0xcb/0x170 [ 322.146612][T16164] proc_fail_nth_read+0x1af/0x230 [ 322.146641][T16164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.146654][T16164] ? rw_verify_area+0xce/0x6d0 [ 322.146665][T16164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.146676][T16164] vfs_read+0x1e4/0xb30 [ 322.146690][T16164] ? __pfx_vfs_read+0x10/0x10 [ 322.146701][T16164] ? __fget_files+0x215/0x3d0 [ 322.146718][T16164] ? __fget_files+0x21f/0x3d0 [ 322.146736][T16164] ksys_read+0x12a/0x250 [ 322.146747][T16164] ? __pfx_ksys_read+0x10/0x10 [ 322.146760][T16164] ? rcu_is_watching+0x12/0xc0 [ 322.146779][T16164] do_syscall_64+0x10b/0xf80 [ 322.146804][T16164] ? clear_bhb_loop+0x40/0x90 [ 322.146818][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.146829][T16164] RIP: 0033:0x7fd404b5d60e [ 322.146839][T16164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.146849][T16164] RSP: 002b:00007fd405a03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.146860][T16164] RAX: ffffffffffffffda RBX: 00007fd405a046c0 RCX: 00007fd404b5d60e [ 322.146867][T16164] RDX: 000000000000000f RSI: 00007fd405a040a0 RDI: 0000000000000006 [ 322.146874][T16164] RBP: 00007fd405a04090 R08: 0000000000000000 R09: 0000000000000000 [ 322.146880][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.146886][T16164] R13: 00007fd404e16038 R14: 00007fd404e15fa0 R15: 00007fff3f73feb8 [ 322.146901][T16164] [ 322.523719][ T40] audit: type=1400 audit(311.069:72443): avc: denied { accept } for pid=16180 comm="syz.6.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.560313][ T40] audit: type=1400 audit(311.107:72444): avc: denied { create } for pid=16182 comm="syz.6.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 322.863777][T16207] program syz.9.3023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.197595][T16221] SELinux: syz.9.3028 (16221) wrote to checkreqprot. This is no longer supported. [ 323.213609][ T5879] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 323.285176][ T1488] usb 5-1: USB disconnect, device number 27 [ 323.343613][T16228] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 323.373631][ T40] audit: type=1400 audit(311.865:72445): avc: denied { name_bind } for pid=16233 comm="syz.7.3032" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 323.380525][ T5879] usb 11-1: Using ep0 maxpacket: 8 [ 323.382507][ T40] audit: type=1400 audit(311.865:72446): avc: denied { node_bind } for pid=16233 comm="syz.7.3032" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 323.390760][ T5879] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.393924][ T5879] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.398463][ T5879] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.402752][ T5879] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.408063][ T5879] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.411964][ T5879] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.471453][ T40] audit: type=1400 audit(311.968:72447): avc: denied { read write } for pid=16242 comm="syz.0.3034" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 323.479770][ T40] audit: type=1400 audit(311.968:72448): avc: denied { open } for pid=16242 comm="syz.0.3034" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 323.562576][T16243] No source specified [ 323.564333][T16243] overlay: Unknown parameter 'obj_role' [ 323.635264][ T5879] usb 11-1: GET_CAPABILITIES returned 0 [ 323.637565][ T5879] usbtmc 11-1:16.0: can't read capabilities [ 323.694600][ T7877] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 323.850162][ T5879] usb 11-1: USB disconnect, device number 31 [ 323.865516][ T7877] usb 12-1: Using ep0 maxpacket: 32 [ 323.874297][T16211] macsec1: entered promiscuous mode [ 323.880569][ T7877] usb 12-1: unable to get BOS descriptor or descriptor too short [ 323.884045][ T7877] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 323.889127][ T7877] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 323.892448][ T7877] usb 12-1: can't read configurations, error -61 [ 324.025753][ T7877] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 324.153965][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 324.196754][ T7877] usb 12-1: Using ep0 maxpacket: 32 [ 324.200543][ T7877] usb 12-1: unable to get BOS descriptor or descriptor too short [ 324.203318][ T7877] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 324.208140][ T7877] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 324.212288][ T7877] usb 12-1: can't read configurations, error -61 [ 324.214659][ T7877] usb usb12-port1: attempt power cycle [ 324.326473][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.332602][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 324.340743][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 324.344155][ T24] usb 5-1: Product: syz [ 324.345881][ T24] usb 5-1: Manufacturer: syz [ 324.350955][ T24] usb 5-1: SerialNumber: syz [ 324.592059][ T7877] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 324.613989][ T7877] usb 12-1: Using ep0 maxpacket: 32 [ 324.618249][ T7877] usb 12-1: unable to get BOS descriptor or descriptor too short [ 324.620873][ T7877] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 324.625738][ T7877] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 324.628303][ T7877] usb 12-1: can't read configurations, error -61 [ 324.645591][T16273] 0x0000000074f8-0x000000027517 : "" [ 324.647418][T16273] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 324.652980][T16273] ftl_cs: FTL header corrupt! [ 324.763050][ T7877] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 324.787312][ T7877] usb 12-1: Using ep0 maxpacket: 32 [ 324.791013][ T7877] usb 12-1: unable to get BOS descriptor or descriptor too short [ 324.797031][ T7877] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 324.801696][ T7877] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 324.804139][ T7877] usb 12-1: can't read configurations, error -61 [ 324.806931][ T7877] usb usb12-port1: unable to enumerate USB device [ 324.955890][T16280] 9p: Bad value for 'version' [ 325.971451][T16296] netlink: 'syz.6.3052': attribute type 3 has an invalid length. [ 326.353042][T16302] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 326.355320][T16303] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 326.357724][T16302] IPVS: set_ctl: invalid protocol: 25963 105.110.103.0:25447 [ 326.674973][T16313] random: crng reseeded on system resumption [ 326.732482][T16315] syzkaller1: entered promiscuous mode [ 326.734819][T16315] syzkaller1: entered allmulticast mode [ 326.948240][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 326.948251][ T40] audit: type=1400 audit(315.215:72453): avc: denied { execute } for pid=16318 comm="syz.7.3060" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=77900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 327.016726][T16323] __nla_validate_parse: 99 callbacks suppressed [ 327.016744][T16323] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3061'. [ 327.119091][ T7877] usb 5-1: USB disconnect, device number 28 [ 327.249591][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3067'. [ 327.413991][T16346] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 327.585672][ T53] usb 12-1: new full-speed USB device number 28 using dummy_hcd [ 327.760014][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.763502][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.772717][ T53] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.780030][ T53] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.786827][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.798459][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.803293][ T53] usb 12-1: config 0 descriptor?? [ 327.805015][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.954450][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.957393][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.964046][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.973794][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.978798][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.984749][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.987873][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.000389][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.007941][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.014392][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.018328][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.021269][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.067288][T16367] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 328.074029][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.079661][T16377] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 328.083239][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.227959][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.231394][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.254481][T16399] bond7: (slave bond_slave_1): Device is not bonding slave [ 328.257154][T16399] bond7: option active_slave: invalid value (bond_slave_1) [ 328.260387][ T53] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 328.261348][T16399] bond7 (unregistering): Released all slaves [ 328.278241][T16369] lo speed is unknown, defaulting to 1000 [ 328.501445][ T60] bridge_slave_1: left allmulticast mode [ 328.503251][ T60] bridge_slave_1: left promiscuous mode [ 328.505174][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.509712][ T60] bridge_slave_0: left allmulticast mode [ 328.511471][ T60] bridge_slave_0: left promiscuous mode [ 328.513308][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.517484][ T2318] usb 12-1: USB disconnect, device number 28 [ 328.687712][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.692168][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.696692][ T60] bond0 (unregistering): Released all slaves [ 328.749650][ T40] audit: type=1400 audit(316.899:72454): avc: denied { bind } for pid=16406 comm="syz.9.3085" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.759374][ T40] audit: type=1400 audit(316.899:72455): avc: denied { name_bind } for pid=16406 comm="syz.9.3085" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 328.768369][ T40] audit: type=1400 audit(316.899:72456): avc: denied { node_bind } for pid=16406 comm="syz.9.3085" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 328.910569][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.913664][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.916679][T16369] bridge_slave_0: entered allmulticast mode [ 328.920634][T16369] bridge_slave_0: entered promiscuous mode [ 328.925336][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.928324][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.931516][T16369] bridge_slave_1: entered allmulticast mode [ 328.936243][T16369] bridge_slave_1: entered promiscuous mode [ 328.965436][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.970617][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.003297][T16369] team0: Port device team_slave_0 added [ 329.008840][T16369] team0: Port device team_slave_1 added [ 329.035036][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.039393][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.053574][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.061868][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.064981][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.076826][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.186052][T16369] hsr_slave_0: entered promiscuous mode [ 329.191040][T16369] hsr_slave_1: entered promiscuous mode [ 329.195935][T16369] debugfs: 'hsr0' already exists in 'hsr' [ 329.200521][T16369] Cannot create hsr debugfs directory [ 329.226301][ T60] hsr_slave_0: left promiscuous mode [ 329.229397][ T60] hsr_slave_1: left promiscuous mode [ 329.232417][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.235560][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.251378][ T40] audit: type=1400 audit(317.367:72457): avc: denied { getopt } for pid=16430 comm="syz.9.3091" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.263400][ T60] veth1_macvtap: left promiscuous mode [ 329.266653][ T60] veth0_macvtap: left promiscuous mode [ 329.269087][ T60] veth1_vlan: left promiscuous mode [ 329.271235][ T60] veth0_vlan: left promiscuous mode [ 329.287698][T16420] [U]  [ 329.506541][ T60] team0 (unregistering): Port device team_slave_1 removed [ 329.521567][ T60] team0 (unregistering): Port device team_slave_0 removed [ 329.864925][ T40] audit: type=1400 audit(317.948:72458): avc: denied { mounton } for pid=16451 comm="syz.6.3097" path="/proc/1653/task" dev="proc" ino=78855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 329.874345][T16446] 0x0000000074f8-0x000000027517 : "" [ 329.882990][T16446] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 329.888783][ T34] kernel read not supported for file /1653/task (pid: 34 comm: kworker/3:0) [ 329.897813][ T40] audit: type=1400 audit(317.966:72459): avc: denied { write } for pid=16450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.899635][T16446] ftl_cs: FTL header corrupt! [ 329.964369][T16452] bond7: left promiscuous mode [ 329.969576][T16452] ip6gre2: left promiscuous mode [ 330.000619][ T40] audit: type=1400 audit(318.060:72460): avc: denied { write } for pid=16456 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.005779][T16452] macsec1: left promiscuous mode [ 330.143159][T16458] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.148621][T16458] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.154870][T16458] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.176222][T16460] macvlan2: entered promiscuous mode [ 330.178509][T16460] bridge0: entered promiscuous mode [ 330.181819][ T40] audit: type=1400 audit(318.247:72461): avc: denied { write } for pid=16457 comm="syz.7.3098" lport=58426 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.198782][ T40] audit: type=1400 audit(318.256:72462): avc: denied { setopt } for pid=16457 comm="syz.7.3098" lport=58426 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.235765][ T5748] Bluetooth: hci2: command tx timeout [ 330.294897][T16458] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.299263][T16458] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.302985][T16458] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 #! [ 330.412919][T16458] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.419183][T16458] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.424212][T16458] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.452281][ T9] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 330.560728][T16458] netdevsim netdevsim7 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.564602][T16458] netdevsim netdevsim7 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.568484][T16458] netdevsim netdevsim7 ªªªªªª (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.609755][ T9] usb 12-1: config 0 has no interfaces? [ 330.617890][ T9] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.624183][ T9] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.629167][ T9] usb 12-1: Product: syz [ 330.634736][ T9] usb 12-1: Manufacturer: syz [ 330.636258][ T9] usb 12-1: SerialNumber: syz [ 330.638976][ T9] usb 12-1: config 0 descriptor?? [ 330.676759][T16369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.685619][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.688514][T16369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.702770][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.707974][T16369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.726355][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.750408][T16369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.756795][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.759824][ T13] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.769111][ T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 330.772615][ T13] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.797507][ T60] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.801857][ T60] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 330.805368][ T60] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.829122][T12762] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.834669][T12762] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 330.839829][T12762] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.862599][T12762] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.865408][T12762] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 330.867982][T12762] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 330.902202][T16369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.914840][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.922468][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.924864][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.932467][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.935302][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.062008][T16521] netlink: 'syz.9.3104': attribute type 62 has an invalid length. [ 331.183372][T16369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.200996][T16480] overlayfs: statfs failed on './file0' [ 331.381591][T16553] 0x0000000074f8-0x000000027517 : "" [ 331.383899][T16553] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 331.392186][T16553] ftl_cs: FTL header corrupt! [ 331.423508][T16369] veth0_vlan: entered promiscuous mode [ 331.435354][T16369] veth1_vlan: entered promiscuous mode [ 331.460299][T16369] veth0_macvtap: entered promiscuous mode [ 331.466797][T16369] veth1_macvtap: entered promiscuous mode [ 331.482380][T16369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.497641][T16369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.509450][ T101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.513698][ T101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.516953][ T101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.525324][ T101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.609757][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.612511][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.652442][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.655275][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.755753][T16577] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 331.774028][T16574] block nbd4: server does not support multiple connections per device. [ 331.778096][T16574] block nbd4: shutting down sockets [ 331.791000][T16586] CIFS mount error: No usable UNC path provided in device string! [ 331.791000][T16586] [ 331.799339][T16586] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 331.849848][T16586] tmpfs: Unknown parameter 'grpquota@ö"2a×ch}#úä`Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4' [ 331.994504][T16602] 0x0000000074f8-0x000000027517 : "" [ 331.996216][T16602] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 332.002957][T16602] ftl_cs: FTL header corrupt! [ 332.073254][T16610] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 332.079702][T16611] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 332.215369][T16619] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 332.260230][T16624] overlayfs: regular lower layers cannot follow data lower layers [ 332.261590][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3126'. [ 332.275044][T16627] overlayfs: missing 'workdir' [ 332.312748][T16629] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 332.377255][T16631] 0x0000000074f8-0x000000027517 : "" [ 332.379476][T16631] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x18b08 [ 332.386999][T16631] ftl_cs: FTL header corrupt! [ 332.966168][T16662] team0: No ports can be present during mode change [ 333.024475][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'. [ 333.027325][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'. [ 