last executing test programs: 46.532914546s ago: executing program 3 (id=526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) 45.653223722s ago: executing program 3 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 45.21533888s ago: executing program 3 (id=561): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x6, 0x7}, {0x4, 0x4}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0xa1) getdents64(r0, &(0x7f0000000c40)=""/4096, 0x1000) 45.214479837s ago: executing program 3 (id=563): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x21, 0x301, 0x270bd27, 0x25dfdbfe, {0xf}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x37}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xbffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x14927e, 0xa8) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000340)={0x3, 0x980900, 0x2}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0xa8, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) 45.099120799s ago: executing program 3 (id=566): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xff000000, 0xffffff00, 'bridge0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x4}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x1, 0x2}}, @common=@ah={{0x30}, {[0x3, 0x100], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x1, 0xa, [0x1a, 0x1d, 0x12, 0x13, 0x3c, 0x11, 0x35, 0x32, 0x5, 0x29, 0x7, 0x3e, 0x16, 0x14, 0xb, 0x13], 0x1, 0x7fff, 0x7}}}, {{@ip={@empty, @remote, 0xffffff00, 0xffffff00, 'veth0\x00', 'wg1\x00', {}, {}, 0x16, 0x0, 0xa0}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 44.793729194s ago: executing program 3 (id=574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001213b565cda51ab382fcc5b1d0934c152159ac7cad91dd4338dab424ddce0142eee92001421daa100b57a09aebef59ec4cca5dabca47e54b20835bc6444467cdb35f97f59f65133844147b9bd7c9e8a1db2755cf3cbba073673994d645c5"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) socket(0x2, 0x80805, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 44.687537198s ago: executing program 32 (id=574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001213b565cda51ab382fcc5b1d0934c152159ac7cad91dd4338dab424ddce0142eee92001421daa100b57a09aebef59ec4cca5dabca47e54b20835bc6444467cdb35f97f59f65133844147b9bd7c9e8a1db2755cf3cbba073673994d645c5"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) socket(0x2, 0x80805, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.773905438s ago: executing program 2 (id=1230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.560544935s ago: executing program 2 (id=1231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) listen(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x42481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="02020003110000002cbd7000fd08df25030007003380000002004e21ac1414bb000000000000000005001a00fe80000000000000000000000000003e0000000000000000000000000000000002000020020013000800000025bd70000235000005001a00000000000000000000000000000000000000000000000000000000000000000101000004"], 0x88}}, 0x24) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3.559613042s ago: executing program 2 (id=1232): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x4e, {0x4e, 0x8, "aa084c9dfb00fee31da394acfcd93ff3e1f744f598ca9411a932877802ff374719a19dbd2ff310cfc6513b17e0dc29318e5e60802c63c6d9117271ee5e1591c7b476bc8e5c7d2cdb9d816ab1"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "89e778241c10304d9b23b370677877e08d48bdfd7fecbfafd09710b4"}}, &(0x7f0000000180)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xdc, 0x1, 0x8, 0xf, 0xd39e, [0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x81, 0x40, 0x5, 0x4}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x8, 0x6, "1dbe520f", "c6e00658"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x0, 0xa0, 0xc, 0x0, 0xdc9}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x60, 0x31, 0xeb, "883033112ebacb10dee56d1ec51ba92a26e3d3557ca59dc41ef6b2249525c77524cedd30112ec6793ad7b2b5d636cadc7f0e4b4f5de8f1214e6b1fa112bf70bf87d1666b7bb3df952c8bad740f00145aac2317e5f72096a496c4814c658bbaf3a596d96cb798bee0b9b4980b03707872c5bd30213e25528c3cd4edcb4e828664066f7de641fbb6765e241ecbc0a335cc26000d7583c566fdce4ebb44366ad44af7220b4b0a9eda5545d6c4f4303b141f813f4218c3e37e4cebe84aa7c06842bd012b9f60de26dc0f7ac31579898f5dbcb094c40147716e03cee9165ca20b94cf7e780c307a05dc338929be"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x20, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, '#|'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x4d}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "d2a1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xf5}}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r5 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x89ee, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x3, 0x10, 0x9c, 0x67, 0x0, 0x4, 0x6, 0x0, @remote, @empty, {[@generic={0x94, 0xc, "ad7fe00b9da4cacc45b9"}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xfff7, 0x0, 0x0, 0xbd48, 0x8, 0x1, 0x4e21, 0x4e25, 0x4, 0x400, 0x0, 0x0, 0x1}, [{0x3e0, 0x7fff, 0xfffffff7, 0x0, 0x3ff, 0x0, 0xc, 0x964}, {0x180000, 0x4, 0x0, 0xa, 0xfa1, 0x75, 0x2, 0x8005}, {0x1, 0x7f, 0x80, 0xfffffffd, 0x100, 0x40, 0x3, 0x2}]}}}}}, 0x0) 1.974628347s ago: executing program 0 (id=1249): timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1.86061853s ago: executing program 0 (id=1250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) listen(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x42481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="02020003110000002cbd7000fd08df25030007003380000002004e21ac1414bb000000000000000005001a00fe80000000000000000000000000003e0000000000000000000000000000000002000020020013000800000025bd70000235000005001a00000000000000000000000000000000000000000000000000000000000000000101000004"], 0x88}}, 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.174983368s ago: executing program 4 (id=1259): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x5}}, 0x40080c1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xa, 0xe}, {0x0, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0)) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffffffffffe5c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x2082000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 940.193961ms ago: executing program 0 (id=1263): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 939.691638ms ago: executing program 0 (id=1265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="687c58423503b53feff8fc2dbd398bc31079cd68c246102956f8df78f130b35c3f4c148c287b805cbbb87d4014d74189eb0e99a3b54a32d2611e9565f1f7ba5121e8e49f2eac927785efcabb37715c27e65beff76a0cd4ce900e37ce2b8849dbfc2108c694f6401ee4d30f01ead398802f13d8616232e4b1a7ff65ddef1460f0a400807f167e19fad3f5e097832cdf7b5a4a63072b65ae014972864de8da39caaba6aab9c1887c8e42a2963706", 0xad}, {&(0x7f0000000140)="e0cabbb06daa1e117ecb210b7c7b9bb01333ca5cd6a9def8b29f2c52ff00cd1038a99e69d40edc955ccba40d7905d660fa1d70208d7f05984a2a96f75361d705d854997e7382ff8d37b793cfce9363925d7b0bfff79afb8a2d98e2c874428db65a526f24ee30", 0x66}, {&(0x7f00000001c0)="9731101f92af135385894a21a22c606ca7af7309596607d09beadaa44bb8070a6f60e40c0b1c46", 0x27}], 0x3, &(0x7f0000000440)=[{0xe8, 0x117, 0x2, "3f2c5a2ce83dc3663b6999e5fd36171eefd6cf48d69bc90c9dbc795c8d3506d2eab174eecc08dc5a8bc992423c3895ef65c64644a3dec9f633faf6c791a12759e5c9810cda20c8e9dd46cf6322c033770ea6999c20bff17dcaed812c8d2fc13e402837edc1b31d628e3ffbfe85e51edec4fc41f18bb17eb3a637e1eea53e161835a0d87877f363336b9a0addbe2cdd1b49c968c56a92c4792f7aa48e0220d432c618cd1e8c95c8cde630ac909ac66c5d9efad4f4062920eeccb428578be32e1ac4d9d85b8147fc830b9f526e49ea97028a8fea"}], 0xe8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x111, 0x8}, {0x10, 0x112, 0x4}], 0x20}}], 0x2, 0x4004004) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 939.472023ms ago: executing program 4 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400001820000000fd0100000000010000"], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1d, 0x2, 0x6) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x200040d2}, 0x0) close(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000400), 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002200)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c840}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x100}, &(0x7f00000001c0)=0x8) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) io_setup(0x2, &(0x7f0000000200)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d28f6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b1482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 737.891126ms ago: executing program 4 (id=1268): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000340)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000c00)=""/74, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0)={0x9, 0x0, [{0x25000, 0xb8, &(0x7f0000000580)=""/184}, {0xdddd1000, 0xa7, &(0x7f0000000640)=""/167}, {0xeeee3000, 0x48, &(0x7f0000000700)=""/72}, {0x2, 0xef, &(0x7f0000000780)=""/239}, {0x30000, 0x5b, &(0x7f0000000880)=""/91}, {0x2000, 0xf8, &(0x7f0000000900)=""/248}, {0xdddd0000, 0x5a, &(0x7f0000000a00)=""/90}, {0xeeee8000, 0x1000, &(0x7f0000003080)=""/4096}, {0xffffffff, 0x9, &(0x7f0000000180)=""/9}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063001303c191e2e3b0306e987f9f65000000000900000000"]}, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0xbb80, 0xfffffffffffffffe, 0x8}) ioctl$FIGETBSZ(r7, 0x5421, &(0x7f0000000040)) 341.551218ms ago: executing program 1 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x3f000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 268.669304ms ago: executing program 2 (id=1273): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000100)) 256.286783ms ago: executing program 1 (id=1274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1e, 0x9, 0xb0}) r1 = syz_open_dev$audion(&(0x7f0000000440), 0x100000001, 0x4400) faccessat(r1, &(0x7f0000000480)='./file0\x00', 0xa0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000500)={0x0, r1}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x62}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x20008010) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futimesat(r1, &(0x7f0000000680)='./file0\x00', &(0x7f0000000740)={{r2, r3/1000+10000}, {r4, r5/1000+60000}}) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000780)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x44080) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r6, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) recvmmsg$unix(r1, &(0x7f0000001300)=[{{&(0x7f0000000a00), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000b80)=""/16, 0x10}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/68, 0x44}, {&(0x7f0000000e00)=""/253, 0xfd}], 0x6}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/225, 0xe1}, {&(0x7f0000001080)=""/148, 0x94}], 0x2, &(0x7f0000001180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}], 0x2, 0x40000040, &(0x7f0000001380)={0x0, 0x989680}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000013c0)={0x3, r12}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r13) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001480)={@mcast1, 0x0}, &(0x7f00000014c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r10, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001540)=[0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0x73, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001c00)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)={0x368, r14, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/%-.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x722c102a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'\\-*)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',^,$&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x404b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.-!-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '}*+)\\\')%#)\\)&\\/],@{^$#{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23b}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x31e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "64abb5b267e5a32e03022826cc57c96c36c8104400d49abfa47c74d8699fda6bd761b4dffd9cf53aaf2d956ac1b8f24c5aa8eedf5fdb01cb02bf5ce6dc7c4fd9f21983e3decda8651ec7a236747c6338e08ac9614bb66c7dd7c55c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "98ee6d143815392f9f3a399052a9b1822c55514d46ad8bb9264a531c71a128eb937c9c8cc09eb619df477ce0250aa6f2a85f3d86ea28f0277e2bcab6bbf7115b5c3e386799feea9a8789ea0a"}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r17 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001c40), 0x480, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001c80)={{0xeeef0000, 0x8000000, 0x3, 0xb, 0x0, 0x6, 0x4, 0x3, 0x7, 0x83, 0x6, 0x5}, {0x8080000, 0x25000, 0x7, 0x18, 0x7f, 0x1, 0x7, 0x3, 0x92, 0x5, 0xdc, 0x9}, {0x1, 0x1000, 0xa, 0x0, 0x4, 0xd, 0x80, 0x1, 0x7, 0xd, 0x69, 0x7}, {0xd000, 0x70000, 0xa, 0x3, 0x6, 0xc, 0x1, 0x1, 0x5, 0x61, 0x6, 0x1}, {0x6000, 0x70000, 0xe, 0x45, 0x6, 0x10, 0xf2, 0x9, 0xff, 0xe, 0xf3, 0x80}, {0x8080000, 0xc000, 0x9, 0xea, 0xf, 0x5, 0xb7, 0xff, 0x9, 0x1, 0x3, 0x3}, {0x8080000, 0x26000, 0xc, 0x1, 0xd0, 0x3, 0x2, 0x6, 0x1, 0x7f, 0x7, 0xa}, {0x10000, 0x8080000, 0x9, 0x0, 0x0, 0x10, 0x7, 0x3, 0xcd, 0x1, 0x7f, 0x2}, {0xc000, 0x8}, {0x50000, 0x9}, 0x4001c, 0x0, 0x0, 0x202034, 0x9, 0x1100, 0x100000, [0xc018, 0x7fff, 0x8, 0x2]}) ioctl$VIDIOC_G_AUDOUT(r10, 0x80345631, &(0x7f0000001dc0)) r18 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001e40), r11) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r18, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10040000) ioctl$TIOCEXCL(r9, 0x540c) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r19, 0xc0845657, &(0x7f0000001f80)={0x0, @reserved}) ioctl$GIO_CMAP(r17, 0x4b70, &(0x7f0000002040)) syz_open_dev$evdev(&(0x7f0000002080), 0x7, 0x88801) 155.808359ms ago: executing program 4 (id=1275): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x8, 'syz0\x00', @default, 0x0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x30a, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20040851) 155.567468ms ago: executing program 1 (id=1276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000200000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x3, 0xc9, "3f0ff8625acb6740"}}}}, 0xf) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @null, @bpq0, 0x8, 'syz0\x00', @default, 0x0, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 154.994895ms ago: executing program 2 (id=1277): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000f3efffffffffffffff48000000d009b6be0400", @ANYRES32=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x200040) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000004ac0)={0x0, [{0x2, 0x6f0, 0x9, &(0x7f00000001c0)="da64145db38c3ef1ba186463c6e24b6239a7927f87f0a5d93315a2ce0f8f0ca187b84d676c905af0003a9fb6d6229f1ba40da8dcf4aa43e9d3b12b2ec881266063914e87e12a6d8ba80e571e9c147ada678faa51221199b036aad895cc79f3af8e7064a9f15b429e65100241a87bcd6093be543f1e80efab5a4e8cdcf77d920a26b38cd9d44304f3dbafd67359c3cdb7ab7a6dff2f71c8c8f8f4314765a85e4ae1c62c812940575563388e2f188ad8b226870fe4225ef5d61d71d581d739acb0da286b7a1e9baa067342edc9b3c957ec86d77d138cca621eeb8b2189044f"}, {0x1, 0x480, 0x5, &(0x7f0000000400)="46f4888deb895e3cc33ed8f2962a8ae8f41129bcbbe2250d40743694d2ed501d18adfd9601b2dd6f7eaf408ff55667a90c9e48490f3551fb6734ece86f2def25a34235ac35c078983ff1a56a029b7f67e574e6f00c129463280dd27670612c190eb9fba7eecb4c3575541210684a799be47e63eb56cab063e4b63d5ecd2c5a02bb925586e4789ef72fe96585d0040e7a"}, {0x3, 0x8000, 0x4f5, &(0x7f00000004c0)="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"}, {0x1, 0x8000, 0xb0c6, &(0x7f00000014c0)="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"}, {0x3, 0x338, 0x2, &(0x7f00000024c0)="662f8590b8404682054de88af26ae80abe0cd78ddcb31bd618711a9596ba7b0510085196ff40e7ded796514b419882a691fbcc0445c7b5051a80a5c93569e7bd86cf11fe507d3990fb09dc63f79f3f2414f2717cb1def2574cc326cc65743bc9d546cd1c51fc72"}, {0x1, 0x260, 0x84000000, &(0x7f0000002540)="a46ed4d1c4da623b47b456c22be160e02e9e34a420a3784343393776be5fe4df123afb14e65212fdd6524a692ffb113043a48fcead6ddb177c7542d4d045ae0cbcd25d123673c97145bb5ced"}, {0x7, 0x7b8, 0xa, &(0x7f0000002600)="93eb3f26b16b4bc70bb476227ed69999fc4c703fc4e0ca1e9e659ed82945c76e9b4640dd47387c86617e27972d00dce706b2c6048dc41844768160bbbf6b67ef9dd1f6b18959e33cabd2ff97a5b7d5e2bb71c7483e78ceb5814547ff38e984792a66dba8cd295f48144ada23ed1ae4db8f2f2a2f11c325fbbac67ca0b4d9c083e993ce7efda4097a03bec99a3409d4df815ecc73d733946e20bc7fafec77e3332d3f0acac4297ca71e64a8bee745338261d0f8186607e46af06439d2dc408aa8ccd92dc8f7fa3b768c727373a2c4cb8bc771af72f9682c2c0048e42887d1c1ad1730de25dcbaa160ce87f98fb8be210707b3d36aeae915"}, {0x0, 0x10, 0x700, &(0x7f0000002700)="2cca"}, {0x1, 0x460, 0xffff650d, &(0x7f0000002740)="25a1ce290e9d045bd46ae7b3efa8749bdab18a3064ed2fd2d603ad6f62d8f1bdcce3847580b8f247cf1170d3db1ba0cc5f4c9ad2d65401216ba3e2ff02205823238aa995e8f1f86d656202c21543bd956a865fc7a4011fee60e8ecabb9cb79dc82a446e3ff5112841bb4431ca08d7504ed121240c7803e35bfb369154c1af605ec3baa168600e56a25f5be2d"}, {0x3, 0x8000, 