last executing test programs: 3m18.462875014s ago: executing program 0 (id=116): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002400)=[{&(0x7f0000004700)=""/4095, 0xfff}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002400)=[{&(0x7f0000004700)=""/4095, 0xfff}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x0, 0x1}, 0x20) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl(r3, 0x40047438, &(0x7f0000000040)) (async) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) (async) 3m18.46259954s ago: executing program 0 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x0, 0xa, 0x1, 0x0, 0xe23}, @IPSET_ATTR_NAMEREF={0x0, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP2={0x0, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xffffffffffffff6a, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1}) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f0000019300)={0x0, 0x0, 0x3, 0x0, 0x132, 0x3}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3m17.564081886s ago: executing program 0 (id=118): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000008400000002000000de2401020400000009000000", @ANYRES32=r1], 0x20, 0x20008001}], 0x1, 0x24010000) (fail_nth: 2) 3m16.714810263s ago: executing program 0 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x4044014) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 3m16.642775689s ago: executing program 0 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @mcast1, 0xa}], 0x1c) (async) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 3m16.2816228s ago: executing program 0 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x78d4a000) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x223}) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x86d, 0x1, 0x1, 0xd59f80, 0x11f3, 0x3, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x5, 0xffffffff}, 0xd0, 0x9}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r5, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275b693e0ed", 0x2a) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) 3m16.260208655s ago: executing program 32 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x78d4a000) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x223}) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x86d, 0x1, 0x1, 0xd59f80, 0x11f3, 0x3, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x5, 0xffffffff}, 0xd0, 0x9}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r5, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275b693e0ed", 0x2a) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) 2m33.311571126s ago: executing program 4 (id=609): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000440)={0x1, 0x0, 0xff}) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x8, 0x4, 0x5d46f8e4, 0x0, 0x536}) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x7fffffff}) r3 = fanotify_init(0x4, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18420000fbffff0200"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x70, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5, 0xe}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000002c0)=[{0x2, 0x1, 0x9, 0x7}, {0x0, 0x2, 0xf, 0x2}, {0x4, 0x5, 0x0, 0x7}], 0x10, 0xffff5682}, 0x94) fanotify_mark(r3, 0x11, 0x1020, r0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000440)={0x1, 0x0, 0xff}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x8, 0x4, 0x5d46f8e4, 0x0, 0x536}) (async) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x7fffffff}) (async) fanotify_init(0x4, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18420000fbffff0200"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x70, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5, 0xe}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000002c0)=[{0x2, 0x1, 0x9, 0x7}, {0x0, 0x2, 0xf, 0x2}, {0x4, 0x5, 0x0, 0x7}], 0x10, 0xffff5682}, 0x94) (async) fanotify_mark(r3, 0x11, 0x1020, r0, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) 2m33.125240684s ago: executing program 4 (id=611): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000480)={0x2, 0x0, {&(0x7f00000003c0)=""/94, 0x5e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f0000000700)=""/91, 0x5b, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000001c00)={0x1, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$vhost_msg(r0, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r10, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x7}) 2m32.966052586s ago: executing program 4 (id=615): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x7, 0x97, 0x9}]}) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000000882, 0x0) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m31.562551998s ago: executing program 4 (id=644): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)='8', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x8, 0x8, 0x9, 0xffffffff, {0x43, 0x5, 0x9, 0x80, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10000, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x2, 0xffffffff80200168, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x2, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x149200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2m31.292490929s ago: executing program 4 (id=646): chdir(&(0x7f0000000280)='./cgroup\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000240)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x2f, 0x5, 0x81, "1e18579a7fd076eeb9131d938bd10643", "b0e9152258827e489ede9161b1874efc36993618891cfe0545a5"}, 0x2f, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf62b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m31.136507584s ago: executing program 4 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x1}) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='my_configfs/nullb\x00', 0x10000, 0x0) (async) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000380)='1', 0x1) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x1}) (async) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) (async) 2m31.03722555s ago: executing program 33 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x1}) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='my_configfs/nullb\x00', 0x10000, 0x0) (async) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000380)='1', 0x1) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x1}) (async) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) (async) 1m32.860127753s ago: executing program 1 (id=1617): syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x9}, {0x4, 0xff6a}}}}, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001140), 0x109002, 0x0) 1m32.798672971s ago: executing program 1 (id=1620): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x14}}, 0xc004) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m32.719055885s ago: executing program 1 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) lseek(r0, 0x8000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x55}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1m32.650502046s ago: executing program 1 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c000100000201010000001000000000000000000000000000000001"], 0x60}}, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x6fae, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x6}, 0x1c) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r3 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) r4 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0xfffffffffffffff5, 0x4, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0x5, 0x4000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x105, 0xfffffffffffffffd, {0x8, 0x2}, {0x10}, {}, {0xd}, 0x0, 0x1, 0x10001}}}}) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async, rerun: 32) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 1m32.597518877s ago: executing program 1 (id=1627): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000180)) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r4 = fanotify_init(0x200, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) (async) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000140)={0x1, 0xf400000000000000, 0x5, 0x6, 0x80000000}) (async) write(r5, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) (async) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000400000004009d6cb88792a04973de5f16130d13ab5edc8b29f1dca6668fe896aaa9feeeee3ced3be72192888a3684f4877e63a5f8ef8e36393fa55e5e086ba14a5de081227d0531a3bb073ba4c3093cb8c84ede90a207ec1f10703e493d6d1a05abb771d7f3520ced9c0e52458fcefa687a2244abad1b0d1f981d15f96d66345be9aec93a0b9cf411c69ebda86"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x2}, 0x94) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x101, 0x4, 0x2) (async) read$sequencer(r2, &(0x7f0000000380)=""/130, 0x82) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f0000000180)='/proc/locks\x00', 0x1, &(0x7f00000001c0)={@align=0x4, {0x81, 0xd29f, 0x4cc, 0x921}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x79159af5}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.530662391s ago: executing program 1 (id=1630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) read$fb(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000440)='2\x00', 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', r9, 0x10, 0x8000, 0x0, 0x2, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x67, 0x0, 0xd, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@lsrr={0x83, 0x17, 0x31, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "f74bfb9322589f4fbf7a4394"}, @noop, @generic={0x83, 0xb, "b941cbde853879d3ea"}, @end, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x5, [{@remote, 0x3}]}, @noop, @cipso={0x86, 0xc, 0x2, [{0x6, 0x3, 'O'}, {0x5, 0x3, "cb"}]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r11, &(0x7f0000000140)=""/4072, 0xfe8, 0xe9) ioctl$HIDIOCSREPORT(r11, 0x400c4808, &(0x7f0000000480)={0x2, 0x1, 0xffffffff}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m17.269670951s ago: executing program 34 (id=1630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) read$fb(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000440)='2\x00', 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', r9, 0x10, 0x8000, 0x0, 0x2, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x67, 0x0, 0xd, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@lsrr={0x83, 0x17, 0x31, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "f74bfb9322589f4fbf7a4394"}, @noop, @generic={0x83, 0xb, "b941cbde853879d3ea"}, @end, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x5, [{@remote, 0x3}]}, @noop, @cipso={0x86, 0xc, 0x2, [{0x6, 0x3, 'O'}, {0x5, 0x3, "cb"}]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r11, &(0x7f0000000140)=""/4072, 0xfe8, 0xe9) ioctl$HIDIOCSREPORT(r11, 0x400c4808, &(0x7f0000000480)={0x2, 0x1, 0xffffffff}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32.260127837s ago: executing program 5 (id=2422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="6802000000050104000000000000000007000009540201000100000003000000030305000500000073797a300000000000000000000000000000000000000000000000000000000092550f3ecfb1832abf552b20f9a12bacde4511b743951927d5669e781d461f4cf832421e2cc6f54eae63a790e3676370b799e89cddccb7ca9a377b298e0a46bc0100670800000000f7ffffff01040e0c02000000090000000200080001"], 0x268}, 0x1, 0x0, 0x0, 0x4008080}, 0x4048000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r1, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010400f1ffffff0000000200000005000100130000000900020073797a300000000011000300686173683a69702c706f72740000000005000400010000000500050002000000"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f0000000600), 0x10, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={&(0x7f0000000a00), 0x10, &(0x7f0000000b00)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x3}}}]}]}]}}]}, 0x54}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfe8b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x3, 0x1, 0x4, 0x0, 0x5}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffefa}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000020000000000001907800000000000000c0080090780000000000000000"], 0x0) 32.119372016s ago: executing program 5 (id=2424): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000480)={0x281, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="001068ebbfd6010000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000500)={0x1, r7}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r15 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x100000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1c, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_fd, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x13d8, 0xd5, &(0x7f00000001c0)=""/213, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x1000, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0xb, 0x7}], 0x10, 0x1}, 0x94) r16 = dup(r15) write$UHID_INPUT(r16, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 31.961808513s ago: executing program 5 (id=2425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="e0", 0x1) (fail_nth: 3) 31.960104713s ago: executing program 5 (id=2427): r0 = socket$inet(0x2, 0x801, 0x100) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000)='1000', 0x4, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x0) 31.084999168s ago: executing program 5 (id=2435): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401000, @loopback, 0x83}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x9}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e21, 0xfffeffff, @private2, 0xf9e}, @in={0x2, 0x4e21, @loopback}], 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0xc0}) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x2, [{}, {}]}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000004c0)={r6, &(0x7f00000003c0)='\x00', 0x0, &(0x7f0000000400)={@_ha_fsid={[0xfffffffd, 0x8]}, {0x6, 0x7, 0x1, 0x80}}, 0x167b, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x5}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000540)={0x43, 0x9, 0x1, {0x8, 0x1, 0x4, 0x2, 0x2, 0xf, 0x5, 0xffff, 0x8}}, 0x43) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000640)={0x28, 0x2, 0x0, 0x0, &(0x7f00000005c0)="8c610b2afd7debb258a10169d4cda1ac077f5ff4da9482ed1ab34f394624f78e81bd6ae11ac2ca111d3a86322ada05c96c7b73651c239f9269a42dcd689e3708ca53dbfbbbc8ff16cbda68c16ee71943742fd952da51f42110b1a121702123d733fb1bbfd58a53f2a5fb633c9abd15715cc07ebe53", 0x75, 0x7}) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000680)={0x0, 0x0, '\x00', @raw_data=[0xc0ab, 0xfffffff8, 0x1, 0xf60, 0x9, 0x7f, 0x3, 0xfffffff9, 0x3ff, 0x1, 0x6, 0x0, 0xed, 0x6, 0x7fffffff, 0x1000, 0x5, 0x8, 0x6, 0xfff, 0x100, 0x6347, 0x9, 0x26, 0x8, 0x800, 0x5, 0x2, 0x1, 0xffffffff, 0x2, 0x1]}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000740)={'bridge0\x00', @broadcast}) ioctl$SNDCTL_DSP_GETCAPS(r6, 0x8004500f, &(0x7f0000000780)) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r6}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000900)={r9, &(0x7f0000000800)='\x00', 0x185000, &(0x7f0000000840)={@align=0x3, {0x9, 0x98e, 0x4, 0x709a}}, 0x1, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000940)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$BLKCRYPTOGENERATEKEY(r5, 0xc030128a, &(0x7f0000000a00)={&(0x7f00000009c0)=""/49, 0x31}) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) r12 = socket(0x22, 0x66de36cb0db66835, 0xfffffffc) connect$rds(r12, &(0x7f0000000ac0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b00)={'gretap0\x00', r11, 0x1, 0x7800, 0x1000, 0x5, {{0x23, 0x4, 0x0, 0xf, 0x8c, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @empty, {[@generic={0x44, 0xa, "1d7b691692ca7a91"}, @noop, @lsrr={0x83, 0xb, 0xec, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x18, 0x3, [{0x7, 0x5, "e3312b"}, {0x7, 0xd, "4077b9272d449b809d2aaa"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x78, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@empty, 0x100}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffffc0}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@private=0xa010100, 0x4}, {@multicast1, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip_vti0\x00', r13, 0x7800, 0x708, 0x1, 0x5, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @empty, {[@end, @ssrr={0x89, 0xf, 0xe8, [@local, @empty, @private=0xa010101]}]}}}}}) ioctl$CDROMRESUME(r6, 0x5302) write(r10, &(0x7f0000000cc0)="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", 0x1000) 30.623138565s ago: executing program 5 (id=2447): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r0, 0x5514) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 30.586554457s ago: executing program 35 (id=2447): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r0, 0x5514) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 15.347521396s ago: executing program 3 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe00, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r2, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x55}}}}}, 0x28}}, 0x4c044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (fail_nth: 17) 15.280389897s ago: executing program 3 (id=2644): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000008400000002000000de2401020400e0ff09000000", @ANYRES32=r1], 0x20, 0x20008001}], 0x1, 0x24010000) 15.199113446s ago: executing program 3 (id=2645): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x5}}, 0x20) (async, rerun: 64) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x100) (rerun: 64) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2}) (async, rerun: 64) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80, 0xffff355e, 0x0, 0x2, r4, 0x8, '\x00', 0x0, r3, 0x2, 0x5, 0x2, 0x5}, 0x50) fsetxattr$security_evm(r5, &(0x7f0000000300), &(0x7f0000000340)=@ng={0x4, 0x16, "fd6bfb5e8ddcbce8"}, 0xa, 0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000380)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) (async) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0xc0000) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000004c0)={&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000440)=""/76, 0x4c}) (async) fallocate(r5, 0x3e, 0x1, 0x2) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f0000000500)="b7f522a4f26abe10fe49fc4023ba74617525777b3f0b61c4252b036aa25af55b5dec0119417b151a1ae9e73fe1faca2bd9c3a222f68a62316f11db458528d4199d1b1b62ba8cdead54362bf15b388492db55f031b5393afeb9e9b4ec7751b119f0e2a45f5f543ce451664d2a29e0376b51c3050754501f37097624bc2d7253d588b4f9c2e0536d8a511b9c5ef985a495e6f474a54a64de7b4bd790428373c2effb8b6feed6d82cbd3fc3a11dd5a7371f478e277c63e2", &(0x7f00000005c0)=""/86, &(0x7f0000000640)="19c864495ba5847a4e17d95f16e2707a8b338007e9e633e26895d5bf580517f5e788555572296b9dc93e9966b146f680864e8698ce3f31636a11f3287411fecc6e3157fb5325ee45f1f53746aea60ba12db0ac2c8764046450b9e8040ed8bddafd938bff8dd203c618146abe18406c6ae8f0183acc90346f1f", &(0x7f00000006c0)="6cc4d9ef32f57824e6d090c1baf3d55312ab595b04b1b5c82d70c674381881e3dc1dffa85710fa6ea989838f248a", 0xffff, r6}, 0x38) (async) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x110, r3, 0x82000000) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000007c0)) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) (async, rerun: 32) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000800), &(0x7f0000000840)={'U+', 0x166c}, 0x16, 0x1) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000880)={0x3, 0x1, 0xa7}) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f00000008c0)) (async) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000008, 0x50, r6, 0x82000000) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r7, r4, 0x0) 15.070259432s ago: executing program 3 (id=2648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='net/vlan/vlan1\x00') fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x2, 0x3, 0x1, 0x3, r1}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x4f) 15.061941362s ago: executing program 3 (id=2650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='0 ', 