333.030094][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'. [ 333.033333][T16666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=16666 comm=syz.9.3141 [ 333.038090][T16666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=16666 comm=syz.9.3141 [ 333.043320][T16666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=16666 comm=syz.9.3141 [ 333.113389][T16670] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3143'. [ 333.201792][ T5879] usb 12-1: USB disconnect, device number 29 [ 333.243313][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 333.243329][ T40] audit: type=1400 audit(321.101:72501): avc: denied { write } for pid=16674 comm="syz.7.3144" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 333.266047][T16675] netlink: 'syz.7.3144': attribute type 1 has an invalid length. [ 333.268516][T16675] netlink: 14436 bytes leftover after parsing attributes in process `syz.7.3144'. [ 333.315011][T16678] netlink: 276 bytes leftover after parsing attributes in process `syz.6.3145'. [ 333.432099][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.481245][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3147'. [ 333.485173][ T40] audit: type=1400 audit(321.335:72502): avc: denied { watch watch_with_perm } for pid=16680 comm="syz.6.3146" path="/581/bus" dev="tmpfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 333.488601][T16684] fuse: blksize only supported for fuseblk [ 333.620456][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.626877][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.631019][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.640305][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.645760][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.772946][ T53] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 333.835055][T16693] lo speed is unknown, defaulting to 1000 [ 333.931733][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 333.934958][ T53] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 333.937683][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.940766][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.946214][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.952497][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.956898][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.959750][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.115089][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.118286][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.121482][T16693] bridge_slave_0: entered allmulticast mode [ 334.125556][T16693] bridge_slave_0: entered promiscuous mode [ 334.130344][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.134014][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.137779][T16693] bridge_slave_1: entered allmulticast mode [ 334.141777][T16693] bridge_slave_1: entered promiscuous mode [ 334.168636][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.175297][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.183237][ T53] usb 11-1: usb_control_msg returned -32 [ 334.185275][ T53] usbtmc 11-1:16.0: can't read capabilities [ 334.198704][T16693] team0: Port device team_slave_0 added [ 334.202068][T16693] team0: Port device team_slave_1 added [ 334.214984][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.217167][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.225147][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.229430][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.231800][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.239736][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.268423][T16693] hsr_slave_0: entered promiscuous mode [ 334.270925][T16693] hsr_slave_1: entered promiscuous mode [ 334.273205][T16693] debugfs: 'hsr0' already exists in 'hsr' [ 334.275297][T16693] Cannot create hsr debugfs directory [ 334.389580][T16693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.395014][T16693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.623111][T16693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.627841][T16693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.757526][T16693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.762135][T16693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.789602][ T40] audit: type=1400 audit(322.552:72503): avc: denied { write } for pid=16720 comm="syz.9.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.867690][T16693] netdevsim netdevsim3 ªªªªªª (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.872126][T16693] netdevsim netdevsim3 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.910442][T16726] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 335.045375][T16693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.053350][T16693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.055686][ T40] audit: type=1400 audit(322.804:72504): avc: denied { ioctl } for pid=16730 comm="syz.9.3156" path="socket:[79435]" dev="sockfs" ino=79435 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.057634][T16693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.072346][T16693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.095931][T16693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.104141][T16693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.108513][T16693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.116270][T16693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.179111][ T40] audit: type=1400 audit(322.917:72505): avc: denied { write } for pid=16738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.198866][T16693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.215819][T16693] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.223932][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.226960][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.239494][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.241868][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.249206][ T40] audit: type=1400 audit(322.982:72506): avc: denied { write } for pid=16746 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.321789][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.434220][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.500182][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.544636][T16770] binder: 16769:16770 ioctl 4018620d 0 returned -22 [ 335.589326][ T40] audit: type=1400 audit(323.291:72507): avc: denied { accept } for pid=16773 comm="syz.9.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 335.611791][ T40] audit: type=1400 audit(323.319:72508): avc: denied { ioctl } for pid=16775 comm="syz.9.3163" path="socket:[79457]" dev="sockfs" ino=79457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 335.623180][T16777] ‹1WÑ: renamed from bridge_slave_1 (while UP) [ 335.628694][T16777] netlink: 488 bytes leftover after parsing attributes in process `syz.9.3163'. [ 335.634857][T16777] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3163'. [ 335.640845][T16777] overlayfs: unescaped trailing colons in lowerdir mount option. [ 335.644563][T16693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.708332][T16693] veth0_vlan: entered promiscuous mode [ 335.719941][T16693] veth1_vlan: entered promiscuous mode [ 335.739696][ T101] bridge_slave_1: left allmulticast mode [ 335.741512][ T101] bridge_slave_1: left promiscuous mode [ 335.743489][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.749334][ T101] bridge_slave_0: left allmulticast mode [ 335.751190][ T101] bridge_slave_0: left promiscuous mode [ 335.753112][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.876703][ T5739] Bluetooth: hci2: command tx timeout [ 335.920432][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.938353][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.943979][ T101] bond0 (unregistering): Released all slaves [ 335.964243][T16693] veth0_macvtap: entered promiscuous mode [ 335.968121][T16693] veth1_macvtap: entered promiscuous mode [ 335.978812][T16693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.984928][T16693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.991736][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.999388][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.008409][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.013325][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.075719][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.079923][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.222979][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.227859][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.419209][T16798] input: syz0 as /devices/virtual/input/input31 [ 336.521799][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3173'. [ 336.755027][ T1474] usb 11-1: USB disconnect, device number 32 [ 336.823705][T16815] openvswitch: netlink: Missing key (keys=40, expected=80) [ 337.004526][T16830] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 337.235783][T16840] xt_hashlimit: size too large, truncated to 1048576 [ 337.238197][T16840] xt_hashlimit: max too large, truncated to 1048576 [ 337.336557][T16845] bridge4: entered promiscuous mode [ 337.338349][T16845] bridge4: entered allmulticast mode [ 337.345041][T16845] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.348161][T16845] netlink: 'syz.7.3189': attribute type 1 has an invalid length. [ 337.361729][ T40] audit: type=1400 audit(324.957:72509): avc: denied { getopt } for pid=16837 comm="syz.9.