0x80, &(0x7f0000002800)="71489b9f6e88de1429dcdd4c4d7362c4bddcd1c0dcbc0b163f41a6d607437cbd26fd57166fb9d3033c38122e6ad11342557d959760bf945fefe0fc780fa1c5bf114fa02cf6fb0625f0944b871eac09edb7b356f5571511431befc1164bc389a7cec17d317702171429ee363a4ea66cc55dc755da117d6a543d6a49e06311520118584f97d4f88b562dd63601ceb339211a2d3e4c950dabc9936a4ee763d899ad286c818bf5bad5a1c7a3df615cfa085f880c6c70bb34a1c534e43551da5ba93b74e4dc391836e2b8d0e1b9d1eb864eced2ab2e70dc06b664f26e2f56a1d8ebd350ce5be3a1dced3dfda5a6c70464f55eb364ad5e679ba77a7b08fbd11729bd88061865eeb6c38dbe80f0e28264222ad5524a091f8902565d11cde657500c3dfdf9c7b0b1413b887eee72d515f7c3c22ba99ee08b44aec49ec865b4ba4cce79d22a9bb017f831b8acc5f6c5666973da989b51da49f9d028cf1dead0c214911f7c907b7ee2bdc9c5843c831bee1693a8b22e9f832b48a7e13df1e48f9608d5a0fb7d1ce95ce1c451d43f26809942228a636480049936ee3b8d83f7fc16d4f2419e299be0dc4156e5608d24aada0d05a6c2bcc670dd5f60a288916f177a3b0d8439c3763c3e46bee210280cd5f31ebedf1fbb2cd6230829a7b593ec818531372021a426ac50db7fe8b56712c7527a2c8281bb41c7c94803deaf5240633b318bc3bc03b5839bbf4f8753334681d753bb6fa188572be9096b07a95f0e65e67077356b9cd2893ede3c6b6ca92cc3eb448cb65483f9ad1ad737fab55600f6f4c3563f3d548eda1556165ca33a5168939eb1e778533dc2457a88a1e4694ca121159e114be136f148d1d8e451acfa371d367756dd58613c5b9ec8df04c6e25923319351cfaf86b6f2e51caa1d750412fa681c18f57912b3491c762340b53b9e8f3b07e19bb305acfa943d132b22cf7f1bc2dde0f852809137f25399014f4f3bf59e97ad74843af8e7df7675cc77c7a96621a7d3e20119504dbcb1131f7b72ec390570c0f8770bc3aa1b9480d48ccaed50386a593a4ee372415e86487c1fb5fa2b2a13d9abee3dccbc831da4a65231a2bf363aea4bc96f253ed06015bb3769985c33fdf7e4866491441feb23d88b18e0506cbf450716cb43654594a05edbd88265c4305f0722dfdc4ef7c474f75bfcc8fb59b9b5f3a102ed41b0fe90d7ab352280bd5b3aed91b92b7909074721d44ccf064440736396ea557a4b2836f61f9252882973744fa508127d962747cd779bf750e7f4bffa6d9011faa0a9ba73822abe5fc9e2ef4390292aac7bd423e9377ba2080316a07ced8d4ea6cbbd0c3016f29193ace25a7074d0624e00b7d7d6846b3d52894649dc140765408fc0b466b0075eb23bc1a350feea7532120d865246fc0c2e5b8fd425787ba5fa98562203cc88e1c1427a0983d62ebfb49844e7d6a1ca900730d0d695715e1b2b1d25a636156aacddcdbb73aec205ae6cfdb2703ec70c5db61b131cb3105c88996ec6a0b7c40c9e11888de0ea2ec31c1fe52e490870a22bfc9147b11a48e9a82551d673c738be38f9861c75b8a8249dac913751c41e2d0d763b2dfdc345bca234e410b1a73039333f7d79ab10361f2933b6b694df22e27e9714e0c7f8485223eab490dc9dce6e90bba72632138947a56811fd4df4c4eabe5c10b05a4280536fa5341cb88d36d89db8a6146281b3dfd61f7faf0fb82b4e10c80b02c0b2d2b02b0116dfbc9eb9de8e6fe5da15f862cbfa4a5d3add296ac302c6cf54b61c63b13492a8354e3c8ee58c47363c2b872a25763a37ac8244d34ba3a49f22725b036766b20732453625dcc02e9ede455bcf6946faa292f21efdbfd0cd85a09d74c712526b1e10d2ecb1b3456227db0b94bed407a42eee9b2c81b15cd67ce2c72fcda1057aa62eab69be6bcd55106af29f5815a62b42f67cc6f8da7d6e3471683e28ce636e0ca7f3892eb789407433118328d600c12007e83cc0108a9ffec281c2dc79856ec857146fb8a54742c773e7e9d725a11aae2988389a9669e9745c19d31576895667a1d5f92ae66b7bb84b9eebfbabcc78ac7c3e8dd905dee1f81978f86b09592148b5a62e4a7dd6393c7f5166bbe52ec2285dad3339b02f7564a4d5828874c69af418ad60542922cba8be9847468e5eaf66cc1e85b731ed8f5ed6b9181478cc41f843dd993765df5086f993e72c66b56669df08c9a2622e4975e8ba596335aad6bb57f8a2255b720c8e29f09c5e3d446478a46318e8bde2a1f1fb00840f64cfa0fa50f267b562729f5185659e5d8d559dbe8d044c334e73fe26e70063fe7341c351e92c9231a4b84a2aa71f2a44d63b60217de5ba958b6da45391e622e0b0706e88c1beac495e21132ddfadaf85f8986b9d11608512e3a2d889798e30d37f4af2f022f0c0f6d390f006ea14c2f8b3221a8eb965f326375da6a8b60fe4a79ee0b0885e236ec70c455c5ba42aae18943d10d7dc94c811c814ea1a03789ab9decfe35305fb7ca1ca6cd69c96b85eca2eddd798410d714b1286337c0301189ab63392cb1f59555e55e993a4c0576cf7eb984bf107fc08e7472deb5347ac65975768cc46257dc1a830d213248ae01d245d7f071099806366272241614546544e92cfed9ac6e1f1fd740519dd1c832aaa859e074c7d94c5b2590612c2c3e16906c43f5dd003c42928f47d11dc6b43d0cd456de4554307295202713deac71be73d96415970f36a966edbed95805f25a5f6e7559e5c23ee405da6359df6f40e7a518a723f99487b1ef0df39b3437c19e64579ab8de96de9e99b7441c4616f293c915c222fc1814293aab078d1daba3937baa86001b7709ae47e52ac441fdd6606279e030568ec4c4d6d590bdc5e02ed4fc05af97d0cdb3d95130ab4e032b669ced5538545786d3b3758b68d3f7f1beffdc4672ee00f0aad325a3d36e1ad1cb8c375510ce00097364686be81696ba4ae674bc51a9029f458b772d7a636b8f90d6991eaf87320bef9d58d88f3cb00f98c8ce2ac4236b9b94c9923ea0463ef973598a376c7964b2a16cc2a92a98d0b55aa0dd0bb2aa83cd9cd668c573df2f996c4a605771c293b4ee62d85c40e0066db647a2482fbbafed40c5254517dde9181e43409c6884fef4f8ba3a3d04586235b936c07a62831cc9d95ae6d63dd5f9a44df1759863cfd7615ff1a8e53bf6c6b819a6d13ccbc43ada73cd81e1854cc62c0dc1ae82b16e8c2761ce442a065d923cc8cecffc009a117c8725e310f319455ec33c1cf0b4deaa0fc9c3469a3fabbca47786281f86e13fedd60616eb55d36f58eff969ba517b63e3378743fa0999286d7cbd158b361e4bd955f470f9ba99b6de33f67461aa86d962570fa82dfae42cc7058d7986fc190b52d2f44e713bc70ce01122742163f0e56120eaaee0c7ea92347042c833cc1b89e4732fe13587dfcd5b8bb4265398871ceba9b76975e6b627ddab3e903857f2dc2bcb24c54a7057045ad30b20df46f9581dfc60ac7596a5bfb14ab8ebaa8cdd5cd83143efcaae2074a04c599304604f93591c6bea2eb75b9cbdd15ac5dc76a92407e3f511c0091aa338768d70455252d37173dabb30badd52c8866d3023dca730cb0b77a8a783e5bce3246de7772ffa2e992e7623e6ac375106ed2783a7a99365789e637a8aa685c2bf38409bea327309540710b11e78737f02fc6ba3efba6cf27d917f7c6ebe4b86fecdef26f5cb8c9d00ae2cda11a77079e5b3200c23f98b549d3bb840536bfe1f8363e2d2b1db43afdf06488fa75523b8bbdfed78f71f74e18034568e825ee2cc5dc0b7a7e8f1cc150d48eb9bd95c2e8a1841f06077fcab16527710d4d3d94235c8a4445d4fbf99febbb913fd54872066ad239135e4f2a294fcd79e9f5ccbd5af230ac4f04813e18ffe4503fd0a638ee5df51196555bef40d202f75215e0de6f5090841b2479f0a6e127abc5152b00f88698018d59ff102401436a91fc31ea3f5610bc6f998a8db9c297545a4acfff62b7619e4e859fa3cc3f7f4055c61bca5dbaf0862cff7777104c57a3748b6817d4dec56198d67be7d5d7d1188f2366b3e9f8cc49aee555e4684644bd5a972cc50785fcd9ddb378fdcf92426814ddd2aecdf4d11c020c102938b2e508242700f28a287198c0259a31b2175e52d33d57ab48c98b54997ca62836829177840881b7740490ad632ddf73da57af1c9d54673130cce1eb6521b0ed60d6d621f4ecfc7f6094b462ddb4958cafcc1bff785391b841077df97c2a9e5e803b5d7867f57375e1a2f65d2f8bc53adc6032e363984ea20da7183777d0ddccbdfb6d798eb080435c4a037987a0a3a6b2629373006c1b9c45a5b64a0e82c9959104c74d32eb668ce653029e7717675f5b3dd7d550052dd749667dfbcf958998d85e053de3403cd5953bcf9de4f36a0ab88e8ca8c0741c124a5b469d65eefba81eec157ccc9bd13bdf715ea04becafc8f019fdbe47d3d6879339cbda504fb31ae7617aa5a77ea048bf3bc74a577ca54780c2981db1cf905c1d7ead7b57644dcac6f2886963bac48e9c779045939423764f0f9a883e70ed3a2761e2831cc0e5a944e43a7dbdb7cc6fcf8cffe1aea4ba653634915a262bacdd7897d3e18dfa69cf8a9f31a3f9eea6cd44fe055489ee21ec778381c6608de39f3bbdad70dbbfa8878ab1eeeba0f85a374492c61f3ff69a8f32e46c7bc7cc45a49fe78e484d839a43926ef3d34948df210617dfc9a95eacf2e45f7db142fea8c07f170051a2f856805f3f8d17a6f63d1c343e7814502a84c96bdb555852c41fac2626bfeac15ee410ebdf3a52beec741598e35dd4f664fe1faa6157a778fd861091ef2ecd39d57a688a886d570917d2383ff5d81a5feff3805966a2cf6cc349fe02b0c2f349cff4b594d7650ca819e6653ae2df4551d24b23a2970a188dc96eae8669c03f2ae8798bbc94cdf4206a35f4bf243ac03794bdb53c874d4e5a90669963a1a801eebecef3171b3cb682271d3706ea309407272c1be7e8f104e15199ee96cf539fd12f16576f08fb05cfe14557a3cc6b119ebb3282de3ace8b4007298b03257e2c40efe3fa6608066068c34ba63853496bfde3104910ad6d6b26db01202983115cf347bc2d2e42d7e4a6b674896275742fdc683333e09122f1aff5994bc34c75efe42ef742c4d855e409d3077bf6299f478b650597727f533abeda88baba4e2d6c56c0fa8f2372af8992df896c64948ea5e5a135d6a5625ebe5d37ee1b9fbcf0a8afe888ccde5fa48610a998df3ad24da6e6b3d9ac4420802681c52b31c0817f45334d7a6a10b714d6b45f054d20e5090c2bd9b169a5b95315c7f6f1c92e8bfe8a10eaafa516b62cf4cdfbd926d52aeb007d93054fb5b038ed8513833bb6b36587f855f2f20e705255bfa6df36652714e634f4a5666709903976bc1c6cb8865087d18365776619b78b420c77f91702072cd0fa55192ef8632c8b14a1c43d0b35d76666b39ae841506759cda8451f2ed89a4a153433b1af0837728a55af4710e650ee85f0bde4ce7cc3ea0a2cdddd8a6bb4e67ebd292631541cb04e78a7628572edcb25a8970565529d829efc8fd29a18d7ca03b2dfeea123f1883ba0088364e5319e3b219415337904b59a54225a18d041d333b2f4a833b8f74b2f55be05f9bc0f05cbc4c58b7e733f12f6dac3141e5676aa326c24cb675e8dd43a70973d4fb243e2a6423bf212115c2d9a2f30be07a65e7a046b090cb98599b716f9dcd6971e34cf714999271bbde1066b78be1d96f9b659"}, {0x0, 0x8000, 0x7, &(0x7f0000003800)="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"}, {0x2, 0x110, 0x4, &(0x7f0000004800)="b90c9e3c72dcdd1a86a811a1f97a8ef77c46c345c54209d2e9dc5e3ca0dc64bf3127"}, {0x1, 0x638, 0x9, &(0x7f0000004840)="e36b41284c5ca719ffb34549765cb6b7a141e08c525e01486c0af6c2edd4b05832d05208e19596f7797d77fb4dd4d07ee6752ffcd87280896497cba77ba57fc4a2b3254cbff01a42dfeea65e40b0bd807bc701f4c6b4cb0715859d4d57202339ee40cb9a53e50249e1298c7ee16e713ce72a968146f9fcfdda4684443e5832727af57ec5e791ac914646a55c6828dbc48e2637b03f8f447ad5a5f760a7dc3e6a74fbb04982f86e8795cc0f9b29fa77336fecd87edee58905b84ee654e689d64fbe2aaa2eb79a7c"}, {0x1, 0x240, 0xf17dbe67, &(0x7f0000004940)="5646f948bbd83bb48a02ea00ef627d78f17534da94fac8380c1dae1201ac8861b2975059df3cefd415fd730a04777058862dd3dc784205067d1316896edd173837829c70d06eaf84"}, {0x3, 0x310, 0xe3e2, &(0x7f00000049c0)="b2edd625ef72e24931772e7b6ddc53a967bcae15ab6a7c628f1670afb9f60bc330197c2d636e4635c10054f5e99819ca799dabbf5d32e6b7260c4fc67480c7535ea2a06164a4ec888fed7c1a058a1ace968abe0168944a8dfd8b2915f80e60591109"}, {0x2, 0x298, 0x4, &(0x7f0000004a40)="74446bf4bf157c70c9077d75eb2c3293cf66f2741fb4af151153171b53c48df0f2dd8e7b7ff264ef4eac86037aee35d60c9bd5a7f0c7c736b044e1789dac4985ee95386c28e83600960b893896378e2f8244f6"}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x6, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r3 = openat$incfs(r2, &(0x7f0000004c80)='.log\x00', 0x109000, 0x10) ioctl$FIOCLEX(r3, 0x5451) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 153.038074ms ago: executing program 4 (id=1278): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 142.334781ms ago: executing program 4 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 138.521159ms ago: executing program 1 (id=1280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) listen(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x42481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 53.408259ms ago: executing program 1 (id=1281): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/11, 0xb}], 0x5, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x40, 0x440000) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000004c0)=""/147) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x50, r1, 0x9c81f000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0xf7fffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) 52.701212ms ago: executing program 1 (id=1282): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x4e, {0x4e, 0x8, "aa084c9dfb00fee31da394acfcd93ff3e1f744f598ca9411a932877802ff374719a19dbd2ff310cfc6513b17e0dc29318e5e60802c63c6d9117271ee5e1591c7b476bc8e5c7d2cdb9d816ab1"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "89e778241c10304d9b23b370677877e08d48bdfd7fecbfafd09710b4"}}, &(0x7f0000000180)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xdc, 0x1, 0x8, 0xf, 0xd39e, [0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x81, 0x40, 0x5, 0x4}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x8, 0x6, "1dbe520f", "c6e00658"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x0, 0xa0, 0xc, 0x0, 0xdc9}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x60, 0x31, 0xeb, "883033112ebacb10dee56d1ec51ba92a26e3d3557ca59dc41ef6b2249525c77524cedd30112ec6793ad7b2b5d636cadc7f0e4b4f5de8f1214e6b1fa112bf70bf87d1666b7bb3df952c8bad740f00145aac2317e5f72096a496c4814c658bbaf3a596d96cb798bee0b9b4980b03707872c5bd30213e25528c3cd4edcb4e828664066f7de641fbb6765e241ecbc0a335cc26000d7583c566fdce4ebb44366ad44af7220b4b0a9eda5545d6c4f4303b141f813f4218c3e37e4cebe84aa7c06842bd012b9f60de26dc0f7ac31579898f5dbcb094c40147716e03cee9165ca20b94cf7e780c307a05dc338929be"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x20, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, '#|'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x4d}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "d2a1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xf5}}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r5 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x89ee, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x3, 0x10, 0x9c, 0x67, 0x0, 0x4, 0x6, 0x0, @remote, @empty, {[@generic={0x94, 0xc, "ad7fe00b9da4cacc45b9"}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xfff7, 0x0, 0x0, 0xbd48, 0x8, 0x1, 0x4e21, 0x4e25, 0x4, 0x400, 0x0, 0x0, 0x1}, [{0x3e0, 0x7fff, 0xfffffff7, 0x0, 0x3ff, 0x0, 0xc, 0x964}, {0x180000, 0x4, 0x0, 0xa, 0xfa1, 0x75, 0x2, 0x8005}, {0x1, 0x7f, 0x80, 0xfffffffd, 0x100, 0x40, 0x3, 0x2}]}}}}}, 0x0) 52.415498ms ago: executing program 2 (id=1283): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000340)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000c00)=""/74, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0)={0x9, 0x0, [{0x25000, 0xb8, &(0x7f0000000580)=""/184}, {0xdddd1000, 0xa7, &(0x7f0000000640)=""/167}, {0xeeee3000, 0x48, &(0x7f0000000700)=""/72}, {0x2, 0xef, &(0x7f0000000780)=""/239}, {0x30000, 0x5b, &(0x7f0000000880)=""/91}, {0x2000, 0xf8, &(0x7f0000000900)=""/248}, {0xdddd0000, 0x5a, &(0x7f0000000a00)=""/90}, {0xeeee8000, 0x1000, &(0x7f0000003080)=""/4096}, {0xffffffff, 0x9, &(0x7f0000000180)=""/9}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063001303c191e2e3b0306e987f9f65000000000900000000"]}, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r7, 0x541c, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0xbb80, 0xfffffffffffffffe, 0x8}) 3.831748ms ago: executing program 0 (id=1284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1e, 0x9, 0xb0}) r1 = syz_open_dev$audion(&(0x7f0000000440), 0x100000001, 0x4400) faccessat(r1, &(0x7f0000000480)='./file0\x00', 0xa0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000500)={0x0, r1}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x62}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x20008010) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futimesat(r1, &(0x7f0000000680)='./file0\x00', &(0x7f0000000740)={{r2, r3/1000+10000}, {r4, r5/1000+60000}}) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000780)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x44080) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r6, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) recvmmsg$unix(r1, &(0x7f0000001300)=[{{&(0x7f0000000a00), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000b80)=""/16, 0x10}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/68, 0x44}, {&(0x7f0000000e00)=""/253, 0xfd}], 0x6}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/225, 0xe1}, {&(0x7f0000001080)=""/148, 0x94}], 0x2, &(0x7f0000001180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}], 0x2, 0x40000040, &(0x7f0000001380)={0x0, 0x989680}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000013c0)={0x3, r12}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r13) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001480)={@mcast1, 0x0}, &(0x7f00000014c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r10, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001540)=[0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0x73, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001c00)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)={0x368, r14, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/%-.]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x722c102a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'\\-*)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',^,$&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x404b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.-!-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '}*+)\\\')%#)\\)&\\/],@{^$#{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23b}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x31e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "64abb5b267e5a32e03022826cc57c96c36c8104400d49abfa47c74d8699fda6bd761b4dffd9cf53aaf2d956ac1b8f24c5aa8eedf5fdb01cb02bf5ce6dc7c4fd9f21983e3decda8651ec7a236747c6338e08ac9614bb66c7dd7c55c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "98ee6d143815392f9f3a399052a9b1822c55514d46ad8bb9264a531c71a128eb937c9c8cc09eb619df477ce0250aa6f2a85f3d86ea28f0277e2bcab6bbf7115b5c3e386799feea9a8789ea0a"}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r17 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001c40), 0x480, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001c80)={{0xeeef0000, 0x8000000, 0x3, 0xb, 0x0, 0x6, 0x4, 0x3, 0x7, 0x83, 0x6, 0x5}, {0x8080000, 0x25000, 0x7, 0x18, 0x7f, 0x1, 0x7, 0x3, 0x92, 0x5, 0xdc, 0x9}, {0x1, 0x1000, 0xa, 0x0, 0x4, 0xd, 0x80, 0x1, 0x7, 0xd, 0x69, 0x7}, {0xd000, 0x70000, 0xa, 0x3, 0x6, 0xc, 0x1, 0x1, 0x5, 0x61, 0x6, 0x1}, {0x6000, 0x70000, 0xe, 0x45, 0x6, 0x10, 0xf2, 0x9, 0xff, 0xe, 0xf3, 0x80}, {0x8080000, 0xc000, 0x9, 0xea, 0xf, 0x5, 0xb7, 0xff, 0x9, 0x1, 0x3, 0x3}, {0x8080000, 0x26000, 0xc, 0x1, 0xd0, 0x3, 0x2, 0x6, 0x1, 0x7f, 0x7, 0xa}, {0x10000, 0x8080000, 0x9, 0x0, 0x0, 0x10, 0x7, 0x3, 0xcd, 0x1, 0x7f, 0x2}, {0xc000, 0x8}, {0x50000, 0x9}, 0x4001c, 0x0, 0x0, 0x202034, 0x9, 0x1100, 0x100000, [0xc018, 0x7fff, 0x8, 0x2]}) ioctl$VIDIOC_G_AUDOUT(r10, 0x80345631, &(0x7f0000001dc0)) r18 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001e40), r11) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r18, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10040000) ioctl$TIOCEXCL(r9, 0x540c) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r19, 0xc0845657, &(0x7f0000001f80)={0x0, @reserved}) ioctl$GIO_CMAP(r17, 0x4b70, &(0x7f0000002040)) syz_open_dev$evdev(&(0x7f0000002080), 0x7, 0x88801) 0s ago: executing program 0 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 0s ago: executing program 0 (id=1286): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x5) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000100)=[r2, r3], 0x0, 0x400000b5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 32): avc: denied { connect } for pid=7055 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.800925][ T40] audit: type=1400 audit(1766783466.379:333): avc: denied { getopt } for pid=7055 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.876901][ T7059] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 83.926530][ T983] usb 7-1: Using ep0 maxpacket: 32 [ 83.929077][ T983] usb 7-1: no configurations [ 83.933698][ T983] usb 7-1: can't read configurations, error -22 [ 83.954847][ T7072] netlink: 'syz.0.326': attribute type 5 has an invalid length. [ 84.063672][ T983] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.146615][ T7082] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 84.214251][ T983] usb 7-1: Using ep0 maxpacket: 32 [ 84.216974][ T983] usb 7-1: no configurations [ 84.218782][ T983] usb 7-1: can't read configurations, error -22 [ 84.221348][ T983] usb usb7-port1: attempt power cycle [ 84.281522][ T7090] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 84.359625][ T40] audit: type=1400 audit(1766783466.949:334): avc: denied { remount } for pid=7101 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.364916][ T7102] mmap: syz.3.336 (7102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.368612][ T40] audit: type=1400 audit(1766783466.949:335): avc: denied { ioctl } for pid=7101 comm="syz.3.336" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.468741][ T40] audit: type=1400 audit(1766783467.059:336): avc: denied { ioctl } for pid=7110 comm="syz.3.341" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.583766][ T983] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.604950][ T983] usb 7-1: Using ep0 maxpacket: 32 [ 84.609858][ T983] usb 7-1: no configurations [ 84.612018][ T983] usb 7-1: can't read configurations, error -22 [ 84.674471][ T7126] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 84.757910][ T983] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.803897][ T983] usb 7-1: Using ep0 maxpacket: 32 [ 84.807064][ T983] usb 7-1: no configurations [ 84.809021][ T983] usb 7-1: can't read configurations, error -22 [ 84.813276][ T983] usb usb7-port1: unable to enumerate USB device [ 85.753667][ T7136] comedi comedi0: reset error (fatal) [ 85.887979][ T7149] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 85.891303][ T7149] __nla_validate_parse: 7 callbacks suppressed [ 85.891315][ T7149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.353'. [ 86.079365][ T7158] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 86.553409][ T7176] bond1: option downdelay: invalid value (18446744073709551615) [ 86.558182][ T7176] bond1: option downdelay: allowed values 0 - 2147483647 [ 86.571036][ T7176] bond1 (unregistering): Released all slaves [ 86.581461][ T7179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 86.620719][ T7182] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 86.623288][ T7182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.363'. [ 86.686675][ T40] audit: type=1400 audit(1766783469.279:337): avc: denied { setopt } for pid=7184 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.696625][ T40] audit: type=1400 audit(1766783469.279:338): avc: denied { ioctl } for pid=7184 comm="syz.2.364" path="socket:[15627]" dev="sockfs" ino=15627 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.798844][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 86.901524][ T7200] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 86.965479][ T6292] udevd[6292]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 87.143730][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 87.198004][ T7227] netlink: 'syz.0.376': attribute type 17 has an invalid length. [ 87.200643][ T7227] netlink: 5 bytes leftover after parsing attributes in process `syz.0.376'. [ 87.211242][ T7227] macvtap0: entered allmulticast mode [ 87.213437][ T7227] veth0_macvtap: entered allmulticast mode [ 87.218231][ T7227] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 87.225421][ T40] audit: type=1400 audit(1766783469.819:339): avc: denied { append } for pid=7226 comm="syz.0.376" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.313915][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 87.317156][ T54] usb 8-1: no configurations [ 87.319801][ T54] usb 8-1: can't read configurations, error -22 [ 87.385954][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 87.388992][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 87.406820][ T7233] bond1: option downdelay: invalid value (18446744073709551615) [ 87.409907][ T7233] bond1: option downdelay: allowed values 0 - 2147483647 [ 87.416480][ T7233] bond1 (unregistering): Released all slaves [ 87.443838][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.529692][ T7239] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 87.583325][ T40] audit: type=1400 audit(1766783470.169:340): avc: denied { write } for pid=7245 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.613669][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 87.616697][ T54] usb 8-1: no configurations [ 87.618682][ T54] usb 8-1: can't read configurations, error -22 [ 87.623426][ T54] usb usb8-port1: attempt power cycle [ 87.646393][ T7250] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 87.649569][ T7250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.383'. [ 87.887601][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 87.894676][ T40] audit: type=1400 audit(1766783470.489:341): avc: denied { mounton } for pid=7264 comm="syz.2.389" path="/82/file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 87.913159][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 87.949763][ T7275] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.976801][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 87.989191][ T7272] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 87.994916][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 87.997404][ T54] usb 8-1: no configurations [ 87.999355][ T54] usb 8-1: can't read configurations, error -22 [ 88.072183][ T7285] bond1: option downdelay: invalid value (18446744073709551615) [ 88.075430][ T7285] bond1: option downdelay: allowed values 0 - 2147483647 [ 88.078954][ T7285] bond1 (unregistering): Released all slaves [ 88.144032][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.168168][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 88.172143][ T54] usb 8-1: no configurations [ 88.177707][ T54] usb 8-1: can't read configurations, error -22 [ 88.178030][ T7297] FAULT_INJECTION: forcing a failure. [ 88.178030][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.185532][ T7297] CPU: 2 UID: 0 PID: 7297 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.185553][ T7297] Tainted: [L]=SOFTLOCKUP [ 88.185557][ T7297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.185564][ T7297] Call Trace: [ 88.185568][ T7297] [ 88.185572][ T7297] dump_stack_lvl+0x16c/0x1f0 [ 88.185613][ T7297] should_fail_ex+0x512/0x640 [ 88.185637][ T7297] _copy_to_user+0x32/0xd0 [ 88.185656][ T7297] simple_read_from_buffer+0xcb/0x170 [ 88.185673][ T7297] proc_fail_nth_read+0x197/0x240 [ 88.185685][ T7297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.185697][ T7297] ? rw_verify_area+0xcf/0x6c0 [ 88.185710][ T7297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.185721][ T7297] vfs_read+0x1e4/0xcf0 [ 88.185734][ T7297] ? __pfx___mutex_lock+0x10/0x10 [ 88.185750][ T7297] ? __pfx_vfs_read+0x10/0x10 [ 88.185767][ T7297] ? __fget_files+0x20e/0x3c0 [ 88.185786][ T7297] ksys_read+0x12a/0x250 [ 88.185799][ T7297] ? __pfx_ksys_read+0x10/0x10 [ 88.185816][ T7297] do_syscall_64+0xcd/0xf80 [ 88.185832][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.185843][ T7297] RIP: 0033:0x7fe186b8e1dc [ 88.185852][ T7297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.185862][ T7297] RSP: 002b:00007fe187af1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.185872][ T7297] RAX: ffffffffffffffda RBX: 00007fe186de5fa0 RCX: 00007fe186b8e1dc [ 88.185879][ T7297] RDX: 000000000000000f RSI: 00007fe187af10a0 RDI: 0000000000000005 [ 88.185885][ T7297] RBP: 00007fe187af1090 R08: 0000000000000000 R09: 0000000000000000 [ 88.185891][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.185897][ T7297] R13: 00007fe186de6038 R14: 00007fe186de5fa0 R15: 00007fff198af6b8 [ 88.185910][ T7297] [ 88.187886][ T54] usb usb8-port1: unable to enumerate USB device [ 88.260309][ T7301] syzkaller0: entered promiscuous mode [ 88.262135][ T7301] syzkaller0: entered allmulticast mode [ 89.226937][ T7321] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 89.410223][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 89.410243][ T40] audit: type=1400 audit(1766783471.999:345): avc: denied { watch watch_reads } for pid=7337 comm="syz.1.412" path="/dev/dlm-monitor" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.690568][ T7359] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 89.847744][ T7377] syzkaller0: entered promiscuous mode [ 89.850937][ T7377] syzkaller0: entered allmulticast mode [ 89.920516][ T7384] netlink: 'syz.3.429': attribute type 5 has an invalid length. [ 90.013493][ T40] audit: type=1400 audit(1766783472.599:346): avc: denied { mounton } for pid=7387 comm="syz.3.431" path="/96/file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.125269][ T7388] process 'syz.3.431' launched './file0' with NULL argv: empty string added [ 90.305078][ T40] audit: type=1400 audit(1766783472.899:347): avc: denied { map } for pid=7424 comm="syz.0.443" path="socket:[17570]" dev="sockfs" ino=17570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.324286][ T40] audit: type=1400 audit(1766783472.899:348): avc: denied { read } for pid=7424 comm="syz.0.443" path="socket:[17570]" dev="sockfs" ino=17570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.479014][ T7442] bond1: option downdelay: invalid value (18446744073709551615) [ 90.482124][ T7442] bond1: option downdelay: allowed values 0 - 2147483647 [ 90.489730][ T7442] bond1 (unregistering): Released all slaves [ 90.649978][ T40] audit: type=1400 audit(1766783473.239:349): avc: denied { map } for pid=7450 comm="syz.3.451" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.015329][ T7470] __nla_validate_parse: 14 callbacks suppressed [ 91.015341][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 91.021622][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 91.152577][ T7481] bond1: option downdelay: invalid value (18446744073709551615) [ 91.155815][ T7481] bond1: option downdelay: allowed values 0 - 2147483647 [ 91.161088][ T7481] bond1 (unregistering): Released all slaves [ 91.288037][ T7493] validate_nla: 5 callbacks suppressed [ 91.288049][ T7493] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 91.369070][ T40] audit: type=1400 audit(1766783473.959:350): avc: denied { getopt } for pid=7499 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.415011][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 91.418085][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'. [ 91.442526][ T40] audit: type=1400 audit(1766783474.029:351): avc: denied { getopt } for pid=7510 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.516991][ T7520] bond1: option downdelay: invalid value (18446744073709551615) [ 91.520365][ T7520] bond1: option downdelay: allowed values 0 - 2147483647 [ 91.524439][ T7520] bond1 (unregistering): Released all slaves [ 91.622964][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 91.631170][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 91.641043][ T7527] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 92.036040][ T40] audit: type=1400 audit(1766783474.629:352): avc: denied { create } for pid=7561 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.043208][ T40] audit: type=1400 audit(1766783474.629:353): avc: denied { getopt } for pid=7561 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.077645][ T53] cfg80211: failed to load regulatory.db [ 92.170784][ T7576] loop6: detected capacity change from 0 to 2640 [ 92.174746][ T7576] buffer_io_error: 31656 callbacks suppressed [ 92.174761][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.181664][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.185490][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.189534][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.192804][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.196651][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.200227][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.203502][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.208376][ T7576] ldm_validate_partition_table(): Disk read failed. [ 92.211325][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.215057][ T7576] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.217989][ T7576] Dev loop6: unable to read RDB block 0 [ 92.218935][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 92.220275][ T7576] loop6: unable to read partition table [ 92.223886][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 92.226772][ T7576] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 92.410039][ T40] audit: type=1400 audit(1766783474.999:354): avc: denied { listen } for pid=7590 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.678020][ T7602] bond1: option downdelay: invalid value (18446744073709551615) [ 92.681461][ T7602] bond1: option downdelay: allowed values 0 - 2147483647 [ 92.689786][ T7602] bond1 (unregistering): Released all slaves [ 92.722931][ T7607] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 92.727669][ T7607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.499'. [ 92.927922][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 93.107816][ T7634] syzkaller0: entered promiscuous mode [ 93.110520][ T7634] syzkaller0: entered allmulticast mode [ 93.147427][ T7636] bond1: option downdelay: invalid value (18446744073709551615) [ 93.150120][ T7636] bond1: option downdelay: allowed values 0 - 2147483647 [ 93.154875][ T7636] bond1 (unregistering): Released all slaves [ 93.287188][ T7644] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 93.631158][ T7667] syzkaller0: entered promiscuous mode [ 93.633542][ T7667] syzkaller0: entered allmulticast mode [ 93.689756][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 93.701083][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 93.750303][ T7675] bond1: option downdelay: invalid value (18446744073709551615) [ 93.752899][ T7675] bond1: option downdelay: allowed values 0 - 2147483647 [ 93.758446][ T7675] bond1 (unregistering): Released all slaves [ 93.810566][ T7683] loop6: detected capacity change from 0 to 2640 [ 93.815260][ T7683] ldm_validate_partition_table(): Disk read failed. [ 93.818203][ T7683] Dev loop6: unable to read RDB block 0 [ 93.820977][ T7683] loop6: unable to read partition table [ 93.843864][ T7683] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 93.902548][ T7687] syz.2.528 uses obsolete (PF_INET,SOCK_PACKET) [ 94.038583][ T7699] syzkaller0: entered promiscuous mode [ 94.041254][ T7699] syzkaller0: entered allmulticast mode [ 94.072911][ T7701] netlink: 'syz.1.534': attribute type 10 has an invalid length. [ 94.079699][ T7705] SELinux: ebitmap: truncated map [ 94.086152][ T7705] SELinux: failed to load policy [ 94.230414][ T7712] bond1: ARP target 4.0.0.0 is already present [ 94.232623][ T7712] bond1: option arp_ip_target: invalid value (4) [ 94.236193][ T7712] bond1 (unregistering): Released all slaves [ 94.528610][ T7732] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 94.584369][ T7738] bond1: option downdelay: invalid value (18446744073709551615) [ 94.587795][ T7738] bond1: option downdelay: allowed values 0 - 2147483647 [ 94.592117][ T7738] bond1 (unregistering): Released all slaves [ 94.595402][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 94.595416][ T40] audit: type=1400 audit(1766783477.179:365): avc: denied { ioctl } for pid=7728 comm="syz.1.543" path="socket:[18753]" dev="sockfs" ino=18753 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.015877][ T7787] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 95.064223][ T7791] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 95.088131][ T7791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.105752][ T7791] bond1: (slave erspan1): making interface the new active one [ 95.111704][ T7791] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 95.190909][ T7802] overlayfs: failed lookup in lower (newroot/105, name='file1', err=-40): overlapping layers [ 95.201752][ T7802] overlayfs: failed lookup in lower (newroot/105, name='file1', err=-40): overlapping layers [ 95.202415][ T7798] syzkaller0: entered promiscuous mode [ 95.208361][ T7798] syzkaller0: entered allmulticast mode [ 95.308509][ T40] audit: type=1400 audit(1766783477.899:366): avc: denied { view } for pid=7807 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.420351][ T40] audit: type=1400 audit(1766783478.009:367): avc: denied { read open } for pid=7825 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.444526][ T40] audit: type=1400 audit(1766783478.009:368): avc: denied { getattr } for pid=7825 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.456395][ T40] audit: type=1400 audit(1766783478.029:369): avc: denied { add_name } for pid=7822 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.469051][ T7828] loop6: detected capacity change from 0 to 2640 [ 95.472462][ T6292] ldm_validate_partition_table(): Disk read failed. [ 95.479914][ T6292] Dev loop6: unable to read RDB block 0 [ 95.482164][ T6292] loop6: unable to read partition table [ 95.496929][ T7828] ldm_validate_partition_table(): Disk read failed. [ 95.500166][ T7828] Dev loop6: unable to read RDB block 0 [ 95.502823][ T7828] loop6: unable to read partition table [ 95.505804][ T7828] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 95.685578][ T40] audit: type=1400 audit(1766783478.279:370): avc: denied { execute } for pid=7842 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.697816][ T40] audit: type=1400 audit(1766783478.289:371): avc: denied { execute_no_trans } for pid=7842 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.812538][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.817040][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.820870][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.825923][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.830516][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.849713][ T7743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.961281][ T7743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.058804][ T7743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.072406][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 96.178677][ T7743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.205860][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.209233][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.211882][ T7846] bridge_slave_0: entered allmulticast mode [ 96.218240][ T7846] bridge_slave_0: entered promiscuous mode [ 96.224310][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.227292][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.229740][ T7846] bridge_slave_1: entered allmulticast mode [ 96.232526][ T7846] bridge_slave_1: entered promiscuous mode [ 96.260385][ T7867] __nla_validate_parse: 9 callbacks suppressed [ 96.260404][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 96.286239][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.293176][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.328901][ T7846] team0: Port device team_slave_0 added [ 96.332865][ T7846] team0: Port device team_slave_1 added [ 96.363144][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 96.368553][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'. [ 96.383288][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.388663][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.398182][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.421725][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.429689][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.438370][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.475484][ T7846] hsr_slave_0: entered promiscuous mode [ 96.478081][ T7846] hsr_slave_1: entered promiscuous mode [ 96.483197][ T7846] debugfs: 'hsr0' already exists in 'hsr' [ 96.486939][ T7846] Cannot create hsr debugfs directory [ 96.489881][ T7743] bridge_slave_1: left allmulticast mode [ 96.492012][ T7743] bridge_slave_1: left promiscuous mode [ 96.495742][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.509608][ T7743] bridge_slave_0: left allmulticast mode [ 96.511563][ T7743] bridge_slave_0: left promiscuous mode [ 96.513657][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.817315][ T7743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.823977][ T7743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.829425][ T7743] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 96.833429][ T7743] bond0 (unregistering): Released all slaves [ 97.149413][ T7846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.154768][ T7846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.159738][ T7846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.168024][ T7846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.220171][ T7743] hsr_slave_0: left promiscuous mode [ 97.223344][ T7743] hsr_slave_1: left promiscuous mode [ 97.226130][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.228779][ T7743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.232123][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.238127][ T7743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.251295][ T7743] veth1_macvtap: left promiscuous mode [ 97.253556][ T7743] veth1_vlan: left promiscuous mode [ 97.256011][ T7743] veth0_vlan: left promiscuous mode [ 97.348520][ T40] audit: type=1400 audit(1766783479.939:372): avc: denied { read } for pid=7943 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.793228][ T7951] overlayfs: failed to resolve './file1': -2 [ 97.867883][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.891950][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.909563][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.912577][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.915736][ T5946] Bluetooth: hci3: command tx timeout [ 97.924688][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.927940][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.104601][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.353529][ T7846] veth0_vlan: entered promiscuous mode [ 98.358445][ T7846] veth1_vlan: entered promiscuous mode [ 98.381544][ T7846] veth0_macvtap: entered promiscuous mode [ 98.392805][ T7846] veth1_macvtap: entered promiscuous mode [ 98.415342][ T8001] loop6: detected capacity change from 0 to 2640 [ 98.418224][ T8001] buffer_io_error: 40882 callbacks suppressed [ 98.418234][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.424661][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.428722][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.431447][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.431726][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.434334][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.440445][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.443154][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.450583][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.455940][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.462049][ T8001] ldm_validate_partition_table(): Disk read failed. [ 98.462860][ T8003] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.471729][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.472431][ T8001] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.493461][ T8001] Dev loop6: unable to read RDB block 0 [ 98.494425][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.496286][ T8001] loop6: unable to read partition table [ 98.498236][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.500392][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 98.506651][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 98.515161][ T8001] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 98.517165][ T90] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.561496][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.564866][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.566143][ T40] audit: type=1400 audit(1766783481.159:374): avc: denied { map } for pid=8007 comm="syz.2.602" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.593669][ T40] audit: type=1400 audit(1766783481.159:373): avc: denied { map } for pid=8007 comm="syz.2.602" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.603465][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.609021][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.741097][ T8019] FAULT_INJECTION: forcing a failure. [ 98.741097][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 98.758191][ T8019] CPU: 0 UID: 0 PID: 8019 Comm: syz.4.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.758212][ T8019] Tainted: [L]=SOFTLOCKUP [ 98.758216][ T8019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.758222][ T8019] Call Trace: [ 98.758226][ T8019] [ 98.758230][ T8019] dump_stack_lvl+0x16c/0x1f0 [ 98.758271][ T8019] should_fail_ex+0x512/0x640 [ 98.758292][ T8019] ? kmem_cache_alloc_noprof+0x62/0x770 [ 98.758305][ T8019] should_failslab+0xc2/0x120 [ 98.758320][ T8019] kmem_cache_alloc_noprof+0x83/0x770 [ 98.758331][ T8019] ? getname_flags.part.0+0x4c/0x550 [ 98.758345][ T8019] ? getname_flags.part.0+0x4c/0x550 [ 98.758356][ T8019] getname_flags.part.0+0x4c/0x550 [ 98.758371][ T8019] getname_flags+0x93/0xf0 [ 98.758385][ T8019] do_sys_openat2+0xb9/0x290 [ 98.758395][ T8019] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.758423][ T8019] ? __fget_files+0x20e/0x3c0 [ 98.758441][ T8019] __x64_sys_openat+0x174/0x210 [ 98.758452][ T8019] ? __pfx___x64_sys_openat+0x10/0x10 [ 98.758462][ T8019] ? ksys_write+0x1ac/0x250 [ 98.758480][ T8019] do_syscall_64+0xcd/0xf80 [ 98.758495][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.758506][ T8019] RIP: 0033:0x7f453038f7c9 [ 98.758516][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.758527][ T8019] RSP: 002b:00007f453128b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.758538][ T8019] RAX: ffffffffffffffda RBX: 00007f45305e6090 RCX: 00007f453038f7c9 [ 98.758545][ T8019] RDX: 0000000000149a82 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 98.758551][ T8019] RBP: 00007f453128b090 R08: 0000000000000000 R09: 0000000000000000 [ 98.758558][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.758564][ T8019] R13: 00007f45305e6128 R14: 00007f45305e6090 R15: 00007ffd52a82b58 [ 98.758577][ T8019] [ 99.002297][ T8031] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 99.071034][ T8037] overlayfs: failed to resolve './file0': -2 [ 99.150688][ T8045] SELinux: ebitmap: truncated map [ 99.156478][ T8045] SELinux: failed to load policy [ 99.205777][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 99.208725][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 99.247983][ T5343] ldm_validate_partition_table(): Disk read failed. [ 99.251072][ T5343] Dev loop6: unable to read RDB block 0 [ 99.254515][ T5343] loop6: unable to read partition table [ 99.308728][ T8060] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.499814][ T8074] overlayfs: failed to resolve './file0': -2 [ 99.793456][ T8102] bond2: option downdelay: invalid value (18446744073709551615) [ 99.797367][ T8102] bond2: option downdelay: allowed values 0 - 2147483647 [ 99.802147][ T8102] bond2 (unregistering): Released all slaves [ 99.836821][ T8106] loop6: detected capacity change from 0 to 2640 [ 99.840058][ T6292] ldm_validate_partition_table(): Disk read failed. [ 99.842395][ T6292] Dev loop6: unable to read RDB block 0 [ 99.844658][ T6292] loop6: unable to read partition table [ 99.856965][ T8106] ldm_validate_partition_table(): Disk read failed. [ 99.863837][ T8106] Dev loop6: unable to read RDB block 0 [ 99.866091][ T8106] loop6: unable to read partition table [ 99.869632][ T8106] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 99.899724][ T5343] ldm_validate_partition_table(): Disk read failed. [ 99.902076][ T5343] Dev loop6: unable to read RDB block 0 [ 99.904678][ T5343] loop6: unable to read partition table [ 99.905711][ T8114] overlayfs: failed to resolve './file0': -2 [ 99.978844][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 99.978855][ T40] audit: type=1400 audit(1766783482.569:381): avc: denied { write } for pid=8117 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.997696][ T40] audit: type=1400 audit(1766783482.589:382): avc: denied { write } for pid=8117 comm="syz.4.636" path="socket:[20476]" dev="sockfs" ino=20476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.998216][ T5946] Bluetooth: hci3: command tx timeout [ 100.005954][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 100.030750][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 100.143486][ T8127] "syz.4.638" (8127) uses obsolete ecb(arc4) skcipher [ 100.573057][ T8148] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 100.646608][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.686195][ T5343] ldm_validate_partition_table(): Disk read failed. [ 100.688747][ T5343] Dev loop6: unable to read RDB block 0 [ 100.690611][ T5343] loop6: unable to read partition table [ 100.773960][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.778528][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.783309][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.792493][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.796953][ T8157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.806391][ T8157] netlink: 'syz.4.648': attribute type 10 has an invalid length. [ 100.809897][ T8157] netlink: 224 bytes leftover after parsing attributes in process `syz.4.648'. [ 100.820914][ T8156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.956993][ T5343] ldm_validate_partition_table(): Disk read failed. [ 100.961152][ T5343] Dev loop6: unable to read RDB block 0 [ 100.963291][ T5343] loop6: unable to read partition table [ 100.981346][ T8161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8161 comm=syz.4.649 [ 101.114118][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.281864][ T8177] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 101.319504][ T8181] overlayfs: failed to resolve './file0': -2 [ 101.347788][ T8183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.359610][ T8183] netlink: 'syz.4.657': attribute type 10 has an invalid length. [ 101.362288][ T8183] netlink: 224 bytes leftover after parsing attributes in process `syz.4.657'. [ 101.381328][ T40] audit: type=1400 audit(1766783483.969:383): avc: denied { nlmsg_read } for pid=8185 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.381514][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.658'. [ 101.556165][ T8202] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 101.567869][ T8202] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.074741][ T5946] Bluetooth: hci3: command tx timeout [ 104.154117][ T5946] Bluetooth: hci3: command tx timeout [ 105.834002][ T53] net_ratelimit: 15 callbacks suppressed [ 105.834019][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.875122][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.925064][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.553998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.714378][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.954019][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.998192][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.004259][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.123122][ T40] audit: type=1400 audit(1766783492.709:384): avc: denied { setattr } for pid=8261 comm="syz.0.671" name="ALG" dev="sockfs" ino=22548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.133347][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.143879][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.206249][ T8271] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 110.209139][ T8271] netlink: 224 bytes leftover after parsing attributes in process `syz.2.674'. [ 110.220083][ T8266] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 110.381458][ T8289] bond1: option downdelay: invalid value (18446744073709551615) [ 110.386416][ T8289] bond1: option downdelay: allowed values 0 - 2147483647 [ 110.386490][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 110.393468][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'. [ 110.395900][ T8289] bond1 (unregistering): Released all slaves [ 110.451388][ T40] audit: type=1400 audit(1766783493.039:385): avc: denied { sqpoll } for pid=8297 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.473480][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 110.479570][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 110.493838][ T40] audit: type=1400 audit(1766783493.079:386): avc: denied { mounton } for pid=8285 comm="syz.4.680" path="/15/file0/file0" dev="9p" ino=72095465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.493904][ T8286] 9pnet_virtio: no channels available for device syz [ 110.525662][ T40] audit: type=1400 audit(1766783493.119:387): avc: denied { create } for pid=8297 comm="syz.0.684" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.539756][ T40] audit: type=1400 audit(1766783493.129:388): avc: denied { write } for pid=8297 comm="syz.0.684" name="file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.547531][ T40] audit: type=1400 audit(1766783493.129:389): avc: denied { open } for pid=8297 comm="syz.0.684" path="/186/file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.555196][ T40] audit: type=1400 audit(1766783493.129:390): avc: denied { ioctl } for pid=8297 comm="syz.0.684" path="/186/file0" dev="tmpfs" ino=1004 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.602098][ T8306] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 110.832830][ T8329] loop6: detected capacity change from 0 to 2640 [ 110.836521][ T8223] buffer_io_error: 65958 callbacks suppressed [ 110.836531][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.841192][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.843728][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.846113][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.848624][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.851182][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.852280][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 110.854028][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.854046][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.854055][ T8223] ldm_validate_partition_table(): Disk read failed. [ 110.854068][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.854083][ T8223] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.854104][ T8223] Dev loop6: unable to read RDB block 0 [ 110.854176][ T8223] loop6: unable to read partition table [ 110.875651][ T8329] ldm_validate_partition_table(): Disk read failed. [ 110.876625][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.695'. [ 110.878296][ T8329] Dev loop6: unable to read RDB block 0 [ 110.882820][ T8329] loop6: unable to read partition table [ 110.885919][ T8329] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 110.932907][ T8337] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 110.950796][ T8334] bond1: option downdelay: invalid value (18446744073709551615) [ 110.953385][ T8334] bond1: option downdelay: allowed values 0 - 2147483647 [ 110.959398][ T8334] bond1 (unregistering): Released all slaves [ 111.033764][ T983] net_ratelimit: 8 callbacks suppressed [ 111.033776][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.038760][ T8339] futex_wake_op: syz.1.697 tries to shift op by -1; fix this program [ 111.291372][ T40] audit: type=1400 audit(1766783493.879:391): avc: denied { unlink } for pid=5943 comm="syz-executor" name="file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.678039][ T5343] ldm_validate_partition_table(): Disk read failed. [ 111.680384][ T5343] Dev loop6: unable to read RDB block 0 [ 111.682271][ T5343] loop6: unable to read partition table [ 111.685847][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 111.688859][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 111.924327][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.988846][ T40] audit: type=1400 audit(1766783494.579:392): avc: denied { map } for pid=8413 comm="syz.0.720" path="socket:[21089]" dev="sockfs" ino=21089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.989006][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 112.002424][ T5343] ldm_validate_partition_table(): Disk read failed. [ 112.013675][ T5343] Dev loop6: unable to read RDB block 0 [ 112.015705][ T5343] loop6: unable to read partition table [ 112.071401][ T40] audit: type=1400 audit(1766783494.659:393): avc: denied { create } for pid=8421 comm="syz.2.722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.074223][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.076673][ T8426] loop6: detected capacity change from 0 to 2640 [ 112.078044][ T8426] ldm_validate_partition_table(): Disk read failed. [ 112.078109][ T8426] Dev loop6: unable to read RDB block 0 [ 112.078244][ T8426] loop6: unable to read partition table [ 112.078393][ T8426] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 112.103540][ T8431] overlayfs: upper fs does not support file handles, falling back to index=off. [ 112.176773][ T8437] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 112.179018][ T8438] bond2: option downdelay: invalid value (18446744073709551615) [ 112.181842][ T8438] bond2: option downdelay: allowed values 0 - 2147483647 [ 112.189863][ T8438] bond2 (unregistering): Released all slaves [ 112.355469][ T8460] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 112.553857][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.915306][ T5343] ldm_validate_partition_table(): Disk read failed. [ 112.917609][ T5343] Dev loop6: unable to read RDB block 0 [ 112.919643][ T5343] loop6: unable to read partition table [ 113.051554][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.113868][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.249485][ T8489] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 113.382492][ T8500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.385706][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.483063][ T8508] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 113.634733][ T6022] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 113.673719][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 113.775482][ T8528] overlayfs: missing 'lowerdir' [ 113.793677][ T6022] usb 9-1: Using ep0 maxpacket: 32 [ 113.800660][ T6022] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.803368][ T6022] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.807543][ T6022] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.810519][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.813939][ T6022] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.817016][ T6022] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.821453][ T6022] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.825281][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.833023][ T6022] usb 9-1: config 0 descriptor?? [ 113.853753][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 113.860746][ T9] usb 7-1: config 0 has no interfaces? [ 113.862589][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.867251][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.871584][ T9] usb 7-1: config 0 descriptor?? [ 113.955277][ T8537] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 114.041498][ T6022] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.052101][ T6022] usb 9-1: USB disconnect, device number 2 [ 114.058361][ T6022] usblp0: removed [ 114.076883][ T6023] usb 7-1: USB disconnect, device number 7 [ 