last executing test programs: 28.460445121s ago: executing program 0 (id=164): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) 28.391882449s ago: executing program 0 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x80000001}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xb, 0x5, 0x9}) 28.300174803s ago: executing program 0 (id=168): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0xe0000001) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0x4) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x600d2, &(0x7f0000000140)=ANY=[@ANYBLOB='euid=', @ANYRESDEC=r2, @ANYBLOB="1caae4fcd66e1df77b2e3472106ac551635e216e48a60f8e4c"]) 28.20964817s ago: executing program 0 (id=169): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) mknodat(r0, 0x0, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xe}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x4}]}}]}, 0x44}}, 0xc8d0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xb}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xd}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x24040084) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x1f0, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x6, 0xe}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x148, 0x2, [@TCA_RED_MARK_BLOCK={0x8}, @TCA_RED_STAB={0x104, 0x2, "b7d0e5e82617c30fc43113e288039b9d491098f667ee1a14677f418d175ae39f76cd82a1d58ba235c65c6d78ad90c6d85b7ce121b88e739e911c5ea7ed3e01fadfccece7e5711d23ba230cc9bb155b804a3a287f2af18846d45dfe0c649073bef4c9246d6942f383afd5fb8ae75a5b1000b8b8c59ee86de355ac34abd7be3c97b10770d72df5e33c25381518135b60179d12e3d9d6685e63636359d3f52934279044a23228f0c6b95d4d476fd6fe36ffc5a88dd5897a5118804f522cbb2cd477d4f1635ff2b3da0f26e514f9197598367c16d9fa2fb7b69becafc65fd49582a0c6e62087ae6c779d103fe07fadeab8df7c03def2f0f0774a4ca3f6eac2eaa743"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x33f41002}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x661, 0x276458fa, 0x4, 0x20, 0x14, 0x3}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x101}, @TCA_RED_PARMS={0x14, 0x1, {0xb5, 0x5, 0x2, 0x8, 0x15, 0x15, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_pie={{0x8}, {0x54, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xc}, @TCA_PIE_BETA={0x8, 0x5, 0x12}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1e}, @TCA_PIE_BETA={0x8, 0x5, 0x7}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x1b}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x76d4}, @qdisc_kind_options=@q_drr={0x8}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x3, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000480)) 28.124418551s ago: executing program 0 (id=171): ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0x0) 27.699537041s ago: executing program 0 (id=176): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00005ed000/0xe000)=nil, 0xe000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000180001002bbd7000fddbdf25022080ff"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000287000/0x4000)=nil, &(0x7f00002cc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000526000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00002cf000/0x1000)=nil, &(0x7f00003cd000/0x3000)=nil, &(0x7f00002bb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)="d40d65e8476325af1c0400", 0xb, r4}, 0x68) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2834, 0x7}}}}}}, 0x0) 27.575521274s ago: executing program 32 (id=176): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00005ed000/0xe000)=nil, 0xe000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000180001002bbd7000fddbdf25022080ff"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000287000/0x4000)=nil, &(0x7f00002cc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000526000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00002cf000/0x1000)=nil, &(0x7f00003cd000/0x3000)=nil, &(0x7f00002bb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)="d40d65e8476325af1c0400", 0xb, r4}, 0x68) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2834, 0x7}}}}}}, 0x0) 24.567642749s ago: executing program 2 (id=198): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000002c0)={0x5154, 0x1, [{0x1, 0x1}]}) 24.565838092s ago: executing program 2 