last executing test programs: 34.77118869s ago: executing program 0 (id=75): r0 = socket(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) mount$pvfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f0000000240)={[{',\x14.'}, {'/dev/snd/pcmC#D#p\x00'}], [{@subj_user={'subj_user', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'f'}}]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0xffffffffffffffff, 0x100) write(r3, &(0x7f0000000140)="580000001800050401000000000000000a800000fe040042000000001400014020f115010db80000937baddb0f1b0c0600e4ffffff0000100106796f0015000707000000000000000001000100009a19d819000800010006140000080004000100515e8821f72866d6f20b126c6644f76757d9ed70137795a82a1b4b904db4fd5c75841c4835ccab20acdf550859d7731f41", 0x36) 34.770043627s ago: executing program 0 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000a140007800800124000060400080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x800002, 0xffffffffdf100f4f, 0xc, 0x286, 0x0, 0x2, 0x0, 0x0, 0x100, 0xfffb}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x82380, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18021}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x88) 34.462672319s ago: executing program 0 (id=79): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtclass={0x54, 0x28, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {0xfff3, 0xb}, {0x2, 0x7}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x94, 0xb}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 34.202014659s ago: executing program 0 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x19}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "1ab869"}]}], {0x2e, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000580)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0xa200, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x9, 0x0, 0x5, 0x9, 0xb, 0x40, 0x5, 0x119}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0) sendmmsg(r4, &(0x7f0000000440), 0x4000000000001f2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/51, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000300)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000340)={0x1}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/191, 0x4}], 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r5, 0x0) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000700)={0x2, &(0x7f00000006c0)=[{0x1, 0xfa, 0x9, 0x7}, {0xebf7, 0x40, 0xfe, 0x6}]}) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) 34.042184466s ago: executing program 0 (id=85): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}}, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40002, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x5, 0x6, 0x3, 0x0, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='syzkaller\x00'}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r3, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000001180)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c, &(0x7f00000012c0), &(0x7f0000001300)}, 0x40) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x10001]}, 0x8, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, 0x0) 33.462815776s ago: executing program 0 (id=88): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x43) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@upd={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {{'sha512-generic\x00'}, '\x00', '\x00', 0x2400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40840}, 0x20004890) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r4, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80000000, 0x6b}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xa03}]}, 0x58}}, 0x0) close(r0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000480), 0x43) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 33.387317771s ago: executing program 32 (id=88): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x43) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@upd={0xe0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {{'sha512-generic\x00'}, '\x00', '\x00', 0x2400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40840}, 0x20004890) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r4, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80000000, 0x6b}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xa03}]}, 0x58}}, 0x0) close(r0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000480), 0x43) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 27.592040297s ago: executing program 3 (id=139): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000380)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8004}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xb, @local, 0x1fc}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) 27.531423628s ago: executing program 3 (id=140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000380)) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0022180000000900000015ff0904a1010901a1007508750109309102c0c0"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000480), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r8, 0x501c4814, 0x0) (async) ioctl$HIDIOCSUSAGES(r8, 0x501c4814, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001042bbd7000fddbdf250000000077673b14200c4d1daa8bca347222fce8060749375b309e8d87f25598e8f3258400af4306a92cc32cf7e8cc9d37a016c21359e29c5809355e4f61669d5b7396ce4b3e659ea1e584f2e3ea92aab1e8f34e7ed9d185808678b50e60854a44", @ANYRES32=0x0, @ANYBLOB="fab081c7dccb14f1767dbc00f71a4d37742c7c28452724c73b377e73810a40c82332eccfce3580136a76614bdd84baa44ebe5bba19942fd8e32b000000000000000075eb570fcbc3ec55cf9d5548b4a98f8e1e462541879917f48e2f7fbdcf0e91d90e9f9446d81760f717e8992b3f"], 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 25.761026092s ago: executing program 3 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setreuid(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c6e6f737761702c6673757569643d36616561076306342d396666652d626331332d053561662d31393864343233662c66756e633d4d4f44554c455f434845434b2c636f6e746578743d"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x2000, 0xb, 0x5, 0x3, 0x4, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0xa000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x2, 0xb, 0xbb}, {0xdddd0000, 0x100000, 0x7, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0xd000, 0xd, 0x3, 0x5, 0x86, 0x0, 0x81, 0xa, 0x0, 0xf2, 0x43}, {0xc000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x41000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0x5, 0xb}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x8004002b, 0x0, 0xdddd0000, 0x2104, 0x4, 0x0, 0xeeee8000, [0x5, 0x7, 0x7, 0x80000000000d53]}) 25.432660418s ago: executing program 3 (id=166): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000080)={@local, @remote}) r1 = syz_open_procfs(0x0, &(0x7f0000000b80)='mountinfo\x00') mkdir(&(0x7f0000000c40)='./file0\x00', 0x130) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x26440c, &(0x7f0000000d00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f00000004c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000580)='.', 0x1}], 0x1) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x40, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) sendfile(r1, r1, &(0x7f0000000bc0)=0x2eb4, 0x2000007ff) 22.439517778s ago: executing program 3 (id=191): mq_notify(0xffffffffffffffff, &(0x7f0000000540)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003"], 0xc8}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x0, 0x9, 0x0, 0x0, 0xc, 0xf, 0x4, 0x2, 0x81}, 0x0) r1 = syz_clone(0x409da500, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="dd8e78a1cd95e4727511bb2869e73f30e174c55ffdce9f45abf04d16dfe989c4fd1570451f77c9d027394c9382a18fdf1fab851c8cccad8695bcdb59ea5eda1bef0fa92f86d235649afde71973e12bbf5b0b2327b959166750bb8ebfb07402a2a248614a3ab758f83485d7605d49d1c49b8a5af0330eaa7b27285cf6a30b8018") r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x202801) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x100) write(r3, &(0x7f0000000500)='7', 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timerfd_create(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) connect$rxrpc(r3, &(0x7f0000000580)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x412a, @private1, 0x7ba}}, 0x24) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000003c0)=[r7, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x2) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r10, 0x29, 0x37, &(0x7f0000000680)=ANY=[@ANYBLOB="0110000000000000"], 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRES16=r8, @ANYRES8, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4031) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) 22.171798163s ago: executing program 3 (id=195): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x7, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x9, 0x1000006, 0x100, 0xb8, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0x4, 0xfff]}, 0x45c) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000900000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) 20.278903813s ago: executing program 1 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = timerfd_create(0x9, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x69) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x100, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x60, 0x4000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 20.055691856s ago: executing program 1 (id=223): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06005800000000bf61000000000000070100000400000085000000a9000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.998829046s ago: executing program 1 (id=225): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r0, 0x4) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r0, 0x4) syz_open_dev$cec(&(0x7f00000003c0), 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000400)={0xd0, 0x2, 0x0, 0x40000008}) (async) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000400)={0xd0, 0x2, 0x0, 0x40000008}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000640)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000680)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000006c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x303, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7ffff7f00000001e600", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/cec/cec0/status\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000540)=""/256, 0x100) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000740)={0x1f, 0x4, 0x3}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x5}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000000c0)={0x6680, 0x0, 0x2, {0x2, @meta={0x43425052, 0xb6f419f, 0xbd14, 0x1e64, 0x5546d64b}}, 0x7}) write(r5, &(0x7f0000000080)="4c00000011002914000e000200001e0002000400200000", 0x17) 19.641877172s ago: executing program 1 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xd1) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2210088, &(0x7f0000000c00)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000c80)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = syz_clone(0x4100600, &(0x7f0000000000)="fe72c02ca7f88cd46b6eada1946cd6f7d377a1bda7e7886a2a8fa5aa506ebd9054102e4ca7ce62348676987d41dc5faefbd4b6c8ed809adae4ef7d5a77817ceaa9fc2e459d651b68b82401115d03175690a96bc95929a41b32baadaf29f16a44a9ee2c1730132409c3033d6df727fd93acc98c3da5a8d33026e0a6784bd4dfa22eb8ce790faf31398aa8b219f35102ec9add58f133618ddd9bde1e6b767655", 0x9f, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)="585ff5eb15043b3338faaa7f1a5a896353cfe1f5242ba2b385134ae21b34b86d5c697fe56fcaf24c06e4ee02d3aaf400bf5fca918174f0e81c04cf922542a26cdee7cee4293c95f0088ffb7c3a73140252f6810cdf6bcd9ba1633cf084a722d845827211b35c5aab788ec551f4742d0e5035df606f34ff654112fc601fd6b5b33251a754ef27085e3a2661167b289a01f1de") fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x2, 0x1, 0x7, 0x2, r1}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000180)={0x9, 0x3, 0x7, 0x4, 0x800}) r2 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000640)={0x2, 0x6, 0xfffffffe, 0x7, 'syz0\x00', 0x27}) utimensat(r2, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000500)={{}, {r3, r4/1000+10000}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4], 0x118) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xfb}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xff02) 19.457832256s ago: executing program 1 (id=229): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x7ffffffffffffffe, 0x0, 0x40000}, 0x1) 18.972601846s ago: executing program 1 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0x4800) (async) sendmsg$802154_raw(r2, 0x0, 0x24004040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000040), 0x651, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r6, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5a43139eced03e72958ed8c4f4d853737b9bef57064ea1740cc68d1254dc6018465eafc1dd5a9eb0084d0c8217156ef56988d71d8cd0e66be37aeadfa4767c74d27dec8aa163807fce4ca4e6fce45142a20548b26cbe1f445e80ff0a7a1af81296750febed91870a"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200040c3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) (async) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r8 = dup2(r4, r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x8, 0x0, 0x7, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end]}}}}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r3, @ANYRES16=r0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xffffffffffffff4a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.933514076s ago: executing program 33 (id=234): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0x4800) (async) sendmsg$802154_raw(r2, 0x0, 0x24004040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000040), 0x651, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r6, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5a43139eced03e72958ed8c4f4d853737b9bef57064ea1740cc68d1254dc6018465eafc1dd5a9eb0084d0c8217156ef56988d71d8cd0e66be37aeadfa4767c74d27dec8aa163807fce4ca4e6fce45142a20548b26cbe1f445e80ff0a7a1af81296750febed91870a"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200040c3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) (async) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r8 = dup2(r4, r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x8, 0x0, 0x7, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end]}}}}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r3, @ANYRES16=r0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xffffffffffffff4a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.181027389s ago: executing program 5 (id=302): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf0600fb00000000bf61000000000000070100000400000085000000a9000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.122686134s ago: executing program 5 (id=303): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write(r0, &(0x7f0000000740)="01", 0x1) (async) write(r0, &(0x7f0000000d00)='\x00\x00', 0xfdef) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000780)=0x80000004, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000e40)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000e80)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r2, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f0000000fc0)="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", 0xf44}], 0x2) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001f40)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000001f80)=0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x5, 0x1, 0x9, 0x6}]}, 0x10) bind$inet6(r1, &(0x7f0000000840)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000d40)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000d80)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000dc0), 0x3) (async) getsockopt$bt_hci(r3, 0x11a, 0x5, 0x0, &(0x7f0000000e00)=0x7ccd4176) (async) listen(r1, 0x8) r4 = socket(0xa, 0x3, 0xff) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) (async) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfdffffff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="17ffff1a0020f0", 0x7}, {&(0x7f0000000580)="9e91d9025b6ef6a270fef2c61d92dc796fff655bb579e2ffb374ba", 0x1b}, {&(0x7f00000005c0)="dcdd61e53a41", 0x6}], 0x3}, 0x20008b88) (async) syz_emit_ethernet(0x62, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60560400002c0600fe8000000000000000000000000000aaff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0c2f216feb1ee4327d4580344a2000000000000000000000000000000000000c632912aff050c0126df2fe300f1ff9561214e741dfc129f33316bf69cd2a543e4a48362c240dba4bd4d9de122be2befff1637d21b85bdefcd343ddd71fa4bc8b0413cf25864fdfc9ce64a3ff7c228e32cad7982ee4ddc643eea48e66727b667cd7cdf99b3a02a217fa31de30c75e4c14ec645b55877002e73760f2a052ae0b2f6"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/vulnerabilities/itlb_multihit\x00', 0x0, 0x0) read(r5, &(0x7f0000001fc0)=""/1031, 0x407) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000c80)={0x3, 0x9, 0x9, {0x7, 0x5}, 0x5, 0x4}) 11.242079418s ago: executing program 5 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r7, &(0x7f0000000000)=""/37, 0x25, 0xfffffffffffff763) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r10, &(0x7f00000000c0)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=t', 0x31) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x38, "0e87d1ab0924e73e997a1ddc0fa3d812380684ca90af9f6b3d90833cd4f121e31177941f273f667acfebce41e79a52248c5b111170134e2f"}, &(0x7f0000000280)=0x40) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r10, 0x84, 0x80, &(0x7f00000002c0)={r11, 0x6}, &(0x7f0000000300)=0x8) 10.682089638s ago: executing program 5 (id=316): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r1, 0x0, &(0x7f0000000400)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="1fc3e5fe29a907023cb9a18caa7db0b1adc45fe64649417917885dde1bbbbcf4bb4188eb0d3b217fc359a567c4e5c160e46cd05893e4843f600adea1c0195fdaf471d54be8a2bfb1f273fa44619d81d3e9db0591671134fe161924c62f2c7f1b62b8aa8cdf4615e513cf18969596c5bdb8b29891e5e74a0c526ce1295adab41413012313e91f62f27097622ddd97b6274df89e8fb0"], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) fspick(r0, &(0x7f0000000300)='./file0/file0\x00', 0x0) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) socket(0x1, 0x5, 0x7fffffff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./mydev/v4l-touch0/file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mydev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000700)={0x7f, 0x4d, 0x2ba8}) r6 = syz_open_dev$dri(&(0x7f0000000740), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000009c0)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x1, 0xf}) r7 = syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000a80)={0x8, 0x4d, 0x2ba8}) r8 = syz_open_dev$dri(&(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000b00)={0x3, 0x51, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000b40)={r9}) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000007c0)={0x9, @vbi={0x20e7, 0x9, 0x2, 0x3132564e, [0x80, 0x2], [0x80, 0x80000001], 0x2}}) open_tree(r0, &(0x7f0000000240)='./mydev\x00', 0x89901) 10.612021746s ago: executing program 5 (id=318): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002700)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 10.351884731s ago: executing program 5 (id=319): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0xffff0000, 0x40000}, 0x1) 10.271486103s ago: executing program 34 (id=319): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0xffff0000, 0x40000}, 0x1) 7.128682503s ago: executing program 35 (id=195): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x7, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x9, 0x1000006, 0x100, 0xb8, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0x4, 0xfff]}, 0x45c) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000900000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) 6.202505311s ago: executing program 2 (id=345): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='devtmpfs\x00', 0x22940a3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x2010, 0xffffffffffffffff, 0x888d0000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04023904ff"], 0x3c) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) 5.481055964s ago: executing program 2 (id=349): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001c00)={&(0x7f0000001c40)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885) 