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.521507][T16856] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 337.877588][T16876] overlayfs: upper fs does not support file handles, falling back to index=off. [ 337.952390][ T40] audit: type=1400 audit(325.509:72510): avc: denied { mount } for pid=16881 comm="syz.9.3199" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 337.996629][T16887] binder: 16886:16887 ioctl c0306201 0 returned -14 [ 338.086380][T16889] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 338.099371][ T5739] Bluetooth: hci2: command tx timeout [ 338.230068][T16904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.240711][T16904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.481194][T16917] __nla_validate_parse: 1 callbacks suppressed [ 338.481210][T16917] netlink: 192 bytes leftover after parsing attributes in process `syz.7.3209'. [ 338.599592][T16923] binder: 16922:16923 ioctl c0306201 0 returned -14 [ 338.613518][ T7876] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 338.617949][ T7876] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 338.808150][ T101] hsr_slave_0: left promiscuous mode [ 338.811318][ T101] hsr_slave_1: left promiscuous mode [ 338.814344][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.818416][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.824101][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.830297][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.843706][ T101] veth1_macvtap: left promiscuous mode [ 338.846194][ T101] veth0_macvtap: left promiscuous mode [ 338.849173][ T101] veth1_vlan: left promiscuous mode [ 338.851482][ T101] veth0_vlan: left promiscuous mode [ 338.911620][ T9] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 339.072059][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 339.078744][ T9] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 339.084171][ T9] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 339.089395][ T9] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.095554][ T9] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 339.112694][ T101] team0 (unregistering): Port device team_slave_1 removed [ 339.116833][ T9] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 339.120505][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.124504][ T101] team0 (unregistering): Port device team_slave_0 removed [ 339.126645][ T9] usb 12-1: Product: syz [ 339.131826][ T9] usb 12-1: Manufacturer: syz [ 339.133927][ T9] usb 12-1: SerialNumber: syz [ 339.147310][ C0] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 339.155880][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input32 [ 339.321924][T16943] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 339.387750][ T9] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 339.434346][ T9] (id 0x00) [ 339.456456][ T5879] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 339.489397][ T9] rc_core: IR keymap rc-imon-pad not found [ 339.507818][T16951] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 339.508099][T16953] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 339.510031][ T24] IPVS: starting estimator thread 0... [ 339.510180][ T9] Registered IR keymap rc-empty [ 339.510260][ T9] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 339.510276][ T9] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 339.582281][T16955] binder: 16954:16955 ioctl c0306201 0 returned -14 [ 339.617417][ T5879] usb 11-1: Using ep0 maxpacket: 32 [ 339.617629][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 339.629336][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input33 [ 339.631193][T16952] IPVS: using max 48 ests per chain, 115200 per kthread [ 339.646105][ T9] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:30> initialized [ 339.812825][ T24] usb 12-1: USB disconnect, device number 30 [ 340.390474][T16967] fuse: Bad value for 'fd' [ 340.479448][T16969] netlink: 'syz.7.3226': attribute type 2 has an invalid length. [ 340.482408][T16969] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3226'. [ 340.796899][T17004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17004 comm=syz.7.3236 [ 340.966796][T17007] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.3237'. [ 341.444111][ T845] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 341.611075][ T845] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 341.614453][ T845] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.617467][ T845] usb 12-1: Product: syz [ 341.619131][ T845] usb 12-1: Manufacturer: syz [ 341.620896][ T845] usb 12-1: SerialNumber: syz [ 341.780792][T17020] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3240'. [ 342.125822][ T5879] usb 11-1: unable to get BOS descriptor or descriptor too short [ 342.132823][ T5879] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 342.138559][ T5879] usb 11-1: can't read configurations, error -71 [ 342.258127][ T845] rtl8150 12-1:1.0: couldn't reset the device [ 342.261138][ T845] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 342.268178][ T845] usb 12-1: USB disconnect, device number 31 [ 342.338574][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3242'. [ 342.426793][T17038] sctp: [Deprecated]: syz.6.3244 (pid 17038) Use of int in maxseg socket option. [ 342.426793][T17038] Use struct sctp_assoc_value instead [ 342.464288][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 342.464300][ T40] audit: type=1400 audit(329.729:72513): avc: denied { mounton } for pid=17037 comm="syz.6.3244" path="/593/file0/file0" dev="9p" ino=72876151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.464363][T17038] overlay: ./file0 is not a directory [ 342.826005][T17042] FAULT_FLAG_ALLOW_RETRY missing 801 [ 342.829956][T17042] CPU: 2 UID: 0 PID: 17042 Comm: syz.7.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.829975][T17042] Tainted: [L]=SOFTLOCKUP [ 342.829979][T17042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.829986][T17042] Call Trace: [ 342.829990][T17042] [ 342.829995][T17042] dump_stack_lvl+0x100/0x190 [ 342.830023][T17042] handle_userfault.cold+0x56/0x69 [ 342.830037][T17042] ? do_raw_spin_unlock+0x145/0x1e0 [ 342.830055][T17042] ? _raw_spin_unlock+0x28/0x50 [ 342.830080][T17042] ? __free_frozen_pages+0x59e/0x1040 [ 342.830097][T17042] ? __pfx_handle_userfault+0x10/0x10 [ 342.830120][T17042] ? rcu_read_unlock+0x2d/0xb0 [ 342.830138][T17042] ? rcu_read_unlock+0x2d/0xb0 [ 342.830158][T17042] do_anonymous_page+0x1a83/0x2050 [ 342.830179][T17042] __handle_mm_fault+0x1d2c/0x2a00 [ 342.830197][T17042] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.830215][T17042] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.830232][T17042] ? pte_offset_map_lock+0x174/0x320 [ 342.830244][T17042] ? find_held_lock+0x2b/0x80 [ 342.830259][T17042] ? follow_page_pte+0x4d0/0x13f0 [ 342.830275][T17042] handle_mm_fault+0x36d/0xa20 [ 342.830293][T17042] __get_user_pages+0x1178/0x32a0 [ 342.830311][T17042] ? __pfx___get_user_pages+0x10/0x10 [ 342.830328][T17042] populate_vma_page_range+0x267/0x3f0 [ 342.830343][T17042] ? __pfx_populate_vma_page_range+0x10/0x10 [ 342.830359][T17042] ? vma_set_page_prot+0xb1/0x120 [ 342.830373][T17042] mprotect_fixup+0x955/0xe30 [ 342.830391][T17042] ? __pfx_mprotect_fixup+0x10/0x10 [ 342.830415][T17042] ? selinux_file_mprotect+0x18c/0x610 [ 342.830440][T17042] do_mprotect_pkey+0xa4b/0xef0 [ 342.830461][T17042] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 342.830495][T17042] __x64_sys_mprotect+0x78/0xc0 [ 342.830511][T17042] ? lockdep_hardirqs_on+0x78/0x100 [ 342.830526][T17042] do_syscall_64+0x10b/0xf80 [ 342.830542][T17042] ? clear_bhb_loop+0x40/0x90 [ 342.830561][T17042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.830573][T17042] RIP: 0033:0x7fb20719cdd9 [ 342.830584][T17042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.830596][T17042] RSP: 002b:00007fb207ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 342.830608][T17042] RAX: ffffffffffffffda RBX: 00007fb207415fa0 RCX: 00007fb20719cdd9 [ 342.830615][T17042] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 342.830623][T17042] RBP: 00007fb207232d69 R08: 0000000000000000 R09: 0000000000000000 [ 342.830629][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.830636][T17042] R13: 00007fb207416038 R14: 00007fb207415fa0 R15: 00007fffe7f29218 [ 342.830651][T17042] [ 342.961135][T17051] netlink: 'syz.6.3247': attribute type 2 has an invalid length. [ 342.964202][T17051] netlink: 'syz.6.3247': attribute type 2 has an invalid length. [ 342.999203][ T40] audit: type=1400 audit(330.235:72514): avc: denied { transfer } for pid=17052 comm="syz.7.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 343.007336][T17053] binder_alloc: 17052: binder_alloc_buf, no vma [ 343.166920][T17075] ip6gretap0: entered promiscuous mode [ 343.305865][T17087] kAFS: unable to lookup cell '1' [ 343.336383][ T40] audit: type=1400 audit(330.553:72515): avc: denied { listen } for pid=17082 comm="syz.9.