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$vim2m(&(0x7f0000000280), 0xfffffbfffffffffa, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, 0x0, 0x0}, 0x20) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) read$FUSE(r2, &(0x7f0000002a40)={0x2020}, 0x2020) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000001001"], 0x48}}, 0x410) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000002c000000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400000001"], 0x48}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0x4040850) r9 = syz_open_dev$sg(&(0x7f0000000280), 0x7fff, 0x4000) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f00000005c0)=0x49) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r10) 23.628081036s ago: executing program 2 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0xfff}}]}, 0x24}}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0xfff}}]}, 0x24}}, 0x0) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) 23.625074677s ago: executing program 2 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x1427, &(0x7f0000000300)={0x0, 0x800000, 0x80, 0x2, 0x27e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x40002022}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x88800, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000001c0)={0xa, r5, 0xc, {0xfff, 0x2000000000000001}, 0x5}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x21bd8cb, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 22.720424751s ago: executing program 2 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000002", @ANYRES16=r1, @ANYBLOB="200028bd7000ffdbdf2503000000540005800800010065746800080001007564700014000280080004000500000008000100030000000700010069620000240002800800010012000000080003000080000008000300620d00000800020004000000400001800c0002800800010012000000160001006574683a76657468305f746f5f626f6e64000000150001006574683a76657468315f746f5f68737200000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020204020c00000000000000000000000200080008000000fd00000000000000020001000000000000000503000000a003000600ff00000002000000ac1414aa0000000000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89e}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x51, 0x3, "f5e75135e9a07bfe7606949fc2fc223bdc52507e4d73a65078fbeb4e801c1cae208cf480b9319532fb0063329494def162e62171ab4c96c8fa3e57ef71b18888f01431f60252d14f0b1ad334f0"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc2e}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xd4e8e494c90bcd99}, 0x840) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a779c238fcda67781"]) 22.441641008s ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000181200fb", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001000850000000c000000b709000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a60f0000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.410602401s ago: executing program 33 (id=231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000181200fb", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001000850000000c000000b709000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a60f0000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.868989704s ago: executing program 4 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)=@v2={0x5, 0x1, 0xc, 0x6}, 0x9, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x8914, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 1.868776138s ago: executing program 4 (id=454): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) 1.769120956s ago: executing program 4 (id=455): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2000000000000219, &(0x7f00000000c0)}) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="580000000206010400000000000000000000000605000100070000000900020073797a30000000000c000780050015000e00000012000300686173683a6e65742c706f72740000000500050002000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) (async) write(r1, &(0x7f0000000000)='3', 0x4e) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x22, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r6}, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r1, r1, 0x1f, 