5.052733038s ago: executing program 4 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="010307003000140006006fe61f810fd86701fc000000000000000000000000000001ff020000000000000000000000000001"], 0x100a) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7, 0x368c78e}, {0x40000, 0xffffffff, 0x80ae8}, 0x70bd2b, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x8f}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) 1.956719701s ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2}}) 1.955552324s ago: executing program 4 (id=359): r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001440)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000001480)={0xa, 0x4e1d, 0x9, @mcast1, 0x3}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000014c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0xff, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000240)=[{{0x80000000}}]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001640), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000001680)={0xca8, 0xef, 0x2, {0x3, @pix_mp={0x5fd, 0x74e, 0x32314d4e, 0x9, 0x4, [{0x4be, 0x2}, {0x4, 0x4e}, {0xffffff00, 0x3}, {0xfff, 0x878}, {0x4, 0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x2}], 0x5, 0xd, 0x7, 0x3, 0x1}}, 0x8}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() fcntl$lock(r4, 0x25, &(0x7f00000003c0)) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000002c0)={r3}) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0xa0000) mkdir(&(0x7f00000017c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001800)='./config\x00', &(0x7f0000001840)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001880)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdir(&(0x7f00000018c0)='./config/nvmet/ports/1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES8, @ANYRESHEX, @ANYRES64], &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, &(0x7f0000001a40)='tcp', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r7, &(0x7f0000001ac0)='127.0.0.1', 0x9) mkdir(&(0x7f0000001540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001580)='./trace\x00', &(0x7f00000015c0)='tracefs\x00', 0x0, 0x0) 1.92018726s ago: executing program 2 (id=361): r0 = openat$kvm(0x0, &(0x7f00000008c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000900)={0x0, &(0x7f00000009c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x56, {0x3, "460f07c4415dfb0500000080676444df940400280000c4e22147a6f400c0fe3ef3430f70a0e3db931ffaf40f01c866460f3880b7008000000f23830f01df"}}, @nested_vmlaunch={0x12f, 0x18}], 0x9e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd0e, &(0x7f00000003c0)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d70") mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x0, 0x20010, r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x101090}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3f}]}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5dd7ebdabc2b56dc"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000048}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = fsopen(&(0x7f0000000580)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000005c0)='iocharset', &(0x7f0000000600)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xe3\xbd\xea\xb7q\x837\xff\xac\x1c\xba\xf0]\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\t\x00xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\x81*\\\x16:O\b\xe0\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf', 0x0) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1}, 0x48043) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0x0, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0xffffff9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.42324462s ago: executing program 4 (id=365): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001c00)={&(0x7f0000001c40)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885) 1.080360591s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvfrom(r0, &(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000000040)=@l2={0x1f, 0xffff, @none, 0x3, 0x1}, 0x80) (async) recvfrom(r0, &(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000000040)=@l2={0x1f, 0xffff, @none, 0x3, 0x1}, 0x80) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2210088, &(0x7f0000000c00)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2210088, &(0x7f0000000c00)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000c80)='./file0\x00') (async) chdir(&(0x7f0000000c80)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x81, 0xfffeffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, r1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x10, 0x80003, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r4, 0x2, 0x1, 'U'}, 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x2, 0x9, 0x2, 0x0, 0x10001, 0x3ff, 0xfe, 0x8, r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x16d}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) (async) mkdir(&(0x7f00000003c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='dir0\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000700)='dir0\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='dir0/tracing_on\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000780)='dir0/tracing_on\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') readv(r7, &(0x7f0000000800)=[{&(0x7f0000000840)=""/144, 0x90}], 0x1000000000000094) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) ftruncate(r1, 0x4a8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 1.080136133s ago: executing program 7 (id=339): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000003000000bf61000000000000070100000400000085000000a9000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.076159071s ago: executing program 7 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002180), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000021c0)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_buf(r2, 0x0, 0x1, &(0x7f00000000c0)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000140)='127.0.0.1:/root\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="76ae64723d3132372e302e302e312c00"]) r3 = accept$inet(r2, 0x0, 0x0) read(r3, &(0x7f0000000240), 0x4) read(r3, &(0x7f0000000280), 0x4) write(r3, &(0x7f00000002c0), 0x100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffe0}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20a201, 0x0) close(r10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x1}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0x0, r11, 0x38}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) 922.092814ms ago: executing program 2 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000003d00)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000003d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) openat$vsock(0xffffffffffffff9c, 0x0, 0xc240, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003d80)={r0}, 0xc) 847.648126ms ago: executing program 2 (id=370): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x68c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x650b, &(0x7f0000000080)={0x0, 0xd6b0, 0x0, 0x1f, 0xae}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) ioctl$KVM_CREATE_VM(r4, 0x40086806, 0x21) read$usbfs(r4, &(0x7f0000000140)=""/155, 0x9b) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x14008010) 451.509468ms ago: executing program 6 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001c00)={&(0x7f0000001c40)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885) 229.403554ms ago: executing program 6 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000580)='27', 0x2) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0xffffffff) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000240)=0xfff) write$ppp(r2, &(0x7f0000000280)="229d", 0x2) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"ae6ae8ecee1f90d7f640e73e90b656ccf5cc192592b6fc272a3cb798304b3f76", r0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f00000000c0)={&(0x7f0000000080)=[{&(0x7f0000000040)="e465037d024f0d0a46f7bf38314d8b77b80035b0db8c5dc20149164435a1c5e358e790e8f52cad", 0x27}], 0x1, 0x8, 0x0, 0x7, 0x1, 0x9, 0x7, 0x2}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@raid={0x0, 0x80, 0x0, 0x68, 'raid\x00', {'raid5_ls', 0x20, '1 8', 0x20, 0x2, [{0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) 229.143361ms ago: executing program 4 (id=376): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000005000000bf61000000000000070100000400000085000000a9000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 228.606036ms ago: executing program 6 (id=377): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0xc, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x50040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="8842000000000000280012800b00010067656e65766500001800028014000700ff0100000000000000000000000000011400030067656e6576653100000000000000000042ddab3ddd61e1408ff0869e8ed92ef26dd979d09b23416c6626439f9a7a28471fb434caf012dbe5d2b63f5c1c491bb80973a4dd092c6fd42e93b81c5d605197594f3abfe23390c5dcfcac755c2621e52f837e5326b6f541106bac6ebf9e854cfd3e6a86e0be7e118abcc5"], 0x5c}}, 0x2000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000600), 0x0, 0x8004) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c2, 0x1004, 0x9, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0xb, 0x9, 0x8d], 0x10000, 0x2050d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x2f, 0x10, 0x70bd2a, 0x25dfdbfe, {0x1d}, [@typed={0x6, 0x40, 0x0, 0x0, @str='.\x00'}, @generic="212d7e15e21179dee59cecbab143e0b5d2d7a742fc729838522ef46b0e23f88cfb92c963026c85debaa5a40a3b9e87ceb64858003af73c3e4c86e673325638", @nested={0x8, 0x137, 0x0, 0x1, [@nested={0x4, 0x87}, @generic]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) setresuid(0xee00, 0x0, 0x0) r8 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r8, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000140), 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) recvmsg$unix(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r11, 0xc040ff0b, 0x200000000003) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) 62.176626ms ago: executing program 6 (id=378): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x3) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfff8}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x109ac0, 0xa1) (async) mount(&(0x7f0000000040), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='xfs\x00', 0x4, &(0x7f0000000500)='ecryptQs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecr\x06\x83\xde\x97\xb2I2#y_bytes=16\x00') 61.572668ms ago: executing program 6 (id=379): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/24, &(0x7f0000000180)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) 52.387299ms ago: executing program 6 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x1) ioctl$TCGETA(r0, 0x8926, &(0x7f0000000440)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1200, 0x0) ioctl$VT_RELDISP(r2, 0x5605) write(0xffffffffffffffff, &(0x7f0000000040)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000004c0)={0x3, 0x8ec3e591e9f182f3, [0x8, 0x3, 0x8, 0x2477, 0xffc00000, 0x5, 0x5, 0x578000]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_userptr={0x6, 0x6, 0x4, 0x1000, 0xff, {0x77359400}, {0x3, 0x0, 0x3f, 0x6, 0x5, 0x0, "af084100"}, 0x200, 0x2, {&(0x7f0000000240)=[{0x39, 0x5, {&(0x7f00000001c0)}, 0x8}, {0x8, 0x6, {&(0x7f0000000200)}, 0x7}]}, 0x3, 0x0, r3}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file1\x00', 0x1c0) mkdir(&(0x7f0000000700)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0x200) 263.077µs ago: executing program 4 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000810000000200000000000300000a48000000060a010400000000000000000a00000409000104000000310000000009000200737b7a32000000001c9bae80180001800d0020010073796e70726f78790000000004000280140000001100010000000000000000000100000afa5a3ba1ad81c0fbc363cdaeeff175de4b83f87022ae0b7aa4184ab6723adfd96a665d47c39a640eb96dbdc17faf663bbc5ddc9ef52f0d02a38c87b0d9a41f4df69985367ad104ff8a4632f0a1"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000001e40)={r6, 0x7, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001800)={r0, 0x58, &(0x7f0000001780)}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000001840)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001880)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f00000018c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000001900)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) fstat(r2, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000001e00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000019c0)=@getsa={0x324, 0x12, 0x800, 0x70bd28, 0x25dfdbff, {@in6=@private1, 0x4d6, 0x2, 0x6c}, [@lifetime_val={0x24, 0x9, {0x2, 0xc4e, 0x1ff, 0x4}}, @policy_type={0xa}, @algo_crypt={0xaa, 0x2, {{'cbc-cast6-avx\x00'}, 0x310, "ab5caa72080c92ab213d59d47a7563a50f2067b58cc59ce218248264595b4f6ee6c6a8d0b4eb887ddf3815a862feb4464cf6b803722f77ad4f973424c3b134c2b985b85dfef66e040bd88d569464e50a36cc9599cf6143c2274d6179de0cbf594c7a"}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa, 0x0, 0xfa}}, @srcaddr={0x14, 0xd, @in=@multicast2}, @algo_crypt={0x11b, 0x2, {{'ecb(arc4)\x00'}, 0x698, "be164a861528f858043b258e5123177b5036634542ddc6e2a7bffac0bda5a8b59b63f1b62726e49daedc96b39b1a6b412ca799dcda944de59ccbeee77d9e9436ebf7f1c8d3258db7ce162d8ecf87c2f3206321fb17e7df05fd6e8deda5d6b2ee5c30f8e8f2df5f3047ce10e20c5de8a568d1bfc9cad22f6285ccfcbb3c82cb18776a335e50f4ed26299398398ee7f4298bb374c7ab84d88f67e778c90f4680ddfb351a5c9bb397d0c7ece7b25380a488edad604a2f0202eb02f48b5d1e13c661a90c6781a85ec7b411e4dab3ba9cf3db5f5433"}}, @srcaddr={0x14, 0xd, @in6=@local}, @iptfs_reorder_window={0x6, 0x25, 0x8}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x4e22, 0x81, 0x4e24, 0x101, 0x2, 0xa0, 0x0, 0x32, r8, r9}, {0x6, 0x401, 0x4, 0x1, 0x0, 0x401, 0x7, 0x1}, {0x7, 0x4, 0x100, 0x9}, 0x7ff, 0x6e6bbd, 0x1, 0x1, 0x3, 0x2}}]}, 0x324}, 0x1, 0x0, 0x0, 0x41}, 0x4004001) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000400)) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000006c0)={&(0x7f0000000440), 0xc, &(0x7f0000000680)={&(0x7f0000001f40)={0x1ec, r10, 0x0, 0x70bd2d, 0x0, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc67e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff99}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4026}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc0}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000140)) close(0x3) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/ram0/queue/discard_max_bytes\x00', 0x1a1041, 0x171) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x800}}, 0x30) write$fault_inject(r12, &(0x7f00000000c0)='10\x00', 0x3) 0s ago: executing program 7 (id=382): r0 = openat$kvm(0x0, &(0x7f0000000500), 0x40800, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xf, 0x52a1, 0x18}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x38416761, 0x2, @discrete={0xe67f, 0x6}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100) (async) r3 = open$dir(&(0x7f0000000ac0)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='ext4\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000000700)=""/46, 0x2e}], 0x4}, 0x10100) (async) chdir(&(0x7f0000000740)='./mnt\x00') (async) r4 = open(&(0x7f0000000780)='.\x00', 0x80000, 0x103) getdents(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) write(r4, &(0x7f0000000800)="635e9af1b96eac954090a7f78734895cf0e5f876f548aaf5915c1c00a7c5df997a2ac2625782a98d1d270e83e8d8484617a781f5296637d1c441b94c38a189170cce69ccf4e089985f64ba944a06ee61d0628ef0e63e5e29c2eb7ba18aef8800c3e20cd2bb69e8366b3cf3f72f24aba044bebd88c6132eb6211acf4d9d56c6be918d409b1946dca562a5a6682f76b43e2eacdd93187bf3", 0x97) (async) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000980)='270', 0x3) (async) openat$dm_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f0000000b40)={0x0, r6, r5, 0x0, 0xffffffff, '\x00', {0x3, 0x6, 0x0, 0x2, 0x2, 0x45e2, 0x3, 0xe6, {0x8, 0x10}, {0xffff}, {0x0, 0x3}, 0x1000eb, 0xa, 0x1f02d735, 0x2d2933f1, 0xb96, 0x9594, 0x6, 0xf31a, 0x9, 0x1f, '\x00', 0xce, 0x8002, 0xc, 0xfff8}}) socket$inet(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 527][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.783117][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.817230][ T5145] Bluetooth: hci2: command tx timeout [ 50.817244][ T66] Bluetooth: hci0: command tx timeout [ 50.817244][ T5798] Bluetooth: hci3: command tx timeout [ 50.817407][ T5801] Bluetooth: hci1: command tx timeout [ 50.844987][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.895756][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.896026][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.913059][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.916596][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.916680][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.995823][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.000221][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.001483][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.006626][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.010312][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.014012][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.024850][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.032377][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.033837][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.063009][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.063136][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.069985][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.083334][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.083425][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.136498][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.181083][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.193924][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.194061][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.205255][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.205338][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.229513][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.251869][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.270325][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.270412][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.282158][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.282241][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.377726][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.407657][ T5785] veth0_vlan: entered promiscuous mode [ 51.419160][ T5785] veth1_vlan: entered promiscuous mode [ 51.449680][ T5785] veth0_macvtap: entered promiscuous mode [ 51.451991][ T5785] veth1_macvtap: entered promiscuous mode [ 51.460893][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.466673][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.487576][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.487603][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.487620][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.487637][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.502926][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.562394][ T5784] veth0_vlan: entered promiscuous mode [ 51.563530][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.563541][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.573421][ T5784] veth1_vlan: entered promiscuous mode [ 51.597873][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.597888][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.603036][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.630179][ T5784] veth0_macvtap: entered promiscuous mode [ 51.634487][ T5784] veth1_macvtap: entered promiscuous mode [ 51.649204][ T5783] veth0_vlan: entered promiscuous mode [ 51.657377][ T5783] veth1_vlan: entered promiscuous mode [ 51.661067][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.668822][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.670352][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.727621][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.734676][ T5783] veth0_macvtap: entered promiscuous mode [ 51.755884][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.755897][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.758962][ T5783] veth1_macvtap: entered promiscuous mode [ 51.779064][ T5787] veth0_vlan: entered promiscuous mode [ 