last executing test programs: 2m16.275455942s ago: executing program 3 (id=119): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x204100) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x17, 0xb, "7a91934ae4b05108"}}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x9, 0x0, 0xb0, 0xfffffffb, 0x5}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) 2m14.856364596s ago: executing program 3 (id=133): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) (fail_nth: 1) 2m13.683507598s ago: executing program 3 (id=137): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0100fe7900"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 2m13.63666931s ago: executing program 3 (id=139): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000008c0)={0x2e, 0x1e, 0x4, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1}) (fail_nth: 3) 2m13.635304842s ago: executing program 3 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000009) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r3, r4, 0x0, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000080000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000440)=0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x34b6, &(0x7f0000000040)={0x0, 0xd689, 0x20, 0x0, 0x800000c5, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x208, 0x0, 0xfeffffff, 0x208, 0x208, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@loopback, @private=0xa010102, 0xff000000, 0xff000000, 'netpci0\x00', 'team_slave_0\x00', {}, {}, 0x33, 0x0, 0x22}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0xff000000, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000003c0)="660f3a628c0f000c0f01c90fc7ae535d0f01981300f6746d260f16fbf3a70f01cb66b9800000c00f326635010000000f300f20d86635080000000f22d8", 0x3d}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write$binfmt_format(r12, &(0x7f00000001c0)='1\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x7284389efe1033e9, 0x1000, &(0x7f0000ff3000/0x1000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.552481928s ago: executing program 3 (id=143): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x800}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00', @random="6190a1f95724"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="010300000d00040004000001aecf8b0a88fb96ebf2460861c8d81c50b5682bac065db546d398defa0c8faa8eb03a531bd69fb616811360310500b21bd0228a97e5648f"], 0x12) 1m58.422083195s ago: executing program 32 (id=143): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x800}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'batadv_slave_1\x00', @random="6190a1f95724"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="010300000d00040004000001aecf8b0a88fb96ebf2460861c8d81c50b5682bac065db546d398defa0c8faa8eb03a531bd69fb616811360310500b21bd0228a97e5648f"], 0x12) 8.110558876s ago: executing program 1 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001c0010002d827000fedbdf25020000002146a02f960e19c36c2ab2dc3e44da392c3a09a4af7d1d74805bf907850a0341939ab6bb21ace9df2e8e2aadef8246a350306d53336ab02b495ed3a41f963a497dda3f7fa6840ac0c6a9028dd6cf0211c4b8f797a117248f5a5b1a608346dab769f3e818afa883", @ANYRES32=r3, @ANYBLOB="0100406614000100fe8000000000000000000000000000bb14000300fcffffff0e910000090000000800000008000800", @ANYRES32=0x0, @ANYBLOB="08000d0001800000080001007f000001"], 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000dc0fffffffff814bac0e8e84120c", @ANYRES32=0x0, @ANYBLOB="888200005888000008002500030000001c001a8018000a8014000700"/44], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x8000) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x10000009, 0x6, 0x8, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x2, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 8.110050971s ago: executing program 1 (id=1631): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x20000fe, 0x6031, 0xffffffffffffffff, 0x0) 7.929706336s ago: executing program 1 (id=1633): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d08, 0x0) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffe) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb58}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe2b5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc23}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe111}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 7.854061472s ago: executing program 1 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, 0x0, 0x5, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xc59}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0xfc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_FRAME_MATCH={0xcb, 0x5b, "eed060ea7489a8d4a6e6727dc566fa0730a67cdee32e9a5a07290ecd4c238554309ff89eb950764df57d6e91440f3ebe6cdeafff9914743f4751b61225a8c6269e622b0a68c7c34af3f5cea8250a8521a652a4534feef10a6483e1d6b55a77416c4b718e657b39ce51ecccb57f8510bb438ef7cc6f03ee80dde7c859329898a0ffdda7f30411829fe3e81452e6e31820fe02ed2eb222183ae3591ef377bf643fc4f9dfcd3853b203105dae01c024ef7b14b0d485a8b7d5a444b7fdd0276e28fc2d1ab4f96174f4"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000805}, 0x8080) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x20) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d04, &(0x7f0000000040)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x40000}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x14}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) fcntl$setstatus(r3, 0x4, 0x46800) write$tcp_congestion(r3, &(0x7f0000000140)='highspeed\x00', 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000240)='syzkaller0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 7.775689218s ago: executing program 1 (id=1635): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='100', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) (fail_nth: 4) 7.523109486s ago: executing program 1 (id=1639): r0 = socket(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000000c0)={0x5, 0xc32, 0x1ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000b060101000000000000000003000004050001000700000a000000400000000208000940000000227b0a1ef5d8da1dd03ef4e33edf21fe21737da9ccbd8d5dfb668119dbdd79f215a07a"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01fe0f00ef01010100000000000000000000000008000000280002"], 0x60}}, 0x0) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x4) rmdir(&(0x7f0000000240)='./file1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) unlink(&(0x7f0000000340)='.\x00') sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.473680004s ago: executing program 33 (id=1639): r0 = socket(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000000c0)={0x5, 0xc32, 0x1ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000b060101000000000000000003000004050001000700000a000000400000000208000940000000227b0a1ef5d8da1dd03ef4e33edf21fe21737da9ccbd8d5dfb668119dbdd79f215a07a"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01fe0f00ef01010100000000000000000000000008000000280002"], 0x60}}, 0x0) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x4) rmdir(&(0x7f0000000240)='./file1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) unlink(&(0x7f0000000340)='.\x00') sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.166007785s ago: executing program 0 (id=1652): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x40000023e, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0xff, 0xff5, 0x5, 0x97, 0x7}]}, 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f0000000080)={0x0, 0xffff, 0x70, &(0x7f0000000000)={0x70, 0x1, {0xc, 0xb, 0xb, 0x5, 0x4, 0x8, 0x9, 0x3, 0xa5}, {0x9, 0x200, 0x8, 0x101, 0xde}, {0x8, 0x6, 0x3, 0x18000}, {0x6, 0x163, 0x3}}}) r3 = getpgid(0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000100)={r2, 0xffff, 0x0, 0x0, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x4b45, 0x3) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) (async) dup(r0) (async) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x40000023e, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0xff, 0xff5, 0x5, 0x97, 0x7}]}, 0x78) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f0000000080)={0x0, 0xffff, 0x70, &(0x7f0000000000)={0x70, 0x1, {0xc, 0xb, 0xb, 0x5, 0x4, 0x8, 0x9, 0x3, 0xa5}, {0x9, 0x200, 0x8, 0x101, 0xde}, {0x8, 0x6, 0x3, 0x18000}, {0x6, 0x163, 0x3}}}) (async) getpgid(0x0) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000100)={r2, 0xffff, 0x0, 0x0, r3}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCXONC(r4, 0x4b45, 0x3) (async) 6.165814642s ago: executing program 0 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x8000f0, 0x0) 6.079210179s ago: executing program 0 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) 6.078469108s ago: executing program 0 (id=1655): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000038c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x1, 0x7a, 0x4d, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0xfec30003, 0xf, 0x2, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0x1000, 0x4000, 0xd, 0x3, 0x1, 0x0, 0x3, 0x70, 0x0, 0xa7, 0x3}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x6, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x3}, {0x41000, 0xdddd1000, 0x8, 0x49, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0x1ffe, 0x1, 0x10, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x84, 0x3, 0x76}, {0xffffffff, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x1, 0xfffd}, 0xc0000025, 0x0, 0x0, 0x2024, 0x7, 0x0, 0x50000, [0x7, 0xb, 0x60, 0x4132]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) setgroups(0x41, 0xfffffffffffffffe) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000280)="37c870ef0c000000e20ecb0700c3a84a769112f9b6993b5209357e35105dadaedbf239a887becc8c73b4b3abeb9a9f", 0x2f}], 0x2) 5.257962861s ago: executing program 5 (id=1640): mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.018610505s ago: executing program 2 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x0, &(0x7f0000f00000/0x1000)=nil, 0x0, r2}) (fail_nth: 4) 3.847303012s ago: executing program 2 (id=1663): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000003c0)={0xa00, 0x1000, 0x10, 0x280, 0x7, 0x6f, 0x20, 0x1, {0x6, 0xa, 0x1}, {0xfffffffe, 0xa7}, {0x26, 0x9531}, {0x8, 0x6}, 0x1, 0x40, 0x0, 0x5, 0x0, 0x8, 0x2, 0x2, 0xc8a, 0x1000, 0x1, 0x3, 0x20, 0x2, 0x3, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) listen(r7, 0x5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000400)={0x0, 0x2710}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_CLOSE) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r8, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 3.452210045s ago: executing program 5 (id=1664): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x1, 0xfffffffffffefffe, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x20000000000077, 0xffdffffffffffffc, 0x0, 0x8000000, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0x677e}) 3.45193969s ago: executing program 5 (id=1665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f15a0499d3"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) setns(0xc9, 0x0) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x407b5, 0x0, 0xfffffffc, 0x7579e159, 0x0, 0xfffffdfa, 0xef4}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) (async) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) write$selinux_user(r6, &(0x7f0000000200)={'system_u:object_r:systemd_unit_file_t:s0', 0x20, 'system_u\x00'}, 0x32) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f00000004c0)=[r0, r10, r9, r6], 0x4) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r9, 0x7a6, &(0x7f0000000440)={0xffffffff, 0xdb28, 0x6, 0x8, 0x3, 0x400}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 2.928291349s ago: executing program 2 (id=1666): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) 2.308992781s ago: executing program 5 (id=1672): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000700)="000000001bed00002a75d6d38e9cb3583c321201a24dd52b110251a3a00700", 0x1f) (fail_nth: 3) 2.307220118s ago: executing program 5 (id=1673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x7, 0x7, 0x1, 0x6, 0xd8, 0xffff0000, 0xf8}, &(0x7f00000000c0)=0x9c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r2) 2.233702678s ago: executing program 5 (id=1674): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db2020020106700140003006e657464657673696d3000000000000018001680140001801000020004000000e904000003800000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x7, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="400abd000000bd0c6337fcd23fc10d497bef239a43683f10ac687bde0e0edfb83f6c8454b8229457c4a92ccc0ba0e8c0fefaea82e5fc362fec5aca9961431201b265328affff000014621a4c66676b0cea86955ce3fa155d31c251f6421cb2abf6b160ba8ff7f7deb87c6dc9d0e7fdab74e5ccd44a4e9468cd2fd546bcd6644f0c09f0ccfee5de93a99e0dae91e92f1a22eddcfd009ca06818b164fcf3d33156c69e3b2bae55c1e968a9f1feedc77df00df3e5533c0c00"/195], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000000840)={0x44, &(0x7f0000000540)={0x20, 0x0, 0xdd, "743e51de8f7cf35586f598d7f44837959a6c575fc61e1066b084645c78c3f2c439ccdf274e3fda03353f3e9937698fb3bd54af1089049df5d7b9665d3747f16d7ca4557a24e6957874dfb35e147e7804f4b4ba9a00ed282e2226faf7a6a2368ddee34654e238cb302a4a6b84006f14530bb4619f184c853bfa10b6c8363262ccfd0e594c745cad3108ce88925dfac55ee3a438459bf201ddced55b9ed8e103d4bbdb0de5ae5d15bcf0548fd8772a980e447162d75bf35f29447871cb3d2d3ca6becd6c6bd512a553d490cdfe43a389d44a8d4d4841af0912148e25617a"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "e4472d"}, &(0x7f0000000740)={0x20, 0x82, 0x2, "60e1"}, &(0x7f0000000780)={0x20, 0x83, 0x2, 'Z.'}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "49339e1c"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "8ad0e8"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000002540)=[{0x6c, 0x2000, 0x1000, &(0x7f0000001480)="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"}, {0x7, 0x0, 0x94, &(0x7f0000002480)="d4057cae6d27c6ef864a42037945f3ae74f64d558c9b765e5d92732ab8547d9b627705cfe5e7deb26b13795a24747165aa244fe14f8423de7b9d0e5561698efe9f238c6c749a96c1067aa57e331803aca28c23283308d62c493c85ba9601fb9557d8a5381aa06c51f65b38cfdcfd21442d361e34f232627c492e33309e8b0de6adceab7df58e121572cdecd59fab000000000000"}], 0x2}) 1.66766611s ago: executing program 2 (id=1675): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000002640)='./file0/../file0/file0\x00', 0x0, 0x210482c, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f00000014c0)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/58, 0x3a}, {&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/29, 0x1d}], 0x5, &(0x7f0000001400)=""/181, 0xb5}, 0x12120) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x100, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000180)='sockfs\x00', 0x0, 0x0) 925.898205ms ago: executing program 2 (id=1676): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async, rerun: 64) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r2, &(0x7f0000000400)=""/1, 0x1000) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xad, &(0x7f0000000540)={@link_local, @empty, @void, {@generic={0x8035, "67166727d222609f50a0e4e2de6afdbd6cd6b3b6a5e28cb39b637861bb2b7d4671cd2fadec0663b9b2e1ff7844853a91db4a035dfcedb31de473609129ac91f50675746d71f031d42525c030368a10755370523fedff32059f835f3c36a31d59d4789c97f032d627aee9f1a0b98e374cd329bf5ff106ae2ed263e6c361f6bb3b543b37053707c20f52223e64eefa40dc4b0315a2961f9e19a351f65ed2d7a1"}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7ff, r3, 0x4}, 0x38) (async) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000180)={r4, 0x0, 0x8, 0x3ff, 0x800, 0x8, [0xfffffffffffffff7, 0x9, 0x0, 0x6, 0x40, 0xf73]}) (async) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='nfs\x00', 0x200000, 0x0) 925.313422ms ago: executing program 4 (id=1677): socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1429, 0x20, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x180}, {&(0x7f0000000180)=@in={0x2, 0x4e1f, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)="f8dcd8193d6a6a9830e3cb2890b50499a79e4d0b1522037a6246c02dbf227a1ec9edc80d15804079e5278c634d7411b5ef27ff82d0cbe078b34ef8cb37a8504a7d4a3c32ba65f76efbde48bd29f7376fcd0b5eeff7190799744b448b1b27e3dbb93b4649bb012eefad165e846a90233041564f", 0x73}, {&(0x7f0000000400)="36f4654c28c987aa01b274f9cba334d310f62427e6917a1f892887d52dcbd976185e126e77ee83303bbc2675397c031bad308a37f28c06c59bc9ae177cbbf0b5103a177f3c6cee24fe9e1f0908261cb4ea6145c9545f1991763cb891317650", 0x5f}], 0x2, 0x0, 0x0, 0x4000001}], 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x734, 0x0, 0x0) io_setup(0x25b, &(0x7f00000001c0)) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500090008"], 0x4a) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 726.964859ms ago: executing program 4 (id=1678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r1}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r2, &(0x7f0000000700)="000000001bed00002a75d6d38e9cb3583c321201a24dd52b110251a3a00700", 0x1f) 652.412037ms ago: executing program 4 (id=1679): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (async) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x4, 0x3b}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x8, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) (async) pipe2$9p(&(0x7f0000000140), 0x80800) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r4) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x1, 0xd, 0x5, 0x6, 0xffffffff, 0xed, 0x6, 0x2}, &(0x7f0000000580)={0x56, 0xf9a, 0x9, 0x800000000008000, 0x9, 0x10002, 0x6, 0x7ff}, &(0x7f00000005c0)={0x82, 0x6, 0x6, 0x13, 0x3, 0x7ff, 0x3a58, 0x401}, &(0x7f0000000640)={r5, r6+10000000}, &(0x7f00000006c0)={&(0x7f0000000200)={[0x6620ba9c]}, 0x8}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000200010801010000000000000000010000050700f780080006400000750600024086dd00000500080400000000000000009671000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40440d1) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x49, 0x7f, 0xf260, 0x6, 0x7fff, 