114.156108][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.211821][ T8557] overlayfs: missing 'lowerdir' [ 114.483922][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 114.635677][ T8583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8583 comm=syz.0.768 [ 114.646554][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 114.652740][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.656579][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.659985][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.662863][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.666206][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.669194][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.669594][ T8585] overlayfs: missing 'lowerdir' [ 114.673474][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.679574][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.685514][ T9] usb 9-1: config 0 descriptor?? [ 114.881073][ T8610] overlayfs: missing 'lowerdir' [ 114.895778][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.931093][ T7747] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 114.935887][ T7743] Bluetooth: hci4: Frame reassembly failed (-84) [ 114.961352][ T8619] bond2: option downdelay: invalid value (18446744073709551615) [ 114.964393][ T8619] bond2: option downdelay: allowed values 0 - 2147483647 [ 114.967845][ T8619] bond2 (unregistering): Released all slaves [ 115.218994][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.275911][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 115.275928][ T40] audit: type=1400 audit(1766783497.841:399): avc: denied { read write } for pid=8499 comm="syz.4.744" name="lp0" dev="devtmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 115.282006][ T8635] binder: 8499:8635 ioctl c0306201 200000000540 returned -14 [ 115.287621][ T40] audit: type=1400 audit(1766783497.841:400): avc: denied { open } for pid=8499 comm="syz.4.744" path="/dev/usb/lp0" dev="devtmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 115.300404][ T40] audit: type=1400 audit(1766783497.841:401): avc: denied { read } for pid=8499 comm="syz.4.744" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.310382][ T40] audit: type=1400 audit(1766783497.841:402): avc: denied { open } for pid=8499 comm="syz.4.744" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.320448][ T40] audit: type=1400 audit(1766783497.841:403): avc: denied { ioctl } for pid=8499 comm="syz.4.744" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.331092][ T40] audit: type=1400 audit(1766783497.841:404): avc: denied { set_context_mgr } for pid=8499 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.498506][ T839] usb 9-1: USB disconnect, device number 3 [ 115.511704][ T839] usblp0: removed [ 115.564825][ T40] audit: type=1400 audit(1766783498.112:405): avc: denied { read write } for pid=8639 comm="syz.0.790" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.574852][ T40] audit: type=1400 audit(1766783498.112:406): avc: denied { open } for pid=8639 comm="syz.0.790" path="/222/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.583332][ T40] audit: type=1400 audit(1766783498.122:407): avc: denied { ioctl } for pid=8639 comm="syz.0.790" path="/222/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.640936][ T8643] overlayfs: missing 'lowerdir' [ 115.685144][ T8645] loop6: detected capacity change from 0 to 2129 [ 115.731539][ T8647] __nla_validate_parse: 12 callbacks suppressed [ 115.731552][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 115.736679][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.793'. [ 115.841809][ T8659] overlayfs: conflicting lowerdir path [ 116.070821][ T40] audit: type=1400 audit(1766783498.580:408): avc: denied { read } for pid=8665 comm="syz.0.800" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.081824][ T8672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=8672 comm=syz.1.802 [ 116.138910][ T8669] Bluetooth: MGMT ver 1.23 [ 116.140762][ T8675] bond1: option downdelay: invalid value (18446744073709551615) [ 116.143372][ T8675] bond1: option downdelay: allowed values 0 - 2147483647 [ 116.146652][ T8675] bond1 (unregistering): Released all slaves [ 116.170184][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.305144][ T8685] overlayfs: missing 'workdir' [ 116.330364][ T55] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 116.330468][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.387706][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 116.391853][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 116.501967][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 116.505094][ T55] usb 9-1: config 0 has no interfaces? [ 116.507018][ T55] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.510074][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.514575][ T55] usb 9-1: config 0 descriptor?? [ 116.736698][ T55] usb 9-1: USB disconnect, device number 4 [ 116.821860][ T8711] bond1: option downdelay: invalid value (18446744073709551615) [ 116.826317][ T8711] bond1: option downdelay: allowed values 0 - 2147483647 [ 116.831048][ T8711] bond1 (unregistering): Released all slaves [ 117.029015][ T8715] overlayfs: missing 'workdir' [ 117.100549][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 117.103562][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.128532][ T8721] syzkaller0: entered promiscuous mode [ 117.130558][ T8721] syzkaller0: entered allmulticast mode [ 117.359811][ T8752] bond2: option downdelay: invalid value (18446744073709551615) [ 117.362272][ T8752] bond2: option downdelay: allowed values 0 - 2147483647 [ 117.365777][ T8752] bond2 (unregistering): Released all slaves [ 117.444634][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.481816][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 117.488959][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 117.560573][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'. [ 117.603089][ T8766] netlink: 96 bytes leftover after parsing attributes in process `syz.0.836'. [ 117.744513][ T8790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.770125][ T8793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.773089][ T8793] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.816332][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.854174][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 117.857473][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.847'. [ 117.873490][ T8799] bond1: option downdelay: invalid value (18446744073709551615) [ 117.876445][ T8799] bond1: option downdelay: allowed values 0 - 2147483647 [ 117.880323][ T8799] bond1 (unregistering): Released all slaves [ 117.951791][ T8808] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 117.991623][ T8819] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.994624][ T8819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.055771][ T8824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.059580][ T8824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.066380][ T8824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.070731][ T8824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.075543][ T8824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.082391][ T8824] netlink: 'syz.4.854': attribute type 10 has an invalid length. [ 118.090257][ T8822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.327512][ T8840] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 118.328932][ T8843] syzkaller0: entered promiscuous mode [ 118.332872][ T8843] syzkaller0: entered allmulticast mode [ 118.420301][ T8855] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 118.481319][ T8862] overlayfs: missing 'lowerdir' [ 118.529569][ T8865] bond2: option downdelay: invalid value (18446744073709551615) [ 118.532200][ T8865] bond2: option downdelay: allowed values 0 - 2147483647 [ 118.538121][ T8865] bond2 (unregistering): Released all slaves [ 118.554576][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.703528][ T8891] overlayfs: missing 'lowerdir' [ 118.805642][ T8901] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 119.052927][ T8935] overlayfs: missing 'lowerdir' [ 119.055375][ T8936] No control pipe specified [ 119.088927][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 119.181128][ T8941] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 119.249780][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 119.253395][ T24] usb 7-1: config 0 has no interfaces? [ 119.255265][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.260251][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.265755][ T24] usb 7-1: config 0 descriptor?? [ 119.487199][ T24] usb 7-1: USB disconnect, device number 8 [ 119.676308][ T8982] syzkaller0: entered promiscuous mode [ 119.679630][ T8982] syzkaller0: entered allmulticast mode [ 119.829884][ T8996] xt_hashlimit: size too large, truncated to 1048576 [ 119.875187][ T8997] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 120.002959][ T9019] overlayfs: failed to clone upperpath [ 120.200374][ T9031] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 120.243940][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.289997][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.293273][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.345333][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.352839][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.414779][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 120.418736][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 120.425349][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 120.425587][ T7747] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.425639][ T7747] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.425666][ T7747] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.452536][ T9043] syzkaller0: entered promiscuous mode [ 120.454486][ T9043] syzkaller0: entered allmulticast mode [ 120.457410][ T7747] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.457845][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.466586][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 120.474664][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 120.479378][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.482891][ T9] usb 5-1: Product: syz [ 120.484770][ T9] usb 5-1: Manufacturer: syz [ 120.486882][ T9] usb 5-1: SerialNumber: syz [ 120.498822][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 120.533455][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input7 [ 120.810525][ T9070] netlink: 'syz.4.932': attribute type 10 has an invalid length. [ 121.454193][ T9079] __nla_validate_parse: 15 callbacks suppressed [ 121.454249][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 121.459319][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'. [ 121.590578][ T9088] bond1: option downdelay: invalid value (18446744073709551615) [ 121.595791][ T9088] bond1: option downdelay: allowed values 0 - 2147483647 [ 121.600624][ T9088] bond1 (unregistering): Released all slaves [ 121.613483][ T9] imon:send_packet: packet tx failed (-71) [ 121.616549][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 121.616562][ T40] audit: type=1400 audit(1766783503.771:433): avc: denied { watch_with_perm } for pid=9090 comm="syz.2.940" path="/182/bus" dev="tmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.635384][ T9] imon 5-1:155.0: panel buttons/knobs setup failed [ 121.637640][ T9] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 121.640400][ T9] (id 0x00) [ 121.687607][ T9] rc_core: IR keymap rc-imon-pad not found [ 121.693495][ T9] Registered IR keymap rc-empty [ 121.695425][ T9] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 121.700551][ T9] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 121.719498][ T9] imon:send_packet: packet tx failed (-71) [ 121.732980][ T9108] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 121.737029][ T9108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.945'. [ 121.751864][ T9] imon 5-1:155.0: remote input dev register failed [ 121.754168][ T9] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 121.765358][ T9] imon 5-1:155.0: unable to initialize intf0, err 0 [ 121.767790][ T9] imon:imon_probe: failed to initialize context! [ 121.771782][ T9] imon 5-1:155.0: unable to register, err -19 [ 121.790157][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 121.793369][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'. [ 121.793666][ T9] usb 5-1: USB disconnect, device number 2 [ 121.843141][ T9119] syzkaller0: entered promiscuous mode [ 121.845461][ T9119] syzkaller0: entered allmulticast mode [ 121.891632][ T6023] net_ratelimit: 22 callbacks suppressed [ 121.891648][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.977640][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.075590][ T9146] bond1: option downdelay: invalid value (18446744073709551615) [ 122.078414][ T9146] bond1: option downdelay: allowed values 0 - 2147483647 [ 122.081757][ T9146] bond1 (unregistering): Released all slaves [ 122.370155][ T40] audit: type=1400 audit(1766783504.472:434): avc: denied { create } for pid=9173 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.628112][ T6003] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 122.660463][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.722794][ T9181] syzkaller0: entered promiscuous mode [ 122.725896][ T9181] syzkaller0: entered allmulticast mode [ 122.812008][ T6003] usb 9-1: config 1 has an invalid interface number: 241 but max is 0 [ 122.814723][ T6003] usb 9-1: config 1 has no interface number 0 [ 122.816772][ T6003] usb 9-1: config 1 interface 241 altsetting 134 endpoint 0x81 has an invalid bInterval 154, changing to 11 [ 122.820629][ T6003] usb 9-1: config 1 interface 241 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.831232][ T6003] usb 9-1: config 1 interface 241 has no altsetting 0 [ 122.835531][ T6003] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.40 [ 122.838583][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.841192][ T6003] usb 9-1: Product: syz [ 122.842719][ T6003] usb 9-1: Manufacturer: 梲ᡕ븄㴌픟僶⨀忷봻쥢åœêœœã­¬ë¼’⯨㾻崳쾣䯣黯팮ï„霑ï“階㽘᱀欱뒴亭璦 [ 122.846993][ T6003] usb 9-1: SerialNumber: syz [ 123.002645][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.068012][ T9174] ubi31: attaching mtd0 [ 123.070732][ T9174] ubi31: scanning is finished [ 123.072368][ T9174] ubi31: empty MTD device detected [ 123.138480][ T6003] usbhid 9-1:1.241: can't add hid device: -71 [ 123.143627][ T6003] usbhid 9-1:1.241: probe with driver usbhid failed with error -71 [ 123.148435][ T6003] usb 9-1: USB disconnect, device number 5 [ 123.158552][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 123.161497][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 123.198114][ T9174] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.200857][ T9174] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 123.203662][ T9174] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 123.211584][ T9174] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 123.214488][ T9174] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 123.217443][ T9174] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 123.219774][ T9200] bond1: option downdelay: invalid value (18446744073709551615) [ 123.220373][ T9174] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3019970326 [ 123.222988][ T9200] bond1: option downdelay: allowed values 0 - 2147483647 [ 123.226453][ T9174] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 123.228824][ T9202] ubi31: background thread "ubi_bgt31d" started, PID 9202 [ 123.238930][ T9200] bond1 (unregistering): Released all slaves [ 123.405006][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 123.405025][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 123.412998][ T40] audit: type=1400 audit(1766783505.454:435): avc: denied { read } for pid=9213 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.466814][ T40] audit: type=1400 audit(1766783505.501:436): avc: denied { create } for pid=9213 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.468478][ T9215] loop4: detected capacity change from 0 to 524288000 [ 123.474100][ T40] audit: type=1400 audit(1766783505.501:437): avc: denied { ioctl } for pid=9213 comm="syz.2.981" path="socket:[24246]" dev="sockfs" ino=24246 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.516179][ T9220] syzkaller0: entered promiscuous mode [ 123.518065][ T9220] syzkaller0: entered allmulticast mode [ 123.824935][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.828215][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.831299][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.835265][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.839747][ T9228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.846552][ T9228] validate_nla: 1 callbacks suppressed [ 123.846563][ T9228] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 123.851651][ T9228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.985'. [ 123.858780][ T9227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.980790][ T40] audit: type=1400 audit(1766783505.978:438): avc: denied { ioctl } for pid=9234 comm="syz.0.988" path="socket:[24948]" dev="sockfs" ino=24948 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.079302][ T40] audit: type=1400 audit(1766783506.071:439): avc: denied { load_policy } for pid=9246 comm="syz.4.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.088417][ T9249] fuse: Bad value for 'fd' [ 124.170624][ T9247] SELinux: failed to load policy [ 124.212269][ T9256] tmpfs: Bad value for 'huge' [ 124.214466][ T40] audit: type=1400 audit(1766783506.202:440): avc: denied { mounton } for pid=9248 comm="syz.0.993" path="/288/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 124.257200][ T9260] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 124.376735][ T9265] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 124.379849][ T9265] macsec2: entered promiscuous mode [ 124.383348][ T9265] macsec2: entered allmulticast mode [ 124.385264][ T9265] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 124.391502][ T40] audit: type=1400 audit(1766783506.361:441): avc: denied { wake_alarm } for pid=9264 comm="syz.2.999" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.777135][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9290 comm=syz.4.1006 [ 125.161349][ T9305] overlayfs: failed to clone upperpath [ 125.239795][ T9312] FAULT_INJECTION: forcing a failure. [ 125.239795][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 125.248181][ T9312] CPU: 2 UID: 0 PID: 9312 Comm: syz.0.