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0c1c670b8080", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 14.719808379s ago: executing program 3 (id=2654): r0 = getpid() r1 = socket(0x22, 0x5, 0x1ff) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000080)={0x8e, 0x100078, 0x100000}, 0x20) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1010060, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_pidfd_open(r5, 0x0) 14.645107347s ago: executing program 36 (id=2654): r0 = getpid() r1 = socket(0x22, 0x5, 0x1ff) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000080)={0x8e, 0x100078, 0x100000}, 0x20) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1010060, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_pidfd_open(r5, 0x0) 3.12931488s ago: executing program 8 (id=2874): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x1, 0x25, @dev={0xfe, 0x80, '\x00', 0xd}, @private2, 0x8000, 0x8080, 0x707, 0x1e}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @local, 0x0}, &(0x7f0000000640)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x8, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x3c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x3, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001100)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={0x570, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x2, 0x2, 0x81}, {0x5, 0x1, 0x5, 0xc0}, {0x7, 0x9, 0x7, 0x6}, {0x3, 0x6, 0x4, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc, 0x7, 0x12, 0x4c0}, {0x6, 0x1, 0xe, 0x81}, {0x0, 0x4, 0x7, 0x10000}, {0x100, 0x0, 0xf9, 0x5}]}}}]}}, {{0x8, 0x1, r7}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x570}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="3b6d22fbdd034cb83664ed59c2b7a671a5b509897c29399e3f5bf66441bbcd0cf48ea088763769ee846a0054d6edc2b6c5812a43e98702f80af21096ff9ac06299b81da988abf450d3c02667169ad1", 0x4f}], 0x1, 0x17) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b"], 0x28}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, 0x0, &(0x7f0000000040)) 2.80877872s ago: executing program 8 (id=2878): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r4 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) close_range(r4, 0xffffffffffffffff, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 2.669432982s ago: executing program 8 (id=2882): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) syz_open_procfs(r1, &(0x7f0000000040)='smaps_rollup\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r3) (async) mount(0x0, &(0x7f0000000140)='./dev/ttyGS0\x00', &(0x7f0000000080)='nfs\x00', 0x107049, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.587619394s ago: executing program 8 (id=2885): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010100, 0xffffffffffffffff, "d0c4e82682e045c0270f604dbb2ab5a96132c28a796019f76dea97af6fff18f5", 0x1, 0x401, 0x6, 0x4}, 0x3c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x6, 0x7, 0xfffffff1, 0x7, 0x15e]}, &(0x7f0000000180)=0x54) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000200)={0x0}) syz_open_dev$ublk_chdev(&(0x7f00000001c0), r3, 0x8040) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r4, 0xc0207507, &(0x7f00000002c0)={r3}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x3, r1, 0x1}) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000380)=0xb9) r6 = signalfd4(r2, &(0x7f00000003c0)={[0x4]}, 0x8, 0x800) lseek(r6, 0x5, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000400)) syz_io_uring_setup(0x16c, &(0x7f0000000440)={0x0, 0x305, 0x8, 0x2, 0x2ab, 0x0, r6}, &(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) syz_ublk_setup_io_uring(0x7b6f, &(0x7f0000000580)={0x0, 0xd8e, 0x80, 0x0, 0x56}, &(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) r9 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x1000006, 0x4010, r5, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_ublk_add_dev(r5, r7, r8, r9, &(0x7f0000000700)={0x2e, 0x8, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x1, 0x9a4, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x12}}}, &(0x7f0000000780)) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f0000000800)={0x0, 0x200, 0x0, '\x00', &(0x7f00000007c0)=0x9}) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000840)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0xfff, @local, 0x4}}, 0x8, 0xd}, &(0x7f0000000940)=0x90) mkdirat(r5, &(0x7f0000000980)='./file0\x00', 0x106) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000009c0)={r12, 0xa}, 0x8) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000c00)={{0x4, 0x3, 0x2, 0x8, 0x81}, &(0x7f0000000a80)=[{}, {}]}) 2.469956903s ago: executing program 8 (id=2886): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x1e8, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f0000001380)) r9 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r9, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r10 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r10, 0x0, 0x63, &(0x7f00000003c0)=""/30, &(0x7f0000d23000)=0x1e) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.237678192s ago: executing program 6 (id=2893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) renameat(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimes(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x40000118, 0x1}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.879016861s ago: executing program 6 (id=2898): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) msgsnd(0x0, 0x0, 0x24, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getresuid(&(0x7f0000000080), &(0x7f0000000200)=0x0, &(0x7f0000000240)) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@multicast2, 0x4e22, 0x8, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x2e, 0x0, r5}, {0x40, 0x1, 0x5, 0x8, 0x9b, 0xffffffffffffff39, 0xeabc, 0x9e0}, {0x186, 0x0, 0xf, 0x3}, 0x10000, 0x6e6bbc, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in=@private=0xa010101, 0x0, 0x1, 0x0, 0x55, 0xe4, 0x5, 0x800}}, 0xe8) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) r7 = creat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000740)=0x1011010, 0x4) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r6, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2, 0x0) 1.340013417s ago: executing program 6 (id=2905): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000008400000002000000de2401020400000009000006", @ANYRES32=r1], 0x20, 0x20008001}], 0x1, 0x24010000) 1.260493657s ago: executing program 6 (id=2906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) 539.924662ms ago: executing program 2 (id=2908): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x40, 0x1}) (async, rerun: 64) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendto$packet(r4, &(0x7f0000000440)="eb6134d6500f180e8edd05aa9872d5a48898179107962d2a501695276a09dc84c89ef9e3b31599ec271e1fe2ecbf7413d2b9758fc6317505f07c65a4fd4dac1c74260facae6330cb44a37c5ef60cefc302e451263e679c5fa07161de65bacad107834debd536e7763b540133198bbf5671c726f31f423aa5218c5617e3d215c306a25cab727e5b743a09e38069b51a689ae79a3a3630dc02f61229b01e9a739542732f8c53097ef4325c8745dd60ac5a1e840a0b7884ae12359f745b281521cabfb6e4808a43003c6487bb26416c14f0fad03f77", 0xd4, 0x1, &(0x7f00000005c0)={0x11, 0x11, r5, 0x1, 0x1, 0x6, @local}, 0x14) (async) read$eventfd(r4, &(0x7f0000000340), 0x8) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) 539.619143ms ago: executing program 7 (id=2909): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) write(r0, &(0x7f0000000400), 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/1, 0x1, 0x9) write(r0, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 457.553599ms ago: executing program 8 (id=2910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0x0, 0x6, 0x2, 0x7ff, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "000000400300"]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b7050000000000007910a800000000001da000000902f21971af64872c01d31bc1000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff25) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB='pids_localevents,memory_hugetlb_accounting,nsdelegate,pids_localevents,favordynmods,nsdelegate,euid=', @ANYRESDEC=0x0, @ANYBLOB=',hash,audit,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c1b00a6ce8422d01ecb001a9b9c934e7496ffbd34b0cfb722c73e81cf070bdf7fdec61df3d037e27ab3ec1d35a82b1aad6a6df0d86962b765deb5a45f799969232df83dec09500a46455d350a9512a3"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r10, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r11, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000740f00001c0012800b00010067726574617000000c00028008000700ac1414bb08000a00", @ANYRES32=r3, @ANYBLOB="14865e14a10d74d7672054f1ea9df887892b3d84766e327db810eb477e2a77e1137219d41fe5dc42740d1bb6d90b7b2a0f5b6a9374a1d7f1e4da25fa5db631d30fb7859990291ca53010bd561b56bbb7dacac33f74dbceac8cb31461eeaffab115ebc007920a545ed40d2fd87480bd1dce10bea644bfcf9ad892a2e7fd7f02327a469c4e89aac14beac6742a2a1ba101c5b746405dc0d94d293ddd446f87071d8c8b3c96ee7ed8e30d8b3a4ecee677d15bd12ddb136a5f534247797f7415a9a9c17774dc4d57b8d8e0059a9722955c8f7ea96e06b2641cc689db894009b2d0265965c3145d678df69aefa0af96"], 0x44}}, 0x4000) 457.299043ms ago: executing program 7 (id=2911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14004310", @ANYRES16=r1, @ANYBLOB="08002cbd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000080)=[{r3, 0x210a}, {r3, 0x120}], 0x2, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 456.338331ms ago: executing program 2 (id=2912): write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) open$dir(&(0x7f0000000180)='./file0\x00', 0x8400, 0x18) r0 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000b80)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x9, 0xc, "eef53b", 0xfffa, 0x5b}]}}}, 0x12) clock_getres(0x3, 0x0) dup2(r0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(r4, &(0x7f00000012c0)='./file1\x00', 0x80, 0x103) r5 = dup(r3) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000280)=0x28) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000001b40)) write$UHID_INPUT(r5, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 379.437432ms ago: executing program 6 (id=2913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) chroot(&(0x7f0000000100)='./file0\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = fcntl$dupfd(r1, 0x0, r0) write$binfmt_aout(r4, &(0x7f0000000e80)=ANY=[], 0x620) 374.058593ms ago: executing program 2 (id=2914): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000008400000002000000de240102040000000900ffe0", @ANYRES32=r1], 0x20, 0x20008001}], 0x1, 0x24010000) 302.44449ms ago: executing program 6 (id=2915): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000000000) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000440)) getpeername(r1, 0x0, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) r3 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x2) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f9ffff270bdcb600000000ffdf"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES64=r5, @ANYRES16=0x0, @ANYRESDEC=r6], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) fstat(r0, &(0x7f0000000180)) 229.344453ms ago: executing program 7 (id=2916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r2, 0x0, &(0x7f00000001c0)) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) 229.066612ms ago: executing program 2 (id=2917): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x10000004, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r4 = socket(0x1d, 0x2, 0x6) (async) r5 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, &(0x7f0000000040)={0x2e, 0x3a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) (async) setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x5, 0x5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7, 0x8000, 0x5, 0x8}}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @multicast1, r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 109.622306ms ago: executing program 7 (id=2918): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000040)) (async) ioctl$CDROMREADAUDIO(r0, 0x31e, &(0x7f0000002140)={@msf={0xef, 0x3, 0x40}, 0x0, 0x0, 0x0}) 108.650574ms ago: executing program 7 (id=2919): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdc00, {0x60, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b24e}, 0xfffffffb, 0x1, 0x0, 0x3, 0x7, 0x12, 0x4, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0x408000, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6ef}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 107.997622ms ago: executing program 2 (id=2920): r0 = fanotify_init(0x8, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') (async) r2 = socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0xff, @generic=0xa7, 0x0, 0x4}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030029bd70000e0000220100000008000100", @ANYRES32=r6, @ANYBLOB="08000200000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r10, 0x1, 0x70bd27, 0x25dfdbf9, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0xd0}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETLINK(r12, 0x400454cd, 0x10f) r13 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) write$tun(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="000008050000010bb2"], 0xa) (async) fanotify_mark(r0, 0x541, 0x40001031, r1, 0x0) 288.668µs ago: executing program 2 (id=2921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0, 0x0, 0x1000000001}]}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000380)="1327d22f", 0x4}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) r5 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000180)='v\x05%Jg1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o*\x00\x00\x00\x00\x00\x00\x00\xaa\x7f4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2\xe1\x00\x00\x00\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) listen(r4, 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000480)={{0x8, 0x1, &(0x7f0000000440)=[{0x5, 0x0, 0x8}]}, 0xc, 0x8, 0x7, 0x1, 0x0, 0x0, 0xc2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r6, 0xc010644a, &(0x7f00000004c0)={r7}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000340)="66b9800000c00f326635008000000f30660f3829a6b11b656667650f0fae57000000a666b9a302000066b80000000066ba010000000f300ff7c2660f38f6a70000baf80c66b844de458e66efbafc0cb80000ef0f20d86635080000000f22d80f01cb3e0f005c35", 0x67}], 0x1, 0x14, &(0x7f0000000400)=[@dstype0={0x6, 0x2}, @cstype3={0x5, 0x5}], 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r8, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfe8b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x5}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0xa, 0x2, 0x4, 0x8, 0x9, {r10, r11/1000+60000}, {0x1, 0x2, 0x4, 0xc0, 0x4, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x81}) r12 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$DRM_IOCTL_GET_STATS(r12, 0x80f86406, &(0x7f0000000500)=""/28) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r13, 0x89e1, &(0x7f0000000080)={@mcast2, @remote}) r14 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmmsg$inet(r13, &(0x7f0000003cc0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000580)="69b03c348e3c8428a320a77cf89e09afa2c2d0892ce5064366580af908bb04d241251c16670b86bdcd94e62849c4721248caeaf2fc7c6842b23432c2bcfaf859e26137adceda245283fe86afe16f5b23d50983ed19d14df38fc183e5f9e6e711b5bb7dcb0032c27d5f12babf987090c97311a3452a441d6bb701a3b2004d36fc3c38256319ca1fb977401d1f0d9c634d2b471f2f0a5a38707d46d07a9460f5e086ef83393e9a2db56f7bf27037aea13f37d4b79f59db594bd60a8ecba30346137cf0830a1e1742a0a88200213de19e9d47ece920ecaa24598f211d851fede43813ff", 0xe2}, {&(0x7f0000000680)="58d978799f7ed9979a3cf8566240f928383015e89d9808fd8ec1bed1ad7a9c4f82a1fa7c0e54f8994a6bee94ef9dfe4d92d497a3829ebcef99cae941735ba68023ef1aac7990a154ec3f18d7ebf3099b9a8cb10bb6e36ff641fcc8b21d9a592a32a7028219ad751e77edc1ca4b54e2f66d46b0e6d3cf6532b236374407f6c397dcedfcafb73ac37213776ac828cc53b5b29ccfc4dfc0d1d09460eb6043ddd52fec57954da095bd39ffc3", 0xaa}, {&(0x7f0000000740)="2b1f8450bf7a1cbf20b1cedfd89ef1a5d6a12b3e823fd2a4fd7ddffdf7956d1d9546cc6e97a835a603d69c4d47b45ee2fc14cdc680870c6117c37ec9f3e99a1d95c927ebb7eb4dc8940cf700e54ce9c1993862babab0418aa686b2adcf07e86a0959567ce61c1f416a390031d04ee1973d457b10c46d", 0x76}, {&(0x7f0000000840)="d5f6d8b776579748e015863a5b53b61467ea78133d5bf975b3dcae494a55b79d6db943df5814a14d37d29f10d57234e82560fcfd053644478a24eddfee96a716b6172028a4358db01633e8e750a43ff7571131595671077fe21f7b96e9d18d4fc8033c61d9f9159123a99d205355bab0427e76e6b88fe43f345e3c6f6964ab08099543a6a9b54b35d952982e0aca7f6351b73259a575bf24f9f9a8a24379a26f02202a03aea77492ef72793211005689f663c70e", 0xb4}, {&(0x7f0000000900)="e896798fecf7baf0669c462c16bbc602272758eb313889af131711b5c63021bf81ae9346a52e2b6ae7a2a95a4e109309f0a4929b2b37f712053be7a78e55f66ca447f48432559812b2a1e7a170072299379620d55c9a77c49c57d83ceb3467daa166f85827e2de54d8524889155a2a441a615e0107d96b733dbd5a9d7bf358e78af78fac188a74f00d80c09cf45368763e70c35403c78b2fb01344d9defa52af29ff99d5e2635ff93890a17c1fee460f05cc75f412396c6f493f61ce25a34c55bb124798b8cccde55b042fbe8fbea383eedbceebed7b1f471afe4a920b58c74fa5600cf99ab12377f481c8", 0xeb}], 0x5, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x22400000}}], 0x18}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000b00)="3b19fc0ada31d7d41e3e9e48155fb1d77bc13730a71777fea3d75613b0807ed81e6c4d17d4c84ea64ddf05fe53c1c1ee4c1bb68182f83fb669aa1ce215dafedcf48fe538de3dfb728cb270b58c2c67fc9ce84eef2f55cfe91fad045ca15d68fc8f881b20cc258651fca3c952af4374ab7261cf532ed5ff1bc47d7d1c18b1486312faef6a2aa5645d6140e07475c938ccdf2a0db290ebd5eaa5bcba8187c139983f04a6ecfc5036919a8f3f86d331361a73612309b4ba7be7bbc3e27abf3e68f00add038240273a4499", 0xc9}, {&(0x7f0000000c00)="586d2b01b60bbc002cc4c603eb0d13c8add9832336fe321f733740e57766d948f3493ff01bcf06b322fc662b70acc196fd2a291666110bde16305b5d47c0e1c7ecb3ca9c797e9872f093c1bc14539cdab87ec35ce085577ad750ccc3337c29ee41ba4bfe3b6f2480717a3e0dca46d9ada0963a635d4e3ce085309fb448581d951427da5465eaf2ac478a8fe75a232c00a284e75862382f7a06ea1bd1114606ef8edae61810a699d0e7fc4745d2aa3710f7", 0xb1}, {&(0x7f0000000cc0)="93140a29a13f68080c680f184750a85a694ee197f87f9bd001a83564a6cb624a7e8012af22970e6f223cdd90de2239fd3497dde2d830b71033008798adb60f8af2c6aaac1f0fe4c0011d21e38298aadc2dc737a0fe347f21cf911c3bcae2e21c0e37cb59f5802c3c415cd067cc7565b2d34a420bfe6d89ef0f76ffaf2b57a93929ac7083d3104275313c21b5a93696995fa572d903b97db0185a077a7fb981b0f87ead5602af3644aaf02188c7339e0b77decfe98530171c6993892289f3dec2f3bd38c974956b07b0e5ad190629ac846b00039341cde63cec72257d0bf6f0", 0xdf}, {&(0x7f0000000dc0)="f4cdde1f5fae26f86b415f545b621a9969d6917ee8bfa96859b6700db304855dbe6e9935a39524d7a98ad1b8ccbbfa49968d22e0f5d1b3284a25f3452c9de94e86c0d5f4f22883725ec1910ec7ff33cc704104f2812d1d26997fed471ec98650b8", 0x61}], 0x4, &(0x7f0000000f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}, {{&(0x7f0000000fc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001000)="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", 0x1000}], 0x1, &(0x7f0000002040)=[@ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xb7, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @empty]}, @timestamp={0x44, 0xc, 0x98, 0x0, 0x6, [0x80000000, 0xd]}, @lsrr={0x83, 0x7, 0xa4, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x2, [{@private=0xa010102, 0x401}, {@local, 0x80}, {@empty, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x86, 0xc, "7b6f5b5077529887b2a4"}, @timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x9, [{@broadcast, 0x254}]}, @ssrr={0x89, 0x7, 0x2d, [@broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb8, 0x0, 0x1, [0x3, 0x8, 0x8]}, @end, @noop, @cipso={0x86, 0x17, 0x1, [{0x5, 0xe, "2062274c7b63a1d09243a593"}, {0x1, 0x3, "e3"}]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x4, [{@remote, 0x4}, {@broadcast, 0x1341}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x5}, {@empty, 0x8}, {@multicast2, 0x1}]}]}}}], 