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.504137][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.515875][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.521580][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.527104][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.532612][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.560285][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.563800][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.567187][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.576813][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.582987][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.833637][T17098] lo speed is unknown, defaulting to 1000 [ 344.001413][T11183] bond0: (slave syz_tun): Releasing backup interface [ 344.111873][T17098] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.114427][T17098] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.116970][T17098] bridge_slave_0: entered allmulticast mode [ 344.119717][T17098] bridge_slave_0: entered promiscuous mode [ 344.122788][T17098] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.125399][T17098] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.128512][T17098] bridge_slave_1: entered allmulticast mode [ 344.131739][T17098] bridge_slave_1: entered promiscuous mode [ 344.147364][T17098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.152700][T17098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.169779][T17098] team0: Port device team_slave_0 added [ 344.174053][T17098] team0: Port device team_slave_1 added [ 344.188392][T17098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.191633][T17098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.201572][T17098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.207581][T17098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.210345][T17098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.220733][T17098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.224856][ T40] audit: type=1404 audit(331.386:72516): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 344.249513][ T40] audit: type=1404 audit(331.404:72517): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 344.268095][T17098] hsr_slave_0: entered promiscuous mode [ 344.270461][T17098] hsr_slave_1: entered promiscuous mode [ 344.272542][T17098] debugfs: 'hsr0' already exists in 'hsr' [ 344.274265][T17098] Cannot create hsr debugfs directory [ 344.285145][ T40] audit: type=1400 audit(331.432:72518): avc: denied { read write } for pid=9606 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.307138][ T40] audit: type=1400 audit(331.432:72519): avc: denied { open } for pid=9606 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.315970][ T40] audit: type=1400 audit(331.432:72520): avc: denied { ioctl } for pid=9606 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.337185][ T40] audit: type=1400 audit(331.451:72521): avc: denied { create } for pid=17129 comm="syz.7.3265" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.411330][T17138] netlink: 'syz.3.3267': attribute type 7 has an invalid length. [ 344.414551][T17138] netlink: 'syz.3.3267': attribute type 12 has an invalid length. [ 344.419359][T17138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3267'. [ 344.431796][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3268'. [ 344.438193][T17140] bond12: option xmit_hash_policy: invalid value (6) [ 344.438251][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3268'. [ 344.448704][T17140] bond12 (unregistering): Released all slaves [ 344.638601][T17154] netlink: 'syz.7.3272': attribute type 1 has an invalid length. [ 344.641926][T17154] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3272'. [ 344.645542][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3272'. [ 344.707283][T17145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 344.714530][T17146] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 344.724821][T17159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'. [ 344.727743][T17146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'. [ 344.818520][T17167] macvlan0: entered promiscuous mode [ 344.926154][T17175] netlink: 'syz.9.3278': attribute type 1 has an invalid length. [ 345.040073][T17098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.045547][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.048990][T17098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.054259][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.057999][T17098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.065176][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.069369][T17098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.074538][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.138587][T17098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.149360][T17098] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.155353][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.158457][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.172625][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.175752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.200637][T17098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.204076][T17098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.426746][T17098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.583457][T17098] veth0_vlan: entered promiscuous mode [ 345.592575][T17098] veth1_vlan: entered promiscuous mode [ 345.618393][T17098] veth0_macvtap: entered promiscuous mode [ 345.626132][T17098] veth1_macvtap: entered promiscuous mode [ 345.635618][T17098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.641432][T17098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.652016][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.656130][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.661103][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.665240][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.675791][T17206] netlink: 'syz.3.3280': attribute type 15 has an invalid length. [ 345.683041][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 345.733878][ T1167] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 345.733907][T17206] netlink: 'syz.3.3280': attribute type 15 has an invalid length. [ 345.739015][ T1167] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 345.744069][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 345.761171][ T1167] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 345.764404][ T1167] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 345.779284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.789009][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.793503][ T5739] Bluetooth: hci4: command tx timeout [ 345.820897][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.823376][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.860774][T17209] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 345.939072][T17216] syzkaller0: entered promiscuous mode [ 345.940793][T17216] syzkaller0: entered allmulticast mode [ 347.134082][T17246] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3292'. [ 347.152937][T17250] kAFS: Can only specify source 'none' with -o dyn [ 347.158250][T17247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.166433][T17252] netlink: 'syz.6.3291': attribute type 21 has an invalid length. [ 347.273817][T17262] ref_ctr_offset mismatch. inode: 0xbf6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 347.635408][T17288] netlink: 'syz.6.3304': attribute type 11 has an invalid length. [ 347.648647][ T71] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.650004][T17288] netlink: 'syz.6.3304': attribute type 11 has an invalid length. [ 347.655448][ T71] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.659274][ T71] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.662944][ T71] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.667897][T17288] netlink: 'syz.6.3304': attribute type 11 has an invalid length. [ 348.026616][ T5739] Bluetooth: hci4: command tx timeout [ 348.191052][T17299] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 348.473442][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 348.473461][ T40] audit: type=1400 audit(335.353:72634): avc: denied { execmem } for pid=17304 comm="syz.9.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 348.605411][T17305] tap0: tun_chr_ioctl cmd 1074025675 [ 348.607854][T17305] tap0: persist enabled [ 348.610125][T17305] tap0: tun_chr_ioctl cmd 1074025675 [ 348.611939][T17305] tap0: persist disabled [ 349.573407][ T40] audit: type=1400 audit(336.383:72635): avc: denied { ioctl } for pid=17317 comm="syz.6.3313" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 349.684853][ T40] audit: type=1400 audit(336.495:72636): avc: denied { read append } for pid=17320 comm="syz.6.3315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 349.687025][T17323] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 349.694452][ T40] audit: type=1400 audit(336.495:72637): avc: denied { open } for pid=17320 comm="syz.6.3315" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 349.717872][T17323] macsec1: entered promiscuous mode [ 349.720101][T17323] macsec1: entered allmulticast mode [ 349.763313][ T40] audit: type=1400 audit(336.561:72638): avc: denied { read } for pid=17327 comm="syz.6.3316" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 349.774754][ T40] audit: type=1400 audit(336.561:72639): avc: denied { open } for pid=17327 comm="syz.6.3316" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 349.785048][ T40] audit: type=1400 audit(336.579:72640): avc: denied { ioctl } for pid=17327 comm="syz.6.3316" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 349.789160][ T5739] block nbd4: Receive control failed (result -1) [ 349.796046][ T40] audit: type=1400 audit(336.589:72641): avc: denied { write } for pid=17329 comm="syz.7.3317" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.889707][ T40] audit: type=1400 audit(336.682:72642): avc: denied { create } for pid=17342 comm="syz.9.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.899339][ T40] audit: type=1400 audit(336.682:72643): avc: denied { write } for pid=17342 comm="syz.9.