0x28, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000180)="8bf985cd406e992f7c1bfb2a0380837b5b610e9ec846339781e00f7dacd35b22f0f04cda59f752aaf2e22765dd59a531566790c9293e0815694bc450b6fc1a282e26286ef6ea9a72c858f1cb22f2a0ff067b64bc073e3fd459184120e464cd5f207f6fc263c357b899933ce8dd329bfb7ea7b7a384903f11d06fc07ec7e5c7ce39f45c8306cb6fee3402e98417a3f1457359da78a882c6026d158ff5663c802ecdf0c4056e18f28b7222e293c701effc72bc039691fdff3d34b287cc71318ac1b67d487cc7884a56981e4d96b17fc163a0594967b739e189dbab5f2a38c4472e4bbcd7", 0xe3, 0x14, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 64) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000a00)={{'\x00', 0x2}, {0x1}, 0x0, 0x0, 0x0, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', &(0x7f0000000440)="253f89960dce446ad75f9a14adb700420d55707c2eadf49fe47156403ec5262b32607274b609b7d4d736e13d6b9275ce22d93a2beb665b7aa57f1b9a5fa3ab6d992b8672373ee53533e2c5119af53e42dd91869f9c10d89ec8de30535f9f205777039e0b8ab039fe6d6fb741dab1b6698455ac1f3ffc3d57658c6a6eb8ba2c70457c10536dcc1ffcb0899e5773596f3c2304e07d3e207e972c6f12044e6ef8d271ab96e975e26c967d4f695b4e742ec277413fc75f6a03de64d42d22fba35825a17bb6e445db", 0xc6, 0x0, &(0x7f00000008c0)={0x2, 0x89, {0x0, 0xc, 0x3a, "90ee2511214e118bc0a3fd32719b0b7b4071b30ba76a9b5c46333f68d98890dc4546f8b70801d1dd02a6d65ac8e3b78239d5ef8e871994069307", 0x42, "4ac843fb6ffe4398922b99948fab7cef361edb546bd429d8fc9f2de02abf56c2688b89ed348116c8b2e32cdf3db1dde13c36db4e17be89eeb7bd8d7685f86ef11ce3"}, 0x93, "f3acd2fea6c64c25ec14333d1bc76c61c308380039c51909d1375e9a3f2af54381f9a35d476f2284e38b71c3c275618c938e6381ae74159f20807d06834c5f748693c477d42a053a0bc0bec1ff9040f1409ad28f0a5425518e2dd2c28352489281b759cf728417d53ef513a39b0d0c0b83b212322a3958518e7172b6608feca12d2a0a75936f07a9c45e291d5de6942057d5d8"}, 0x128}) (rerun: 64) 1.717403659s ago: executing program 4 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000007000)={0x1, 0x0, [{0x40000098}]}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x74, "a9d092b6718f99f63f30f4b5787e5b447495b34c3f8bc247fb26235e687562cdb9cf8661a5cb313ad446867035d6f6338aeaa9091a179c34ad16762cded2f5b1fae74d4c27cc4b46c24d0dece4545721111d0dead2317e2c34e49497a7bacf73f119a5c9c3a77887359559e62365f05043d4c1a4"}, &(0x7f0000000100)=0x98) close_range(r0, 0xffffffffffffffff, 0x0) 1.596958801s ago: executing program 4 (id=457): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) tkill(r0, 0x12) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 1.594481111s ago: executing program 4 (id=458): write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e890102030109021200010854400109"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x2, 0x48842) (async) syz_open_dev$I2C(0x0, 0x2, 0x48842) syz_usb_connect(0x2, 0x39c, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0xad, 0x33, 0xbc, 0xff, 0x19d2, 0x43, 0x31df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38a, 0x1, 0xa2, 0x9, 0x20, 0x4, "", [{{0x9, 0x4, 0x3e, 0x5e, 0xe, 0xff, 0xff, 0xff, 0xd6, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0xb, 0x3, 0x3, [@generic={0x7f, 0xa, "de16f696f718fa3fff3d7f9bde5177d49bf7fe35b96818d2bb76d0789fe69e0d53639e94cbf85dbb707216309946f373ace49d030131b6d0fd689683beca71e4dbe658e1d80699e8341b971b18f248e300828298554399a922579eeceeef4349b99af180fbf08eae6003ada205504a55b30dba9832d9d9d1b0ab9f4b9a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xd6d}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xed}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x45, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x68, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x5dd}]}}, {{0x9, 0x5, 0x80, 0x4ade0025590fef46, 0x3ff, 0x8, 0x4, 0xaf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xc, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xc00}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x7f, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcb, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xb5, 0x39, 0x7, [@generic={0x29, 0x3, "2acadf813d573a6467d96f517d5058b5e67301d953b553bf9164325a2784afe578f6a2f162666f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x192}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x5, 0x3, 0x9, [@generic={0x6a, 