0x148}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000021c0)="eeb08157c13ae9b7572471970e3b718a351acb7a41e38d146b69d74b0fd96e78c35999f33a75d7a05703590169e425f36433580e9e29958f0cf21d7ca19b6128bec3ae4fdbb3ce58aed8c6b638f85f1aebfa33af97fc6717d55792f8cdc71bafb1b4e84f47e932d3fe1d412d0a8c7823a666f6f225081323257e488567e38c3633fb0d9370e93624b2a9013bfd722c9b2941b8", 0x93}, {&(0x7f0000002280)="699b929925fcfa7fa5b2a30cf9f133521f92552d3864a5f1ce2bf7c2100c879ff97e5d633f111b69f0ec7d9579c45e423f11e6a1502cab6b1e924e3cb8fd1b860aff7cc1f86d94ecbb3192d311235bfca68b47d06c2914bcee8d9d528c8ac87cfa22be8beb865e5def0a807e9b68d6fd2ab11e710411f9c0cf5f6bfdf244a2b34b1deb77c97fb31b85de08fa8535f9ddfe6704a231a652170aa8f4d0dc388830ec69", 0xa2}, {&(0x7f0000002340)="6c61f621fa5fbcc37b77319d008c4aa5b36bcea57c570940fc2c970a9b569acf9fbf01981485b3fd94016e189e341fb5fd7353bd97d0807238b2bf7a3575af8000ffcc61896c765a6fe076b1db3b9dbede6e352f5e2bee4bbae5ef89a5eae26e5d4daebda5f167cdec23394353995e90004b88e31b18b44c1715e3a994a7bba96feecb6fd655ce62a299f1145d8d9357588b533c7a283bc5ef261317d4997bd7bc92e80d2f0740ec5fb26f791a91aff2e8e0a690d431d9c103971f643b24ead9c4b5c3c2353b53cd1c19a02b7925b939bf85d90805fff72a", 0xd8}, {&(0x7f0000002440)="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", 0xfe}, {&(0x7f0000002540)="89dd65cb552875c5859b78bb88fd0a0f304665ecee027331a2de37a0463c89", 0x1f}, {&(0x7f0000002580)="7df058958c7a3be62400067e2a22aca967f8d297032cc15b661cdd3c9dc696fabfbb0a1c0c285d5c268ffdcd49", 0x2d}, {&(0x7f00000025c0)="46279b5fdfadcd92201d03b581343ad98947e5f9600f94c7b485281d76f7872639b1bddce18ac051cda3fcde9af2af27113a11e0061e1f82803ffc2a36769207730c852e1f4db4f762d66bbe774f9ed24d5058a9eec14e5d9d", 0x59}], 0x7, &(0x7f00000026c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x30}}, {{&(0x7f0000002700)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002940)=[{&(0x7f0000003bc0)="97bba1fe5b8850d79ab488f46a75b55fc1efb525620222acedf80383ec64759e3dacc73e4570a56ae42eafd7d7c481ab3e89b38c44b8f7754ca271e92d42e0d7ff4a597512cc3e4a2559448859eef945d170ad1d34bd56a865f0edc06067e29c15dea8ac1d217ed610a239e3cb9653b6b5a49bc32065d0ff2660ac14a7279726e3664697822cad965a3867142982367e67163625db5740e3", 0x98}, {&(0x7f0000002800)="5487e15afb17ee1aad9bde7d39b3812c70bdd69c0e4ceeb9bc9d32192fa274227172360abf824f", 0x27}, {&(0x7f0000002840)="14c65cffea6453668d45a0b709c7e5d3d0572fbde3aa46a9515f50fb1eb8a8a9131cd390b47b8d58650d820dd90f67052a2b8934bbf09e8bdc30a856863190a42500ac7c06f0738af0e740b34eb5fa071bce0c3f23ae1e11915416041956a9f1fa2e58515797909de85d696c9a81d345944db04c96049ab5a200000000000000097f5eade17273edc143288fa6fc425ec6c8a6383b979049e198a65a0b4d8336f3f86d33d666238f96403fd4e05d4362f2503d5a4713f987cf9870c2c158536e0dce57585b40d7e09b7d4ed89dd0a3e701e230f74f12bbd0e6a969a6fa5fc0f4a8851430", 0xe4}], 0x3}}, {{&(0x7f0000002980)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000003b80)=[{&(0x7f00000029c0)="acf6c8a5aadd5a467279b534e12ef9584eb7acca89c045ca7043c9e3674e0386a0deed64581a40d0d6a71ea956e978ffd04472fb815d", 0x36}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="172bfbd3b3028022ffb59e2142876bc601b5d29c6840c1cc7e8577cd21909d08efe30e7422adfab4e94b383efc06987500e5598fdaf49573c6fc5a3d4556920b1b83e4863ce201aa12ce5d5fc54cd86c51634c1e30cd2384449e5a855f0869358cf00c8901d519da7ba4e0db0d285cd5ce36606304a4ffbe60809a3bb673ff0679456ff9203ee08180ae13b6e5991f4a123dac27672fa36bc11a869a219087f46a81275d1864f0e2e42068541cdf581f595054cce07d3a489965063f9ae2ace9c6ab760d1b31b869de9a17553104282987b7a350337e26f8e1c58ebda04023d12dabc56cd63bd25536", 0xe9}, {&(0x7f0000003e40)="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", 0x10d}], 0x4, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x37, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0x78, 0x1, 0x9}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x94, 0x7, "9f66a99ca3"}, @timestamp_prespec={0x44, 0x2c, 0x7b, 0x3, 0x1, [{@remote, 0x7fffffff}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@rand_addr=0x64010100, 0xfffffff5}, {@private=0xa010100, 0xfffffff1}]}, @generic={0x82, 0x12, "e3fe7bf6aa41eedbea637c31b9505754"}, @timestamp={0x44, 0x1c, 0xf0, 0x0, 0x4, [0x7, 0x100, 0x3, 0x800, 0x40, 0x2dbc]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0xd8}}], 0x6, 0x0) pread64(r14, &(0x7f0000000040)=""/203, 0xcb, 0x3) 0s ago: executing program 7 (id=2922): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x988) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pivot_root(&(0x7f0000000080)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', &(0x7f00000000c0)='./backing_file\x00') io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8c696e759e8d4da5e713f850002307ff0b"], 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r2, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r2, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, r2, 0xf, 0xfffffffffffffff8, 0x3fff}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='./backing_file', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) kernel console output (not intermixed with test programs): ing attributes in process `syz.6.2321'. [ 217.740451][T14344] bridge3: entered promiscuous mode [ 217.742821][T14344] bridge3: entered allmulticast mode [ 217.764201][ T5843] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 217.799110][T14348] CPU: 3 UID: 0 PID: 14348 Comm: syz.2.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.799140][T14348] Tainted: [L]=SOFTLOCKUP [ 217.799146][T14348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.799165][T14348] Call Trace: [ 217.799180][T14348] [ 217.799188][T14348] dump_stack_lvl+0x100/0x190 [ 217.799306][T14348] hid_report_raw_event.cold+0xbd/0xf0 [ 217.799349][T14348] ? preempt_schedule_common+0x42/0xc0 [ 217.799423][T14348] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 217.799445][T14348] __hid_input_report.constprop.0+0x349/0x470 [ 217.799522][T14348] uhid_char_write+0xb6b/0x10e0 [ 217.799544][T14348] vfs_write+0x2aa/0x1050 [ 217.799567][T14348] ? __pfx_uhid_char_write+0x10/0x10 [ 217.799589][T14348] ? __pfx_vfs_write+0x10/0x10 [ 217.799603][T14348] ? find_held_lock+0x2b/0x80 [ 217.799629][T14348] ? __fget_files+0x215/0x3d0 [ 217.799648][T14348] ? __fget_files+0x215/0x3d0 [ 217.799668][T14348] ? __fget_files+0x21f/0x3d0 [ 217.799692][T14348] ksys_write+0x1f8/0x250 [ 217.799706][T14348] ? __pfx_ksys_write+0x10/0x10 [ 217.799728][T14348] do_syscall_64+0x115/0x870 [ 217.799759][T14348] ? clear_bhb_loop+0x70/0xc0 [ 217.799783][T14348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.799813][T14348] RIP: 0033:0x7ff90879e0d9 [ 217.799830][T14348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.799849][T14348] RSP: 002b:00007ff909592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.799881][T14348] RAX: ffffffffffffffda RBX: 00007ff908a26090 RCX: 00007ff90879e0d9 [ 217.799895][T14348] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000005 [ 217.799908][T14348] RBP: 00007ff908835024 R08: 0000000000000000 R09: 0000000000000000 [ 217.799921][T14348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.799934][T14348] R13: 00007ff908a26128 R14: 00007ff908a26090 R15: 00007ffe83bee8f8 [ 217.799963][T14348] [ 217.840291][T14348] dvmrp0: entered allmulticast mode [ 217.900427][T14356] MTD: Couldn't look up './proc': -2 [ 217.948340][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 217.948364][ T42] audit: type=1800 audit(217.888:15662): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 217.952751][T14363] binder: BINDER_SET_CONTEXT_MGR already set [ 217.963886][T14363] binder: 14361:14363 ioctl 4018620d 200000000100 returned -16 [ 217.993918][ T42] audit: type=1800 audit(217.938:15663): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.008006][T14368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.019687][T14363] binder: 14361:14363 ioctl 541a 200000000000 returned -22 [ 218.126555][ T42] audit: type=1800 audit(218.068:15664): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.163860][ T42] audit: type=1800 audit(218.108:15665): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.194444][ T42] audit: type=1800 audit(218.138:15666): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.304504][ T42] audit: type=1800 audit(218.248:15667): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.350003][ T42] audit: type=1800 audit(218.298:15668): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.393651][ T42] audit: type=1800 audit(218.338:15669): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.412972][T14390] afs: Unknown parameter 'd}n>n~áè„dr®ý@H $ëlÍpü©0¿ã1 ü:Ž¡mƒË®L' [ 218.421948][ T42] audit: type=1800 audit(218.368:15670): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194584 res=0 errno=0 [ 218.439956][T14390] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 218.570289][ T42] audit: type=1800 audit(218.508:15671): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 218.718772][T14406] netlink: 'syz.6.2349': attribute type 39 has an invalid length. [ 218.746586][T14408] netlink: 'syz.3.2350': attribute type 11 has an invalid length. [ 218.750135][T14408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2350'. [ 218.756840][T14408] ima: Unable to open file: / (-22) [ 218.760256][T14408] overlayfs: conflicting options: nfs_export=on,index=off [ 218.767843][T14407] ima: policy update failed [ 218.803944][T14411] sit0: left promiscuous mode [ 219.080681][T14445] sit1: entered promiscuous mode [ 219.086988][T14445] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 219.134897][T14449] geneve4: entered promiscuous mode [ 219.145053][T14445] bridge1: entered promiscuous mode [ 219.150717][T14445] bond3: (slave bridge1): making interface the new active one [ 219.154263][T14445] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 219.159571][T14449] x_tables: duplicate underflow at hook 1 [ 219.178510][T14445] bridge2: entered promiscuous mode [ 219.187687][T14445] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 219.628779][ T34] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 219.788877][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 219.791973][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.796093][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.801506][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.804244][ T34] usb 7-1: Product: syz [ 219.805661][ T34] usb 7-1: Manufacturer: syz [ 219.807187][ T34] usb 7-1: SerialNumber: syz [ 219.810644][ T34] usb 7-1: config 0 descriptor?? [ 219.812827][T14465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.816303][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 219.818330][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 220.272259][ T50] usb 7-1: USB disconnect, device number 21 [ 220.845295][T14491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14491 comm=syz.2.2374 [ 221.971431][T14432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.100946][T14502] No control pipe specified [ 222.224235][ T5726] Bluetooth: hci2: unexpected event for opcode 0x080f [ 222.233670][T14514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2382'. [ 222.949174][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 222.949192][ T42] audit: type=1800 audit(222.888:15711): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 223.010912][ T42] audit: type=1800 audit(222.958:15712): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 223.203543][ T42] audit: type=1800 audit(223.148:15713): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196377 res=0 errno=0 [ 223.216475][ T42] audit: type=1800 audit(223.158:15714): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196430 res=0 errno=0 [ 223.364409][ T42] audit: type=1400 audit(223.318:15715): avc: denied { setattr } for pid=14561 comm="syz.2.2398" name="CAN_J1939" dev="sockfs" ino=59643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.485823][ T42] audit: type=1800 audit(223.428:15716): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196566 res=0 errno=0 [ 223.497484][ T42] audit: type=1800 audit(223.438:15717): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=196570 res=0 errno=0 [ 223.578156][ T42] audit: type=1800 audit(223.518:15718): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2405" name="c_ssize" dev="configfs" ino=58003 res=0 errno=0 [ 223.579102][T14583] FAULT_INJECTION: forcing a failure. [ 223.579102][T14583] name failslab, interval 1, probability 0, space 0, times 0 [ 223.593603][T14583] CPU: 0 UID: 0 PID: 14583 Comm: syz.5.2405 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.593623][T14583] Tainted: [L]=SOFTLOCKUP [ 223.593627][T14583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.593635][T14583] Call Trace: [ 223.593650][T14583] [ 223.593655][T14583] dump_stack_lvl+0x100/0x190 [ 223.593681][T14583] should_fail_ex.cold+0x5/0xa [ 223.593705][T14583] should_failslab+0xc2/0x120 [ 223.593733][T14583] __kmalloc_cache_noprof+0x91/0x6c0 [ 223.593746][T14583] ? configfs_write_iter+0x388/0x4e0 [ 223.593771][T14583] configfs_write_iter+0x388/0x4e0 [ 223.593787][T14583] vfs_write+0x6ac/0x1050 [ 223.593798][T14583] ? __pfx_configfs_write_iter+0x10/0x10 [ 223.593814][T14583] ? __pfx_vfs_write+0x10/0x10 [ 223.593833][T14583] ksys_write+0x12a/0x250 [ 223.593844][T14583] ? __pfx_ksys_write+0x10/0x10 [ 223.593858][T14583] do_syscall_64+0x115/0x870 [ 223.593874][T14583] ? clear_bhb_loop+0x70/0xc0 [ 223.593888][T14583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.593900][T14583] RIP: 0033:0x7fa0a0d9e0d9 [ 223.593911][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.593921][T14583] RSP: 002b:00007fa0a1c1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.593991][T14583] RAX: ffffffffffffffda RBX: 00007fa0a1025fa0 RCX: 00007fa0a0d9e0d9 [ 223.593999][T14583] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.594005][T14583] RBP: 00007fa0a1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 223.594011][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.594018][T14583] R13: 00007fa0a1026038 R14: 00007fa0a1025fa0 R15: 00007ffea94ff838 [ 223.594032][T14583] [ 223.680608][T14585] /dev/nullb0: Can't lookup blockdev [ 223.726321][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2408'. [ 223.887314][ T42] audit: type=1800 audit(223.828:15719): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 223.887381][ T60] playstation 0003:054C:05C4.000C: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 223.887904][T14601] netlink: 'syz.6.2411': attribute type 11 has an invalid length. [ 223.895818][ T42] audit: type=1800 audit(223.828:15720): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197048 res=0 errno=0 [ 223.925732][ T60] playstation 0003:054C:05C4.000C: Invalid byte count transferred, expected 16 got 0 [ 223.941135][ T60] playstation 0003:054C:05C4.000C: Failed to retrieve DualShock4 pairing info: -22 [ 223.946646][T14601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.949317][ T60] playstation 0003:054C:05C4.000C: Failed to get MAC address from DualShock4 [ 223.960299][ T60] playstation 0003:054C:05C4.000C: Failed to create dualshock4. [ 223.961042][T14601] bond0: entered promiscuous mode [ 223.971759][T14601] bond_slave_0: entered promiscuous mode [ 223.973808][T14601] bond_slave_1: entered promiscuous mode [ 223.976844][T14601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.977634][ T60] playstation 0003:054C:05C4.000C: probe with driver playstation failed with error -22 [ 223.994967][T14602] netlink: 608 bytes leftover after parsing attributes in process `syz.5.2412'. [ 224.062364][T14611] FAULT_INJECTION: forcing a failure. [ 224.062364][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.068547][T14611] CPU: 1 UID: 0 PID: 14611 Comm: syz.6.2414 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.068572][T14611] Tainted: [L]=SOFTLOCKUP [ 224.068578][T14611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.068586][T14611] Call Trace: [ 224.068592][T14611] [ 224.068599][T14611] dump_stack_lvl+0x100/0x190 [ 224.068625][T14611] should_fail_ex.cold+0x5/0xa [ 224.068645][T14611] _copy_from_iter+0x1f4/0x1690 [ 224.068708][T14611] ? __pfx__copy_from_iter+0x10/0x10 [ 224.068728][T14611] ? kasan_save_track+0x14/0x30 [ 224.068747][T14611] ? __kasan_kmalloc+0xaa/0xb0 [ 224.068765][T14611] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 224.068781][T14611] ? configfs_write_iter+0x388/0x4e0 [ 224.068802][T14611] configfs_write_iter+0xb3/0x4e0 [ 224.068823][T14611] vfs_write+0x6ac/0x1050 [ 224.068837][T14611] ? __pfx_configfs_write_iter+0x10/0x10 [ 224.068856][T14611] ? __pfx_vfs_write+0x10/0x10 [ 224.068882][T14611] ksys_write+0x12a/0x250 [ 224.068895][T14611] ? __pfx_ksys_write+0x10/0x10 [ 224.068913][T14611] do_syscall_64+0x115/0x870 [ 224.068933][T14611] ? clear_bhb_loop+0x70/0xc0 [ 224.068951][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.068966][T14611] RIP: 0033:0x7f133859e0d9 [ 224.068979][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.068993][T14611] RSP: 002b:00007f13393cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.069007][T14611] RAX: ffffffffffffffda RBX: 00007f1338825fa0 RCX: 00007f133859e0d9 [ 224.069017][T14611] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 224.069025][T14611] RBP: 00007f13393cd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.069033][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.069041][T14611] R13: 00007f1338826038 R14: 00007f1338825fa0 R15: 00007ffc74c30b38 [ 224.069060][T14611] [ 224.411765][T14628] overlayfs: missing 'lowerdir' [ 224.526640][T14644] tipc: Enabling of bearer rejected, failed to enable media [ 224.576783][T14649] FAULT_INJECTION: forcing a failure. [ 224.576783][T14649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.582425][T14649] CPU: 1 UID: 0 PID: 14649 Comm: syz.5.