0x6}) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000743900509c2100060a010400000000000000000100000008ff7f00000000000900010073797a300000000028000480240001800b0001007470726f78790000140002800800014000000001080002400000000b140000001100010000000000000000000000000a28d2770a9d64e97ef654b1cbb27854db04e00c84dc8f77db1b89cd082a2b02d6c2400af050d989e6afe1814bfe0010882463ccd69a0bd469b13f87fd493d5a043e09025d66e1a91b8f5d564b04c172dd57c9e1a7cc966116e35683dcdad8eb39aa34e3bd4261eb2a37593419c8f72836050cf524d31fae6af9b93c302ee4baddbb9c7468f133e99b52602180f1806f18cf840c6c89f6de848ac719d0238d32"], 0xc4}}, 0x44840) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 652.305742ms ago: executing program 0 (id=1660): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4c840) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) mmap$usbmon(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x4010, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 556.340417ms ago: executing program 4 (id=1680): r0 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r2 = openat(r1, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x41, 0x40) write(r2, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) pwrite64$ublk_ch(r0, 0x0, 0xfffffffffffffe51, 0x105) 555.89517ms ago: executing program 4 (id=1681): ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0000, 0x0, {[0x9, 0xf66, 0xc9b, 0x209, 0x5, 0x125d, 0xe1, 0x100000000]}}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x7, 0x0, 0x17c, 0x0, 0x800, 0xf3, 0x3ef, 0x1, 0x2, 0xa, 0x2000009, 0x8, 0x9, 0x7ffffffffff, 0xbdc], 0x8000000, 0x3c0390}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 555.81429ms ago: executing program 0 (id=1682): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) 491.992529ms ago: executing program 4 (id=1683): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000003c0)={0xa00, 0x1000, 0x10, 0x280, 0x7, 0x6f, 0x20, 0x1, {0x6, 0xa, 0x1}, {0xfffffffe, 0xa7}, {0x26, 0x9531}, {0x8, 0x6}, 0x1, 0x40, 0x0, 0x5, 0x0, 0x8, 0x2, 0x2, 0xc8a, 0x1000, 0x1, 0x3, 0x20, 0x2, 0x3, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) listen(r7, 0x5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000400)={0x0, 0x2710}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_CLOSE) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r8, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 0s ago: executing program 2 (id=1684): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_SET_REG(r4, 0x0, 0x54) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x1fd, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0, 0x5}], 0x38) kernel console output (not intermixed with test programs): .16.3-2 04/01/2014 [ 156.677090][T10130] Call Trace: [ 156.677094][T10130] [ 156.677099][T10130] dump_stack_lvl+0x100/0x190 [ 156.677120][T10130] should_fail_ex.cold+0x5/0xa [ 156.677137][T10130] should_failslab+0xc2/0x120 [ 156.677155][T10130] __kmalloc_noprof+0xfc/0x840 [ 156.677168][T10130] ? tomoyo_encode2+0xfb/0x3c0 [ 156.677187][T10130] tomoyo_encode2+0xfb/0x3c0 [ 156.677204][T10130] tomoyo_encode+0x29/0x50 [ 156.677219][T10130] tomoyo_realpath_from_path+0x18c/0x690 [ 156.677238][T10130] tomoyo_mount_acl+0x1b6/0x8b0 [ 156.677252][T10130] ? is_bpf_text_address+0x8a/0x1a0 [ 156.677268][T10130] ? is_bpf_text_address+0x8a/0x1a0 [ 156.677286][T10130] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.677301][T10130] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 156.677315][T10130] ? kernel_text_address+0x8d/0x100 [ 156.677333][T10130] ? unwind_get_return_address+0x59/0xa0 [ 156.677350][T10130] ? arch_stack_walk+0xa6/0xf0 [ 156.677366][T10130] ? __lock_acquire+0x5c0/0x1f40 [ 156.677385][T10130] ? tomoyo_mount_permission+0x1f6/0x460 [ 156.677401][T10130] ? tomoyo_domain+0xb2/0x150 [ 156.677411][T10130] ? tomoyo_profile+0x47/0x60 [ 156.677429][T10130] tomoyo_mount_permission+0x214/0x460 [ 156.677452][T10130] ? tomoyo_mount_permission+0x1f6/0x460 [ 156.677470][T10130] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 156.677493][T10130] security_sb_mount+0xdd/0x270 [ 156.677509][T10130] path_mount+0x158/0x24c0 [ 156.677524][T10130] ? __pfx_path_mount+0x10/0x10 [ 156.677535][T10130] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.677550][T10130] ? putname+0xb1/0x110 [ 156.677565][T10130] ? kmem_cache_free+0x127/0x6c0 [ 156.677581][T10130] ? __x64_sys_mount+0x293/0x310 [ 156.677591][T10130] __x64_sys_mount+0x293/0x310 [ 156.677602][T10130] ? __pfx___x64_sys_mount+0x10/0x10 [ 156.677618][T10130] do_syscall_64+0x123/0x790 [ 156.677631][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.677643][T10130] RIP: 0033:0x7f7d5fd9e159 [ 156.677653][T10130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.677663][T10130] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.677675][T10130] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 156.677682][T10130] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 156.677689][T10130] RBP: 00007f7d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 156.677712][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.677720][T10130] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 156.677736][T10130] [ 156.677804][T10130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.680580][T10132] FAULT_INJECTION: forcing a failure. [ 156.680580][T10132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.680599][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(full) [ 156.680611][T10132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.680618][T10132] Call Trace: [ 156.680623][T10132] [ 156.680627][T10132] dump_stack_lvl+0x100/0x190 [ 156.680648][T10132] should_fail_ex.cold+0x5/0xa [ 156.680665][T10132] _copy_from_user+0x2e/0xd0 [ 156.680680][T10132] mtdchar_blkpg_ioctl+0xd7/0x250 [ 156.680693][T10132] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 156.680717][T10132] mtdchar_ioctl+0x1670/0x1fd0 [ 156.680731][T10132] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 156.680745][T10132] ? lock_acquire+0x1d1/0x380 [ 156.680758][T10132] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 156.680773][T10132] ? rcu_is_watching+0x13/0xc0 [ 156.680789][T10132] ? trace_contention_end+0x126/0x160 [ 156.680804][T10132] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 156.680817][T10132] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.680834][T10132] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 156.680853][T10132] ? __pfx___mutex_lock+0x10/0x10 [ 156.680868][T10132] ? __fget_files+0x34/0x3d0 [ 156.680891][T10132] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 156.680904][T10132] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 156.680917][T10132] __x64_sys_ioctl+0x18e/0x210 [ 156.680931][T10132] do_syscall_64+0x123/0x790 [ 156.680945][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.680957][T10132] RIP: 0033:0x7fdea199e159 [ 156.680966][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.680977][T10132] RSP: 002b:00007fdea2828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.680991][T10132] RAX: ffffffffffffffda RBX: 00007fdea1c25fa0 RCX: 00007fdea199e159 [ 156.680998][T10132] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003 [ 156.681005][T10132] RBP: 00007fdea2828090 R08: 0000000000000000 R09: 0000000000000000 [ 156.681012][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.681018][T10132] R13: 00007fdea1c26038 R14: 00007fdea1c25fa0 R15: 00007ffca2ea49e8 [ 156.681033][T10132] [ 156.728282][ T62] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 156.910818][ T62] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.914265][ T62] usb 9-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.914295][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 156.916371][ T62] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.916390][ T62] usb 9-1: Product: syz [ 156.916402][ T62] usb 9-1: Manufacturer: syz [ 156.916414][ T62] usb 9-1: SerialNumber: syz [ 156.919556][ T62] usb 9-1: config 0 descriptor?? [ 156.953331][ T62] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 156.958151][T10145] FAULT_INJECTION: forcing a failure. [ 156.958151][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 156.958181][T10145] CPU: 2 UID: 0 PID: 10145 Comm: syz.1.1412 Not tainted syzkaller #0 PREEMPT(full) [ 156.958203][T10145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.958214][T10145] Call Trace: [ 156.958221][T10145] [ 156.958228][T10145] dump_stack_lvl+0x100/0x190 [ 156.958258][T10145] should_fail_ex.cold+0x5/0xa [ 156.958283][T10145] should_failslab+0xc2/0x120 [ 156.958309][T10145] __kmalloc_cache_noprof+0x91/0x6d0 [ 156.958327][T10145] ? kobject_uevent_env+0x263/0x18b0 [ 156.958357][T10145] kobject_uevent_env+0x263/0x18b0 [ 156.958389][T10145] ? rcu_is_watching+0x13/0xc0 [ 156.958415][T10145] gadget_bind_driver+0x773/0xbf0 [ 156.958438][T10145] ? __pfx_dummy_udc_async_callbacks+0x1/0x10 [ 156.958458][T10145] ? __pfx_gadget_bind_driver+0x10/0x10 [ 156.958479][T10145] really_probe+0x241/0xa60 [ 156.958506][T10145] __driver_probe_device+0x210/0x460 [ 156.958529][T10145] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 156.958551][T10145] driver_probe_device+0x4a/0x140 [ 156.958574][T10145] __driver_attach+0x21f/0x5b0 [ 156.958596][T10145] ? __pfx___driver_attach+0x10/0x10 [ 156.958618][T10145] bus_for_each_dev+0x13e/0x1d0 [ 156.958636][T10145] ? __pfx_bus_for_each_dev+0x10/0x10 [ 156.958654][T10145] ? bus_add_driver+0x2b5/0x5b0 [ 156.958679][T10145] bus_add_driver+0x305/0x5b0 [ 156.958702][T10145] driver_register+0x1e2/0x360 [ 156.958724][T10145] ? rcu_is_watching+0x13/0xc0 [ 156.958748][T10145] usb_gadget_register_driver_owner+0x132/0x210 [ 156.958771][T10145] raw_ioctl+0x1a85/0x2b80 [ 156.958798][T10145] ? __pfx_raw_ioctl+0x10/0x10 [ 156.958817][T10145] ? selinux_file_ioctl+0x13b/0x290 [ 156.958839][T10145] ? selinux_file_ioctl+0xb6/0x290 [ 156.958861][T10145] ? __pfx_raw_ioctl+0x10/0x10 [ 156.958882][T10145] __x64_sys_ioctl+0x18e/0x210 [ 156.958910][T10145] do_syscall_64+0x123/0x790 [ 156.958934][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.958954][T10145] RIP: 0033:0x7fdea199ddeb [ 156.958968][T10145] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 156.958985][T10145] RSP: 002b:00007fdea2825f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.959004][T10145] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdea199ddeb [ 156.959016][T10145] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 156.959027][T10145] RBP: 00007fdea2826fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 156.959038][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.959048][T10145] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 156.959071][T10145] [ 156.965720][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.029595][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 157.141171][ T62] usb 9-1: USB disconnect, device number 25 [ 157.171834][T10156] FAULT_INJECTION: forcing a failure. [ 157.171834][T10156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.171865][T10156] CPU: 3 UID: 0 PID: 10156 Comm: syz.2.1416 Not tainted syzkaller #0 PREEMPT(full) [ 157.171889][T10156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.171901][T10156] Call Trace: [ 157.171908][T10156] [ 157.171917][T10156] dump_stack_lvl+0x100/0x190 [ 157.171949][T10156] should_fail_ex.cold+0x5/0xa [ 157.171978][T10156] _copy_to_user+0x32/0xd0 [ 157.172006][T10156] simple_read_from_buffer+0xcb/0x170 [ 157.172035][T10156] proc_fail_nth_read+0x1af/0x230 [ 157.172064][T10156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.172093][T10156] ? rw_verify_area+0xce/0x6d0 [ 157.172114][T10156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.172139][T10156] vfs_read+0x1e4/0xb40 [ 157.172161][T10156] ? lock_acquire+0x1d1/0x380 [ 157.172184][T10156] ? __fget_files+0x34/0x3d0 [ 157.172211][T10156] ? __pfx_vfs_read+0x10/0x10 [ 157.172232][T10156] ? find_held_lock+0x2b/0x80 [ 157.172262][T10156] ? __fget_files+0x215/0x3d0 [ 157.172292][T10156] ? __fget_files+0x21f/0x3d0 [ 157.172325][T10156] ksys_read+0x12a/0x250 [ 157.172348][T10156] ? __pfx_ksys_read+0x10/0x10 [ 157.172369][T10156] ? v4l2_ioctl+0x1c5/0x250 [ 157.172397][T10156] do_syscall_64+0x123/0x790 [ 157.172424][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.172445][T10156] RIP: 0033:0x7f7d5fd5e98e [ 157.172462][T10156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.172480][T10156] RSP: 002b:00007f7d60cc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.172503][T10156] RAX: ffffffffffffffda RBX: 00007f7d60cc96c0 RCX: 00007f7d5fd5e98e [ 157.172516][T10156] RDX: 000000000000000f RSI: 00007f7d60cc90a0 RDI: 0000000000000004 [ 157.172529][T10156] RBP: 00007f7d60cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 157.172541][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.172555][T10156] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 157.172581][T10156] [ 157.211012][ T42] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 157.244609][T10165] overlayfs: failed to clone upperpath [ 157.316936][T10170] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 157.332682][T10170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.347897][ T42] usb 6-1: device descriptor read/64, error -71 [ 157.354597][T10170] bond4: (slave veth5): Enslaving as an active interface with a down link [ 157.356593][T10176] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 157.374153][T10177] bond4: (slave veth7): Enslaving as an active interface with a down link [ 157.499599][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 157.603980][ T42] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 157.730772][T10198] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 157.742854][ T42] usb 6-1: device descriptor read/64, error -71 [ 157.774502][ T43] audit: type=1400 audit(1791124948.131:739): avc: denied { write } for pid=10199 comm="syz.4.1430" name="usb_gadget" dev="configfs" ino=5812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.779254][ T43] audit: type=1400 audit(1791124948.141:740): avc: denied { write } for pid=10199 comm="syz.4.1430" name="strings" dev="configfs" ino=33274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.860601][ T42] usb usb6-port1: attempt power cycle [ 158.042003][ T3381] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 158.139867][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 158.202420][ T3381] usb 9-1: Using ep0 maxpacket: 16 [ 158.204086][ T3381] usb 9-1: New USB device found, idVendor=0bb4, idProduct=0a94, bcdDevice=c2.fb [ 158.205488][ T3381] usb 9-1: config 250 has an invalid interface number: 62 but max is 1 [ 158.205510][ T3381] usb 9-1: config 250 has an invalid interface number: 116 but max is 1 [ 158.205526][ T3381] usb 9-1: config 250 has no interface number 0 [ 158.205540][ T3381] usb 9-1: config 250 has no interface number 1 [ 158.205578][ T3381] usb 9-1: config 250 interface 62 altsetting 171 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 158.205601][ T3381] usb 9-1: config 250 interface 62 altsetting 171 has a duplicate endpoint with address 0xA, skipping [ 158.205621][ T3381] usb 9-1: config 250 interface 62 altsetting 171 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 158.205642][ T3381] usb 9-1: config 250 interface 62 altsetting 171 has an invalid descriptor for endpoint zero, skipping [ 158.205659][ T3381] usb 9-1: config 250 interface 62 altsetting 171 has a duplicate endpoint with address 0x1, skipping [ 158.205678][ T3381] usb 9-1: config 250 interface 62 has no altsetting 0 [ 158.211065][ T3381] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.211084][ T3381] usb 9-1: Product: ᐌ [ 158.211099][ T3381] usb 9-1: Manufacturer: Ї [ 158.211112][ T3381] usb 9-1: SerialNumber: syz [ 158.236940][ T42] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 158.267061][ T42] usb 6-1: device descriptor read/8, error -71 [ 158.449102][ T3381] usb 9-1: USB disconnect, device number 26 [ 158.534201][ T42] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 158.565961][ T42] usb 6-1: device descriptor read/8, error -71 [ 158.693671][ T42] usb usb6-port1: unable to enumerate USB device [ 159.084723][T10208] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 159.092129][T10208] ifb1: entered promiscuous mode [ 160.416832][T10160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.445586][ T62] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 160.469190][T10226] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 160.510808][ T43] audit: type=1400 audit(1791124950.706:741): avc: denied { write } for pid=10229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.552607][ T43] audit: type=1400 audit(1791124950.743:742): avc: denied { write } for pid=10234 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.605641][ T62] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.606664][ T62] usb 9-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.606682][ T62] usb 9-1: config 0 interface 0 has no altsetting 0 [ 160.608270][ T62] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.608289][ T62] usb 9-1: Product: syz [ 160.608298][ T62] usb 9-1: Manufacturer: syz [ 160.608306][ T62] usb 9-1: SerialNumber: syz [ 160.609766][ T62] usb 9-1: config 0 descriptor?? [ 160.617322][ T43] audit: type=1400 audit(1791124950.790:743): avc: denied { write } for pid=10236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.635474][ T62] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 160.648489][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.667536][T10243] FAULT_INJECTION: forcing a failure. [ 160.667536][T10243] name failslab, interval 1, probability 0, space 0, times 0 [ 160.667558][T10243] CPU: 2 UID: 0 PID: 10243 Comm: syz.2.1443 Not tainted syzkaller #0 PREEMPT(full) [ 160.667572][T10243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.667579][T10243] Call Trace: [ 160.667584][T10243] [ 160.667589][T10243] dump_stack_lvl+0x100/0x190 [ 160.667617][T10243] should_fail_ex.cold+0x5/0xa [ 160.667635][T10243] should_failslab+0xc2/0x120 [ 160.667656][T10243] __kmalloc_noprof+0xfc/0x840 [ 160.667670][T10243] ? raw_event_queue_add+0x82/0x220 [ 160.667690][T10243] raw_event_queue_add+0x82/0x220 [ 160.667704][T10243] gadget_bind+0x422/0x660 [ 160.667720][T10243] gadget_bind_driver+0x28c/0xbf0 [ 160.667735][T10243] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 160.667747][T10243] ? __pfx_gadget_bind_driver+0x10/0x10 [ 160.667763][T10243] really_probe+0x241/0xa60 [ 160.667781][T10243] __driver_probe_device+0x210/0x460 [ 160.667796][T10243] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 160.667814][T10243] driver_probe_device+0x4a/0x140 [ 160.667829][T10243] __driver_attach+0x21f/0x5b0 [ 160.667844][T10243] ? __pfx___driver_attach+0x10/0x10 [ 160.667859][T10243] bus_for_each_dev+0x13e/0x1d0 [ 160.667871][T10243] ? __pfx_bus_for_each_dev+0x10/0x10 [ 160.667888][T10243] ? bus_add_driver+0x2b5/0x5b0 [ 160.667905][T10243] bus_add_driver+0x305/0x5b0 [ 160.667922][T10243] driver_register+0x1e2/0x360 [ 160.667938][T10243] ? rcu_is_watching+0x13/0xc0 [ 160.667956][T10243] usb_gadget_register_driver_owner+0x132/0x210 [ 160.667973][T10243] raw_ioctl+0x1a85/0x2b80 [ 160.667990][T10243] ? __pfx_raw_ioctl+0x10/0x10 [ 160.668004][T10243] ? selinux_file_ioctl+0x13b/0x290 [ 160.668019][T10243] ? selinux_file_ioctl+0xb6/0x290 [ 160.668035][T10243] ? __pfx_raw_ioctl+0x10/0x10 [ 160.668048][T10243] __x64_sys_ioctl+0x18e/0x210 [ 160.668062][T10243] do_syscall_64+0x123/0x790 [ 160.668076][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.668087][T10243] RIP: 0033:0x7f7d5fd9ddeb [ 160.668097][T10243] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 160.668108][T10243] RSP: 002b:00007f7d60cc6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.668119][T10243] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7d5fd9ddeb [ 160.668126][T10243] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 160.668133][T10243] RBP: 00007f7d60cc7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 160.668139][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.668146][T10243] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 160.668160][T10243] [ 160.668168][T10243] raw-gadget.1 gadget.2: failed to queue connect event [ 160.668176][T10243] udc dummy_udc.2: failed to start USB Raw Gadget: -12 [ 160.668186][T10243] raw-gadget.1 gadget.2: probe with driver raw-gadget.1 failed with error -12 [ 160.669058][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.670157][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.689300][ T43] audit: type=1400 audit(1791124950.865:744): avc: denied { write } for pid=10244 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.754749][ T43] audit: type=1400 audit(1791124950.921:745): avc: denied { write } for pid=10246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.801470][ T43] audit: type=1400 audit(1791124950.978:746): avc: denied { write } for pid=10249 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.829792][ T62] usb 9-1: USB disconnect, device number 27 [ 160.869594][ T43] audit: type=1400 audit(1791124951.034:747): avc: denied { write } for pid=10251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.250974][T10271] sg_write: data in/out 17235997/217 bytes for SCSI command 0x0-- guessing data in; [ 161.250974][T10271] program syz.2.1445 not setting count and/or reply_len properly [ 161.308172][T10273] __nla_validate_parse: 1 callbacks suppressed [ 161.308186][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 161.308194][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 161.401083][T10281] overlayfs: failed to resolve './file7/file0': -2 [ 161.466050][T10289] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 161.573963][T10297] overlayfs: failed to resolve './file2': -2 [ 161.622218][T10305] vlan2: entered allmulticast mode [ 161.622233][T10305] bond0: entered allmulticast mode [ 161.622242][T10305] bridge0: entered allmulticast mode [ 161.708617][T10317] trusted_key: encrypted_key: insufficient parameters specified [ 161.739067][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 161.739083][ T43] audit: type=1400 audit(1791124951.858:753): avc: denied { mounton } for pid=10316 comm="syz.4.1462" path="/223/loop0" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.740678][ T43] audit: type=1400 audit(1791124951.858:754): avc: denied { name_bind } for pid=10316 comm="syz.4.1462" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 161.770229][T10322] overlayfs: failed to resolve './file7/file0': -2 [ 161.834307][T10328] FAULT_INJECTION: forcing a failure. [ 161.834307][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 161.834327][T10328] CPU: 3 UID: 0 PID: 10328 Comm: syz.4.1467 Not tainted syzkaller #0 PREEMPT(full) [ 161.834340][T10328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.834347][T10328] Call Trace: [ 161.834352][T10328] [ 161.834357][T10328] dump_stack_lvl+0x100/0x190 [ 161.834378][T10328] should_fail_ex.cold+0x5/0xa [ 161.834394][T10328] should_failslab+0xc2/0x120 [ 161.834413][T10328] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 161.834427][T10328] ? __alloc_skb+0x5b7/0x710 [ 161.834442][T10328] ? __alloc_skb+0x140/0x710 [ 161.834460][T10328] __alloc_skb+0x140/0x710 [ 161.834474][T10328] ? __alloc_skb+0x5b7/0x710 [ 161.834489][T10328] ? __pfx___alloc_skb+0x10/0x10 [ 161.834508][T10328] netlink_alloc_large_skb+0x69/0x150 [ 161.834525][T10328] netlink_sendmsg+0x680/0xda0 [ 161.834542][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.834559][T10328] ? selinux_socket_sendmsg+0x198/0x2f0 [ 161.834576][T10328] ____sys_sendmsg+0xa4d/0xbe0 [ 161.834588][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.834604][T10328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.834618][T10328] ? lock_acquire+0x1d1/0x380 [ 161.834631][T10328] ? get_pid_task+0x2a/0x250 [ 161.834668][T10328] ___sys_sendmsg+0x190/0x1e0 [ 161.834683][T10328] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.834696][T10328] ? get_pid_task+0x106/0x250 [ 161.834716][T10328] ? find_held_lock+0x2b/0x80 [ 161.834741][T10328] __sys_sendmsg+0x160/0x210 [ 161.834759][T10328] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.834782][T10328] do_syscall_64+0x123/0x790 [ 161.834796][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.834808][T10328] RIP: 0033:0x7f1c5e39e159 [ 161.834818][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.834829][T10328] RSP: 002b:00007f1c5f2ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.834840][T10328] RAX: ffffffffffffffda RBX: 00007f1c5e625fa0 RCX: 00007f1c5e39e159 [ 161.834847][T10328] RDX: 0000000000040080 RSI: 0000200000000180 RDI: 0000000000000003 [ 161.834854][T10328] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 161.834861][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.834868][T10328] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 161.834882][T10328] [ 161.912252][T10335] tipc: Enabling of bearer rejected, failed to enable media [ 161.914126][T10335] overlay: ./file1 is not a directory [ 161.916003][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 161.970645][ T43] audit: type=1400 audit(1791124952.064:755): avc: denied { create } for pid=10341 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 161.989343][ T43] audit: type=1400 audit(1791124952.082:756): avc: denied { write } for pid=10341 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.991338][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1473'. [ 162.045551][T10346] FAULT_INJECTION: forcing a failure. [ 162.045551][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.045580][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.4.1474 Not tainted syzkaller #0 PREEMPT(full) [ 162.045601][T10346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.045612][T10346] Call Trace: [ 162.045618][T10346] [ 162.045626][T10346] dump_stack_lvl+0x100/0x190 [ 162.045656][T10346] should_fail_ex.cold+0x5/0xa [ 162.045681][T10346] _copy_from_iter+0x1f4/0x1690 [ 162.045709][T10346] ? __pfx__copy_from_iter+0x10/0x10 [ 162.045732][T10346] ? _copy_from_iter+0x270/0x1690 [ 162.045783][T10346] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 162.045810][T10346] skb_copy_datagram_from_iter+0x11f/0x720 [ 162.045851][T10346] ? _kstrtoull+0x144/0x200 [ 162.045878][T10346] ? iov_iter_advance+0xac/0x6d0 [ 162.045898][T10346] ? __pfx__kstrtoull+0x10/0x10 [ 162.045928][T10346] tun_get_user+0x1866/0x3cc0 [ 162.045961][T10346] ? __lock_acquire+0x5c0/0x1f40 [ 162.045980][T10346] ? __pfx_tun_get_user+0x10/0x10 [ 162.046002][T10346] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.046030][T10346] ? find_held_lock+0x2b/0x80 [ 162.046051][T10346] ? tun_get+0x191/0x370 [ 162.046068][T10346] ? tun_get+0x191/0x370 [ 162.046090][T10346] tun_chr_write_iter+0xdc/0x200 [ 162.046113][T10346] vfs_write+0x6af/0x1050 [ 162.046135][T10346] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.046162][T10346] ? __pfx_vfs_write+0x10/0x10 [ 162.046181][T10346] ? find_held_lock+0x2b/0x80 [ 162.046221][T10346] ksys_write+0x12a/0x250 [ 162.046241][T10346] ? __pfx_ksys_write+0x10/0x10 [ 162.046270][T10346] do_syscall_64+0x123/0x790 [ 162.046295][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.046321][T10346] RIP: 0033:0x7f1c5e39e159 [ 162.046338][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.046356][T10346] RSP: 002b:00007f1c5f2ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.046375][T10346] RAX: ffffffffffffffda RBX: 00007f1c5e625fa0 RCX: 00007f1c5e39e159 [ 162.046387][T10346] RDX: 000000000000004a RSI: 0000200000000380 RDI: 0000000000000003 [ 162.046399][T10346] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 162.046411][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.046423][T10346] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 162.046448][T10346] [ 162.245854][ T1349] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 162.519103][ T1349] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 162.587957][T10366] FAULT_INJECTION: forcing a failure. [ 162.587957][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 162.587977][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.1.1481 Not tainted syzkaller #0 PREEMPT(full) [ 162.587990][T10366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.587997][T10366] Call Trace: [ 162.588002][T10366] [ 162.588006][T10366] dump_stack_lvl+0x100/0x190 [ 162.588027][T10366] should_fail_ex.cold+0x5/0xa [ 162.588044][T10366] should_failslab+0xc2/0x120 [ 162.588060][T10366] kmem_cache_alloc_noprof+0x92/0x6a0 [ 162.588074][T10366] ? security_file_alloc+0x34/0x2c0 [ 162.588092][T10366] security_file_alloc+0x34/0x2c0 [ 162.588108][T10366] init_file+0x95/0x480 [ 162.588124][T10366] alloc_empty_file+0x79/0x1c0 [ 162.588142][T10366] path_openat+0xdb/0x2440 [ 162.588160][T10366] ? __pfx_path_openat+0x10/0x10 [ 162.588180][T10366] do_file_open+0x20e/0x430 [ 162.588203][T10366] ? __pfx_do_file_open+0x10/0x10 [ 162.588241][T10366] ? _raw_spin_unlock+0x28/0x50 [ 162.588265][T10366] ? alloc_fd+0x471/0x7a0 [ 162.588294][T10366] do_sys_openat2+0x10f/0x1e0 [ 162.588320][T10366] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.588338][T10366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.588352][T10366] ? __fget_files+0x21f/0x3d0 [ 162.588381][T10366] __x64_sys_openat+0x12d/0x210 [ 162.588398][T10366] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.588415][T10366] ? ksys_write+0x1ac/0x250 [ 162.588432][T10366] do_syscall_64+0x123/0x790 [ 162.588446][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.588458][T10366] RIP: 0033:0x7fdea199e159 [ 162.588468][T10366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.588478][T10366] RSP: 002b:00007fdea2828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.588490][T10366] RAX: ffffffffffffffda RBX: 00007fdea1c25fa0 RCX: 00007fdea199e159 [ 162.588497][T10366] RDX: 0000000000000081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.588504][T10366] RBP: 00007fdea2828090 R08: 0000000000000000 R09: 0000000000000000 [ 162.588511][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.588517][T10366] R13: 00007fdea1c26038 R14: 00007fdea1c25fa0 R15: 00007ffca2ea49e8 [ 162.588531][T10366] [ 162.628869][T10372] FAULT_INJECTION: forcing a failure. [ 162.628869][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 162.628891][T10372] CPU: 0 UID: 0 PID: 10372 Comm: syz.1.1483 Not tainted syzkaller #0 PREEMPT(full) [ 162.628906][T10372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.628913][T10372] Call Trace: [ 162.628918][T10372] [ 162.628923][T10372] dump_stack_lvl+0x100/0x190 [ 162.628960][T10372] should_fail_ex.cold+0x5/0xa [ 162.628979][T10372] should_failslab+0xc2/0x120 [ 162.628997][T10372] __kmalloc_cache_noprof+0x91/0x6d0 [ 162.629009][T10372] ? snd_seq_port_use_ptr+0x3c/0x300 [ 162.629027][T10372] ? snd_seq_port_connect+0x61/0x540 [ 162.629046][T10372] snd_seq_port_connect+0x61/0x540 [ 162.629063][T10372] ? check_subscription_permission.isra.0+0x146/0x240 [ 162.629082][T10372] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 162.629101][T10372] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 162.629119][T10372] ? lock_acquire+0x1d1/0x380 [ 162.629136][T10372] ? clientptr+0x20/0x190 [ 162.629151][T10372] ? find_held_lock+0x2b/0x80 [ 162.629168][T10372] ? clientptr+0x80/0x190 [ 162.629185][T10372] call_seq_client_ctl+0xa3/0x130 [ 162.629202][T10372] snd_seq_kernel_client_ctl+0x35/0x50 [ 162.629219][T10372] snd_seq_oss_midi_open+0x587/0x680 [ 162.629233][T10372] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 162.629245][T10372] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 162.629264][T10372] ? __mutex_lock+0x26c/0x1bd0 [ 162.629288][T10372] ? odev_release+0x44/0x70 [ 162.629305][T10372] snd_seq_oss_synth_reset+0x439/0x890 [ 162.629319][T10372] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 162.629332][T10372] ? __pfx___fsnotify_parent+0x10/0x10 [ 162.629348][T10372] snd_seq_oss_reset+0x73/0x290 [ 162.629366][T10372] ? __pfx_odev_release+0x10/0x10 [ 162.629383][T10372] snd_seq_oss_release+0x7c/0x180 [ 162.629411][T10372] ? __pfx_odev_release+0x10/0x10 [ 162.629428][T10372] odev_release+0x4c/0x70 [ 162.629444][T10372] __fput+0x3ff/0xb50 [ 162.629465][T10372] task_work_run+0x150/0x240 [ 162.629486][T10372] ? __pfx_task_work_run+0x10/0x10 [ 162.629502][T10372] ? __x64_sys_openat+0x12d/0x210 [ 162.629524][T10372] exit_to_user_mode_loop+0x1d8/0x700 [ 162.629538][T10372] ? rcu_is_watching+0x13/0xc0 [ 162.629556][T10372] do_syscall_64+0x661/0x790 [ 162.629570][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.629582][T10372] RIP: 0033:0x7fdea199e159 [ 162.629593][T10372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.629603][T10372] RSP: 002b:00007fdea2828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.629614][T10372] RAX: ffffffffffffffea RBX: 00007fdea1c25fa0 RCX: 00007fdea199e159 [ 162.629621][T10372] RDX: 000000000002c481 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 162.629629][T10372] RBP: 00007fdea1a3506b R08: 0000000000000000 R09: 0000000000000000 [ 162.629651][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.629659][T10372] R13: 00007fdea1c26038 R14: 00007fdea1c25fa0 R15: 00007ffca2ea49e8 [ 162.629675][T10372] [ 162.639666][T10372] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 162.690299][ T43] audit: type=1400 audit(1791124952.747:757): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 162.717626][ T43] audit: type=1400 audit(1791124952.766:758): avc: denied { name_bind } for pid=10378 comm="syz.2.1485" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 162.738033][ T5841] nci: nci_rx_work: unknown MT 0x1 [ 162.793842][T10381] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 162.793869][T10381] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.795154][T10382] vhci_hcd: xmit failed -107 [ 162.797815][T10381] vhci_hcd vhci_hcd.0: Device attached [ 162.803555][ T5841] vhci_hcd vhci_hcd.0: stop threads [ 162.803567][ T5841] vhci_hcd vhci_hcd.0: release socket [ 162.807189][ T5841] vhci_hcd vhci_hcd.0: disconnect device [ 163.062569][ T1349] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 163.361274][T10350] ceph: No mds server is up or the cluster is laggy [ 163.561179][T10374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.737683][T10406] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20004 [ 163.745485][T10408] FAULT_INJECTION: forcing a failure. [ 163.745485][T10408] name failslab, interval 1, probability 0, space 0, times 0 [ 163.745514][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.2.1494 Not tainted syzkaller #0 PREEMPT(full) [ 163.745533][T10408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.745543][T10408] Call Trace: [ 163.745550][T10408] [ 163.745557][T10408] dump_stack_lvl+0x100/0x190 [ 163.745586][T10408] should_fail_ex.cold+0x5/0xa [ 163.745612][T10408] should_failslab+0xc2/0x120 [ 163.745636][T10408] __kvmalloc_node_noprof+0x113/0x9b0 [ 163.745659][T10408] ? simple_xattr_alloc+0x6c/0xd0 [ 163.745682][T10408] simple_xattr_alloc+0x6c/0xd0 [ 163.745701][T10408] simple_xattr_set+0xa8/0x3cb0 [ 163.745719][T10408] ? do_raw_spin_lock+0x128/0x260 [ 163.745770][T10408] ? find_held_lock+0x2b/0x80 [ 163.745801][T10408] ? shmem_xattr_handler_set+0x2f2/0x3c0 [ 163.745827][T10408] ? shmem_xattr_handler_set+0x326/0x3c0 [ 163.745846][T10408] shmem_xattr_handler_set+0x326/0x3c0 [ 163.745870][T10408] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 163.745889][T10408] __vfs_setxattr+0x175/0x1e0 [ 163.745915][T10408] ? __pfx___vfs_setxattr+0x10/0x10 [ 163.745937][T10408] ? __pfx_make_vfsgid+0x10/0x10 [ 163.745964][T10408] __vfs_setxattr_noperm+0x127/0x660 [ 163.745993][T10408] __vfs_setxattr_locked+0x127/0x2b0 [ 163.746022][T10408] vfs_setxattr+0x14a/0x390 [ 163.746049][T10408] ? __pfx_vfs_setxattr+0x10/0x10 [ 163.746076][T10408] ? mnt_get_write_access+0x1ec/0x2f0 [ 163.746100][T10408] ovl_xattr_set+0x253/0x5a0 [ 163.746125][T10408] ? __pfx_ovl_xattr_set+0x10/0x10 [ 163.746147][T10408] ? evm_protected_xattr_common+0x184/0x1f0 [ 163.746169][T10408] ? xattr_resolve_name+0x27d/0x3f0 [ 163.746194][T10408] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 163.746214][T10408] __vfs_setxattr+0x175/0x1e0 [ 163.746240][T10408] ? __pfx___vfs_setxattr+0x10/0x10 [ 163.746261][T10408] ? __pfx_make_vfsgid+0x10/0x10 [ 163.746288][T10408] __vfs_setxattr_noperm+0x127/0x660 [ 163.746317][T10408] __vfs_setxattr_locked+0x127/0x2b0 [ 163.746345][T10408] vfs_setxattr+0x14a/0x390 [ 163.746371][T10408] ? mnt_get_write_access+0x52/0x2f0 [ 163.746389][T10408] ? __pfx_vfs_setxattr+0x10/0x10 [ 163.746413][T10408] ? mnt_get_write_access+0x52/0x2f0 [ 163.746433][T10408] ? mnt_get_write_access+0x52/0x2f0 [ 163.746455][T10408] do_setxattr+0x145/0x180 [ 