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.900204][T17339] __nla_validate_parse: 14 callbacks suppressed [ 349.900215][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3316'. [ 349.911982][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3316'. [ 349.944524][T17345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17345 comm=syz.7.3320 [ 350.238700][ T53] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 350.238773][ T5739] Bluetooth: hci4: command tx timeout [ 350.363373][T17353] FAULT_INJECTION: forcing a failure. [ 350.363373][T17353] name failslab, interval 1, probability 0, space 0, times 0 [ 350.367484][T17353] CPU: 0 UID: 0 PID: 17353 Comm: syz.9.3323 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.367500][T17353] Tainted: [L]=SOFTLOCKUP [ 350.367504][T17353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.367511][T17353] Call Trace: [ 350.367520][T17353] [ 350.367525][T17353] dump_stack_lvl+0x100/0x190 [ 350.367545][T17353] should_fail_ex.cold+0x5/0xa [ 350.367561][T17353] ? tomoyo_realpath_from_path+0xb6/0x690 [ 350.367582][T17353] should_failslab+0xc2/0x120 [ 350.367595][T17353] __kmalloc_noprof+0xe0/0x850 [ 350.367610][T17353] ? kfree+0x1dd/0x6c0 [ 350.367627][T17353] tomoyo_realpath_from_path+0xb6/0x690 [ 350.367645][T17353] tomoyo_path_number_perm+0x23c/0x580 [ 350.367658][T17353] ? tomoyo_path_number_perm+0x22e/0x580 [ 350.367672][T17353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.367699][T17353] ? find_held_lock+0x2b/0x80 [ 350.367709][T17353] ? __fget_files+0x215/0x3d0 [ 350.367722][T17353] ? hook_file_ioctl_common+0x149/0x410 [ 350.367739][T17353] ? __fget_files+0x215/0x3d0 [ 350.367754][T17353] ? __fget_files+0x21f/0x3d0 [ 350.367770][T17353] security_file_ioctl+0xd3/0x230 [ 350.367785][T17353] __x64_sys_ioctl+0xb7/0x210 [ 350.367798][T17353] do_syscall_64+0x10b/0xf80 [ 350.367822][T17353] ? clear_bhb_loop+0x40/0x90 [ 350.367835][T17353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.367846][T17353] RIP: 0033:0x7f23f739cdd9 [ 350.367856][T17353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.367866][T17353] RSP: 002b:00007f23f8316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.367877][T17353] RAX: ffffffffffffffda RBX: 00007f23f7615fa0 RCX: 00007f23f739cdd9 [ 350.367884][T17353] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 350.367890][T17353] RBP: 00007f23f8316090 R08: 0000000000000000 R09: 0000000000000000 [ 350.367896][T17353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.367902][T17353] R13: 00007f23f7616038 R14: 00007f23f7615fa0 R15: 00007ffe4dd98398 [ 350.367916][T17353] [ 350.367921][T17353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.398987][ T53] usb 12-1: Using ep0 maxpacket: 32 [ 350.401166][ T53] usb 12-1: unable to get BOS descriptor or descriptor too short [ 350.444553][ T53] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.449328][ T53] usb 12-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 350.455581][ T53] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.458826][ T53] usb 12-1: Product: syz [ 350.460603][ T53] usb 12-1: Manufacturer: syz [ 350.462524][ T53] usb 12-1: SerialNumber: syz [ 350.687055][ T53] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.690991][ T53] usb 12-1: MIDIStreaming interface descriptor not found [ 350.700110][T17361] netlink: 'syz.6.3326': attribute type 1 has an invalid length. [ 350.710356][T17361] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3326'. [ 350.725758][ T53] usb 12-1: USB disconnect, device number 32 [ 351.110424][T17371] xt_hashlimit: size too large, truncated to 1048576 [ 351.733141][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.739133][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.766743][ T1474] usb 12-1: new full-speed USB device number 33 using dummy_hcd [ 351.951286][ T1474] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 351.955005][ T1474] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 351.958772][ T1474] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 351.962845][ T1474] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.967042][ T1474] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 351.971719][ T1474] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 351.977325][ T1474] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 351.981283][ T1474] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.986815][ T1474] usb 12-1: config 0 descriptor?? [ 351.990012][T17392] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 352.211368][ T1474] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 352.367500][T17413] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3345'. [ 352.410612][T17419] gretap0: refused to change device tx_queue_len [ 352.413695][T17419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.424077][ T845] usb 12-1: USB disconnect, device number 33 [ 352.429359][ T845] usblp0: removed [ 352.461392][ T5739] Bluetooth: hci4: command tx timeout [ 352.563164][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.567335][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.886275][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 353.886334][ T40] audit: type=1400 audit(340.425:72666): avc: denied { getopt } for pid=17456 comm="syz.6.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.278949][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3367'. [ 354.337836][ T40] audit: type=1400 audit(340.847:72667): avc: denied { mounton } for pid=17467 comm="syz.9.3368" path="/proc/1547/task" dev="proc" ino=83856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 354.375934][ T40] audit: type=1400 audit(340.884:72668): avc: denied { setopt } for pid=17472 comm="syz.9.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.427342][ T40] audit: type=1400 audit(340.921:72669): avc: denied { connect } for pid=17475 comm="syz.7.3371" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.538112][ T40] audit: type=1400 audit(341.034:72670): avc: denied { append } for pid=17485 comm="syz.7.3375" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 354.607273][ T40] audit: type=1400 audit(341.090:72671): avc: denied { create } for pid=17492 comm="syz.6.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 354.619292][ T40] audit: type=1400 audit(341.099:72672): avc: denied { sys_admin } for pid=17492 comm="syz.6.3378" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 354.752387][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.762311][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.963564][ T40] audit: type=1400 audit(341.436:72673): avc: denied { execute } for pid=17507 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 354.977177][ T40] audit: type=1400 audit(341.445:72674): avc: denied { execute_no_trans } for pid=17507 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 355.039306][T15099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.118085][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.135719][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.144936][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.154346][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.158093][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.182311][ T40] audit: type=1400 audit(341.633:72675): avc: denied { mounton } for pid=17509 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 355.570575][T17509] lo speed is unknown, defaulting to 1000 [ 356.369978][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.373211][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.376367][T17509] bridge_slave_0: entered allmulticast mode [ 356.380374][T17509] bridge_slave_0: entered promiscuous mode [ 356.385395][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.388478][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.391632][T17509] bridge_slave_1: entered allmulticast mode [ 356.395875][T17509] bridge_slave_1: entered promiscuous mode [ 356.422898][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.429641][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.456503][T17509] team0: Port device team_slave_0 added [ 356.461589][T17509] team0: Port device team_slave_1 added [ 356.488622][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.491865][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.502550][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.508649][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.512144][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.522896][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.562986][T17509] hsr_slave_0: entered promiscuous mode [ 356.566501][T17509] hsr_slave_1: entered promiscuous mode [ 356.569521][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 356.571917][T17509] Cannot create hsr debugfs directory [ 356.714151][T17509] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.724078][T17509] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.732575][T17509] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.812020][T17509] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.816891][T17509] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.820698][T17509] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.892490][T17509] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.896492][T17509] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.900447][T17509] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.095347][T17509] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.107544][T17509] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.112246][T17509] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.334463][ T5748] Bluetooth: hci0: command tx timeout [ 357.429086][T17509] [ 357.430205][T17509] ====================================================== [ 357.433104][T17509] WARNING: possible circular locking dependency detected [ 357.435927][T17509] syzkaller #0 Tainted: G L [ 357.438402][T17509] ------------------------------------------------------ [ 357.441217][T17509] syz-executor/17509 is trying to acquire lock: [ 357.443806][T17509] ffffffff8e9b1900 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x4b/0x6f0 [ 357.447557][T17509] [ 357.447557][T17509] but task is already holding lock: [ 357.450494][T17509] ffff88805aa2d530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 357.454302][T17509] [ 357.454302][T17509] which lock already depends on the new lock. [ 357.454302][T17509] [ 357.458127][T17509] [ 357.458127][T17509] the existing dependency chain (in reverse order) is: [ 357.461738][T17509] [ 357.461738][T17509] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 357.464725][T17509] __mutex_lock+0x1a4/0x1b10 [ 357.466833][T17509] ip6_mc_msfilter+0x1f5/0xf00 [ 357.469015][T17509] do_ipv6_setsockopt+0xcd9/0x44b0 [ 357.471278][T17509] ipv6_setsockopt+0xcb/0x170 [ 357.473399][T17509] tcp_setsockopt+0xa7/0x100 [ 357.475459][T17509] do_sock_setsockopt+0xf3/0x1d0 [ 357.477624][T17509] __sys_setsockopt+0x195/0x220 [ 357.479788][T17509] __x64_sys_setsockopt+0xbd/0x160 [ 357.482054][T17509] do_syscall_64+0x10b/0xf80 [ 