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.582454][T14649] Tainted: [L]=SOFTLOCKUP [ 224.582461][T14649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.582471][T14649] Call Trace: [ 224.582478][T14649] [ 224.582486][T14649] dump_stack_lvl+0x100/0x190 [ 224.582514][T14649] should_fail_ex.cold+0x5/0xa [ 224.582538][T14649] _copy_to_user+0x32/0xd0 [ 224.582566][T14649] simple_read_from_buffer+0xcb/0x170 [ 224.582588][T14649] proc_fail_nth_read+0x1af/0x230 [ 224.582618][T14649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.582645][T14649] ? rw_verify_area+0xce/0x6d0 [ 224.582670][T14649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.582697][T14649] vfs_read+0x1e4/0xb40 [ 224.582729][T14649] ? __pfx_vfs_read+0x10/0x10 [ 224.582753][T14649] ? __fget_files+0x215/0x3d0 [ 224.582774][T14649] ? __fget_files+0x21f/0x3d0 [ 224.582795][T14649] ksys_read+0x12a/0x250 [ 224.582809][T14649] ? __pfx_ksys_read+0x10/0x10 [ 224.582849][T14649] do_syscall_64+0x115/0x870 [ 224.582875][T14649] ? clear_bhb_loop+0x70/0xc0 [ 224.582897][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.582914][T14649] RIP: 0033:0x7fa0a0d5e90e [ 224.582928][T14649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.582943][T14649] RSP: 002b:00007fa0a1c1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.582959][T14649] RAX: ffffffffffffffda RBX: 00007fa0a1c1f6c0 RCX: 00007fa0a0d5e90e [ 224.582968][T14649] RDX: 000000000000000f RSI: 00007fa0a1c1f0a0 RDI: 0000000000000004 [ 224.582978][T14649] RBP: 00007fa0a1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.582986][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.582995][T14649] R13: 00007fa0a1026038 R14: 00007fa0a1025fa0 R15: 00007ffea94ff838 [ 224.583016][T14649] [ 225.365880][T14666] team0: entered promiscuous mode [ 225.752323][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2440'. [ 225.759087][T14700] nbd: illegal input index 67111936 [ 225.821750][T14707] tmpfs: Unknown parameter 'mp/l' [ 225.843532][T14707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2445'. [ 225.848665][T14707] nfs: Unknown parameter 'F' [ 226.136893][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.144562][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.157287][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.161365][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.167999][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.717785][T14750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.728851][T14750] block device autoloading is deprecated and will be removed. [ 226.843776][T14718] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.846605][T14718] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.849753][T14718] bridge_slave_0: entered allmulticast mode [ 226.852602][T14718] bridge_slave_0: entered promiscuous mode [ 226.859896][T14718] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.862446][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.864788][T14718] bridge_slave_1: entered allmulticast mode [ 226.867525][T14718] bridge_slave_1: entered promiscuous mode [ 226.889177][T14718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.893955][T14718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.912686][T14718] team0: Port device team_slave_0 added [ 226.916311][T14718] team0: Port device team_slave_1 added [ 226.931144][T14718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.933416][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.942167][T14718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.946717][T14718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.948960][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.956959][T14718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.985846][T14718] hsr_slave_0: entered promiscuous mode [ 226.988222][T14718] hsr_slave_1: entered promiscuous mode [ 226.991477][T14718] debugfs: 'hsr0' already exists in 'hsr' [ 226.993418][T14718] Cannot create hsr debugfs directory [ 227.065783][ T41] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 227.177588][T14718] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 227.181878][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.184919][T14718] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 227.189023][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.191859][T14718] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 227.196205][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.202453][T14718] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.206522][T14718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.218885][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 227.227001][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 227.234455][T14718] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.237459][T14718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.240757][T14718] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.243762][T14718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.247107][ T41] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 227.256550][ T41] usb 7-1: string descriptor 0 read error: -22 [ 227.259566][ T41] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 227.272480][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 227.275993][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 227.278621][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 227.293669][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.296652][T14718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.298136][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 227.303980][ T41] usb 7-1: media controller created [ 227.306255][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.306402][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.308587][ T41] dw2102: i2c transfer failed. [ 227.313960][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.321418][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.324895][ T41] dw2102: i2c transfer failed. [ 227.327051][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.331708][ T41] dw2102: i2c transfer failed. [ 227.333964][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.336315][ T41] dw2102: i2c transfer failed. [ 227.338359][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.340090][T14718] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.341242][ T41] dw2102: i2c transfer failed. [ 227.348295][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 227.350878][ T41] dw2102: i2c transfer failed. [ 227.351755][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.352967][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 227.355171][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.367635][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.368382][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.370695][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.396804][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 227.401559][ T41] dw2102: command 0x0e transfer failed. [ 227.406425][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 227.408973][ T41] dw2102: command 0x0e transfer failed. [ 227.664683][T14779] null_blk: disk nullb1 created [ 227.722073][T14718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.729121][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 227.739530][ T5826] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 227.741182][ T41] dw2102: command 0x0e transfer failed. [ 227.745087][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 227.747699][ T41] dw2102: command 0x0e transfer failed. [ 227.750650][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 227.753213][ T41] dw2102: command 0x51 transfer failed. [ 227.759989][T14764] dvb-usb: bulk message failed: -22 (5/0) [ 227.764873][T14764] dw2102: i2c transfer failed. [ 227.791743][ T41] DVB: Unable to find symbol ds3000_attach() [ 227.793750][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 227.861688][ T41] rc_core: IR keymap rc-su3000 not found [ 227.863576][ T41] Registered IR keymap rc-empty [ 227.867884][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 227.876355][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input25 [ 227.888575][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 227.888989][ T5826] usb 11-1: Using ep0 maxpacket: 8 [ 227.893156][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 227.893169][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 227.912632][ T5826] usb 11-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 227.917826][ T5826] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.925521][ T5826] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 227.933831][ T5826] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.949506][ T5826] usb 11-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 227.952968][ T5826] usb 11-1: Product: syz [ 227.954743][ T5826] usb 11-1: Manufacturer: syz [ 227.958262][T14718] veth0_vlan: entered promiscuous mode [ 227.958321][ T5826] usb 11-1: SerialNumber: syz [ 227.974755][T14718] veth1_vlan: entered promiscuous mode [ 227.975751][ T5826] usb 11-1: config 0 descriptor?? [ 227.975775][ T42] kauditd_printk_skb: 75 callbacks suppressed [ 227.975803][ T42] audit: type=1800 audit(227.918:15796): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204383 res=0 errno=0 [ 227.977753][ T42] audit: type=1800 audit(227.918:15797): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=204415 res=0 errno=0 [ 227.991918][T14718] veth0_macvtap: entered promiscuous mode [ 227.999436][ T42] audit: type=1800 audit(227.918:15798): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=204390 res=0 errno=0 [ 228.003904][T14718] veth1_macvtap: entered promiscuous mode [ 228.021585][ T42] audit: type=1800 audit(227.928:15799): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=204391 res=0 errno=0 [ 228.022940][ T24] usb 7-1: USB disconnect, device number 22 [ 228.033149][T14718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.052022][T14718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.053056][T14807] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.061571][T14807] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.066394][T12380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.100710][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 228.113002][ T5826] rc_core: IR keymap rc-imon-rsc not found [ 228.115788][ T5802] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.117243][ T5826] Registered IR keymap rc-empty [ 228.129022][ T42] audit: type=1800 audit(228.068:15800): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204453 res=0 errno=0 [ 228.133616][ T5826] rc rc1: iMON Station as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc1 [ 228.140181][ T5802] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.144468][ T5802] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.198591][ T5826] input: iMON Station as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc1/input26 [ 228.218519][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.229559][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.233714][ T42] audit: type=1800 audit(228.178:15801): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204624 res=0 errno=0 [ 228.258234][ T42] audit: type=1800 audit(228.208:15802): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=204412 res=0 errno=0 [ 228.265669][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.269970][ T5739] Bluetooth: hci1: command tx timeout [ 228.275302][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.282139][ T42] audit: type=1400 audit(228.208:15803): avc: denied { ioctl } for pid=14775 comm="syz.6.2457" path="socket:[61205]" dev="sockfs" ino=61205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 228.293769][ T42] audit: type=1800 audit(228.218:15804): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=204413 res=0 errno=0 [ 228.302502][ T42] audit: type=1800 audit(228.218:15805): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204392 res=0 errno=0 [ 228.643896][T14829] FAULT_INJECTION: forcing a failure. [ 228.643896][T14829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.647971][T14829] CPU: 1 UID: 0 PID: 14829 Comm: syz.2.2468 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.647989][T14829] Tainted: [L]=SOFTLOCKUP [ 228.648006][T14829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.648031][T14829] Call Trace: [ 228.648038][T14829] [ 228.648042][T14829] dump_stack_lvl+0x100/0x190 [ 228.648081][T14829] should_fail_ex.cold+0x5/0xa [ 228.648103][T14829] _copy_from_user+0x2e/0xd0 [ 228.648127][T14829] move_addr_to_kernel+0x65/0x170 [ 228.648168][T14829] __sys_sendto+0x1b8/0x4e0 [ 228.648182][T14829] ? __pfx___sys_sendto+0x10/0x10 [ 228.648199][T14829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.648256][T14829] ? ksys_write+0x1ac/0x250 [ 228.648272][T14829] ? __pfx_ksys_write+0x10/0x10 [ 228.648284][T14829] __x64_sys_sendto+0xe0/0x1c0 [ 228.648297][T14829] ? do_syscall_64+0x90/0x870 [ 228.648318][T14829] ? lockdep_hardirqs_on+0x78/0x100 [ 228.648333][T14829] do_syscall_64+0x115/0x870 [ 228.648348][T14829] ? clear_bhb_loop+0x70/0xc0 [ 228.648362][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.648374][T14829] RIP: 0033:0x7ff90875e90e [ 228.648384][T14829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.648395][T14829] RSP: 002b:00007ff9095b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.648408][T14829] RAX: ffffffffffffffda RBX: 00007ff9095b36c0 RCX: 00007ff90875e90e [ 228.648415][T14829] RDX: 0000000000000020 RSI: 00007ff9095b2000 RDI: 0000000000000003 [ 228.648422][T14829] RBP: 0000000000000000 R08: 00007ff9095b1f04 R09: 000000000000000c [ 228.648429][T14829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 228.648435][T14829] R13: 00007ff9095b1f58 R14: 00007ff9095b2000 R15: 0000000000000000 [ 228.648449][T14829] [ 229.040890][T14843] netlink: 'syz.3.2473': attribute type 1 has an invalid length. [ 229.063680][T14843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.073939][T14843] syz_tun: left promiscuous mode [ 229.085494][T14843] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 229.091349][T14843] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 229.488781][T14859] FAULT_INJECTION: forcing a failure. [ 229.488781][T14859] name failslab, interval 1, probability 0, space 0, times 0 [ 229.492870][T14859] CPU: 2 UID: 0 PID: 14859 Comm: syz.7.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.492888][T14859] Tainted: [L]=SOFTLOCKUP [ 229.492892][T14859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.492899][T14859] Call Trace: [ 229.492904][T14859] [ 229.492910][T14859] dump_stack_lvl+0x100/0x190 [ 229.492929][T14859] should_fail_ex.cold+0x5/0xa [ 229.492945][T14859] should_failslab+0xc2/0x120 [ 229.492978][T14859] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 229.492993][T14859] ? __alloc_skb+0x5b7/0x710 [ 229.493016][T14859] ? __alloc_skb+0x140/0x710 [ 229.493031][T14859] __alloc_skb+0x140/0x710 [ 229.493044][T14859] ? __alloc_skb+0x5b7/0x710 [ 229.493057][T14859] ? __pfx___alloc_skb+0x10/0x10 [ 229.493070][T14859] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 229.493096][T14859] ? sock_has_perm+0x25a/0x2f0 [ 229.493111][T14859] ? __pfx_sock_has_perm+0x10/0x10 [ 229.493127][T14859] netlink_alloc_large_skb+0x69/0x150 [ 229.493155][T14859] netlink_sendmsg+0x680/0xda0 [ 229.493170][T14859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.493183][T14859] ? selinux_socket_sendmsg+0x198/0x2f0 [ 229.493202][T14859] __sys_sendto+0x48b/0x4e0 [ 229.493215][T14859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.493228][T14859] ? __pfx___sys_sendto+0x10/0x10 [ 229.493245][T14859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.493268][T14859] ? ksys_write+0x1ac/0x250 [ 229.493279][T14859] ? __pfx_ksys_write+0x10/0x10 [ 229.493295][T14859] __x64_sys_sendto+0xe0/0x1c0 [ 229.493308][T14859] ? do_syscall_64+0x90/0x870 [ 229.493322][T14859] ? lockdep_hardirqs_on+0x78/0x100 [ 229.493337][T14859] do_syscall_64+0x115/0x870 [ 229.493352][T14859] ? clear_bhb_loop+0x70/0xc0 [ 229.493367][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.493379][T14859] RIP: 0033:0x7f77e415e90e [ 229.493389][T14859] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.493400][T14859] RSP: 002b:00007f77e5135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.493412][T14859] RAX: ffffffffffffffda RBX: 00007f77e51376c0 RCX: 00007f77e415e90e [ 229.493419][T14859] RDX: 0000000000000020 RSI: 00007f77e5136000 RDI: 0000000000000003 [ 229.493426][T14859] RBP: 0000000000000000 R08: 00007f77e5135f04 R09: 000000000000000c [ 229.493432][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 229.493438][T14859] R13: 00007f77e5135f58 R14: 00007f77e5136000 R15: 0000000000000000 [ 229.493452][T14859] [ 229.757415][T14872] loop2: detected capacity change from 0 to 7 [ 229.762861][T14872] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 229.767143][T14872] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 229.770357][T14872] Dev loop2: unable to read RDB block 7 [ 229.772662][T14872] loop2: unable to read partition table [ 229.775042][T14872] loop2: partition table beyond EOD, truncated [ 229.777730][T14872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.795113][T14872] lo speed is unknown, defaulting to 1000 [ 229.799063][T14872] lo speed is unknown, defaulting to 1000 [ 229.804439][T14872] lo speed is unknown, defaulting to 1000 [ 229.808660][T14872] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 229.815371][T14872] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 229.825229][T14872] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 229.836902][T14872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.852494][T14872] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.891346][T14872] lo speed is unknown, defaulting to 1000 [ 229.896638][T14872] lo speed is unknown, defaulting to 1000 [ 229.902242][T14872] lo speed is unknown, defaulting to 1000 [ 229.906190][T14872] lo speed is unknown, defaulting to 1000 [ 229.913232][T14872] lo speed is unknown, defaulting to 1000 [ 230.069961][ T50] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 230.219830][ T50] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.227316][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.231019][ T50] usb 8-1: Product: 化࣎◂疜䀠뢐刭趣圑⒇栈ⵃ᝷﹏ৡ栚志蜌㉹멙❈ᆵឪ絢⚊謢盙௿┐ힹﵶෟ꿁思퓿䞎챺蘁䟧䵗芌薋揿ဍ몀蕠⥲枬㏞쏫ퟳ [ 230.238643][ T50] usb 8-1: Manufacturer: 㐊 [ 230.241015][ T50] usb 8-1: SerialNumber: 뚷㮛䋝갳䊅䮲䋵圞੢푭쇟ﮭ퓅ᄁ噜꜌꓋透巧ጡ䀞㓿㛗囀ם㷥咡ꞌ⻜玀⊟쌜㻄指浺늿녌ꜿ风኿꺱쀒췓둟팆თ圫鵔យꇃ棋癳웧䁓列甞ᜧ埬䥢쉎咢 [ 230.402092][T14884] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 230.493889][ T841] usb 11-1: USB disconnect, device number 4 [ 230.508906][ T5739] Bluetooth: hci1: command tx timeout [ 230.666365][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.675782][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.684018][ T50] cdc_ncm 8-1:1.0: bind() failure [ 230.688555][ T50] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 230.691690][ T50] cdc_ncm 8-1:1.1: bind() failure [ 230.696047][ T50] usb 8-1: USB disconnect, device number 19 [ 230.789832][T14908] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 231.110241][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2498'. [ 231.113145][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2498'. [ 231.188286][T14924] FAULT_INJECTION: forcing a failure. [ 231.188286][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 231.194228][T14924] CPU: 1 UID: 0 PID: 14924 Comm: syz.2.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.194250][T14924] Tainted: [L]=SOFTLOCKUP [ 231.194254][T14924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.194261][T14924] Call Trace: [ 231.194265][T14924] [ 231.194270][T14924] dump_stack_lvl+0x100/0x190 [ 231.194290][T14924] should_fail_ex.cold+0x5/0xa [ 231.194304][T14924] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 231.194336][T14924] should_failslab+0xc2/0x120 [ 231.194353][T14924] kmem_cache_alloc_noprof+0x91/0x6a0 [ 231.194368][T14924] ? skb_clone+0x190/0x400 [ 231.194388][T14924] skb_clone+0x190/0x400 [ 231.194404][T14924] netlink_deliver_tap+0xaed/0xcc0 [ 231.194420][T14924] netlink_unicast+0x62b/0x850 [ 231.194436][T14924] ? __pfx_netlink_unicast+0x10/0x10 [ 231.194448][T14924] ? __pfx_sock_has_perm+0x10/0x10 [ 231.194468][T14924] netlink_sendmsg+0x8b0/0xda0 [ 231.194483][T14924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.194498][T14924] ? selinux_socket_sendmsg+0x198/0x2f0 [ 231.194517][T14924] __sys_sendto+0x48b/0x4e0 [ 231.194531][T14924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.194544][T14924] ? __pfx___sys_sendto+0x10/0x10 [ 231.194562][T14924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.194592][T14924] ? ksys_write+0x1ac/0x250 [ 231.194604][T14924] ? __pfx_ksys_write+0x10/0x10 [ 231.194617][T14924] __x64_sys_sendto+0xe0/0x1c0 [ 231.194630][T14924] ? do_syscall_64+0x90/0x870 [ 231.194647][T14924] ? lockdep_hardirqs_on+0x78/0x100 [ 231.194662][T14924] do_syscall_64+0x115/0x870 [ 231.194677][T14924] ? clear_bhb_loop+0x70/0xc0 [ 231.194692][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.194704][T14924] RIP: 0033:0x7ff90875e90e [ 231.194715][T14924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.194726][T14924] RSP: 002b:00007ff9095b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.194738][T14924] RAX: ffffffffffffffda RBX: 00007ff9095b36c0 RCX: 00007ff90875e90e [ 231.194745][T14924] RDX: 0000000000000020 RSI: 00007ff9095b2000 RDI: 0000000000000003 [ 231.194753][T14924] RBP: 0000000000000000 R08: 00007ff9095b1f04 R09: 000000000000000c [ 231.194759][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 231.194766][T14924] R13: 00007ff9095b1f58 R14: 00007ff9095b2000 R15: 0000000000000000 [ 231.194781][T14924] [ 231.299652][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 231.302504][T14928] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.384073][T14937] befs: (nullb0): No write support. Marking filesystem read-only [ 231.390842][T14937] befs: (nullb0): invalid magic header [ 231.406207][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2505'. [ 231.424453][T14942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2506'. [ 231.429640][T14942] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2506'. [ 231.434721][T14942] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 231.437128][T14942] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2506'. [ 231.567112][T14946] syz.3.2508: attempt to access beyond end of device [ 231.567112][T14946] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 231.572386][T14946] gfs2: error -5 reading superblock [ 231.699576][ T5726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.704795][ T5726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.707990][ T5726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.713359][ T5726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.721191][ T5726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.793632][T10405] bond4: (slave syz_tun): Removing an active aggregator [ 231.797347][T10405] bond4: (slave syz_tun): Releasing backup interface [ 231.814807][T14961] FAULT_INJECTION: forcing a failure. [ 231.814807][T14961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.820356][T14961] CPU: 3 UID: 0 PID: 14961 Comm: syz.7.