0x21, "9126e096e4eb2318e1aa5579772fb23e1105c623e6c205f6190f16644c85064da4885f5fc6101ca57ea70a135486d2015759f8293eb68f42c141d68b25320a0ddd7f33b4b80914772e6fc812303ddb029bfddc0d0133946222e527e76d36e8318a357b7c22c62e58"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x14}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x7, 0xd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x98, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x7, 0x5, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x6, 0x0, 0x2, [@generic={0xfc, 0x3, "da3fccb027fe4c1ff9629591f69168298abe904e21513fe196af96abfe2f36d5c38f787035073b6072166890af3cd368f9c1171f5f347c227f0c76e8f3b2e84b5cad79a7ee1305118fc452c1ab726a8f1d979e43e6830b6b5886f498b3b5adcf4d8e28332b72a52517cd19ae78b9e9b0c4a49fd578b1c6280e5d10f6bca5b628d22ad022f7cc367c06e7beb76001c6060128b176521292f6e29aaf57bb7d064ba3f93e24c2b51c87e33ec6d7ded7c8cfa33cd5ecc58b72e52acc0c8e4273de0f1e63e2946f60b89114f1e3aaa7fc17d1858d414ad618b1334dcabba0ec3e11a39f33c75aa7320c32fa3e85101b8393d4a36be344931b1cb80420"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x81}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x4, 0x27, 0x1, [@generic={0x98, 0x10, "01fad173279d6fc28df0d8f54b0a3863fe8c887dc08484c41ded642c924250f58bbefba29e0d138247d3afe372145744544f7b90444861b6cbee77e78b62db6ecbd53e72a995fd09493e8831f1e03f9d4bde871a3c448a61581ffe2a67670594d4d4cd6ebfe161c85a857f57b147383ae38b50f56e04b2e072c6abb03d088128ad580c1239437673fe148a9a85a9c2c7f1581c5dee22"}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x81, 0x54, 0x4, 0x20, 0x80}, 0xd7, &(0x7f0000000a40)={0x5, 0xf, 0xd7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x29, 0x4, 0xd}, @generic={0x4a, 0x10, 0x4, "fe08c0a399c03e79a2f6017a43ea0f92398742d44529927e0974682fa5a573088582f8ee1e0eb616edeea8acf57bb49490d6226d924d9c3c49580b622854a81b92a4c665e321f3"}, @generic={0x2c, 0x10, 0x3, "9657904be1b45b9c48e554a6ec01d9e0f444aedba2d9dbe8b7f4f176b69c6e4dea11002c5ac1067397"}, @generic={0x2e, 0x10, 0x3, "dd60fb5869a4e6bd9b90376b4b86b5ba4750bcb51d08f6e82d9cd03e5abd7d75f944f840da144e23a9b334"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x3, 0xf00, 0x0, [0x3f00, 0xffc0c0, 0xc000, 0xff00ff, 0x3f00, 0x3f7e]}]}, 0x8, [{0x67, &(0x7f0000000b40)=@string={0x67, 0x3, "945e125a9a472866133de76d54e9d0bd1321b86cb121789b2558c99be0255845104504de017d9ce350fec078d8331e28e8669d6fd6e6999e8fef9954e97a664896b35649b361937c40e0cd80985262be0952ca5fd5d62d9c380c1243f3d03758635d60add4"}}, {0xd2, &(0x7f0000000bc0)=@string={0xd2, 0x3, "be4376cffccef9cf19f6dfe2468c86bce2210e2ddb8c9db2059c888a071ef6ad6124851d8f2e5eb305ff326b2402303bfd1ac1d7cb127c1f9eb07cc8b15f4b575b9aaa9b01b3f4ef389838b302decd5b74116b6e094daa616631ed428f0531888555a1b537e463df326ae3b6c20ff46e4653a811a0dfdf12e262b31df5f8883de466e0cd0e5c8b87c3cd748bb9de57966ad187c86b0506ae1e19ef1ebe2ec12a598ef445453a9507203bb0a52a1881693edadb53f625cb976b9d01f959deed8bda462b8c9153ef639d4406117ae6dc30"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0xf7, &(0x7f0000000d00)=@string={0xf7, 0x3, "dde4c5c5c454c1ba985da91eff09d52cf93fb4dbd7674f720607da27a8e89bd1d4d43e06d341ab1597c6ebbf556719734d9b7c8e4a1efd734f1a983d8e1b950c634eea456ee12ed875c6d493bfad91373abb4c3a9625e144b9b4d1fe448afbfceb54d95826db102f41c89c79a4ee64d692a1f27e4ecd99426c9ad7f6c3ba67874730e1c7aa69aa15527166c773f1911e01c224adda8ce743cda55d6a55ec59c85f06b4f51dcd72e33f97a0517af42e368b16e802e54e8e13ab9a26021c335b65f14ffba7ce1a2e1e4d8adf04c8b858299afc44123e31ed1db6b8c66ee1f68becc2722514ef9c0c20f65e5e44e6258118cc551aced3"}}, {0xfb, &(0x7f0000000e00)=@string={0xfb, 0x3, "0802b8ee85f40627cd543f8a7c428737cfc0c5e515e0a0f1fc2088349d0ea24e6a8ab35d1c2fc641681aef154ebcc7efd8973ac9a00882f54cd92b2c0b47f5bd1e30cf9a6bf875ca3860df49df764b8239c026f4b905e249e889d55e7b83c1f02c1d297203daeb9b4fc97b76f261dc0b168f0796555bd2c182759032ee54231200f5dd014e11aa75f796c82d8cddb83c97a5ef92d45d662a766e4e664ccc247f4df36425f72ea78cca43a488ee0cc8ea358bc908f259fbcb2bb62558ca8ca51662b3cd9993deb254c8484e3daa28be469cd9f60c6bf49ea451da74298f408abb932daf291f8916dc8c4a44c7b642be6cf0abd2c128f6d07835"}}, {0xcf, &(0x7f0000000f00)=ANY=[@ANYBLOB="cf03c807fe3d23f908e4cbea4a135710737beadb06658d40b2526992e0acabd6f44eca50a3d4c773042ecfbeb02be1b28e2b02e793a41fba7e57e06c6b819b595329971ae5fd63d1353e097b4f2bc6b6065272814e711f3238afff87451e3c0f1c783cb3d1c996e9a70faddd961913e06b0f2b27ff9ffd1a9f772730cae9f969b732be77a367292f10c756b73b48851a0ed1565cf7759bac270441b5c5a1dcf7517a25c1849e37ab516fe54f7c3ec292f8120ca0f55d31eaf4c7606985cca7c099e87916c505ddaed423519200"]}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1009}}, {0xc6, &(0x7f0000001040)=@string={0xc6, 