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.248202][ T9312] Tainted: [L]=SOFTLOCKUP [ 125.248206][ T9312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.248213][ T9312] Call Trace: [ 125.248217][ T9312] [ 125.248221][ T9312] dump_stack_lvl+0x16c/0x1f0 [ 125.248259][ T9312] should_fail_ex+0x512/0x640 [ 125.248281][ T9312] ? __kmalloc_cache_noprof+0x5f/0x800 [ 125.248301][ T9312] should_failslab+0xc2/0x120 [ 125.248317][ T9312] __kmalloc_cache_noprof+0x80/0x800 [ 125.248335][ T9312] ? ovl_iterate+0xaa5/0x1120 [ 125.248355][ T9312] ? ovl_iterate+0xaa5/0x1120 [ 125.248371][ T9312] ovl_iterate+0xaa5/0x1120 [ 125.248388][ T9312] ? __pfx_down_write+0x10/0x10 [ 125.248405][ T9312] ? __pfx_down_read_killable+0x10/0x10 [ 125.248423][ T9312] ? __pfx_ovl_iterate+0x10/0x10 [ 125.248439][ T9312] wrap_directory_iterator+0xa2/0xe0 [ 125.248454][ T9312] iterate_dir+0x296/0xaf0 [ 125.248469][ T9312] __x64_sys_getdents64+0x13c/0x2c0 [ 125.248486][ T9312] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 125.248502][ T9312] ? fput+0x70/0xf0 [ 125.248511][ T9312] ? __pfx_filldir64+0x10/0x10 [ 125.248528][ T9312] do_syscall_64+0xcd/0xf80 [ 125.248544][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.248557][ T9312] RIP: 0033:0x7fda97f8f7c9 [ 125.248566][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.248577][ T9312] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 125.248588][ T9312] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 125.248594][ T9312] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 125.248601][ T9312] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.248607][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.248613][ T9312] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 125.248628][ T9312] [ 125.547604][ T9335] bond2: option downdelay: invalid value (18446744073709551615) [ 125.550494][ T9335] bond2: option downdelay: allowed values 0 - 2147483647 [ 125.556033][ T9335] bond2 (unregistering): Released all slaves [ 125.669962][ T9343] overlayfs: failed to clone upperpath [ 125.894319][ T9368] FAULT_INJECTION: forcing a failure. [ 125.894319][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 125.898868][ T9368] CPU: 3 UID: 0 PID: 9368 Comm: syz.2.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.898898][ T9368] Tainted: [L]=SOFTLOCKUP [ 125.898905][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.898913][ T9368] Call Trace: [ 125.898917][ T9368] [ 125.898922][ T9368] dump_stack_lvl+0x16c/0x1f0 [ 125.898941][ T9368] should_fail_ex+0x512/0x640 [ 125.898958][ T9368] ? kmem_cache_alloc_noprof+0x62/0x770 [ 125.898971][ T9368] should_failslab+0xc2/0x120 [ 125.898986][ T9368] kmem_cache_alloc_noprof+0x83/0x770 [ 125.898997][ T9368] ? alloc_empty_file+0x55/0x1e0 [ 125.899011][ T9368] ? alloc_empty_file+0x55/0x1e0 [ 125.899020][ T9368] alloc_empty_file+0x55/0x1e0 [ 125.899031][ T9368] dentry_open+0x46/0xd0 [ 125.899042][ T9368] ovl_path_open+0x198/0x1f0 [ 125.899061][ T9368] ovl_dir_read_merged+0x2e6/0x780 [ 125.899080][ T9368] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 125.899100][ T9368] ? __pfx_ovl_fill_merge+0x10/0x10 [ 125.899125][ T9368] ovl_iterate+0xb5c/0x1120 [ 125.899141][ T9368] ? __pfx_down_write+0x10/0x10 [ 125.899163][ T9368] ? __pfx_down_read_killable+0x10/0x10 [ 125.899189][ T9368] ? __pfx_ovl_iterate+0x10/0x10 [ 125.899215][ T9368] wrap_directory_iterator+0xa2/0xe0 [ 125.899238][ T9368] iterate_dir+0x296/0xaf0 [ 125.899279][ T9368] __x64_sys_getdents64+0x13c/0x2c0 [ 125.899298][ T9368] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 125.899311][ T9368] ? fput+0x70/0xf0 [ 125.899319][ T9368] ? __pfx_filldir64+0x10/0x10 [ 125.899332][ T9368] ? rcu_is_watching+0x12/0xc0 [ 125.899347][ T9368] do_syscall_64+0xcd/0xf80 [ 125.899363][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.899375][ T9368] RIP: 0033:0x7fe186b8f7c9 [ 125.899385][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.899395][ T9368] RSP: 002b:00007fe187af1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 125.899406][ T9368] RAX: ffffffffffffffda RBX: 00007fe186de5fa0 RCX: 00007fe186b8f7c9 [ 125.899413][ T9368] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 125.899419][ T9368] RBP: 00007fe187af1090 R08: 0000000000000000 R09: 0000000000000000 [ 125.899426][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.899432][ T9368] R13: 00007fe186de6038 R14: 00007fe186de5fa0 R15: 00007fff198af6b8 [ 125.899446][ T9368] [ 126.009243][ T9373] tipc: Started in network mode [ 126.011170][ T9373] tipc: Node identity , cluster identity 4711 [ 126.013245][ T9373] tipc: Failed to set node id, please configure manually [ 126.015702][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 126.087526][ T9382] xt_ecn: cannot match TCP bits for non-tcp packets [ 126.094326][ T40] audit: type=1400 audit(1766783507.961:442): avc: denied { getopt } for pid=9384 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.097771][ T9385] bond2: option downdelay: invalid value (18446744073709551615) [ 126.103676][ T9385] bond2: option downdelay: allowed values 0 - 2147483647 [ 126.108427][ T9385] bond2 (unregistering): Released all slaves [ 126.239178][ T9404] syzkaller0: entered promiscuous mode [ 126.241755][ T9404] syzkaller0: entered allmulticast mode [ 126.293922][ T9407] FAULT_INJECTION: forcing a failure. [ 126.293922][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 126.299184][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.0.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.299213][ T9407] Tainted: [L]=SOFTLOCKUP [ 126.299219][ T9407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.299231][ T9407] Call Trace: [ 126.299238][ T9407] [ 126.299245][ T9407] dump_stack_lvl+0x16c/0x1f0 [ 126.299274][ T9407] should_fail_ex+0x512/0x640 [ 126.299301][ T9407] ? kmem_cache_alloc_noprof+0x62/0x770 [ 126.299323][ T9407] should_failslab+0xc2/0x120 [ 126.299347][ T9407] kmem_cache_alloc_noprof+0x83/0x770 [ 126.299365][ T9407] ? security_file_alloc+0x34/0x2b0 [ 126.299395][ T9407] ? security_file_alloc+0x34/0x2b0 [ 126.299417][ T9407] security_file_alloc+0x34/0x2b0 [ 126.299443][ T9407] init_file+0x93/0x4c0 [ 126.299471][ T9407] alloc_empty_file+0x73/0x1e0 [ 126.299503][ T9407] dentry_open+0x46/0xd0 [ 126.299519][ T9407] ovl_path_open+0x198/0x1f0 [ 126.299549][ T9407] ovl_dir_read_merged+0x2e6/0x780 [ 126.299577][ T9407] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 126.299606][ T9407] ? __pfx_ovl_fill_merge+0x10/0x10 [ 126.299650][ T9407] ovl_iterate+0xb5c/0x1120 [ 126.299677][ T9407] ? __pfx_down_write+0x10/0x10 [ 126.299702][ T9407] ? __pfx_down_read_killable+0x10/0x10 [ 126.299729][ T9407] ? __pfx_ovl_iterate+0x10/0x10 [ 126.299753][ T9407] wrap_directory_iterator+0xa2/0xe0 [ 126.299776][ T9407] iterate_dir+0x296/0xaf0 [ 126.299809][ T9407] __x64_sys_getdents64+0x13c/0x2c0 [ 126.299833][ T9407] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 126.299854][ T9407] ? fput+0x70/0xf0 [ 126.299869][ T9407] ? __pfx_filldir64+0x10/0x10 [ 126.299901][ T9407] do_syscall_64+0xcd/0xf80 [ 126.299925][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.299944][ T9407] RIP: 0033:0x7fda97f8f7c9 [ 126.299960][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.299977][ T9407] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 126.299995][ T9407] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 126.300007][ T9407] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 126.300017][ T9407] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.300027][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.300038][ T9407] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 126.300063][ T9407] [ 126.495476][ T9416] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 126.619852][ T9429] bond1: option downdelay: invalid value (18446744073709551615) [ 126.622988][ T9429] bond1: option downdelay: allowed values 0 - 2147483647 [ 126.627116][ T9429] bond1 (unregistering): Released all slaves [ 127.028473][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 127.028490][ T40] audit: type=1400 audit(1766783508.830:444): avc: denied { mounton } for pid=9455 comm="syz.2.1060" path="/224/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 127.043239][ T9456] overlay: ./file0 is not a directory [ 127.053721][ T40] audit: type=1400 audit(1766783508.849:445): avc: denied { mount } for pid=9455 comm="syz.2.1060" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.082599][ T9464] __nla_validate_parse: 11 callbacks suppressed [ 127.082614][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 127.097165][ T9464] bond0: entered promiscuous mode [ 127.102102][ T9464] bond_slave_0: entered promiscuous mode [ 127.104652][ T9464] bond_slave_1: entered promiscuous mode [ 127.107510][ T9464] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 127.112678][ T9464] batadv_slave_0: entered promiscuous mode [ 127.115224][ T9464] batadv_slave_0: left promiscuous mode [ 127.117949][ T9464] bond0: left promiscuous mode [ 127.119892][ T9464] bond_slave_0: left promiscuous mode [ 127.121974][ T9464] bond_slave_1: left promiscuous mode [ 127.124008][ T9464] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 127.186360][ T9466] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 127.405856][ T9473] netlink: 'syz.0.1066': attribute type 10 has an invalid length. [ 127.443347][ T40] audit: type=1400 audit(1766783509.223:446): avc: denied { accept } for pid=9475 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.451391][ T9481] FAULT_INJECTION: forcing a failure. [ 127.451391][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 127.456798][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.0.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.456819][ T9481] Tainted: [L]=SOFTLOCKUP [ 127.456823][ T9481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.456830][ T9481] Call Trace: [ 127.456837][ T9481] [ 127.456843][ T9481] dump_stack_lvl+0x16c/0x1f0 [ 127.456954][ T9481] should_fail_ex+0x512/0x640 [ 127.456986][ T9481] ? fs_reclaim_acquire+0xae/0x150 [ 127.457005][ T9481] should_failslab+0xc2/0x120 [ 127.457022][ T9481] __kmalloc_noprof+0xeb/0x910 [ 127.457041][ T9481] ? tomoyo_encode2+0x100/0x3e0 [ 127.457060][ T9481] ? tomoyo_encode2+0x100/0x3e0 [ 127.457074][ T9481] tomoyo_encode2+0x100/0x3e0 [ 127.457092][ T9481] tomoyo_encode+0x29/0x50 [ 127.457107][ T9481] tomoyo_realpath_from_path+0x18f/0x6e0 [ 127.457128][ T9481] tomoyo_check_open_permission+0x2ab/0x3c0 [ 127.457142][ T9481] ? alloc_empty_file+0x73/0x1e0 [ 127.457153][ T9481] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 127.457166][ T9481] ? ovl_iterate+0xb5c/0x1120 [ 127.457185][ T9481] ? __x64_sys_getdents64+0x13c/0x2c0 [ 127.457199][ T9481] ? do_syscall_64+0xcd/0xf80 [ 127.457228][ T9481] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.457249][ T9481] tomoyo_file_open+0x6b/0x90 [ 127.457268][ T9481] security_file_open+0x84/0x1e0 [ 127.457286][ T9481] do_dentry_open+0x597/0x1590 [ 127.457316][ T9481] ? lockdep_init_map_type+0x5c/0x270 [ 127.457340][ T9481] vfs_open+0x82/0x3f0 [ 127.457358][ T9481] dentry_open+0x71/0xd0 [ 127.457372][ T9481] ovl_path_open+0x198/0x1f0 [ 127.457404][ T9481] ovl_dir_read_merged+0x2e6/0x780 [ 127.457436][ T9481] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 127.457470][ T9481] ? __pfx_ovl_fill_merge+0x10/0x10 [ 127.457503][ T9481] ovl_iterate+0xb5c/0x1120 [ 127.457521][ T9481] ? __pfx_down_write+0x10/0x10 [ 127.457539][ T9481] ? __pfx_down_read_killable+0x10/0x10 [ 127.457558][ T9481] ? __pfx_ovl_iterate+0x10/0x10 [ 127.457575][ T9481] wrap_directory_iterator+0xa2/0xe0 [ 127.457590][ T9481] iterate_dir+0x296/0xaf0 [ 127.457606][ T9481] __x64_sys_getdents64+0x13c/0x2c0 [ 127.457622][ T9481] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 127.457636][ T9481] ? fput+0x70/0xf0 [ 127.457644][ T9481] ? __pfx_filldir64+0x10/0x10 [ 127.457662][ T9481] do_syscall_64+0xcd/0xf80 [ 127.457677][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.457688][ T9481] RIP: 0033:0x7fda97f8f7c9 [ 127.457699][ T9481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.457710][ T9481] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 127.457720][ T9481] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 127.457728][ T9481] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 127.457734][ T9481] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 127.457740][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.457746][ T9481] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 127.457761][ T9481] [ 127.457779][ T9481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.568383][ T6023] net_ratelimit: 20 callbacks suppressed [ 127.568393][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.624651][ T9488] bond2: option downdelay: invalid value (18446744073709551615) [ 127.628017][ T9488] bond2: option downdelay: allowed values 0 - 2147483647 [ 127.633134][ T9488] bond2 (unregistering): Released all slaves [ 127.799836][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 127.810288][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 127.938546][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.941904][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.945098][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.948908][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.951749][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.955135][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.957846][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.960602][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.963464][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.986433][ T9510] IPv6: syztnl0: Disabled Multicast RS [ 128.013879][ T40] audit: type=1400 audit(1766783509.747:447): avc: denied { listen } for pid=9509 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.020751][ T40] audit: type=1400 audit(1766783509.747:448): avc: denied { accept } for pid=9509 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.027089][ T40] audit: type=1400 audit(1766783509.747:449): avc: denied { getopt } for pid=9509 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.183569][ T9525] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 128.186221][ T9525] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1082'. [ 128.320396][ T9530] syzkaller0: entered promiscuous mode [ 128.322426][ T9530] syzkaller0: entered allmulticast mode [ 128.390977][ T9532] FAULT_INJECTION: forcing a failure. [ 128.390977][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 128.396673][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.0.1084 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.396692][ T9532] Tainted: [L]=SOFTLOCKUP [ 128.396696][ T9532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.396703][ T9532] Call Trace: [ 128.396707][ T9532] [ 128.396711][ T9532] dump_stack_lvl+0x16c/0x1f0 [ 128.396729][ T9532] should_fail_ex+0x512/0x640 [ 128.396747][ T9532] ? __kmalloc_noprof+0xca/0x910 [ 128.396766][ T9532] should_failslab+0xc2/0x120 [ 128.396781][ T9532] __kmalloc_noprof+0xeb/0x910 [ 128.396798][ T9532] ? ovl_cache_entry_new+0x65/0x970 [ 128.396818][ T9532] ? ovl_cache_entry_new+0x65/0x970 [ 128.396833][ T9532] ovl_cache_entry_new+0x65/0x970 [ 128.396853][ T9532] ovl_fill_merge+0xa91/0xfa0 [ 128.396872][ T9532] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.396892][ T9532] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.396908][ T9532] offset_readdir+0x1c7/0x6d0 [ 128.396927][ T9532] iterate_dir+0x296/0xaf0 [ 128.396943][ T9532] ovl_dir_read_merged+0x37c/0x780 [ 128.396961][ T9532] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 128.396981][ T9532] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.397006][ T9532] ovl_iterate+0xb5c/0x1120 [ 128.397022][ T9532] ? __pfx_down_write+0x10/0x10 [ 128.397045][ T9532] ? __pfx_down_read_killable+0x10/0x10 [ 128.397063][ T9532] ? __pfx_ovl_iterate+0x10/0x10 [ 128.397079][ T9532] wrap_directory_iterator+0xa2/0xe0 [ 128.397093][ T9532] iterate_dir+0x296/0xaf0 [ 128.397108][ T9532] __x64_sys_getdents64+0x13c/0x2c0 [ 128.397122][ T9532] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 128.397135][ T9532] ? fput+0x70/0xf0 [ 128.397144][ T9532] ? __pfx_filldir64+0x10/0x10 [ 128.397162][ T9532] do_syscall_64+0xcd/0xf80 [ 128.397177][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.397189][ T9532] RIP: 0033:0x7fda97f8f7c9 [ 128.397198][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.397209][ T9532] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.397219][ T9532] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 128.397226][ T9532] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 128.397233][ T9532] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 128.397239][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.397245][ T9532] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 128.397259][ T9532] [ 128.508767][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 128.512854][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1086'. [ 128.513001][ T9534] bond1: option downdelay: invalid value (18446744073709551615) [ 128.520256][ T9534] bond1: option downdelay: allowed values 0 - 2147483647 [ 128.524318][ T9534] bond1 (unregistering): Released all slaves [ 128.675407][ T9550] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 128.677991][ T9550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1091'. [ 128.822732][ T9566] syzkaller0: entered promiscuous mode [ 128.824650][ T9566] syzkaller0: entered allmulticast mode [ 128.849272][ T9572] FAULT_INJECTION: forcing a failure. [ 128.849272][ T9572] name failslab, interval 1, probability 0, space 0, times 0 [ 128.853791][ T9572] CPU: 3 UID: 0 PID: 9572 Comm: syz.0.