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.820384][T14961] Tainted: [L]=SOFTLOCKUP [ 231.820390][T14961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.820400][T14961] Call Trace: [ 231.820406][T14961] [ 231.820413][T14961] dump_stack_lvl+0x100/0x190 [ 231.820440][T14961] should_fail_ex.cold+0x5/0xa [ 231.820462][T14961] _copy_from_iter+0x1f4/0x1690 [ 231.820489][T14961] ? __asan_memset+0x23/0x50 [ 231.820508][T14961] ? __pfx__copy_from_iter+0x10/0x10 [ 231.820530][T14961] ? __pfx___alloc_skb+0x10/0x10 [ 231.820549][T14961] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 231.820573][T14961] ? sock_has_perm+0x25a/0x2f0 [ 231.820594][T14961] ? __pfx_sock_has_perm+0x10/0x10 [ 231.820620][T14961] netlink_sendmsg+0x808/0xda0 [ 231.820643][T14961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.820663][T14961] ? selinux_socket_sendmsg+0x198/0x2f0 [ 231.820690][T14961] __sys_sendto+0x48b/0x4e0 [ 231.820715][T14961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.820733][T14961] ? __pfx___sys_sendto+0x10/0x10 [ 231.820776][T14961] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 231.820830][T14961] __x64_sys_sendto+0xe0/0x1c0 [ 231.820849][T14961] ? do_syscall_64+0x90/0x870 [ 231.820871][T14961] ? lockdep_hardirqs_on+0x78/0x100 [ 231.820893][T14961] do_syscall_64+0x115/0x870 [ 231.820913][T14961] ? clear_bhb_loop+0x70/0xc0 [ 231.820933][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.820950][T14961] RIP: 0033:0x7f77e415e90e [ 231.820965][T14961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.820980][T14961] RSP: 002b:00007f77e5114e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.820997][T14961] RAX: ffffffffffffffda RBX: 00007f77e51166c0 RCX: 00007f77e415e90e [ 231.821008][T14961] RDX: 0000000000000020 RSI: 00007f77e5115000 RDI: 0000000000000003 [ 231.821017][T14961] RBP: 0000000000000000 R08: 00007f77e5114f04 R09: 000000000000000c [ 231.821026][T14961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 231.821036][T14961] R13: 00007f77e5114f58 R14: 00007f77e5115000 R15: 0000000000000000 [ 231.821058][T14961] [ 231.835284][T14964] input: syz0 as /devices/virtual/input/input27 [ 232.032831][T14971] macvlan3: entered promiscuous mode [ 232.080237][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2517'. [ 232.137688][T14953] lo speed is unknown, defaulting to 1000 [ 232.148760][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2516'. [ 232.149218][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2516'. [ 232.253298][T14941] ima: policy update completed [ 232.282560][T15001] FAULT_INJECTION: forcing a failure. [ 232.282560][T15001] name failslab, interval 1, probability 0, space 0, times 0 [ 232.286642][T15001] CPU: 2 UID: 0 PID: 15001 Comm: syz.7.2521 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.286698][T15001] Tainted: [L]=SOFTLOCKUP [ 232.286703][T15001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.286710][T15001] Call Trace: [ 232.286715][T15001] [ 232.286721][T15001] dump_stack_lvl+0x100/0x190 [ 232.286740][T15001] should_fail_ex.cold+0x5/0xa [ 232.286759][T15001] should_failslab+0xc2/0x120 [ 232.286776][T15001] __kmalloc_noprof+0xfc/0x820 [ 232.286791][T15001] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 232.286811][T15001] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 232.286830][T15001] genl_family_rcv_msg_doit+0xc7/0x300 [ 232.286845][T15001] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.286860][T15001] ? genl_get_cmd+0x3e7/0x760 [ 232.286876][T15001] ? __dev_queue_xmit+0xa33/0x4970 [ 232.286890][T15001] ? __radix_tree_lookup+0x217/0x2b0 [ 232.286909][T15001] genl_rcv_msg+0x560/0x800 [ 232.286924][T15001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.286939][T15001] ? __pfx_ctrl_getfamily+0x10/0x10 [ 232.286958][T15001] netlink_rcv_skb+0x159/0x420 [ 232.286970][T15001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.286985][T15001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.287003][T15001] ? netlink_deliver_tap+0x1ae/0xcc0 [ 232.287016][T15001] genl_rcv+0x28/0x40 [ 232.287028][T15001] netlink_unicast+0x585/0x850 [ 232.287042][T15001] ? __pfx_netlink_unicast+0x10/0x10 [ 232.287055][T15001] ? __pfx_sock_has_perm+0x10/0x10 [ 232.287074][T15001] netlink_sendmsg+0x8b0/0xda0 [ 232.287088][T15001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.287102][T15001] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.287120][T15001] __sys_sendto+0x48b/0x4e0 [ 232.287134][T15001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.287147][T15001] ? __pfx___sys_sendto+0x10/0x10 [ 232.287164][T15001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.287187][T15001] ? ksys_write+0x1ac/0x250 [ 232.287198][T15001] ? __pfx_ksys_write+0x10/0x10 [ 232.287210][T15001] __x64_sys_sendto+0xe0/0x1c0 [ 232.287223][T15001] ? do_syscall_64+0x90/0x870 [ 232.287238][T15001] ? lockdep_hardirqs_on+0x78/0x100 [ 232.287253][T15001] do_syscall_64+0x115/0x870 [ 232.287267][T15001] ? clear_bhb_loop+0x70/0xc0 [ 232.287281][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.287293][T15001] RIP: 0033:0x7f77e415e90e [ 232.287304][T15001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.287314][T15001] RSP: 002b:00007f77e5135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 232.287326][T15001] RAX: ffffffffffffffda RBX: 00007f77e51376c0 RCX: 00007f77e415e90e [ 232.287333][T15001] RDX: 0000000000000020 RSI: 00007f77e5136000 RDI: 0000000000000003 [ 232.287340][T15001] RBP: 0000000000000000 R08: 00007f77e5135f04 R09: 000000000000000c [ 232.287346][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 232.287352][T15001] R13: 00007f77e5135f58 R14: 00007f77e5136000 R15: 0000000000000000 [ 232.287366][T15001] [ 232.430648][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.444654][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.447016][T14953] bridge_slave_0: entered allmulticast mode [ 232.450174][T14953] bridge_slave_0: entered promiscuous mode [ 232.453552][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.456019][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.459410][T14953] bridge_slave_1: entered allmulticast mode [ 232.464856][T14953] bridge_slave_1: entered promiscuous mode [ 232.475303][T15013] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.490507][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.496387][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.510087][T15011] program syz.7.2523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.514263][T14953] team0: Port device team_slave_0 added [ 232.518008][T14953] team0: Port device team_slave_1 added [ 232.538635][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.540978][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.549125][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.553673][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.555862][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.564356][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.588891][ T5739] Bluetooth: hci1: command tx timeout [ 232.590008][T14953] hsr_slave_0: entered promiscuous mode [ 232.593308][T14953] hsr_slave_1: entered promiscuous mode [ 232.595834][T14953] debugfs: 'hsr0' already exists in 'hsr' [ 232.597556][T14953] Cannot create hsr debugfs directory [ 232.724920][T14953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.729826][T14953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.827740][T14953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.832169][T14953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.941672][T14953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.946368][T14953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.972517][ T1360] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.979287][ T1360] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.982513][ T1360] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.986027][ T1360] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 232.988163][ T1360] rtc rtc0: __rtc_set_alarm: err=-22 [ 233.020651][T14953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.023845][T14953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.099210][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 233.099223][ T42] audit: type=1800 audit(233.048:15906): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27648 res=0 errno=0 [ 233.117988][ T42] audit: type=1800 audit(233.058:15907): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 233.140351][ T42] audit: type=1800 audit(233.058:15908): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211545 res=0 errno=0 [ 233.153412][T15023] overlayfs: failed to resolve './file0': -2 [ 233.208006][ T42] audit: type=1800 audit(233.148:15909): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 233.237530][ T42] audit: type=1800 audit(233.178:15910): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=211914 res=0 errno=0 [ 233.250320][T15010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.252836][T15025] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.254131][T14953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.258528][T15010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.265412][T15010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.269949][T15010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.270409][T14953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.274020][T15010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.277441][T14953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.282931][T14953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.285778][T14953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.286279][T15010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.293712][T14953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.295664][T15010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.296788][T14953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.298613][T15010] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.305400][T14953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.316447][T15010] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.352856][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.362110][ T42] audit: type=1800 audit(233.308:15911): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 233.369419][T14953] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.376171][ T42] audit: type=1800 audit(233.318:15912): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2530" name="c_ssize" dev="configfs" ino=62897 res=0 errno=0 [ 233.382788][ T42] audit: type=1800 audit(233.318:15913): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 233.382938][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.391284][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.402513][ T42] audit: type=1400 audit(233.348:15914): avc: denied { ioctl } for pid=15034 comm="syz.7.2530" path="/17/config/usb_gadget/g1/functions/uac1.usb0/c_ssize" dev="configfs" ino=62897 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 233.414303][ T42] audit: type=1800 audit(233.348:15915): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 233.416280][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.425320][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.433121][T15037] FAULT_INJECTION: forcing a failure. [ 233.433121][T15037] name failslab, interval 1, probability 0, space 0, times 0 [ 233.440773][T15037] CPU: 2 UID: 0 PID: 15037 Comm: syz.2.2532 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.440801][T15037] Tainted: [L]=SOFTLOCKUP [ 233.440808][T15037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.440819][T15037] Call Trace: [ 233.440826][T15037] [ 233.440834][T15037] dump_stack_lvl+0x100/0x190 [ 233.440863][T15037] should_fail_ex.cold+0x5/0xa [ 233.440883][T15037] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 233.440913][T15037] should_failslab+0xc2/0x120 [ 233.440938][T15037] kmem_cache_alloc_noprof+0x91/0x6a0 [ 233.440961][T15037] ? skb_clone+0x190/0x400 [ 233.440989][T15037] skb_clone+0x190/0x400 [ 233.441012][T15037] netlink_deliver_tap+0xaed/0xcc0 [ 233.441036][T15037] netlink_unicast+0x6a5/0x850 [ 233.441059][T15037] ? __pfx_netlink_unicast+0x10/0x10 [ 233.441085][T15037] ctrl_getfamily+0x417/0x550 [ 233.441109][T15037] ? __pfx_ctrl_getfamily+0x10/0x10 [ 233.441132][T15037] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 233.441154][T15037] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 233.441183][T15037] genl_family_rcv_msg_doit+0x214/0x300 [ 233.441207][T15037] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.441229][T15037] ? genl_get_cmd+0x3e7/0x760 [ 233.441256][T15037] ? __dev_queue_xmit+0xa33/0x4970 [ 233.441275][T15037] ? __radix_tree_lookup+0x217/0x2b0 [ 233.441304][T15037] genl_rcv_msg+0x560/0x800 [ 233.441330][T15037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.441353][T15037] ? __pfx_ctrl_getfamily+0x10/0x10 [ 233.441385][T15037] netlink_rcv_skb+0x159/0x420 [ 233.441403][T15037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.441426][T15037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.441455][T15037] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.441478][T15037] genl_rcv+0x28/0x40 [ 233.441496][T15037] netlink_unicast+0x585/0x850 [ 233.441520][T15037] ? __pfx_netlink_unicast+0x10/0x10 [ 233.441539][T15037] ? __pfx_sock_has_perm+0x10/0x10 [ 233.441567][T15037] netlink_sendmsg+0x8b0/0xda0 [ 233.441591][T15037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.441612][T15037] ? selinux_socket_sendmsg+0x198/0x2f0 [ 233.441642][T15037] __sys_sendto+0x48b/0x4e0 [ 233.441662][T15037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.441682][T15037] ? __pfx___sys_sendto+0x10/0x10 [ 233.441711][T15037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.441752][T15037] ? ksys_write+0x1ac/0x250 [ 233.441770][T15037] ? __pfx_ksys_write+0x10/0x10 [ 233.441790][T15037] __x64_sys_sendto+0xe0/0x1c0 [ 233.441810][T15037] ? do_syscall_64+0x90/0x870 [ 233.441833][T15037] ? lockdep_hardirqs_on+0x78/0x100 [ 233.441856][T15037] do_syscall_64+0x115/0x870 [ 233.441878][T15037] ? clear_bhb_loop+0x70/0xc0 [ 233.441926][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.441945][T15037] RIP: 0033:0x7ff90875e90e [ 233.441961][T15037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.441978][T15037] RSP: 002b:00007ff9095b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 233.442012][T15037] RAX: ffffffffffffffda RBX: 00007ff9095b36c0 RCX: 00007ff90875e90e [ 233.442023][T15037] RDX: 0000000000000020 RSI: 00007ff9095b2000 RDI: 0000000000000003 [ 233.442034][T15037] RBP: 0000000000000000 R08: 00007ff9095b1f04 R09: 000000000000000c [ 233.442044][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 233.442054][T15037] R13: 00007ff9095b1f58 R14: 00007ff9095b2000 R15: 0000000000000000 [ 233.442079][T15037] [ 233.652501][T15049] No control pipe specified [ 233.738929][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.761132][T14953] veth0_vlan: entered promiscuous mode [ 233.772606][T14953] veth1_vlan: entered promiscuous mode [ 233.777790][ T5739] Bluetooth: hci3: unexpected event for opcode 0x080f [ 233.795335][T14953] veth0_macvtap: entered promiscuous mode [ 233.802580][T14953] veth1_macvtap: entered promiscuous mode [ 233.812067][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.818209][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.860661][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.871281][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.879572][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.882573][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.110052][ T5826] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 234.115142][ T5826] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 234.509172][ T5739] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.511247][ T5826] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 234.513435][ T5826] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 235.309034][ T5726] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.309036][ T5739] Bluetooth: hci2: command 0x041b tx timeout [ 235.320643][ T5826] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 235.323525][ T5826] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 235.545425][T15103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.584133][T15105] FAULT_INJECTION: forcing a failure. [ 235.584133][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 235.588961][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.2.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.589005][T15105] Tainted: [L]=SOFTLOCKUP [ 235.589011][T15105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.589021][T15105] Call Trace: [ 235.589027][T15105] [ 235.589034][T15105] dump_stack_lvl+0x100/0x190 [ 235.589052][T15105] should_fail_ex.cold+0x5/0xa [ 235.589066][T15105] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 235.589090][T15105] should_failslab+0xc2/0x120 [ 235.589114][T15105] kmem_cache_alloc_noprof+0x91/0x6a0 [ 235.589136][T15105] ? skb_clone+0x190/0x400 [ 235.589163][T15105] skb_clone+0x190/0x400 [ 235.589181][T15105] netlink_deliver_tap+0xaed/0xcc0 [ 235.589197][T15105] netlink_unicast+0x6a5/0x850 [ 235.589212][T15105] ? __pfx_netlink_unicast+0x10/0x10 [ 235.589228][T15105] ctrl_getfamily+0x417/0x550 [ 235.589243][T15105] ? __pfx_ctrl_getfamily+0x10/0x10 [ 235.589258][T15105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 235.589273][T15105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 235.589290][T15105] genl_family_rcv_msg_doit+0x214/0x300 [ 235.589306][T15105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.589320][T15105] ? genl_get_cmd+0x3e7/0x760 [ 235.589337][T15105] ? __dev_queue_xmit+0xa33/0x4970 [ 235.589353][T15105] ? __radix_tree_lookup+0x217/0x2b0 [ 235.589380][T15105] genl_rcv_msg+0x560/0x800 [ 235.589403][T15105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.589423][T15105] ? __pfx_ctrl_getfamily+0x10/0x10 [ 235.589444][T15105] netlink_rcv_skb+0x159/0x420 [ 235.589456][T15105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.589470][T15105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.589496][T15105] ? netlink_deliver_tap+0x1ae/0xcc0 [ 235.589516][T15105] genl_rcv+0x28/0x40 [ 235.589533][T15105] netlink_unicast+0x585/0x850 [ 235.589554][T15105] ? __pfx_netlink_unicast+0x10/0x10 [ 235.589567][T15105] ? __pfx_sock_has_perm+0x10/0x10 [ 235.589588][T15105] netlink_sendmsg+0x8b0/0xda0 [ 235.589603][T15105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.589616][T15105] ? selinux_socket_sendmsg+0x198/0x2f0 [ 235.589635][T15105] __sys_sendto+0x48b/0x4e0 [ 235.589648][T15105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.589661][T15105] ? __pfx___sys_sendto+0x10/0x10 [ 235.589678][T15105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.589701][T15105] ? ksys_write+0x1ac/0x250 [ 235.589712][T15105] ? __pfx_ksys_write+0x10/0x10 [ 235.589724][T15105] __x64_sys_sendto+0xe0/0x1c0 [ 235.589737][T15105] ? do_syscall_64+0x90/0x870 [ 235.589752][T15105] ? lockdep_hardirqs_on+0x78/0x100 [ 235.589767][T15105] do_syscall_64+0x115/0x870 [ 235.589781][T15105] ? clear_bhb_loop+0x70/0xc0 [ 235.589795][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.589835][T15105] RIP: 0033:0x7ff90875e90e [ 235.589845][T15105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.589856][T15105] RSP: 002b:00007ff9095b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 235.589869][T15105] RAX: ffffffffffffffda RBX: 00007ff9095b36c0 RCX: 00007ff90875e90e [ 235.589876][T15105] RDX: 0000000000000020 RSI: 00007ff9095b2000 RDI: 0000000000000003 [ 235.589900][T15105] RBP: 0000000000000000 R08: 00007ff9095b1f04 R09: 000000000000000c [ 235.589907][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 235.589913][T15105] R13: 00007ff9095b1f58 R14: 00007ff9095b2000 R15: 0000000000000000 [ 235.589928][T15105] [ 237.388967][ T5739] Bluetooth: hci2: command 0x041b tx timeout [ 237.393678][ T5826] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 237.395699][ T5826] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 237.444188][ T6495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.448486][ T6495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.480776][ T6495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.485675][ T6495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.522347][T15120] input: syz1 as /devices/virtual/input/input28 [ 237.591465][T15130] FAULT_INJECTION: forcing a failure. [ 237.591465][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 237.596046][T15130] CPU: 3 UID: 0 PID: 15130 Comm: syz.7.