357.484200][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.486840][T17509] [ 357.486840][T17509] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 357.490035][T17509] lock_sock_nested+0x41/0xf0 [ 357.492241][T17509] inet_shutdown+0x67/0x410 [ 357.494346][T17509] nbd_mark_nsock_dead+0xae/0x5c0 [ 357.496665][T17509] recv_work+0x5fb/0x8c0 [ 357.498637][T17509] process_one_work+0xa0e/0x1980 [ 357.500986][T17509] worker_thread+0x5ef/0xe50 [ 357.503141][T17509] kthread+0x370/0x450 [ 357.505046][T17509] ret_from_fork+0x72b/0xd50 [ 357.507181][T17509] ret_from_fork_asm+0x1a/0x30 [ 357.509353][T17509] [ 357.509353][T17509] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 357.512448][T17509] __mutex_lock+0x1a4/0x1b10 [ 357.514579][T17509] nbd_queue_rq+0x428/0x1080 [ 357.516553][T17509] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 357.518391][T17509] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 357.520893][T17509] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 357.523511][T17509] blk_mq_run_hw_queue+0x23c/0x670 [ 357.525805][T17509] blk_mq_dispatch_list+0x51d/0x1360 [ 357.528177][T17509] blk_mq_flush_plug_list+0x130/0x600 [ 357.530565][T17509] __blk_flush_plug+0x2c4/0x4b0 [ 357.532726][T17509] __submit_bio+0x584/0x6c0 [ 357.534799][T17509] submit_bio_noacct_nocheck+0x543/0xbf0 [ 357.537399][T17509] submit_bio_noacct+0xd18/0x2000 [ 357.539711][T17509] submit_bh_wbc+0x681/0x890 [ 357.541846][T17509] block_read_full_folio+0x264/0x8e0 [ 357.544228][T17509] filemap_read_folio+0xfc/0x3b0 [ 357.546499][T17509] do_read_cache_folio+0x2d7/0x6b0 [ 357.548837][T17509] read_part_sector+0xd1/0x370 [ 357.551068][T17509] adfspart_check_ICS+0x91/0x7d0 [ 357.553350][T17509] bdev_disk_changed+0x7a3/0x1250 [ 357.555678][T17509] blkdev_get_whole+0x187/0x290 [ 357.557945][T17509] bdev_open+0x2c7/0xe40 [ 357.560005][T17509] blkdev_open+0x34e/0x4f0 [ 357.562087][T17509] do_dentry_open+0x6d8/0x1660 [ 357.564316][T17509] vfs_open+0x82/0x3f0 [ 357.566264][T17509] path_openat+0x208c/0x31a0 [ 357.568420][T17509] do_file_open+0x20e/0x430 [ 357.570498][T17509] do_sys_openat2+0x10d/0x1e0 [ 357.572699][T17509] __x64_sys_openat+0x12d/0x210 [ 357.574935][T17509] do_syscall_64+0x10b/0xf80 [ 357.577081][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.579749][T17509] [ 357.579749][T17509] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 357.582752][T17509] __mutex_lock+0x1a4/0x1b10 [ 357.584893][T17509] nbd_queue_rq+0xba/0x1080 [ 357.586951][T17509] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 357.589382][T17509] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 357.592158][T17509] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 357.594780][T17509] blk_mq_run_hw_queue+0x23c/0x670 [ 357.597097][T17509] blk_mq_dispatch_list+0x51d/0x1360 [ 357.599453][T17509] blk_mq_flush_plug_list+0x130/0x600 [ 357.601781][T17509] __blk_flush_plug+0x2c4/0x4b0 [ 357.603982][T17509] __submit_bio+0x584/0x6c0 [ 357.606050][T17509] submit_bio_noacct_nocheck+0x543/0xbf0 [ 357.608606][T17509] submit_bio_noacct+0xd18/0x2000 [ 357.610876][T17509] submit_bh_wbc+0x681/0x890 [ 357.612992][T17509] block_read_full_folio+0x264/0x8e0 [ 357.615315][T17509] filemap_read_folio+0xfc/0x3b0 [ 357.617546][T17509] do_read_cache_folio+0x2d7/0x6b0 [ 357.619810][T17509] read_part_sector+0xd1/0x370 [ 357.622007][T17509] adfspart_check_ICS+0x91/0x7d0 [ 357.624250][T17509] bdev_disk_changed+0x7a3/0x1250 [ 357.626480][T17509] blkdev_get_whole+0x187/0x290 [ 357.628715][T17509] bdev_open+0x2c7/0xe40 [ 357.630746][T17509] blkdev_open+0x34e/0x4f0 [ 357.632851][T17509] do_dentry_open+0x6d8/0x1660 [ 357.635067][T17509] vfs_open+0x82/0x3f0 [ 357.637008][T17509] path_openat+0x208c/0x31a0 [ 357.639175][T17509] do_file_open+0x20e/0x430 [ 357.641251][T17509] do_sys_openat2+0x10d/0x1e0 [ 357.643448][T17509] __x64_sys_openat+0x12d/0x210 [ 357.645704][T17509] do_syscall_64+0x10b/0xf80 [ 357.647966][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.650670][T17509] [ 357.650670][T17509] -> #3 (set->srcu){.+.+}-{0:0}: [ 357.653664][T17509] __synchronize_srcu+0xa2/0x300 [ 357.655919][T17509] blk_mq_quiesce_queue+0x149/0x1c0 [ 357.658191][T17509] elevator_switch+0x17b/0x7e0 [ 357.660523][T17509] elevator_change+0x352/0x530 [ 357.662723][T17509] elevator_set_default+0x29e/0x360 [ 357.665107][T17509] blk_register_queue+0x48e/0x630 [ 357.667355][T17509] __add_disk+0x73f/0xe40 [ 357.669131][T17509] add_disk_fwnode+0x118/0x5c0 [ 357.671327][T17509] nbd_dev_add+0x77a/0xb10 [ 357.673364][T17509] nbd_init+0x291/0x2b0 [ 357.675378][T17509] do_one_initcall+0x121/0x750 [ 357.677601][T17509] kernel_init_freeable+0x6ea/0x7b0 [ 357.679992][T17509] kernel_init+0x1f/0x1e0 [ 357.682032][T17509] ret_from_fork+0x72b/0xd50 [ 357.684198][T17509] ret_from_fork_asm+0x1a/0x30 [ 357.686342][T17509] [ 357.686342][T17509] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 357.689518][T17509] __mutex_lock+0x1a4/0x1b10 [ 357.691666][T17509] elevator_change+0x1bc/0x530 [ 357.693861][T17509] elevator_set_none+0x92/0xf0 [ 357.696080][T17509] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 357.698720][T17509] nbd_start_device+0x1a6/0xbd0 [ 357.701007][T17509] nbd_genl_connect+0xff2/0x1a40 [ 357.703275][T17509] genl_family_rcv_msg_doit+0x214/0x300 [ 357.705799][T17509] genl_rcv_msg+0x560/0x800 [ 357.707936][T17509] netlink_rcv_skb+0x159/0x420 [ 357.710116][T17509] genl_rcv+0x28/0x40 [ 357.712014][T17509] netlink_unicast+0x585/0x850 [ 357.714158][T17509] netlink_sendmsg+0x8b0/0xda0 [ 357.716241][T17509] ____sys_sendmsg+0x9e1/0xb70 [ 357.718421][T17509] ___sys_sendmsg+0x190/0x1e0 [ 357.720643][T17509] __sys_sendmsg+0x170/0x220 [ 357.722795][T17509] do_syscall_64+0x10b/0xf80 [ 357.724969][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.727663][T17509] [ 357.727663][T17509] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 357.731226][T17509] blk_alloc_queue+0x610/0x790 [ 357.733450][T17509] blk_mq_alloc_queue+0x174/0x290 [ 357.735789][T17509] __blk_mq_alloc_disk+0x29/0x120 [ 357.738101][T17509] nbd_dev_add+0x492/0xb10 [ 357.740206][T17509] nbd_init+0x291/0x2b0 [ 357.742215][T17509] do_one_initcall+0x121/0x750 [ 357.744444][T17509] kernel_init_freeable+0x6ea/0x7b0 [ 357.746811][T17509] kernel_init+0x1f/0x1e0 [ 357.748878][T17509] ret_from_fork+0x72b/0xd50 [ 357.751040][T17509] ret_from_fork_asm+0x1a/0x30 [ 357.753271][T17509] [ 357.753271][T17509] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 357.756266][T17509] __lock_acquire+0x14b8/0x2630 [ 357.758532][T17509] lock_acquire+0x1b1/0x370 [ 357.760684][T17509] fs_reclaim_acquire+0xc4/0x100 [ 357.762991][T17509] __kmalloc_cache_noprof+0x4b/0x6f0 [ 357.765478][T17509] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 357.767797][T17509] ipv6_add_dev+0xb78/0x1520 [ 357.769991][T17509] addrconf_notify+0x5db/0x1ba0 [ 357.772287][T17509] notifier_call_chain+0x99/0x400 [ 357.774663][T17509] call_netdevice_notifiers_info+0xbe/0x110 [ 357.777339][T17509] register_netdevice+0x18fe/0x24b0 [ 357.779753][T17509] nsim_create+0xc8d/0x1420 [ 357.781902][T17509] __nsim_dev_port_add+0x3ba/0x8f0 [ 357.784277][T17509] nsim_drv_probe+0xeb7/0x14b0 [ 357.786516][T17509] really_probe+0x241/0xa60 [ 357.788638][T17509] __driver_probe_device+0x22e/0x480 [ 357.791063][T17509] driver_probe_device+0x4c/0x1b0 [ 357.793381][T17509] __device_attach_driver+0x1df/0x340 [ 357.795859][T17509] bus_for_each_drv+0x159/0x1e0 [ 357.798109][T17509] __device_attach+0x1e4/0x4d0 [ 357.800344][T17509] device_initial_probe+0xaf/0xd0 [ 357.802661][T17509] bus_probe_device+0x64/0x160 [ 357.804881][T17509] device_add+0x1210/0x1950 [ 357.806998][T17509] new_device_store+0x40b/0x700 [ 357.809279][T17509] bus_attr_store+0x74/0xb0 [ 357.811448][T17509] sysfs_kf_write+0xf2/0x150 [ 357.813625][T17509] kernfs_fop_write_iter+0x3e0/0x5f0 [ 357.815901][T17509] vfs_write+0x6ac/0x1070 [ 357.817947][T17509] ksys_write+0x12a/0x250 [ 357.819928][T17509] do_syscall_64+0x10b/0xf80 [ 357.822074][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.824928][T17509] [ 357.824928][T17509] other info that might help us debug this: [ 357.824928][T17509] [ 357.829153][T17509] Chain exists of: [ 357.829153][T17509] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 357.829153][T17509] [ 357.834372][T17509] Possible unsafe locking scenario: [ 357.834372][T17509] [ 357.837480][T17509] CPU0 CPU1 [ 357.839737][T17509] ---- ---- [ 357.841832][T17509] lock(&idev->mc_lock); [ 357.843611][T17509] lock(sk_lock-AF_INET6); [ 357.846475][T17509] lock(&idev->mc_lock); [ 357.849328][T17509] lock(fs_reclaim); [ 357.850998][T17509] [ 357.850998][T17509] *** DEADLOCK *** [ 357.850998][T17509] [ 357.854418][T17509] 9 locks held by syz-executor/17509: [ 357.856683][T17509] #0: ffff88802d2be410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 357.860239][T17509] #1: ffff8881082d2480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 357.863928][T17509] #2: ffff88802b7811e8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 357.868055][T17509] #3: ffffffff8fb7d020 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 357.872274][T17509] #4: ffff888063c2e128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 357.876100][T17509] #5: ffff88805919b258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_probe+0xd4/0x14b0 [ 357.880295][T17509] #6: ffffffff9060bea0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x998/0x1420 [ 357.884048][T17509] #7: ffff888042120dc8 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: register_netdevice+0x18de/0x24b0 [ 357.888515][T17509] #8: ffff88805aa2d530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 357.892532][T17509] [ 357.892532][T17509] stack backtrace: [ 357.895005][T17509] CPU: 1 UID: 0 PID: 17509 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 357.895050][T17509] Tainted: [L]=SOFTLOCKUP [ 357.895057][T17509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.895068][T17509] Call Trace: [ 357.895074][T17509] [ 357.895081][T17509] dump_stack_lvl+0x100/0x190 [ 357.895104][T17509] print_circular_bug.cold+0x178/0x1c7 [ 357.895131][T17509] check_noncircular+0x146/0x160 [ 357.895156][T17509] __lock_acquire+0x14b8/0x2630 [ 357.895179][T17509] ? __ipv6_dev_mc_inc+0x53/0xbc0 [ 357.895196][T17509] ? __lock_acquire+0x4a5/0x2630 [ 357.895219][T17509] lock_acquire+0x1b1/0x370 [ 357.895240][T17509] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 357.895268][T17509] fs_reclaim_acquire+0xc4/0x100 [ 357.895288][T17509] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 357.895317][T17509] __kmalloc_cache_noprof+0x4b/0x6f0 [ 357.895340][T17509] ? __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 357.895358][T17509] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 357.895378][T17509] ipv6_add_dev+0xb78/0x1520 [ 357.895400][T17509] addrconf_notify+0x5db/0x1ba0 [ 357.895427][T17509] ? __pfx_tls_dev_event+0x10/0x10 [ 357.895445][T17509] ? __pfx_addrconf_notify+0x10/0x10 [ 357.895471][T17509] ? ip6mr_device_event+0x1c4/0x230 [ 357.895497][T17509] notifier_call_chain+0x99/0x400 [ 357.895520][T17509] call_netdevice_notifiers_info+0xbe/0x110 [ 357.895542][T17509] register_netdevice+0x18fe/0x24b0 [ 357.895562][T17509] ? __pfx_register_netdevice+0x10/0x10 [ 357.895580][T17509] ? debugfs_create_file_full+0x41/0x60 [ 357.895600][T17509] nsim_create+0xc8d/0x1420 [ 357.895623][T17509] __nsim_dev_port_add+0x3ba/0x8f0 [ 357.895649][T17509] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 357.895677][T17509] ? nsim_dev_hwstats_init+0xf5/0x4f0 [ 357.895699][T17509] nsim_drv_probe+0xeb7/0x14b0 [ 357.895726][T17509] ? __pfx_nsim_drv_probe+0x10/0x10 [ 357.895753][T17509] ? kernfs_put+0x3f/0x60 [ 357.895777][T17509] ? sysfs_create_link+0x68/0xc0 [ 357.895798][T17509] ? __pfx_nsim_bus_probe+0x10/0x10 [ 357.895815][T17509] really_probe+0x241/0xa60 [ 357.895843][T17509] __driver_probe_device+0x22e/0x480 [ 357.895860][T17509] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.895882][T17509] driver_probe_device+0x4c/0x1b0 [ 357.895899][T17509] __device_attach_driver+0x1df/0x340 [ 357.895915][T17509] ? __pfx___device_attach_driver+0x10/0x10 [ 357.895930][T17509] bus_for_each_drv+0x159/0x1e0 [ 357.895952][T17509] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.895977][T17509] __device_attach+0x1e4/0x4d0 [ 357.895993][T17509] ? __pfx___device_attach+0x10/0x10 [ 357.896009][T17509] ? do_raw_spin_unlock+0x145/0x1e0 [ 357.896036][T17509] device_initial_probe+0xaf/0xd0 [ 357.896054][T17509] bus_probe_device+0x64/0x160 [ 357.896079][T17509] device_add+0x1210/0x1950 [ 357.896098][T17509] ? __pfx_device_add+0x10/0x10 [ 357.896116][T17509] ? lockdep_init_map_type+0x5c/0x250 [ 357.896139][T17509] ? __init_waitqueue_head+0xca/0x150 [ 357.896167][T17509] new_device_store+0x40b/0x700 [ 357.896186][T17509] ? __pfx_new_device_store+0x10/0x10 [ 357.896205][T17509] ? find_held_lock+0x2b/0x80 [ 357.896221][T17509] ? sysfs_file_kobj+0xe4/0x290 [ 357.896238][T17509] ? sysfs_file_kobj+0xe4/0x290 [ 357.896255][T17509] ? __pfx_new_device_store+0x10/0x10 [ 357.896274][T17509] bus_attr_store+0x74/0xb0 [ 357.896294][T17509] ? __pfx_bus_attr_store+0x10/0x10 [ 357.896333][T17509] sysfs_kf_write+0xf2/0x150 [ 357.896352][T17509] kernfs_fop_write_iter+0x3e0/0x5f0 [ 357.896377][T17509] ? __pfx_sysfs_kf_write+0x10/0x10 [ 357.896395][T17509] vfs_write+0x6ac/0x1070 [ 357.896415][T17509] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.896443][T17509] ? __pfx_vfs_write+0x10/0x10 [ 357.896461][T17509] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.896491][T17509] ksys_write+0x12a/0x250 [ 357.896509][T17509] ? __pfx_ksys_write+0x10/0x10 [ 357.896526][T17509] ? rcu_is_watching+0x12/0xc0 [ 357.896551][T17509] do_syscall_64+0x10b/0xf80 [ 357.896573][T17509] ? clear_bhb_loop+0x40/0x90 [ 357.896592][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.896609][T17509] RIP: 0033:0x7f10a395d60e [ 357.896624][T17509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.896641][T17509] RSP: 002b:00007ffd610838b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.896657][T17509] RAX: ffffffffffffffda RBX: 000055555dbb5500 RCX: 00007f10a395d60e [ 357.896669][T17509] RDX: 0000000000000003 RSI: 00007ffd61083940 RDI: 0000000000000005 [ 357.896680][T17509] RBP: 00007f10a3a33610 R08: 0000000000000000 R09: 0000000000000000 [ 357.896690][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 357.896700][T17509] R13: 00007ffd61083940 R14: 00007f10a4744620 R15: 0000000000000003 [ 357.896716][T17509] [ 358.105686][T17509] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 358.113764][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.117850][T17509] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 358.121905][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.125144][T17509] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 358.139204][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.142780][T17509] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 358.149192][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.199223][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.211001][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.216553][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.218886][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.610904][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 358.615132][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.639785][ T5879] usb 14-1: USB disconnect, device number 2 [ 358.739464][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 358.742731][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.856954][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 358.860237][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.965881][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 358.969241][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.156127][ T101] bridge_slave_1: left allmulticast mode [ 359.158596][ T101] bridge_slave_1: left promiscuous mode [ 359.161080][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.166720][ T101] bridge_slave_0: left allmulticast mode [ 359.169121][ T101] bridge_slave_0: left promiscuous mode [ 359.171573][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.306285][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.314651][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.319484][ T101] bond0 (unregistering): Released all slaves [ 359.713269][ T101] hsr_slave_0: left promiscuous mode [ 359.716087][ T101] hsr_slave_1: left promiscuous mode [ 359.718884][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.721875][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.725299][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.729933][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.738475][ T101] veth1_macvtap: left promiscuous mode [ 359.740714][ T101] veth0_macvtap: left promiscuous mode [ 359.743009][ T101] veth1_vlan: left promiscuous mode [ 359.745204][ T101] veth0_vlan: left promiscuous mode [ 359.839475][ T101] team0 (unregistering): Port device team_slave_1 removed [ 359.844012][ T101] team0 (unregistering): Port device team_slave_0 removed [ 360.213254][ T101] IPVS: stop unused estimator thread 0... [ 360.714374][ T101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.717794][ T101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.801947][ T101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.806195][ T101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.887395][ T101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.890692][ T101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.972894][ T101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.977258][ T101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.058061][ T101] bridge_slave_1: left allmulticast mode [ 361.060366][ T101] bridge_slave_1: left promiscuous mode [ 361.062385][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.065520][ T101] bridge_slave_0: left allmulticast mode [ 361.067373][ T101] bridge_slave_0: left promiscuous mode [ 361.069328][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.076389][ T101] bridge_slave_1: left allmulticast mode [ 361.078242][ T101] bridge_slave_1: left promiscuous mode [ 361.080138][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.083373][ T101] bridge_slave_0: left allmulticast mode [ 361.086052][ T101] bridge_slave_0: left promiscuous mode [ 361.087955][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.216699][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.220895][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.224553][ T101] bond0 (unregistering): Released all slaves [ 361.303109][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.307330][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.311225][ T101] bond0 (unregistering): Released all slaves [ 361.661581][ T101] hsr_slave_0: left promiscuous mode [ 361.674041][ T101] hsr_slave_1: left promiscuous mode [ 361.678630][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.682248][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.695727][ T101] hsr_slave_0: left promiscuous mode [ 361.698468][ T101] hsr_slave_1: left promiscuous mode [ 361.701104][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.704182][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.714262][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.717446][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.724480][ T101] veth1_macvtap: left promiscuous mode [ 361.726992][ T101] veth0_macvtap: left promiscuous mode [ 361.729334][ T101] veth1_vlan: left promiscuous mode [ 361.731589][ T101] veth0_vlan: left promiscuous mode [ 361.797234][ T101] team0 (unregistering): Port device team_slave_1 removed [ 361.807095][ T101] team0 (unregistering): Port device team_slave_0 removed [ 361.917680][ T101] team0 (unregistering): Port device team_slave_1 removed [ 361.924053][ T101] team0 (unregistering): Port device team_slave_0 removed