51.797449][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.797469][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.806536][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.809130][ T5787] veth1_vlan: entered promiscuous mode [ 51.812945][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.835273][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.868555][ T5787] veth0_macvtap: entered promiscuous mode [ 51.877670][ T5787] veth1_macvtap: entered promiscuous mode [ 51.902712][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.902733][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.913753][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.936835][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.945634][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.945809][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.945841][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.945870][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.948747][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.948762][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.967264][ T5951] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 52.008572][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008766][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008922][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008940][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008955][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008971][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.008986][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.021383][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.021396][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.053596][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.053611][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.073303][ T5956] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 52.080518][ T5956] ip_tables: iptables: counters copy to user failed while replacing table [ 52.217415][ T5969] Zero length message leads to an empty skb [ 52.217517][ T5969] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 52.896318][ T5801] Bluetooth: hci3: command tx timeout [ 52.896351][ T5801] Bluetooth: hci1: command tx timeout [ 52.896348][ T66] Bluetooth: hci2: command tx timeout [ 53.612336][ T44] kauditd_printk_skb: 67 callbacks suppressed [ 53.612348][ T44] audit: type=1400 audit(1794120444.193:231): avc: denied { connect } for pid=6041 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.879478][ T44] audit: type=1400 audit(1794120444.463:232): avc: denied { read write } for pid=6052 comm="syz.0.26" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.879843][ T44] audit: type=1400 audit(1794120444.463:233): avc: denied { open } for pid=6052 comm="syz.0.26" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.921274][ T44] audit: type=1400 audit(1794120444.503:234): avc: denied { ioctl } for pid=6054 comm="syz.3.27" path="socket:[12347]" dev="sockfs" ino=12347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.927621][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 54.046976][ T44] audit: type=1400 audit(1794120444.633:235): avc: denied { mounton } for pid=6059 comm="syz.2.28" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.102834][ T44] audit: type=1400 audit(1794120444.683:236): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.176027][ T44] audit: type=1400 audit(1794120444.763:237): avc: denied { map } for pid=6064 comm="syz.3.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.178683][ T44] audit: type=1400 audit(1794120444.763:238): avc: denied { write } for pid=6064 comm="syz.3.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.323543][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 54.328115][ T44] audit: type=1400 audit(1794120444.913:239): avc: denied { read write } for pid=6082 comm="syz.2.32" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 54.328403][ T44] audit: type=1400 audit(1794120444.913:240): avc: denied { open } for pid=6082 comm="syz.2.32" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 54.352637][ T6083] device-mapper: raid: Choosing default region size of 4MiB [ 54.353330][ T6083] device-mapper: raid: New device injected into existing raid set without 'delta_disks' or 'rebuild' parameter specified [ 54.382559][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 54.394075][ T6089] hsr0: entered allmulticast mode [ 54.394094][ T6089] hsr_slave_0: entered allmulticast mode [ 54.394107][ T6089] hsr_slave_1: entered allmulticast mode [ 54.618604][ T6083] device-mapper: table: 248:0: raid: Unable to assemble array: Invalid superblocks (-EINVAL) [ 54.618631][ T6083] device-mapper: ioctl: error adding target to table [ 54.666102][ T6101] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 54.669372][ T6101] bond1: (slave lo): Enslaving as an active interface with an up link [ 54.670995][ T6101] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 54.795220][ T1381] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.955293][ T1381] usb 5-1: Using ep0 maxpacket: 8 [ 54.955884][ T1381] usb 5-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 54.959775][ T1381] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.959791][ T1381] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.959801][ T1381] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.959815][ T1381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.975326][ T5798] Bluetooth: hci2: command tx timeout [ 54.975354][ T5798] Bluetooth: hci3: command tx timeout [ 54.985663][ T5801] Bluetooth: hci1: command tx timeout [ 54.987674][ T1381] usb 5-1: config 0 descriptor?? [ 55.247186][ T6108] cgroup: No subsys list or none specified [ 55.249214][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 55.251280][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 55.388189][ T6115] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.417544][ T1381] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 55.417620][ T1381] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 55.417632][ T1381] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 55.417643][ T1381] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 55.417654][ T1381] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 55.422651][ T1381] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 55.438813][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 55.618902][ T6129] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 55.619222][ T6129] batman_adv: batadv0: Adding interface: gretap1 [ 55.619228][ T6129] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.619242][ T6129] batman_adv: batadv0: Interface activated: gretap1 [ 55.627034][ T6134] Unsupported ieee802154 address type: 0 [ 55.628254][ T1381] usb 5-1: USB disconnect, device number 2 [ 55.728907][ T6141] PKCS7: Unsupported SignedData version [ 55.732517][ T6145] PKCS7: Unsupported SignedData version [ 55.754697][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 55.801004][ T6152] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 55.840238][ T5801] Bluetooth: hci1: unexpected cc 0x042d length: 41 > 7 [ 55.868513][ T1165] nvmet: connect request for invalid subsystem testsubsys! [ 55.869238][ T6152] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 55.902460][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 55.902785][ T6157] netlink: 1348 bytes leftover after parsing attributes in process `syz.3.47'. [ 56.165245][ T1381] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.318324][ T1381] usb 8-1: unable to get BOS descriptor or descriptor too short [ 56.318366][ T1381] usb 8-1: New USB device found: idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 56.319935][ T1381] usb 8-1: config 4 has an invalid interface number: 13 but max is 0 [ 56.319954][ T1381] usb 8-1: config 4 has no interface number 0 [ 56.319988][ T1381] usb 8-1: config 4 interface 13 has no altsetting 0 [ 56.324567][ T1381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.324588][ T1381] usb 8-1: Product: syz [ 56.324600][ T1381] usb 8-1: Manufacturer: syz [ 56.324610][ T1381] usb 8-1: SerialNumber: syz [ 56.463500][ T6168] FAULT_INJECTION: forcing a failure. [ 56.463500][ T6168] name failslab, interval 1, probability 0, space 0, times 1 [ 56.463587][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) [ 56.463608][ T6168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.463624][ T6168] Call Trace: [ 56.463632][ T6168] [ 56.463639][ T6168] dump_stack_lvl+0x100/0x190 [ 56.463675][ T6168] should_fail_ex.cold+0x5/0xa [ 56.463721][ T6168] should_failslab+0xc2/0x120 [ 56.463744][ T6168] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.463774][ T6168] ? security_file_alloc+0x34/0x2c0 [ 56.463799][ T6168] security_file_alloc+0x34/0x2c0 [ 56.463818][ T6168] init_file+0x95/0x480 [ 56.463843][ T6168] alloc_empty_file+0x79/0x1c0 [ 56.463871][ T6168] alloc_file_pseudo+0x17e/0x290 [ 56.463898][ T6168] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 56.463925][ T6168] ? _raw_spin_unlock+0x28/0x50 [ 56.463944][ T6168] ? alloc_fd+0x471/0x7a0 [ 56.463969][ T6168] __anon_inode_getfile+0xe8/0x280 [ 56.463994][ T6168] anon_inode_getfd+0x68/0xc0 [ 56.464017][ T6168] do_inotify_init+0x454/0x5a0 [ 56.464041][ T6168] __x64_sys_inotify_init1+0x30/0x40 [ 56.464065][ T6168] do_syscall_64+0x123/0x790 [ 56.464089][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.464108][ T6168] RIP: 0033:0x7f91b7f9fb19 [ 56.464123][ T6168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.464140][ T6168] RSP: 002b:00007f91b61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 56.464159][ T6168] RAX: ffffffffffffffda RBX: 00007f91b8225fa0 RCX: 00007f91b7f9fb19 [ 56.464171][ T6168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 56.464182][ T6168] RBP: 00007f91b8037b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.464193][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.464204][ T6168] R13: 00007f91b8226038 R14: 00007f91b8225fa0 R15: 00007ffd990c3328 [ 56.464225][ T6168] [ 56.470011][ T6168] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 56.521630][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 56.522977][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.522996][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.528315][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.528333][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.529139][ T6170] batman_adv: batadv0: Interface deactivated: gretap1 [ 56.529154][ T6170] batman_adv: batadv0: Removing interface: gretap1 [ 56.551814][ T1381] ums-realtek 8-1:4.13: USB Mass Storage device detected [ 56.623578][ T1381] usb 8-1: USB disconnect, device number 2 [ 56.945225][ T5950] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.055308][ T5798] Bluetooth: hci3: command tx timeout [ 57.055344][ T5798] Bluetooth: hci2: command tx timeout [ 57.098814][ T5950] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 57.099839][ T5950] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 57.099858][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.099873][ T5950] usb 6-1: config 1 has no interface number 0 [ 57.101735][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.101753][ T5950] usb 6-1: Product: syz [ 57.101764][ T5950] usb 6-1: Manufacturer: syz [ 57.101775][ T5950] usb 6-1: SerialNumber: syz [ 57.133662][ T5950] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 57.133683][ T5950] usb 6-1: cannot find UAC_HEADER [ 57.173530][ T5950] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 57.186768][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.227778][ T6195] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 57.227797][ T6195] ref_ctr increment failed for inode: 0x55 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030114980 [ 57.229698][ T6195] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 57.229714][ T6195] ref_ctr decrement failed for inode: 0x55 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030114980 [ 57.229743][ T6195] uprobe: syz.0.59:6195 failed to unregister, leaking uprobe [ 57.296040][ T6202] syzkaller0: entered promiscuous mode [ 57.296054][ T6202] syzkaller0: entered allmulticast mode [ 57.407299][ T2406] usb 6-1: USB disconnect, device number 2 [ 58.227640][ T6233] netlink: zone id is out of range [ 58.227716][ T6233] netlink: zone id is out of range [ 58.227766][ T6233] netlink: zone id is out of range [ 58.227972][ T6233] netlink: zone id is out of range [ 58.227989][ T6233] netlink: zone id is out of range [ 58.227997][ T6233] netlink: zone id is out of range [ 58.234398][ T6233] netlink: set zone limit has 4 unknown bytes [ 58.248487][ T6233] device-mapper: table: 248:0: snapshot-merge: Cannot get COW device (-ENOENT) [ 58.248510][ T6233] device-mapper: ioctl: error adding target to table [ 58.385416][ T5950] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.429509][ T6251] sda1: Can't mount, would change RO state [ 58.434190][ T6251] vlan2: entered promiscuous mode [ 58.434202][ T6251] ip6gretap0: entered promiscuous mode [ 58.464257][ T6242] kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x6000000f9ab [ 58.464631][ T6242] kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc2) = 0x6000000f99a [ 58.502612][ T6242] kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x6000000e32f [ 58.536569][ T5950] usb 6-1: New USB device found: idVendor=0a5c, idProduct=21e8, bcdDevice=1.00 [ 58.537712][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.537757][ T5950] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 58.537778][ T5950] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.537796][ T5950] usb 6-1: too many endpoints for config 1 interface 1 altsetting 238: 78, using maximum allowed: 30 [ 58.537825][ T5950] usb 6-1: config 1 interface 1 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 58.537846][ T5950] usb 6-1: config 1 interface 1 has no altsetting 0 [ 58.537871][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.543834][ T6228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.543974][ T6228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.544688][ T6242] kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x6000000ebfd [ 58.545243][ T6242] kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x6000000ebeb [ 58.578648][ T6242] kvm_intel: kvm [6240]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x1d9) = 0x6000000d533 [ 58.666436][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 58.692578][ T6260] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.694178][ T6262] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 58.713837][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.724439][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.728453][ T6262] bond1: (slave team0): making interface the new active one [ 58.729516][ T6262] bond1: (slave team0): Enslaving as an active interface with an up link [ 58.731885][ T6262] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 58.750491][ T5950] usb 6-1: USB disconnect, device number 3 [ 58.754431][ T66] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 58.817125][ T5875] bond1: (slave team0): link status definitely down, disabling slave [ 58.818931][ T5875] bond1: now running without any active interface! [ 58.895054][ T6270] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.895077][ T6270] CIFS mount error: No usable UNC path provided in device string! [ 58.895077][ T6270] [ 58.897515][ T6270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.155258][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.270111][ T44] kauditd_printk_skb: 98 callbacks suppressed [ 59.270123][ T44] audit: type=1400 audit(1794120449.853:339): avc: denied { write } for pid=6274 comm="syz.0.80" name="/" dev="9p" ino=76546265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.271048][ T44] audit: type=1400 audit(1794120449.853:340): avc: denied { add_name } for pid=6274 comm="syz.0.80" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.271072][ T44] audit: type=1400 audit(1794120449.853:341): avc: denied { create } for pid=6274 comm="syz.0.80" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.271091][ T44] audit: type=1400 audit(1794120449.853:342): avc: denied { associate } for pid=6274 comm="syz.0.80" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.305072][ T44] audit: type=1400 audit(1794120449.893:343): avc: denied { prog_run } for pid=6279 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.306379][ T44] audit: type=1400 audit(1794120449.893:344): avc: denied { read write } for pid=6279 comm="syz.1.82" name="vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.306815][ T44] audit: type=1400 audit(1794120449.893:345): avc: denied { open } for pid=6279 comm="syz.1.82" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.312067][ T44] audit: type=1400 audit(1794120449.903:346): avc: denied { read } for pid=6279 comm="syz.1.82" name="video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.313724][ T44] audit: type=1400 audit(1794120449.903:347): avc: denied { open } for pid=6279 comm="syz.1.82" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.313759][ T44] audit: type=1400 audit(1794120449.903:348): avc: denied { read append open } for pid=6274 comm="syz.0.80" path="/20/file0/cpuacct.usage_percpu" dev="9p" ino=76546321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.318666][ T42] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 59.321088][ T42] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 59.321100][ T42] usb 8-1: config 1 has no interface number 0 [ 59.323414][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.323431][ T42] usb 8-1: Product: syz [ 59.323442][ T42] usb 8-1: Manufacturer: syz [ 59.323452][ T42] usb 8-1: SerialNumber: syz [ 59.330922][ T6287] __nla_validate_parse: 4 callbacks suppressed [ 59.330936][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 59.330948][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 59.340798][ T42] usb 8-1: 3:0 : does not exist [ 59.340811][ T42] usb 8-1: 3:0 : does not exist [ 59.348929][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 59.389132][ T66] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 59.540049][ T6270] netlink: 228 bytes leftover after parsing attributes in process `syz.3.78'. [ 59.551452][ T42] usb 8-1: USB disconnect, device number 3 [ 59.720618][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.784761][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.851218][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.918464][ T6297] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 59.932351][ T5895] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 59.981821][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.115435][ T5875] bridge_slave_1: left allmulticast mode [ 60.115482][ T5875] bridge_slave_1: left promiscuous mode [ 60.116708][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.120481][ T5875] bridge_slave_0: left allmulticast mode [ 60.120497][ T5875] bridge_slave_0: left promiscuous mode [ 60.120657][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.186373][ T5886] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 60.204780][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.205801][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.206442][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.207399][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.207953][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.274450][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.280995][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.284646][ T5875] bond0 (unregistering): Released all slaves [ 60.475928][ T6305] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.481921][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.483796][ T6323] ip_tables: iptables: counters copy to user failed while replacing table [ 60.485054][ T5950] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.697074][ T5895] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 60.750928][ T6297] ceph: No mds server is up or the cluster is laggy [ 60.842398][ T5875] hsr_slave_0: left promiscuous mode [ 60.845578][ T5875] hsr_slave_1: left promiscuous mode [ 60.847430][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.847460][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.848620][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.848635][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.869807][ T5875] veth1_macvtap: left promiscuous mode [ 60.869851][ T5875] veth0_macvtap: left promiscuous mode [ 60.869929][ T5875] veth1_vlan: left promiscuous mode [ 60.869990][ T5875] veth0_vlan: left promiscuous mode [ 60.920441][ T6353] Bluetooth: MGMT ver 1.23 [ 61.064062][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 61.072762][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 61.167654][ T6349] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 61.174036][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.307648][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.307784][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.307878][ T6305] bridge_slave_0: entered allmulticast mode [ 61.309183][ T6305] bridge_slave_0: entered promiscuous mode [ 61.322267][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.322375][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.322471][ T6305] bridge_slave_1: entered allmulticast mode [ 61.323842][ T6305] bridge_slave_1: entered promiscuous mode [ 61.359473][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.373031][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.377152][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.407342][ T6305] team0: Port device team_slave_0 added [ 61.409464][ T6305] team0: Port device team_slave_1 added [ 61.430513][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.430529][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.430574][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.431961][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.431972][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.431989][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.474383][ T6381] xt_hashlimit: size too large, truncated to 1048576 [ 61.492757][ T6305] hsr_slave_0: entered promiscuous mode [ 61.493509][ T6305] hsr_slave_1: entered promiscuous mode [ 61.494057][ T6305] debugfs: 'hsr0' already exists in 'hsr' [ 61.494070][ T6305] Cannot create hsr debugfs directory [ 61.655323][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.700904][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.717633][ T6305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.721640][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.722569][ T6305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.731588][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.732433][ T6305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.739091][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.739853][ T6305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.746168][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.789866][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.797082][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.802398][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.802484][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.804310][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.804396][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.825708][ T5886] usb 7-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 61.827335][ T5886] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 61.827351][ T5886] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.827362][ T5886] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.828951][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 61.828963][ T5886] usb 7-1: Product: syz [ 61.828970][ T5886] usb 7-1: Manufacturer: syz [ 62.033324][ T6379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.033403][ T6379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.043285][ T5886] dvb_ttusb_budget: ttusb_init_controller: error [ 62.043331][ T5886] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 62.083647][ T5886] DVB: Unable to find symbol cx22700_attach() [ 62.113764][ T5886] DVB: Unable to find symbol tda10046_attach() [ 62.113778][ T5886] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 62.119510][ T5886] usb 7-1: USB disconnect, device number 2 [ 62.131052][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.255484][ T66] Bluetooth: hci0: command tx timeout [ 62.312081][ T6305] veth0_vlan: entered promiscuous mode [ 62.318188][ T6305] veth1_vlan: entered promiscuous mode [ 62.330833][ T6305] veth0_macvtap: entered promiscuous mode [ 62.332857][ T6305] veth1_macvtap: entered promiscuous mode [ 62.339756][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.343744][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.385329][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.385366][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.385394][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.385420][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.402262][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.402274][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.421842][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.421859][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.462364][ T6432] syz_tun: entered allmulticast mode [ 62.470935][ T6432] dvmrp6: entered allmulticast mode [ 62.472072][ T6432] dvmrp6: left allmulticast mode [ 62.572034][ T6431] syz_tun: left allmulticast mode [ 62.584531][ T6448] netlink: del zone limit has 4 unknown bytes [ 62.584796][ T6448] netlink: del zone limit has 4 unknown bytes [ 62.617851][ T6452] ======================================================= [ 62.617851][ T6452] WARNING: The mand mount option has been deprecated and [ 62.617851][ T6452] and is ignored by this kernel. Remove the mand [ 62.617851][ T6452] option from the mount to silence this warning. [ 62.617851][ T6452] ======================================================= [ 62.748817][ T6457] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 62.748842][ T6457] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 62.880640][ T6465] ima: policy update completed [ 62.967650][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 62.967657][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 63.265125][ T6488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 63.450410][ T66] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 63.452656][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 63.685286][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.856192][ T42] usb 8-1: New USB device found: idVendor=1110, idProduct=900f, bcdDevice=1.00 [ 63.857202][ T42] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 63.857242][ T42] usb 8-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.857272][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.027051][ T42] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 64.168730][ T6507] bond0: option arp_interval: invalid value (/dev/video#) [ 64.168755][ T6507] bond0: option arp_interval: allowed values 0 - 2147483647 [ 64.269595][ T6509] syzkaller0: entered promiscuous mode [ 64.269608][ T6509] syzkaller0: entered allmulticast mode [ 64.335286][ T66] Bluetooth: hci0: command tx timeout [ 64.419849][ T44] kauditd_printk_skb: 81 callbacks suppressed [ 64.419861][ T44] audit: type=1400 audit(1794120455.003:430): avc: denied { ioctl } for pid=6515 comm="syz.1.118" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15816 ioctlcmd=0x8080583a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.653814][ T44] audit: type=1800 audit(1794120455.233:431): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.119" name="gpe00" dev="sysfs" ino=1613 res=0 errno=-22 [ 64.680087][ T44] audit: type=1800 audit(1794120455.263:432): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145406 res=0 errno=-22 [ 64.684064][ T44] audit: type=1400 audit(1794120455.263:433): avc: denied { write } for pid=6517 comm="syz.1.119" name="/" dev="9p" ino=76546265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.691319][ T6519] ACPI: Can not change Invalid GPE/Fixed Event status [ 64.733943][ T44] audit: type=1400 audit(1794120455.313:434): avc: denied { watch watch_reads } for pid=6522 comm="syz.3.120" path="/31" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.783275][ T6527] syzkaller0: entered promiscuous mode [ 64.783296][ T6527] syzkaller0: entered allmulticast mode [ 64.840899][ T42] usb 8-1: selecting invalid altsetting 8 [ 64.840920][ T42] usb 8-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 64.840974][ T42] usb 8-1: [UEAGLE-ATM] urb submission failed with error -19 [ 64.841045][ T42] ueagle-atm 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 64.844998][ T44] audit: type=1800 audit(1794120455.423:435): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145518 res=0 errno=-22 [ 64.852742][ T44] audit: type=1800 audit(1794120455.433:436): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145550 res=0 errno=-22 [ 64.852951][ T42] usb 8-1: USB disconnect, device number 4 [ 64.999341][ T6530] bond2: Unable to set up delay as MII monitoring is disabled [ 65.001750][ T6530] bond2 (unregistering): Released all slaves [ 65.038653][ T6532] netlink: 'syz.3.122': attribute type 4 has an invalid length. [ 65.046752][ T6532] netlink: 'syz.3.122': attribute type 4 has an invalid length. [ 65.051180][ T44] audit: type=1400 audit(1794120455.633:437): avc: denied { append } for pid=6529 comm="syz.3.122" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.054506][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 65.115768][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 65.202270][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 65.376514][ T66] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 65.376553][ T66] Bluetooth: hci2: Injecting HCI hardware error event [ 65.377092][ T66] Bluetooth: hci2: hardware error 0x00 [ 65.401094][ T6547] netlink: 112 bytes leftover after parsing attributes in process `syz.1.127'. [ 65.520924][ T6558] ptrace attach of "/syz-executor exec"[5785] was attempted by "/syz-executor exec"[6558] [ 65.531844][ T6560] xt_hashlimit: size too large, truncated to 1048576 [ 65.561200][ T44] audit: type=1400 audit(1794120456.143:438): avc: denied { getopt } for pid=6562 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.561907][ T44] audit: type=1400 audit(1794120456.143:439): avc: denied { connect } for pid=6562 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.585733][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 65.589491][ T6569] xt_hashlimit: size too large, truncated to 1048576 [ 65.777512][ T5801] Bluetooth: hci1: unexpected event for opcode 0xbb77 [ 65.778506][ T5801] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 65.819800][ T6588] sda1: Can't mount, would change RO state [ 65.820137][ T6588] sda1: Can't mount, would change RO state [ 65.820403][ T6588] sda1: Can't mount, would change RO state [ 65.820672][ T6588] sda1: Can't mount, would change RO state [ 65.820934][ T6588] sda1: Can't mount, would change RO state [ 65.821198][ T6588] sda1: Can't mount, would change RO state [ 65.821466][ T6588] sda1: Can't mount, would change RO state [ 65.821862][ T6588] sda1: Can't mount, would change RO state [ 65.822197][ T6588] sda1: Can't mount, would change RO state [ 65.822472][ T6588] sda1: Can't mount, would change RO state [ 65.822797][ T6588] sda1: Can't mount, would change RO state [ 65.823060][ T6588] sda1: Can't mount, would change RO state [ 65.823323][ T6588] sda1: Can't mount, would change RO state [ 65.823592][ T6588] sda1: Can't mount, would change RO state [ 65.823854][ T6588] sda1: Can't mount, would change RO state [ 65.824162][ T6588] sda1: Can't mount, would change RO state [ 65.824459][ T6588] sda1: Can't mount, would change RO state [ 65.824727][ T6588] sda1: Can't mount, would change RO state [ 65.824985][ T6588] sda1: Can't mount, would change RO state [ 65.825413][ T6588] sda1: Can't mount, would change RO state [ 65.825687][ T6588] sda1: Can't mount, would change RO state [ 65.826015][ T6588] sda1: Can't mount, would change RO state [ 65.827457][ T6588] sda1: Can't mount, would change RO state [ 65.827820][ T6588] sda1: Can't mount, would change RO state [ 65.828089][ T6588] sda1: Can't mount, would change RO state [ 65.828380][ T6588] sda1: Can't mount, would change RO state [ 65.828652][ T6588] sda1: Can't mount, would change RO state [ 65.828920][ T6588] sda1: Can't mount, would change RO state [ 65.829220][ T6588] sda1: Can't mount, would change RO state [ 65.829489][ T6588] sda1: Can't mount, would change RO state [ 65.829762][ T6588] sda1: Can't mount, would change RO state [ 65.830060][ T6588] sda1: Can't mount, would change RO state [ 65.830328][ T6588] sda1: Can't mount, would change RO state [ 65.830645][ T6588] sda1: Can't mount, would change RO state [ 65.830908][ T6588] sda1: Can't mount, would change RO state [ 65.831189][ T6588] sda1: Can't mount, would change RO state [ 65.831479][ T6588] sda1: Can't mount, would change RO state [ 65.831773][ T6588] sda1: Can't mount, would change RO state [ 65.832158][ T6588] sda1: Can't mount, would change RO state [ 65.832451][ T6588] sda1: Can't mount, would change RO state [ 65.832742][ T6588] sda1: Can't mount, would change RO state [ 65.833032][ T6588] sda1: Can't mount, would change RO state [ 65.833297][ T6588] sda1: Can't mount, would change RO state [ 65.833591][ T6588] sda1: Can't mount, would change RO state [ 65.833885][ T6588] sda1: Can't mount, would change RO state [ 65.834170][ T6588] sda1: Can't mount, would change RO state [ 65.834491][ T6588] sda1: Can't mount, would change RO state [ 65.834823][ T6588] sda1: Can't mount, would change RO state [ 65.835122][ T6588] sda1: Can't mount, would change RO state [ 65.837933][ T6588] sda1: Can't mount, would change RO state [ 65.838254][ T6588] sda1: Can't mount, would change RO state [ 65.838556][ T6588] sda1: Can't mount, would change RO state [ 65.838840][ T6588] sda1: Can't mount, would change RO state [ 65.839086][ T6588] sda1: Can't mount, would change RO state [ 65.839361][ T6588] sda1: Can't mount, would change RO state [ 65.839659][ T6588] sda1: Can't mount, would change RO state [ 65.839940][ T6588] sda1: Can't mount, would change RO state [ 65.840198][ T6588] sda1: Can't mount, would change RO state [ 65.840504][ T6588] sda1: Can't mount, would change RO state [ 65.840768][ T6588] sda1: Can't mount, would change RO state [ 65.841051][ T6588] sda1: Can't mount, would change RO state [ 65.841311][ T6588] sda1: Can't mount, would change RO state [ 65.841596][ T6588] sda1: Can't mount, would change RO state [ 65.841855][ T6588] sda1: Can't mount, would change RO state [ 65.842146][ T6588] sda1: Can't mount, would change RO state [ 65.842660][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.138'. [ 65.896239][ T6593] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.139'. [ 66.031442][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.032926][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.034137][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.034454][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.035037][ T6598] devtmpfs: Unknown parameter 'devtmpfs' [ 66.036853][ T6598] random: crng reseeded on system resumption [ 66.101089][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 66.285576][ T6480] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 66.288903][ T6602] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 17171712 (only 8 groups) [ 66.345299][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.378617][ T6609] netlink: 'syz.1.145': attribute type 11 has an invalid length. [ 66.404072][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 66.415440][ T5801] Bluetooth: hci0: command tx timeout [ 66.447601][ T6480] usb 9-1: not running at top speed; connect to a high speed hub [ 66.447631][ T6480] usb 9-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 66.448642][ T6480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 66.448665][ T6480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 66.450709][ T6480] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.450726][ T6480] usb 9-1: Product: syz [ 66.450737][ T6480] usb 9-1: Manufacturer: syz [ 66.450749][ T6480] usb 9-1: SerialNumber: syz [ 66.454174][ T6597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 66.457060][ T6480] oti6858 9-1:1.0: oti6858 converter detected [ 66.464716][ T6480] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 66.497293][ T30] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 66.498327][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.498351][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.498369][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.498401][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.503464][ T30] usb 8-1: config 0 descriptor?? [ 66.504956][ T6620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6620 comm=syz.1.146 [ 66.638401][ T6631] xt_hashlimit: size too large, truncated to 1048576 [ 66.667675][ T5937] usb 9-1: USB disconnect, device number 2 [ 66.679340][ T5937] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 66.680705][ T5937] oti6858 9-1:1.0: device disconnected [ 66.760941][ T6643] FAULT_INJECTION: forcing a failure. [ 66.760941][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 66.760960][ T6643] CPU: 2 UID: 0 PID: 6643 Comm: syz.1.152 Not tainted syzkaller #0 PREEMPT(full) [ 66.760972][ T6643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.760979][ T6643] Call Trace: [ 66.760983][ T6643] [ 66.760987][ T6643] dump_stack_lvl+0x100/0x190 [ 66.761008][ T6643] should_fail_ex.cold+0x5/0xa [ 66.761026][ T6643] should_failslab+0xc2/0x120 [ 66.761049][ T6643] __kmalloc_noprof+0xfc/0x840 [ 66.761067][ T6643] ? __register_sysctl_table+0xac/0x1650 [ 66.761081][ T6643] __register_sysctl_table+0xac/0x1650 [ 66.761095][ T6643] ? lock_acquire+0x1d1/0x380 [ 66.761112][ T6643] ? __pfx___register_sysctl_table+0x10/0x10 [ 66.761123][ T6643] ? is_module_address+0x5f/0xf0 [ 66.761133][ T6643] ? is_module_address+0x5f/0xf0 [ 66.761145][ T6643] register_net_sysctl_sz+0x325/0x420 [ 66.761163][ T6643] neigh_sysctl_register+0x326/0x660 [ 66.761184][ T6643] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 66.761203][ T6643] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 66.761214][ T6643] ? lockdep_init_map_type+0x5c/0x250 [ 66.761234][ T6643] ? neigh_table_register+0xd30/0x11b0 [ 66.761245][ T6643] ? __pfx_arp_net_init+0x10/0x10 [ 66.761266][ T6643] arp_net_init+0x7b/0x160 [ 66.761278][ T6643] ops_init+0x1e2/0x5f0 [ 66.761299][ T6643] setup_net+0x118/0x3a0 [ 66.761314][ T6643] ? __pfx_setup_net+0x10/0x10 [ 66.761328][ T6643] ? bpf_lsm_namespace_init+0x9/0x10 [ 66.761343][ T6643] copy_net_ns+0x340/0x7a0 [ 66.761361][ T6643] create_new_namespaces+0x3ea/0xac0 [ 66.761378][ T6643] unshare_nsproxy_namespaces+0xf6/0x210 [ 66.761393][ T6643] ksys_unshare+0x44f/0x980 [ 66.761407][ T6643] ? __pfx_ksys_unshare+0x10/0x10 [ 66.761420][ T6643] ? fput+0x7c/0x100 [ 66.761433][ T6643] ? ksys_write+0x1ac/0x250 [ 66.761447][ T6643] __x64_sys_unshare+0x31/0x40 [ 66.761460][ T6643] do_syscall_64+0x123/0x790 [ 66.761474][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.761484][ T6643] RIP: 0033:0x7ff9d839fb19 [ 66.761493][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.761503][ T6643] RSP: 002b:00007ff9d928a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.761513][ T6643] RAX: ffffffffffffffda RBX: 00007ff9d8625fa0 RCX: 00007ff9d839fb19 [ 66.761519][ T6643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 66.761525][ T6643] RBP: 00007ff9d8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 66.761531][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.761537][ T6643] R13: 00007ff9d8626038 R14: 00007ff9d8625fa0 R15: 00007fff9fdad528 [ 66.761550][ T6643] [ 66.826031][ T6643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.926150][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.926179][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.964724][ T30] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.083615][ T6657] FAULT_INJECTION: forcing a failure. [ 67.083615][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 67.083632][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT(full) [ 67.083644][ T6657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.083650][ T6657] Call Trace: [ 67.083663][ T6657] [ 67.083668][ T6657] dump_stack_lvl+0x100/0x190 [ 67.083696][ T6657] should_fail_ex.cold+0x5/0xa [ 67.083714][ T6657] should_failslab+0xc2/0x120 [ 67.083731][ T6657] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.083746][ T6657] ? rfkill_fop_open+0x1cc/0x480 [ 67.083764][ T6657] rfkill_fop_open+0x1cc/0x480 [ 67.083776][ T6657] ? __pfx_rfkill_fop_open+0x10/0x10 [ 67.083787][ T6657] misc_open+0x26d/0x450 [ 67.083804][ T6657] ? __pfx_misc_open+0x10/0x10 [ 67.083818][ T6657] chrdev_open+0x234/0x6a0 [ 67.083832][ T6657] ? __pfx_chrdev_open+0x10/0x10 [ 67.083847][ T6657] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 67.083866][ T6657] do_dentry_open+0x674/0x1470 [ 67.083877][ T6657] ? __pfx_chrdev_open+0x10/0x10 [ 67.083892][ T6657] vfs_open_consume+0xcc/0x460 [ 67.083908][ T6657] path_openat+0x1547/0x23f0 [ 67.083927][ T6657] ? __pfx_path_openat+0x10/0x10 [ 67.083954][ T6657] do_file_open+0x20e/0x430 [ 67.083972][ T6657] ? __pfx_do_file_open+0x10/0x10 [ 67.084005][ T6657] ? _raw_spin_unlock+0x28/0x50 [ 67.084018][ T6657] ? alloc_fd+0x471/0x7a0 [ 67.084035][ T6657] do_sys_openat2+0x163/0x1d0 [ 67.084051][ T6657] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.084071][ T6657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.084089][ T6657] __x64_sys_openat+0x12d/0x210 [ 67.084104][ T6657] ? __pfx___x64_sys_openat+0x10/0x10 [ 67.084124][ T6657] do_syscall_64+0x123/0x790 [ 67.084138][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.084150][ T6657] RIP: 0033:0x7ff9d839fb19 [ 67.084159][ T6657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.084169][ T6657] RSP: 002b:00007ff9d928a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.084180][ T6657] RAX: ffffffffffffffda RBX: 00007ff9d8625fa0 RCX: 00007ff9d839fb19 [ 67.084186][ T6657] RDX: 0000000000000801 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 67.084192][ T6657] RBP: 00007ff9d8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.084198][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.084203][ T6657] R13: 00007ff9d8626038 R14: 00007ff9d8625fa0 R15: 00007fff9fdad528 [ 67.084218][ T6657] [ 67.122920][ T6480] usb 8-1: USB disconnect, device number 5 [ 67.181384][ T6662] netlink: 'syz.1.156': attribute type 21 has an invalid length. [ 67.181501][ T6662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.156'. [ 67.188255][ T6659] could not allocate digest TFM handle blake2s-256-x86 [ 67.334322][ T6670] FAULT_INJECTION: forcing a failure. [ 67.334322][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 67.334343][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.1.