0x3, "80a5d31615e77f17c3953d5f945d93b3247f6cfc441f3fe1b2f182061f4048214b3b8a67d62c0a83e81bd645972c8987fd846d52027c4121f669587832522f94fab4ec3062e5241f1610dd2298e9a5a3a26439aec7daf442d8a9546b8d1f9d9e2b13d1ee5ccecf44e4c956759aaba741ca06815b1da87a4a87f65ecc23e4e90293244a22badcc015497b830660a5273fd7cddb84a9b9528e79eb390198e7a9ce88e6c797e17aa5bb614af6c289432f663e82ba673c7f86b0e8414e6d8818acea1f7beaf3"}}]}) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="13012abd7000fbdbdf2503"], 0x98}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) 1.248657106s ago: executing program 1 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r1, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtclass={0x6c, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}]}}]}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x88}}, 0x4009000) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x88}}, 0x4009000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) 1.070249675s ago: executing program 1 (id=467): ioctl$MEMLOCK(0xffffffffffffffff, 0x40084d05, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1.067884129s ago: executing program 1 (id=469): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x25, 0x3, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="bc0000002b0001000000000000000000aa0000800c0000000000000000007ae26aab9c53c18159865958a3e422f7000014000100fe8000000000000000000000000000aa50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555eb0aa8dcc6cbd7a9cae63a44ee091c5ce81c8dd947fba90bf99316f84ebdab3a8cfeeca572307"], 0xbc}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r6, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x3ec38bccb6f0d97}, 0x10) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) syz_open_pts(r0, 0x18303) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x30, 0x5, 0x4}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000280)={r8, 0x1, 0x637d, 0x3f, 0x2, 0x8}, 0x14) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="b50a0000000000000000000000000000000000950000000000000000000000000000000300000000c64ebb34f7145ddecac2b6424c0000fea1d80eb970b1ea32dfe51d57039016ff582e2c1b851ffb530400cd2f841bf4af52a38a3f539a257a86529decddce89c4d81ab4509c0024af5d63bc9a33947ad2639052c025abe3c9901e07f7b1cb28b1aa35dfc277af284c04b49635c7394ed3c21d99815b36f824a58d3eef12ef193b048b4eb64984ed7d14e9164fedd9b30108fba2fdeb8bd4d1ab05a8ebcf542349d0f4ff224dbb0e138d3ec273a6cc51cb20d25575d337c95c"], &(0x7f0000000000)='GPL\x00'}, 0x94) 994.106369ms ago: executing program 1 (id=470): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000380), &(0x7f0000000440)=@tcp=r2}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x8000) 940.196308ms ago: executing program 1 (id=472): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x5) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f323132", 0x81, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280)=ANY=[], 0x8) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, 'nl802154\x00', 0x3a, 'wpan0\x00', 0x3a, './proc_mnt', 0x3a, [0x50]}, 0x3a) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x1c, r0, 0x703, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040800) 940.033067ms ago: executing program 1 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf64(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) unshare(0xc040480) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000001000)={0xc0, 0x0, 0x10000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3, 0x11, r5, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a1006e408a24dbb202591c7f8c8a2337c7dcf4d97afe7b", 0x3e}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000000000002500000008000300", @ANYRES32=r10, @ANYBLOB="08003500000000000a00060063a9bc11539d000008002600850900000a0034000101010101010000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 490.023177ms ago: executing program 5 (id=475): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x13, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x0, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xfffffffffffffc58, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfc}}, 