last executing test programs: 28m26.145425212s ago: executing program 2 (id=636): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a0214"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 28m26.085660519s ago: executing program 2 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) 28m26.082387736s ago: executing program 2 (id=638): r0 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x82, 0x0, 0x1) 28m26.005865722s ago: executing program 2 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 28m25.972268623s ago: executing program 2 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x2) sendmmsg(r2, &(0x7f0000001800)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0x7ff, @remote, 0xff}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)="8252a3ca2de767a3b68022303fabdfa131b7e8833d4fa6056a3d69c07c6849fe2f949253f02af2ea4b66d1180134ba5bb10fa4493a7f8c0b43435fc005c5da5dae99702fd1968d1e1d26d187c7abbf662c708f902ec3f3e6df75782b700127a1f7bff9c0a47639a5ef496812c922cfd4914aba979af22e2d8d227f098068ce1325cafeca007f45b42b213f01ce7c1a95a32807638342099ad9dec9ef9ff2d0c53dd441a2d16221c5854737c63ff54a497b116f4779e40b19cfc5e19aebe284889cc2", 0xc2}, {&(0x7f00000001c0)="d27007b8db3667b9", 0x8}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="f606c8f6734ec733150fcde0e48d1fec929e1a976e81589665c4320f8f782f54aa3647304e3fb79ace1501f03d95be1729ce9123f7c0fec767e27e11fd329bc17659644c9253e7ba5896f434c9b810984b1a6136f30b49594cff476d185b79616360d1cba239caeb444455004cb233da9e65379d844dd659a765d68da6ba1dbf4810f59aeb5092301be780db6f9a95469198632c1997200a33ee04e87ec8fb743745e34c60314e4ca45794f789360899f76b71b806b85865b81c8bf62b36a9910799a2ac93cbe97d187fa6a5a2a926609c9fb3c442027cdc6a7a4674a4e9eb566f42837298e1efe8545d90cead", 0xed}, {&(0x7f0000000300)="c0dd121bad111141a0fc903c7cb66d7a0fae35eed5de8e39eedbeea91938", 0x1e}, {&(0x7f0000000400)="1cefdc8419eb84602e6f134751bc69da73b7e45b16add60f90df6ee86630adb05335bda6c11e6d0f6c48914ed988f9a0f786a827930a816a0300769ce5cbfccaab8ba37dda884872e74b5d76608331a01aac3cbe238b94573c4507bb4d25e06cdc354f012cf7eb172486080a2067527406c088a0", 0x74}, {&(0x7f0000000480)="9bb2ec4d2bdd0b960b208734ef504e93", 0x10}], 0x7}}], 0x1, 0x2004c849) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0x200) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 28m24.225897608s ago: executing program 2 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x54, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x10, 0x1, '(,^$^[+^[]%\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, 'syzkaller\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 28m24.160730519s ago: executing program 32 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x54, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x10, 0x1, '(,^$^[+^[]%\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, 'syzkaller\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1m42.913155119s ago: executing program 0 (id=7933): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800800020002000001040001"], 0x34}}, 0x80) 1m42.602671907s ago: executing program 0 (id=7936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x80040000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x7}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa6994c681001000080046b4002c00000000a3069078ac1414bbac1414aa940400004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m40.368786784s ago: executing program 0 (id=7941): r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000004c0)=[{0x4, 0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/44, 0x2c}], &(0x7f0000000480)=[0x4, 0xe, 0x7, 0x2, 0x396]}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0xf40, 0x0, 0x0, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0x4, 0xff, 0x7, 0x10000009, 0x4, 0x8005, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x7, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x400002, 0x2, 0x1]}) 1m40.060869862s ago: executing program 0 (id=7943): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1m39.834192875s ago: executing program 0 (id=7944): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3, 0x0, [{0xf000, 0x37, &(0x7f0000000880)=""/55}, {0x9000, 0x23, &(0x7f0000000200)=""/35}, {0x80a0000, 0x12, &(0x7f00000008c0)=""/18}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="4000902e1800fffd"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500005e7797e08219c4b2dfd0d3278e4b0000000000ba643938000008000300", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800fa42", @ANYRES16=r5, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) pidfd_send_signal(0xffffffffffffffff, 0x30, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) 1m38.93870555s ago: executing program 0 (id=7947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x80040000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x7}]}) r8 = dup3(r1, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa6994c681001000080046b4002c00000000a3069078ac1414bbac1414aa940400004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1, 0x15c}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r11, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m38.283055869s ago: executing program 33 (id=7947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x80040000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x7}]}) r8 = dup3(r1, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa6994c681001000080046b4002c00000000a3069078ac1414bbac1414aa940400004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1, 0x15c}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r11, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10.218503658s ago: executing program 1 (id=8277): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8, {0x3, 0x0, 0x2, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) setuid(0xee01) ioctl(r3, 0x2284, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) 9.321084286s ago: executing program 1 (id=8284): syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04c31f0a00c90002"], 0x22) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffe83, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000002100390d000000000000020000000000000000000000000000000000ffffffff000000000000000000000000000000000003000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000436492be324b74fcd3880bdf0c105005000008000000000000000000000000000000000ffff2f75d49c79e9837d698d3d042f03dc5ee68ec9d3e0bbe365469375ffff000000000000000000000000ffffffff0000000064"], 0xa0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600"], 0xc4}}, 0x4008800) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) io_uring_setup(0x7328, &(0x7f00000000c0)={0x0, 0xf299, 0x2000, 0xffffffff, 0x13}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) 7.817929324s ago: executing program 4 (id=8293): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x204004, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 6.28008936s ago: executing program 3 (id=8299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0xa859}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2e2, 0x10}, 0xfd04) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 6.18660754s ago: executing program 1 (id=8300): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) socket(0x11, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000040), 0x4) 5.75576555s ago: executing program 4 (id=8301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0x2, 0x17) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x10, @local, 0xc}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe20c}], 0xbc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) write$binfmt_script(r2, 0x0, 0xffffff7c) 5.561388781s ago: executing program 4 (id=8302): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000300)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}], 0x38) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) 5.378051783s ago: executing program 3 (id=8303): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3, 0x0, [{0xf000, 0x37, &(0x7f0000000880)=""/55}, {0x9000, 0x23, &(0x7f0000000200)=""/35}, {0x80a0000, 0x12, &(0x7f00000008c0)=""/18}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500005e7797e08219c4b2dfd0d3278e4b0000000000ba643938000008000300", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800fa42", @ANYRES16=r5, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) pidfd_send_signal(0xffffffffffffffff, 0x30, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) 5.25043745s ago: executing program 3 (id=8304): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000100)}, {&(0x7f00000006c0)=""/136, 0x88}], 0x5, &(0x7f0000001900)=""/216, 0xd8}, 0x8}], 0x1, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, 0x0, &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) io_uring_enter(r3, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.100173479s ago: executing program 3 (id=8305): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x19, &(0x7f0000000340)=""/25}, &(0x7f00000004c0)="1518a7a093f1", 0x0, 0x84, 0x2, 0x0, 0x0}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001"], 0xb0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x200, 0x0) 4.463443517s ago: executing program 4 (id=8306): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r1 = io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x8678, 0x8, 0x5, 0x9c}) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x4c, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x21) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) r7 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=[@cred={{0x18, 0x1, 0x2, {r7}}}], 0x18, 0x40000}}], 0x1, 0x840) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000280)="0085ea33", 0x4}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_CACHEINFO={0x14}]}, 0x30}}, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x106}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.89809604s ago: executing program 1 (id=8308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x3e33, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e0000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5e00000090780000"], 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0xae4a, 0x7f, 0x6c, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x1f, 0x0, [@loopback, @rand_addr=0x64010102, @empty, @multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000007100)={0x78, 0x0, r3, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x13f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) getpgid(0x0) 3.679374397s ago: executing program 5 (id=8309): socket(0x39, 0x2, 0x3a) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) msgget$private(0x0, 0x3ac) setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x0) 2.780121568s ago: executing program 1 (id=8310): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000300)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}], 0x38) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) 2.448365308s ago: executing program 3 (id=8311): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x19, &(0x7f0000000340)=""/25}, &(0x7f00000004c0)="1518a7a093f1", 0x0, 0x84, 0x2, 0x0, 0x0}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001"], 0xb0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x200, 0x0) 2.447788455s ago: executing program 5 (id=8312): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3, 0x0, [{0xf000, 0x37, &(0x7f0000000880)=""/55}, {0x9000, 0x23, &(0x7f0000000200)=""/35}, {0x80a0000, 0x12, &(0x7f00000008c0)=""/18}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500005e7797e08219c4b2dfd0d3278e4b0000000000ba643938000008000300", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800fa42", @ANYRES16=r5, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) pidfd_send_signal(0xffffffffffffffff, 0x30, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) 2.336459811s ago: executing program 5 (id=8313): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x6, 0x73}, {@remote, 0x4e22, 0x0, 0xcd}}, 0x44) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x0, r3, 0xa}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x44084) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) listen(0xffffffffffffffff, 0xfffffffc) 2.170279801s ago: executing program 5 (id=8314): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x20000081) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) chdir(&(0x7f0000000400)='./file1\x00') write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x40000000) 1.56499617s ago: executing program 1 (id=8315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x80040000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x7}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r1, r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa6994c681001000080046b4002c00000000a3069078ac1414bbac1414aa940400004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.547456498s ago: executing program 3 (id=8316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5) personality(0x0) sched_setattr(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) 1.112437915s ago: executing program 4 (id=8317): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x20000081) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x40100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x40000000) 1.110301833s ago: executing program 5 (id=8318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x108000, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() tkill(r6, 0xb) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) 113.487427ms ago: executing program 4 (id=8319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x48, 0x31, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000420", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) write$UHID_INPUT(r5, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 0s ago: executing program 5 (id=8320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x9}, 0x8) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000002c0)=0x2, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x3}, 0xe) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x33) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) (async, rerun: 32) write$binfmt_misc(r3, &(0x7f0000000300)='-', 0x1) (rerun: 32) splice(r2, 0x0, r5, 0x0, 0xbfd1, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xe}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r6, 0x4}, &(0x7f0000000140)=0x8) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0) (async, rerun: 32) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, 0x0, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r11 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) sendmsg$rds(r11, 0x0, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000408000b20000000000000000200800105000300840000000900010073797a30000000000900010073797a3100000000050003002100000005100300120000000600024000f90000"], 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x40140) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, 0x0, 0x20000081) kernel console output (not intermixed with test programs): es 0 [ 1688.895601][ T2893] CPU: 2 UID: 0 PID: 2893 Comm: syz.0.7896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1688.895632][ T2893] Tainted: [L]=SOFTLOCKUP [ 1688.895639][ T2893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1688.895651][ T2893] Call Trace: [ 1688.895658][ T2893] [ 1688.895666][ T2893] dump_stack_lvl+0x16c/0x1f0 [ 1688.895718][ T2893] should_fail_ex+0x512/0x640 [ 1688.895747][ T2893] ? fs_reclaim_acquire+0xae/0x150 [ 1688.895778][ T2893] should_failslab+0xc2/0x120 [ 1688.895804][ T2893] __kmalloc_noprof+0xeb/0x910 [ 1688.895831][ T2893] ? tomoyo_encode2+0x100/0x3e0 [ 1688.895858][ T2893] ? tomoyo_encode2+0x100/0x3e0 [ 1688.895880][ T2893] tomoyo_encode2+0x100/0x3e0 [ 1688.895905][ T2893] tomoyo_encode+0x29/0x50 [ 1688.895928][ T2893] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1688.895958][ T2893] tomoyo_path_number_perm+0x245/0x580 [ 1688.895979][ T2893] ? tomoyo_path_number_perm+0x237/0x580 [ 1688.896001][ T2893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1688.896043][ T2893] ? find_held_lock+0x2b/0x80 [ 1688.896065][ T2893] ? hook_file_ioctl_common+0x144/0x410 [ 1688.896090][ T2893] ? __fget_files+0x20e/0x3c0 [ 1688.896112][ T2893] ? fput+0x70/0xf0 [ 1688.896133][ T2893] security_file_ioctl_compat+0x9b/0x240 [ 1688.896156][ T2893] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1688.896182][ T2893] __do_fast_syscall_32+0xe8/0x680 [ 1688.896214][ T2893] do_fast_syscall_32+0x32/0x80 [ 1688.896241][ T2893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1688.896263][ T2893] RIP: 0023:0xf70ad579 [ 1688.896277][ T2893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1688.896293][ T2893] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1688.896312][ T2893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045569 [ 1688.896324][ T2893] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1688.896336][ T2893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1688.896347][ T2893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1688.896358][ T2893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.896382][ T2893] [ 1688.896401][ T2893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1689.195175][T30343] hsr_slave_0: left promiscuous mode [ 1689.231030][T30343] hsr_slave_1: left promiscuous mode [ 1689.293044][ T2903] netlink: 'syz.0.7897': attribute type 1 has an invalid length. [ 1689.298977][T30343] veth1_macvtap: left promiscuous mode [ 1689.301674][T30343] veth0_macvtap: left promiscuous mode [ 1689.303938][T30343] veth1_vlan: left promiscuous mode [ 1689.306204][T30343] veth0_vlan: left promiscuous mode [ 1689.409972][ T2908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 1689.416455][ T2908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7897'. [ 1689.892609][ T40] audit: type=1804 audit(1767235705.326:1353): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7898" name="/newroot/238/bus/bus" dev="overlay" ino=1512 res=1 errno=0 [ 1689.921744][ T40] audit: type=1804 audit(1767235705.356:1354): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7898" name="/newroot/238/bus/bus" dev="overlay" ino=1512 res=1 errno=0 [ 1689.936825][ T40] audit: type=1800 audit(1767235705.356:1355): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7898" name="bus" dev="overlay" ino=1512 res=0 errno=0 [ 1690.409606][ T1145] smc: removing ib device syz2 [ 1691.016044][ T40] audit: type=1804 audit(1767235706.446:1356): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7900" name="/newroot/239/bus/bus" dev="overlay" ino=1526 res=1 errno=0 [ 1691.041701][ T40] audit: type=1804 audit(1767235706.446:1357): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7900" name="/newroot/239/bus/bus" dev="overlay" ino=1526 res=1 errno=0 [ 1691.067250][ T40] audit: type=1800 audit(1767235706.446:1358): pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7900" name="bus" dev="overlay" ino=1526 res=0 errno=0 [ 1691.272717][ T2907] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1691.278125][ T2907] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 1691.304100][ T2910] macvlan2: entered promiscuous mode [ 1691.305946][ T2910] macvlan2: entered allmulticast mode [ 1691.309331][ T2910] bond14: entered promiscuous mode [ 1691.317659][ T2910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1691.323821][ T2910] bond14: left promiscuous mode [ 1691.423479][ T2750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1691.433101][ T2750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1691.441881][ T2750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1691.448654][ T2750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1691.566215][ T2750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.580682][ T2750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.588623][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.591428][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.598622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.600798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.658191][T30343] IPVS: stop unused estimator thread 0... [ 1691.861533][ T2750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.955537][ T2941] netlink: 'syz.1.7901': attribute type 1 has an invalid length. [ 1692.008435][ T2941] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1692.013838][ T2941] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1692.071504][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7901'. [ 1692.075493][ T2946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7901'. [ 1692.094455][ T2750] veth0_vlan: entered promiscuous mode [ 1692.102331][ T2750] veth1_vlan: entered promiscuous mode [ 1692.129259][ T2941] macvlan2: entered promiscuous mode [ 1692.132719][ T2941] macvlan2: entered allmulticast mode [ 1692.136046][ T2941] bond9: entered promiscuous mode [ 1692.139346][ T2941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1692.148134][ T2941] bond9: left promiscuous mode [ 1692.176036][ T2750] veth0_macvtap: entered promiscuous mode [ 1692.181895][ T2750] veth1_macvtap: entered promiscuous mode [ 1692.194514][ T2750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.204086][ T2750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1692.215098][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.225424][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.230951][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.236338][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.299924][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.300866][ T1585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.306563][ T1585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.318857][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.864376][ T2969] syz.4.7905: attempt to access beyond end of device [ 1693.864376][ T2969] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1693.881590][ T2969] gfs2: error -5 reading superblock [ 1693.924406][ T2969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7905'. [ 1694.911566][ T40] audit: type=1804 audit(1767235710.346:1359): pid=2997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7908" name="/newroot/2/bus/bus" dev="overlay" ino=36 res=1 errno=0 [ 1694.945471][ T40] audit: type=1804 audit(1767235710.376:1360): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7908" name="/newroot/2/bus/bus" dev="overlay" ino=36 res=1 errno=0 [ 1694.954843][ T40] audit: type=1800 audit(1767235710.376:1361): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7908" name="bus" dev="overlay" ino=36 res=0 errno=0 [ 1696.007137][ T5945] Bluetooth: hci0: command 0x0406 tx timeout [ 1696.209259][ T3021] binder: BINDER_SET_CONTEXT_MGR already set [ 1696.227479][ T3021] binder: 3002:3021 ioctl 4018620d 800002c0 returned -16 [ 1696.889502][ T40] audit: type=1804 audit(1767235711.946:1362): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7913" name="/newroot/126/bus/bus" dev="overlay" ino=822 res=1 errno=0 [ 1696.909521][ T40] audit: type=1804 audit(1767235711.956:1363): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7913" name="/newroot/126/bus/bus" dev="overlay" ino=822 res=1 errno=0 [ 1696.918857][ T40] audit: type=1800 audit(1767235711.956:1364): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7913" name="bus" dev="overlay" ino=822 res=0 errno=0 [ 1697.309927][ T3043] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.312940][ T3043] binder: 3042:3043 ioctl 4018620d 80000240 returned -16 [ 1697.393309][ T40] audit: type=1326 audit(1767235712.826:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3045 comm="syz.4.7920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1697.409658][ T40] audit: type=1326 audit(1767235712.836:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3045 comm="syz.4.7920" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1697.422508][ T40] audit: type=1326 audit(1767235712.836:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3045 comm="syz.4.7920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1697.439545][ T40] audit: type=1326 audit(1767235712.836:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3045 comm="syz.4.7920" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1698.196410][ T3059] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.261946][ T3059] binder: 3042:3059 ioctl 4018620d 800002c0 returned -16 [ 1700.977197][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 1700.977212][ T40] audit: type=1804 audit(1767235716.406:1378): pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7927" name="/newroot/131/bus/bus" dev="overlay" ino=856 res=1 errno=0 [ 1701.029579][ T40] audit: type=1804 audit(1767235716.416:1379): pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7927" name="/newroot/131/bus/bus" dev="overlay" ino=856 res=1 errno=0 [ 1701.038794][ T40] audit: type=1800 audit(1767235716.416:1380): pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7927" name="bus" dev="overlay" ino=856 res=0 errno=0 [ 1701.390861][ T40] audit: type=1804 audit(1767235716.826:1381): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7928" name="/newroot/204/bus/bus" dev="overlay" ino=1301 res=1 errno=0 [ 1701.399707][ T40] audit: type=1804 audit(1767235716.826:1382): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7928" name="/newroot/204/bus/bus" dev="overlay" ino=1301 res=1 errno=0 [ 1701.407180][ T40] audit: type=1800 audit(1767235716.836:1383): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7928" name="bus" dev="overlay" ino=1301 res=0 errno=0 [ 1702.173955][ T40] audit: type=1804 audit(1767235717.566:1384): pid=3107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7930" name="/newroot/244/bus/bus" dev="overlay" ino=1562 res=1 errno=0 [ 1702.188094][ T40] audit: type=1804 audit(1767235717.566:1385): pid=3107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7930" name="/newroot/244/bus/bus" dev="overlay" ino=1562 res=1 errno=0 [ 1702.371245][ T40] audit: type=1800 audit(1767235717.566:1386): pid=3107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7930" name="bus" dev="overlay" ino=1562 res=0 errno=0 [ 1702.378806][ T40] audit: type=1804 audit(1767235717.666:1387): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7931" name="/newroot/8/bus/bus" dev="overlay" ino=84 res=1 errno=0 [ 1703.126152][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7933'. [ 1703.940903][ T3132] netlink: 'syz.3.7937': attribute type 1 has an invalid length. [ 1704.000233][ T3132] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1704.005720][ T3132] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1704.306257][ T3140] macvlan2: entered promiscuous mode [ 1704.308697][ T3140] macvlan2: entered allmulticast mode [ 1704.315234][ T3140] bond6: entered promiscuous mode [ 1704.320680][ T3140] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1704.421754][ T3139] binder: BINDER_SET_CONTEXT_MGR already set [ 1704.426387][ T3139] binder: 3117:3139 ioctl 4018620d 800002c0 returned -16 [ 1704.439248][ T3140] bond6: left promiscuous mode [ 1705.446824][ T3150] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7941'. [ 1705.498467][ T3150] comedi comedi2: comedi_config --init_data is deprecated [ 1705.823802][ T3155] syzkaller0: entered promiscuous mode [ 1705.826924][ T3155] syzkaller0: entered allmulticast mode [ 1705.860020][ T3155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7942'. [ 1705.863536][ T3155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7942'. [ 1706.284539][T21537] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.364956][T21537] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.506128][T21537] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.612997][ T3161] syzkaller0: entered promiscuous mode [ 1706.615384][ T3161] syzkaller0: entered allmulticast mode [ 1706.650375][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1706.650388][ T40] audit: type=1804 audit(1767235722.086:1393): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7946" name="/newroot/249/bus/bus" dev="overlay" ino=1598 res=1 errno=0 [ 1706.672105][T21537] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.681707][ T40] audit: type=1804 audit(1767235722.086:1394): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7946" name="/newroot/249/bus/bus" dev="overlay" ino=1598 res=1 errno=0 [ 1706.689330][ T40] audit: type=1800 audit(1767235722.086:1395): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7946" name="bus" dev="overlay" ino=1598 res=0 errno=0 [ 1707.697312][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1707.743427][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1707.747496][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1707.789843][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1707.796743][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1708.071054][T21537] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1708.580196][ T3178] binder: BINDER_SET_CONTEXT_MGR already set [ 1708.582723][ T3178] binder: 3172:3178 ioctl 4018620d 800002c0 returned -16 [ 1708.900262][T21537] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1708.932879][T21537] bond0 (unregistering): Released all slaves [ 1709.367309][ T40] audit: type=1804 audit(1767235724.796:1396): pid=3192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7952" name="/newroot/136/bus/bus" dev="overlay" ino=891 res=1 errno=0 [ 1709.420273][T21537] bond1 (unregistering): (slave bond2): Releasing active interface [ 1709.599118][ T40] audit: type=1804 audit(1767235724.816:1397): pid=3192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7952" name="/newroot/136/bus/bus" dev="overlay" ino=891 res=1 errno=0 [ 1709.612717][T21537] bond1 (unregistering): Released all slaves [ 1709.620778][ T40] audit: type=1800 audit(1767235724.816:1398): pid=3192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7952" name="bus" dev="overlay" ino=891 res=0 errno=0 [ 1709.929641][T30753] Bluetooth: hci1: command tx timeout [ 1709.940754][T21537] bond2 (unregistering): Released all slaves [ 1710.569783][ T40] audit: type=1804 audit(1767235725.966:1399): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7954" name="/newroot/137/bus/bus" dev="overlay" ino=905 res=1 errno=0 [ 1710.589664][ T40] audit: type=1804 audit(1767235725.966:1400): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7954" name="/newroot/137/bus/bus" dev="overlay" ino=905 res=1 errno=0 [ 1710.599909][ T40] audit: type=1800 audit(1767235725.966:1401): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7954" name="bus" dev="overlay" ino=905 res=0 errno=0 [ 1710.741297][T21537] bond3 (unregistering): Released all slaves [ 1710.744751][ T40] audit: type=1326 audit(1767235726.176:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3208 comm="syz.1.7957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1710.750904][T21537] bond4 (unregistering): Released all slaves [ 1710.886595][T21537] bond5 (unregistering): Released all slaves [ 1710.925258][T21537] bond6 (unregistering): Released all slaves [ 1710.941214][T21537] bond7 (unregistering): Released all slaves [ 1711.009619][ T3213] fuse: Unknown parameter '0x0000000000000008' [ 1711.390610][T21537] bond8 (unregistering): Released all slaves [ 1711.520336][T21537] bond9 (unregistering): Released all slaves [ 1711.701259][T21537] bond10 (unregistering): Released all slaves [ 1711.845753][T21537] bond11 (unregistering): Released all slaves [ 1711.856415][T21537] bond12 (unregistering): Released all slaves [ 1711.866943][T21537] bond13 (unregistering): Released all slaves [ 1711.879173][T21537] bond14 (unregistering): Released all slaves [ 1712.051147][T30753] Bluetooth: hci1: command tx timeout [ 1712.165931][ T3220] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1712.219246][ T3222] comedi comedi0: Minor 47 could not be opened [ 1712.223360][ T3222] netlink: 'syz.3.7959': attribute type 1 has an invalid length. [ 1713.070337][ T3220] /dev/sr0: Can't open blockdev [ 1714.079545][T30753] Bluetooth: hci1: command tx timeout [ 1714.835225][ T3222] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1714.992865][ T3175] chnl_net:caif_netlink_parms(): no params data found [ 1715.200172][ T3253] program syz.4.7964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1715.263700][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.271718][ T3175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.278361][ T3175] bridge_slave_0: entered allmulticast mode [ 1715.287603][ T3175] bridge_slave_0: entered promiscuous mode [ 1715.309865][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.313013][ T3175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.315973][ T3175] bridge_slave_1: entered allmulticast mode [ 1715.319992][ T3175] bridge_slave_1: entered promiscuous mode [ 1715.340677][T21537] hsr_slave_0: left promiscuous mode [ 1715.343108][T21537] hsr_slave_1: left promiscuous mode [ 1715.353490][T21537] veth1_macvtap: left promiscuous mode [ 1715.355364][T21537] veth0_macvtap: left allmulticast mode [ 1715.357194][T21537] veth0_macvtap: left promiscuous mode [ 1715.359132][T21537] veth1_vlan: left promiscuous mode [ 1715.362457][T21537] veth0_vlan: left promiscuous mode [ 1715.439881][T21537] pim6reg (unregistering): left allmulticast mode [ 1715.640432][ T3259] smb3: Unknown parameter 'rdma/swradio#' [ 1715.643067][ T3259] CIFS mount error: No usable UNC path provided in device string! [ 1715.643067][ T3259] [ 1715.647443][ T3259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1715.934354][ T3261] netlink: 'syz.3.7965': attribute type 2 has an invalid length. [ 1715.943551][ T3261] netlink: 532 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1716.032483][ T3265] nvme_fabrics: missing parameter 'transport=%s' [ 1716.035268][ T3265] nvme_fabrics: missing parameter 'nqn=%s' [ 1716.151781][T30753] Bluetooth: hci1: command tx timeout [ 1716.189500][ T7455] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1716.201936][T17483] infiniband syz0: ib_query_port failed (-19) [ 1716.251657][ T3175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.274331][ T3175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.305243][ T3175] team0: Port device team_slave_0 added [ 1716.310619][ T3175] team0: Port device team_slave_1 added [ 1716.339231][ T3175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.342847][ T3175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.349582][ T7455] usb 6-1: Using ep0 maxpacket: 8 [ 1716.354648][ T3175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.360484][ T7455] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1716.364546][ T7455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1716.366590][ T3175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.377426][ T7455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1716.379591][ T3175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.390723][ T7455] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1716.396869][ T7455] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1716.407625][ T7455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.409579][ T3175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.460474][ T3175] hsr_slave_0: entered promiscuous mode [ 1716.463660][ T3175] hsr_slave_1: entered promiscuous mode [ 1716.581893][ T3282] syz.4.7969: attempt to access beyond end of device [ 1716.581893][ T3282] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1716.587936][ T3282] gfs2: error -5 reading superblock [ 1716.600508][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7969'. [ 1716.636661][ T7455] usb 6-1: GET_CAPABILITIES returned 0 [ 1716.638591][ T7455] usbtmc 6-1:16.0: can't read capabilities [ 1716.724905][ T3292] fuse: Unknown parameter '0x0000000000000008' [ 1716.939965][ T3296] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1717.002129][ T3297] comedi comedi0: Minor 47 could not be opened [ 1717.010014][ T3297] netlink: 'syz.4.7971': attribute type 1 has an invalid length. [ 1717.481725][ T7455] usb 6-1: USB disconnect, device number 100 [ 1717.530433][ T3296] /dev/sr0: Can't open blockdev [ 1717.560757][ T3175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1717.579808][ T3175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1717.585566][ T3175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1717.602550][ T3175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1717.811390][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.820164][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 1717.820175][ T40] audit: type=1804 audit(1767235733.256:1411): pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7972" name="/newroot/143/bus/bus" dev="overlay" ino=946 res=1 errno=0 [ 1717.828341][ T3175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.849842][ T40] audit: type=1804 audit(1767235733.266:1412): pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7972" name="/newroot/143/bus/bus" dev="overlay" ino=946 res=1 errno=0 [ 1717.857911][ T40] audit: type=1800 audit(1767235733.266:1413): pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7972" name="bus" dev="overlay" ino=946 res=0 errno=0 [ 1717.913690][T21537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.916442][T21537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.935335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.938121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.010356][ T3175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1718.157987][ T3175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.337691][ T3175] veth0_vlan: entered promiscuous mode [ 1718.343462][ T3175] veth1_vlan: entered promiscuous mode [ 1718.361256][ T3175] veth0_macvtap: entered promiscuous mode [ 1718.365983][ T3175] veth1_macvtap: entered promiscuous mode [ 1718.377003][ T3175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.383972][ T3175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.390906][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.394923][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.399716][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.404810][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.458172][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.462555][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.487875][ T3193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.491761][ T3193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.653646][ T3339] syz.1.7975: attempt to access beyond end of device [ 1718.653646][ T3339] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1718.658787][ T3339] gfs2: error -5 reading superblock [ 1718.664815][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1718.756979][ T3347] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1718.762186][ T3347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1718.818297][ T3349] fuse: Unknown parameter '0x0000000000000008' [ 1718.859491][ T3347] hsr_slave_1 (unregistering): left promiscuous mode [ 1719.269956][ T3355] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7976'. [ 1719.290305][ T3355] fuse: Bad value for 'rootmode' [ 1719.674640][ T3361] fuse: Unknown parameter 'grou00000000000000000000' [ 1720.184382][ T40] audit: type=1804 audit(1767235735.576:1414): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7981" name="/newroot/263/bus/bus" dev="overlay" ino=1681 res=1 errno=0 [ 1720.256795][ T40] audit: type=1804 audit(1767235735.576:1415): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7981" name="/newroot/263/bus/bus" dev="overlay" ino=1681 res=1 errno=0 [ 1720.269630][ T40] audit: type=1800 audit(1767235735.576:1416): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7981" name="bus" dev="overlay" ino=1681 res=0 errno=0 [ 1720.324345][ T3369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7983'. [ 1720.521858][ T40] audit: type=1804 audit(1767235735.946:1417): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7982" name="/newroot/18/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 1720.532645][ T40] audit: type=1804 audit(1767235735.946:1418): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7982" name="/newroot/18/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 1720.539588][ T40] audit: type=1800 audit(1767235735.946:1419): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7982" name="bus" dev="overlay" ino=155 res=0 errno=0 [ 1720.932602][ T3383] syz.1.7986: attempt to access beyond end of device [ 1720.932602][ T3383] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1720.936989][ T3383] gfs2: error -5 reading superblock [ 1720.943299][ T3383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7986'. [ 1721.134717][ T40] audit: type=1804 audit(1767235736.546:1420): pid=3388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7987" name="/newroot/265/bus/bus" dev="overlay" ino=1700 res=1 errno=0 [ 1721.388407][ T3390] fuse: Unknown parameter '0x0000000000000008' [ 1721.638716][ T3397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1722.708997][ T3417] program syz.4.7993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1722.767464][ T3410] infiniband syz1: set active [ 1722.771154][ T3410] infiniband syz1: added syz_tun [ 1722.931267][ T3410] RDS/IB: syz1: added [ 1722.933350][ T3410] smc: adding ib device syz1 with port count 1 [ 1722.936050][ T3410] smc: ib device syz1 port 1 has no pnetid [ 1723.060080][ T3413] smb3: Unknown parameter 'rdma/swradio#' [ 1723.062287][ T3413] CIFS mount error: No usable UNC path provided in device string! [ 1723.062287][ T3413] [ 1723.065650][ T3413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1723.366527][ T3441] syz.4.7998: attempt to access beyond end of device [ 1723.366527][ T3441] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1723.372182][ T3441] gfs2: error -5 reading superblock [ 1723.379969][ T3441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7998'. [ 1723.499267][ T3446] syz.4.7999: attempt to access beyond end of device [ 1723.499267][ T3446] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1723.505417][ T3446] gfs2: error -5 reading superblock [ 1723.514861][ T3446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 1724.424405][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1724.424423][ T40] audit: type=1804 audit(1767235739.856:1426): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8010" name="/newroot/271/bus/bus" dev="overlay" ino=1749 res=1 errno=0 [ 1724.554565][ T40] audit: type=1804 audit(1767235739.986:1427): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8010" name="/newroot/271/bus/bus" dev="overlay" ino=1749 res=1 errno=0 [ 1724.563957][ T40] audit: type=1800 audit(1767235739.996:1428): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8010" name="bus" dev="overlay" ino=1749 res=0 errno=0 [ 1725.364465][ T3502] syz.5.8014: attempt to access beyond end of device [ 1725.364465][ T3502] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1725.369680][ T3502] gfs2: error -5 reading superblock [ 1725.376257][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8014'. [ 1725.543437][ T3485] binder: BINDER_SET_CONTEXT_MGR already set [ 1725.549781][ T3485] binder: 3478:3485 ioctl 4018620d 800002c0 returned -16 [ 1727.308260][ T3532] binder: BINDER_SET_CONTEXT_MGR already set [ 1727.318513][ T3532] binder: 3521:3532 ioctl 4018620d 800002c0 returned -16 [ 1728.317486][ T40] audit: type=1804 audit(1767235743.746:1429): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8024" name="/newroot/17/bus/bus" dev="overlay" ino=113 res=1 errno=0 [ 1728.360558][ T40] audit: type=1804 audit(1767235743.756:1430): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8024" name="/newroot/17/bus/bus" dev="overlay" ino=113 res=1 errno=0 [ 1728.373111][ T40] audit: type=1800 audit(1767235743.756:1431): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8024" name="bus" dev="overlay" ino=113 res=0 errno=0 [ 1728.432047][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1728.596827][ T3569] ªªªªª»: renamed from hsr0 (while UP) [ 1730.624339][ T3629] netlink: 'syz.4.8035': attribute type 1 has an invalid length. [ 1730.654048][ T3629] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1730.658265][ T3629] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1730.700245][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1730.725437][ T3629] bond1: (slave gretap1): making interface the new active one [ 1730.728766][ T3629] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1730.739521][ T3629] macvlan2: entered promiscuous mode [ 1730.741444][ T3629] macvlan2: entered allmulticast mode [ 1730.743973][ T3629] bond1: entered promiscuous mode [ 1730.746540][ T3629] gretap1: entered promiscuous mode [ 1730.750264][ T3629] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1730.763391][ T3629] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1730.770900][ T3629] bond1: left promiscuous mode [ 1730.773706][ T3629] gretap1: left promiscuous mode [ 1731.098624][ T40] audit: type=1804 audit(1767235746.526:1432): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8036" name="/newroot/20/bus/bus" dev="overlay" ino=137 res=1 errno=0 [ 1731.106539][ T40] audit: type=1804 audit(1767235746.536:1433): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8036" name="/newroot/20/bus/bus" dev="overlay" ino=137 res=1 errno=0 [ 1731.115868][ T40] audit: type=1800 audit(1767235746.536:1434): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8036" name="bus" dev="overlay" ino=137 res=0 errno=0 [ 1732.219580][ T5982] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1732.391061][ T5982] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1732.395840][ T5982] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1732.399851][ T5982] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1732.403073][ T5982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.409351][ T3645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1732.413497][ T3645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1732.417981][ T5982] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1732.509489][T20959] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1732.637020][ T143] usb 10-1: USB disconnect, device number 2 [ 1732.661718][T20959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.665661][T20959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.668844][T20959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1732.673675][T20959] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1732.677626][T20959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.684253][T20959] usb 6-1: config 0 descriptor?? [ 1732.851129][ T3644] tmpfs: Unknown parameter 'nüol' [ 1733.108570][T20959] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1733.362465][ T5982] usb 6-1: USB disconnect, device number 101 [ 1733.732456][ T3664] fuse: Unknown parameter 'grou00000000000000000000' [ 1734.636051][ T3676] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1734.795681][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8049'. [ 1734.798989][ T3682] bridge_slave_1: left allmulticast mode [ 1734.801178][ T3682] bridge_slave_1: left promiscuous mode [ 1734.803224][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.807926][ T3682] bridge_slave_0: left allmulticast mode [ 1734.810612][ T3682] bridge_slave_0: left promiscuous mode [ 1734.812637][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.872571][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.296702][ T3698] netlink: 'syz.3.8051': attribute type 1 has an invalid length. [ 1735.392280][ T3698] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1735.397546][ T3698] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1735.435936][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1735.502041][ T3702] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1735.504508][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1735.507580][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 1735.521699][ T3698] macvlan2: entered promiscuous mode [ 1735.521715][ T3698] macvlan2: entered allmulticast mode [ 1735.528384][ T3698] bond7: entered promiscuous mode [ 1735.539043][ T3698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1735.544111][ T3698] bond7: left promiscuous mode [ 1735.742050][ T40] audit: type=1804 audit(1767235751.176:1435): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8054" name="/newroot/27/bus/bus" dev="overlay" ino=183 res=1 errno=0 [ 1735.759736][ T40] audit: type=1804 audit(1767235751.176:1436): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8054" name="/newroot/27/bus/bus" dev="overlay" ino=183 res=1 errno=0 [ 1735.770964][ T40] audit: type=1800 audit(1767235751.176:1437): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8054" name="bus" dev="overlay" ino=183 res=0 errno=0 [ 1735.917798][ T143] usb 46-1: SetAddress Request (38) to port 0 [ 1735.925274][ T143] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1736.257896][ T3703] vhci_hcd: connection reset by peer [ 1736.260343][ T1145] vhci_hcd vhci_hcd.4: stop threads [ 1736.262316][ T1145] vhci_hcd vhci_hcd.4: release socket [ 1736.264487][ T1145] vhci_hcd vhci_hcd.4: disconnect device [ 1736.490375][ T40] audit: type=1326 audit(1767235751.926:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1736.502015][ T40] audit: type=1326 audit(1767235751.926:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1736.510364][ T40] audit: type=1326 audit(1767235751.926:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1736.519247][ T40] audit: type=1326 audit(1767235751.926:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1736.528070][ T40] audit: type=1326 audit(1767235751.926:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1736.536471][ T40] audit: type=1326 audit(1767235751.926:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3717 comm="syz.5.8056" exe="/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1737.036997][ T3725] FAULT_INJECTION: forcing a failure. [ 1737.036997][ T3725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.042866][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.1.8059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1737.042894][ T3725] Tainted: [L]=SOFTLOCKUP [ 1737.042901][ T3725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1737.042912][ T3725] Call Trace: [ 1737.042918][ T3725] [ 1737.042925][ T3725] dump_stack_lvl+0x16c/0x1f0 [ 1737.042954][ T3725] should_fail_ex+0x512/0x640 [ 1737.042979][ T3725] _copy_from_user+0x2e/0xd0 [ 1737.042998][ T3725] get_compat_msghdr+0xa7/0x170 [ 1737.043020][ T3725] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1737.043044][ T3725] ? __lock_acquire+0x436/0x2890 [ 1737.043066][ T3725] ___sys_recvmsg+0x191/0x1a0 [ 1737.043089][ T3725] ? __pfx____sys_recvmsg+0x10/0x10 [ 1737.043112][ T3725] ? find_held_lock+0x2b/0x80 [ 1737.043142][ T3725] ? __pfx___might_resched+0x10/0x10 [ 1737.043171][ T3725] do_recvmmsg+0x55d/0x750 [ 1737.043194][ T3725] ? __pfx_do_recvmmsg+0x10/0x10 [ 1737.043231][ T3725] ? __fget_files+0x20e/0x3c0 [ 1737.043260][ T3725] __sys_recvmmsg+0x21c/0x280 [ 1737.043282][ T3725] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1737.043306][ T3725] ? __pfx_ksys_write+0x10/0x10 [ 1737.043333][ T3725] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1737.043356][ T3725] ? __do_fast_syscall_32+0x9a/0x680 [ 1737.043382][ T3725] ? lockdep_hardirqs_on+0x7c/0x110 [ 1737.043406][ T3725] __do_fast_syscall_32+0xe8/0x680 [ 1737.043434][ T3725] do_fast_syscall_32+0x32/0x80 [ 1737.043459][ T3725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1737.043480][ T3725] RIP: 0023:0xf70ed579 [ 1737.043494][ T3725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1737.043511][ T3725] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1737.043529][ T3725] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004400 [ 1737.043540][ T3725] RDX: 00000000fffffff2 RSI: 0000000006000000 RDI: 0000000000000000 [ 1737.043551][ T3725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1737.043561][ T3725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1737.043570][ T3725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.043593][ T3725] [ 1738.139543][ T40] audit: type=1804 audit(1767235753.496:1444): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8063" name="/newroot/37/bus/bus" dev="overlay" ino=276 res=1 errno=0 [ 1738.146735][ T40] audit: type=1804 audit(1767235753.506:1445): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8063" name="/newroot/37/bus/bus" dev="overlay" ino=276 res=1 errno=0 [ 1738.153979][ T40] audit: type=1800 audit(1767235753.506:1446): pid=3743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8063" name="bus" dev="overlay" ino=276 res=0 errno=0 [ 1738.385285][ T3744] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1738.436431][ T3745] comedi comedi0: Minor 47 could not be opened [ 1738.440199][ T3745] netlink: 'syz.5.8062': attribute type 1 has an invalid length. [ 1738.534299][ T3745] bond1: entered promiscuous mode [ 1738.537035][ T3745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1738.621174][ T3744] /dev/sr0: Can't open blockdev [ 1738.877645][ T3755] fuse: Unknown parameter '0x0000000000000008' [ 1739.000635][ T3758] Sensor A: ================= START STATUS ================= [ 1739.003291][ T3758] Sensor A: Test Pattern: 75% Colorbar [ 1739.008065][ T3758] Sensor A: Show Information: All [ 1739.011218][ T3758] Sensor A: Vertical Flip: false [ 1739.013168][ T3758] Sensor A: Horizontal Flip: false [ 1739.014938][ T3758] Sensor A: Brightness: 128 [ 1739.016469][ T3758] Sensor A: Contrast: 128 [ 1739.018155][ T3758] Sensor A: Hue: 0 [ 1739.020430][ T3758] Sensor A: Saturation: 128 [ 1739.021982][ T3758] Sensor A: ================== END STATUS ================== [ 1739.035138][ T3758] syz_tun: entered allmulticast mode [ 1739.069677][ T58] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1739.231684][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.240299][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.246308][ T58] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1739.252820][ T58] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1739.256961][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.266498][ T58] usb 9-1: config 0 descriptor?? [ 1739.781775][ T3778] Invalid/unusable pipe [ 1739.850342][ T3781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1739.884530][ T58] usbhid 9-1:0.0: can't add hid device: -71 [ 1739.887271][ T58] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1739.891556][ T58] usb 9-1: USB disconnect, device number 81 [ 1740.401831][ T3794] [U] ÿ [ 1740.699999][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.702643][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.705662][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.708108][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.189472][ T40] audit: type=1804 audit(1767235756.506:1447): pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8074" name="/newroot/291/bus/bus" dev="tmpfs" ino=1859 res=1 errno=0 [ 1741.208064][ T143] usb 46-1: device descriptor read/8, error -110 [ 1741.403274][ T3802] fuse: Unknown parameter '0x0000000000000008' [ 1741.600117][ T143] usb usb46-port1: attempt power cycle [ 1741.787683][ T3822] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1742.168317][ T3829] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.182153][ T3829] binder: 3814:3829 ioctl 4018620d 800002c0 returned -16 [ 1742.263951][ T143] usb usb46-port1: unable to enumerate USB device [ 1742.777695][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8086'. [ 1743.743115][ T3852] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 1744.373795][ T3883] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1744.398661][ T3882] binder: BINDER_SET_CONTEXT_MGR already set [ 1744.404949][ T3882] binder: 3863:3882 ioctl 4018620d 800002c0 returned -16 [ 1744.434534][ T3884] netlink: 'syz.5.8094': attribute type 1 has an invalid length. [ 1745.009745][ T3884] bond2: entered promiscuous mode [ 1745.011929][ T3884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1745.160532][ T3883] /dev/sr0: Can't open blockdev [ 1746.732461][ T3910] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.736425][ T3910] binder: 3909:3910 ioctl 4018620d 80000240 returned -16 [ 1746.879134][ T3871] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.884568][ T3871] binder: 3868:3871 ioctl 4018620d 800002c0 returned -16 [ 1747.498360][ T40] audit: type=1804 audit(1767235762.876:1448): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8098" name="/newroot/39/bus/bus" dev="overlay" ino=255 res=1 errno=0 [ 1747.508622][ T40] audit: type=1804 audit(1767235762.876:1449): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8098" name="/newroot/39/bus/bus" dev="overlay" ino=255 res=1 errno=0 [ 1747.529468][ T40] audit: type=1800 audit(1767235762.876:1450): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8098" name="bus" dev="overlay" ino=255 res=0 errno=0 [ 1747.776329][ T3928] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.778643][ T3928] binder: 3909:3928 ioctl 4018620d 800002c0 returned -16 [ 1748.231971][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1749.689953][ T40] audit: type=1804 audit(1767235765.126:1451): pid=3956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8107" name="/newroot/300/bus/bus" dev="overlay" ino=1920 res=1 errno=0 [ 1749.697266][ T40] audit: type=1804 audit(1767235765.126:1452): pid=3956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8107" name="/newroot/300/bus/bus" dev="overlay" ino=1920 res=1 errno=0 [ 1749.715379][ T40] audit: type=1800 audit(1767235765.126:1453): pid=3956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8107" name="bus" dev="overlay" ino=1920 res=0 errno=0 [ 1749.889805][ T3962] binder: BINDER_SET_CONTEXT_MGR already set [ 1749.892160][ T3962] binder: 3952:3962 ioctl 4018620d 800002c0 returned -16 [ 1749.989664][ T3965] syz.3.8109: attempt to access beyond end of device [ 1749.989664][ T3965] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1750.029539][ T3965] gfs2: error -5 reading superblock [ 1750.071418][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8109'. [ 1750.381792][ T3973] Cannot find del_set index 1 as target [ 1751.400778][ T3991] fuse: Bad value for 'fd' [ 1751.496911][ T40] audit: type=1804 audit(1767235766.906:1454): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8114" name="/newroot/169/bus/bus" dev="overlay" ino=1088 res=1 errno=0 [ 1751.509630][ T40] audit: type=1804 audit(1767235766.916:1455): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8114" name="/newroot/169/bus/bus" dev="overlay" ino=1088 res=1 errno=0 [ 1751.532043][ T40] audit: type=1800 audit(1767235766.926:1456): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8114" name="bus" dev="overlay" ino=1088 res=0 errno=0 [ 1752.725308][ T40] audit: type=1804 audit(1767235768.156:1457): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8117" name="/newroot/44/bus/bus" dev="overlay" ino=291 res=1 errno=0 [ 1752.745366][ T40] audit: type=1804 audit(1767235768.156:1458): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8117" name="/newroot/44/bus/bus" dev="overlay" ino=291 res=1 errno=0 [ 1752.761724][ T4008] syz.3.8118: attempt to access beyond end of device [ 1752.761724][ T4008] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1752.762236][ T40] audit: type=1800 audit(1767235768.156:1459): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8117" name="bus" dev="overlay" ino=291 res=0 errno=0 [ 1752.767328][ T4008] gfs2: error -5 reading superblock [ 1752.795240][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1753.200429][ T4001] binder: BINDER_SET_CONTEXT_MGR already set [ 1753.210862][ T4001] binder: 3993:4001 ioctl 4018620d 800002c0 returned -16 [ 1753.664076][ T4019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8119'. [ 1753.754355][ T4020] netlink: 'syz.3.8119': attribute type 10 has an invalid length. [ 1753.767085][ T4020] netlink: 'syz.3.8119': attribute type 10 has an invalid length. [ 1754.176515][ T4022] Bluetooth: MGMT ver 1.23 [ 1754.361617][ T4028] FAULT_INJECTION: forcing a failure. [ 1754.361617][ T4028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.367307][ T4028] CPU: 3 UID: 0 PID: 4028 Comm: syz.3.8122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.367335][ T4028] Tainted: [L]=SOFTLOCKUP [ 1754.367340][ T4028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1754.367350][ T4028] Call Trace: [ 1754.367357][ T4028] [ 1754.367363][ T4028] dump_stack_lvl+0x16c/0x1f0 [ 1754.367393][ T4028] should_fail_ex+0x512/0x640 [ 1754.367415][ T4028] _copy_from_iter+0x2a4/0x16c0 [ 1754.367439][ T4028] ? __alloc_skb+0x220/0x410 [ 1754.367457][ T4028] ? __alloc_skb+0x35d/0x410 [ 1754.367476][ T4028] ? __pfx__copy_from_iter+0x10/0x10 [ 1754.367494][ T4028] ? netlink_autobind.isra.0+0x158/0x370 [ 1754.367536][ T4028] netlink_sendmsg+0x820/0xdd0 [ 1754.367567][ T4028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1754.367595][ T4028] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1754.367628][ T4028] ____sys_sendmsg+0xa5d/0xc30 [ 1754.367658][ T4028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1754.367685][ T4028] ? get_compat_msghdr+0x11a/0x170 [ 1754.367719][ T4028] ___sys_sendmsg+0x134/0x1d0 [ 1754.367743][ T4028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1754.367774][ T4028] ? find_held_lock+0x2b/0x80 [ 1754.367814][ T4028] __sys_sendmsg+0x16d/0x220 [ 1754.367838][ T4028] ? __pfx___sys_sendmsg+0x10/0x10 [ 1754.367871][ T4028] ? do_user_addr_fault+0x843/0x1370 [ 1754.367897][ T4028] __do_fast_syscall_32+0xe8/0x680 [ 1754.367928][ T4028] do_fast_syscall_32+0x32/0x80 [ 1754.367956][ T4028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.367979][ T4028] RIP: 0023:0xf7f86579 [ 1754.367994][ T4028] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1754.368011][ T4028] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1754.368031][ T4028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1754.368043][ T4028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.368053][ T4028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.368064][ T4028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1754.368075][ T4028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.368099][ T4028] [ 1754.512708][ T4029] pimreg: entered allmulticast mode [ 1754.517497][ T4029] pimreg: left allmulticast mode [ 1754.761761][ T143] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1754.977360][ T4036] syzkaller0: entered promiscuous mode [ 1755.069531][ T143] usb 6-1: Using ep0 maxpacket: 32 [ 1755.073430][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.078143][ T143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.082941][ T143] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1755.086908][ T143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.093666][ T143] usb 6-1: config 0 descriptor?? [ 1755.600371][ T143] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1755.616568][ T4051] netlink: 'syz.3.8128': attribute type 1 has an invalid length. [ 1755.675874][ T4051] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1755.690119][ T4051] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1755.786328][ T4054] macvlan2: entered promiscuous mode [ 1755.788687][ T4054] macvlan2: entered allmulticast mode [ 1755.792407][ T4054] bond8: entered promiscuous mode [ 1755.831221][ T4054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1755.836724][ T4054] bond8: left promiscuous mode [ 1756.035592][ T4043] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.041909][ T4043] binder: 4037:4043 ioctl 4018620d 800002c0 returned -16 [ 1756.049940][ T4057] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.058752][ T4057] binder: 4041:4057 ioctl 4018620d 800002c0 returned -16 [ 1756.083311][T30716] usb 6-1: USB disconnect, device number 102 [ 1756.229536][T30753] Bluetooth: hci0: command 0x0406 tx timeout [ 1757.562285][ T40] audit: type=1804 audit(1767235772.526:1460): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8129" name="/newroot/305/bus/bus" dev="overlay" ino=1956 res=1 errno=0 [ 1757.604712][ T40] audit: type=1804 audit(1767235772.546:1461): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8129" name="/newroot/305/bus/bus" dev="overlay" ino=1956 res=1 errno=0 [ 1757.629749][ T40] audit: type=1800 audit(1767235772.546:1462): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8129" name="bus" dev="overlay" ino=1956 res=0 errno=0 [ 1758.283722][ T40] audit: type=1326 audit(1767235773.716:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.291987][ T40] audit: type=1326 audit(1767235773.716:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.300388][ T40] audit: type=1326 audit(1767235773.726:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.308042][ T40] audit: type=1326 audit(1767235773.726:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.316588][ T40] audit: type=1326 audit(1767235773.726:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.324521][ T40] audit: type=1326 audit(1767235773.746:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.331951][ T40] audit: type=1326 audit(1767235773.746:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.339006][ T40] audit: type=1326 audit(1767235773.746:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.340963][ T4075] smc: net device lo applied user defined pnetid SYZ2 [ 1758.347236][ T40] audit: type=1326 audit(1767235773.756:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.363204][ T40] audit: type=1326 audit(1767235773.756:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1758.773684][ T4085] FAULT_INJECTION: forcing a failure. [ 1758.773684][ T4085] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.778578][ T4085] CPU: 0 UID: 0 PID: 4085 Comm: syz.5.8138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.778600][ T4085] Tainted: [L]=SOFTLOCKUP [ 1758.778604][ T4085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1758.778613][ T4085] Call Trace: [ 1758.778619][ T4085] [ 1758.778625][ T4085] dump_stack_lvl+0x16c/0x1f0 [ 1758.778650][ T4085] should_fail_ex+0x512/0x640 [ 1758.778665][ T4085] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1758.778682][ T4085] should_failslab+0xc2/0x120 [ 1758.778702][ T4085] __kmalloc_cache_noprof+0x80/0x800 [ 1758.778716][ T4085] ? sctp_association_new+0xbb/0x29d0 [ 1758.778733][ T4085] ? sctp_association_new+0xbb/0x29d0 [ 1758.778744][ T4085] sctp_association_new+0xbb/0x29d0 [ 1758.778758][ T4085] ? sctp_v4_scope+0x171/0x1a0 [ 1758.778775][ T4085] sctp_connect_new_asoc+0x1a8/0x770 [ 1758.778791][ T4085] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1758.778806][ T4085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1758.778827][ T4085] sctp_sendmsg+0x157c/0x1e20 [ 1758.778852][ T4085] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1758.778869][ T4085] ? __pfx___might_resched+0x10/0x10 [ 1758.778902][ T4085] ? aa_sk_perm+0x2f2/0xae0 [ 1758.778929][ T4085] ? __pfx_aa_sk_perm+0x10/0x10 [ 1758.778951][ T4085] ? __might_fault+0xe3/0x190 [ 1758.778982][ T4085] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1758.778998][ T4085] inet_sendmsg+0x11c/0x140 [ 1758.779014][ T4085] __sys_sendto+0x43c/0x520 [ 1758.779097][ T4085] ? __pfx___sys_sendto+0x10/0x10 [ 1758.779131][ T4085] ? ksys_write+0x1ac/0x250 [ 1758.779149][ T4085] ? __pfx_ksys_write+0x10/0x10 [ 1758.779168][ T4085] __ia32_sys_sendto+0xdd/0x1b0 [ 1758.779181][ T4085] ? __do_fast_syscall_32+0x9a/0x680 [ 1758.779201][ T4085] ? lockdep_hardirqs_on+0x7c/0x110 [ 1758.779218][ T4085] __do_fast_syscall_32+0xe8/0x680 [ 1758.779238][ T4085] do_fast_syscall_32+0x32/0x80 [ 1758.779260][ T4085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1758.779275][ T4085] RIP: 0023:0xf708d579 [ 1758.779285][ T4085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1758.779297][ T4085] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1758.779309][ T4085] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 1758.779317][ T4085] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000080000000 [ 1758.779324][ T4085] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1758.779331][ T4085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1758.779338][ T4085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.779353][ T4085] [ 1759.001000][ T4083] binder: BINDER_SET_CONTEXT_MGR already set [ 1759.003195][ T4083] binder: 4077:4083 ioctl 4018620d 800002c0 returned -16 [ 1760.619607][ T4114] program syz.1.8145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1760.810962][ T4110] smb3: Unknown parameter 'rdma/swradio#' [ 1760.813568][ T4110] CIFS mount error: No usable UNC path provided in device string! [ 1760.813568][ T4110] [ 1760.817441][ T4110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1760.829714][ T143] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1761.031793][ T143] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1761.035800][ T143] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.040668][ T143] usb 10-1: Product: syz [ 1761.042600][ T143] usb 10-1: Manufacturer: syz [ 1761.044853][ T143] usb 10-1: SerialNumber: syz [ 1761.057274][ T143] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1761.094318][ T143] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1761.247740][ T4128] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1761.324988][ T4131] comedi comedi0: Minor 47 could not be opened [ 1761.334005][ T4131] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 1761.433913][ T4131] bond10: entered promiscuous mode [ 1761.438216][ T4131] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1761.559574][ T4128] /dev/sr0: Can't open blockdev [ 1761.562128][T14611] usb 10-1: USB disconnect, device number 3 [ 1761.704862][ T4137] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1762.149504][ T143] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1762.153070][ T143] ath9k_htc: Failed to initialize the device [ 1762.156531][T14611] usb 10-1: ath9k_htc: USB layer deinitialized [ 1762.731276][ T4145] lo speed is unknown, defaulting to 1000 [ 1762.734318][ T4145] lo speed is unknown, defaulting to 1000 [ 1762.736813][ T4145] lo speed is unknown, defaulting to 1000 [ 1762.814047][ T4145] infiniband syz0: set active [ 1762.816828][T30716] lo speed is unknown, defaulting to 1000 [ 1762.818926][ T4145] infiniband syz0: added lo [ 1762.841181][ T4145] RDS/IB: syz0: added [ 1762.842628][ T4145] smc: adding ib device syz0 with port count 1 [ 1762.844728][ T4145] smc: ib device syz0 port 1 has no pnetid [ 1762.848078][T30716] lo speed is unknown, defaulting to 1000 [ 1762.850863][ T4145] lo speed is unknown, defaulting to 1000 [ 1762.948993][ T4145] lo speed is unknown, defaulting to 1000 [ 1763.131045][ T4145] lo speed is unknown, defaulting to 1000 [ 1763.218741][ T4145] lo speed is unknown, defaulting to 1000 [ 1763.682459][ T4145] lo speed is unknown, defaulting to 1000 [ 1763.978452][ T4159] syz.1.8155: attempt to access beyond end of device [ 1763.978452][ T4159] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1763.983898][ T4159] gfs2: error -5 reading superblock [ 1764.324590][ T4172] fuse: Bad value for 'fd' [ 1765.201396][ T4180] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1766.130551][ T4196] syz.4.8165: attempt to access beyond end of device [ 1766.130551][ T4196] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1766.135203][ T4196] gfs2: error -5 reading superblock [ 1766.213405][ T4199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1766.216382][ T4199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1766.219310][ T4199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1766.221656][ T4199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1766.224535][ T4199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1766.226883][ T4199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1766.229479][ T4199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1766.231876][ T4199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1766.234283][ T4199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1766.236471][ T4199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1766.553349][ T4210] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1766.622296][ T4212] netlink: 'syz.4.8169': attribute type 1 has an invalid length. [ 1766.769193][ T4212] bond2: entered promiscuous mode [ 1766.771776][ T4212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1766.900210][ T4210] /dev/sr0: Can't open blockdev [ 1767.546783][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 1767.546800][ T40] audit: type=1804 audit(1767235782.976:1493): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8171" name="/newroot/181/bus/bus" dev="overlay" ino=1159 res=1 errno=0 [ 1767.557411][ T40] audit: type=1804 audit(1767235782.976:1494): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8171" name="/newroot/181/bus/bus" dev="overlay" ino=1159 res=1 errno=0 [ 1767.675341][ T40] audit: type=1800 audit(1767235783.106:1495): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8171" name="bus" dev="overlay" ino=1159 res=0 errno=0 [ 1768.425361][ T4235] syz.1.8176: attempt to access beyond end of device [ 1768.425361][ T4235] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1768.431508][ T4235] gfs2: error -5 reading superblock [ 1768.767501][ T4246] binder: BINDER_SET_CONTEXT_MGR already set [ 1768.772130][ T4246] binder: 4232:4246 ioctl 4018620d 800002c0 returned -16 [ 1769.218532][ T4247] ceph: No mds server is up or the cluster is laggy [ 1769.314372][T20959] libceph: connect (1)[c::]:6789 error -101 [ 1769.323959][T20959] libceph: mon0 (1)[c::]:6789 connect error [ 1769.419555][ T40] audit: type=1804 audit(1767235784.816:1496): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8179" name="/newroot/63/bus/bus" dev="overlay" ino=439 res=1 errno=0 [ 1769.434384][ T40] audit: type=1804 audit(1767235784.826:1497): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8179" name="/newroot/63/bus/bus" dev="overlay" ino=439 res=1 errno=0 [ 1769.447274][ T40] audit: type=1800 audit(1767235784.826:1498): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8179" name="bus" dev="overlay" ino=439 res=0 errno=0 [ 1769.714428][ T4255] binder: BINDER_SET_CONTEXT_MGR already set [ 1769.727720][ T4255] binder: 4237:4255 ioctl 4018620d 800002c0 returned -16 [ 1769.754378][ T4261] netlink: 'syz.1.8180': attribute type 1 has an invalid length. [ 1769.883134][ T4263] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1769.887375][ T4263] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1770.072053][ T4261] macvlan2: entered promiscuous mode [ 1770.074054][ T4261] macvlan2: entered allmulticast mode [ 1770.129819][ T4261] bond11: entered promiscuous mode [ 1770.135628][ T4261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1770.344249][ T4261] bond11: left promiscuous mode [ 1770.412914][ T4268] binder: 4267:4268 ioctl c0306201 80000c80 returned -14 [ 1770.488956][ T4271] overlayfs: failed to resolve './file1': -2 [ 1770.539855][ T40] audit: type=1804 audit(1767235785.976:1499): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8181" name="/newroot/61/bus/bus" dev="overlay" ino=388 res=1 errno=0 [ 1770.554680][ T40] audit: type=1804 audit(1767235785.986:1500): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8181" name="/newroot/61/bus/bus" dev="overlay" ino=388 res=1 errno=0 [ 1770.565462][ T40] audit: type=1800 audit(1767235785.986:1501): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8181" name="bus" dev="overlay" ino=388 res=0 errno=0 [ 1770.929211][ T6008] lo speed is unknown, defaulting to 1000 [ 1772.468773][ T4289] ceph: No mds server is up or the cluster is laggy [ 1772.473785][T20959] libceph: connect (1)[c::]:6789 error -101 [ 1772.478409][T20959] libceph: mon0 (1)[c::]:6789 connect error [ 1772.765571][ T4296] FAULT_INJECTION: forcing a failure. [ 1772.765571][ T4296] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.770929][ T4296] CPU: 1 UID: 0 PID: 4296 Comm: syz.4.8190 Tainted: G L syzkaller #0 PREEMPT(full) [ 1772.770952][ T4296] Tainted: [L]=SOFTLOCKUP [ 1772.770956][ T4296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1772.770964][ T4296] Call Trace: [ 1772.770970][ T4296] [ 1772.770976][ T4296] dump_stack_lvl+0x16c/0x1f0 [ 1772.771000][ T4296] should_fail_ex+0x512/0x640 [ 1772.771018][ T4296] should_failslab+0xc2/0x120 [ 1772.771038][ T4296] kmem_cache_alloc_noprof+0x83/0x770 [ 1772.771055][ T4296] ? dst_alloc+0x99/0x1a0 [ 1772.771071][ T4296] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1772.771087][ T4296] ? dst_alloc+0x99/0x1a0 [ 1772.771098][ T4296] dst_alloc+0x99/0x1a0 [ 1772.771111][ T4296] ip6_pol_route+0x96b/0x1250 [ 1772.771126][ T4296] ? __pfx_ip6_pol_route+0x10/0x10 [ 1772.771141][ T4296] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 1772.771160][ T4296] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1772.771172][ T4296] fib6_rule_lookup+0x536/0x720 [ 1772.771186][ T4296] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1772.771197][ T4296] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 1772.771211][ T4296] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1772.771229][ T4296] ip6_route_input+0x662/0xc70 [ 1772.771243][ T4296] ? __pfx_ip6_route_input+0x10/0x10 [ 1772.771255][ T4296] ? lock_acquire+0x179/0x330 [ 1772.771275][ T4296] ? sock_wfree+0x11c/0x850 [ 1772.771290][ T4296] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1772.771306][ T4296] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1772.771322][ T4296] ipv6_rcv+0x1e8/0x650 [ 1772.771335][ T4296] ? __pfx_ipv6_rcv+0x10/0x10 [ 1772.771347][ T4296] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1772.771361][ T4296] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1772.771375][ T4296] ? lock_acquire+0x179/0x330 [ 1772.771386][ T4296] ? __phys_addr+0xe8/0x180 [ 1772.771407][ T4296] __netif_receive_skb+0x1d/0x160 [ 1772.771419][ T4296] netif_receive_skb+0x137/0x760 [ 1772.771432][ T4296] ? __pfx_netif_receive_skb+0x10/0x10 [ 1772.771449][ T4296] tun_rx_batched.isra.0+0x3ee/0x740 [ 1772.771471][ T4296] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1772.771492][ T4296] ? tun_get_user+0x1ded/0x3cc0 [ 1772.771504][ T4296] ? rcu_is_watching+0x12/0xc0 [ 1772.771522][ T4296] tun_get_user+0x28b2/0x3cc0 [ 1772.771540][ T4296] ? __pfx_tun_get_user+0x10/0x10 [ 1772.771552][ T4296] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1772.771571][ T4296] ? find_held_lock+0x2b/0x80 [ 1772.771586][ T4296] ? tun_get+0x191/0x370 [ 1772.771600][ T4296] tun_chr_write_iter+0xdc/0x210 [ 1772.771613][ T4296] vfs_write+0x7d3/0x11d0 [ 1772.771631][ T4296] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1772.771645][ T4296] ? __pfx_vfs_write+0x10/0x10 [ 1772.771659][ T4296] ? find_held_lock+0x2b/0x80 [ 1772.771681][ T4296] ksys_write+0x12a/0x250 [ 1772.771697][ T4296] ? __pfx_ksys_write+0x10/0x10 [ 1772.771713][ T4296] ? do_user_addr_fault+0x843/0x1370 [ 1772.771729][ T4296] __do_fast_syscall_32+0xe8/0x680 [ 1772.771749][ T4296] do_fast_syscall_32+0x32/0x80 [ 1772.771766][ T4296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1772.771782][ T4296] RIP: 0023:0xf701d579 [ 1772.771792][ T4296] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1772.771803][ T4296] RSP: 002b:00000000f540d520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1772.771815][ T4296] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000bc0 [ 1772.771823][ T4296] RDX: 0000000000000086 RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1772.771829][ T4296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.771836][ T4296] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1772.771842][ T4296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1772.771861][ T4296] [ 1773.250308][ T40] audit: type=1326 audit(1767235788.686:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.260410][ T40] audit: type=1326 audit(1767235788.686:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.267522][ T40] audit: type=1326 audit(1767235788.686:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.297040][ T40] audit: type=1326 audit(1767235788.686:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.309765][ T40] audit: type=1326 audit(1767235788.686:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.342424][ T40] audit: type=1326 audit(1767235788.686:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.351688][ T40] audit: type=1326 audit(1767235788.686:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.359751][ T40] audit: type=1326 audit(1767235788.686:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.368358][ T40] audit: type=1326 audit(1767235788.686:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.377524][ T40] audit: type=1326 audit(1767235788.686:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4284 comm="syz.5.8186" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d598 code=0x7ffc0000 [ 1773.428285][ T4306] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.434641][ T4306] binder: 4293:4306 ioctl 4018620d 800002c0 returned -16 [ 1773.509622][ C0] hrtimer: interrupt took 535720 ns [ 1773.759237][ T4311] FAULT_INJECTION: forcing a failure. [ 1773.759237][ T4311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.765379][ T4311] CPU: 2 UID: 0 PID: 4311 Comm: syz.5.8193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.765410][ T4311] Tainted: [L]=SOFTLOCKUP [ 1773.765416][ T4311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1773.765428][ T4311] Call Trace: [ 1773.765436][ T4311] [ 1773.765444][ T4311] dump_stack_lvl+0x16c/0x1f0 [ 1773.765478][ T4311] should_fail_ex+0x512/0x640 [ 1773.765503][ T4311] strncpy_from_user+0x3b/0x2e0 [ 1773.765525][ T4311] getname_flags.part.0+0x8f/0x550 [ 1773.765549][ T4311] getname_flags+0x93/0xf0 [ 1773.765574][ T4311] __ia32_sys_renameat2+0xd4/0x130 [ 1773.765596][ T4311] __do_fast_syscall_32+0xe8/0x680 [ 1773.765626][ T4311] do_fast_syscall_32+0x32/0x80 [ 1773.765655][ T4311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1773.765678][ T4311] RIP: 0023:0xf708d579 [ 1773.765693][ T4311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1773.765711][ T4311] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 1773.765730][ T4311] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800004c0 [ 1773.765742][ T4311] RDX: 0000000000000005 RSI: 0000000080000500 RDI: 0000000000000000 [ 1773.765753][ T4311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1773.765764][ T4311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1773.765775][ T4311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1773.765800][ T4311] [ 1774.226030][ T4316] overlayfs: failed to resolve './file1': -2 [ 1774.391657][ T4317] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1774.453921][ T4318] comedi comedi0: Minor 47 could not be opened [ 1774.459857][ T4318] netlink: 'syz.5.8194': attribute type 1 has an invalid length. [ 1774.535074][ T4318] bond3: entered promiscuous mode [ 1774.537774][ T4318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1775.140010][ T4323] FAULT_INJECTION: forcing a failure. [ 1775.140010][ T4323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.149605][ T4323] CPU: 1 UID: 0 PID: 4323 Comm: syz.4.8195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.149628][ T4323] Tainted: [L]=SOFTLOCKUP [ 1775.149632][ T4323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1775.149643][ T4323] Call Trace: [ 1775.149648][ T4323] [ 1775.149653][ T4323] dump_stack_lvl+0x16c/0x1f0 [ 1775.149688][ T4323] should_fail_ex+0x512/0x640 [ 1775.149705][ T4323] _copy_to_user+0x32/0xd0 [ 1775.149719][ T4323] simple_read_from_buffer+0xcb/0x170 [ 1775.149737][ T4323] proc_fail_nth_read+0x197/0x240 [ 1775.149758][ T4323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1775.149778][ T4323] ? rw_verify_area+0xcf/0x6c0 [ 1775.149794][ T4323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1775.149812][ T4323] vfs_read+0x1e4/0xcf0 [ 1775.149828][ T4323] ? __pfx___mutex_lock+0x10/0x10 [ 1775.149847][ T4323] ? __pfx_vfs_read+0x10/0x10 [ 1775.149863][ T4323] ? find_held_lock+0x2b/0x80 [ 1775.149884][ T4323] ? __fget_files+0x20e/0x3c0 [ 1775.149905][ T4323] ksys_read+0x12a/0x250 [ 1775.149923][ T4323] ? __pfx_ksys_read+0x10/0x10 [ 1775.149942][ T4323] __do_fast_syscall_32+0xe8/0x680 [ 1775.149961][ T4323] do_fast_syscall_32+0x32/0x80 [ 1775.149979][ T4323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1775.149994][ T4323] RIP: 0023:0xf701d579 [ 1775.150004][ T4323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1775.150025][ T4323] RSP: 002b:00000000f53cb590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1775.150036][ T4323] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53cb620 [ 1775.150043][ T4323] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1775.150049][ T4323] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1775.150055][ T4323] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1775.150062][ T4323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1775.150076][ T4323] [ 1775.469223][ T4317] /dev/sr0: Can't open blockdev [ 1777.372781][ T4339] sctp: [Deprecated]: syz.3.8200 (pid 4339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1777.372781][ T4339] Use struct sctp_sack_info instead [ 1777.703043][ T4348] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1777.770610][ T4349] comedi comedi0: Minor 47 could not be opened [ 1777.776006][ T4349] netlink: 'syz.4.8202': attribute type 1 has an invalid length. [ 1777.836006][ T4349] bond3: entered promiscuous mode [ 1777.838770][ T4349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1778.210294][ T4348] /dev/sr0: Can't open blockdev [ 1778.525938][ T4354] syz.1.8204: attempt to access beyond end of device [ 1778.525938][ T4354] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1778.530555][ T4354] gfs2: error -5 reading superblock [ 1778.534921][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 1778.793438][ T4366] overlayfs: failed to resolve './file0': -2 [ 1778.905516][ T40] kauditd_printk_skb: 424 callbacks suppressed [ 1778.905528][ T40] audit: type=1804 audit(1767235794.336:1936): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8205" name="/newroot/66/bus/bus" dev="tmpfs" ino=428 res=1 errno=0 [ 1779.264635][ T4372] FAULT_INJECTION: forcing a failure. [ 1779.264635][ T4372] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.269148][ T4372] CPU: 2 UID: 0 PID: 4372 Comm: syz.4.8208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.269168][ T4372] Tainted: [L]=SOFTLOCKUP [ 1779.269172][ T4372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1779.269180][ T4372] Call Trace: [ 1779.269185][ T4372] [ 1779.269191][ T4372] dump_stack_lvl+0x16c/0x1f0 [ 1779.269213][ T4372] should_fail_ex+0x512/0x640 [ 1779.269227][ T4372] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1779.269243][ T4372] should_failslab+0xc2/0x120 [ 1779.269262][ T4372] __kmalloc_cache_noprof+0x80/0x800 [ 1779.269275][ T4372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1779.269294][ T4372] ? snd_ctl_elem_add_compat+0x51/0x3f0 [ 1779.269314][ T4372] ? snd_ctl_elem_add_compat+0x51/0x3f0 [ 1779.269331][ T4372] snd_ctl_elem_add_compat+0x51/0x3f0 [ 1779.269365][ T4372] snd_ctl_ioctl_compat+0xac1/0xc70 [ 1779.269394][ T4372] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1779.269413][ T4372] ? find_held_lock+0x2b/0x80 [ 1779.269429][ T4372] ? hook_file_ioctl_common+0x144/0x410 [ 1779.269447][ T4372] ? __fget_files+0x20e/0x3c0 [ 1779.269464][ T4372] ? fput+0x70/0xf0 [ 1779.269477][ T4372] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1779.269495][ T4372] __ia32_compat_sys_ioctl+0x242/0x370 [ 1779.269512][ T4372] __do_fast_syscall_32+0xe8/0x680 [ 1779.269533][ T4372] do_fast_syscall_32+0x32/0x80 [ 1779.269551][ T4372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.269566][ T4372] RIP: 0023:0xf701d579 [ 1779.269577][ T4372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1779.269588][ T4372] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1779.269600][ T4372] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c1105517 [ 1779.269608][ T4372] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1779.269615][ T4372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.269621][ T4372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1779.269628][ T4372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.269643][ T4372] [ 1779.627742][ T4372] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1779.630156][ T4372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1779.632864][ T4372] vhci_hcd vhci_hcd.0: Device attached [ 1779.819567][T30716] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1779.874174][ T40] audit: type=1326 audit(1767235795.286:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1779.882767][ T40] audit: type=1326 audit(1767235795.286:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000 [ 1779.889578][T30716] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1779.890320][ T40] audit: type=1326 audit(1767235795.286:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1779.901158][ T40] audit: type=1326 audit(1767235795.286:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1779.908383][ T40] audit: type=1326 audit(1767235795.286:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1779.915722][ T40] audit: type=1326 audit(1767235795.286:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1779.922809][ T40] audit: type=1326 audit(1767235795.296:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000 [ 1779.929814][ T40] audit: type=1326 audit(1767235795.296:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86598 code=0x7ffc0000 [ 1779.937218][ T40] audit: type=1326 audit(1767235795.296:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.3.8210" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 1780.162910][ T4377] vhci_hcd: connection reset by peer [ 1780.165443][T30343] vhci_hcd vhci_hcd.4: stop threads [ 1780.167356][T30343] vhci_hcd vhci_hcd.4: release socket [ 1780.169344][T30343] vhci_hcd vhci_hcd.4: disconnect device [ 1780.290255][ T4391] FAULT_INJECTION: forcing a failure. [ 1780.290255][ T4391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.295321][ T4391] CPU: 1 UID: 0 PID: 4391 Comm: syz.3.8213 Tainted: G L syzkaller #0 PREEMPT(full) [ 1780.295353][ T4391] Tainted: [L]=SOFTLOCKUP [ 1780.295361][ T4391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1780.295373][ T4391] Call Trace: [ 1780.295381][ T4391] [ 1780.295390][ T4391] dump_stack_lvl+0x16c/0x1f0 [ 1780.295422][ T4391] should_fail_ex+0x512/0x640 [ 1780.295447][ T4391] strncpy_from_user+0x3b/0x2e0 [ 1780.295469][ T4391] getname_flags.part.0+0x8f/0x550 [ 1780.295508][ T4391] getname_flags+0x93/0xf0 [ 1780.295532][ T4391] user_path_at+0x24/0x60 [ 1780.295557][ T4391] __ia32_sys_mount+0x1fa/0x310 [ 1780.295578][ T4391] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1780.295600][ T4391] __do_fast_syscall_32+0xe8/0x680 [ 1780.295620][ T4391] do_fast_syscall_32+0x32/0x80 [ 1780.295645][ T4391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1780.295660][ T4391] RIP: 0023:0xf7f86579 [ 1780.295670][ T4391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1780.295681][ T4391] RSP: 002b:00000000f543455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1780.295693][ T4391] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 1780.295700][ T4391] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1780.295707][ T4391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1780.295713][ T4391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1780.295720][ T4391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1780.295734][ T4391] [ 1780.598075][ T4397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1780.602408][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1780.606461][ T4397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1780.610443][ T4397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1781.201371][ T6437] libceph: connect (1)[c::]:6789 error -101 [ 1781.204106][ T6437] libceph: mon0 (1)[c::]:6789 connect error [ 1781.249104][ T4410] ceph: No mds server is up or the cluster is laggy [ 1782.096854][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.099048][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.104661][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.117385][ T4428] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1782.140159][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.144722][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.151683][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.161319][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.165119][ T4428] lo speed is unknown, defaulting to 1000 [ 1782.783786][ T4440] FAULT_INJECTION: forcing a failure. [ 1782.783786][ T4440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.788873][ T4440] CPU: 1 UID: 0 PID: 4440 Comm: syz.1.8224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1782.788907][ T4440] Tainted: [L]=SOFTLOCKUP [ 1782.788911][ T4440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1782.788938][ T4440] Call Trace: [ 1782.788944][ T4440] [ 1782.788949][ T4440] dump_stack_lvl+0x16c/0x1f0 [ 1782.788971][ T4440] should_fail_ex+0x512/0x640 [ 1782.788993][ T4440] _copy_to_iter+0x29f/0x1710 [ 1782.789007][ T4440] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1782.789023][ T4440] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1782.789038][ T4440] ? __pfx__copy_to_iter+0x10/0x10 [ 1782.789052][ T4440] ? __skb_recv_datagram+0x1b2/0x220 [ 1782.789068][ T4440] simple_copy_to_iter+0x46/0x90 [ 1782.789079][ T4440] __skb_datagram_iter+0x129/0x900 [ 1782.789091][ T4440] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1782.789103][ T4440] ? skb_recv_datagram+0x88/0xc0 [ 1782.789117][ T4440] skb_copy_datagram_iter+0xa6/0x220 [ 1782.789131][ T4440] netlink_recvmsg+0x27e/0xa90 [ 1782.789151][ T4440] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1782.789170][ T4440] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1782.789192][ T4440] sock_recvmsg+0x1f9/0x250 [ 1782.789211][ T4440] sock_read_iter+0x2b9/0x3b0 [ 1782.789229][ T4440] ? __pfx_sock_read_iter+0x10/0x10 [ 1782.789246][ T4440] ? irqentry_exit+0x1dd/0x8c0 [ 1782.789263][ T4440] ? rcu_is_watching+0x12/0xc0 [ 1782.789285][ T4440] ? bpf_lsm_file_permission+0x9/0x10 [ 1782.789299][ T4440] ? security_file_permission+0x71/0x210 [ 1782.789314][ T4440] ? rw_verify_area+0xcf/0x6c0 [ 1782.789331][ T4440] vfs_read+0xa98/0xcf0 [ 1782.789350][ T4440] ? __pfx_vfs_read+0x10/0x10 [ 1782.789365][ T4440] ? find_held_lock+0x2b/0x80 [ 1782.789401][ T4440] ksys_read+0x1f8/0x250 [ 1782.789420][ T4440] ? __pfx_ksys_read+0x10/0x10 [ 1782.789440][ T4440] __do_fast_syscall_32+0xe8/0x680 [ 1782.789460][ T4440] do_fast_syscall_32+0x32/0x80 [ 1782.789478][ T4440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1782.789493][ T4440] RIP: 0023:0xf70ed579 [ 1782.789503][ T4440] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1782.789514][ T4440] RSP: 002b:00000000f549b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1782.789526][ T4440] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080 [ 1782.789533][ T4440] RDX: 00000000000000ba RSI: 0000000000000000 RDI: 0000000000000000 [ 1782.789540][ T4440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1782.789547][ T4440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1782.789554][ T4440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1782.789568][ T4440] [ 1783.193984][ T4445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8226'. [ 1783.952527][ T4458] netlink: 'syz.4.8229': attribute type 1 has an invalid length. [ 1783.964610][ T4457] syz.5.8230: attempt to access beyond end of device [ 1783.964610][ T4457] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1783.970200][ T4457] gfs2: error -5 reading superblock [ 1784.009797][ T4458] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1784.015211][ T4458] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1784.071921][ T4463] macvlan2: entered promiscuous mode [ 1784.074121][ T4463] macvlan2: entered allmulticast mode [ 1784.077064][ T4463] bond4: entered promiscuous mode [ 1784.079820][ T4463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1784.098636][ T4463] bond4: left promiscuous mode [ 1784.619596][ T5982] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1784.769495][ T5982] usb 6-1: Using ep0 maxpacket: 16 [ 1784.774690][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.778708][ T5982] usb 6-1: config 0 has no interfaces? [ 1784.783132][ T5982] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1784.786312][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.789132][ T5982] usb 6-1: Product: syz [ 1784.799494][ T5982] usb 6-1: Manufacturer: syz [ 1784.801076][ T5982] usb 6-1: SerialNumber: syz [ 1784.810334][ T5982] usb 6-1: config 0 descriptor?? [ 1785.017173][ T143] usb 6-1: USB disconnect, device number 103 [ 1785.030969][T30716] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1785.570633][ T4478] random: crng reseeded on system resumption [ 1785.809527][T17483] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1785.822253][ T4483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8237'. [ 1785.826489][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8237'. [ 1785.979480][T17483] usb 6-1: Using ep0 maxpacket: 16 [ 1785.982961][T17483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.986618][T17483] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.990253][T17483] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1785.994402][T17483] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1785.997364][T17483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.005512][T17483] usb 6-1: config 0 descriptor?? [ 1786.413453][T17483] hid_parser_main: 6 callbacks suppressed [ 1786.413467][T17483] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1786.420455][T17483] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1786.423358][T17483] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1786.425833][T17483] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1786.428261][T17483] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 1786.434772][T17483] input: HID 0955:7214 Haptics as /devices/virtual/input/input125 [ 1786.483963][T17483] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 1786.493637][T17483] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1786.613469][ T4478] FAULT_INJECTION: forcing a failure. [ 1786.613469][ T4478] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.618928][ T4478] CPU: 2 UID: 0 PID: 4478 Comm: syz.1.8236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.618981][ T4478] Tainted: [L]=SOFTLOCKUP [ 1786.618988][ T4478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1786.618998][ T4478] Call Trace: [ 1786.619004][ T4478] [ 1786.619009][ T4478] dump_stack_lvl+0x16c/0x1f0 [ 1786.619030][ T4478] should_fail_ex+0x512/0x640 [ 1786.619043][ T4478] ? __kmalloc_noprof+0xca/0x910 [ 1786.619072][ T4478] should_failslab+0xc2/0x120 [ 1786.619090][ T4478] __kmalloc_noprof+0xeb/0x910 [ 1786.619102][ T4478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1786.619125][ T4478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1786.619144][ T4478] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1786.619166][ T4478] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1786.619185][ T4478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1786.619204][ T4478] ? genl_get_cmd+0x194/0x580 [ 1786.619225][ T4478] ? ____sys_sendmsg+0xa5d/0xc30 [ 1786.619242][ T4478] ? ___sys_sendmsg+0x134/0x1d0 [ 1786.619254][ T4478] ? __radix_tree_lookup+0x21f/0x2c0 [ 1786.619272][ T4478] genl_rcv_msg+0x55c/0x800 [ 1786.619284][ T4478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1786.619294][ T4478] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 1786.619308][ T4478] ? __lock_acquire+0x436/0x2890 [ 1786.619322][ T4478] netlink_rcv_skb+0x158/0x420 [ 1786.619339][ T4478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1786.619350][ T4478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1786.619372][ T4478] ? netlink_deliver_tap+0x1ae/0xd30 [ 1786.619389][ T4478] genl_rcv+0x28/0x40 [ 1786.619406][ T4478] netlink_unicast+0x5aa/0x870 [ 1786.619423][ T4478] ? __pfx_netlink_unicast+0x10/0x10 [ 1786.619445][ T4478] netlink_sendmsg+0x8c8/0xdd0 [ 1786.619463][ T4478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.619481][ T4478] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1786.619502][ T4478] ____sys_sendmsg+0xa5d/0xc30 [ 1786.619521][ T4478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1786.619538][ T4478] ? get_compat_msghdr+0x11a/0x170 [ 1786.619559][ T4478] ___sys_sendmsg+0x134/0x1d0 [ 1786.619574][ T4478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.619595][ T4478] ? find_held_lock+0x2b/0x80 [ 1786.619619][ T4478] __sys_sendmsg+0x16d/0x220 [ 1786.619633][ T4478] ? __pfx___sys_sendmsg+0x10/0x10 [ 1786.619657][ T4478] __do_fast_syscall_32+0xe8/0x680 [ 1786.619676][ T4478] do_fast_syscall_32+0x32/0x80 [ 1786.619694][ T4478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1786.619709][ T4478] RIP: 0023:0xf70ed579 [ 1786.619718][ T4478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1786.619729][ T4478] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1786.619740][ T4478] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 1786.619748][ T4478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1786.619754][ T4478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1786.619761][ T4478] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1786.619767][ T4478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1786.619782][ T4478] [ 1786.622911][ T4490] syz.5.8239: attempt to access beyond end of device [ 1786.622911][ T4490] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1786.640548][T23311] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1786.640619][T30716] usb 6-1: USB disconnect, device number 104 [ 1786.645399][T23311] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1786.651739][ T4490] gfs2: error -5 reading superblock [ 1786.746012][T23311] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1786.750206][T23311] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1786.896349][ T4499] program syz.4.8241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1786.976448][ T4496] smb3: Unknown parameter 'rdma/swradio#' [ 1786.978761][ T4496] CIFS mount error: No usable UNC path provided in device string! [ 1786.978761][ T4496] [ 1786.983899][ T4496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1787.385213][ T4523] netlink: 'syz.3.8245': attribute type 1 has an invalid length. [ 1787.437307][ T4523] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1787.441831][ T4523] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1787.477113][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8245'. [ 1787.501685][ T4527] macvlan2: entered promiscuous mode [ 1787.503563][ T4527] macvlan2: entered allmulticast mode [ 1787.506571][ T4527] bond9: entered promiscuous mode [ 1787.509212][ T4527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1787.514719][ T4527] bond9: left promiscuous mode [ 1787.649958][ T4526] lo speed is unknown, defaulting to 1000 [ 1787.784108][ T4526] lo speed is unknown, defaulting to 1000 [ 1787.964235][ T4531] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1788.250621][ T4537] netlink: 'syz.1.8248': attribute type 1 has an invalid length. [ 1788.314217][ T4537] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1788.320198][ T4537] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1788.359376][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1788.375059][ T4539] macvlan2: entered promiscuous mode [ 1788.377883][ T4539] macvlan2: entered allmulticast mode [ 1788.382355][ T4539] bond12: entered promiscuous mode [ 1788.385264][ T4539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1788.395265][ T4539] bond12: left promiscuous mode [ 1789.447023][ T4551] program syz.5.8251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1789.633585][ T4548] smb3: Unknown parameter 'rdma/swradio#' [ 1789.635868][ T4548] CIFS mount error: No usable UNC path provided in device string! [ 1789.635868][ T4548] [ 1789.639344][ T4548] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1789.660551][ T4553] netlink: 'syz.4.8253': attribute type 4 has an invalid length. [ 1789.664487][ T6437] lo speed is unknown, defaulting to 1000 [ 1789.813200][ T4563] FAULT_INJECTION: forcing a failure. [ 1789.813200][ T4563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.819403][ T4563] CPU: 2 UID: 0 PID: 4563 Comm: syz.5.8255 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.819438][ T4563] Tainted: [L]=SOFTLOCKUP [ 1789.819445][ T4563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1789.819458][ T4563] Call Trace: [ 1789.819468][ T4563] [ 1789.819476][ T4563] dump_stack_lvl+0x16c/0x1f0 [ 1789.819511][ T4563] should_fail_ex+0x512/0x640 [ 1789.819535][ T4563] _copy_from_user+0x2e/0xd0 [ 1789.819555][ T4563] get_user_ifreq+0x116/0x1c0 [ 1789.819584][ T4563] sock_ioctl+0x586/0x6b0 [ 1789.819602][ T4563] ? __pfx_sock_ioctl+0x10/0x10 [ 1789.819620][ T4563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1789.819654][ T4563] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1789.819682][ T4563] compat_sock_ioctl+0x58b/0x730 [ 1789.819702][ T4563] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1789.819718][ T4563] ? hook_file_ioctl_common+0x144/0x410 [ 1789.819769][ T4563] ? __fget_files+0x20e/0x3c0 [ 1789.819794][ T4563] ? fput+0x70/0xf0 [ 1789.819819][ T4563] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1789.819835][ T4563] __ia32_compat_sys_ioctl+0x242/0x370 [ 1789.819861][ T4563] __do_fast_syscall_32+0xe8/0x680 [ 1789.819893][ T4563] do_fast_syscall_32+0x32/0x80 [ 1789.819920][ T4563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1789.819945][ T4563] RIP: 0023:0xf708d579 [ 1789.819961][ T4563] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1789.819979][ T4563] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1789.819998][ T4563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 1789.820010][ T4563] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1789.820022][ T4563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1789.820032][ T4563] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1789.820044][ T4563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1789.820068][ T4563] [ 1790.070241][ T4574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1790.073311][ T4574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1790.079781][ T4574] vhci_hcd vhci_hcd.0: Device attached [ 1790.242885][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1790.247351][ T4574] bridge_slave_1: left allmulticast mode [ 1790.250670][ T4574] bridge_slave_1: left promiscuous mode [ 1790.256567][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.300233][ T4574] bridge_slave_0: left allmulticast mode [ 1790.302951][ T4581] syz1: rxe_newlink: already configured on syz_tun [ 1790.303150][ T4574] bridge_slave_0: left promiscuous mode [ 1790.308359][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.399540][T30716] usb 46-1: SetAddress Request (42) to port 0 [ 1790.402449][T30716] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1790.681535][ T4575] vhci_hcd: connection reset by peer [ 1790.685746][ T4211] vhci_hcd vhci_hcd.4: stop threads [ 1790.688069][ T4211] vhci_hcd vhci_hcd.4: release socket [ 1790.691085][ T4211] vhci_hcd vhci_hcd.4: disconnect device [ 1791.225710][ T4586] FAULT_INJECTION: forcing a failure. [ 1791.225710][ T4586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.241083][ T4586] CPU: 1 UID: 0 PID: 4586 Comm: syz.5.8260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1791.241116][ T4586] Tainted: [L]=SOFTLOCKUP [ 1791.241122][ T4586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1791.241129][ T4586] Call Trace: [ 1791.241134][ T4586] [ 1791.241138][ T4586] dump_stack_lvl+0x16c/0x1f0 [ 1791.241160][ T4586] should_fail_ex+0x512/0x640 [ 1791.241176][ T4586] _copy_from_iter+0x2a4/0x16c0 [ 1791.241191][ T4586] ? __alloc_skb+0x220/0x410 [ 1791.241205][ T4586] ? __alloc_skb+0x35d/0x410 [ 1791.241217][ T4586] ? __pfx__copy_from_iter+0x10/0x10 [ 1791.241229][ T4586] ? unwind_get_return_address+0x59/0xa0 [ 1791.241245][ T4586] ? __pfx___might_resched+0x10/0x10 [ 1791.241266][ T4586] netlink_sendmsg+0x820/0xdd0 [ 1791.241285][ T4586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1791.241303][ T4586] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1791.241324][ T4586] ____sys_sendmsg+0xa5d/0xc30 [ 1791.241344][ T4586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1791.241360][ T4586] ? get_compat_msghdr+0x11a/0x170 [ 1791.241380][ T4586] ___sys_sendmsg+0x134/0x1d0 [ 1791.241395][ T4586] ? __pfx____sys_sendmsg+0x10/0x10 [ 1791.241415][ T4586] ? find_held_lock+0x2b/0x80 [ 1791.241439][ T4586] __sys_sendmsg+0x16d/0x220 [ 1791.241456][ T4586] ? __pfx___sys_sendmsg+0x10/0x10 [ 1791.241478][ T4586] __do_fast_syscall_32+0xe8/0x680 [ 1791.241497][ T4586] do_fast_syscall_32+0x32/0x80 [ 1791.241514][ T4586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1791.241528][ T4586] RIP: 0023:0xf708d579 [ 1791.241538][ T4586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1791.241549][ T4586] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1791.241560][ T4586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1791.241568][ T4586] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1791.241574][ T4586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1791.241581][ T4586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1791.241587][ T4586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1791.241601][ T4586] [ 1791.626671][ T4598] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1791.706917][ T4602] comedi comedi0: Minor 47 could not be opened [ 1791.713282][ T4602] netlink: 'syz.5.8263': attribute type 1 has an invalid length. [ 1791.788461][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 1791.788489][ T40] audit: type=1804 audit(1767235807.196:2071): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8261" name="/newroot/199/bus/bus" dev="overlay" ino=1274 res=1 errno=0 [ 1791.811024][ T40] audit: type=1804 audit(1767235807.196:2072): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8261" name="/newroot/199/bus/bus" dev="overlay" ino=1274 res=1 errno=0 [ 1791.866622][ T4602] bond4: entered promiscuous mode [ 1791.869374][ T4602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1791.930616][ T40] audit: type=1800 audit(1767235807.196:2073): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8261" name="bus" dev="overlay" ino=1274 res=0 errno=0 [ 1792.264259][ T4607] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8264'. [ 1792.325446][ T40] audit: type=1804 audit(1767235807.756:2074): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8262" name="/newroot/87/file1/bus" dev="tmpfs" ino=578 res=1 errno=0 [ 1792.442232][ T4598] /dev/sr0: Can't open blockdev [ 1792.485146][ T4609] syz.1.8265: attempt to access beyond end of device [ 1792.485146][ T4609] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1792.494520][ T4609] gfs2: error -5 reading superblock [ 1792.719965][ T4614] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1792.793897][ T4617] comedi comedi0: Minor 47 could not be opened [ 1792.890215][ T4617] netlink: 'syz.3.8266': attribute type 1 has an invalid length. [ 1792.949669][ T4617] bond10: entered promiscuous mode [ 1792.952519][ T4617] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1793.599226][ T4619] netlink: 'syz.1.8267': attribute type 4 has an invalid length. [ 1793.747253][ T4623] afs: Unknown parameter 'meas' [ 1793.861617][ T4628] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1794.272212][ T4614] /dev/sr0: Can't open blockdev [ 1794.340055][ T4634] FAULT_INJECTION: forcing a failure. [ 1794.340055][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1794.350686][ T4634] CPU: 3 UID: 0 PID: 4634 Comm: syz.4.8270 Tainted: G L syzkaller #0 PREEMPT(full) [ 1794.350708][ T4634] Tainted: [L]=SOFTLOCKUP [ 1794.350712][ T4634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1794.350720][ T4634] Call Trace: [ 1794.350725][ T4634] [ 1794.350730][ T4634] dump_stack_lvl+0x16c/0x1f0 [ 1794.350753][ T4634] should_fail_ex+0x512/0x640 [ 1794.350769][ T4634] _copy_from_iter+0x2a4/0x16c0 [ 1794.350785][ T4634] ? __alloc_skb+0x220/0x410 [ 1794.350798][ T4634] ? __alloc_skb+0x35d/0x410 [ 1794.350810][ T4634] ? __pfx__copy_from_iter+0x10/0x10 [ 1794.350830][ T4634] ? netlink_autobind.isra.0+0x158/0x370 [ 1794.350853][ T4634] netlink_sendmsg+0x820/0xdd0 [ 1794.350873][ T4634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1794.350891][ T4634] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1794.350913][ T4634] ____sys_sendmsg+0xa5d/0xc30 [ 1794.350934][ T4634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1794.350955][ T4634] ? get_compat_msghdr+0x11a/0x170 [ 1794.350972][ T4634] ? finish_task_switch.isra.0+0x2e0/0xbd0 [ 1794.350993][ T4634] ___sys_sendmsg+0x134/0x1d0 [ 1794.351011][ T4634] ? __pfx____sys_sendmsg+0x10/0x10 [ 1794.351033][ T4634] ? find_held_lock+0x2b/0x80 [ 1794.351057][ T4634] __sys_sendmsg+0x16d/0x220 [ 1794.351072][ T4634] ? __pfx___sys_sendmsg+0x10/0x10 [ 1794.351096][ T4634] __do_fast_syscall_32+0xe8/0x680 [ 1794.351116][ T4634] do_fast_syscall_32+0x32/0x80 [ 1794.351135][ T4634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1794.351149][ T4634] RIP: 0023:0xf701d579 [ 1794.351158][ T4634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1794.351170][ T4634] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1794.351180][ T4634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 1794.351187][ T4634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1794.351194][ T4634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1794.351200][ T4634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1794.351206][ T4634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1794.351219][ T4634] [ 1794.856057][ T40] audit: type=1804 audit(1767235810.286:2075): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8274" name="/newroot/90/bus/bus" dev="overlay" ino=602 res=1 errno=0 [ 1794.866470][ T40] audit: type=1804 audit(1767235810.296:2076): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8274" name="/newroot/90/bus/bus" dev="overlay" ino=602 res=1 errno=0 [ 1794.879288][ T40] audit: type=1800 audit(1767235810.296:2077): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8274" name="bus" dev="overlay" ino=602 res=0 errno=0 [ 1795.429550][T30716] usb 46-1: device descriptor read/8, error -110 [ 1795.602750][ T4663] afs: Unknown parameter 'dynbinfo - version: 2.1 [ 1795.602750][ T4663] # name : tunables : slabdata [ 1795.602750][ T4663] bio-184 64 64 256 16 1 : t/dev/fuse' [ 1795.820512][T30716] usb usb46-port1: attempt power cycle [ 1795.923087][ T4674] bond0: (slave bond_slave_0): Releasing backup interface [ 1795.928508][ T4674] bond0: (slave bond_slave_1): Releasing backup interface [ 1795.937288][ T4674] team0: Port device team_slave_0 removed [ 1795.944263][ T4674] team0: Port device team_slave_1 removed [ 1795.946808][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.949327][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.956119][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.958811][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.963733][ T4674] net_ratelimit: 66 callbacks suppressed [ 1795.963749][ T4674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1796.224454][ T40] audit: type=1326 audit(1767235811.656:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.5.8283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1796.232883][ T40] audit: type=1326 audit(1767235811.656:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.5.8283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1796.242316][ T40] audit: type=1326 audit(1767235811.656:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.5.8283" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 1796.312897][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.361664][ T4663] overlayfs: statfs failed on './file0' [ 1796.402259][T30716] usb usb46-port1: unable to enumerate USB device [ 1796.541742][ T4683] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1796.545413][ T4683] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1796.554277][ T4683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1796.658228][ T4686] syz.4.8285: attempt to access beyond end of device [ 1796.658228][ T4686] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1796.663029][ T4686] gfs2: error -5 reading superblock [ 1797.421059][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 1797.421080][ T40] audit: type=1804 audit(1767235812.856:2126): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8290" name="/newroot/95/bus/bus" dev="overlay" ino=591 res=1 errno=0 [ 1797.458011][ T40] audit: type=1804 audit(1767235812.886:2127): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8290" name="/newroot/95/bus/bus" dev="overlay" ino=591 res=1 errno=0 [ 1797.489528][ T40] audit: type=1800 audit(1767235812.896:2128): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8290" name="bus" dev="overlay" ino=591 res=0 errno=0 [ 1797.558321][ T4709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1798.216725][ T4714] syz.3.8294: attempt to access beyond end of device [ 1798.216725][ T4714] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1798.221601][ T4714] gfs2: error -5 reading superblock [ 1798.354542][ T4717] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 1798.428523][ T4720] comedi comedi0: Minor 47 could not be opened [ 1798.435358][ T4720] netlink: 'syz.4.8293': attribute type 1 has an invalid length. [ 1798.616900][ T4717] /dev/sr0: Can't open blockdev [ 1798.660232][ T4720] bond6: entered promiscuous mode [ 1798.662668][ T4720] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1799.163437][ T4732] netlink: 'syz.5.8298': attribute type 1 has an invalid length. [ 1799.254846][ T4734] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1799.259201][ T4734] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1799.288695][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8298'. [ 1799.302522][ T4732] bond5: (slave gretap1): making interface the new active one [ 1799.306631][ T4732] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1799.319812][ T4732] macvlan2: entered promiscuous mode [ 1799.322913][ T4732] macvlan2: entered allmulticast mode [ 1799.326452][ T4732] bond5: entered promiscuous mode [ 1799.330247][ T4732] gretap1: entered promiscuous mode [ 1799.334921][ T4732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1799.346456][ T4732] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1799.362588][ T4732] bond5: left promiscuous mode [ 1799.375301][ T4732] gretap1: left promiscuous mode [ 1800.409440][ T4749] syz.3.8303: attempt to access beyond end of device [ 1800.409440][ T4749] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1800.413809][ T4749] gfs2: error -5 reading superblock [ 1801.788661][ T4766] FAULT_INJECTION: forcing a failure. [ 1801.788661][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.793180][ T4766] CPU: 3 UID: 0 PID: 4766 Comm: syz.5.8307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.793200][ T4766] Tainted: [L]=SOFTLOCKUP [ 1801.793204][ T4766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1801.793211][ T4766] Call Trace: [ 1801.793215][ T4766] [ 1801.793220][ T4766] dump_stack_lvl+0x16c/0x1f0 [ 1801.793241][ T4766] should_fail_ex+0x512/0x640 [ 1801.793254][ T4766] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1801.793270][ T4766] should_failslab+0xc2/0x120 [ 1801.793288][ T4766] kmem_cache_alloc_noprof+0x83/0x770 [ 1801.793301][ T4766] ? security_file_alloc+0x34/0x2b0 [ 1801.793318][ T4766] ? security_file_alloc+0x34/0x2b0 [ 1801.793331][ T4766] security_file_alloc+0x34/0x2b0 [ 1801.793345][ T4766] init_file+0x93/0x4c0 [ 1801.793358][ T4766] alloc_empty_file+0x73/0x1e0 [ 1801.793370][ T4766] path_openat+0xde/0x3140 [ 1801.793386][ T4766] ? __do_fast_syscall_32+0xe8/0x680 [ 1801.793404][ T4766] ? do_fast_syscall_32+0x32/0x80 [ 1801.793420][ T4766] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1801.793438][ T4766] ? __pfx_path_openat+0x10/0x10 [ 1801.793459][ T4766] do_filp_open+0x20b/0x470 [ 1801.793476][ T4766] ? __pfx_do_filp_open+0x10/0x10 [ 1801.793501][ T4766] ? alloc_fd+0x471/0x7d0 [ 1801.793522][ T4766] do_sys_openat2+0x121/0x290 [ 1801.793534][ T4766] ? __pfx_do_sys_openat2+0x10/0x10 [ 1801.793547][ T4766] ? __fget_files+0x20e/0x3c0 [ 1801.793565][ T4766] __ia32_compat_sys_open+0x146/0x1e0 [ 1801.793578][ T4766] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 1801.793594][ T4766] ? do_user_addr_fault+0x843/0x1370 [ 1801.793609][ T4766] ? rcu_is_watching+0x12/0xc0 [ 1801.793626][ T4766] __do_fast_syscall_32+0xe8/0x680 [ 1801.793645][ T4766] do_fast_syscall_32+0x32/0x80 [ 1801.793662][ T4766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1801.793676][ T4766] RIP: 0023:0xf708d579 [ 1801.793685][ T4766] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1801.793696][ T4766] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1801.793707][ T4766] RAX: ffffffffffffffda RBX: 0000000080001640 RCX: 0000000000000000 [ 1801.793714][ T4766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1801.793720][ T4766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1801.793727][ T4766] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1801.793733][ T4766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1801.793746][ T4766] [ 1802.096347][ T4770] fuse: Unknown parameter 'user_i00000000000000000000' [ 1803.345098][ T4785] syz.5.8312: attempt to access beyond end of device [ 1803.345098][ T4785] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1803.351417][ T4785] gfs2: error -5 reading superblock [ 1803.458154][ T4789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1803.524862][T30753] Bluetooth: hci3: command 0x0406 tx timeout [ 1803.723258][ T40] audit: type=1804 audit(1767235819.156:2129): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8314" name="/newroot/102/bus/bus" dev="overlay" ino=645 res=1 errno=0 [ 1803.733508][ T40] audit: type=1804 audit(1767235819.156:2130): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8314" name="/newroot/102/bus/bus" dev="overlay" ino=645 res=1 errno=0 [ 1803.743884][ T40] audit: type=1800 audit(1767235819.156:2131): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8314" name="bus" dev="overlay" ino=645 res=0 errno=0 [ 1804.409846][ T4803] netlink: 'syz.3.8316': attribute type 1 has an invalid length. [ 1804.459808][ T4803] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1804.463656][ T4803] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1804.510487][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8316'. [ 1804.538850][ T4807] macvlan2: entered promiscuous mode [ 1804.541372][ T4807] macvlan2: entered allmulticast mode [ 1804.546001][ T4807] bond11: entered promiscuous mode [ 1804.559326][ T4807] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1804.638628][ T4807] bond11: left promiscuous mode [ 1804.853174][ T40] audit: type=1804 audit(1767235820.286:2132): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8317" name="/newroot/100/bus/bus" dev="overlay" ino=666 res=1 errno=0 [ 1804.889653][ T40] audit: type=1804 audit(1767235820.296:2133): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8317" name="/newroot/100/bus/bus" dev="overlay" ino=666 res=1 errno=0 [ 1804.896570][ T40] audit: type=1800 audit(1767235820.296:2134): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8317" name="bus" dev="overlay" ino=666 res=0 errno=0 [ 1805.771452][ T4820] [ 1805.772600][ T4820] ====================================================== [ 1805.775891][ T4820] WARNING: possible circular locking dependency detected [ 1805.779022][ T4820] syzkaller #0 Tainted: G L [ 1805.782241][ T4820] ------------------------------------------------------ [ 1805.785633][ T4820] syz.5.8320/4820 is trying to acquire lock: [ 1805.788419][ T4820] ffff888052b19488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1805.792623][ T4820] [ 1805.792623][ T4820] but task is already holding lock: [ 1805.796153][ T4820] ffff888024c5dc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1805.801064][ T4820] [ 1805.801064][ T4820] which lock already depends on the new lock. [ 1805.801064][ T4820] [ 1805.805020][ T4820] [ 1805.805020][ T4820] the existing dependency chain (in reverse order) is: [ 1805.807983][ T4820] [ 1805.807983][ T4820] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1805.810434][ T4820] __mutex_lock+0x1aa/0x1ca0 [ 1805.812663][ T4820] anon_pipe_write+0x15d/0x1bd0 [ 1805.815328][ T4820] __kernel_write_iter+0x720/0xb10 [ 1805.818083][ T4820] __kernel_write+0xf5/0x140 [ 1805.820506][ T4820] autofs_notify_daemon+0x4db/0xd60 [ 1805.823272][ T4820] autofs_wait+0x10f3/0x1ac0 [ 1805.825782][ T4820] autofs_mount_wait+0x132/0x3c0 [ 1805.828309][ T4820] autofs_d_automount+0x4b2/0x960 [ 1805.830923][ T4820] __traverse_mounts+0x1b9/0x830 [ 1805.833432][ T4820] step_into_slowpath+0x772/0xf50 [ 1805.836043][ T4820] path_lookupat+0x627/0xc40 [ 1805.838269][ T4820] filename_lookup+0x224/0x5f0 [ 1805.840442][ T4820] user_path_at+0x3a/0x60 [ 1805.842471][ T4820] __ia32_sys_mount+0x1fa/0x310 [ 1805.844939][ T4820] __do_fast_syscall_32+0xe8/0x680 [ 1805.847435][ T4820] do_fast_syscall_32+0x32/0x80 [ 1805.849758][ T4820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1805.852686][ T4820] [ 1805.852686][ T4820] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1805.856194][ T4820] __mutex_lock+0x1aa/0x1ca0 [ 1805.858672][ T4820] autofs_notify_daemon+0x4a6/0xd60 [ 1805.861266][ T4820] autofs_wait+0x10f3/0x1ac0 [ 1805.863551][ T4820] autofs_mount_wait+0x132/0x3c0 [ 1805.866090][ T4820] autofs_d_automount+0x4b2/0x960 [ 1805.868640][ T4820] __traverse_mounts+0x1b9/0x830 [ 1805.871137][ T4820] step_into_slowpath+0x772/0xf50 [ 1805.873600][ T4820] path_lookupat+0x627/0xc40 [ 1805.875593][ T4820] filename_lookup+0x224/0x5f0 [ 1805.877394][ T4820] kern_path+0x35/0x50 [ 1805.878941][ T4820] lookup_bdev+0xd8/0x280 [ 1805.880627][ T4820] resume_store+0x1d6/0x490 [ 1805.882645][ T4820] kobj_attr_store+0x58/0x80 [ 1805.884992][ T4820] sysfs_kf_write+0xf2/0x150 [ 1805.886992][ T4820] kernfs_fop_write_iter+0x3af/0x570 [ 1805.889472][ T4820] vfs_write+0x7d3/0x11d0 [ 1805.891215][ T4820] ksys_write+0x12a/0x250 [ 1805.893038][ T4820] __do_fast_syscall_32+0xe8/0x680 [ 1805.895387][ T4820] do_fast_syscall_32+0x32/0x80 [ 1805.897832][ T4820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1805.900584][ T4820] [ 1805.900584][ T4820] -> #0 (&of->mutex){+.+.}-{4:4}: [ 1805.903070][ T4820] __lock_acquire+0x1669/0x2890 [ 1805.905041][ T4820] lock_acquire+0x179/0x330 [ 1805.907082][ T4820] __mutex_lock+0x1aa/0x1ca0 [ 1805.909115][ T4820] kernfs_fop_write_iter+0x28f/0x570 [ 1805.911080][ T4820] iter_file_splice_write+0xa24/0x12b0 [ 1805.913555][ T4820] do_splice+0x1478/0x1fc0 [ 1805.915290][ T4820] __do_splice+0x32a/0x360 [ 1805.917343][ T4820] __ia32_sys_splice+0x189/0x250 [ 1805.919518][ T4820] __do_fast_syscall_32+0xe8/0x680 [ 1805.921444][ T4820] do_fast_syscall_32+0x32/0x80 [ 1805.923503][ T4820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1805.926738][ T4820] [ 1805.926738][ T4820] other info that might help us debug this: [ 1805.926738][ T4820] [ 1805.931313][ T4820] Chain exists of: [ 1805.931313][ T4820] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 1805.931313][ T4820] [ 1805.936739][ T4820] Possible unsafe locking scenario: [ 1805.936739][ T4820] [ 1805.940003][ T4820] CPU0 CPU1 [ 1805.942379][ T4820] ---- ---- [ 1805.944762][ T4820] lock(&pipe->mutex); [ 1805.946621][ T4820] lock(&sbi->pipe_mutex); [ 1805.949796][ T4820] lock(&pipe->mutex); [ 1805.952654][ T4820] lock(&of->mutex); [ 1805.954707][ T4820] [ 1805.954707][ T4820] *** DEADLOCK *** [ 1805.954707][ T4820] [ 1805.958618][ T4820] 2 locks held by syz.5.8320/4820: [ 1805.960675][ T4820] #0: ffff888041fa8420 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 1805.964248][ T4820] #1: ffff888024c5dc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1805.967196][ T4820] [ 1805.967196][ T4820] stack backtrace: [ 1805.969294][ T4820] CPU: 3 UID: 0 PID: 4820 Comm: syz.5.8320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1805.969313][ T4820] Tainted: [L]=SOFTLOCKUP [ 1805.969317][ T4820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1805.969325][ T4820] Call Trace: [ 1805.969331][ T4820] [ 1805.969336][ T4820] dump_stack_lvl+0x116/0x1f0 [ 1805.969356][ T4820] print_circular_bug+0x275/0x340 [ 1805.969376][ T4820] check_noncircular+0x146/0x160 [ 1805.969394][ T4820] __lock_acquire+0x1669/0x2890 [ 1805.969405][ T4820] ? __do_splice+0x32a/0x360 [ 1805.969421][ T4820] ? __do_fast_syscall_32+0xe8/0x680 [ 1805.969440][ T4820] lock_acquire+0x179/0x330 [ 1805.969449][ T4820] ? kernfs_fop_write_iter+0x28f/0x570 [ 1805.969467][ T4820] ? __pfx___might_resched+0x10/0x10 [ 1805.969483][ T4820] __mutex_lock+0x1aa/0x1ca0 [ 1805.969500][ T4820] ? kernfs_fop_write_iter+0x28f/0x570 [ 1805.969517][ T4820] ? kernfs_fop_write_iter+0x28f/0x570 [ 1805.969532][ T4820] ? __asan_memcpy+0x3c/0x60 [ 1805.969546][ T4820] ? __pfx___mutex_lock+0x10/0x10 [ 1805.969564][ T4820] ? __pfx__copy_from_iter+0x10/0x10 [ 1805.969577][ T4820] ? trace_kmalloc+0x2b/0xb0 [ 1805.969593][ T4820] ? __kmalloc_noprof+0x35d/0x910 [ 1805.969605][ T4820] ? kernfs_fop_write_iter+0x237/0x570 [ 1805.969621][ T4820] ? kernfs_fop_write_iter+0x28f/0x570 [ 1805.969636][ T4820] kernfs_fop_write_iter+0x28f/0x570 [ 1805.969653][ T4820] iter_file_splice_write+0xa24/0x12b0 [ 1805.969673][ T4820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1805.969694][ T4820] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1805.969711][ T4820] do_splice+0x1478/0x1fc0 [ 1805.969727][ T4820] ? __lock_acquire+0x436/0x2890 [ 1805.969738][ T4820] ? __pfx_do_splice+0x10/0x10 [ 1805.969753][ T4820] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1805.969769][ T4820] ? find_held_lock+0x2b/0x80 [ 1805.969783][ T4820] __do_splice+0x32a/0x360 [ 1805.969799][ T4820] ? __pfx___do_splice+0x10/0x10 [ 1805.969816][ T4820] ? __ia32_compat_sys_openat+0x120/0x210 [ 1805.969832][ T4820] __ia32_sys_splice+0x189/0x250 [ 1805.969849][ T4820] __do_fast_syscall_32+0xe8/0x680 [ 1805.969866][ T4820] do_fast_syscall_32+0x32/0x80 [ 1805.969883][ T4820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1805.969897][ T4820] RIP: 0023:0xf708d579 [ 1805.969907][ T4820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1805.969917][ T4820] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1805.969935][ T4820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1805.969942][ T4820] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000bfd1 [ 1805.969948][ T4820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1805.969954][ T4820] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1805.969961][ T4820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1805.969970][ T4820] SYZFAIL: failed to recv rpc [ 1806.143834][ T4824] syz.4.8321: attempt to access beyond end of device [ 1806.143834][ T4824] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 1806.169485][ T4824] gfs2: error -5 reading superblock [ 1806.546415][T21268] smc: removing ib device syz1 [ 1806.589913][T14611] syz1: Port: 1 Link DOWN fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1806.924038][ T218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.014929][ T218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.063926][ T218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.133375][ T218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.258682][ T218] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1807.278435][ T218] bond0 (unregistering): Released all slaves [ 1807.382737][ T218] bond1 (unregistering): Released all slaves [ 1807.474132][ T218] bond2 (unregistering): Released all slaves [ 1807.592948][ T218] bond3 (unregistering): Released all slaves [ 1807.688513][ T218] bond4 (unregistering): Released all slaves [ 1807.694968][ T218] bond5 (unregistering): Released all slaves [ 1808.035577][ T218] hsr_slave_0: left promiscuous mode [ 1808.037856][ T218] hsr_slave_1: left promiscuous mode [ 1808.041913][ T218] veth1_macvtap: left promiscuous mode [ 1808.043987][ T218] veth0_macvtap: left promiscuous mode [ 1808.045859][ T218] veth1_vlan: left promiscuous mode [ 1808.047564][ T218] veth0_vlan: left promiscuous mode [ 1808.719763][ T218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.797054][ T218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.864989][ T218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.926376][ T218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.031312][ T218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.082734][ T218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.164719][ T218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.234149][ T218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.715859][ T218] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1809.949916][ T218] bond0 (unregistering): Released all slaves [ 1809.954646][ T218] bond1 (unregistering): Released all slaves [ 1810.064971][ T218] bond2 (unregistering): Released all slaves [ 1810.071675][ T218] bond3 (unregistering): Released all slaves [ 1810.077929][ T218] bond4 (unregistering): Released all slaves [ 1810.084518][ T218] bond5 (unregistering): Released all slaves [ 1810.092295][ T218] bond6 (unregistering): Released all slaves [ 1810.099938][ T218] bond7 (unregistering): Released all slaves [ 1810.107865][ T218] bond8 (unregistering): Released all slaves [ 1810.115584][ T218] bond9 (unregistering): Released all slaves [ 1810.251698][ T218] bond10 (unregistering): Released all slaves [ 1810.256193][ T218] bond11 (unregistering): Released all slaves [ 1810.273849][ T218] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1810.285148][ T218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1810.290460][ T218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1810.294602][ T218] bond0 (unregistering): Released all slaves [ 1810.298403][ T218] bond1 (unregistering): Released all slaves [ 1810.412951][ T218] bond2 (unregistering): Released all slaves [ 1810.543902][ T218] bond3 (unregistering): Released all slaves [ 1810.548259][ T218] bond4 (unregistering): Released all slaves [ 1810.553077][ T218] bond5 (unregistering): Released all slaves [ 1810.651069][ T218] bond6 (unregistering): Released all slaves [ 1810.753074][ T218] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1811.144604][ T218] bond0 (unregistering): Released all slaves [ 1811.147715][ T218] bond1 (unregistering): Released all slaves [ 1811.151399][ T218] bond2 (unregistering): Released all slaves [ 1811.239995][ T218] bond3 (unregistering): Released all slaves [ 1811.243802][ T218] bond4 (unregistering): Released all slaves [ 1811.361580][ T218] bond5 (unregistering): Released all slaves [ 1811.483198][ T218] bond6 (unregistering): Released all slaves [ 1811.586703][ T218] bond7 (unregistering): Released all slaves [ 1811.592104][ T218] bond8 (unregistering): Released all slaves [ 1811.596385][ T218] bond9 (unregistering): Released all slaves [ 1811.696142][ T218] bond10 (unregistering): Released all slaves [ 1811.700264][ T218] bond11 (unregistering): Released all slaves [ 1811.704556][ T218] bond12 (unregistering): Released all slaves [ 1811.829727][ T218] tipc: Disabling bearer [ 1811.831654][ T218] tipc: Left network mode [ 1812.532021][ T218] hsr_slave_0: left promiscuous mode [ 1812.534863][ T218] hsr_slave_1: left promiscuous mode [ 1812.539977][ T218] hsr_slave_0: left promiscuous mode [ 1812.543106][ T218] hsr_slave_1: left promiscuous mode [ 1812.548038][ T218] hsr_slave_0: left promiscuous mode [ 1812.593411][ T218] veth1_macvtap: left promiscuous mode [ 1812.596312][ T218] veth0_macvtap: left promiscuous mode [ 1812.598872][ T218] veth1_vlan: left promiscuous mode [ 1812.601602][ T218] veth0_vlan: left promiscuous mode [ 1812.605088][ T218] veth1_macvtap: left promiscuous mode [ 1812.607602][ T218] veth0_macvtap: left promiscuous mode [ 1812.610268][ T218] veth1_vlan: left promiscuous mode [ 1812.612628][ T218] veth0_vlan: left promiscuous mode [ 1812.926552][ T1145] smc: removing ib device syz0 [ 1813.076845][ T218] team0 (unregistering): Port device team_slave_1 removed [ 1813.102469][ T218] team0 (unregistering): Port device team_slave_0 removed [ 1813.922820][ T218] dummy0 (unregistering): left allmulticast mode [ 1813.966606][ T218] smc: removing net device lo with user defined pnetid SYZ2 [ 1813.971812][ T4885] lo speed is unknown, defaulting to 1000 [ 1813.973887][ T4885] infiniband syz: ib_query_port failed (-19) [ 1813.976136][ T4884] lo speed is unknown, defaulting to 1000 [ 1813.978238][ T4884] syz0: Port: 1 Link DOWN