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.334358][ T6670] Tainted: [L]=SOFTLOCKUP [ 67.334362][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.334368][ T6670] Call Trace: [ 67.334373][ T6670] [ 67.334377][ T6670] dump_stack_lvl+0x100/0x190 [ 67.334398][ T6670] should_fail_ex.cold+0x5/0xa [ 67.334416][ T6670] should_failslab+0xc2/0x120 [ 67.334429][ T6670] __kmalloc_noprof+0xfc/0x840 [ 67.334445][ T6670] ? apply_wqattrs_prepare+0xf8/0x980 [ 67.334462][ T6670] apply_wqattrs_prepare+0xf8/0x980 [ 67.334478][ T6670] __alloc_workqueue+0xdae/0x1900 [ 67.334497][ T6670] ? __mutex_unlock_slowpath+0x35d/0x930 [ 67.334534][ T6670] alloc_workqueue_noprof+0xc7/0x130 [ 67.334551][ T6670] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 67.334571][ T6670] ? __ceph_monc_want_map+0x189/0x360 [ 67.334587][ T6670] ? ceph_get_tree+0x399/0x2020 [ 67.334602][ T6670] ceph_get_tree+0x3fa/0x2020 [ 67.334616][ T6670] ? security_capable+0x80/0x260 [ 67.334631][ T6670] vfs_get_tree+0x92/0x320 [ 67.334647][ T6670] path_mount+0x7d0/0x2850 [ 67.334667][ T6670] ? __pfx_path_mount+0x10/0x10 [ 67.334681][ T6670] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.334694][ T6670] ? putname+0xb1/0x110 [ 67.334707][ T6670] ? kmem_cache_free+0x127/0x6c0 [ 67.334725][ T6670] ? __x64_sys_mount+0x293/0x310 [ 67.334740][ T6670] __x64_sys_mount+0x293/0x310 [ 67.334755][ T6670] ? __pfx___x64_sys_mount+0x10/0x10 [ 67.334774][ T6670] do_syscall_64+0x123/0x790 [ 67.334787][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.334798][ T6670] RIP: 0033:0x7ff9d839fb19 [ 67.334808][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.334817][ T6670] RSP: 002b:00007ff9d928a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.334828][ T6670] RAX: ffffffffffffffda RBX: 00007ff9d8625fa0 RCX: 00007ff9d839fb19 [ 67.334834][ T6670] RDX: 0000200000025e00 RSI: 0000200000025dc0 RDI: 0000200000025d80 [ 67.334840][ T6670] RBP: 00007ff9d8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.334846][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.334852][ T6670] R13: 00007ff9d8626038 R14: 00007ff9d8625fa0 R15: 00007fff9fdad528 [ 67.334865][ T6670] [ 67.407114][ T6676] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 67.407133][ T6676] netlink: 156 bytes leftover after parsing attributes in process `syz.1.160'. [ 67.408927][ T6676] net_ratelimit: 31 callbacks suppressed [ 67.408940][ T6676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 67.410002][ T6676] trusted_key: encrypted_key: insufficient parameters specified [ 67.414244][ T6676] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 67.414264][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.1.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.414288][ T6676] Tainted: [L]=SOFTLOCKUP [ 67.414294][ T6676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.414304][ T6676] Call Trace: [ 67.414310][ T6676] [ 67.414317][ T6676] dump_stack_lvl+0x100/0x190 [ 67.414351][ T6676] sysfs_warn_dup.cold+0x1c/0x28 [ 67.414380][ T6676] sysfs_create_dir_ns+0x24b/0x2b0 [ 67.414406][ T6676] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 67.414430][ T6676] ? find_held_lock+0x2b/0x80 [ 67.414449][ T6676] ? kobject_add_internal+0x25f/0x930 [ 67.414475][ T6676] ? kobject_add_internal+0x25f/0x930 [ 67.414503][ T6676] ? class_dir_child_ns_type+0xd/0x60 [ 67.414569][ T6676] kobject_add_internal+0x2c8/0x930 [ 67.414600][ T6676] kobject_add+0x16a/0x1e0 [ 67.414626][ T6676] ? __pfx_kobject_add+0x10/0x10 [ 67.414653][ T6676] ? get_device_parent+0x1b3/0x4c0 [ 67.414676][ T6676] ? kobject_put+0xb9/0x640 [ 67.414706][ T6676] device_add+0x294/0x1970 [ 67.414731][ T6676] ? lockdep_init_map_type+0x5c/0x250 [ 67.414756][ T6676] ? __pfx_device_add+0x10/0x10 [ 67.414778][ T6676] ? lockdep_init_map_type+0x5c/0x250 [ 67.414804][ T6676] ? __init_waitqueue_head+0xca/0x150 [ 67.414837][ T6676] tty_register_device_attr+0x388/0x810 [ 67.414858][ T6676] ? lockdep_init_map_type+0x5c/0x250 [ 67.414882][ T6676] ? __pfx_tty_register_device_attr+0x10/0x10 [ 67.414908][ T6676] ? tty_port_init+0x156/0x1c0 [ 67.414931][ T6676] gsm_activate_mux+0x155/0x2a0 [ 67.414951][ T6676] gsmld_ioctl+0xbbc/0x15c0 [ 67.414976][ T6676] ? kasan_quarantine_put+0x104/0x240 [ 67.414993][ T6676] ? __pfx_gsmld_ioctl+0x10/0x10 [ 67.415030][ T6676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.415074][ T6676] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 67.415105][ T6676] ? __pfx_gsmld_ioctl+0x10/0x10 [ 67.415123][ T6676] tty_ioctl+0x12f4/0x1870 [ 67.415143][ T6676] ? __pfx_tty_ioctl+0x10/0x10 [ 67.415160][ T6676] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 67.415181][ T6676] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.415208][ T6676] ? __fget_files+0x34/0x3d0 [ 67.415241][ T6676] ? selinux_file_ioctl+0x1e0/0x290 [ 67.415258][ T6676] ? selinux_file_ioctl+0x1e7/0x290 [ 67.415276][ T6676] ? __pfx_tty_ioctl+0x10/0x10 [ 67.415295][ T6676] __x64_sys_ioctl+0x18e/0x210 [ 67.415315][ T6676] do_syscall_64+0x123/0x790 [ 67.415338][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.415356][ T6676] RIP: 0033:0x7ff9d839fb19 [ 67.415371][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.415388][ T6676] RSP: 002b:00007ff9d928a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.415405][ T6676] RAX: ffffffffffffffda RBX: 00007ff9d8625fa0 RCX: 00007ff9d839fb19 [ 67.415416][ T6676] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 67.415426][ T6676] RBP: 00007ff9d8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.415436][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.415446][ T6676] R13: 00007ff9d8626038 R14: 00007ff9d8625fa0 R15: 00007fff9fdad528 [ 67.415470][ T6676] [ 67.415618][ T6676] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.457273][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 67.722350][ T6682] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.834980][ T6682] kvm: MWAIT instruction emulated as NOP! [ 68.085274][ T5794] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 68.247999][ T5794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 68.248041][ T5794] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 68.249157][ T5794] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 68.249177][ T5794] usb 6-1: config 142 descriptor has 1 excess byte, ignoring [ 68.249191][ T5794] usb 6-1: config 142 has no interface number 0 [ 68.249314][ T5794] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 68.249335][ T5794] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 68.249353][ T5794] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 68.249370][ T5794] usb 6-1: config 142 interface 251 has no altsetting 0 [ 68.252575][ T5794] usb 6-1: string descriptor 0 read error: -22 [ 68.252681][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.257948][ T6697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.258107][ T6697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.260052][ T5794] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 68.262477][ T5794] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 68.496346][ T66] Bluetooth: hci0: command tx timeout [ 68.688797][ T6741] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 68.690788][ T6742] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.694891][ T6742] usb 2-1: USB disconnect, device number 2 [ 68.841017][ T6747] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 69.192260][ T6774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.237517][ T6774] md: invalid raid superblock magic on ram8 [ 69.237536][ T6774] md: ram8 does not have a valid v0.0 superblock, not importing! [ 69.237642][ T6774] md: md_import_device returned -22 [ 69.275564][ T6774] md: invalid raid superblock magic on ram9 [ 69.275576][ T6774] md: ram9 does not have a valid v0.0 superblock, not importing! [ 69.275609][ T6774] md: md_import_device returned -22 [ 69.315227][ T6774] md: md4 stopped. [ 69.337361][ T6697] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 69.337378][ T6697] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 69.337564][ C2] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 69.578740][ T6787] jffs2: notice: (6787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.592209][ T44] kauditd_printk_skb: 154 callbacks suppressed [ 69.592227][ T44] audit: type=1400 audit(1794120460.173:594): avc: denied { write } for pid=6786 comm="syz.4.184" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.592831][ T44] audit: type=1400 audit(1794120460.173:595): avc: denied { add_name } for pid=6786 comm="syz.4.184" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.595781][ T44] audit: type=1400 audit(1794120460.173:596): avc: denied { create } for pid=6786 comm="syz.4.184" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.599978][ T44] audit: type=1400 audit(1794120460.183:597): avc: denied { read write open } for pid=6786 comm="syz.4.184" path="/16/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.610635][ T43] usb 6-1: USB disconnect, device number 4 [ 69.623233][ T43] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 69.623701][ T43] cypress_m8 6-1:142.251: device disconnected [ 69.983153][ T44] audit: type=1400 audit(1794120460.563:598): avc: denied { read } for pid=6789 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.203789][ T44] audit: type=1800 audit(1794120460.783:599): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.187" name="provisioning_mode" dev="sysfs" ino=25461 res=0 errno=-22 [ 70.215025][ T6799] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 70.215025][ T6799] The task syz.1.186 (6799) triggered the difference, watch for misbehavior. [ 70.227551][ T5886] bridge0: entered promiscuous mode [ 71.094814][ T6808] __nla_validate_parse: 2 callbacks suppressed [ 71.094832][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 71.094869][ T6808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.191'. [ 71.122254][ T6808] FAULT_INJECTION: forcing a failure. [ 71.122254][ T6808] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.122284][ T6808] CPU: 2 UID: 0 PID: 6808 Comm: syz.3.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.122308][ T6808] Tainted: [L]=SOFTLOCKUP [ 71.122314][ T6808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.122324][ T6808] Call Trace: [ 71.122347][ T6808] [ 71.122355][ T6808] dump_stack_lvl+0x100/0x190 [ 71.122399][ T6808] should_fail_ex.cold+0x5/0xa [ 71.122429][ T6808] get_futex_key+0x1c9/0x13e0 [ 71.122459][ T6808] ? __pfx_get_futex_key+0x10/0x10 [ 71.122486][ T6808] futex_wake+0xf4/0x5e0 [ 71.122540][ T6808] ? trace_kmem_cache_alloc+0xdd/0x100 [ 71.122564][ T6808] ? __pfx_futex_wake+0x10/0x10 [ 71.122594][ T6808] ? lockdep_init_map_type+0x5c/0x250 [ 71.122625][ T6808] do_futex+0x2b2/0x440 [ 71.122648][ T6808] ? __pfx_do_futex+0x10/0x10 [ 71.122676][ T6808] __x64_sys_futex+0x34f/0x4d0 [ 71.122699][ T6808] ? fd_install+0x223/0x580 [ 71.122721][ T6808] ? __pfx___x64_sys_futex+0x10/0x10 [ 71.122753][ T6808] do_syscall_64+0x123/0x790 [ 71.122783][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.122802][ T6808] RIP: 0033:0x7fd4afd9fb19 [ 71.122819][ T6808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.122836][ T6808] RSP: 002b:00007fd4b0c0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.122855][ T6808] RAX: ffffffffffffffda RBX: 00007fd4b0025fa8 RCX: 00007fd4afd9fb19 [ 71.122868][ T6808] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4b0025fac [ 71.122879][ T6808] RBP: 00007fd4b0025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 71.122891][ T6808] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 71.122902][ T6808] R13: 00007fd4b0026038 R14: 00007fff59733d20 R15: 00007fff59733e08 [ 71.122927][ T6808] [ 71.190021][ T44] audit: type=1400 audit(1794120461.773:600): avc: denied { create } for pid=6807 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.224492][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.483517][ T44] audit: type=1400 audit(1794120462.063:601): avc: denied { write } for pid=6823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.569057][ T44] audit: type=1400 audit(1794120462.153:602): avc: denied { write } for pid=6828 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.017193][ T44] audit: type=1400 audit(1794120462.593:603): avc: denied { mount } for pid=6846 comm="syz.4.203" name="/" dev="ramfs" ino=19768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.045894][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 72.093886][ T6855] process 'syz.1.206' launched './file1' with NULL argv: empty string added [ 72.107868][ T6853] ublkb0: truncate capacity from 36028797018963968 to 18014398509481983 [ 72.108761][ T6852] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 72.157953][ T6857] lo: entered allmulticast mode [ 72.162272][ T6857] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 72.162288][ T6857] mroute: pending queue full, dropping entries [ 72.231126][ T6857] FAULT_INJECTION: forcing a failure. [ 72.231126][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 72.231155][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.4.207 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.231179][ T6857] Tainted: [L]=SOFTLOCKUP [ 72.231185][ T6857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.231195][ T6857] Call Trace: [ 72.231220][ T6857] [ 72.231228][ T6857] dump_stack_lvl+0x100/0x190 [ 72.231269][ T6857] should_fail_ex.cold+0x5/0xa [ 72.231299][ T6857] should_failslab+0xc2/0x120 [ 72.231326][ T6857] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.231349][ T6857] ? x509_cert_parse+0x9a/0x910 [ 72.231383][ T6857] x509_cert_parse+0x9a/0x910 [ 72.231414][ T6857] x509_key_preparse+0x65/0x9c0 [ 72.231437][ T6857] asymmetric_key_preparse+0xce/0x1d0 [ 72.231459][ T6857] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 72.231484][ T6857] __key_create_or_update+0x3f6/0xe10 [ 72.231507][ T6857] ? __pfx___key_create_or_update+0x10/0x10 [ 72.231525][ T6857] ? lookup_user_key+0x58c/0x14f0 [ 72.231551][ T6857] ? __lock_acquire+0x5c0/0x1f40 [ 72.231574][ T6857] ? __pfx_lookup_user_key+0x10/0x10 [ 72.231626][ T6857] key_create_or_update+0x42/0x60 [ 72.231648][ T6857] __do_sys_add_key+0x2e8/0x460 [ 72.231673][ T6857] ? __pfx___do_sys_add_key+0x10/0x10 [ 72.231704][ T6857] do_syscall_64+0x123/0x790 [ 72.231733][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.231751][ T6857] RIP: 0033:0x7f72ca19fb19 [ 72.231767][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.231782][ T6857] RSP: 002b:00007f72cb07b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 72.231800][ T6857] RAX: ffffffffffffffda RBX: 00007f72ca425fa0 RCX: 00007f72ca19fb19 [ 72.231812][ T6857] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000200 [ 72.231823][ T6857] RBP: 00007f72ca237b70 R08: ffffffffffffffff R09: 0000000000000000 [ 72.231834][ T6857] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 72.231844][ T6857] R13: 00007f72ca426038 R14: 00007f72ca425fa0 R15: 00007fffe6c544a8 [ 72.231869][ T6857] [ 72.234875][ T6856] lo: left allmulticast mode [ 72.453661][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880581f8c00: rx timeout, send abort [ 72.724283][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 72.732404][ T6889] ip6erspan0: entered promiscuous mode [ 72.776920][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 72.790037][ T6890] team0: Port device team_slave_0 removed [ 72.828548][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 72.832439][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 72.843520][ T6889] ip6erspan0: entered promiscuous mode [ 72.915258][ T42] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.915348][ T42] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.917671][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.917689][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.917959][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.917971][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.917990][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918016][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918034][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918046][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918072][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918084][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918108][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918119][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918138][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918153][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918162][ T5895] ldm_validate_partition_table(): Disk read failed. [ 72.918178][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918190][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918207][ T5895] I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.918219][ T5895] Buffer I/O error on dev ublkb0, logical block 0, async page read [ 72.918251][ T5895] Dev ublkb0: unable to read RDB block 0 [ 72.918794][ T5895] ublkb0: unable to read partition table [ 72.954375][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804c560800: rx timeout, send abort [ 72.954650][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880581f8c00: abort rx timeout. Force session deactivation [ 72.974511][ T6903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 72.974534][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.977502][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 73.050620][ T6902] netfs: Cache "CacheFiles" added (type cachefiles) [ 73.050648][ T6902] CacheFiles: File cache on CacheFiles registered [ 73.051686][ T6903] netlink: 84 bytes leftover after parsing attributes in process `syz.2.217'. [ 73.055712][ T6900] CacheFiles: File cache on CacheFiles unregistering [ 73.055719][ T6900] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 73.183930][ T6903] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 73.183946][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.186170][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 73.215616][ T6480] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 73.337068][ T6925] netlink: 'syz.4.222': attribute type 29 has an invalid length. [ 73.454445][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804c560800: abort rx timeout. Force session deactivation [ 73.539803][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 73.737777][ T6918] vhci_hcd: connection closed [ 73.743695][ T13] vhci_hcd vhci_hcd.2: stop threads [ 73.744344][ T13] vhci_hcd vhci_hcd.2: release socket [ 73.745554][ T6904] vhci_hcd: connection reset by peer [ 73.748010][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 73.749443][ T13] vhci_hcd vhci_hcd.2: stop threads [ 73.749459][ T13] vhci_hcd vhci_hcd.2: release socket [ 73.749722][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 73.843962][ T6945] gretap1: entered allmulticast mode [ 73.850645][ T6945] team0: Port device gretap1 added qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 74.005598][ T64] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 74.155333][ T64] usb 9-1: Invalid ep0 maxpacket: 64 [ 74.286533][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.297085][ T64] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 74.360795][ T6957] FAULT_INJECTION: forcing a failure. [ 74.360795][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 74.360824][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.2.