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.853814][ T9572] Tainted: [L]=SOFTLOCKUP [ 128.853818][ T9572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.853825][ T9572] Call Trace: [ 128.853829][ T9572] [ 128.853833][ T9572] dump_stack_lvl+0x16c/0x1f0 [ 128.853851][ T9572] should_fail_ex+0x512/0x640 [ 128.853872][ T9572] ? __kmalloc_noprof+0xca/0x910 [ 128.853892][ T9572] should_failslab+0xc2/0x120 [ 128.853907][ T9572] __kmalloc_noprof+0xeb/0x910 [ 128.853927][ T9572] ? ovl_cache_entry_new+0x65/0x970 [ 128.853955][ T9572] ? ovl_cache_entry_new+0x65/0x970 [ 128.853977][ T9572] ovl_cache_entry_new+0x65/0x970 [ 128.853996][ T9572] ovl_fill_merge+0xa91/0xfa0 [ 128.854016][ T9572] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.854036][ T9572] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.854057][ T9572] offset_readdir+0x292/0x6d0 [ 128.854076][ T9572] iterate_dir+0x296/0xaf0 [ 128.854092][ T9572] ovl_dir_read_merged+0x37c/0x780 [ 128.854111][ T9572] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 128.854131][ T9572] ? __pfx_ovl_fill_merge+0x10/0x10 [ 128.854156][ T9572] ovl_iterate+0xb5c/0x1120 [ 128.854176][ T9572] ? __pfx_down_write+0x10/0x10 [ 128.854201][ T9572] ? __pfx_down_read_killable+0x10/0x10 [ 128.854221][ T9572] ? __pfx_ovl_iterate+0x10/0x10 [ 128.854237][ T9572] wrap_directory_iterator+0xa2/0xe0 [ 128.854251][ T9572] iterate_dir+0x296/0xaf0 [ 128.854267][ T9572] __x64_sys_getdents64+0x13c/0x2c0 [ 128.854281][ T9572] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 128.854294][ T9572] ? fput+0x70/0xf0 [ 128.854303][ T9572] ? __pfx_filldir64+0x10/0x10 [ 128.854316][ T9572] ? rcu_is_watching+0x12/0xc0 [ 128.854331][ T9572] do_syscall_64+0xcd/0xf80 [ 128.854346][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.854357][ T9572] RIP: 0033:0x7fda97f8f7c9 [ 128.854366][ T9572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.854377][ T9572] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.854388][ T9572] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 128.854398][ T9572] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 128.854407][ T9572] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 128.854417][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.854427][ T9572] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 128.854443][ T9572] [ 128.926580][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 128.950997][ T9575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'. [ 129.029389][ T40] audit: type=1400 audit(1766783510.701:450): avc: denied { listen } for pid=9580 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.043634][ T40] audit: type=1400 audit(1766783510.710:451): avc: denied { accept } for pid=9580 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.100652][ T9589] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 129.103903][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1105'. [ 129.105619][ T9586] bond2: option downdelay: invalid value (18446744073709551615) [ 129.110827][ T9586] bond2: option downdelay: allowed values 0 - 2147483647 [ 129.115535][ T9586] bond2 (unregistering): Released all slaves [ 129.459768][ T9609] FAULT_INJECTION: forcing a failure. [ 129.459768][ T9609] name failslab, interval 1, probability 0, space 0, times 0 [ 129.465611][ T9609] CPU: 3 UID: 0 PID: 9609 Comm: syz.4.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.465641][ T9609] Tainted: [L]=SOFTLOCKUP [ 129.465647][ T9609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.465659][ T9609] Call Trace: [ 129.465665][ T9609] [ 129.465672][ T9609] dump_stack_lvl+0x16c/0x1f0 [ 129.465701][ T9609] should_fail_ex+0x512/0x640 [ 129.465727][ T9609] ? __kmalloc_noprof+0xca/0x910 [ 129.465759][ T9609] should_failslab+0xc2/0x120 [ 129.465783][ T9609] __kmalloc_noprof+0xeb/0x910 [ 129.465809][ T9609] ? find_held_lock+0x2b/0x80 [ 129.465835][ T9609] ? ovl_cache_entry_new+0x65/0x970 [ 129.465866][ T9609] ? ovl_cache_entry_new+0x65/0x970 [ 129.465890][ T9609] ovl_cache_entry_new+0x65/0x970 [ 129.465916][ T9609] ? find_positive_dentry+0x183/0x290 [ 129.465942][ T9609] ovl_fill_merge+0xa91/0xfa0 [ 129.465974][ T9609] ? __pfx_ovl_fill_merge+0x10/0x10 [ 129.466006][ T9609] ? __pfx_ovl_fill_merge+0x10/0x10 [ 129.466032][ T9609] offset_readdir+0x458/0x6d0 [ 129.466062][ T9609] iterate_dir+0x296/0xaf0 [ 129.466088][ T9609] ovl_dir_read_merged+0x37c/0x780 [ 129.466127][ T9609] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 129.466160][ T9609] ? __pfx_ovl_fill_merge+0x10/0x10 [ 129.466200][ T9609] ovl_iterate+0xb5c/0x1120 [ 129.466227][ T9609] ? __pfx_down_write+0x10/0x10 [ 129.466253][ T9609] ? __pfx_down_read_killable+0x10/0x10 [ 129.466282][ T9609] ? __pfx_ovl_iterate+0x10/0x10 [ 129.466309][ T9609] wrap_directory_iterator+0xa2/0xe0 [ 129.466333][ T9609] iterate_dir+0x296/0xaf0 [ 129.466359][ T9609] __x64_sys_getdents64+0x13c/0x2c0 [ 129.466382][ T9609] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 129.466403][ T9609] ? fput+0x70/0xf0 [ 129.466417][ T9609] ? __pfx_filldir64+0x10/0x10 [ 129.466448][ T9609] do_syscall_64+0xcd/0xf80 [ 129.466474][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.466492][ T9609] RIP: 0033:0x7f453038f7c9 [ 129.466508][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.466525][ T9609] RSP: 002b:00007f45312ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 129.466543][ T9609] RAX: ffffffffffffffda RBX: 00007f45305e5fa0 RCX: 00007f453038f7c9 [ 129.466554][ T9609] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 129.466565][ T9609] RBP: 00007f45312ac090 R08: 0000000000000000 R09: 0000000000000000 [ 129.466575][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.466586][ T9609] R13: 00007f45305e6038 R14: 00007f45305e5fa0 R15: 00007ffd52a82b58 [ 129.466611][ T9609] [ 129.621856][ T9617] netlink: 'syz.4.1117': attribute type 21 has an invalid length. [ 129.624579][ T9617] netlink: 'syz.4.1117': attribute type 6 has an invalid length. [ 129.627608][ T9615] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 129.639396][ T40] audit: type=1400 audit(1766783511.262:452): avc: denied { module_load } for pid=9616 comm="syz.4.1117" path="/sys/kernel/notes" dev="sysfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 129.788317][ T9623] syzkaller0: entered promiscuous mode [ 129.790789][ T9623] syzkaller0: entered allmulticast mode [ 129.833200][ T40] audit: type=1400 audit(1766783511.449:453): avc: denied { read } for pid=9626 comm="syz.0.1121" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.961968][ T9633] bond1: option downdelay: invalid value (18446744073709551615) [ 129.965207][ T9633] bond1: option downdelay: allowed values 0 - 2147483647 [ 129.969223][ T9633] bond1 (unregistering): Released all slaves [ 130.416765][ T9670] netlink: 'syz.4.1128': attribute type 10 has an invalid length. [ 130.418671][ T9673] FAULT_INJECTION: forcing a failure. [ 130.418671][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 130.424749][ T9673] CPU: 3 UID: 0 PID: 9673 Comm: syz.2.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.424766][ T9673] Tainted: [L]=SOFTLOCKUP [ 130.424770][ T9673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.424777][ T9673] Call Trace: [ 130.424781][ T9673] [ 130.424785][ T9673] dump_stack_lvl+0x16c/0x1f0 [ 130.424805][ T9673] should_fail_ex+0x512/0x640 [ 130.424822][ T9673] ? kmem_cache_alloc_noprof+0x62/0x770 [ 130.424835][ T9673] should_failslab+0xc2/0x120 [ 130.424850][ T9673] kmem_cache_alloc_noprof+0x83/0x770 [ 130.424861][ T9673] ? alloc_empty_file+0x55/0x1e0 [ 130.424874][ T9673] ? alloc_empty_file+0x55/0x1e0 [ 130.424884][ T9673] alloc_empty_file+0x55/0x1e0 [ 130.424894][ T9673] dentry_open+0x46/0xd0 [ 130.424904][ T9673] ovl_path_open+0x198/0x1f0 [ 130.424923][ T9673] ovl_dir_read_merged+0x4b8/0x780 [ 130.424942][ T9673] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 130.424962][ T9673] ? __pfx_ovl_fill_merge+0x10/0x10 [ 130.424987][ T9673] ovl_iterate+0xb5c/0x1120 [ 130.425007][ T9673] ? __pfx_down_write+0x10/0x10 [ 130.425024][ T9673] ? __pfx_down_read_killable+0x10/0x10 [ 130.425041][ T9673] ? __pfx_ovl_iterate+0x10/0x10 [ 130.425057][ T9673] wrap_directory_iterator+0xa2/0xe0 [ 130.425072][ T9673] iterate_dir+0x296/0xaf0 [ 130.425087][ T9673] __x64_sys_getdents64+0x13c/0x2c0 [ 130.425102][ T9673] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 130.425115][ T9673] ? fput+0x70/0xf0 [ 130.425123][ T9673] ? __pfx_filldir64+0x10/0x10 [ 130.425141][ T9673] do_syscall_64+0xcd/0xf80 [ 130.425156][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.425168][ T9673] RIP: 0033:0x7fe186b8f7c9 [ 130.425177][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.425188][ T9673] RSP: 002b:00007fe187af1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 130.425198][ T9673] RAX: ffffffffffffffda RBX: 00007fe186de5fa0 RCX: 00007fe186b8f7c9 [ 130.425205][ T9673] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 130.425212][ T9673] RBP: 00007fe187af1090 R08: 0000000000000000 R09: 0000000000000000 [ 130.425218][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.425224][ T9673] R13: 00007fe186de6038 R14: 00007fe186de5fa0 R15: 00007fff198af6b8 [ 130.425238][ T9673] [ 130.719421][ T9694] bond1: option downdelay: invalid value (18446744073709551615) [ 130.723082][ T9694] bond1: option downdelay: allowed values 0 - 2147483647 [ 130.727779][ T9694] bond1 (unregistering): Released all slaves [ 130.739725][ T9692] syzkaller0: entered promiscuous mode [ 130.741668][ T9692] syzkaller0: entered allmulticast mode [ 131.024691][ T9730] FAULT_INJECTION: forcing a failure. [ 131.024691][ T9730] name failslab, interval 1, probability 0, space 0, times 0 [ 131.029828][ T9730] CPU: 2 UID: 0 PID: 9730 Comm: syz.4.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.029848][ T9730] Tainted: [L]=SOFTLOCKUP [ 131.029851][ T9730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.029859][ T9730] Call Trace: [ 131.029862][ T9730] [ 131.029867][ T9730] dump_stack_lvl+0x16c/0x1f0 [ 131.029886][ T9730] should_fail_ex+0x512/0x640 [ 131.029903][ T9730] ? kmem_cache_alloc_noprof+0x62/0x770 [ 131.029917][ T9730] should_failslab+0xc2/0x120 [ 131.029932][ T9730] kmem_cache_alloc_noprof+0x83/0x770 [ 131.029943][ T9730] ? security_file_alloc+0x34/0x2b0 [ 131.029961][ T9730] ? security_file_alloc+0x34/0x2b0 [ 131.029975][ T9730] security_file_alloc+0x34/0x2b0 [ 131.029990][ T9730] init_file+0x93/0x4c0 [ 131.030008][ T9730] alloc_empty_file+0x73/0x1e0 [ 131.030019][ T9730] dentry_open+0x46/0xd0 [ 131.030029][ T9730] ovl_path_open+0x198/0x1f0 [ 131.030047][ T9730] ovl_dir_read_merged+0x4b8/0x780 [ 131.030067][ T9730] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 131.030094][ T9730] ? __pfx_ovl_fill_merge+0x10/0x10 [ 131.030119][ T9730] ovl_iterate+0xb5c/0x1120 [ 131.030136][ T9730] ? __pfx_down_write+0x10/0x10 [ 131.030152][ T9730] ? __pfx_down_read_killable+0x10/0x10 [ 131.030170][ T9730] ? __pfx_ovl_iterate+0x10/0x10 [ 131.030187][ T9730] wrap_directory_iterator+0xa2/0xe0 [ 131.030202][ T9730] iterate_dir+0x296/0xaf0 [ 131.030217][ T9730] __x64_sys_getdents64+0x13c/0x2c0 [ 131.030231][ T9730] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 131.030244][ T9730] ? fput+0x70/0xf0 [ 131.030252][ T9730] ? __pfx_filldir64+0x10/0x10 [ 131.030270][ T9730] do_syscall_64+0xcd/0xf80 [ 131.030286][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.030298][ T9730] RIP: 0033:0x7f453038f7c9 [ 131.030307][ T9730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.030318][ T9730] RSP: 002b:00007f45312ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.030329][ T9730] RAX: ffffffffffffffda RBX: 00007f45305e5fa0 RCX: 00007f453038f7c9 [ 131.030335][ T9730] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 131.030342][ T9730] RBP: 00007f45312ac090 R08: 0000000000000000 R09: 0000000000000000 [ 131.030348][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.030354][ T9730] R13: 00007f45305e6038 R14: 00007f45305e5fa0 R15: 00007ffd52a82b58 [ 131.030369][ T9730] [ 131.223299][ T9746] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 131.289364][ T983] IPVS: starting estimator thread 0... [ 131.300624][ T9756] syzkaller0: entered promiscuous mode [ 131.302590][ T9756] syzkaller0: entered allmulticast mode [ 131.385241][ T9754] IPVS: using max 47 ests per chain, 112800 per kthread [ 131.445141][ T9767] FAULT_INJECTION: forcing a failure. [ 131.445141][ T9767] name failslab, interval 1, probability 0, space 0, times 0 [ 131.449923][ T9767] CPU: 3 UID: 0 PID: 9767 Comm: syz.4.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.449953][ T9767] Tainted: [L]=SOFTLOCKUP [ 131.449959][ T9767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.449970][ T9767] Call Trace: [ 131.449977][ T9767] [ 131.449985][ T9767] dump_stack_lvl+0x16c/0x1f0 [ 131.450018][ T9767] should_fail_ex+0x512/0x640 [ 131.450046][ T9767] ? fs_reclaim_acquire+0xae/0x150 [ 131.450073][ T9767] should_failslab+0xc2/0x120 [ 131.450097][ T9767] __kmalloc_noprof+0xeb/0x910 [ 131.450126][ T9767] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.450157][ T9767] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.450181][ T9767] tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.450214][ T9767] tomoyo_check_open_permission+0x2ab/0x3c0 [ 131.450233][ T9767] ? alloc_empty_file+0x73/0x1e0 [ 131.450250][ T9767] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 131.450267][ T9767] ? ovl_iterate+0xb5c/0x1120 [ 131.450289][ T9767] ? __x64_sys_getdents64+0x13c/0x2c0 [ 131.450306][ T9767] ? do_syscall_64+0xcd/0xf80 [ 131.450343][ T9767] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.450368][ T9767] tomoyo_file_open+0x6b/0x90 [ 131.450391][ T9767] security_file_open+0x84/0x1e0 [ 131.450411][ T9767] do_dentry_open+0x597/0x1590 [ 131.450432][ T9767] ? lockdep_init_map_type+0x5c/0x270 [ 131.450452][ T9767] vfs_open+0x82/0x3f0 [ 131.450468][ T9767] dentry_open+0x71/0xd0 [ 131.450480][ T9767] ovl_path_open+0x198/0x1f0 [ 131.450502][ T9767] ovl_dir_read_merged+0x4b8/0x780 [ 131.450527][ T9767] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 131.450552][ T9767] ? __pfx_ovl_fill_merge+0x10/0x10 [ 131.450585][ T9767] ovl_iterate+0xb5c/0x1120 [ 131.450607][ T9767] ? __pfx_down_write+0x10/0x10 [ 131.450627][ T9767] ? __pfx_down_read_killable+0x10/0x10 [ 131.450650][ T9767] ? __pfx_ovl_iterate+0x10/0x10 [ 131.450671][ T9767] wrap_directory_iterator+0xa2/0xe0 [ 131.450689][ T9767] iterate_dir+0x296/0xaf0 [ 131.450709][ T9767] __x64_sys_getdents64+0x13c/0x2c0 [ 131.450727][ T9767] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 131.450765][ T9767] ? fput+0x70/0xf0 [ 131.450779][ T9767] ? __pfx_filldir64+0x10/0x10 [ 131.450804][ T9767] do_syscall_64+0xcd/0xf80 [ 131.450823][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.450837][ T9767] RIP: 0033:0x7f453038f7c9 [ 131.450849][ T9767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.450864][ T9767] RSP: 002b:00007f45312ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.450878][ T9767] RAX: ffffffffffffffda RBX: 00007f45305e5fa0 RCX: 00007f453038f7c9 [ 131.450887][ T9767] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 131.450898][ T9767] RBP: 00007f45312ac090 R08: 0000000000000000 R09: 0000000000000000 [ 131.450908][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.450917][ T9767] R13: 00007f45305e6038 R14: 00007f45305e5fa0 R15: 00007ffd52a82b58 [ 131.450942][ T9767] [ 131.450948][ T9767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.282213][ T9812] syzkaller0: entered promiscuous mode [ 132.284472][ T9812] syzkaller0: entered allmulticast mode [ 132.397573][ T9814] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 132.429304][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 132.429316][ T40] audit: type=1400 audit(1766783513.881:464): avc: denied { mount } for pid=9819 comm="syz.0.1179" name="/" dev="ramfs" ino=25463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.443435][ T9820] input: syz1 as /devices/virtual/input/input9 [ 132.498935][ T9824] bond1: option downdelay: invalid value (18446744073709551615) [ 132.501973][ T9824] bond1: option downdelay: allowed values 0 - 2147483647 [ 132.506177][ T9824] bond1 (unregistering): Released all slaves [ 132.507353][ T9827] FAULT_INJECTION: forcing a failure. [ 132.507353][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 132.514091][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.0.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.514109][ T9827] Tainted: [L]=SOFTLOCKUP [ 132.514113][ T9827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.514120][ T9827] Call Trace: [ 132.514124][ T9827] [ 132.514128][ T9827] dump_stack_lvl+0x16c/0x1f0 [ 132.514146][ T9827] should_fail_ex+0x512/0x640 [ 132.514163][ T9827] ? fs_reclaim_acquire+0xae/0x150 [ 132.514180][ T9827] should_failslab+0xc2/0x120 [ 132.514196][ T9827] __kmalloc_noprof+0xeb/0x910 [ 132.514214][ T9827] ? tomoyo_encode2+0x100/0x3e0 [ 132.514232][ T9827] ? tomoyo_encode2+0x100/0x3e0 [ 132.514246][ T9827] tomoyo_encode2+0x100/0x3e0 [ 132.514262][ T9827] tomoyo_encode+0x29/0x50 [ 132.514276][ T9827] tomoyo_realpath_from_path+0x18f/0x6e0 [ 132.514295][ T9827] tomoyo_check_open_permission+0x2ab/0x3c0 [ 132.514308][ T9827] ? alloc_empty_file+0x73/0x1e0 [ 132.514319][ T9827] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 132.514332][ T9827] ? ovl_iterate+0xb5c/0x1120 [ 132.514349][ T9827] ? __x64_sys_getdents64+0x13c/0x2c0 [ 132.514363][ T9827] ? do_syscall_64+0xcd/0xf80 [ 132.514390][ T9827] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.514409][ T9827] tomoyo_file_open+0x6b/0x90 [ 132.514428][ T9827] security_file_open+0x84/0x1e0 [ 132.514444][ T9827] do_dentry_open+0x597/0x1590 [ 132.514459][ T9827] ? lockdep_init_map_type+0x5c/0x270 [ 132.514475][ T9827] vfs_open+0x82/0x3f0 [ 132.514486][ T9827] dentry_open+0x71/0xd0 [ 132.514496][ T9827] ovl_path_open+0x198/0x1f0 [ 132.514514][ T9827] ovl_dir_read_merged+0x4b8/0x780 [ 132.514534][ T9827] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 132.514554][ T9827] ? __pfx_ovl_fill_merge+0x10/0x10 [ 132.514578][ T9827] ovl_iterate+0xb5c/0x1120 [ 132.514604][ T9827] ? __pfx_down_write+0x10/0x10 [ 132.514620][ T9827] ? __pfx_down_read_killable+0x10/0x10 [ 132.514638][ T9827] ? __pfx_ovl_iterate+0x10/0x10 [ 132.514654][ T9827] wrap_directory_iterator+0xa2/0xe0 [ 132.514669][ T9827] iterate_dir+0x296/0xaf0 [ 132.514684][ T9827] __x64_sys_getdents64+0x13c/0x2c0 [ 132.514698][ T9827] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 132.514712][ T9827] ? fput+0x70/0xf0 [ 132.514720][ T9827] ? __pfx_filldir64+0x10/0x10 [ 132.514775][ T9827] do_syscall_64+0xcd/0xf80 [ 132.514794][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.514806][ T9827] RIP: 0033:0x7fda97f8f7c9 [ 132.514816][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.514827][ T9827] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 132.514838][ T9827] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 132.514845][ T9827] RDX: 0000000000001000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 132.514851][ T9827] RBP: 00007fda98ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 132.514857][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.514864][ T9827] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 132.514878][ T9827] [ 132.514890][ T9827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.571132][ T9831] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 132.626933][ T9832] fuse: Unknown parameter '…' [ 132.655214][ T9834] __nla_validate_parse: 16 callbacks suppressed [ 132.655227][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 132.661279][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'. [ 132.904892][ T40] audit: type=1400 audit(1766783514.330:465): avc: denied { append } for pid=9847 comm="syz.0.1190" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.989088][ T55] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 133.096144][ T6023] net_ratelimit: 75 callbacks suppressed [ 133.096159][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.149464][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 133.152999][ T55] usb 9-1: config 0 has no interfaces? [ 133.155225][ T55] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 133.158155][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.160222][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.162400][ T55] usb 9-1: config 0 descriptor?? [ 133.320512][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 133.323632][ T54] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 133.326414][ T54] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 133.329497][ T54] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 133.335861][ T54] usb 5-1: config 250 has no interface number 0 [ 133.338628][ T54] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 133.344374][ T54] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 133.348066][ T54] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.348764][ T9861] overlayfs: failed to clone upperpath [ 133.351506][ T54] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.360402][ T54] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 133.365419][ T54] usb 5-1: config 250 interface 228 has no altsetting 0 [ 133.369861][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 133.373857][ T54] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 133.377537][ T54] usb 5-1: Product: syz [ 133.379352][ T54] usb 5-1: SerialNumber: syz [ 133.385945][ T839] usb 9-1: USB disconnect, device number 6 [ 133.397908][ T54] hub 5-1:250.228: bad descriptor, ignoring hub [ 133.400602][ T54] hub 5-1:250.228: probe with driver hub failed with error -5 [ 133.426124][ T9863] Cannot find set identified by id 0 to match [ 133.459654][ T9868] "syz.1.1196" (9868) uses obsolete ecb(arc4) skcipher [ 133.610693][ T64] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 133.613850][ T54] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 133.703703][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 133.707029][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 133.744112][ T9874] bond1: option downdelay: invalid value (18446744073709551615) [ 133.746803][ T9874] bond1: option downdelay: allowed values 0 - 2147483647 [ 133.750491][ T9874] bond1 (unregistering): Released all slaves [ 133.860259][ T9878] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 133.863235][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1200'. [ 133.921377][ T6023] usb 5-1: USB disconnect, device number 3 [ 133.926134][ T6023] usblp0: removed [ 134.137687][ T9888] ip6gre1: entered promiscuous mode [ 134.139597][ T9888] ip6gre1: entered allmulticast mode [ 134.146629][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.147660][ T9891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9891 comm=syz.2.1203 [ 134.154607][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.182090][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.185197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.189078][ T839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.219253][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.509057][ T9905] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 134.512460][ T9905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1209'. [ 134.635860][ T5946] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 134.722930][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 134.725793][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1211'. [ 134.763513][ T9916] bond2: option downdelay: invalid value (18446744073709551615) [ 134.766886][ T9916] bond2: option downdelay: allowed values 0 - 2147483647 [ 134.770640][ T9916] bond2 (unregistering): Released all slaves [ 134.775779][ T839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.978130][ T839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.084983][ T55] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 135.139638][ T839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.266579][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 135.269622][ T55] usb 7-1: config 0 has no interfaces? [ 135.271445][ T55] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.274394][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.275677][ T55] usb 7-1: config 0 descriptor?? [ 135.292959][ T40] audit: type=1400 audit(1766783516.555:466): avc: denied { audit_read } for pid=9931 comm="syz.1.1217" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.300082][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 135.309560][ T839] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.312699][ T839] usb 5-1: config 179 has no interface number 0 [ 135.314879][ T839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.318567][ T839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.325389][ T839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.329565][ T839] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.331134][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.333016][ T839] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.340688][ T839] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.344839][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.349917][ T9922] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.354634][ T839] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 135.495098][ T54] usb 7-1: USB disconnect, device number 9 [ 135.712122][ T5946] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 135.772927][ T9947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.776377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.779423][ T9947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.785017][ T9946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.788047][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.919817][ T9950] fuse: Bad value for 'rootmode' [ 136.479315][ T9967] bond1: option downdelay: invalid value (18446744073709551615) [ 136.482051][ T9967] bond1: option downdelay: allowed values 0 - 2147483647 [ 136.486060][ T9967] bond1 (unregistering): Released all slaves [ 137.116339][ T839] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 137.276730][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 137.280220][ T839] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 137.283153][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.286315][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.290655][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.293896][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.298826][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.301749][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.492295][ T9989] "syz.1.1238" (9989) uses obsolete ecb(arc4) skcipher [ 137.526277][ T40] audit: type=1400 audit(1766783518.650:467): avc: denied { append } for pid=9976 comm="syz.2.1232" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 137.793879][ T40] audit: type=1400 audit(1766783518.903:468): avc: denied { ioctl } for pid=9994 comm="syz.4.1240" path="socket:[29887]" dev="sockfs" ino=29887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.096813][ T55] usb 5-1: USB disconnect, device number 4 [ 138.144030][ T40] audit: type=1400 audit(1766783519.230:469): avc: denied { read write } for pid=10004 comm="syz.4.1244" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.153949][ T40] audit: type=1400 audit(1766783519.230:470): avc: denied { open } for pid=10004 comm="syz.4.1244" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.213636][T10007] syzkaller0: entered promiscuous mode [ 138.215899][T10007] syzkaller0: entered allmulticast mode [ 138.221741][T10009] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 138.221910][T10007] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 138.225210][T10009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1246'. [ 138.380098][T10017] bond2: option downdelay: invalid value (18446744073709551615) [ 138.382911][T10017] bond2: option downdelay: allowed values 0 - 2147483647 [ 138.386560][T10017] bond2 (unregistering): Released all slaves [ 138.399732][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.510717][T10024] usbtmc 7-1:16.0: simple control status returned 88 [ 138.633246][T10027] "syz.4.1251" (10027) uses obsolete ecb(arc4) skcipher [ 138.657742][ T6023] net_ratelimit: 35 callbacks suppressed [ 138.657754][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.174455][T10046] netlink: 'syz.1.1258': attribute type 13 has an invalid length. [ 139.189325][T10046] gretap0: refused to change device tx_queue_len [ 139.192692][T10046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.286665][T10058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.290062][T10058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.292957][T10058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.298107][ T40] audit: type=1400 audit(1766783520.306:471): avc: denied { ioctl } for pid=10056 comm="syz.1.1261" path="socket:[28408]" dev="sockfs" ino=28408 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 139.311075][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.314101][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.381785][T10061] netlink: 'syz.1.1262': attribute type 10 has an invalid length. [ 139.461025][T10073] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 139.463733][T10073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1266'. [ 139.605619][T10084] "syz.4.1268" (10084) uses obsolete ecb(arc4) skcipher [ 139.768370][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.954033][T10096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.958374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.077239][ T24] usb 7-1: USB disconnect, device number 10 [ 140.265051][T10109] netlink: 'syz.2.1277': attribute type 10 has an invalid length. [ 140.310997][ T40] audit: type=1400 audit(1766783521.250:472): avc: denied { map } for pid=10118 comm="syz.1.1281" path="socket:[28447]" dev="sockfs" ino=28447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.337181][T10122] "syz.2.1283" (10122) uses obsolete ecb(arc4) skcipher [ 140.398068][T10129] netlink: 'syz.0.1285': attribute type 13 has an invalid length. [ 140.663433][T10137] ------------[ cut here ]------------ [ 140.665290][T10137] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#0: syz.0.1286/10137 [ 140.669154][T10137] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.671176][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.0.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.674915][T10137] Tainted: [L]=SOFTLOCKUP [ 140.676394][T10137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.680468][T10137] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 140.683047][T10137] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 29 4c 56 0e 00 75 0b c6 05 20 4c 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 140.690753][T10137] RSP: 0018:ffffc9000ebf77a8 EFLAGS: 00010246 [ 140.692726][T10137] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.695283][T10137] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 140.697838][T10137] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 140.700498][T10137] R10: 0000000000000015 R11: ffff88801f2d0b30 R12: 0000000000040cc0 [ 140.703485][T10137] R13: 1ffff92001d7ef0b R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 140.706248][T10137] FS: 00007fda98ea46c0(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 140.709898][T10137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.712776][T10137] CR2: 000000110c2502e8 CR3: 000000004d4e2000 CR4: 0000000000352ef0 [ 140.716440][T10137] Call Trace: [ 140.717908][T10137] [ 140.719207][T10137] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.721932][T10137] ? is_bpf_text_address+0x94/0x1a0 [ 140.724229][T10137] ? kernel_text_address+0x8d/0x100 [ 140.726497][T10137] ? __kernel_text_address+0xd/0x40 [ 140.728828][T10137] ? unwind_get_return_address+0x59/0xa0 [ 140.731668][T10137] ? arch_stack_walk+0xa6/0x100 [ 140.734005][T10137] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.736614][T10137] ? stack_depot_save_flags+0x29/0x9b0 [ 140.738418][T10137] ? __lock_acquire+0x436/0x2890 [ 140.740222][T10137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.742428][T10137] ? policy_nodemask+0xea/0x4e0 [ 140.744109][T10137] alloc_pages_mpol+0x1fb/0x550 [ 140.745722][T10137] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.747621][T10137] ___kmalloc_large_node+0x10c/0x150 [ 140.749710][T10137] ? avc_has_extended_perms+0x33a/0x1090 [ 140.751878][T10137] __kmalloc_large_node_noprof+0x1c/0x70 [ 140.753952][T10137] __kmalloc_noprof.cold+0xc/0x62 [ 140.755704][T10137] ? drm_syncobj_array_find+0x35/0x3c0 [ 140.757528][T10137] ? drm_syncobj_array_find+0x35/0x3c0 [ 140.759411][T10137] drm_syncobj_array_find+0x35/0x3c0 [ 140.761182][T10137] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.763262][T10137] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 140.765349][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.768075][T10137] ? drm_dev_exit+0x41/0x60 [ 140.769664][T10137] drm_ioctl_kernel+0x1f4/0x3e0 [ 140.771436][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.773983][T10137] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 140.775822][T10137] drm_ioctl+0x5c9/0xc30 [ 140.777251][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.779547][T10137] ? __pfx_drm_ioctl+0x10/0x10 [ 140.781142][T10137] ? selinux_file_ioctl+0x180/0x270 [ 140.782908][T10137] ? selinux_file_ioctl+0xb4/0x270 [ 140.784687][T10137] ? __pfx_drm_ioctl+0x10/0x10 [ 140.786297][T10137] __x64_sys_ioctl+0x18e/0x210 [ 140.787913][T10137] do_syscall_64+0xcd/0xf80 [ 140.789480][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.791438][T10137] RIP: 0033:0x7fda97f8f7c9 [ 140.793349][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.801142][T10137] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.804774][T10137] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 140.808551][T10137] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 140.812168][T10137] RBP: 00007fda98013f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.815397][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.818061][T10137] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 140.820656][T10137] [ 140.821694][T10137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.824097][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.0.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.827814][T10137] Tainted: [L]=SOFTLOCKUP [ 140.829242][T10137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.832868][T10137] Call Trace: [ 140.833993][T10137] [ 140.835064][T10137] dump_stack_lvl+0x3d/0x1f0 [ 140.836877][T10137] vpanic+0x640/0x6f0 [ 140.838458][T10137] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 140.840623][T10137] panic+0xca/0xd0 [ 140.841887][T10137] ? __pfx_panic+0x10/0x10 [ 140.843430][T10137] check_panic_on_warn+0xab/0xb0 [ 140.845070][T10137] __warn+0x108/0x3c0 [ 140.846393][T10137] __report_bug+0x2a0/0x520 [ 140.847894][T10137] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 140.849871][T10137] ? __pfx___report_bug+0x10/0x10 [ 140.851545][T10137] ? __lock_acquire+0x436/0x2890 [ 140.853215][T10137] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 140.855231][T10137] report_bug+0xb2/0x220 [ 140.856636][T10137] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 140.858640][T10137] handle_bug+0x127/0x260 [ 140.860200][T10137] exc_invalid_op+0x17/0x50 [ 140.861720][T10137] asm_exc_invalid_op+0x1a/0x20 [ 140.863350][T10137] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 140.865540][T10137] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 29 4c 56 0e 00 75 0b c6 05 20 4c 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 140.871797][T10137] RSP: 0018:ffffc9000ebf77a8 EFLAGS: 00010246 [ 140.873930][T10137] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.876588][T10137] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 140.879180][T10137] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 140.881790][T10137] R10: 0000000000000015 R11: ffff88801f2d0b30 R12: 0000000000040cc0 [ 140.884448][T10137] R13: 1ffff92001d7ef0b R14: ffffffff9ac42ac4 R15: 0000000000000015 [ 140.887038][T10137] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.889063][T10137] ? is_bpf_text_address+0x94/0x1a0 [ 140.890789][T10137] ? kernel_text_address+0x8d/0x100 [ 140.892511][T10137] ? __kernel_text_address+0xd/0x40 [ 140.894243][T10137] ? unwind_get_return_address+0x59/0xa0 [ 140.896302][T10137] ? arch_stack_walk+0xa6/0x100 [ 140.897996][T10137] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.900082][T10137] ? stack_depot_save_flags+0x29/0x9b0 [ 140.901900][T10137] ? __lock_acquire+0x436/0x2890 [ 140.903604][T10137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.905579][T10137] ? policy_nodemask+0xea/0x4e0 [ 140.907350][T10137] alloc_pages_mpol+0x1fb/0x550 [ 140.909034][T10137] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.910858][T10137] ___kmalloc_large_node+0x10c/0x150 [ 140.912624][T10137] ? avc_has_extended_perms+0x33a/0x1090 [ 140.914498][T10137] __kmalloc_large_node_noprof+0x1c/0x70 [ 140.916392][T10137] __kmalloc_noprof.cold+0xc/0x62 [ 140.918074][T10137] ? drm_syncobj_array_find+0x35/0x3c0 [ 140.919893][T10137] ? drm_syncobj_array_find+0x35/0x3c0 [ 140.921698][T10137] drm_syncobj_array_find+0x35/0x3c0 [ 140.923494][T10137] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.925229][T10137] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 140.927321][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.929568][T10137] ? drm_dev_exit+0x41/0x60 [ 140.931106][T10137] drm_ioctl_kernel+0x1f4/0x3e0 [ 140.932776][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.935043][T10137] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 140.936823][T10137] drm_ioctl+0x5c9/0xc30 [ 140.938237][T10137] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 140.940495][T10137] ? __pfx_drm_ioctl+0x10/0x10 [ 140.942104][T10137] ? selinux_file_ioctl+0x180/0x270 [ 140.943870][T10137] ? selinux_file_ioctl+0xb4/0x270 [ 140.945565][T10137] ? __pfx_drm_ioctl+0x10/0x10 [ 140.947183][T10137] __x64_sys_ioctl+0x18e/0x210 [ 140.948789][T10137] do_syscall_64+0xcd/0xf80 [ 140.950296][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.952257][T10137] RIP: 0033:0x7fda97f8f7c9 [ 140.953782][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.960014][T10137] RSP: 002b:00007fda98ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.962718][T10137] RAX: ffffffffffffffda RBX: 00007fda981e5fa0 RCX: 00007fda97f8f7c9 [ 140.965297][T10137] RDX: 0000200000000200 RSI: 00000000c01864cd RDI: 0000000000000003 [ 140.967977][T10137] RBP: 00007fda98013f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.970491][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.973091][T10137] R13: 00007fda981e6038 R14: 00007fda981e5fa0 R15: 00007ffd2dc6a708 [ 140.975707][T10137] [ 140.977656][T10137] Kernel Offset: disabled [ 140.979122][T10137] Rebooting in 86400 seconds..