163.746481][T10408] filename_setxattr+0x167/0x1d0 [ 163.746507][T10408] ? __pfx_filename_setxattr+0x10/0x10 [ 163.746534][T10408] ? do_getname+0x191/0x390 [ 163.746553][T10408] path_setxattrat+0x1ff/0x3b0 [ 163.746579][T10408] ? __pfx_path_setxattrat+0x10/0x10 [ 163.746608][T10408] ? ksys_write+0x190/0x250 [ 163.746627][T10408] ? ksys_write+0x190/0x250 [ 163.746665][T10408] ? fput+0x7c/0x100 [ 163.746688][T10408] ? ksys_write+0x1ac/0x250 [ 163.746706][T10408] ? __pfx_ksys_write+0x10/0x10 [ 163.746728][T10408] __x64_sys_setxattr+0xc6/0x140 [ 163.746753][T10408] ? do_syscall_64+0xae/0x790 [ 163.746772][T10408] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.746791][T10408] do_syscall_64+0x123/0x790 [ 163.746816][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.746833][T10408] RIP: 0033:0x7f7d5fd9e159 [ 163.746848][T10408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.746864][T10408] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 163.746882][T10408] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 163.746893][T10408] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000001c0 [ 163.746904][T10408] RBP: 00007f7d60cc9090 R08: 0000000000000003 R09: 0000000000000000 [ 163.746915][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.746925][T10408] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 163.746949][T10408] [ 163.872979][ T5785] nci: nci_rx_work: unknown MT 0x1 [ 164.649462][T10421] overlayfs: failed to resolve './file7/file0': -2 [ 164.703045][T10412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.747814][T10426] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 164.826924][T10432] can0: slcan on ptm0. [ 164.880612][T10431] can0 (unregistered): slcan off ptm0. [ 164.929744][ T43] audit: type=1400 audit(1791124954.834:759): avc: denied { write } for pid=10434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.942214][T10436] syzkaller0: entered promiscuous mode [ 164.942235][T10436] syzkaller0: entered allmulticast mode [ 165.006858][ T43] audit: type=1400 audit(1791124954.899:760): avc: denied { write } for pid=10439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.341070][ T42] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 165.509532][ T42] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 165.510479][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.510502][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 165.510516][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 165.510535][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.823566][T10448] overlayfs: failed to resolve './file7/file0': -2 [ 165.960821][ T43] audit: type=1400 audit(1791124955.798:761): avc: denied { ioctl } for pid=10441 comm="syz.1.1504" path="socket:[33833]" dev="sockfs" ino=33833 ioctlcmd=0x6150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 166.337126][T10461] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 166.404377][T10467] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 166.506186][ T42] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 166.506220][ T42] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 166.506227][ T42] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 166.519206][ T42] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 166.524577][ T42] usb 6-1: USB disconnect, device number 37 [ 166.550281][T10478] overlayfs: failed to resolve './file7/file0': -2 [ 166.641904][ T851] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 166.683063][T10494] netlink: 'syz.0.1521': attribute type 21 has an invalid length. [ 166.683079][T10494] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.683125][T10494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.683131][T10494] IPv6: NLM_F_CREATE should be set when creating new route [ 166.683155][T10494] IPv6: NLM_F_CREATE should be set when creating new route [ 166.683165][T10494] IPv6: NLM_F_CREATE should be set when creating new route [ 166.683665][T10494] netlink: 'syz.0.1521': attribute type 21 has an invalid length. [ 166.683698][T10494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.824025][ T851] usb 9-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 166.824977][ T851] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.826862][ T851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.826882][ T851] usb 9-1: Product: syz [ 166.826897][ T851] usb 9-1: Manufacturer: syz [ 166.826911][ T851] usb 9-1: SerialNumber: syz [ 166.838242][ T851] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 167.051424][ T851] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 167.053006][ T851] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.053127][ T851] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 167.053147][ T851] usb 9-1: media controller created [ 167.057768][ T851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.266738][ T851] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 167.282044][ T851] usb 9-1: USB disconnect, device number 28 [ 167.389879][ T42] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 167.561752][ T42] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 167.564348][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.565884][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.565897][ T42] usb 6-1: Product: syz [ 167.565905][ T42] usb 6-1: Manufacturer: syz [ 167.565913][ T42] usb 6-1: SerialNumber: syz [ 167.573855][ T42] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 167.785234][ T62] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 167.812633][ T42] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 167.814586][ T42] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.814707][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 167.814727][ T42] usb 6-1: media controller created [ 167.819575][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.867589][T10518] syzkaller0: entered promiscuous mode [ 167.867605][T10518] syzkaller0: entered allmulticast mode [ 167.957271][ T62] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 167.958155][ T62] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 167.958176][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.958189][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.958200][ T62] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.958985][ T62] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 167.958998][ T62] usb 7-1: Manufacturer: syz [ 167.960363][ T62] usb 7-1: config 0 descriptor?? [ 168.398756][T10515] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1527'. [ 168.401788][ T62] usbhid 7-1:0.0: can't add hid device: -71 [ 168.401843][ T62] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 168.410312][ T62] usb 7-1: USB disconnect, device number 26 [ 168.923998][ T42] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 168.952928][ T42] usb 6-1: USB disconnect, device number 38 [ 169.252117][T10522] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.256796][T10522] syzkaller0: entered promiscuous mode [ 169.256810][T10522] syzkaller0: entered allmulticast mode [ 169.319764][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 169.319777][ T43] audit: type=1400 audit(1791124958.942:764): avc: denied { write } for pid=10530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.347329][T10536] nbd: must specify an index to disconnect [ 169.380515][ T43] audit: type=1400 audit(1791124959.008:765): avc: denied { write } for pid=10537 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.451138][T10545] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 169.453742][ T43] audit: type=1400 audit(1791124959.064:766): avc: denied { write } for pid=10542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.468052][T10545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.470506][T10550] FAULT_INJECTION: forcing a failure. [ 169.470506][T10550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.470535][T10550] CPU: 2 UID: 0 PID: 10550 Comm: syz.4.1535 Not tainted syzkaller #0 PREEMPT(full) [ 169.470555][T10550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.470567][T10550] Call Trace: [ 169.470573][T10550] [ 169.470580][T10550] dump_stack_lvl+0x100/0x190 [ 169.470614][T10550] should_fail_ex.cold+0x5/0xa [ 169.470641][T10550] _copy_to_user+0x32/0xd0 [ 169.470665][T10550] simple_read_from_buffer+0xcb/0x170 [ 169.470693][T10550] proc_fail_nth_read+0x1af/0x230 [ 169.470720][T10550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.470747][T10550] ? rw_verify_area+0xce/0x6d0 [ 169.470767][T10550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.470791][T10550] vfs_read+0x1e4/0xb40 [ 169.470813][T10550] ? lock_acquire+0x1d1/0x380 [ 169.470833][T10550] ? __fget_files+0x34/0x3d0 [ 169.470857][T10550] ? __pfx_vfs_read+0x10/0x10 [ 169.470877][T10550] ? find_held_lock+0x2b/0x80 [ 169.470904][T10550] ? __fget_files+0x215/0x3d0 [ 169.470932][T10550] ? __fget_files+0x21f/0x3d0 [ 169.470963][T10550] ksys_read+0x12a/0x250 [ 169.470983][T10550] ? __pfx_ksys_read+0x10/0x10 [ 169.471012][T10550] do_syscall_64+0x123/0x790 [ 169.471036][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.471055][T10550] RIP: 0033:0x7f1c5e35e98e [ 169.471072][T10550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.471089][T10550] RSP: 002b:00007f1c5f2adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.471107][T10550] RAX: ffffffffffffffda RBX: 00007f1c5f2ae6c0 RCX: 00007f1c5e35e98e [ 169.471120][T10550] RDX: 000000000000000f RSI: 00007f1c5f2ae0a0 RDI: 0000000000000003 [ 169.471131][T10550] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 169.471143][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.471155][T10550] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 169.471180][T10550] [ 169.488273][T10545] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 169.524970][ T43] audit: type=1400 audit(1791124959.139:767): avc: denied { write } for pid=10553 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.529278][T10545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.578577][T10564] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 169.581886][ T43] audit: type=1400 audit(1791124959.185:768): avc: denied { mount } for pid=10555 comm="syz.4.1536" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.591996][ T5812] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.630435][T10567] FAULT_INJECTION: forcing a failure. [ 169.630435][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 169.630455][T10567] CPU: 2 UID: 0 PID: 10567 Comm: syz.2.1541 Not tainted syzkaller #0 PREEMPT(full) [ 169.630470][T10567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.630477][T10567] Call Trace: [ 169.630482][T10567] [ 169.630487][T10567] dump_stack_lvl+0x100/0x190 [ 169.630509][T10567] should_fail_ex.cold+0x5/0xa [ 169.630527][T10567] should_failslab+0xc2/0x120 [ 169.630547][T10567] __kmalloc_noprof+0xfc/0x840 [ 169.630563][T10567] ? rfkill_alloc+0xb1/0x300 [ 169.630583][T10567] rfkill_alloc+0xb1/0x300 [ 169.630603][T10567] wiphy_new_nm+0x14ca/0x2350 [ 169.630620][T10567] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 169.630635][T10567] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 169.630649][T10567] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 169.630669][T10567] ieee80211_alloc_hw_nm+0x1b2e/0x2310 [ 169.630683][T10567] ? __local_bh_enable_ip+0xa5/0x120 [ 169.630699][T10567] mac80211_hwsim_new_radio+0x1de/0x6510 [ 169.630726][T10567] ? __asan_memset+0x23/0x50 [ 169.630741][T10567] ? __nla_validate_parse+0x1e7/0x28b0 [ 169.630755][T10567] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 169.630779][T10567] hwsim_new_radio_nl+0xc6b/0x13f0 [ 169.630798][T10567] ? trace_kmalloc+0xeb/0x110 [ 169.630816][T10567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.630840][T10567] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 169.630860][T10567] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 169.630883][T10567] genl_family_rcv_msg_doit+0x214/0x300 [ 169.630904][T10567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.630927][T10567] ? bpf_lsm_capable+0x9/0x10 [ 169.630939][T10567] ? security_capable+0x80/0x260 [ 169.630954][T10567] ? ns_capable+0xd2/0xf0 [ 169.630968][T10567] genl_rcv_msg+0x560/0x800 [ 169.630988][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.631007][T10567] ? __lock_acquire+0x5c0/0x1f40 [ 169.631022][T10567] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.631046][T10567] netlink_rcv_skb+0x159/0x420 [ 169.631063][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.631083][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.631105][T10567] ? netlink_deliver_tap+0x1ae/0xcc0 [ 169.631123][T10567] genl_rcv+0x28/0x40 [ 169.631140][T10567] netlink_unicast+0x585/0x850 [ 169.631160][T10567] ? __pfx_netlink_unicast+0x10/0x10 [ 169.631177][T10567] ? __pfx_sock_has_perm+0x10/0x10 [ 169.631194][T10567] netlink_sendmsg+0x8b0/0xda0 [ 169.631214][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.631232][T10567] ? selinux_socket_sendmsg+0x198/0x2f0 [ 169.631250][T10567] ____sys_sendmsg+0xa4d/0xbe0 [ 169.631263][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.631313][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.631338][T10567] ___sys_sendmsg+0x190/0x1e0 [ 169.631355][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.631372][T10567] ? futex_wait+0x11e/0x370 [ 169.631391][T10567] ? find_held_lock+0x2b/0x80 [ 169.631419][T10567] __sys_sendmsg+0x160/0x210 [ 169.631438][T10567] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.631465][T10567] do_syscall_64+0x123/0x790 [ 169.631481][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.631495][T10567] RIP: 0033:0x7f7d5fd9e159 [ 169.631505][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.631521][T10567] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.631534][T10567] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 169.631543][T10567] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 169.631551][T10567] RBP: 00007f7d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 169.631558][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.631567][T10567] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 169.631583][T10567] [ 169.720671][ T5785] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.723584][T10577] FAULT_INJECTION: forcing a failure. [ 169.723584][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.723612][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.2.1543 Not tainted syzkaller #0 PREEMPT(full) [ 169.723633][T10577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.723645][T10577] Call Trace: [ 169.723652][T10577] [ 169.723659][T10577] dump_stack_lvl+0x100/0x190 [ 169.723693][T10577] should_fail_ex.cold+0x5/0xa [ 169.723721][T10577] _copy_to_user+0x32/0xd0 [ 169.723747][T10577] simple_read_from_buffer+0xcb/0x170 [ 169.723775][T10577] proc_fail_nth_read+0x1af/0x230 [ 169.723802][T10577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.723830][T10577] ? rw_verify_area+0xce/0x6d0 [ 169.723848][T10577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.723873][T10577] vfs_read+0x1e4/0xb40 [ 169.723895][T10577] ? lock_acquire+0x1d1/0x380 [ 169.723918][T10577] ? __fget_files+0x34/0x3d0 [ 169.723943][T10577] ? __pfx_vfs_read+0x10/0x10 [ 169.723962][T10577] ? find_held_lock+0x2b/0x80 [ 169.723991][T10577] ? __fget_files+0x215/0x3d0 [ 169.724019][T10577] ? __fget_files+0x21f/0x3d0 [ 169.724051][T10577] ksys_read+0x12a/0x250 [ 169.724072][T10577] ? __pfx_ksys_read+0x10/0x10 [ 169.724092][T10577] ? v4l2_ioctl+0x1c5/0x250 [ 169.724118][T10577] do_syscall_64+0x123/0x790 [ 169.724143][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.724162][T10577] RIP: 0033:0x7f7d5fd5e98e [ 169.724178][T10577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.724195][T10577] RSP: 002b:00007f7d60cc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.724214][T10577] RAX: ffffffffffffffda RBX: 00007f7d60cc96c0 RCX: 00007f7d5fd5e98e [ 169.724228][T10577] RDX: 000000000000000f RSI: 00007f7d60cc90a0 RDI: 0000000000000005 [ 169.724238][T10577] RBP: 00007f7d60cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 169.724250][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.724261][T10577] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 169.724294][T10577] [ 169.739067][ T43] audit: type=1400 audit(1791124959.335:769): avc: denied { write } for pid=10575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.778469][T10584] overlayfs: failed to resolve './file7/file0': -2 [ 169.780199][ T43] audit: type=1400 audit(1791124959.372:770): avc: denied { getopt } for pid=10586 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.780450][ T43] audit: type=1400 audit(1791124959.372:771): avc: denied { remount } for pid=10586 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 169.780506][T10587] debugfs: Invalid uid '0x00000000ffffffff' [ 169.799415][ T43] audit: type=1400 audit(1791124959.391:772): avc: denied { write } for pid=10582 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.828753][T10581] veth1_macvtap: left promiscuous mode [ 169.910688][T10604] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 169.919941][T10604] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 169.968218][T10607] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 169.968235][T10607] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.968277][T10607] vhci_hcd vhci_hcd.0: Device attached [ 169.968326][T10608] vhci_hcd: xmit failed -107 [ 169.968860][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 169.968876][ T5785] vhci_hcd vhci_hcd.0: release socket [ 169.968893][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 170.043721][ T43] audit: type=1400 audit(1791124959.625:773): avc: denied { write } for pid=10611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.188824][ T5142] block nbd0: Possible stuck request ffff88802947e000: control (read@0,4096B). Runtime 30 seconds [ 176.456272][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 176.456283][ T43] audit: type=1400 audit(1791124965.624:781): avc: denied { write } for pid=10650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.511192][ T43] audit: type=1400 audit(1791124965.670:782): avc: denied { write } for pid=10653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.594693][ T43] audit: type=1400 audit(1791124965.755:783): avc: denied { write } for pid=10655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.647571][ T43] audit: type=1400 audit(1791124965.801:784): avc: denied { write } for pid=10658 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.631756][ T43] audit: type=1400 audit(1791124966.728:785): avc: denied { write } for pid=10661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.689523][ T43] audit: type=1400 audit(1791124966.775:786): avc: denied { write } for pid=10664 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.788122][ T43] audit: type=1400 audit(1791124966.868:787): avc: denied { write } for pid=10667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.843063][ T43] audit: type=1400 audit(1791124966.924:788): avc: denied { write } for pid=10670 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.928140][ T43] audit: type=1400 audit(1791124966.999:789): avc: denied { write } for pid=10673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.985811][ T43] audit: type=1400 audit(1791124967.055:790): avc: denied { write } for pid=10676 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.019197][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 182.019211][ T43] audit: type=1400 audit(1791124970.836:799): avc: denied { write } for pid=10705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.079557][ T43] audit: type=1400 audit(1791124970.883:800): avc: denied { write } for pid=10708 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.373000][T10717] syz_tun: entered allmulticast mode [ 184.377483][T10717] dvmrp6: entered allmulticast mode [ 184.385336][T10715] syz_tun: left allmulticast mode [ 184.414109][T10719] ip_tables: iptables: counters copy to user failed while replacing table [ 184.421847][ T43] audit: type=1400 audit(1791124973.073:801): avc: denied { map } for pid=10725 comm="syz.0.1557" path="socket:[33737]" dev="sockfs" ino=33737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 184.425473][ T43] audit: type=1400 audit(1791124973.082:802): avc: denied { unmount } for pid=6798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 184.472132][T10735] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 184.524596][T10742] overlayfs: failed to resolve './file7/file0': -2 [ 184.876460][T10757] qnx6: unable to set blocksize [ 184.932564][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'. [ 185.092084][T10768] ip_tables: iptables: counters copy to user failed while replacing table [ 185.321106][ T5842] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 185.481385][ T5842] usb 9-1: Using ep0 maxpacket: 8 [ 185.482198][ T5842] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 185.483171][ T5842] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 185.483195][ T5842] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.483225][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.488498][ T5842] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected [ 185.494956][ T5842] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 185.701989][ T5842] usb 9-1: USB disconnect, device number 29 [ 185.707395][ T5842] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 185.707928][ T5842] kobil_sct 9-1:1.0: device disconnected [ 186.332166][T10776] overlayfs: missing 'workdir' [ 186.333475][T10776] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1573'. [ 186.335150][ T43] audit: type=1400 audit(1791124974.860:803): avc: denied { ioctl } for pid=10775 comm="syz.4.1573" path="/253/bus/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3472 ioctlcmd=0x5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 186.417186][T10778] syzkaller0: entered promiscuous mode [ 186.417212][T10778] syzkaller0: entered allmulticast mode [ 187.569799][T10716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.646410][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 187.876147][ T43] audit: type=1400 audit(1791124976.301:804): avc: denied { mounton } for pid=10799 comm="syz.4.1582" path="/255/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.877502][ T43] audit: type=1400 audit(1791124976.310:805): avc: denied { read } for pid=10799 comm="syz.4.1582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.877612][ T43] audit: type=1400 audit(1791124976.310:806): avc: denied { read } for pid=10799 comm="syz.4.1582" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.877834][ T43] audit: type=1400 audit(1791124976.310:807): avc: denied { open } for pid=10799 comm="syz.4.1582" path="/255/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.877943][ T43] audit: type=1400 audit(1791124976.310:808): avc: denied { read } for pid=10799 comm="syz.4.1582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.882422][ T43] audit: type=1400 audit(1791124976.310:809): avc: denied { read } for pid=10799 comm="syz.4.1582" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 187.885708][ T851] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 187.903402][T10795] dvmrp6: entered allmulticast mode [ 187.920548][ T43] audit: type=1400 audit(1791124976.348:810): avc: denied { write } for pid=10801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.948265][ T43] audit: type=1400 audit(1791124976.376:811): avc: denied { unmount } for pid=6798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 187.972271][T10809] FAULT_INJECTION: forcing a failure. [ 187.972271][T10809] name failslab, interval 1, probability 0, space 0, times 0 [ 187.972291][T10809] CPU: 3 UID: 0 PID: 10809 Comm: syz.4.1584 Not tainted syzkaller #0 PREEMPT(full) [ 187.972304][T10809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.972311][T10809] Call Trace: [ 187.972315][T10809] [ 187.972320][T10809] dump_stack_lvl+0x100/0x190 [ 187.972340][T10809] should_fail_ex.cold+0x5/0xa [ 187.972356][T10809] should_failslab+0xc2/0x120 [ 187.972378][T10809] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 187.972393][T10809] ? nfc_llcp_find_local+0x97/0xc0 [ 187.972405][T10809] ? nfc_llcp_find_local+0x97/0xc0 [ 187.972415][T10809] ? llcp_sock_bind+0x37c/0x720 [ 187.972431][T10809] kmemdup_noprof+0x29/0x60 [ 187.972443][T10809] llcp_sock_bind+0x37c/0x720 [ 187.972456][T10809] ? tomoyo_socket_bind_permission+0x1ab/0x350 [ 187.972474][T10809] ? __pfx_llcp_sock_bind+0x10/0x10 [ 187.972496][T10809] __sys_bind+0x1a9/0x260 [ 187.972510][T10809] ? __pfx___sys_bind+0x10/0x10 [ 187.972523][T10809] ? __fget_files+0x21f/0x3d0 [ 187.972544][T10809] ? __pfx_ksys_write+0x10/0x10 [ 187.972560][T10809] __x64_sys_bind+0x72/0xb0 [ 187.972573][T10809] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.972586][T10809] do_syscall_64+0x123/0x790 [ 187.972600][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.972612][T10809] RIP: 0033:0x7f1c5e39e159 [ 187.972622][T10809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.972633][T10809] RSP: 002b:00007f1c5f2ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 187.972644][T10809] RAX: ffffffffffffffda RBX: 00007f1c5e625fa0 RCX: 00007f1c5e39e159 [ 187.972652][T10809] RDX: 0000000000000060 RSI: 0000200000001040 RDI: 0000000000000005 [ 187.972659][T10809] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 187.972665][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.972672][T10809] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 187.972686][T10809] [ 187.974729][ T43] audit: type=1400 audit(1791124976.404:812): avc: denied { write } for pid=10805 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.068955][ T43] audit: type=1400 audit(1791124976.498:813): avc: denied { write } for pid=10819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.086316][ T851] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 188.087170][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.095251][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.095265][ T851] usb 6-1: Product: syz [ 188.095273][ T851] usb 6-1: Manufacturer: syz [ 188.095280][ T851] usb 6-1: SerialNumber: syz [ 188.114650][ T851] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 188.209528][T10833] batadv_slave_1: entered allmulticast mode [ 188.210499][T10832] batadv_slave_1: left allmulticast mode [ 188.325936][ T851] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 188.327600][ T851] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.327739][ T851] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 188.327760][ T851] usb 6-1: media controller created [ 188.334115][ T851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.540334][T10787] snd_dummy snd_dummy.0: control 0:0:0:syz0:3 is already present [ 188.540811][ T851] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 188.903460][T10847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.976668][T10857] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 188.978020][T10857] FAULT_INJECTION: forcing a failure. [ 188.978020][T10857] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 188.978038][T10857] CPU: 3 UID: 0 PID: 10857 Comm: syz.2.1599 Not tainted syzkaller #0 PREEMPT(full) [ 188.978052][T10857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.978059][T10857] Call Trace: [ 188.978063][T10857] [ 188.978068][T10857] dump_stack_lvl+0x100/0x190 [ 188.978087][T10857] should_fail_ex.cold+0x5/0xa [ 188.978102][T10857] ? __lock_acquire+0x5c0/0x1f40 [ 188.978116][T10857] iommufd_get_object+0x7a/0x470 [ 188.978133][T10857] ? __pfx_iommufd_get_object+0x10/0x10 [ 188.978154][T10857] iommufd_ioas_map+0x222/0x6c0 [ 188.978168][T10857] ? __might_fault+0xc5/0x140 [ 188.978181][T10857] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 188.978200][T10857] iommufd_fops_ioctl+0x358/0x520 [ 188.978219][T10857] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 188.978235][T10857] ? __fget_files+0x34/0x3d0 [ 188.978255][T10857] ? selinux_file_ioctl+0x13b/0x290 [ 188.978270][T10857] ? selinux_file_ioctl+0xb6/0x290 [ 188.978285][T10857] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 188.978302][T10857] __x64_sys_ioctl+0x18e/0x210 [ 188.978316][T10857] do_syscall_64+0x123/0x790 [ 188.978330][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.978342][T10857] RIP: 0033:0x7f7d5fd9e159 [ 188.978351][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.978362][T10857] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.978374][T10857] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 188.978382][T10857] RDX: 0000200000000140 RSI: 0000000000003b85 RDI: 0000000000000003 [ 188.978389][T10857] RBP: 00007f7d60cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 188.978395][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.978402][T10857] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 188.978416][T10857] [ 188.983409][T10859] batadv_slave_1: entered allmulticast mode [ 188.984547][T10858] batadv_slave_1: left allmulticast mode [ 189.040939][T10864] bridge0: port 1(syz_tun) entered blocking state [ 189.041066][T10864] bridge0: port 1(syz_tun) entered disabled state [ 189.042540][T10864] syz_tun: entered promiscuous mode [ 189.049203][T10867] FAULT_INJECTION: forcing a failure. [ 189.049203][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 189.049275][T10867] CPU: 1 UID: 0 PID: 10867 Comm: syz.4.1604 Not tainted syzkaller #0 PREEMPT(full) [ 189.049298][T10867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.049308][T10867] Call Trace: [ 189.049314][T10867] [ 189.049322][T10867] dump_stack_lvl+0x100/0x190 [ 189.049353][T10867] should_fail_ex.cold+0x5/0xa [ 189.049379][T10867] should_failslab+0xc2/0x120 [ 189.049404][T10867] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.049427][T10867] ? security_file_alloc+0x34/0x2c0 [ 189.049453][T10867] security_file_alloc+0x34/0x2c0 [ 189.049476][T10867] init_file+0x95/0x480 [ 189.049501][T10867] alloc_empty_file+0x79/0x1c0 [ 189.049527][T10867] path_openat+0xdb/0x2440 [ 189.049558][T10867] ? __pfx_path_openat+0x10/0x10 [ 189.049590][T10867] do_file_open+0x20e/0x430 [ 189.049632][T10867] ? __pfx_do_file_open+0x10/0x10 [ 189.049674][T10867] ? _raw_spin_unlock+0x28/0x50 [ 189.049701][T10867] ? alloc_fd+0x471/0x7a0 [ 189.049733][T10867] do_sys_openat2+0x10f/0x1e0 [ 189.049759][T10867] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.049787][T10867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.049810][T10867] ? __fget_files+0x21f/0x3d0 [ 189.049838][T10867] __x64_sys_openat+0x12d/0x210 [ 189.049865][T10867] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.049892][T10867] ? ksys_write+0x1ac/0x250 [ 189.049921][T10867] do_syscall_64+0x123/0x790 [ 189.049944][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.049962][T10867] RIP: 0033:0x7f1c5e35e98e [ 189.049978][T10867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.049994][T10867] RSP: 002b:00007f1c5f2adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.050012][T10867] RAX: ffffffffffffffda RBX: 00007f1c5f2ae6c0 RCX: 00007f1c5e35e98e [ 189.050023][T10867] RDX: 0000000000000002 RSI: 00007f1c5f2adc00 RDI: ffffffffffffff9c [ 189.050034][T10867] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 189.050045][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.050056][T10867] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 189.050082][T10867] [ 189.619651][T10883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1611'. [ 189.630887][T10883] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.691422][T10885] syz_tun: entered allmulticast mode [ 189.692970][T10885] Illegal XDP return value 16128 on prog (id 88) dev syz_tun, expect packet loss! [ 189.693444][T10884] syz_tun: left allmulticast mode [ 189.938604][T10903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 189.951150][T10907] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 189.959944][T10907] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 190.025691][T10910] fuse: fd is not a fuse device [ 190.069632][T10912] batadv_slave_1: entered allmulticast mode [ 190.070690][T10911] batadv_slave_1: left allmulticast mode [ 190.618740][T10929] FAULT_INJECTION: forcing a failure. [ 190.618740][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 190.618768][T10929] CPU: 1 UID: 0 PID: 10929 Comm: syz.2.1628 Not tainted syzkaller #0 PREEMPT(full) [ 190.618787][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.618797][T10929] Call Trace: [ 190.618804][T10929] [ 190.618811][T10929] dump_stack_lvl+0x100/0x190 [ 190.618853][T10929] should_fail_ex.cold+0x5/0xa [ 190.618877][T10929] should_failslab+0xc2/0x120 [ 190.618905][T10929] kmem_cache_alloc_noprof+0x92/0x6a0 [ 190.618926][T10929] ? vm_area_dup+0x27/0x9d0 [ 190.618955][T10929] vm_area_dup+0x27/0x9d0 [ 190.618979][T10929] __split_vma+0x19c/0x1de0 [ 190.619002][T10929] ? __pfx___split_vma+0x10/0x10 [ 190.619017][T10929] ? mas_next_slot+0xc05/0x13a0 [ 190.619054][T10929] vms_gather_munmap_vmas+0x3a5/0x1720 [ 190.619077][T10929] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 190.619094][T10929] ? mtree_range_walk+0x72b/0xb70 [ 190.619122][T10929] ? mas_walk+0x260/0x310 [ 190.619143][T10929] __mmap_region+0x4cc/0x32e0 [ 190.619161][T10929] ? find_held_lock+0x2b/0x80 [ 190.619185][T10929] ? ima_match_policy+0x8b8/0x23e0 [ 190.619211][T10929] ? __pfx___mmap_region+0x10/0x10 [ 190.619228][T10929] ? __lock_acquire+0x5c0/0x1f40 [ 190.619259][T10929] ? process_measurement+0x1567/0x2350 [ 190.619281][T10929] ? __pfx___might_resched+0x10/0x10 [ 190.619300][T10929] ? find_held_lock+0x2b/0x80 [ 190.619328][T10929] ? process_measurement+0x4c8/0x2350 [ 190.619348][T10929] ? process_measurement+0x4c8/0x2350 [ 190.619368][T10929] ? down_write+0x146/0x1f0 [ 190.619401][T10929] ? __lock_acquire+0x5c0/0x1f40 [ 190.619425][T10929] ? __lock_acquire+0x5c0/0x1f40 [ 190.619446][T10929] ? lock_acquire+0x1d1/0x380 [ 190.619494][T10929] ? avc_has_perm_noaudit+0x145/0x470 [ 190.619529][T10929] mmap_region+0x3db/0x6d0 [ 190.619549][T10929] ? __pfx_mmap_region+0x10/0x10 [ 190.619566][T10929] ? rcu_is_watching+0x13/0xc0 [ 190.619590][T10929] ? cap_capable+0x107/0x430 [ 190.619610][T10929] ? bpf_lsm_capable+0x9/0x10 [ 190.619625][T10929] ? security_capable+0x80/0x260 [ 190.619647][T10929] do_mmap+0x12c7/0x1c30 [ 190.619674][T10929] ? lock_acquire+0x1d1/0x380 [ 190.619692][T10929] ? __pfx_do_mmap+0x10/0x10 [ 190.619724][T10929] ? __pfx_down_write_killable+0x10/0x10 [ 190.619743][T10929] ? find_held_lock+0x2b/0x80 [ 190.619771][T10929] vm_mmap_pgoff+0x28d/0x470 [ 190.619796][T10929] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 190.619814][T10929] ? lock_acquire+0x1d1/0x380 [ 190.619835][T10929] ? __mutex_unlock_slowpath+0x35d/0x930 [ 190.619860][T10929] ksys_mmap_pgoff+0xe4/0x610 [ 190.619885][T10929] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 190.619904][T10929] ? fput+0x7c/0x100 [ 190.619927][T10929] ? ksys_write+0x1ac/0x250 [ 190.619946][T10929] ? __pfx_ksys_write+0x10/0x10 [ 190.619968][T10929] __x64_sys_mmap+0x125/0x190 [ 190.619991][T10929] do_syscall_64+0x123/0x790 [ 190.620012][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.620030][T10929] RIP: 0033:0x7f7d5fd9e159 [ 190.620045][T10929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.620061][T10929] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 190.620079][T10929] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 190.620090][T10929] RDX: 0000000002000003 RSI: 0000000000600000 RDI: 00002000009fd000 [ 190.620102][T10929] RBP: 00007f7d60cc9090 R08: ffffffffffffffff R09: 0000000000000000 [ 190.620112][T10929] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000001 [ 190.620123][T10929] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 190.620147][T10929] [ 190.845974][ T1349] usb 6-1: USB disconnect, device number 39 [ 190.870672][T10934] syz_tun: entered allmulticast mode [ 190.871411][T10933] syz_tun: left allmulticast mode [ 190.920542][ T5842] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 190.929283][T10938] FAULT_INJECTION: forcing a failure. [ 190.929283][T10938] name failslab, interval 1, probability 0, space 0, times 0 [ 190.929304][T10938] CPU: 1 UID: 0 PID: 10938 Comm: syz.4.1632 Not tainted syzkaller #0 PREEMPT(full) [ 190.929316][T10938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.929323][T10938] Call Trace: [ 190.929328][T10938] [ 