0x44840) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x1802}]) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='wg0\x00') (async) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 489.742841ms ago: executing program 3 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x2}}, 0x1c) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001040)={0x2020}, 0x2020) preadv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800cd8d000000e5ff000000020000000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 403.647468ms ago: executing program 3 (id=477): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0x0, 0xee00, 0xee01]) keyctl$chown(0x4, r0, r1, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f00000002c0)='./file2\x00') accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x1c) (async) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x348, 0x348, 0xffffffff, 0x0, 0x1c8, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@empty, @ipv6=@remote, @icmp_id=0x66, @port=0x4e21}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xff000000], 'veth0_to_team\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x3b, 0xfe, 0x7, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x884, 0x6}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x11, 0x1, 0x0, 0xa0, 0x4, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xff], [0xff000000, 0x0, 0x0, 0xffffff00], 0x406, 0x480}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv6=@remote, @ipv4=@local, @port=0x4e24, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x15, @ipv6=@local, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x66, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 348.448349ms ago: executing program 3 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) write$selinux_create(r1, 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) 340.665555ms ago: executing program 5 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4a803, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x280080, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x6000) 209.524477ms ago: executing program 5 (id=480): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0x9362, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 208.640232ms ago: executing program 5 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010070000030000000200000000000011feffffffffffffff000000d6a40f83baebc7ed7c7ddfdb21c41ee3b8afc435575efa7bc04d923dfc097cd4821943a82d22e1eb35f9fdb72b47ab60dedf36225f37aff237f11553f9dc4939c7f9ff738e99ee0d66c589a60176a3954d3f2cb594ed879e0fdf2046f18937fa0d2f34b8f842b6d460db0e90fdedaab63d1df89ba08dd049f75c5aaed697fe15ac6b7e069b4e7ce2bf9eb1bf335de4b4e9b68ef6aa6c92b4a35d878213b3a78efe4e79fc3d"], 0x0, 0x2b}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e8"], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="030f0000000000000000340000000e0001006e657464657673696d0000000f0001"], 0x34}}, 0x0) 129.59478ms ago: executing program 3 (id=482): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001340)={'syztnl0\x00', &(0x7f0000001280)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0x2, 0x9, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x66, 0x0, 0xa, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, {[@end, @lsrr={0x83, 0x13, 0xef, [@local, @local, @local, @remote]}, @noop, @timestamp_addr={0x44, 0x44, 0x20, 0x1, 0x3, [{@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@broadcast, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}, @end, @noop, @rr={0x7, 0x23, 0x86, [@local, @loopback, @local, @rand_addr=0x64010100, @empty, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}, @rr={0x7, 0xb, 0xbd, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_tracing={0x1a, 0x18, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000014c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001500)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x11de9, 0xffffffffffffffff, 0x2, &(0x7f0000002500)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000002540)=[{0x3, 0x5, 0xc}, {0x5, 0x3, 0xe, 0x7}], 