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.360849][ T6957] Tainted: [L]=SOFTLOCKUP [ 74.360855][ T6957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.360866][ T6957] Call Trace: [ 74.360891][ T6957] [ 74.360898][ T6957] dump_stack_lvl+0x100/0x190 [ 74.360942][ T6957] should_fail_ex.cold+0x5/0xa [ 74.360981][ T6957] should_failslab+0xc2/0x120 [ 74.361011][ T6957] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.361041][ T6957] ? d_instantiate+0x8a/0xb0 [ 74.361068][ T6957] ? alloc_empty_file+0x5b/0x1c0 [ 74.361103][ T6957] alloc_empty_file+0x5b/0x1c0 [ 74.361131][ T6957] alloc_file_pseudo+0x17e/0x290 [ 74.361160][ T6957] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 74.361189][ T6957] ? __kasan_kmalloc+0xaa/0xb0 [ 74.361214][ T6957] __anon_inode_getfile+0xe8/0x280 [ 74.361240][ T6957] sync_file_alloc+0x65/0x160 [ 74.361280][ T6957] sync_file_create+0x17/0xf0 [ 74.361307][ T6957] sw_sync_ioctl+0x3b4/0x13f0 [ 74.361341][ T6957] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 74.361377][ T6957] ? selinux_file_ioctl+0x1e0/0x290 [ 74.361398][ T6957] ? selinux_file_ioctl+0x1e7/0x290 [ 74.361418][ T6957] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 74.361448][ T6957] __x64_sys_ioctl+0x18e/0x210 [ 74.361468][ T6957] do_syscall_64+0x123/0x790 [ 74.361498][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.361517][ T6957] RIP: 0033:0x7f91b7f9fb19 [ 74.361532][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.361550][ T6957] RSP: 002b:00007f91b61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.361569][ T6957] RAX: ffffffffffffffda RBX: 00007f91b8225fa0 RCX: 00007f91b7f9fb19 [ 74.361580][ T6957] RDX: 0000200000000300 RSI: 00000000c0285700 RDI: 0000000000000007 [ 74.361592][ T6957] RBP: 00007f91b8037b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.361603][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.361613][ T6957] R13: 00007f91b8226038 R14: 00007f91b8225fa0 R15: 00007ffd990c3328 [ 74.361638][ T6957] [ 74.430614][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.455260][ T64] usb 9-1: Invalid ep0 maxpacket: 64 [ 74.456799][ T64] usb usb9-port1: attempt power cycle [ 74.533459][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.620584][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.661411][ T44] kauditd_printk_skb: 57 callbacks suppressed [ 74.661424][ T44] audit: type=1800 audit(1794120465.243:661): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149164 res=0 errno=-22 [ 74.666232][ T44] audit: type=1800 audit(1794120465.253:662): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149175 res=0 errno=-22 [ 74.670352][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.673275][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.678133][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.681750][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.682313][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.689123][ T44] audit: type=1800 audit(1794120465.273:663): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149194 res=0 errno=-22 [ 74.699620][ T44] audit: type=1800 audit(1794120465.283:664): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149205 res=0 errno=-22 [ 74.736917][ T44] audit: type=1800 audit(1794120465.323:665): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149217 res=0 errno=-22 [ 74.738080][ T44] audit: type=1800 audit(1794120465.323:666): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=149222 res=0 errno=-22 [ 74.741442][ T44] audit: type=1800 audit(1794120465.323:667): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=149226 res=0 errno=-22 [ 74.745595][ T44] audit: type=1800 audit(1794120465.323:668): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=149225 res=0 errno=-22 [ 74.745619][ T44] audit: type=1800 audit(1794120465.323:669): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=149228 res=0 errno=-22 [ 74.746283][ T44] audit: type=1400 audit(1794120465.333:670): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.815439][ T64] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 74.822193][ T5875] bridge_slave_1: left allmulticast mode [ 74.822223][ T5875] bridge_slave_1: left promiscuous mode [ 74.822447][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.826416][ T5875] bridge_slave_0: left allmulticast mode [ 74.826436][ T5875] bridge_slave_0: left promiscuous mode [ 74.826650][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.837808][ T64] usb 9-1: Invalid ep0 maxpacket: 64 [ 74.965252][ T64] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 74.985999][ T64] usb 9-1: Invalid ep0 maxpacket: 64 [ 74.986342][ T64] usb usb9-port1: unable to enumerate USB device [ 75.013440][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.018311][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.019868][ T5875] bond0 (unregistering): Released all slaves [ 75.117871][ T6964] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.319392][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.507375][ T6987] virtio-fs: tag not found [ 75.534270][ T6987] tipc: Can't bind to reserved service type 2 [ 75.694401][ T5875] hsr_slave_0: left promiscuous mode [ 75.695047][ T5875] hsr_slave_1: left promiscuous mode [ 75.712006][ T5875] veth1_macvtap: left promiscuous mode [ 75.712038][ T5875] veth0_macvtap: left promiscuous mode [ 75.712112][ T5875] veth1_vlan: left promiscuous mode [ 75.712164][ T5875] veth0_vlan: left promiscuous mode [ 75.783167][ T6996] input: syz0 as /devices/virtual/input/input8 [ 75.898558][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 75.898581][ T6997] openvswitch: netlink: Message has 8 unknown bytes. [ 75.927031][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 75.931808][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 76.012748][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 76.034160][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034209][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.034269][ T6964] bridge_slave_0: entered allmulticast mode [ 76.036466][ T6964] bridge_slave_0: entered promiscuous mode [ 76.039286][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.039677][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.039732][ T6964] bridge_slave_1: entered allmulticast mode [ 76.040399][ T6964] bridge_slave_1: entered promiscuous mode [ 76.056820][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.058082][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.069406][ T6964] team0: Port device team_slave_0 added [ 76.070533][ T6964] team0: Port device team_slave_1 added [ 76.094326][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.094337][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.094349][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.097409][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.097417][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.097429][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.151039][ T6964] hsr_slave_0: entered promiscuous mode [ 76.151863][ T6964] hsr_slave_1: entered promiscuous mode [ 76.262861][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 76.340958][ T856] cfg80211: failed to load regulatory.db [ 76.367677][ T7013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.240'. [ 76.437097][ T6964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.439629][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.440211][ T6964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.442272][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.442821][ T6964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.444478][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.444930][ T6964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.451504][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.492298][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.492387][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.492885][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.492930][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.522490][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.528990][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.531618][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.538873][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.542921][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 76.544423][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.544466][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.550315][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.550358][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.735317][ T5801] Bluetooth: hci1: command tx timeout [ 76.812327][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.994486][ T6964] veth0_vlan: entered promiscuous mode [ 76.999968][ T6964] veth1_vlan: entered promiscuous mode [ 77.022437][ T6964] veth0_macvtap: entered promiscuous mode [ 77.026945][ T6964] veth1_macvtap: entered promiscuous mode [ 77.039855][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.044449][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.065594][ T5878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.065673][ T5878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.065741][ T5878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.065758][ T5878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.095846][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.095861][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.132033][ T6715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.132047][ T6715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.446070][ T7088] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 77.506558][ T7092] device-mapper: ioctl: device name cannot contain '/' [ 77.573641][ T7094] ptp ptp0: only physical clock in use now [ 78.325352][ T6480] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 78.403326][ T7147] block nbd1: Receive control failed (result -32) [ 78.404410][ T7146] block nbd0: Receive control failed (result -32) [ 78.408362][ T67] block nbd0: Receive control failed (result -32) [ 78.408743][ T7147] block nbd1: Receive control failed (result -32) [ 78.825287][ T5801] Bluetooth: hci1: command tx timeout [ 79.279195][ T7184] device-mapper: ioctl: The device has no table. [ 79.536053][ T7203] fuse: Bad value for 'fd' [ 79.885272][ T5950] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 79.906753][ T7226] sctp: [Deprecated]: syz.5.287 (pid 7226) Use of int in maxseg socket option. [ 79.906753][ T7226] Use struct sctp_assoc_value instead [ 80.014832][ T44] kauditd_printk_skb: 101 callbacks suppressed [ 80.014852][ T44] audit: type=1400 audit(1794120470.593:772): avc: denied { setopt } for pid=7235 comm="syz.5.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.045489][ T44] audit: type=1800 audit(1794120470.633:773): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159471 res=0 errno=-22 [ 80.065818][ T5950] usb 9-1: Using ep0 maxpacket: 8 [ 80.067785][ T5950] usb 9-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 80.068807][ T5950] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 80.068849][ T5950] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 80.068865][ T5950] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 80.068882][ T5950] usb 9-1: config 250 has no interface number 0 [ 80.068912][ T5950] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 80.068933][ T5950] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 80.068952][ T5950] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.068970][ T5950] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 80.068991][ T5950] usb 9-1: config 250 interface 228 has no altsetting 0 [ 80.070275][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 80.070292][ T5950] usb 9-1: Product: syz [ 80.070300][ T5950] usb 9-1: SerialNumber: syz [ 80.076696][ T5950] hub 9-1:250.228: bad descriptor, ignoring hub [ 80.076709][ T5950] hub 9-1:250.228: probe with driver hub failed with error -5 [ 80.077302][ T44] audit: type=1800 audit(1794120470.653:774): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159488 res=0 errno=-22 [ 80.077326][ T44] audit: type=1800 audit(1794120470.663:775): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=159519 res=0 errno=-22 [ 80.077344][ T44] audit: type=1800 audit(1794120470.663:776): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=159495 res=0 errno=-22 [ 80.082317][ T44] audit: type=1800 audit(1794120470.663:777): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=159496 res=0 errno=-22 [ 80.082940][ T44] audit: type=1800 audit(1794120470.663:778): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=159517 res=0 errno=-22 [ 80.083878][ T44] audit: type=1800 audit(1794120470.663:779): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=159497 res=0 errno=-22 [ 80.084536][ T44] audit: type=1800 audit(1794120470.663:780): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=159518 res=0 errno=-22 [ 80.100835][ T44] audit: type=1800 audit(1794120470.683:781): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159547 res=0 errno=-22 [ 80.137516][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.291'. [ 80.386032][ T5950] usb 9-1: USB disconnect, device number 7 [ 80.407148][ T7251] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 80.895608][ T5801] Bluetooth: hci1: command tx timeout [ 81.121550][ T7278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7278 comm=syz.4.300 [ 81.685914][ T7302] ip_tables: iptables: counters copy to user failed while replacing table [ 81.812897][ T7305] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 81.814513][ T7305] bond2 (unregistering): Released all slaves [ 82.501531][ T7326] nvme nvme0: failed to connect socket: -111 [ 82.821534][ T7342] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 82.882459][ T7348] ip6gre1: entered allmulticast mode [ 82.981733][ T7349] pimreg: entered allmulticast mode [ 83.146054][ T5875] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.224587][ T5875] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.316329][ T5875] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.321712][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.326283][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.328861][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.330980][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.331694][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.438957][ T5875] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.625073][ T7353] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.651121][ T5875] bridge_slave_1: left allmulticast mode [ 83.651156][ T5875] bridge_slave_1: left promiscuous mode [ 83.651386][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.654362][ T5875] bridge_slave_0: left allmulticast mode [ 83.654384][ T5875] bridge_slave_0: left promiscuous mode [ 83.654589][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.851168][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.864203][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.866825][ T5875] bond0 (unregistering): Released all slaves [ 84.164663][ T5497] 8021q: adding VLAN 0 to HW filter on device eth10 [ 84.361100][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.361177][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.361264][ T7353] bridge_slave_0: entered allmulticast mode [ 84.367340][ T7353] bridge_slave_0: entered promiscuous mode [ 84.372546][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.372613][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.372701][ T7353] bridge_slave_1: entered allmulticast mode [ 84.376594][ T7353] bridge_slave_1: entered promiscuous mode [ 84.461104][ T5497] 8021q: adding VLAN 0 to HW filter on device eth11 [ 84.461391][ T7404] erspan0: entered promiscuous mode [ 84.478239][ T5875] hsr_slave_0: left promiscuous mode [ 84.480607][ T5875] hsr_slave_1: left promiscuous mode [ 84.481322][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.481339][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.482082][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.482096][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.490274][ T5875] veth1_macvtap: left promiscuous mode [ 84.490304][ T5875] veth0_macvtap: left promiscuous mode [ 84.490468][ T5875] veth1_vlan: left promiscuous mode [ 84.490523][ T5875] veth0_vlan: left promiscuous mode [ 84.726623][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 84.738819][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 84.814275][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.847919][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.883409][ T7409] netlink: 112 bytes leftover after parsing attributes in process `syz.4.328'. [ 84.895247][ T7353] team0: Port device team_slave_0 added [ 84.911008][ T7353] team0: Port device team_slave_1 added [ 84.949962][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.949978][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.949997][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.951410][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.951421][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.951441][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.010238][ T7353] hsr_slave_0: entered promiscuous mode [ 85.011011][ T7353] hsr_slave_1: entered promiscuous mode [ 85.040957][ T44] kauditd_printk_skb: 45 callbacks suppressed [ 85.040974][ T44] audit: type=1400 audit(1794120475.623:827): avc: denied { write } for pid=7411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.139615][ T44] audit: type=1400 audit(1794120475.723:828): avc: denied { write } for pid=7418 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.173851][ T44] audit: type=1800 audit(1794120475.753:829): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27357 res=0 errno=-13 [ 85.174121][ T44] audit: type=1800 audit(1794120475.753:830): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27356 res=0 errno=-13 [ 85.174837][ T44] audit: type=1800 audit(1794120475.753:831): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169749 res=0 errno=-22 [ 85.228611][ T5497] 8021q: adding VLAN 0 to HW filter on device eth12 [ 85.262263][ T7353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.268823][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.270478][ T7353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.278173][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.280687][ T7353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.287811][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.288762][ T7353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.300856][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.371514][ T44] audit: type=1400 audit(1794120475.953:832): avc: denied { write } for pid=7435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.375367][ T5801] Bluetooth: hci1: command tx timeout [ 85.378598][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.472861][ T44] audit: type=1400 audit(1794120476.053:833): avc: denied { rename } for pid=7434 