190.929333][T10938] dump_stack_lvl+0x100/0x190 [ 190.929353][T10938] should_fail_ex.cold+0x5/0xa [ 190.929371][T10938] should_failslab+0xc2/0x120 [ 190.929388][T10938] __kvmalloc_node_noprof+0x113/0x9b0 [ 190.929403][T10938] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 190.929417][T10938] ? io_uring_setup.cold+0x1f4/0x1cde [ 190.929432][T10938] io_uring_setup.cold+0x1f4/0x1cde [ 190.929444][T10938] ? lock_acquire+0x1d1/0x380 [ 190.929456][T10938] ? avc_has_perm_noaudit+0x56/0x470 [ 190.929476][T10938] ? __pfx_io_uring_setup+0x10/0x10 [ 190.929491][T10938] ? find_held_lock+0x2b/0x80 [ 190.929507][T10938] ? avc_has_perm_noaudit+0x11e/0x470 [ 190.929525][T10938] ? avc_has_perm_noaudit+0x11e/0x470 [ 190.929551][T10938] ? xfd_validate_state+0x129/0x190 [ 190.929567][T10938] __x64_sys_io_uring_setup+0xc2/0x170 [ 190.929583][T10938] do_syscall_64+0x123/0x790 [ 190.929597][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.929638][T10938] RIP: 0033:0x7f1c5e39e159 [ 190.929649][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.929661][T10938] RSP: 002b:00007f1c5f2adfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 190.929674][T10938] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f1c5e39e159 [ 190.929682][T10938] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000020 [ 190.929690][T10938] RBP: 00007f1c5e43506b R08: 0000000000000000 R09: 0000000000000000 [ 190.929697][T10938] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 190.929705][T10938] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffd5e97b998 [ 190.929722][T10938] [ 191.057002][T10943] tipc: New replicast peer: 127.0.0.1 [ 191.059297][T10943] tipc: Enabled bearer , priority 10 [ 191.081360][ T5842] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.082475][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.082509][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.085281][ T5842] usb 7-1: config 0 descriptor?? [ 191.159196][T10945] size and base must be multiples of 4 kiB [ 191.159210][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.1.1634 Not tainted syzkaller #0 PREEMPT(full) [ 191.159224][T10945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.159231][T10945] Call Trace: [ 191.159235][T10945] [ 191.159240][T10945] dump_stack_lvl+0x100/0x190 [ 191.159260][T10945] mtrr_del.cold+0x72/0x85 [ 191.159272][T10945] mtrr_ioctl+0xbc8/0xcf0 [ 191.159285][T10945] ? __pfx_mtrr_ioctl+0x10/0x10 [ 191.159296][T10945] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.159315][T10945] ? __fget_files+0x34/0x3d0 [ 191.159337][T10945] ? __pfx_mtrr_ioctl+0x10/0x10 [ 191.159348][T10945] proc_reg_unlocked_ioctl+0x229/0x320 [ 191.159360][T10945] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 191.159373][T10945] __x64_sys_ioctl+0x18e/0x210 [ 191.159387][T10945] do_syscall_64+0x123/0x790 [ 191.159401][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.159413][T10945] RIP: 0033:0x7fdea199e159 [ 191.159425][T10945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.159438][T10945] RSP: 002b:00007fdea2828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.159450][T10945] RAX: ffffffffffffffda RBX: 00007fdea1c25fa0 RCX: 00007fdea199e159 [ 191.159458][T10945] RDX: 0000200000000040 RSI: 00000000400c4d04 RDI: 0000000000000006 [ 191.159465][T10945] RBP: 00007fdea1a3506b R08: 0000000000000000 R09: 0000000000000000 [ 191.159473][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.159481][T10945] R13: 00007fdea1c26038 R14: 00007fdea1c25fa0 R15: 00007ffca2ea49e8 [ 191.159497][T10945] [ 191.187997][ T5734] overlayfs: failed lookup in lower (newroot/358, name='bus', err=-40): overlapping layers [ 191.188086][ T5734] overlayfs: failed lookup in lower (newroot/358, name='bus', err=-40): overlapping layers [ 191.276676][T10947] ecryptfs_get_tree: kern_path() failed [ 191.278643][T10947] Reading sb failed; rc = [-2] [ 191.302842][ T5842] usbhid 7-1:0.0: can't add hid device: -71 [ 191.302904][ T5842] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 191.306262][ T5842] usb 7-1: USB disconnect, device number 27 [ 191.478393][ T5785] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.478428][ T5785] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 191.478453][ T5785] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.591527][ T5785] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.591558][ T5785] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 191.591579][ T5785] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.610948][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.615204][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.615218][ T5842] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 191.618102][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.619126][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.620319][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.628962][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.630005][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.630729][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.638034][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.638403][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.673117][ T5785] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.673140][ T5785] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 191.673155][ T5785] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.730105][ T5785] bridge0: port 2(netdevsim0) entered disabled state [ 191.740120][ T5785] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 191.740138][ T5785] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 191.741339][ T5785] bridge0: port 2(netdevsim0) entered disabled state [ 191.745623][ T5785] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.745643][ T5785] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 191.745662][ T5785] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.775868][ T5842] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 191.776680][ T5842] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 191.776702][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 191.776714][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.778261][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.778273][ T5842] usb 7-1: Product: syz [ 191.778281][ T5842] usb 7-1: Manufacturer: syz [ 191.778288][ T5842] usb 7-1: SerialNumber: syz [ 191.852297][T10967] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 191.852315][T10967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.858130][T10967] vhci_hcd vhci_hcd.0: Device attached [ 191.859332][T10968] vhci_hcd: cannot find the pending unlink 4294967294 [ 191.866595][T10968] vhci_hcd: connection closed [ 191.868726][ T12] vhci_hcd vhci_hcd.4: stop threads [ 191.868749][ T12] vhci_hcd vhci_hcd.4: release socket [ 191.868764][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 191.960479][ T5785] dummy0: left allmulticast mode [ 191.963897][ T5785] bridge0: port 1(dummy0) entered disabled state [ 191.970432][ T5785] dvmrp6: left allmulticast mode [ 192.008371][ T1349] usb 7-1: USB disconnect, device number 28 [ 192.022966][T10931] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1629'. [ 192.125735][ T5785] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 192.126369][ T5785] bridge0 (unregistering): left allmulticast mode [ 192.137260][ T5785] bond0 (unregistering): Released all slaves [ 192.147685][T10976] bond0: Error: Cannot enslave bond to itself. [ 192.216581][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.216716][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.216817][T10955] bridge_slave_0: entered allmulticast mode [ 192.218218][T10955] bridge_slave_0: entered promiscuous mode [ 192.221368][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.221440][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.221530][T10955] bridge_slave_1: entered allmulticast mode [ 192.222971][T10955] bridge_slave_1: entered promiscuous mode [ 192.268198][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.269764][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.281034][ T5785] tipc: Disabling bearer [ 192.281324][ T5785] tipc: Disabling bearer [ 192.286067][ T5785] tipc: Disabling bearer [ 192.287270][ T5785] tipc: Left network mode [ 192.297233][T10955] team0: Port device team_slave_0 added [ 192.298542][T10955] team0: Port device team_slave_1 added [ 192.326175][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 192.326781][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.326791][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.326804][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.327651][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.327659][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.327672][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.350136][T10955] hsr_slave_0: entered promiscuous mode [ 192.350604][T10955] hsr_slave_1: entered promiscuous mode [ 192.350931][T10955] debugfs: 'hsr0' already exists in 'hsr' [ 192.350943][T10955] Cannot create hsr debugfs directory [ 192.510232][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 192.582523][ T5785] hsr_slave_0: left promiscuous mode [ 192.583270][ T5785] hsr_slave_1: left promiscuous mode [ 192.601641][ T5785] veth1_macvtap: left promiscuous mode [ 192.601665][ T5785] veth0_macvtap: left promiscuous mode [ 192.601754][ T5785] veth1_vlan: left promiscuous mode [ 192.601785][ T5785] veth0_vlan: left promiscuous mode [ 192.886580][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 192.890154][T10955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.893369][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.893784][T10955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.898415][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.901557][T10955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.906076][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.909116][T10955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.912268][T10955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.969712][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.982416][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.000753][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.000848][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.003471][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.003550][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.131582][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 193.191967][ T5785] IPVS: stop unused estimator thread 0... [ 193.364055][T11058] jffs2: notice: (11058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 193.365420][T11058] FAULT_INJECTION: forcing a failure. [ 193.365420][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 193.365492][T11058] CPU: 1 UID: 0 PID: 11058 Comm: syz.4.1656 Not tainted syzkaller #0 PREEMPT(full) [ 193.365513][T11058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.365524][T11058] Call Trace: [ 193.365530][T11058] [ 193.365538][T11058] dump_stack_lvl+0x100/0x190 [ 193.365566][T11058] should_fail_ex.cold+0x5/0xa [ 193.365610][T11058] should_failslab+0xc2/0x120 [ 193.365636][T11058] kmem_cache_alloc_noprof+0x92/0x6a0 [ 193.365657][T11058] ? do_getname+0x35/0x390 [ 193.365664][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.365679][T11058] do_getname+0x35/0x390 [ 193.365698][T11058] path_setxattrat+0x360/0x3b0 [ 193.365724][T11058] ? __pfx_path_setxattrat+0x10/0x10 [ 193.365752][T11058] ? ksys_write+0x190/0x250 [ 193.365771][T11058] ? ksys_write+0x190/0x250 [ 193.365806][T11058] ? fput+0x7c/0x100 [ 193.365828][T11058] ? ksys_write+0x1ac/0x250 [ 193.365847][T11058] ? __pfx_ksys_write+0x10/0x10 [ 193.365870][T11058] __x64_sys_setxattr+0xc6/0x140 [ 193.365893][T11058] ? do_syscall_64+0xae/0x790 [ 193.365911][T11058] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.365929][T11058] do_syscall_64+0x123/0x790 [ 193.365949][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.365966][T11058] RIP: 0033:0x7f1c5e39e159 [ 193.365980][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.365996][T11058] RSP: 002b:00007f1c5f2ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 193.366014][T11058] RAX: ffffffffffffffda RBX: 00007f1c5e625fa0 RCX: 00007f1c5e39e159 [ 193.366025][T11058] RDX: 0000200000000700 RSI: 0000200000000080 RDI: 0000200000000740 [ 193.366036][T11058] RBP: 00007f1c5f2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 193.366046][T11058] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 193.366056][T11058] R13: 00007f1c5e626038 R14: 00007f1c5e625fa0 R15: 00007ffd5e97b998 [ 193.366079][T11058] [ 193.544284][T10955] veth0_vlan: entered promiscuous mode [ 193.552659][T10955] veth1_vlan: entered promiscuous mode [ 193.566743][T10955] veth0_macvtap: entered promiscuous mode [ 193.567987][T11069] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.568898][T10955] veth1_macvtap: entered promiscuous mode [ 193.577699][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.584202][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.645564][ T5841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.645617][ T5841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.645645][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.645670][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.662948][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.662962][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.686664][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.686677][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.698156][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 193.698174][ T43] audit: type=1400 audit(1791124981.757:829): avc: denied { mounton } for pid=10955 comm="syz-executor" path="/syzkaller.UJEDbx/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 193.716126][ T43] audit: type=1400 audit(1791124981.775:830): avc: denied { mounton } for pid=10955 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.764856][T11074] syzkaller0: entered promiscuous mode [ 193.764874][T11074] syzkaller0: entered allmulticast mode [ 193.882037][ T5749] Bluetooth: hci0: command tx timeout [ 193.988389][ T5842] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 194.024271][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.024916][ T43] audit: type=1800 audit(1791124982.066:831): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1661" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 194.066109][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.082099][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.107051][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.118395][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.204769][ T5842] usb 9-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 194.234055][ T5842] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.243927][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.243948][ T5842] usb 9-1: Product: syz [ 194.243957][ T5842] usb 9-1: Manufacturer: syz [ 194.243967][ T5842] usb 9-1: SerialNumber: syz [ 194.258159][ T5842] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 194.527655][ T5842] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 194.529968][ T5842] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.530197][ T5842] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 194.530231][ T5842] usb 9-1: media controller created [ 194.550666][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.750204][ T5842] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 195.037090][T11090] FAULT_INJECTION: forcing a failure. [ 195.037090][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 195.037110][T11090] CPU: 2 UID: 0 PID: 11090 Comm: syz.2.1662 Not tainted syzkaller #0 PREEMPT(full) [ 195.037124][T11090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.037130][T11090] Call Trace: [ 195.037134][T11090] [ 195.037139][T11090] dump_stack_lvl+0x100/0x190 [ 195.037160][T11090] should_fail_ex.cold+0x5/0xa [ 195.037176][T11090] should_failslab+0xc2/0x120 [ 195.037193][T11090] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.037205][T11090] ? kvm_set_memslot+0x5de/0x1740 [ 195.037224][T11090] kvm_set_memslot+0x5de/0x1740 [ 195.037242][T11090] kvm_set_memory_region+0x149e/0x15e0 [ 195.037265][T11090] kvm_vm_ioctl+0x216a/0x4170 [ 195.037284][T11090] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 195.037307][T11090] ? kasan_quarantine_put+0x104/0x240 [ 195.037321][T11090] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.037334][T11090] ? find_held_lock+0x2b/0x80 [ 195.037360][T11090] ? tomoyo_path_number_perm+0x28f/0x580 [ 195.037375][T11090] ? tomoyo_path_number_perm+0x28f/0x580 [ 195.037391][T11090] ? tomoyo_path_number_perm+0x188/0x580 [ 195.037406][T11090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.037425][T11090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.037453][T11090] ? selinux_file_ioctl+0x13b/0x290 [ 195.037467][T11090] ? selinux_file_ioctl+0xb6/0x290 [ 195.037484][T11090] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 195.037497][T11090] __x64_sys_ioctl+0x18e/0x210 [ 195.037512][T11090] do_syscall_64+0x123/0x790 [ 195.037526][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.037538][T11090] RIP: 0033:0x7f7d5fd9e159 [ 195.037548][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.037559][T11090] RSP: 002b:00007f7d60ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.037571][T11090] RAX: ffffffffffffffda RBX: 00007f7d60026090 RCX: 00007f7d5fd9e159 [ 195.037579][T11090] RDX: 0000200000000180 RSI: 0000000040a0ae49 RDI: 0000000000000004 [ 195.037626][T11090] RBP: 00007f7d60ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 195.037636][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.037645][T11090] R13: 00007f7d60026128 R14: 00007f7d60026090 R15: 00007ffdcddde618 [ 195.037661][T11090] [ 195.481437][T10206] bond0: (slave syz_tun): Releasing backup interface [ 195.482033][T10206] syz_tun (unregistering): left allmulticast mode [ 195.590071][T11105] syzkaller0: entered promiscuous mode [ 195.590091][T11105] syzkaller0: entered allmulticast mode [ 195.591731][ T5785] syzkaller0: tun_net_xmit 70 [ 195.597430][T11105] syzkaller0: tun_net_xmit 663 [ 195.597455][T11105] syzkaller0: tun_net_xmit 663 [ 195.597470][T11105] syzkaller0: tun_net_xmit 663 [ 195.597484][T11105] syzkaller0: tun_net_xmit 663 [ 195.597497][T11105] syzkaller0: tun_net_xmit 663 [ 195.597510][T11105] syzkaller0: tun_net_xmit 663 [ 195.597525][T11105] syzkaller0: tun_net_xmit 663 [ 195.597538][T11105] syzkaller0: tun_net_xmit 663 [ 195.597552][T11105] syzkaller0: tun_net_xmit 663 [ 195.597566][T11105] syzkaller0: tun_net_xmit 663 [ 195.597598][T11105] syzkaller0: tun_net_xmit 663 [ 195.597615][T11105] syzkaller0: tun_net_xmit 663 [ 195.597627][T11105] syzkaller0: tun_net_xmit 663 [ 195.597642][T11105] syzkaller0: tun_net_xmit 663 [ 195.597659][T11105] syzkaller0: tun_net_xmit 663 [ 195.597674][T11105] syzkaller0: tun_net_xmit 663 [ 195.597687][T11105] syzkaller0: tun_net_xmit 663 [ 195.597701][T11105] syzkaller0: tun_net_xmit 663 [ 195.597714][T11105] syzkaller0: tun_net_xmit 663 [ 195.597728][T11105] syzkaller0: tun_net_xmit 663 [ 195.597741][T11105] syzkaller0: tun_net_xmit 663 [ 195.597753][T11105] syzkaller0: tun_net_xmit 663 [ 195.597768][T11105] syzkaller0: tun_net_xmit 663 [ 195.597781][T11105] syzkaller0: tun_net_xmit 663 [ 195.597796][T11105] syzkaller0: tun_net_xmit 663 [ 195.597808][T11105] syzkaller0: tun_net_xmit 663 [ 195.597841][T11105] syzkaller0: tun_net_xmit 663 [ 195.597857][T11105] syzkaller0: tun_net_xmit 663 [ 195.597869][T11105] syzkaller0: tun_net_xmit 663 [ 195.597885][T11105] syzkaller0: tun_net_xmit 663 [ 195.597897][T11105] syzkaller0: tun_net_xmit 663 [ 195.597912][T11105] syzkaller0: tun_net_xmit 663 [ 195.597924][T11105] syzkaller0: tun_net_xmit 663 [ 195.597938][T11105] syzkaller0: tun_net_xmit 663 [ 195.597951][T11105] syzkaller0: tun_net_xmit 663 [ 195.597966][T11105] syzkaller0: tun_net_xmit 663 [ 195.597979][T11105] syzkaller0: tun_net_xmit 663 [ 195.597991][T11105] syzkaller0: tun_net_xmit 663 [ 195.598006][T11105] syzkaller0: tun_net_xmit 663 [ 195.598019][T11105] syzkaller0: tun_net_xmit 663 [ 195.598034][T11105] syzkaller0: tun_net_xmit 663 [ 195.598046][T11105] syzkaller0: tun_net_xmit 663 [ 195.598060][T11105] syzkaller0: tun_net_xmit 663 [ 195.598073][T11105] syzkaller0: tun_net_xmit 663 [ 195.598088][T11105] syzkaller0: tun_net_xmit 663 [ 195.598101][T11105] syzkaller0: tun_net_xmit 663 [ 195.598115][T11105] syzkaller0: tun_net_xmit 663 [ 195.598128][T11105] syzkaller0: tun_net_xmit 663 [ 195.598142][T11105] syzkaller0: tun_net_xmit 663 [ 195.598155][T11105] syzkaller0: tun_net_xmit 663 [ 195.598167][T11105] syzkaller0: tun_net_xmit 663 [ 195.598181][T11105] syzkaller0: tun_net_xmit 663 [ 195.598194][T11105] syzkaller0: tun_net_xmit 663 [ 195.598209][T11105] syzkaller0: tun_net_xmit 663 [ 195.598221][T11105] syzkaller0: tun_net_xmit 663 [ 195.598235][T11105] syzkaller0: tun_net_xmit 663 [ 195.598248][T11105] syzkaller0: tun_net_xmit 663 [ 195.598262][T11105] syzkaller0: tun_net_xmit 663 [ 195.598275][T11105] syzkaller0: tun_net_xmit 663 [ 195.598288][T11105] syzkaller0: tun_net_xmit 663 [ 195.598303][T11105] syzkaller0: tun_net_xmit 663 [ 195.598315][T11105] syzkaller0: tun_net_xmit 663 [ 195.598330][T11105] syzkaller0: tun_net_xmit 663 [ 195.598342][T11105] syzkaller0: tun_net_xmit 663 [ 195.598357][T11105] syzkaller0: tun_net_xmit 663 [ 195.598370][T11105] syzkaller0: tun_net_xmit 663 [ 195.598384][T11105] syzkaller0: tun_net_xmit 663 [ 195.598396][T11105] syzkaller0: tun_net_xmit 663 [ 195.598408][T11105] syzkaller0: tun_net_xmit 663 [ 195.598423][T11105] syzkaller0: tun_net_xmit 663 [ 195.598435][T11105] syzkaller0: tun_net_xmit 663 [ 195.598450][T11105] syzkaller0: tun_net_xmit 663 [ 195.598462][T11105] syzkaller0: tun_net_xmit 663 [ 195.598477][T11105] syzkaller0: tun_net_xmit 663 [ 195.598489][T11105] syzkaller0: tun_net_xmit 663 [ 195.598504][T11105] syzkaller0: tun_net_xmit 663 [ 195.598516][T11105] syzkaller0: tun_net_xmit 663 [ 195.598530][T11105] syzkaller0: tun_net_xmit 663 [ 195.598543][T11105] syzkaller0: tun_net_xmit 663 [ 195.598557][T11105] syzkaller0: tun_net_xmit 663 [ 195.598571][T11105] syzkaller0: tun_net_xmit 663 [ 195.598583][T11105] syzkaller0: tun_net_xmit 663 [ 195.598598][T11105] syzkaller0: tun_net_xmit 663 [ 195.598611][T11105] syzkaller0: tun_net_xmit 663 [ 195.598626][T11105] syzkaller0: tun_net_xmit 663 [ 195.598638][T11105] syzkaller0: tun_net_xmit 663 [ 195.598657][T11105] syzkaller0: tun_net_xmit 663 [ 195.598670][T11105] syzkaller0: tun_net_xmit 663 [ 195.598685][T11105] syzkaller0: tun_net_xmit 663 [ 195.598698][T11105] syzkaller0: tun_net_xmit 663 [ 195.598712][T11105] syzkaller0: tun_net_xmit 663 [ 195.598725][T11105] syzkaller0: tun_net_xmit 663 [ 195.598740][T11105] syzkaller0: tun_net_xmit 663 [ 195.598752][T11105] syzkaller0: tun_net_xmit 663 [ 195.598766][T11105] syzkaller0: tun_net_xmit 663 [ 195.598780][T11105] syzkaller0: tun_net_xmit 663 [ 195.598794][T11105] syzkaller0: tun_net_xmit 663 [ 195.598807][T11105] syzkaller0: tun_net_xmit 663 [ 195.598819][T11105] syzkaller0: tun_net_xmit 663 [ 195.598834][T11105] syzkaller0: tun_net_xmit 663 [ 195.598846][T11105] syzkaller0: tun_net_xmit 663 [ 195.598861][T11105] syzkaller0: tun_net_xmit 663 [ 195.598873][T11105] syzkaller0: tun_net_xmit 663 [ 195.598887][T11105] syzkaller0: tun_net_xmit 663 [ 195.598900][T11105] syzkaller0: tun_net_xmit 663 [ 195.598915][T11105] syzkaller0: tun_net_xmit 663 [ 195.598927][T11105] syzkaller0: tun_net_xmit 663 [ 195.598941][T11105] syzkaller0: tun_net_xmit 663 [ 195.598954][T11105] syzkaller0: tun_net_xmit 97 [ 195.601828][T11105] syzkaller0: tun_net_xmit 663 [ 195.601847][T11105] syzkaller0: tun_net_xmit 663 [ 195.601860][T11105] syzkaller0: tun_net_xmit 663 [ 195.601874][T11105] syzkaller0: tun_net_xmit 663 [ 195.601888][T11105] syzkaller0: tun_net_xmit 663 [ 195.601903][T11105] syzkaller0: tun_net_xmit 663 [ 195.601915][T11105] syzkaller0: tun_net_xmit 663 [ 195.601931][T11105] syzkaller0: tun_net_xmit 663 [ 195.601944][T11105] syzkaller0: tun_net_xmit 663 [ 195.601956][T11105] syzkaller0: tun_net_xmit 663 [ 195.601971][T11105] syzkaller0: tun_net_xmit 663 [ 195.601985][T11105] syzkaller0: tun_net_xmit 663 [ 195.601999][T11105] syzkaller0: tun_net_xmit 663 [ 195.602012][T11105] syzkaller0: tun_net_xmit 663 [ 195.602025][T11105] syzkaller0: tun_net_xmit 663 [ 195.602037][T11105] syzkaller0: tun_net_xmit 663 [ 195.602052][T11105] syzkaller0: tun_net_xmit 663 [ 195.602065][T11105] syzkaller0: tun_net_xmit 663 [ 195.602079][T11105] syzkaller0: tun_net_xmit 663 [ 195.602091][T11105] syzkaller0: tun_net_xmit 663 [ 195.602106][T11105] syzkaller0: tun_net_xmit 663 [ 195.602119][T11105] syzkaller0: tun_net_xmit 663 [ 195.602133][T11105] syzkaller0: tun_net_xmit 663 [ 195.602146][T11105] syzkaller0: tun_net_xmit 663 [ 195.602160][T11105] syzkaller0: tun_net_xmit 663 [ 195.602173][T11105] syzkaller0: tun_net_xmit 663 [ 195.602187][T11105] syzkaller0: tun_net_xmit 663 [ 195.602200][T11105] syzkaller0: tun_net_xmit 663 [ 195.602212][T11105] syzkaller0: tun_net_xmit 663 [ 195.602227][T11105] syzkaller0: tun_net_xmit 663 [ 195.602240][T11105] syzkaller0: tun_net_xmit 663 [ 195.602254][T11105] syzkaller0: tun_net_xmit 663 [ 195.602266][T11105] syzkaller0: tun_net_xmit 663 [ 195.602281][T11105] syzkaller0: tun_net_xmit 663 [ 195.602293][T11105] syzkaller0: tun_net_xmit 663 [ 195.602308][T11105] syzkaller0: tun_net_xmit 663 [ 195.602320][T11105] syzkaller0: tun_net_xmit 663 [ 195.602334][T11105] syzkaller0: tun_net_xmit 663 [ 195.602347][T11105] syzkaller0: tun_net_xmit 663 [ 195.602361][T11105] syzkaller0: tun_net_xmit 663 [ 195.602374][T11105] syzkaller0: tun_net_xmit 663 [ 195.602385][T11105] syzkaller0: tun_net_xmit 663 [ 195.602400][T11105] syzkaller0: tun_net_xmit 663 [ 195.602413][T11105] syzkaller0: tun_net_xmit 663 [ 195.602428][T11105] syzkaller0: tun_net_xmit 663 [ 195.602440][T11105] syzkaller0: tun_net_xmit 663 [ 195.602453][T11105] syzkaller0: tun_net_xmit 663 [ 195.602467][T11105] syzkaller0: tun_net_xmit 663 [ 195.602481][T11105] syzkaller0: tun_net_xmit 663 [ 195.602493][T11105] syzkaller0: tun_net_xmit 663 [ 195.602506][T11105] syzkaller0: tun_net_xmit 663 [ 195.602521][T11105] syzkaller0: tun_net_xmit 663 [ 195.602533][T11105] syzkaller0: tun_net_xmit 663 [ 195.602548][T11105] syzkaller0: tun_net_xmit 663 [ 195.602560][T11105] syzkaller0: tun_net_xmit 663 [ 195.602574][T11105] syzkaller0: tun_net_xmit 663 [ 195.602587][T11105] syzkaller0: tun_net_xmit 663 [ 195.602601][T11105] syzkaller0: tun_net_xmit 663 [ 195.602614][T11105] syzkaller0: tun_net_xmit 663 [ 195.602627][T11105] syzkaller0: tun_net_xmit 663 [ 195.602641][T11105] syzkaller0: tun_net_xmit 663 [ 195.602661][T11105] syzkaller0: tun_net_xmit 663 [ 195.602673][T11105] syzkaller0: tun_net_xmit 663 [ 195.602686][T11105] syzkaller0: tun_net_xmit 663 [ 195.602700][T11105] syzkaller0: tun_net_xmit 663 [ 195.602714][T11105] syzkaller0: tun_net_xmit 663 [ 195.602727][T11105] syzkaller0: tun_net_xmit 663 [ 195.602739][T11105] syzkaller0: tun_net_xmit 663 [ 195.602753][T11105] syzkaller0: tun_net_xmit 663 [ 195.602766][T11105] syzkaller0: tun_net_xmit 663 [ 195.602780][T11105] syzkaller0: tun_net_xmit 663 [ 195.602793][T11105] syzkaller0: tun_net_xmit 663 [ 195.602807][T11105] syzkaller0: tun_net_xmit 663 [ 195.602820][T11105] syzkaller0: tun_net_xmit 663 [ 195.602834][T11105] syzkaller0: tun_net_xmit 663 [ 195.602847][T11105] syzkaller0: tun_net_xmit 663 [ 195.602859][T11105] syzkaller0: tun_net_xmit 663 [ 195.602874][T11105] syzkaller0: tun_net_xmit 663 [ 195.602887][T11105] syzkaller0: tun_net_xmit 663 [ 195.602902][T11105] syzkaller0: tun_net_xmit 663 [ 195.602914][T11105] syzkaller0: tun_net_xmit 663 [ 195.602928][T11105] syzkaller0: tun_net_xmit 663 [ 195.602941][T11105] syzkaller0: tun_net_xmit 663 [ 195.602956][T11105] syzkaller0: tun_net_xmit 663 [ 195.604295][T11105] syzkaller0: tun_net_xmit 663 [ 195.604315][T11105] syzkaller0: tun_net_xmit 663 [ 195.604329][T11105] syzkaller0: tun_net_xmit 663 [ 195.604342][T11105] syzkaller0: tun_net_xmit 663 [ 195.604355][T11105] syzkaller0: tun_net_xmit 663 [ 195.604369][T11105] syzkaller0: tun_net_xmit 663 [ 195.604382][T11105] syzkaller0: tun_net_xmit 663 [ 195.604398][T11105] syzkaller0: tun_net_xmit 663 [ 195.604410][T11105] syzkaller0: tun_net_xmit 663 [ 195.604425][T11105] syzkaller0: tun_net_xmit 663 [ 195.604438][T11105] syzkaller0: tun_net_xmit 663 [ 195.604452][T11105] syzkaller0: tun_net_xmit 663 [ 195.604465][T11105] syzkaller0: tun_net_xmit 663 [ 195.604479][T11105] syzkaller0: tun_net_xmit 663 [ 195.604492][T11105] syzkaller0: tun_net_xmit 663 [ 195.604506][T11105] syzkaller0: tun_net_xmit 663 [ 195.604520][T11105] syzkaller0: tun_net_xmit 663 [ 195.604532][T11105] syzkaller0: tun_net_xmit 663 [ 195.604548][T11105] syzkaller0: tun_net_xmit 663 [ 195.604561][T11105] syzkaller0: tun_net_xmit 663 [ 195.604576][T11105] syzkaller0: tun_net_xmit 663 [ 195.604588][T11105] syzkaller0: tun_net_xmit 663 [ 195.604603][T11105] syzkaller0: tun_net_xmit 663 [ 195.604616][T11105] syzkaller0: tun_net_xmit 663 [ 195.604630][T11105] syzkaller0: tun_net_xmit 97 [ 195.782277][ T5842] usb 9-1: USB disconnect, device number 30 [ 195.845560][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.845756][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.845854][T11079] bridge_slave_0: entered allmulticast mode [ 195.847324][T11079] bridge_slave_0: entered promiscuous mode [ 195.848627][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.848692][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.848749][T11079] bridge_slave_1: entered allmulticast mode [ 195.849515][T11079] bridge_slave_1: entered promiscuous mode [ 195.863792][T11079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.865250][T11079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.877276][T11079] team0: Port device team_slave_0 added [ 195.878688][T11079] team0: Port device team_slave_1 added [ 195.890663][T11079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.890678][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.890696][T11079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.891646][T11079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.891654][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.891667][T11079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.911926][T11079] hsr_slave_0: entered promiscuous mode [ 195.912731][T11079] hsr_slave_1: entered promiscuous mode [ 195.913253][T11079] debugfs: 'hsr0' already exists in 'hsr' [ 195.913270][T11079] Cannot create hsr debugfs directory [ 196.037075][T11079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.037097][T11079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.103385][ T5749] Bluetooth: hci0: command tx timeout [ 196.132831][T11079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.132854][T11079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.200338][T11079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.200360][T11079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.261662][T11079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.261690][T11079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.338425][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 196.349792][T11121] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 196.393789][T11079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.400415][T11079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.401175][T11079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.404198][T11079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.404867][T11079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.413884][T11079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.414453][T11079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.419769][T11079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.433694][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.433752][T11079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.433874][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.433918][T11079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.435688][T11131] ceph: No source [ 196.445461][ T5749] Bluetooth: hci1: command tx timeout [ 196.472663][T11079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.481679][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.482190][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.485594][T11079] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.492312][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.492390][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.494930][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.495003][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.509396][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 196.511786][ T9] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 196.512620][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 196.512635][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.512652][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.517529][ T9] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected [ 196.522697][ T9] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 196.613463][T11142] syzkaller0: entered promiscuous mode [ 196.613480][T11142] syzkaller0: entered allmulticast mode [ 196.679356][T11146] FAULT_INJECTION: forcing a failure. [ 196.679356][T11146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.679377][T11146] CPU: 3 UID: 0 PID: 11146 Comm: syz.5.1672 Not tainted syzkaller #0 PREEMPT(full) [ 196.679390][T11146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.679397][T11146] Call Trace: [ 196.679402][T11146] [ 196.679407][T11146] dump_stack_lvl+0x100/0x190 [ 196.679427][T11146] should_fail_ex.cold+0x5/0xa [ 196.679444][T11146] _copy_from_user+0x2e/0xd0 [ 196.679459][T11146] memdup_user+0x6b/0xe0 [ 196.679472][T11146] dev_config+0x175/0x1610 [ 196.679493][T11146] ? lock_acquire+0x1d1/0x380 [ 196.679506][T11146] ? ksys_write+0x12a/0x250 [ 196.679534][T11146] ? __pfx_dev_config+0x10/0x10 [ 196.679550][T11146] vfs_write+0x2aa/0x1050 [ 196.679564][T11146] ? __pfx_dev_config+0x10/0x10 [ 196.679576][T11146] ? lock_acquire+0x1d1/0x380 [ 196.679588][T11146] ? __fget_files+0x34/0x3d0 [ 196.679603][T11146] ? __pfx_vfs_write+0x10/0x10 [ 196.679615][T11146] ? find_held_lock+0x2b/0x80 [ 196.679632][T11146] ? __fget_files+0x215/0x3d0 [ 196.679650][T11146] ? __fget_files+0x21f/0x3d0 [ 196.679670][T11146] ksys_write+0x12a/0x250 [ 196.679683][T11146] ? __pfx_ksys_write+0x10/0x10 [ 196.679700][T11146] do_syscall_64+0x123/0x790 [ 196.679715][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.679726][T11146] RIP: 0033:0x7fca2119e159 [ 196.679736][T11146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.679747][T11146] RSP: 002b:00007fca1f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.679759][T11146] RAX: ffffffffffffffda RBX: 00007fca21425fa0 RCX: 00007fca2119e159 [ 196.679766][T11146] RDX: 000000000000001f RSI: 0000200000000700 RDI: 0000000000000003 [ 196.679773][T11146] RBP: 00007fca1f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.679780][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.679786][T11146] R13: 00007fca21426038 R14: 00007fca21425fa0 R15: 00007ffd96288438 [ 196.679802][T11146] [ 196.733168][ T5842] usb 7-1: USB disconnect, device number 29 [ 196.760798][ T5842] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 196.761291][ T5842] kobil_sct 7-1:1.0: device disconnected [ 197.032991][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 197.217811][ T9] usb 10-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 197.218665][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.220289][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.220301][ T9] usb 10-1: Product: syz [ 197.220309][ T9] usb 10-1: Manufacturer: syz [ 197.220317][ T9] usb 10-1: SerialNumber: syz [ 197.231863][ T9] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 197.331172][T11154] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1675'. [ 197.333534][ T43] audit: type=1400 audit(1791124985.163:832): avc: denied { read } for pid=11153 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.498757][ T9] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 197.500958][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 