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.596064][T15130] Tainted: [L]=SOFTLOCKUP [ 237.596068][T15130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.596075][T15130] Call Trace: [ 237.596080][T15130] [ 237.596104][T15130] dump_stack_lvl+0x100/0x190 [ 237.596126][T15130] should_fail_ex.cold+0x5/0xa [ 237.596141][T15130] should_failslab+0xc2/0x120 [ 237.596157][T15130] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 237.596173][T15130] ? __alloc_skb+0x140/0x710 [ 237.596190][T15130] __alloc_skb+0x140/0x710 [ 237.596203][T15130] ? __alloc_skb+0x5b7/0x710 [ 237.596216][T15130] ? __pfx___alloc_skb+0x10/0x10 [ 237.596228][T15130] ? genl_rcv_msg+0x4be/0x800 [ 237.596248][T15130] netlink_ack+0x117/0xb80 [ 237.596266][T15130] netlink_rcv_skb+0x333/0x420 [ 237.596279][T15130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.596298][T15130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.596326][T15130] ? netlink_deliver_tap+0x1ae/0xcc0 [ 237.596347][T15130] genl_rcv+0x28/0x40 [ 237.596364][T15130] netlink_unicast+0x585/0x850 [ 237.596384][T15130] ? __pfx_netlink_unicast+0x10/0x10 [ 237.596404][T15130] ? __pfx_sock_has_perm+0x10/0x10 [ 237.596431][T15130] netlink_sendmsg+0x8b0/0xda0 [ 237.596452][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.596474][T15130] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.596502][T15130] __sys_sendto+0x48b/0x4e0 [ 237.596521][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.596536][T15130] ? __pfx___sys_sendto+0x10/0x10 [ 237.596553][T15130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.596576][T15130] ? ksys_write+0x1ac/0x250 [ 237.596587][T15130] ? __pfx_ksys_write+0x10/0x10 [ 237.596600][T15130] __x64_sys_sendto+0xe0/0x1c0 [ 237.596613][T15130] ? do_syscall_64+0x90/0x870 [ 237.596629][T15130] ? lockdep_hardirqs_on+0x78/0x100 [ 237.596643][T15130] do_syscall_64+0x115/0x870 [ 237.596658][T15130] ? clear_bhb_loop+0x70/0xc0 [ 237.596672][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.596684][T15130] RIP: 0033:0x7f77e415e90e [ 237.596694][T15130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.596705][T15130] RSP: 002b:00007f77e5135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.596717][T15130] RAX: ffffffffffffffda RBX: 00007f77e51376c0 RCX: 00007f77e415e90e [ 237.596723][T15130] RDX: 0000000000000020 RSI: 00007f77e5136000 RDI: 0000000000000003 [ 237.596730][T15130] RBP: 0000000000000000 R08: 00007f77e5135f04 R09: 000000000000000c [ 237.596737][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 237.596743][T15130] R13: 00007f77e5135f58 R14: 00007f77e5136000 R15: 0000000000000000 [ 237.596761][T15130] [ 237.605157][T15134] nfs4: Unknown parameter ')' [ 237.718857][ T5626] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 237.870156][ T5626] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.874760][ T5626] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 237.877851][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.883388][ T5626] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.887913][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.892529][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.897957][ T5626] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 237.901076][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.904712][T15161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.905127][ T5626] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.915282][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.919000][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.928100][ T5626] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 237.930920][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.934191][ T5626] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.937723][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.942543][ T5626] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.944253][T15168] sock: sock_set_timeout: `syz.3.2567' (pid 15168) tries to set negative timeout [ 237.952606][ T5626] usb 11-1: string descriptor 0 read error: -22 [ 237.954764][ T5626] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.001044][ T5626] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 238.116945][T15187] __nla_validate_parse: 5 callbacks suppressed [ 238.116958][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 238.126570][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 238.126584][ T42] audit: type=1800 audit(238.068:15987): pid=15187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2574" name="c_ssize" dev="configfs" ino=62313 res=0 errno=0 [ 238.175496][T15178] pim6reg1: entered promiscuous mode [ 238.177485][T15178] pim6reg1: entered allmulticast mode [ 238.223801][ T42] audit: type=1800 audit(238.168:15988): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 238.243974][T15195] ISOFS: Unable to identify CD-ROM format. [ 238.251767][ T42] audit: type=1800 audit(238.198:15989): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2576" name="match_busid" dev="sysfs" ino=44820 res=0 errno=0 [ 238.258666][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 238.288572][ T42] audit: type=1800 audit(238.238:15990): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 238.322910][ T42] audit: type=1400 audit(238.268:15991): avc: denied { listen } for pid=15198 comm="syz.2.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 238.378813][T15205] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.383346][ T42] audit: type=1400 audit(238.328:15992): avc: denied { ioctl } for pid=15204 comm="syz.3.2579" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 238.398771][ T42] audit: type=1800 audit(238.328:15993): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 238.405713][ T42] audit: type=1800 audit(238.348:15994): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=212842 res=0 errno=0 [ 238.423063][T15209] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.502558][ T42] audit: type=1400 audit(238.448:15995): avc: denied { recv } for pid=15215 comm="syz.3.2582" saddr=fe80::cc3c:368f:b6ab:98a8 src=46770 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 238.524339][ T42] audit: type=1400 audit(238.468:15996): avc: denied { mounton } for pid=15207 comm="syz.7.2580" path="/31/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 238.564446][T15219] FAULT_INJECTION: forcing a failure. [ 238.564446][T15219] name failslab, interval 1, probability 0, space 0, times 0 [ 238.570677][T15219] CPU: 2 UID: 0 PID: 15219 Comm: syz.2.2583 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.570713][T15219] Tainted: [L]=SOFTLOCKUP [ 238.570719][T15219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.570730][T15219] Call Trace: [ 238.570737][T15219] [ 238.570744][T15219] dump_stack_lvl+0x100/0x190 [ 238.570773][T15219] should_fail_ex.cold+0x5/0xa [ 238.570793][T15219] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 238.570822][T15219] should_failslab+0xc2/0x120 [ 238.570847][T15219] kmem_cache_alloc_noprof+0x91/0x6a0 [ 238.570869][T15219] ? skb_clone+0x190/0x400 [ 238.570897][T15219] skb_clone+0x190/0x400 [ 238.570920][T15219] netlink_deliver_tap+0xaed/0xcc0 [ 238.570945][T15219] netlink_dump+0x909/0xd00 [ 238.570965][T15219] ? __pfx_netlink_dump+0x10/0x10 [ 238.570980][T15219] ? kasan_quarantine_put+0x104/0x240 [ 238.571012][T15219] ? kfree_skbmem+0x19f/0x210 [ 238.571030][T15219] netlink_recvmsg+0x7dc/0xa90 [ 238.571049][T15219] ? __pfx_netlink_recvmsg+0x10/0x10 [ 238.571066][T15219] ? __fget_files+0x215/0x3d0 [ 238.571093][T15219] ? __pfx_netlink_recvmsg+0x10/0x10 [ 238.571112][T15219] sock_recvmsg+0x1d5/0x220 [ 238.571141][T15219] __sys_recvfrom+0x1f2/0x2f0 [ 238.571164][T15219] ? __pfx___sys_recvfrom+0x10/0x10 [ 238.571190][T15219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.571227][T15219] ? ksys_write+0x1ac/0x250 [ 238.571244][T15219] ? __pfx_ksys_write+0x10/0x10 [ 238.571264][T15219] __x64_sys_recvfrom+0xe0/0x1c0 [ 238.571285][T15219] ? do_syscall_64+0x90/0x870 [ 238.571307][T15219] ? lockdep_hardirqs_on+0x78/0x100 [ 238.571330][T15219] do_syscall_64+0x115/0x870 [ 238.571351][T15219] ? clear_bhb_loop+0x70/0xc0 [ 238.571373][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.571391][T15219] RIP: 0033:0x7ff90875e90e [ 238.571408][T15219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.571423][T15219] RSP: 002b:00007ff9095b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 238.571442][T15219] RAX: ffffffffffffffda RBX: 00007ff9095b36c0 RCX: 00007ff90875e90e [ 238.571453][T15219] RDX: 0000000000001000 RSI: 00007ff9095b2000 RDI: 0000000000000003 [ 238.571463][T15219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.571472][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 238.571482][T15219] R13: 00007ff9095b1f58 R14: 00007ff9095b2000 R15: 0000000000000000 [ 238.571505][T15219] [ 238.599121][T15221] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 238.700275][T15224] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.703529][T15224] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 238.726615][T15224] vim2m vim2m.0: vidioc_s_fmt queue busy [ 238.894879][T15236] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.2588'. [ 239.026494][T15245] FAULT_INJECTION: forcing a failure. [ 239.026494][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.031094][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.7.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.031114][T15245] Tainted: [L]=SOFTLOCKUP [ 239.031118][T15245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.031125][T15245] Call Trace: [ 239.031130][T15245] [ 239.031136][T15245] dump_stack_lvl+0x100/0x190 [ 239.031163][T15245] should_fail_ex.cold+0x5/0xa [ 239.031194][T15245] _copy_to_iter+0x1f3/0x1720 [ 239.031222][T15245] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 239.031239][T15245] ? find_held_lock+0x2b/0x80 [ 239.031262][T15245] ? __pfx__copy_to_iter+0x10/0x10 [ 239.031280][T15245] ? __skb_recv_datagram+0x1b2/0x220 [ 239.031295][T15245] simple_copy_to_iter+0x46/0x90 [ 239.031307][T15245] __skb_datagram_iter+0x129/0x900 [ 239.031317][T15245] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 239.031331][T15245] ? skb_recv_datagram+0x88/0xc0 [ 239.031344][T15245] skb_copy_datagram_iter+0xa1/0x250 [ 239.031358][T15245] netlink_recvmsg+0x27e/0xa90 [ 239.031371][T15245] ? __pfx_netlink_recvmsg+0x10/0x10 [ 239.031382][T15245] ? __fget_files+0x215/0x3d0 [ 239.031414][T15245] ? __pfx_netlink_recvmsg+0x10/0x10 [ 239.031426][T15245] sock_recvmsg+0x1d5/0x220 [ 239.031445][T15245] __sys_recvfrom+0x1f2/0x2f0 [ 239.031460][T15245] ? __pfx___sys_recvfrom+0x10/0x10 [ 239.031478][T15245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.031501][T15245] ? ksys_write+0x1ac/0x250 [ 239.031511][T15245] ? __pfx_ksys_write+0x10/0x10 [ 239.031524][T15245] __x64_sys_recvfrom+0xe0/0x1c0 [ 239.031538][T15245] ? do_syscall_64+0x90/0x870 [ 239.031553][T15245] ? lockdep_hardirqs_on+0x78/0x100 [ 239.031568][T15245] do_syscall_64+0x115/0x870 [ 239.031582][T15245] ? clear_bhb_loop+0x70/0xc0 [ 239.031597][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.031609][T15245] RIP: 0033:0x7f77e415e90e [ 239.031619][T15245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.031630][T15245] RSP: 002b:00007f77e5135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 239.031643][T15245] RAX: ffffffffffffffda RBX: 00007f77e51376c0 RCX: 00007f77e415e90e [ 239.031650][T15245] RDX: 0000000000001000 RSI: 00007f77e5136000 RDI: 0000000000000003 [ 239.031657][T15245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.031663][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 239.031669][T15245] R13: 00007f77e5135f58 R14: 00007f77e5136000 R15: 0000000000000000 [ 239.031685][T15245] [ 239.153786][T15249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 239.155945][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.158984][T15249] vhci_hcd vhci_hcd.0: Device attached [ 239.162754][T15249] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 239.164812][T15249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.167323][T15249] vhci_hcd vhci_hcd.0: Device attached [ 239.202349][T15256] input: syz0 as /devices/virtual/input/input30 [ 239.349168][T15250] vhci_hcd: connection closed [ 239.349256][T15252] vhci_hcd: connection closed [ 239.349535][ T5776] vhci_hcd vhci_hcd.3: stop threads [ 239.354391][ T5776] vhci_hcd vhci_hcd.3: release socket [ 239.357492][T15264] ip_tables: iptables: counters copy to user failed while replacing table [ 239.359549][ T5776] vhci_hcd vhci_hcd.3: disconnect device [ 239.362664][ T5776] vhci_hcd vhci_hcd.3: stop threads [ 239.364443][ T5776] vhci_hcd vhci_hcd.3: release socket [ 239.367794][ T5776] vhci_hcd vhci_hcd.3: disconnect device [ 239.403682][T15269] netlink: NAT attribute has 5 unknown bytes [ 239.405650][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.408981][ T24] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 239.412936][ T24] usb 43-1: enqueue for inactive port 0 [ 239.479863][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 239.810751][T15280] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 239.861838][T15282] random: crng reseeded on system resumption [ 239.907536][T15287] XFS (nbd7): SB validate failed with error -5. [ 240.137178][T15309] netlink: 'syz.3.2613': attribute type 1 has an invalid length. [ 240.151720][T15309] bond1 (unregistering): Released all slaves [ 240.359962][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 240.369941][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2619'. [ 240.450050][T15337] netlink: 'syz.2.2621': attribute type 1 has an invalid length. [ 240.473055][T15337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.601433][T15348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.734288][T15359] FAULT_INJECTION: forcing a failure. [ 240.734288][T15359] name failslab, interval 1, probability 0, space 0, times 0 [ 240.741116][T15359] CPU: 2 UID: 0 PID: 15359 Comm: syz.7.2629 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.741135][T15359] Tainted: [L]=SOFTLOCKUP [ 240.741139][T15359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.741147][T15359] Call Trace: [ 240.741151][T15359] [ 240.741156][T15359] dump_stack_lvl+0x100/0x190 [ 240.741175][T15359] should_fail_ex.cold+0x5/0xa [ 240.741188][T15359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 240.741209][T15359] should_failslab+0xc2/0x120 [ 240.741226][T15359] kmem_cache_alloc_noprof+0x91/0x6a0 [ 240.741240][T15359] ? skb_clone+0x190/0x400 [ 240.741259][T15359] skb_clone+0x190/0x400 [ 240.741274][T15359] netlink_deliver_tap+0xaed/0xcc0 [ 240.741290][T15359] netlink_dump+0x909/0xd00 [ 240.741302][T15359] ? __pfx_netlink_dump+0x10/0x10 [ 240.741312][T15359] ? kasan_quarantine_put+0x104/0x240 [ 240.741331][T15359] ? kfree_skbmem+0x19f/0x210 [ 240.741343][T15359] netlink_recvmsg+0x7dc/0xa90 [ 240.741355][T15359] ? __pfx_netlink_recvmsg+0x10/0x10 [ 240.741366][T15359] ? __fget_files+0x215/0x3d0 [ 240.741382][T15359] ? __pfx_netlink_recvmsg+0x10/0x10 [ 240.741394][T15359] sock_recvmsg+0x1d5/0x220 [ 240.741413][T15359] __sys_recvfrom+0x1f2/0x2f0 [ 240.741428][T15359] ? __pfx___sys_recvfrom+0x10/0x10 [ 240.741446][T15359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.741470][T15359] ? ksys_write+0x1ac/0x250 [ 240.741480][T15359] ? __pfx_ksys_write+0x10/0x10 [ 240.741493][T15359] __x64_sys_recvfrom+0xe0/0x1c0 [ 240.741506][T15359] ? do_syscall_64+0x90/0x870 [ 240.741522][T15359] ? lockdep_hardirqs_on+0x78/0x100 [ 240.741537][T15359] do_syscall_64+0x115/0x870 [ 240.741551][T15359] ? clear_bhb_loop+0x70/0xc0 [ 240.741570][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.741586][T15359] RIP: 0033:0x7f77e415e90e [ 240.741600][T15359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.741615][T15359] RSP: 002b:00007f77e5135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 240.741634][T15359] RAX: ffffffffffffffda RBX: 00007f77e51376c0 RCX: 00007f77e415e90e [ 240.741646][T15359] RDX: 0000000000001000 RSI: 00007f77e5136000 RDI: 0000000000000003 [ 240.741656][T15359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.741664][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 240.741670][T15359] R13: 00007f77e5135f58 R14: 00007f77e5136000 R15: 0000000000000000 [ 240.741685][T15359] [ 240.815748][T15363] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 240.834010][T15363] netlink: 'syz.3.2631': attribute type 12 has an invalid length. [ 240.836999][T15363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2631'. [ 241.122969][T15389] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 241.251864][T15393] FAULT_INJECTION: forcing a failure. [ 241.251864][T15393] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 241.260378][T15393] CPU: 1 UID: 0 PID: 15393 Comm: syz.3.2641 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.260398][T15393] Tainted: [L]=SOFTLOCKUP [ 241.260402][T15393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.260409][T15393] Call Trace: [ 241.260414][T15393] [ 241.260419][T15393] dump_stack_lvl+0x100/0x190 [ 241.260441][T15393] should_fail_ex.cold+0x5/0xa [ 241.260454][T15393] ? prepare_alloc_pages+0x16d/0x5f0 [ 241.260472][T15393] should_fail_alloc_page+0xeb/0x140 [ 241.260489][T15393] prepare_alloc_pages+0x1f0/0x5f0 [ 241.260508][T15393] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 241.260523][T15393] ? __pfx_stack_trace_save+0x10/0x10 [ 241.260547][T15393] ? stack_depot_save_flags+0x27/0x9d0 [ 241.260564][T15393] ? __lock_acquire+0x49f/0x1a40 [ 241.260579][T15393] ? kfree_skbmem+0x19a/0x210 [ 241.260591][T15393] ? kasan_save_stack+0x3f/0x50 [ 241.260605][T15393] ? kasan_save_stack+0x30/0x50 [ 241.260617][T15393] ? kasan_save_track+0x14/0x30 [ 241.260630][T15393] ? kasan_save_free_info+0x3b/0x70 [ 241.260640][T15393] ? __kasan_slab_free+0x5f/0x80 [ 241.260654][T15393] ? kmem_cache_free+0x127/0x6b0 [ 241.260665][T15393] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 241.260677][T15393] ? netlink_recvmsg+0x7dc/0xa90 [ 241.260689][T15393] ? __sys_recvfrom+0x1f2/0x2f0 [ 241.260703][T15393] ? do_syscall_64+0x115/0x870 [ 241.260719][T15393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.260744][T15393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.260767][T15393] ? policy_nodemask+0xed/0x4f0 [ 241.260786][T15393] alloc_pages_mpol+0x1fb/0x540 [ 241.260803][T15393] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.260819][T15393] ? kfree_skbmem+0x19a/0x210 [ 241.260828][T15393] ? kmem_cache_free+0x127/0x6b0 [ 241.260841][T15393] folio_alloc_mpol_noprof+0x36/0x260 [ 241.260860][T15393] vma_alloc_folio_noprof+0xed/0x1d0 [ 241.260878][T15393] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 241.260895][T15393] ? rcu_read_unlock+0x2d/0xb0 [ 241.260907][T15393] ? rcu_read_unlock+0x2d/0xb0 [ 241.260921][T15393] do_wp_page+0x1ee1/0x4350 [ 241.260942][T15393] ? __pfx_do_wp_page+0x10/0x10 [ 241.260959][T15393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 241.260980][T15393] __handle_mm_fault+0x1ab6/0x2a00 [ 241.260994][T15393] ? reacquire_held_locks+0xce/0x1e0 [ 241.261009][T15393] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.261022][T15393] ? lock_vma_under_rcu+0x17c/0x590 [ 241.261044][T15393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.261064][T15393] handle_mm_fault+0x37b/0xa30 [ 241.261077][T15393] do_user_addr_fault+0x5a3/0x12f0 [ 241.261118][T15393] exc_page_fault+0x6f/0xd0 [ 241.261140][T15393] asm_exc_page_fault+0x26/0x30 [ 241.261159][T15393] RIP: 0033:0x7fb73ed5dec5 [ 241.261176][T15393] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 241.261191][T15393] RSP: 002b:00007fb73fd50de0 EFLAGS: 00010293 [ 241.261201][T15393] RAX: 0000000000000008 RBX: 00007fb73fb57e20 RCX: 0000000000000000 [ 241.261208][T15393] RDX: 0000000000000000 RSI: 00007fb73ee526d7 RDI: 00007fb73fb57e20 [ 241.261214][T15393] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 241.261221][T15393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb73ee523ef [ 241.261227][T15393] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007fb73ee526d7 [ 241.261247][T15393] [ 241.261420][T15393] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 241.296214][T15398] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 241.396362][T15398] netlink: 'syz.7.2643': attribute type 1 has an invalid length. [ 241.399976][T15398] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2643'. [ 241.564082][T14953] overlayfs: failed lookup in lower (newroot/37, name='bus', err=-40): overlapping layers [ 241.571691][T14953] overlayfs: failed lookup in lower (newroot/37, name='bus', err=-40): overlapping layers [ 241.680654][T15435] FAULT_INJECTION: forcing a failure. [ 241.680654][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 241.687154][T15435] CPU: 2 UID: 0 PID: 15435 Comm: syz.2.2652 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.687173][T15435] Tainted: [L]=SOFTLOCKUP [ 241.687177][T15435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.687184][T15435] Call Trace: [ 241.687189][T15435] [ 241.687194][T15435] dump_stack_lvl+0x100/0x190 [ 241.687213][T15435] should_fail_ex.cold+0x5/0xa [ 241.687229][T15435] should_failslab+0xc2/0x120 [ 241.687246][T15435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 241.687260][T15435] ? mas_next_range+0x9b/0xf0 [ 241.687278][T15435] ? vm_area_alloc+0x1f/0x160 [ 241.687291][T15435] vm_area_alloc+0x1f/0x160 [ 241.687301][T15435] __mmap_region+0x1033/0x2db0 [ 241.687328][T15435] ? __pfx___mmap_region+0x10/0x10 [ 241.687352][T15435] ? mas_prev_slot+0x760/0x1d20 [ 241.687385][T15435] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 241.687422][T15435] mmap_region+0x35d/0x620 [ 241.687436][T15435] ? __pfx_mmap_region+0x10/0x10 [ 241.687448][T15435] ? thp_get_unmapped_area_vmflags+0x2cb/0x320 [ 241.687468][T15435] ? selinux_mmap_addr+0x2b/0x110 [ 241.687484][T15435] ? bpf_lsm_mmap_addr+0x9/0x30 [ 241.687507][T15435] ? security_mmap_addr+0x71/0x1e0 [ 241.687526][T15435] ? __get_unmapped_area+0x255/0x3e0 [ 241.687544][T15435] do_mmap+0xc63/0x12f0 [ 241.687561][T15435] ? __pfx_do_mmap+0x10/0x10 [ 241.687577][T15435] ? __pfx_down_write_killable+0x10/0x10 [ 241.687598][T15435] vm_mmap_pgoff+0x29e/0x470 [ 241.687622][T15435] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 241.687640][T15435] ? find_held_lock+0x2b/0x80 [ 241.687651][T15435] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 241.687668][T15435] ksys_mmap_pgoff+0xe4/0x610 [ 241.687684][T15435] ? find_held_lock+0x2b/0x80 [ 241.687694][T15435] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 241.687709][T15435] ? exc_page_fault+0x6f/0xd0 [ 241.687727][T15435] __x64_sys_mmap+0x125/0x190 [ 241.687753][T15435] do_syscall_64+0x115/0x870 [ 241.687768][T15435] ? clear_bhb_loop+0x70/0xc0 [ 241.687782][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.687794][T15435] RIP: 0033:0x7ff90879de42 [ 241.687805][T15435] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 241.687816][T15435] RSP: 002b:00007ff9095b1d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 241.687828][T15435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff90879de42 [ 241.687835][T15435] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 241.687842][T15435] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 241.687848][T15435] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 241.687855][T15435] R13: 0000000000001000 R14: 0000000000000022 R15: 00007ff9088526d7 [ 241.687869][T15435] [ 241.946701][T12380] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.060211][T12380] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.089679][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.097683][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.103848][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.110872][ T5726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.117262][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.237980][T12380] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.361271][T10441] usb 11-1: USB disconnect, device number 5 [ 242.412076][T12380] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.517960][T15478] FAULT_INJECTION: forcing a failure. [ 242.517960][T15478] name failslab, interval 1, probability 0, space 0, times 0 [ 242.523811][T15478] CPU: 3 UID: 0 PID: 15478 Comm: syz.6.2661 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.523839][T15478] Tainted: [L]=SOFTLOCKUP [ 242.523845][T15478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.523855][T15478] Call Trace: [ 242.523862][T15478] [ 242.523868][T15478] dump_stack_lvl+0x100/0x190 [ 242.523895][T15478] should_fail_ex.cold+0x5/0xa [ 242.523917][T15478] should_failslab+0xc2/0x120 [ 242.523940][T15478] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.523960][T15478] ? mas_data_end+0x17b/0x2a0 [ 242.523983][T15478] ? vm_area_dup+0x27/0x8e0 [ 242.524004][T15478] vm_area_dup+0x27/0x8e0 [ 242.524021][T15478] __split_vma+0x18c/0xda0 [ 242.524041][T15478] ? __pfx___split_vma+0x10/0x10 [ 242.524064][T15478] ? __pfx_mas_prev+0x10/0x10 [ 242.524095][T15478] vms_gather_munmap_vmas+0x3a5/0x1720 [ 242.524114][T15478] ? validate_mm+0x392/0x4e0 [ 242.524131][T15478] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 242.524148][T15478] ? __pfx_validate_mm+0x10/0x10 [ 242.524181][T15478] do_vmi_align_munmap+0x287/0x5f0 [ 242.524203][T15478] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 242.524221][T15478] ? selinux_mmap_addr+0x2b/0x110 [ 242.524279][T15478] do_vmi_munmap+0x1f8/0x3e0 [ 242.524320][T15478] __vm_munmap+0x196/0x390 [ 242.524341][T15478] ? __pfx___vm_munmap+0x10/0x10 [ 242.524374][T15478] __x64_sys_munmap+0x59/0x80 [ 242.524398][T15478] do_syscall_64+0x115/0x870 [ 242.524419][T15478] ? clear_bhb_loop+0x70/0xc0 [ 242.524441][T15478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.524458][T15478] RIP: 0033:0x7f133859df07 [ 242.524473][T15478] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.524489][T15478] RSP: 002b:00007f13393cbd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 242.524509][T15478] RAX: ffffffffffffffda RBX: 00007f1330000000 RCX: 00007f133859df07 [ 242.524520][T15478] RDX: 0000000000000000 RSI: 0000000001a00000 RDI: 00007f132e600000 [ 242.524530][T15478] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 242.524541][T15478] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 242.524551][T15478] R13: 0000000000001000 R14: 00007f1334000000 R15: 0000000001a00000 [ 242.524587][T15478] [ 242.623815][T15448] lo speed is unknown, defaulting to 1000 [ 242.714121][T15488] netlink: 'syz.2.2663': attribute type 2 has an invalid length. [ 242.723365][T15488] netlink: 'syz.2.2663': attribute type 2 has an invalid length. [ 242.735043][T15488] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2663'. [ 243.014538][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2669'. [ 243.053518][T15513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.063373][T12380] bridge_slave_1: left allmulticast mode [ 243.066327][T12380] bridge_slave_1: left promiscuous mode [ 243.069834][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.074892][T12380] bridge_slave_0: left allmulticast mode [ 243.077206][T12380] bridge_slave_0: left promiscuous mode [ 243.081556][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.141734][T15528] netlink: 'syz.2.2671': attribute type 10 has an invalid length. [ 243.168316][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 243.168340][ T42] audit: type=1800 audit(243.108:16114): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 243.211713][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'. [ 243.308472][ T42] audit: type=1800 audit(243.248:16115): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 243.334102][T12380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.341505][T12380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.346817][T12380] bond0 (unregistering): Released all slaves [ 243.374682][T15528] dummy0: entered promiscuous mode [ 243.378095][ T42] audit: type=1800 audit(243.318:16116): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 243.381182][T15528] team0: Port device dummy0 added [ 243.399633][T15535] FAULT_INJECTION: forcing a failure. [ 243.399633][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.406728][T15535] CPU: 3 UID: 0 PID: 15535 Comm: syz.6.2673 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.406749][T15535] Tainted: [L]=SOFTLOCKUP [ 243.406754][T15535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.406769][T15535] Call Trace: [ 243.406783][T15535] [ 243.406788][T15535] dump_stack_lvl+0x100/0x190 [ 243.406826][T15535] should_fail_ex.cold+0x5/0xa [ 243.406849][T15535] _copy_from_user+0x2e/0xd0 [ 243.406887][T15535] kstrtouint_from_user+0xd6/0x1d0 [ 243.406899][T15535] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 243.406910][T15535] ? __lock_acquire+0x49f/0x1a40 [ 243.406939][T15535] proc_fail_nth_write+0x83/0x220 [ 243.406958][T15535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.406974][T15535] vfs_write+0x2aa/0x1050 [ 243.406992][T15535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.407005][T15535] ? __pfx_vfs_write+0x10/0x10 [ 243.407015][T15535] ? __fget_files+0x215/0x3d0 [ 243.407031][T15535] ? __fget_files+0x21f/0x3d0 [ 243.407046][T15535] ksys_write+0x12a/0x250 [ 243.407057][T15535] ? __pfx_ksys_write+0x10/0x10 [ 243.407072][T15535] do_syscall_64+0x115/0x870 [ 243.407139][T15535] ? clear_bhb_loop+0x70/0xc0 [ 243.407153][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.407166][T15535] RIP: 0033:0x7f133855e90e [ 243.407176][T15535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.407188][T15535] RSP: 002b:00007f13393abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.407207][T15535] RAX: ffffffffffffffda RBX: 00007f13393ac6c0 RCX: 00007f133855e90e [ 243.407214][T15535] RDX: 0000000000000001 RSI: 00007f13393ac0a0 RDI: 0000000000000004 [ 243.407221][T15535] RBP: 00007f13393ac090 R08: 0000000000000000 R09: 0000000000000000 [ 243.407228][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.407234][T15535] R13: 00007f1338826128 R14: 00007f1338826090 R15: 00007ffc74c30b38 [ 243.407248][T15535] [ 243.514525][ T42] audit: type=1800 audit(243.358:16117): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 243.521105][ T42] audit: type=1800 audit(243.448:16118): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 243.558839][ T42] audit: type=1400 audit(243.498:16119): avc: denied { write } for pid=15541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.567450][ T42] audit: type=1800 audit(243.498:16120): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 243.601258][ T42] audit: type=1800 audit(243.548:16121): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 243.613833][ T42] audit: type=1800 audit(243.558:16122): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 243.657248][ T42] audit: type=1400 audit(243.598:16123): avc: denied { write } for pid=15564 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.670485][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.684661][T15568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2679'. [ 243.737523][T15448] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.737572][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.737680][T15448] bridge_slave_0: entered allmulticast mode [ 243.739266][T15448] bridge_slave_0: entered promiscuous mode [ 243.739901][T15569] cgroup: noprefix used incorrectly [ 243.754986][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13 [ 243.796579][T15448] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.802243][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.806911][T15448] bridge_slave_1: entered allmulticast mode [ 243.810184][T15448] bridge_slave_1: entered promiscuous mode [ 243.839805][T15448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.893635][T15448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.932855][T15448] team0: Port device team_slave_0 added [ 243.937527][T15448] team0: Port device team_slave_1 added [ 244.001265][T15448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.006676][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.028957][T15448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.035716][T15448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.038503][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.049786][T15448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.061790][T12380] hsr_slave_0: left promiscuous mode [ 244.065369][T12380] hsr_slave_1: left promiscuous mode [ 244.067571][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.070579][T12380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.088795][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.091384][T12380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.110622][T12380] veth1_macvtap: left promiscuous mode [ 244.112475][T12380] veth0_macvtap: left promiscuous mode [ 244.114399][T12380] veth1_vlan: left promiscuous mode [ 244.116148][T12380] veth0_vlan: left promiscuous mode [ 244.158458][T15597] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 244.211786][ T5739] Bluetooth: hci0: command tx timeout [ 244.323133][T15608] kAFS: unable to lookup cell 'syz0' [ 244.360887][T12380] team0 (unregistering): Port device team_slave_1 removed [ 244.368121][T12380] team0 (unregistering): Port device team_slave_0 removed [ 244.456541][ T5439] 8021q: adding VLAN 0 to HW filter on device eth14 [ 244.515539][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2689'. [ 244.517220][T15448] hsr_slave_0: entered promiscuous mode [ 244.521465][T15448] hsr_slave_1: entered promiscuous mode [ 244.523760][T15448] debugfs: 'hsr0' already exists in 'hsr' [ 244.525637][T15448] Cannot create hsr debugfs directory [ 244.558417][T15612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15612 comm=syz.6.2689 [ 244.738970][ T5439] 8021q: adding VLAN 0 to HW filter on device eth15 [ 244.820945][T15626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.979217][ T5626] IPVS: starting estimator thread 0... [ 245.013152][ T5439] 8021q: adding VLAN 0 to HW filter on device eth16 [ 245.017385][T15448] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.024276][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.026986][T15448] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.031669][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.034440][T15448] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.039311][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.042078][T15448] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 245.048455][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.079137][T15639] IPVS: using max 28 ests per chain, 67200 per kthread [ 245.095042][T15448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.096492][T15643] 9pnet_fd: Insufficient options for proto=fd [ 245.102557][T15643] netlink: ct_mark mask cannot be 0 [ 245.104820][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.107785][T15448] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.108169][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 245.113568][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.115906][T10556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.156735][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.161498][T10556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.165593][T15643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2696'. [ 245.211062][T15664] netlink: 'syz.6.2699': attribute type 2 has an invalid length. [ 245.213598][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 245.558347][T15448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.586542][T15696] tun0: tun_chr_ioctl cmd 1074025675 [ 245.588398][T15696] tun0: persist enabled [ 245.591455][T15696] tun0: tun_chr_ioctl cmd 1074025675 [ 245.593175][T15696] tun0: persist enabled [ 245.793289][T15448] veth0_vlan: entered promiscuous mode [ 245.827533][T15448] veth1_vlan: entered promiscuous mode [ 245.854829][T15448] veth0_macvtap: entered promiscuous mode [ 245.861797][T15448] veth1_macvtap: entered promiscuous mode [ 245.882787][T15448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.886308][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2709'. [ 245.895137][T15448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.983493][T15722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2711'. [ 246.022167][T12380] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.025173][T12380] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.027998][T12380] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.032237][T12380] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.063224][T10556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.068134][T10556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.111606][ T6495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.123261][ T6495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.269898][ T5739] Bluetooth: hci0: command tx timeout [ 246.280847][T15736] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2655'. [ 246.432031][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2716'. [ 246.448913][ T841] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 246.602041][ T841] usb 12-1: Using ep0 maxpacket: 8 [ 246.604940][ T841] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.609231][ T841] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 246.612058][ T841] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.615913][ T841] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.623561][ T841] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.626907][ T841] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.641650][ T841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.790253][T15764] cgroup: Unknown subsys name 'cpuset' [ 246.851275][ T841] usb 12-1: usb_control_msg returned -32 [ 246.853279][ T841] usbtmc 12-1:16.0: can't read capabilities [ 247.153483][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.204988][T15788] usbtmc 12-1:16.0: control status returned 0 [ 247.228268][ T50] usb 12-1: USB disconnect, device number 2 [ 247.326223][T15799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15799 comm=syz.6.2731 [ 248.012127][ T5803] hid_parser_main: 50 callbacks suppressed [ 248.012175][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.021261][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.024644][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.027937][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.033554][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.044435][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.050584][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.058010][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.061932][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.065143][ T5803] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 248.084636][ T5803] hid-generic 0006:0008:0008.000D: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 248.161585][T15836] fido_id[15836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.215846][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 248.215875][ T42] audit: type=1800 audit(248.158:16232): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 248.242011][ T42] audit: type=1800 audit(248.188:16233): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 248.262213][ T42] audit: type=1800 audit(248.208:16234): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 248.280234][ T42] audit: type=1800 audit(248.228:16235): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 248.300977][ T42] audit: type=1800 audit(248.248:16236): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 248.316837][ T42] audit: type=1800 audit(248.258:16237): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 248.348366][ T42] audit: type=1800 audit(248.288:16238): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 248.349771][ T5739] Bluetooth: hci0: command tx timeout [ 248.374755][ T42] audit: type=1800 audit(248.318:16239): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 248.404622][ T42] audit: type=1800 audit(248.348:16240): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 248.423981][ T42] audit: type=1800 audit(248.368:16241): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 248.492120][T15867] netlink: 'syz.6.2754': attribute type 2 has an invalid length. [ 248.740407][T15898] syzkaller0: entered promiscuous mode [ 248.742487][T15898] syzkaller0: entered allmulticast mode [ 248.751610][T15900] overlay: filesystem on ./file0 not supported as upperdir [ 248.771403][T15902] overlayfs: failed lookup in lower (newroot/13, name='file0', err=-40): overlapping layers [ 248.843764][T15908] sit1: entered promiscuous mode [ 248.853227][T15908] __nla_validate_parse: 4 callbacks suppressed [ 248.853238][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2767'. [ 248.939803][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'. [ 249.072244][T15935] netlink: 'syz.7.2779': attribute type 1 has an invalid length. [ 249.090334][T15937] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 249.159090][T15935] pimreg: entered allmulticast mode [ 249.890126][T15934] pimreg: left allmulticast mode [ 249.973793][T15970] netlink: zone id is out of range [ 249.979673][T15970] netlink: zone id is out of range [ 250.065995][T15975] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.218980][T15990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'. [ 250.236572][T15990] comedi comedi3: comedi_config --init_data is deprecated [ 250.428925][ T5739] Bluetooth: hci0: command tx timeout [ 250.437019][T15993] netlink: 11148 bytes leftover after parsing attributes in process `syz.7.2793'. [ 250.683827][T16009] scsi host6: ata_generic [ 250.700913][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2801'. [ 250.732242][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2801'. [ 250.756270][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'. [ 250.758463][T16037] JFS: discard option not supported on device [ 250.780278][T16009] scsi host7: ata_generic [ 250.793804][T16009] ata7: PATA max UDMA/100 cmd 0xc0a0 ctl 0xfeaf5000 bmdma 0x380800004000 irq 23 lpm-pol 0 [ 250.800695][T16037] Mount JFS Failure: -5 [ 250.801958][T16037] jfs_mount failed w/return code = -5 [ 250.814300][T16009] ata8: DUMMY [ 250.915191][T16051] x_tables: duplicate underflow at hook 1 [ 250.943591][T16055] program syz.6.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.026267][T16071] binder: 16070:16071 ioctl c0306201 0 returned -14 [ 251.053608][T16074] netlink: 4376 bytes leftover after parsing attributes in process `syz.8.2812'. [ 251.056737][T16074] netlink: 4376 bytes leftover after parsing attributes in process `syz.8.2812'. [ 251.070784][T16078] usbip-vudc usbip-vudc.0: gadget not bound [ 251.191559][T16086] netlink: 'syz.2.2817': attribute type 11 has an invalid length. [ 251.255232][T16086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.311681][T16086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.317438][T16086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.328205][T16086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.350638][T10441] lo speed is unknown, defaulting to 1000 [ 251.406645][T16086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.412531][ T13] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 251.423084][ T13] bond2: (slave veth3): making interface the new active one [ 251.432133][T16110] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.8.2823:16110 [ 251.440209][ T13] bond2: active interface up! [ 251.499758][T16115] netlink: 'syz.8.2825': attribute type 1 has an invalid length. [ 251.532347][T16115] bond1: entered promiscuous mode [ 251.536404][T16115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.588609][T16115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.592415][T16115] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 251.597920][T16115] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 251.605770][T16115] bond1: (slave xfrm1): making interface the new active one [ 251.608227][T16115] xfrm1: entered promiscuous mode [ 251.614330][T16115] xfrm1: left promiscuous mode [ 251.814372][T16153] fuse: Unknown parameter 'fd÷0x0000000000000004' [ 251.980809][T16172] ip6gretap0: entered promiscuous mode [ 251.985761][T16172] macsec1: entered promiscuous mode [ 252.027324][T16175] overlay: Unknown parameter 'barrier' [ 252.056724][T16176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 252.129611][T16182] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 252.261863][T16191] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2851'. [ 252.898624][T16234] lo speed is unknown, defaulting to 1000 [ 253.120377][T16239] netlink: 'syz.2.2864': attribute type 1 has an invalid length. [ 253.126869][T16239] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 253.251909][ T42] kauditd_printk_skb: 163 callbacks suppressed [ 253.251942][ T42] audit: type=1800 audit(253.198:16405): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 253.273968][ T42] audit: type=1800 audit(253.218:16406): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 253.324338][ T42] audit: type=1800 audit(253.268:16407): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 253.406743][ T42] audit: type=1800 audit(253.348:16408): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 253.427010][ T42] audit: type=1800 audit(253.368:16409): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 253.443473][ T42] audit: type=1800 audit(253.378:16410): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 253.444507][T16262] program syz.2.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.465710][ T42] audit: type=1800 audit(253.408:16411): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17059 res=0 errno=0 [ 253.481223][ T42] audit: type=1800 audit(253.418:16412): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17188 res=0 errno=0 [ 253.494095][ T42] audit: type=1800 audit(253.438:16413): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 253.511060][ T42] audit: type=1326 audit(253.458:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.7.2873" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e419e0d9 code=0x0 [ 253.596607][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.597450][T16278] futex_wake_op: syz.2.2876 tries to shift op by 144; fix this program [ 253.599338][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.611671][T16278] futex_wake_op: syz.2.2876 tries to shift op by 144; fix this program [ 253.671628][T16270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.677842][T16270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.779152][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.782082][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.788862][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.791730][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.880692][T16291] jffs2: notice: (16291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (4 unchecked, 0 orphan) and 8 of xref (0 dead, 0 orphan) found. [ 254.004064][T16301] __nla_validate_parse: 3 callbacks suppressed [ 254.004077][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2882'. [ 254.009943][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2882'. [ 254.013325][T16301] netlink: 'syz.8.2882': attribute type 20 has an invalid length. [ 254.137008][T16317] netlink: 'syz.8.2886': attribute type 39 has an invalid length. [ 254.140600][T16317] hsr_slave_0 (unregistering): left promiscuous mode [ 254.865827][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2901'. [ 254.869498][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2901'. [ 255.161157][T16375] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.550346][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.560155][T12380] bridge_slave_1: left allmulticast mode [ 255.562369][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.568357][T12380] bridge_slave_0: left allmulticast mode [ 255.571458][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.777207][T12380] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 255.779690][T12380] ipip0 (unregistering): left promiscuous mode [ 255.821925][T12380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.825739][T12380] bond0 (unregistering): Released all slaves [ 255.835056][T12380] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 255.839252][T12380] bond1 (unregistering): Released all slaves [ 255.846822][T12380] bond2 (unregistering): Released all slaves [ 255.861232][T12380] bond3 (unregistering): Released all slaves [ 255.871047][T12380] bond4 (unregistering): Released all slaves [ 256.214867][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 256.383155][T16422] Bluetooth: hci2: Frame reassembly failed (-84) [ 256.406035][ T6495] Bluetooth: hci2: Frame reassembly failed (-84) [ 256.419971][T16431] cgroup2: Unknown parameter 'euid' [ 256.499831][T16423] gretap1: entered allmulticast mode [ 256.600411][T16447] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 256.612309][T16450] SELinux: policydb magic number 0x756e698c does not match expected magic number 0xf97cff8c [ 256.615458][T16450] SELinux: failed to load policy [ 256.622495][T16450] nvmet: adding nsid 1 to subsystem testnqn [ 256.629029][T16450] [ 256.629959][T16450] ====================================================== [ 256.632171][T16450] WARNING: possible circular locking dependency detected [ 256.634338][T16450] syzkaller #0 Tainted: G L [ 256.636220][T16450] ------------------------------------------------------ [ 256.638379][T16450] syz.7.2922/16450 is trying to acquire lock: [ 256.640454][T16450] ffff88803d25fc38 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 256.643660][T16450] [ 256.643660][T16450] but task is already holding lock: [ 256.645895][T16450] ffff88805e073068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 256.648586][T16450] [ 256.648586][T16450] which lock already depends on the new lock. [ 256.648586][T16450] [ 256.651691][T16450] [ 256.651691][T16450] the existing dependency chain (in reverse order) is: [ 256.654418][T16450] [ 256.654418][T16450] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 256.656645][T16450] lock_acquire+0x1b9/0x370 [ 256.658139][T16450] __mutex_lock+0x1a4/0x1bd0 [ 256.659742][T16450] nvmet_ns_device_path_store+0x57/0x1c0 [ 256.661663][T16450] configfs_write_iter+0x302/0x4e0 [ 256.663442][T16450] vfs_write+0x6ac/0x1050 [ 256.664995][T16450] ksys_write+0x12a/0x250 [ 256.666537][T16450] do_syscall_64+0x115/0x870 [ 256.668074][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.670188][T16450] [ 256.670188][T16450] -> #1 (&p->frag_sem){++++}-{4:4}: [ 256.672554][T16450] lock_acquire+0x1b9/0x370 [ 256.674170][T16450] down_read+0x99/0x4c0 [ 256.675780][T16450] __configfs_open_file+0xe8/0x9c0 [ 256.677555][T16450] do_dentry_open+0x6ab/0x14d0 [ 256.679356][T16450] vfs_open+0x82/0x3f0 [ 256.680852][T16450] dentry_open+0x71/0xd0 [ 256.682376][T16450] ima_calc_file_hash+0xe1/0x380 [ 256.684087][T16450] ima_collect_measurement+0x94f/0xb30 [ 256.686005][T16450] process_measurement+0xdfe/0x2350 [ 256.687789][T16450] ima_file_check+0xc3/0x110 [ 256.689593][T16450] security_file_post_open+0xc4/0x210 [ 256.691463][T16450] path_openat+0x985/0x4280 [ 256.693068][T16450] do_file_open+0x20e/0x430 [ 256.694700][T16450] do_sys_openat2+0x10f/0x1e0 [ 256.696339][T16450] __x64_sys_openat+0x12d/0x210 [ 256.698054][T16450] do_syscall_64+0x115/0x870 [ 256.699912][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.701914][T16450] [ 256.701914][T16450] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 256.704500][T16450] check_prev_add+0xeb/0xe60 [ 256.706061][T16450] __lock_acquire+0x136c/0x1a40 [ 256.707708][T16450] lock_acquire+0x1b9/0x370 [ 256.709265][T16450] __mutex_lock+0x1a4/0x1bd0 [ 256.710822][T16450] process_measurement+0x5ab/0x2350 [ 256.712527][T16450] ima_file_check+0xc3/0x110 [ 256.714082][T16450] security_file_post_open+0xc4/0x210 [ 256.715862][T16450] path_openat+0x985/0x4280 [ 256.717418][T16450] do_file_open+0x20e/0x430 [ 256.718988][T16450] file_open_name+0x1c3/0x3e0 [ 256.720577][T16450] filp_open+0x2e/0x50 [ 256.721999][T16450] nvmet_file_ns_enable+0x95/0x420 [ 256.723730][T16450] nvmet_ns_enable+0x35f/0x5d0 [ 256.725376][T16450] nvmet_ns_enable_store+0x11e/0x160 [ 256.727213][T16450] configfs_write_iter+0x302/0x4e0 [ 256.728965][T16450] vfs_write+0x6ac/0x1050 [ 256.730505][T16450] ksys_write+0x12a/0x250 [ 256.732055][T16450] do_syscall_64+0x115/0x870 [ 256.733667][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.735648][T16450] [ 256.735648][T16450] other info that might help us debug this: [ 256.735648][T16450] [ 256.738768][T16450] Chain exists of: [ 256.738768][T16450] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 256.738768][T16450] [ 256.743138][T16450] Possible unsafe locking scenario: [ 256.743138][T16450] [ 256.745367][T16450] CPU0 CPU1 [ 256.746980][T16450] ---- ---- [ 256.748611][T16450] lock(&subsys->lock); [ 256.750154][T16450] lock(&p->frag_sem); [ 256.752202][T16450] lock(&subsys->lock); [ 256.754290][T16450] lock(&ima_iint_mutex_key[depth]); [ 256.755933][T16450] [ 256.755933][T16450] *** DEADLOCK *** [ 256.755933][T16450] [ 256.758414][T16450] 6 locks held by syz.7.2922/16450: [ 256.760105][T16450] #0: ffff8880344695f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 256.762970][T16450] #1: ffff88802407e450 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 256.765809][T16450] #2: ffff888039a2f480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 256.768864][T16450] #3: ffff88816dab2fb0 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 256.771905][T16450] #4: ffffffff8fd29b08 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 256.775082][T16450] #5: ffff88805e073068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 256.777980][T16450] [ 256.777980][T16450] stack backtrace: [ 256.779777][T16450] CPU: 0 UID: 0 PID: 16450 Comm: syz.7.2922 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.779796][T16450] Tainted: [L]=SOFTLOCKUP [ 256.779800][T16450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.779816][T16450] Call Trace: [ 256.779829][T16450] [ 256.779834][T16450] dump_stack_lvl+0x100/0x190 [ 256.779858][T16450] print_circular_bug.cold+0x178/0x1c7 [ 256.779886][T16450] check_noncircular+0x146/0x160 [ 256.779900][T16450] ? arch_stack_walk+0xa6/0xf0 [ 256.779921][T16450] check_prev_add+0xeb/0xe60 [ 256.779935][T16450] ? stack_trace_save+0x8e/0xc0 [ 256.779954][T16450] __lock_acquire+0x136c/0x1a40 [ 256.779971][T16450] lock_acquire+0x1b9/0x370 [ 256.779985][T16450] ? process_measurement+0x5ab/0x2350 [ 256.779998][T16450] ? __pfx___might_resched+0x10/0x10 [ 256.780024][T16450] __mutex_lock+0x1a4/0x1bd0 [ 256.780040][T16450] ? process_measurement+0x5ab/0x2350 [ 256.780052][T16450] ? process_measurement+0x5ab/0x2350 [ 256.780064][T16450] ? __pfx___mutex_lock+0x10/0x10 [ 256.780080][T16450] ? __pfx___might_resched+0x10/0x10 [ 256.780095][T16450] ? down_write+0x146/0x1f0 [ 256.780113][T16450] ? process_measurement+0x5ab/0x2350 [ 256.780125][T16450] process_measurement+0x5ab/0x2350 [ 256.780138][T16450] ? find_held_lock+0x2b/0x80 [ 256.780148][T16450] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 256.780168][T16450] ? __pfx_process_measurement+0x10/0x10 [ 256.780181][T16450] ? avc_has_perm+0x135/0x1e0 [ 256.780193][T16450] ? __pfx_avc_has_perm+0x10/0x10 [ 256.780204][T16450] ? hook_file_open+0x24f/0x8f0 [ 256.780222][T16450] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 256.780246][T16450] ima_file_check+0xc3/0x110 [ 256.780258][T16450] ? __pfx_ima_file_check+0x10/0x10 [ 256.780272][T16450] security_file_post_open+0xc4/0x210 [ 256.780288][T16450] path_openat+0x985/0x4280 [ 256.780302][T16450] ? stack_depot_save_flags+0x479/0x9d0 [ 256.780326][T16450] ? __pfx_path_openat+0x10/0x10 [ 256.780337][T16450] ? kasan_save_stack+0x3f/0x50 [ 256.780357][T16450] ? kasan_save_stack+0x30/0x50 [ 256.780370][T16450] ? kasan_save_track+0x14/0x30 [ 256.780382][T16450] ? __kasan_slab_alloc+0x89/0x90 [ 256.780397][T16450] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 256.780412][T16450] ? do_getname_kernel+0x5d/0x250 [ 256.780425][T16450] ? filp_open+0x1d/0x50 [ 256.780438][T16450] ? nvmet_file_ns_enable+0x95/0x420 [ 256.780454][T16450] do_file_open+0x20e/0x430 [ 256.780466][T16450] ? __pfx_do_file_open+0x10/0x10 [ 256.780483][T16450] ? rcu_is_watching+0x12/0xc0 [ 256.780509][T16450] file_open_name+0x1c3/0x3e0 [ 256.780523][T16450] ? __pfx_file_open_name+0x10/0x10 [ 256.780536][T16450] ? do_getname_kernel+0x5d/0x250 [ 256.780549][T16450] ? __asan_memcpy+0x3c/0x60 [ 256.780561][T16450] ? do_getname_kernel+0x1be/0x250 [ 256.780574][T16450] filp_open+0x2e/0x50 [ 256.780588][T16450] nvmet_file_ns_enable+0x95/0x420 [ 256.780604][T16450] nvmet_ns_enable+0x35f/0x5d0 [ 256.780619][T16450] nvmet_ns_enable_store+0x11e/0x160 [ 256.780636][T16450] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 256.780654][T16450] configfs_write_iter+0x302/0x4e0 [ 256.780670][T16450] vfs_write+0x6ac/0x1050 [ 256.780680][T16450] ? __pfx_configfs_write_iter+0x10/0x10 [ 256.780694][T16450] ? __pfx_vfs_write+0x10/0x10 [ 256.780707][T16450] ksys_write+0x12a/0x250 [ 256.780716][T16450] ? __pfx_ksys_write+0x10/0x10 [ 256.780727][T16450] do_syscall_64+0x115/0x870 [ 256.780742][T16450] ? clear_bhb_loop+0x70/0xc0 [ 256.780754][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.780766][T16450] RIP: 0033:0x7f77e419e0d9 [ 256.780777][T16450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.780787][T16450] RSP: 002b:00007f77e5137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.780798][T16450] RAX: ffffffffffffffda RBX: 00007f77e4425fa0 RCX: 00007f77e419e0d9 [ 256.780805][T16450] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000008 [ 256.780811][T16450] RBP: 00007f77e4235024 R08: 0000000000000000 R09: 0000000000000000 [ 256.780817][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.780823][T16450] R13: 00007f77e4426038 R14: 00007f77e4425fa0 R15: 00007ffe7ba94e58 [ 256.780833][T16450] [ 256.925502][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.927832][T12380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.936112][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.938485][T12380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.240777][ T65] block nbd6: Receive control failed (result -32) [ 257.243264][T16422] block nbd6: shutting down sockets [ 257.492349][T12380] IPVS: stop unused estimator thread 0... [ 258.428783][ T5726] Bluetooth: hci2: command 0x1003 tx timeout [ 258.428906][ T5739] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 258.457611][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 258.457628][ T42] audit: type=1800 audit(258.398:16508): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0