comm="syz.4.334" name="file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.478810][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.491395][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.491488][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.524802][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.524893][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.568432][ T44] audit: type=1400 audit(1794120476.153:834): avc: denied { write } for pid=7441 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.747108][ T5497] 8021q: adding VLAN 0 to HW filter on device eth13 [ 86.177230][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.431810][ T44] audit: type=1400 audit(1794120477.013:835): avc: denied { read write } for pid=7477 comm="syz.2.340" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.431960][ T44] audit: type=1400 audit(1794120477.013:836): avc: denied { open } for pid=7477 comm="syz.2.340" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.462643][ T7353] veth0_vlan: entered promiscuous mode [ 86.473815][ T7353] veth1_vlan: entered promiscuous mode [ 86.482654][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.487823][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.488593][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.489249][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.489798][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.583781][ T7474] device-mapper: table: 248:2: crypt: Error decoding and setting key (-EINVAL) [ 86.583802][ T7474] device-mapper: ioctl: error adding target to table [ 86.609041][ T7353] veth0_macvtap: entered promiscuous mode [ 86.611220][ T7353] veth1_macvtap: entered promiscuous mode [ 86.619091][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.623091][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.648443][ T5878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.648469][ T5878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.648486][ T5878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.648501][ T5878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.696351][ T6716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.696372][ T6716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.716487][ T6716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.716505][ T6716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.838125][ T7510] overlayfs: failed to resolve './file0/file2': -2 [ 86.864012][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.890174][ T7484] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.967945][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070979][ T5875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.130349][ T7529] jffs2: notice: (7529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 87.189267][ T5875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.216355][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.216906][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.216976][ T7484] bridge_slave_0: entered allmulticast mode [ 87.217707][ T7484] bridge_slave_0: entered promiscuous mode [ 87.219130][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.219169][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.219312][ T7484] bridge_slave_1: entered allmulticast mode [ 87.219958][ T7484] bridge_slave_1: entered promiscuous mode [ 87.233890][ T7484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.235919][ T7484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.257161][ T7484] team0: Port device team_slave_0 added [ 87.258478][ T7484] team0: Port device team_slave_1 added [ 87.272334][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.272344][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.272391][ T7484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.273222][ T7484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.273229][ T7484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.273241][ T7484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.338408][ T7484] hsr_slave_0: entered promiscuous mode [ 87.339248][ T7484] hsr_slave_1: entered promiscuous mode [ 87.339822][ T7484] debugfs: 'hsr0' already exists in 'hsr' [ 87.339836][ T7484] Cannot create hsr debugfs directory [ 87.380164][ T5875] bridge_slave_1: left allmulticast mode [ 87.380188][ T5875] bridge_slave_1: left promiscuous mode [ 87.380348][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.383297][ T5875] bridge_slave_0: left allmulticast mode [ 87.383316][ T5875] bridge_slave_0: left promiscuous mode [ 87.383490][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.455277][ T5801] Bluetooth: hci1: command tx timeout [ 87.513410][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.518667][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.520170][ T5875] bond0 (unregistering): Released all slaves [ 87.531630][ T5875] bond1 (unregistering): (slave team0): Releasing active interface [ 87.533092][ T5875] bond1 (unregistering): Released all slaves [ 87.804456][ T5497] 8021q: adding VLAN 0 to HW filter on device eth14 [ 87.824498][ T7557] loop0: detected capacity change from 0 to 4096 [ 87.826706][ T7484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.832287][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.849489][ T7484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.858138][ T7557] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.858164][ T7557] ldm_validate_privheads(): Disk read failed. [ 87.858204][ T7557] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 0. [ 87.858218][ T7557] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 1. [ 87.858222][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.858232][ T7557] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 87.858245][ T7557] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 87.858256][ T7557] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 87.858292][ T7557] loop0: [ 87.858309][ T7557] loop0: partition table partially beyond EOD, truncated [ 87.860792][ T7484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.870309][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.872043][ T7484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 87.883257][ T7484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.984397][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.988197][ T7569] ªªªªªª: renamed from vlan0 (while UP) [ 88.025056][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.035698][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.035777][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.051765][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.051849][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.160074][ T5875] hsr_slave_0: left promiscuous mode [ 88.160953][ T5875] hsr_slave_1: left promiscuous mode [ 88.161690][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.161708][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.163808][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.163824][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.190783][ T5875] veth1_macvtap: left promiscuous mode [ 88.190816][ T5875] veth0_macvtap: left promiscuous mode [ 88.190896][ T5875] veth1_vlan: left promiscuous mode [ 88.190948][ T5875] veth0_vlan: left promiscuous mode [ 88.575447][ T5801] Bluetooth: hci4: command tx timeout [ 89.535335][ T5801] Bluetooth: hci1: command tx timeout [ 90.336223][ T44] kauditd_printk_skb: 135 callbacks suppressed [ 90.336243][ T44] audit: type=1400 audit(1794120480.923:972): avc: denied { sendto } for pid=24 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 90.655440][ T5801] Bluetooth: hci4: command tx timeout [ 91.245568][ T44] audit: type=1400 audit(1794120481.823:973): avc: denied { write } for pid=7599 comm="syz.6.356" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.247928][ T44] audit: type=1400 audit(1794120481.833:974): avc: denied { open } for pid=7599 comm="syz.6.356" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.250717][ T44] audit: type=1400 audit(1794120481.833:975): avc: denied { ioctl } for pid=7599 comm="syz.6.356" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.309864][ T44] audit: type=1400 audit(1794120481.893:976): avc: denied { sys_module } for pid=7597 comm="syz.4.355" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.309892][ T44] audit: type=1400 audit(1794120481.893:977): avc: denied { module_request } for pid=7597 comm="syz.4.355" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.314698][ T44] audit: type=1400 audit(1794120481.893:978): avc: denied { bpf } for pid=7599 comm="syz.6.356" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.315002][ T44] audit: type=1400 audit(1794120481.893:979): avc: denied { perfmon } for pid=7599 comm="syz.6.356" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.327979][ T44] audit: type=1400 audit(1794120481.913:980): avc: denied { create } for pid=7599 comm="syz.6.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.328396][ T44] audit: type=1400 audit(1794120481.913:981): avc: denied { create } for pid=7599 comm="syz.6.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.332307][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 91.357213][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 91.625861][ T5801] Bluetooth: hci1: command tx timeout [ 91.848302][ T7641] FAULT_INJECTION: forcing a failure. [ 91.848302][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 91.848333][ T7641] CPU: 3 UID: 0 PID: 7641 Comm: syz.6.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.848359][ T7641] Tainted: [L]=SOFTLOCKUP [ 91.848366][ T7641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.848376][ T7641] Call Trace: [ 91.848418][ T7641] [ 91.848426][ T7641] dump_stack_lvl+0x100/0x190 [ 91.848470][ T7641] should_fail_ex.cold+0x5/0xa [ 91.848499][ T7641] should_failslab+0xc2/0x120 [ 91.848528][ T7641] __kmalloc_noprof+0xfc/0x840 [ 91.848555][ T7641] ? __register_sysctl_table+0xbc8/0x1650 [ 91.848577][ T7641] ? __register_sysctl_table+0xbe4/0x1650 [ 91.848602][ T7641] __register_sysctl_table+0xbe4/0x1650 [ 91.848627][ T7641] ? __pfx___register_sysctl_table+0x10/0x10 [ 91.848647][ T7641] ? is_module_address+0x5f/0xf0 [ 91.848664][ T7641] ? is_module_address+0x5f/0xf0 [ 91.848684][ T7641] register_net_sysctl_sz+0x325/0x420 [ 91.848714][ T7641] ? __asan_memcpy+0x3c/0x60 [ 91.848741][ T7641] ? __pfx_unix_net_init+0x10/0x10 [ 91.848782][ T7641] unix_sysctl_register+0x8e/0x180 [ 91.848813][ T7641] unix_net_init+0x54/0x350 [ 91.848836][ T7641] ? __pfx_unix_net_init+0x10/0x10 [ 91.848862][ T7641] ops_init+0x1e2/0x5f0 [ 91.848896][ T7641] setup_net+0x118/0x3a0 [ 91.848921][ T7641] ? __pfx_setup_net+0x10/0x10 [ 91.848948][ T7641] ? bpf_lsm_namespace_init+0x9/0x10 [ 91.848971][ T7641] copy_net_ns+0x340/0x7a0 [ 91.848996][ T7641] create_new_namespaces+0x3ea/0xac0 [ 91.849028][ T7641] unshare_nsproxy_namespaces+0xf6/0x210 [ 91.849060][ T7641] ksys_unshare+0x44f/0x980 [ 91.849085][ T7641] ? __pfx_ksys_unshare+0x10/0x10 [ 91.849119][ T7641] __x64_sys_unshare+0x31/0x40 [ 91.849142][ T7641] do_syscall_64+0x123/0x790 [ 91.849166][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.849186][ T7641] RIP: 0033:0x7f51f5f9fb19 [ 91.849203][ T7641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.849222][ T7641] RSP: 002b:00007f51f6e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.849238][ T7641] RAX: ffffffffffffffda RBX: 00007f51f6225fa0 RCX: 00007f51f5f9fb19 [ 91.849249][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 91.849261][ T7641] RBP: 00007f51f6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.849272][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.849282][ T7641] R13: 00007f51f6226038 R14: 00007f51f6225fa0 R15: 00007ffc23c69858 [ 91.849307][ T7641] [ 91.849359][ T7641] sysctl could not get directory: /net/unix -12 [ 91.889579][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.128104][ T7484] veth0_vlan: entered promiscuous mode [ 92.132118][ T7484] veth1_vlan: entered promiscuous mode [ 92.153192][ T7484] veth0_macvtap: entered promiscuous mode [ 92.159400][ T7484] veth1_macvtap: entered promiscuous mode [ 92.167888][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.172616][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.231620][ T5875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231660][ T5875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231688][ T5875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231715][ T5875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.264568][ T6720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.264586][ T6720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.288151][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.288170][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.324866][ T5497] 8021q: adding VLAN 0 to HW filter on device eth15 [ 92.445775][ T7689] 9pnet_virtio: no channels available for device syz [ 92.465405][ T7692] nfs4: Unknown parameter 'v®dr' [ 92.597278][ T5497] 8021q: adding VLAN 0 to HW filter on device eth16 [ 92.746569][ T5801] Bluetooth: hci4: command tx timeout [ 92.843705][ T5497] 8021q: adding VLAN 0 to HW filter on device eth17 [ 92.866606][ T7711] netlink: 'syz.6.371': attribute type 106 has an invalid length. [ 92.915003][ T7716] FAULT_INJECTION: forcing a failure. [ 92.915003][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 92.915033][ T7716] CPU: 1 UID: 0 PID: 7716 Comm: syz.6.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.915064][ T7716] Tainted: [L]=SOFTLOCKUP [ 92.915071][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.915082][ T7716] Call Trace: [ 92.915088][ T7716] [ 92.915096][ T7716] dump_stack_lvl+0x100/0x190 [ 92.915128][ T7716] should_fail_ex.cold+0x5/0xa [ 92.915172][ T7716] should_failslab+0xc2/0x120 [ 92.915188][ T7716] __kmalloc_noprof+0xfc/0x840 [ 92.915209][ T7716] ? lsm_blob_alloc+0x68/0x90 [ 92.915235][ T7716] lsm_blob_alloc+0x68/0x90 [ 92.915256][ T7716] security_prepare_creds+0x2d/0x290 [ 92.915279][ T7716] prepare_creds+0x5d6/0x950 [ 92.915304][ T7716] lookup_user_key+0x761/0x14f0 [ 92.915332][ T7716] ? __pfx_lookup_user_key+0x10/0x10 [ 92.915367][ T7716] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 92.915409][ T7716] __do_sys_add_key+0x2a6/0x460 [ 92.915433][ T7716] ? __pfx___do_sys_add_key+0x10/0x10 [ 92.915464][ T7716] do_syscall_64+0x123/0x790 [ 92.915489][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.915507][ T7716] RIP: 0033:0x7f51f5f9fb19 [ 92.915522][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.915541][ T7716] RSP: 002b:00007f51f6e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 92.915559][ T7716] RAX: ffffffffffffffda RBX: 00007f51f6225fa0 RCX: 00007f51f5f9fb19 [ 92.915570][ T7716] RDX: 0000200000000480 RSI: 0000000000000000 RDI: 0000200000000440 [ 92.915581][ T7716] RBP: 00007f51f6037b70 R08: fffffffffffffffe R09: 0000000000000000 [ 92.915592][ T7716] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 92.915602][ T7716] R13: 00007f51f6226038 R14: 00007f51f6225fa0 R15: 00007ffc23c69858 [ 92.915627][ T7716] [ 93.242073][ T7734] FAULT_INJECTION: forcing a failure. [ 93.242073][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 93.242093][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.6.375 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.242114][ T7734] Tainted: [L]=SOFTLOCKUP [ 93.242117][ T7734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.242123][ T7734] Call Trace: [ 93.242127][ T7734] [ 93.242131][ T7734] dump_stack_lvl+0x100/0x190 [ 93.242151][ T7734] should_fail_ex.cold+0x5/0xa [ 93.242168][ T7734] should_failslab+0xc2/0x120 [ 93.242182][ T7734] kmem_cache_alloc_noprof+0x92/0x6a0 [ 93.242200][ T7734] ? alloc_empty_file+0x5b/0x1c0 [ 93.242219][ T7734] alloc_empty_file+0x5b/0x1c0 [ 93.242235][ T7734] path_openat+0xd6/0x23f0 [ 93.242250][ T7734] ? __pfx_path_openat+0x10/0x10 [ 93.242267][ T7734] do_file_open+0x20e/0x430 [ 93.242298][ T7734] ? __pfx_do_file_open+0x10/0x10 [ 93.242321][ T7734] ? _raw_spin_unlock+0x28/0x50 [ 93.242332][ T7734] ? alloc_fd+0x471/0x7a0 [ 93.242350][ T7734] do_sys_openat2+0x163/0x1d0 [ 93.242365][ T7734] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.242379][ T7734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.242420][ T7734] __x64_sys_openat+0x12d/0x210 [ 93.242436][ T7734] ? __pfx___x64_sys_openat+0x10/0x10 [ 93.242458][ T7734] do_syscall_64+0x123/0x790 [ 93.242472][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.242483][ T7734] RIP: 0033:0x7f51f5f9fb19 [ 93.242493][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.242503][ T7734] RSP: 002b:00007f51f6e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.242514][ T7734] RAX: ffffffffffffffda RBX: 00007f51f6225fa0 RCX: 00007f51f5f9fb19 [ 93.242520][ T7734] RDX: 0000000000161042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 93.242527][ T7734] RBP: 00007f51f6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 93.242532][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.242538][ T7734] R13: 00007f51f6226038 R14: 00007f51f6225fa0 R15: 00007ffc23c69858 [ 93.242552][ T7734] [ 93.309874][ T7736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7736 comm=syz.6.377 [ 93.464855][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 93.515780][ T7754] [ 93.516883][ T7754] ====================================================== [ 93.519817][ T7754] WARNING: possible circular locking dependency detected [ 93.522729][ T7754] syzkaller #0 Tainted: G L [ 93.525294][ T7754] ------------------------------------------------------ [ 93.528237][ T7754] syz.7.382/7754 is trying to acquire lock: [ 93.530742][ T7754] ffff88803ff15a28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2360 [ 93.535185][ T7754] [ 93.535185][ T7754] but task is already holding lock: [ 93.538291][ T7754] ffffffff91fcfb48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 93.541593][ T7754] [ 93.541593][ T7754] which lock already depends on the new lock. [ 93.541593][ T7754] [ 93.545908][ T7754] [ 93.545908][ T7754] the existing dependency chain (in reverse order) is: [ 93.549649][ T7754] [ 93.549649][ T7754] -> #4 (cb_lock){++++}-{4:4}: [ 93.552578][ T7754] lock_acquire+0x1d1/0x380 [ 93.554730][ T7754] down_read+0x94/0x4c0 [ 93.556727][ T7754] genl_release+0x7e/0x1d0 [ 93.558866][ T7754] netlink_release+0x104e/0x1fc0 [ 93.561180][ T7754] __sock_release+0xb3/0x260 [ 93.563365][ T7754] sock_close+0x1c/0x30 [ 93.565369][ T7754] __fput+0x3fb/0xb50 [ 93.567340][ T7754] fput_close_sync+0x118/0x250 [ 93.569337][ T7754] filp_close_sync+0x75/0xa0 [ 93.571406][ T7754] __x64_sys_close+0x81/0x110 [ 93.573545][ T7754] do_syscall_64+0x123/0x790 [ 93.575705][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.578437][ T7754] [ 93.578437][ T7754] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 93.582030][ T7754] lock_acquire+0x1d1/0x380 [ 93.584061][ T7754] down_write+0x86/0x1f0 [ 93.586082][ T7754] __sock_release+0x86/0x260 [ 93.588269][ T7754] sock_close+0x1c/0x30 [ 93.590271][ T7754] __fput+0x3fb/0xb50 [ 93.592221][ T7754] __fput_sync+0xd7/0x100 [ 93.594290][ T7754] nvme_tcp_alloc_queue.isra.0+0xb26/0x1340 [ 93.597022][ T7754] nvme_tcp_configure_admin_queue+0x26/0x530 [ 93.599773][ T7754] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 93.602034][ T7754] nvme_tcp_create_ctrl+0xdb8/0x1430 [ 93.604498][ T7754] nvmf_dev_write+0x4ee/0xb60 [ 93.606717][ T7754] vfs_write+0x2aa/0x1050 [ 93.608729][ T7754] ksys_write+0x12a/0x250 [ 93.610749][ T7754] do_syscall_64+0x123/0x790 [ 93.612922][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.615643][ T7754] [ 93.615643][ T7754] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}: [ 93.618838][ T7754] lock_acquire+0x1d1/0x380 [ 93.620976][ T7754] __mutex_lock+0x19f/0x1c10 [ 93.623161][ T7754] nvmf_dev_show+0x26/0x210 [ 93.625297][ T7754] seq_read_iter+0x32f/0x1270 [ 93.627535][ T7754] seq_read+0x344/0x4d0 [ 93.629514][ T7754] vfs_read+0x1e4/0xb40 [ 93.631517][ T7754] ksys_read+0x12a/0x250 [ 93.633561][ T7754] do_syscall_64+0x123/0x790 [ 93.635729][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.638438][ T7754] [ 93.638438][ T7754] -> #1 (&p->lock){+.+.