197.501083][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 197.501103][ T9] usb 10-1: media controller created [ 197.506451][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.713671][ T9] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 198.067114][ T43] audit: type=1400 audit(1791124985.846:833): avc: denied { mounton } for pid=11158 comm="syz.2.1676" path="/385/pipefs" dev="rpc_pipefs" ino=37856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 198.087621][ T43] audit: type=1400 audit(1791124985.865:834): avc: denied { write } for pid=11164 comm="syz.4.1677" lport=41461 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 198.179467][T11079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.198632][T11079] veth0_vlan: entered promiscuous mode [ 198.202157][T11079] veth1_vlan: entered promiscuous mode [ 198.217829][T11079] veth0_macvtap: entered promiscuous mode [ 198.220746][T11079] veth1_macvtap: entered promiscuous mode [ 198.228118][T11079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.233363][T11079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.315539][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.315561][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.325995][ T5749] Bluetooth: hci0: command tx timeout [ 198.329492][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.329516][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.329534][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.329552][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.329640][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.329649][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.350870][ T43] audit: type=1400 audit(1791124986.118:835): avc: denied { append } for pid=11173 comm="syz.4.1679" dev="sockfs" ino=38539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.668104][ T5749] Bluetooth: hci1: command tx timeout [ 198.737120][ T9] usb 10-1: USB disconnect, device number 2 [ 198.758903][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.758989][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.861749][ T43] audit: type=1400 audit(1791124986.595:836): avc: denied { write } for pid=11197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.907499][ T43] audit: type=1400 audit(1791124986.632:837): avc: denied { write } for pid=11200 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.018941][T11204] [ 199.019690][T11204] ====================================================== [ 199.021623][T11204] WARNING: possible circular locking dependency detected [ 199.023795][T11204] syzkaller #0 Not tainted [ 199.025494][T11204] ------------------------------------------------------ [ 199.027963][T11204] syz.2.1684/11204 is trying to acquire lock: [ 199.029864][T11204] ffff8880366940b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 199.032675][T11204] [ 199.032675][T11204] but task is already holding lock: [ 199.034945][T11204] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 199.037720][T11204] [ 199.037720][T11204] which lock already depends on the new lock. [ 199.037720][T11204] [ 199.040882][T11204] [ 199.040882][T11204] the existing dependency chain (in reverse order) is: [ 199.043776][T11204] [ 199.043776][T11204] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 199.046103][T11204] lock_acquire+0x1d1/0x380 [ 199.047686][T11204] __mutex_lock+0x1a4/0x1bd0 [ 199.049308][T11204] rfcomm_security_cfm+0x3f/0x4b0 [ 199.051042][T11204] hci_cc_read_enc_key_size+0x3a8/0xec0 [ 199.052937][T11204] hci_cmd_complete_evt+0x342/0xa20 [ 199.054779][T11204] hci_event_packet+0x51c/0xcd0 [ 199.056473][T11204] hci_rx_work+0x451/0xfc0 [ 199.058029][T11204] process_one_work+0xac7/0x1b10 [ 199.059743][T11204] worker_thread+0x5ef/0xe50 [ 199.061347][T11204] kthread+0x373/0x450 [ 199.062821][T11204] ret_from_fork+0x730/0xd60 [ 199.064431][T11204] ret_from_fork_asm+0x1a/0x30 [ 199.066108][T11204] [ 199.066108][T11204] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 199.068506][T11204] lock_acquire+0x1d1/0x380 [ 199.070028][T11204] __mutex_lock+0x1a4/0x1bd0 [ 199.071519][T11204] hci_remote_features_evt+0x485/0x9b0 [ 199.073343][T11204] hci_event_packet+0x8e9/0xcd0 [ 199.075039][T11204] hci_rx_work+0x451/0xfc0 [ 199.076616][T11204] process_one_work+0xac7/0x1b10 [ 199.078340][T11204] worker_thread+0x5ef/0xe50 [ 199.079963][T11204] kthread+0x373/0x450 [ 199.081432][T11204] ret_from_fork+0x730/0xd60 [ 199.083060][T11204] ret_from_fork_asm+0x1a/0x30 [ 199.084724][T11204] [ 199.084724][T11204] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 199.087029][T11204] check_prev_add+0xeb/0xe60 [ 199.088641][T11204] __lock_acquire+0x1528/0x1f40 [ 199.090334][T11204] lock_acquire+0x1d1/0x380 [ 199.091925][T11204] __mutex_lock+0x1a4/0x1bd0 [ 199.093533][T11204] l2cap_chan_connect+0xac/0x2110 [ 199.095271][T11204] l2cap_sock_connect+0x37a/0x770 [ 199.097012][T11204] kernel_connect+0x107/0x160 [ 199.098649][T11204] rfcomm_dlc_open+0x838/0xac0 [ 199.100308][T11204] rfcomm_sock_connect+0x42c/0x690 [ 199.102157][T11204] __sys_connect_file+0x146/0x1a0 [ 199.103889][T11204] __sys_connect+0x141/0x170 [ 199.105504][T11204] __x64_sys_connect+0x72/0xb0 [ 199.107222][T11204] do_syscall_64+0x123/0x790 [ 199.108836][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.110862][T11204] [ 199.110862][T11204] other info that might help us debug this: [ 199.110862][T11204] [ 199.114032][T11204] Chain exists of: [ 199.114032][T11204] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 199.114032][T11204] [ 199.117872][T11204] Possible unsafe locking scenario: [ 199.117872][T11204] [ 199.120161][T11204] CPU0 CPU1 [ 199.121850][T11204] ---- ---- [ 199.123521][T11204] lock(rfcomm_mutex); [ 199.124824][T11204] lock(hci_cb_list_lock); [ 199.127010][T11204] lock(rfcomm_mutex); [ 199.129073][T11204] lock(&hdev->lock); [ 199.130378][T11204] [ 199.130378][T11204] *** DEADLOCK *** [ 199.130378][T11204] [ 199.132890][T11204] locks held by syz.2.1684/11204: 1, last CPU#1: [ 199.135231][T11204] #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 199.139093][T11204] [ 199.139093][T11204] stack backtrace: [ 199.141589][T11204] CPU: 1 UID: 0 PID: 11204 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 199.145346][T11204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.149493][T11204] Call Trace: [ 199.150942][T11204] [ 199.152209][T11204] dump_stack_lvl+0x100/0x190 [ 199.154219][T11204] print_circular_bug.cold+0x178/0x1be [ 199.156530][T11204] check_noncircular+0x146/0x160 [ 199.158653][T11204] check_prev_add+0xeb/0xe60 [ 199.160631][T11204] __lock_acquire+0x1528/0x1f40 [ 199.162808][T11204] lock_acquire+0x1d1/0x380 [ 199.164781][T11204] ? l2cap_chan_connect+0xac/0x2110 [ 199.167068][T11204] ? __pfx___might_resched+0x10/0x10 [ 199.169338][T11204] __mutex_lock+0x1a4/0x1bd0 [ 199.171183][T11204] ? l2cap_chan_connect+0xac/0x2110 [ 199.173384][T11204] ? l2cap_chan_connect+0xac/0x2110 [ 199.175716][T11204] ? hci_get_route+0x368/0x520 [ 199.177869][T11204] ? hci_get_route+0x368/0x520 [ 199.180177][T11204] ? __pfx___mutex_lock+0x10/0x10 [ 199.182350][T11204] ? _raw_read_unlock+0x28/0x50 [ 199.184426][T11204] ? hci_get_route+0x368/0x520 [ 199.186497][T11204] ? __pfx_hci_get_route+0x10/0x10 [ 199.188731][T11204] ? reacquire_held_locks+0xdd/0x1f0 [ 199.191224][T11204] ? release_sock+0x21/0x280 [ 199.193019][T11204] ? l2cap_chan_connect+0xac/0x2110 [ 199.195023][T11204] l2cap_chan_connect+0xac/0x2110 [ 199.196927][T11204] ? __local_bh_enable_ip+0xa5/0x120 [ 199.198912][T11204] l2cap_sock_connect+0x37a/0x770 [ 199.200727][T11204] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 199.202514][T11204] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.204334][T11204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.206283][T11204] kernel_connect+0x107/0x160 [ 199.208042][T11204] ? __pfx_kernel_connect+0x10/0x10 [ 199.209826][T11204] ? timer_init_key+0x150/0x310 [ 199.211371][T11204] rfcomm_dlc_open+0x838/0xac0 [ 199.212868][T11204] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 199.214526][T11204] ? rfcomm_sock_connect+0x3e8/0x690 [ 199.216270][T11204] ? find_held_lock+0x2b/0x80 [ 199.217838][T11204] ? rfcomm_sock_connect+0x3e8/0x690 [ 199.219506][T11204] ? __local_bh_enable_ip+0xa5/0x120 [ 199.221224][T11204] rfcomm_sock_connect+0x42c/0x690 [ 199.222900][T11204] __sys_connect_file+0x146/0x1a0 [ 199.224513][T11204] __sys_connect+0x141/0x170 [ 199.226001][T11204] ? __pfx___sys_connect+0x10/0x10 [ 199.227637][T11204] ? rfcomm_sock_shutdown+0xa2/0x2c0 [ 199.229359][T11204] ? __local_bh_enable_ip+0xa5/0x120 [ 199.231042][T11204] __x64_sys_connect+0x72/0xb0 [ 199.232558][T11204] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.234206][T11204] do_syscall_64+0x123/0x790 [ 199.235681][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.237522][T11204] RIP: 0033:0x7f7d5fd9e159 [ 199.238935][T11204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.244928][T11204] RSP: 002b:00007f7d60cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 199.247569][T11204] RAX: ffffffffffffffda RBX: 00007f7d60025fa0 RCX: 00007f7d5fd9e159 [ 199.250020][T11204] RDX: 000000000000000a RSI: 0000200000000000 RDI: 000000000000000a [ 199.252474][T11204] RBP: 00007f7d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 199.254939][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.257382][T11204] R13: 00007f7d60026038 R14: 00007f7d60025fa0 R15: 00007ffdcddde618 [ 199.259847][T11204] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.263390][ T43] audit: type=1400 audit(1791124986.960:838): avc: denied { write } for pid=5722 comm="syz-executor" path="pipe:[1707]" dev="pipefs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 199.456469][T11204] syz_tun (unregistering): left allmulticast mode [ 199.456500][T11204] syz_tun (unregistering): left promiscuous mode [ 199.456547][T11204] bridge0: port 1(syz_tun) entered disabled state [ 199.594080][ T5812] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.718480][ T5812] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.826078][ T5812] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.943182][ T5812] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.004910][ T5812] bridge_slave_1: left allmulticast mode [ 200.004934][ T5812] bridge_slave_1: left promiscuous mode [ 200.005045][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.006253][ T5812] bridge_slave_0: left allmulticast mode [ 200.006265][ T5812] bridge_slave_0: left promiscuous mode [ 200.006343][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.040992][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.041988][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.042560][ T5812] bond0 (unregistering): Released all slaves [ 200.085813][ T43] audit: type=1400 audit(1791124987.737:839): avc: denied { write } for pid=11209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.112293][ T43] audit: type=1400 audit(1791124987.765:840): avc: denied { write } for pid=11212 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.132554][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 200.187213][ T43] audit: type=1400 audit(1791124987.830:841): avc: denied { write } for pid=11216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.219990][ T43] audit: type=1400 audit(1791124987.868:842): avc: denied { write } for pid=11219 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.244681][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 200.286510][ T5812] hsr_slave_0: left promiscuous mode [ 200.286733][ T43] audit: type=1400 audit(1791124987.924:843): avc: denied { write } for pid=11222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.286769][ T5812] hsr_slave_1: left promiscuous mode [ 200.286977][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.286986][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.287295][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.287304][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.288753][ T5812] veth1_macvtap: left promiscuous mode [ 200.288768][ T5812] veth0_macvtap: left promiscuous mode [ 200.288797][ T5812] veth1_vlan: left promiscuous mode [ 200.288819][ T5812] veth0_vlan: left promiscuous mode [ 200.329786][ T43] audit: type=1400 audit(1791124987.961:844): avc: denied { write } for pid=11225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.342887][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 200.344760][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 200.370309][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 200.416658][ T43] audit: type=1400 audit(1791124988.045:845): avc: denied { write } for pid=11228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.447932][ T43] audit: type=1400 audit(1791124988.073:846): avc: denied { write } for pid=11231 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.464299][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 200.757146][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.203089][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.269393][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.323656][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.401634][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.439555][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.449496][ T43] audit: type=1400 audit(1791124989.009:847): avc: denied { write } for pid=11241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.482580][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.502162][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 201.535843][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.670118][ T5812] bridge_slave_1: left allmulticast mode [ 201.670134][ T5812] bridge_slave_1: left promiscuous mode [ 201.670211][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.671712][ T5812] bridge_slave_0: left allmulticast mode [ 201.671728][ T5812] bridge_slave_0: left promiscuous mode [ 201.671828][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.680013][ T5812] bridge_slave_1: left allmulticast mode [ 201.680028][ T5812] bridge_slave_1: left promiscuous mode [ 201.680098][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.685467][ T5812] dvmrp6: left allmulticast mode [ 201.731552][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.733019][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.734020][ T5812] bond0 (unregistering): Released all slaves [ 201.760724][ T5812] bond2 (unregistering): (slave gretap1): Releasing active interface [ 201.778969][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.779202][ T5812] bond_slave_0: left allmulticast mode [ 201.779971][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.780225][ T5812] bond_slave_1: left allmulticast mode [ 201.780552][ T5812] bond0 (unregistering): Released all slaves [ 201.781753][ T5812] bond1 (unregistering): Released all slaves [ 201.783687][ T5812] bond2 (unregistering): Released all slaves [ 201.785521][ T5812] bond3 (unregistering): Released all slaves [ 201.787403][ T5812] bond4 (unregistering): Released all slaves [ 201.799099][ T5812] bond5 (unregistering): (slave dummy0): Removing an active aggregator [ 201.799270][ T5812] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 201.805300][ T5812] bond5 (unregistering): Released all slaves [ 201.810810][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 201.960362][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 202.088320][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 202.191691][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 202.231211][ T5812] hsr_slave_0: left promiscuous mode [ 202.231448][ T5812] hsr_slave_1: left promiscuous mode [ 202.231664][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.231673][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.231936][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.231944][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.233544][ T5812] hsr_slave_0: left promiscuous mode [ 202.234004][ T5812] hsr_slave_1: left promiscuous mode [ 202.234366][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.234380][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.234891][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.234904][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.240727][ T5812] veth1_macvtap: left promiscuous mode [ 202.240752][ T5812] veth0_macvtap: left promiscuous mode [ 202.240802][ T5812] veth1_vlan: left promiscuous mode [ 202.240838][ T5812] veth0_vlan: left promiscuous mode [ 202.252048][ T5812] veth0_macvtap: left promiscuous mode [ 202.252120][ T5812] veth1_vlan: left promiscuous mode [ 202.252160][ T5812] veth0_vlan: left promiscuous mode [ 202.362066][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 202.364557][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 202.427871][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 202.432748][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 202.468337][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 202.590385][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 202.690687][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21 [ 202.925065][ T5812] IPVS: stop unused estimator thread 0... [ 205.139260][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 205.139278][ T43] audit: type=1400 audit(1791124992.462:867): avc: denied { write } for pid=11324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.173433][ T43] audit: type=1400 audit(1791124992.490:868): avc: denied { write } for pid=11327 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.245092][ T43] audit: type=1400 audit(1791124992.565:869): avc: denied { write } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.284696][ T43] audit: type=1400 audit(1791124992.603:870): avc: denied { write } for pid=11333 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.597816][ T43] audit: type=1400 audit(1791124992.893:871): avc: denied { write } for pid=11336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.622840][ T43] audit: type=1400 audit(1791124992.911:872): avc: denied { write } for pid=11339 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.328668][ T26] block nbd0: Possible stuck request ffff88802947e000: control (read@0,4096B). Runtime 60 seconds