}-{4:4}: [ 93.641362][ T7754] lock_acquire+0x1d1/0x380 [ 93.643511][ T7754] __mutex_lock+0x19f/0x1c10 [ 93.645674][ T7754] seq_read_iter+0xe1/0x1270 [ 93.647843][ T7754] kernfs_fop_read_iter+0x46c/0x610 [ 93.650242][ T7754] __kernel_read+0x397/0xad0 [ 93.652407][ T7754] integrity_kernel_read+0x7e/0xb0 [ 93.654797][ T7754] ima_calc_file_hash_tfm+0x25e/0x350 [ 93.656660][ T7754] ima_calc_file_hash+0x1e3/0x380 [ 93.658423][ T7754] ima_collect_measurement+0x952/0xb30 [ 93.660312][ T7754] process_measurement+0xe04/0x2360 [ 93.662278][ T7754] ima_file_check+0xbf/0x110 [ 93.663903][ T7754] security_file_post_open+0xc4/0x210 [ 93.665746][ T7754] path_openat+0x5d0/0x23f0 [ 93.667334][ T7754] do_file_open+0x20e/0x430 [ 93.668912][ T7754] do_sys_openat2+0x163/0x1d0 [ 93.670567][ T7754] __x64_sys_openat+0x12d/0x210 [ 93.672269][ T7754] do_syscall_64+0x123/0x790 [ 93.673867][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.675860][ T7754] [ 93.675860][ T7754] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 93.678654][ T7754] check_prev_add+0xeb/0xe60 [ 93.680265][ T7754] __lock_acquire+0x1528/0x1f40 [ 93.681966][ T7754] lock_acquire+0x1d1/0x380 [ 93.683563][ T7754] __mutex_lock+0x19f/0x1c10 [ 93.685191][ T7754] process_measurement+0x5ab/0x2360 [ 93.687029][ T7754] ima_file_check+0xbf/0x110 [ 93.688614][ T7754] security_file_post_open+0xc4/0x210 [ 93.690479][ T7754] path_openat+0x5d0/0x23f0 [ 93.692074][ T7754] do_file_open+0x20e/0x430 [ 93.693637][ T7754] file_open_name+0x1c3/0x3e0 [ 93.695274][ T7754] filp_open+0x2e/0x50 [ 93.696723][ T7754] kernel_read_file_from_path_initns+0xec/0x240 [ 93.698805][ T7754] _request_firmware+0x6f1/0x1410 [ 93.700540][ T7754] request_firmware+0x35/0x50 [ 93.702176][ T7754] reg_reload_regdb+0x87/0x540 [ 93.703830][ T7754] genl_family_rcv_msg_doit+0x214/0x300 [ 93.705716][ T7754] genl_rcv_msg+0x560/0x800 [ 93.707390][ T7754] netlink_rcv_skb+0x159/0x420 [ 93.709042][ T7754] genl_rcv+0x28/0x40 [ 93.710490][ T7754] netlink_unicast+0x668/0x950 [ 93.712162][ T7754] netlink_sendmsg+0x9ac/0x10c0 [ 93.713841][ T7754] ____sys_sendmsg+0xa99/0xc30 [ 93.715480][ T7754] ___sys_sendmsg+0x190/0x1e0 [ 93.717095][ T7754] __sys_sendmsg+0x160/0x210 [ 93.718701][ T7754] do_syscall_64+0x123/0x790 [ 93.720423][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.722461][ T7754] [ 93.722461][ T7754] other info that might help us debug this: [ 93.722461][ T7754] [ 93.725593][ T7754] Chain exists of: [ 93.725593][ T7754] &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock [ 93.725593][ T7754] [ 93.730089][ T7754] Possible unsafe locking scenario: [ 93.730089][ T7754] [ 93.732322][ T7754] CPU0 CPU1 [ 93.734023][ T7754] ---- ---- [ 93.735705][ T7754] rlock(cb_lock); [ 93.736921][ T7754] lock(&sb->s_type->i_mutex_key#13); [ 93.739419][ T7754] lock(cb_lock); [ 93.741402][ T7754] lock(&ima_iint_mutex_key[depth]); [ 93.743135][ T7754] [ 93.743135][ T7754] *** DEADLOCK *** [ 93.743135][ T7754] [ 93.745643][ T7754] locks held by syz.7.382/7754: 1, last CPU#2: [ 93.747602][ T7754] #0: ffffffff91fcfb48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 93.750144][ T7754] [ 93.750144][ T7754] stack backtrace: [ 93.752019][ T7754] CPU: 2 UID: 0 PID: 7754 Comm: syz.7.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.755303][ T7754] Tainted: [L]=SOFTLOCKUP [ 93.756643][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.759788][ T7754] Call Trace: [ 93.760854][ T7754] [ 93.761789][ T7754] dump_stack_lvl+0x100/0x190 [ 93.763308][ T7754] print_circular_bug.cold+0x178/0x1be [ 93.764996][ T7754] check_noncircular+0x146/0x160 [ 93.766611][ T7754] check_prev_add+0xeb/0xe60 [ 93.768512][ T7754] __lock_acquire+0x1528/0x1f40 [ 93.770133][ T7754] ? genl_rcv_msg+0x560/0x800 [ 93.771617][ T7754] ? netlink_rcv_skb+0x159/0x420 [ 93.773225][ T7754] lock_acquire+0x1d1/0x380 [ 93.774663][ T7754] ? process_measurement+0x5ab/0x2360 [ 93.776332][ T7754] ? __pfx___might_resched+0x10/0x10 [ 93.778052][ T7754] __mutex_lock+0x19f/0x1c10 [ 93.779500][ T7754] ? process_measurement+0x5ab/0x2360 [ 93.781165][ T7754] ? process_measurement+0x5ab/0x2360 [ 93.782861][ T7754] ? __pfx___mutex_lock+0x10/0x10 [ 93.784426][ T7754] ? rcu_is_watching+0x13/0xc0 [ 93.785952][ T7754] ? trace_kmem_cache_alloc+0xdd/0x100 [ 93.787721][ T7754] ? __kasan_slab_alloc+0x89/0x90 [ 93.789292][ T7754] ? find_held_lock+0x2b/0x80 [ 93.790781][ T7754] ? process_measurement+0x5ab/0x2360 [ 93.792454][ T7754] process_measurement+0x5ab/0x2360 [ 93.794062][ T7754] ? __lock_acquire+0x5c0/0x1f40 [ 93.795617][ T7754] ? find_held_lock+0x2b/0x80 [ 93.797078][ T7754] ? __pfx_process_measurement+0x10/0x10 [ 93.798800][ T7754] ? lock_acquire+0x1d1/0x380 [ 93.800326][ T7754] ? fscrypt_file_open+0x48f/0x5c0 [ 93.801942][ T7754] ? __pfx___fsnotify_parent+0x10/0x10 [ 93.803660][ T7754] ima_file_check+0xbf/0x110 [ 93.805109][ T7754] ? __pfx_ima_file_check+0x10/0x10 [ 93.806730][ T7754] ? vfs_open_consume+0x334/0x460 [ 93.808296][ T7754] security_file_post_open+0xc4/0x210 [ 93.809964][ T7754] path_openat+0x5d0/0x23f0 [ 93.811411][ T7754] ? __pfx_path_openat+0x10/0x10 [ 93.813098][ T7754] ? kasan_save_stack+0x3f/0x50 [ 93.815033][ T7754] ? kasan_save_stack+0x30/0x50 [ 93.816981][ T7754] ? kasan_save_track+0x14/0x30 [ 93.818820][ T7754] ? __kasan_slab_alloc+0x89/0x90 [ 93.820777][ T7754] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 93.823151][ T7754] ? do_getname_kernel+0x5d/0x250 [ 93.825365][ T7754] ? filp_open+0x1d/0x50 [ 93.827168][ T7754] do_file_open+0x20e/0x430 [ 93.829097][ T7754] ? netlink_unicast+0x668/0x950 [ 93.831172][ T7754] ? __pfx_do_file_open+0x10/0x10 [ 93.833279][ T7754] file_open_name+0x1c3/0x3e0 [ 93.835271][ T7754] ? __pfx_file_open_name+0x10/0x10 [ 93.837432][ T7754] ? do_getname_kernel+0x5d/0x250 [ 93.839547][ T7754] ? __asan_memcpy+0x3c/0x60 [ 93.841493][ T7754] ? do_getname_kernel+0x1be/0x250 [ 93.843645][ T7754] filp_open+0x2e/0x50 [ 93.845354][ T7754] kernel_read_file_from_path_initns+0xec/0x240 [ 93.847828][ T7754] _request_firmware+0x6f1/0x1410 [ 93.849858][ T7754] ? __pfx__request_firmware+0x10/0x10 [ 93.852054][ T7754] ? lock_acquire+0x1d1/0x380 [ 93.853999][ T7754] request_firmware+0x35/0x50 [ 93.855963][ T7754] reg_reload_regdb+0x87/0x540 [ 93.858003][ T7754] ? __pfx_reg_reload_regdb+0x10/0x10 [ 93.860133][ T7754] ? nl80211_pre_doit+0x570/0x1ed0 [ 93.862117][ T7754] genl_family_rcv_msg_doit+0x214/0x300 [ 93.864342][ T7754] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.866865][ T7754] ? bpf_lsm_capable+0x9/0x10 [ 93.868814][ T7754] ? security_capable+0x80/0x260 [ 93.870898][ T7754] genl_rcv_msg+0x560/0x800 [ 93.872814][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.874783][ T7754] ? __lock_acquire+0x5c0/0x1f40 [ 93.876342][ T7754] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.878028][ T7754] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 93.879807][ T7754] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.881496][ T7754] netlink_rcv_skb+0x159/0x420 [ 93.883030][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.884623][ T7754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.886278][ T7754] ? netlink_deliver_tap+0x1ae/0xb50 [ 93.887946][ T7754] genl_rcv+0x28/0x40 [ 93.889217][ T7754] netlink_unicast+0x668/0x950 [ 93.890733][ T7754] ? __pfx_netlink_unicast+0x10/0x10 [ 93.892396][ T7754] netlink_sendmsg+0x9ac/0x10c0 [ 93.893924][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.895581][ T7754] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.897370][ T7754] ? ____sys_sendmsg+0xa99/0xc30 [ 93.898942][ T7754] ____sys_sendmsg+0xa99/0xc30 [ 93.900439][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.902101][ T7754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.903752][ T7754] ___sys_sendmsg+0x190/0x1e0 [ 93.905224][ T7754] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.906879][ T7754] ? futex_wait+0x11e/0x370 [ 93.908303][ T7754] ? find_held_lock+0x2b/0x80 [ 93.909779][ T7754] __sys_sendmsg+0x160/0x210 [ 93.911234][ T7754] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.912848][ T7754] do_syscall_64+0x123/0x790 [ 93.914293][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.916137][ T7754] RIP: 0033:0x7f4df2d9fb19 [ 93.917532][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.923487][ T7754] RSP: 002b:00007f4df3c18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.926053][ T7754] RAX: ffffffffffffffda RBX: 00007f4df3025fa0 RCX: 00007f4df2d9fb19 [ 93.928927][ T7754] RDX: 0000000020008004 RSI: 0000200000000a40 RDI: 000000000000000d [ 93.931575][ T7754] RBP: 00007f4df2e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 93.934694][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.937812][ T7754] R13: 00007f4df3026038 R14: 00007f4df3025fa0 R15: 00007ffe89aeeea8 [ 93.940936][ T7754] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.951079][ T7754] FAULT_INJECTION: forcing a failure. [ 93.951079][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 93.951096][ T7754] CPU: 2 UID: 0 PID: 7754 Comm: syz.7.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.951110][ T7754] Tainted: [L]=SOFTLOCKUP [ 93.951114][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.951119][ T7754] Call Trace: [ 93.951123][ T7754] [ 93.951126][ T7754] dump_stack_lvl+0x100/0x190 [ 93.951146][ T7754] should_fail_ex.cold+0x5/0xa [ 93.951161][ T7754] should_failslab+0xc2/0x120 [ 93.951172][ T7754] __kmalloc_noprof+0xfc/0x840 [ 93.951187][ T7754] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 93.951201][ T7754] ? mpi_alloc_limb_space+0x31/0x60 [ 93.951216][ T7754] mpi_alloc_limb_space+0x31/0x60 [ 93.951229][ T7754] mpi_alloc+0x199/0x230 [ 93.951243][ T7754] mpi_read_raw_from_sgl+0x251/0x620 [ 93.951256][ T7754] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 93.951268][ T7754] ? kasan_save_track+0x14/0x30 [ 93.951279][ T7754] ? mpi_alloc+0x46/0x230 [ 93.951293][ T7754] rsa_enc+0x15d/0x3b0 [ 93.951302][ T7754] ? lock_release+0x24d/0x310 [ 93.951316][ T7754] ? __pfx_rsa_enc+0x10/0x10 [ 93.951325][ T7754] ? __virt_addr_valid+0x239/0x430 [ 93.951338][ T7754] ? sg_init_one+0xf5/0x1b0 [ 93.951347][ T7754] rsassa_pkcs1_verify+0x4ef/0xc20 [ 93.951361][ T7754] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 93.951376][ T7754] ? rsa_max_size+0xd/0x70 [ 93.951385][ T7754] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 93.951398][ T7754] public_key_verify_signature+0x5ee/0x910 [ 93.951414][ T7754] ? __pfx_public_key_verify_signature+0x10/0x10 [ 93.951430][ T7754] ? crypto_destroy_tfm+0x40/0x240 [ 93.951443][ T7754] ? crypto_destroy_tfm+0x41/0x240 [ 93.951458][ T7754] ? pkcs7_digest+0x5cf/0x950 [ 93.951474][ T7754] pkcs7_verify+0x32f/0x1940 [ 93.951487][ T7754] verify_pkcs7_message_sig+0xdd/0x230 [ 93.951497][ T7754] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 93.951506][ T7754] ? pkcs7_parse_message+0x5b1/0x870 [ 93.951516][ T7754] ? kfree+0x22b/0x6d0 [ 93.951529][ T7754] ? pkcs7_parse_message+0x5b6/0x870 [ 93.951539][ T7754] verify_pkcs7_signature+0x6d/0xa0 [ 93.951549][ T7754] valid_regdb+0x20a/0x590 [ 93.951560][ T7754] ? __pfx_valid_regdb+0x10/0x10 [ 93.951572][ T7754] reg_reload_regdb+0x11e/0x540 [ 93.951584][ T7754] ? __pfx_reg_reload_regdb+0x10/0x10 [ 93.951596][ T7754] ? nl80211_pre_doit+0x570/0x1ed0 [ 93.951608][ T7754] genl_family_rcv_msg_doit+0x214/0x300 [ 93.951624][ T7754] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.951641][ T7754] ? bpf_lsm_capable+0x9/0x10 [ 93.951650][ T7754] ? security_capable+0x80/0x260 [ 93.951664][ T7754] genl_rcv_msg+0x560/0x800 [ 93.951679][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.951693][ T7754] ? __lock_acquire+0x5c0/0x1f40 [ 93.951707][ T7754] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.951717][ T7754] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 93.951729][ T7754] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.951741][ T7754] netlink_rcv_skb+0x159/0x420 [ 93.951753][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.951768][ T7754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.951783][ T7754] ? netlink_deliver_tap+0x1ae/0xb50 [ 93.951796][ T7754] genl_rcv+0x28/0x40 [ 93.951809][ T7754] netlink_unicast+0x668/0x950 [ 93.951822][ T7754] ? __pfx_netlink_unicast+0x10/0x10 [ 93.951836][ T7754] netlink_sendmsg+0x9ac/0x10c0 [ 93.951850][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.951864][ T7754] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.951879][ T7754] ? ____sys_sendmsg+0xa99/0xc30 [ 93.951894][ T7754] ____sys_sendmsg+0xa99/0xc30 [ 93.951908][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.951921][ T7754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.951939][ T7754] ___sys_sendmsg+0x190/0x1e0 [ 93.951954][ T7754] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.951970][ T7754] ? futex_wait+0x11e/0x370 [ 93.951986][ T7754] ? find_held_lock+0x2b/0x80 [ 93.952000][ T7754] __sys_sendmsg+0x160/0x210 [ 93.952012][ T7754] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.952026][ T7754] do_syscall_64+0x123/0x790 [ 93.952052][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.952062][ T7754] RIP: 0033:0x7f4df2d9fb19 [ 93.952071][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.952080][ T7754] RSP: 002b:00007f4df3c18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.952090][ T7754] RAX: ffffffffffffffda RBX: 00007f4df3025fa0 RCX: 00007f4df2d9fb19 [ 93.952097][ T7754] RDX: 0000000020008004 RSI: 0000200000000a40 RDI: 000000000000000d [ 93.952102][ T7754] RBP: 00007f4df2e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 93.952108][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.952114][ T7754] R13: 00007f4df3026038 R14: 00007f4df3025fa0 R15: 00007ffe89aeeea8 [ 93.952123][ T7754] [ 94.027580][ T7754] syz.7.382 (7754) used greatest stack depth: 16880 bytes left [ 94.324567][ T5875] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.439802][ T5875] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.489933][ T5875] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.560288][ T5875] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.622310][ T5875] bridge_slave_1: left allmulticast mode [ 94.622333][ T5875] bridge_slave_1: left promiscuous mode [ 94.622476][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.623781][ T5875] bridge_slave_0: left allmulticast mode [ 94.623797][ T5875] bridge_slave_0: left promiscuous mode [ 94.623904][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.656153][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.657657][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.658538][ T5875] bond0 (unregistering): Released all slaves [ 94.791262][ T5497] 8021q: adding VLAN 0 to HW filter on device eth18 [ 94.924480][ T5497] 8021q: adding VLAN 0 to HW filter on device eth19 [ 94.965789][ T5875] hsr_slave_0: left promiscuous mode [ 94.972449][ T5875] hsr_slave_1: left promiscuous mode [ 94.975622][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.975633][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.978062][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.978071][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.984111][ T5875] veth1_macvtap: left promiscuous mode [ 94.984127][ T5875] veth0_macvtap: left promiscuous mode [ 94.984155][ T5875] veth1_vlan: left promiscuous mode [ 94.984177][ T5875] veth0_vlan: left promiscuous mode [ 95.062201][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 95.064005][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 95.091392][ T5497] 8021q: adding VLAN 0 to HW filter on device eth20 [ 95.231960][ T5497] 8021q: adding VLAN 0 to HW filter on device eth21 [ 95.441604][ T5875] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.510617][ T5875] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.570876][ T5875] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.622174][ T5875] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.696284][ T44] kauditd_printk_skb: 372 callbacks suppressed [ 95.696306][ T44] audit: type=1800 audit(1794120486.283:1354): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180773 res=0 errno=-22 [ 95.697109][ T44] audit: type=1800 audit(1794120486.283:1355): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=180778 res=0 errno=-22 [ 95.697439][ T44] audit: type=1800 audit(1794120486.283:1356): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=180782 res=0 errno=-22 [ 95.697711][ T44] audit: type=1800 audit(1794120486.283:1357): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=180781 res=0 errno=-22 [ 95.698117][ T44] audit: type=1800 audit(1794120486.283:1358): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=180784 res=0 errno=-22 [ 95.701122][ T44] audit: type=1800 audit(1794120486.283:1359): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180859 res=0 errno=-22 [ 95.701155][ T44] audit: type=1800 audit(1794120486.283:1360): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=180864 res=0 errno=-22 [ 95.701181][ T44] audit: type=1800 audit(1794120486.283:1361): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=180868 res=0 errno=-22 [ 95.702619][ T44] audit: type=1800 audit(1794120486.283:1362): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=180867 res=0 errno=-22 [ 95.702639][ T44] audit: type=1800 audit(1794120486.283:1363): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=180870 res=0 errno=-22 [ 95.751450][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.816625][ T5497] 8021q: adding VLAN 0 to HW filter on device eth22 [ 95.818964][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.879019][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.930723][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.933796][ T5497] 8021q: adding VLAN 0 to HW filter on device eth23 [ 95.995323][ T5875] bridge_slave_1: left allmulticast mode [ 95.995347][ T5875] bridge_slave_1: left promiscuous mode [ 95.995455][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.997119][ T5875] bridge_slave_0: left allmulticast mode [ 95.997135][ T5875] bridge_slave_0: left promiscuous mode [ 95.997236][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.006967][ T5875] bridge_slave_1: left allmulticast mode [ 96.006985][ T5875] bridge_slave_1: left promiscuous mode [ 96.007092][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.012033][ T5875] ÿÿÿÿÿÿ: left allmulticast mode [ 96.012050][ T5875] ÿÿÿÿÿÿ: left promiscuous mode [ 96.012138][ T5875] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 96.060690][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.062177][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.063009][ T5875] bond0 (unregistering): Released all slaves [ 96.093267][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.094558][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.098996][ T5875] bond0 (unregistering): Released all slaves [ 96.103482][ T5497] 8021q: adding VLAN 0 to HW filter on device eth24 [ 96.221200][ T5497] 8021q: adding VLAN 0 to HW filter on device eth25 [ 96.350920][ T5497] 8021q: adding VLAN 0 to HW filter on device eth26 [ 96.463266][ T5497] 8021q: adding VLAN 0 to HW filter on device eth27 [ 96.512110][ T5875] hsr_slave_0: left promiscuous mode [ 96.512678][ T5875] hsr_slave_1: left promiscuous mode [ 96.513051][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.513064][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.513638][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.513646][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.522333][ T5875] hsr_slave_0: left promiscuous mode [ 96.524921][ T5875] hsr_slave_1: left promiscuous mode [ 96.526494][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.526508][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.528171][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.528182][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.535028][ T5875] veth1_macvtap: left promiscuous mode [ 96.535048][ T5875] veth0_macvtap: left promiscuous mode [ 96.535077][ T5875] veth1_vlan: left promiscuous mode [ 96.535099][ T5875] veth0_vlan: left promiscuous mode [ 96.545701][ T5875] veth1_macvtap: left promiscuous mode [ 96.545723][ T5875] veth0_macvtap: left promiscuous mode [ 96.545769][ T5875] veth1_vlan: left promiscuous mode [ 96.545802][ T5875] veth0_vlan: left promiscuous mode [ 96.631255][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 96.634512][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 96.720675][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 96.887718][ T5497] 8021q: adding VLAN 0 to HW filter on device eth28 [ 97.013468][ T5497] 8021q: adding VLAN 0 to HW filter on device eth29 [ 103.307462][ T44] kauditd_printk_skb: 54 callbacks suppressed [ 103.307481][ T44] audit: type=1400 audit(1794120493.893:1418): avc: denied { write } for pid=7915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.351877][ T44] audit: type=1400 audit(1794120493.933:1419): avc: denied { write } for pid=7918 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1