0x10, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r4) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000003c0)=0x1, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000026c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x5, 0x1, 0xa, 0x8001, 0x6}, @jmp={0x5, 0x0, 0x8, 0x2, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x1c, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000013c0)={0x4, 0x9, 0x81, 0x2}, 0x10, 0x26ae7, r2, 0x1, &(0x7f0000002640)=[r3, 0xffffffffffffffff, 0x1, r4, r5], &(0x7f0000002680)=[{0x3, 0x1, 0xb, 0xe}], 0x10, 0x80000000}, 0x94) 129.381503ms ago: executing program 5 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0x80, 0x80800) (async) removexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00') 60.656737ms ago: executing program 5 (id=484): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10000, 0x9, 0x100000001, 0x6, 0x4, 0x0, 0x3, 0x6}, &(0x7f0000000100)={0x81, 0x1, 0x6, 0x7b, 0x9, 0x6, 0x6}, &(0x7f0000000140)={0x7ff, 0xd1, 0xc98, 0xf, 0x5, 0x5, 0x8, 0x27f}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7ff]}, 0x8}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) io_uring_setup(0x1075ee, &(0x7f0000000240)={0x0, 0xed46, 0x80000, 0x0, 0x387}) socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0x1ff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe0042, 0x1ff) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x220) setns(0xc9, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmmsg(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1}, 0x1ff}], 0x1, 0x100, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) execveat(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x400) 436.115µs ago: executing program 3 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write(r0, &(0x7f0000000140)='9', 0x1) 0s ago: executing program 3 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80, 0x80103) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a0076c90457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) timer_create(0x0, &(0x7f0000000300)={0x0, 0x1d, 0x2}, &(0x7f00000003c0)) (async) fsetxattr$security_selinux(r2, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0xbbd, 0x4366c2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) (async) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (async, rerun: 64) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000002c0)=[{0x800000000, 0x3}, {0x0, 0x6, 0x7}], 0x2, 0xbfb, 0x1e, 0x0, 0xc, 0x21}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="660f388144c90bb967090000b800000000ba008000000f300f20d835080000000f22d80f20d835080000000f22d8c4e33d389c9097000000200f01c49a3d8a0000e200f30f1b3bb9db0a00000f32c4e2fd1d7cf600", 0x55}], 0x1, 0x9e, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x2800003, 0x12, r5, 0x47550000) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ? rcu_is_watching+0x13/0xc0 [ 61.831514][ T5917] get_signal+0x1f2a/0x21e0 [ 61.831543][ T5917] ? __pfx_get_signal+0x10/0x10 [ 61.831570][ T5917] arch_do_signal_or_restart+0x91/0x7e0 [ 61.831597][ T5917] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 61.831624][ T5917] ? cond_local_irq_disable.part.0+0x38/0x40 [ 61.831651][ T5917] ? exc_general_protection+0x120/0x240 [ 61.831682][ T5917] irqentry_exit+0x402/0xa10 [ 61.831705][ T5917] asm_exc_general_protection+0x26/0x30 [ 61.831726][ T5917] RIP: 0033:0x7fca1ef9e161 [ 61.831742][ T5917] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.831757][ T5917] RSP: 002b:0000200000000280 EFLAGS: 00010217 [ 61.831772][ T5917] RAX: 0000000000000000 RBX: 00007fca1f226090 RCX: 00007fca1ef9e159 [ 61.831783][ T5917] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000008000000 [ 61.831794][ T5917] RBP: 00007fca1f03503b R08: 0000200000000340 R09: 0000200000000340 [ 61.831805][ T5917] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 61.831815][ T5917] R13: 00007fca1f226128 R14: 00007fca1f226090 R15: 00007fffef39d358 [ 61.831835][ T5917] [ 61.840923][ T851] usb 7-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 61.842966][ T851] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.842995][ T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.847912][ T851] usb 7-1: config 0 descriptor?? [ 61.884020][ T5917] memory: usage 307200kB, limit 307200kB, failcnt 65310 [ 61.884033][ T5917] memory+swap: usage 431880kB, limit 9007199254740988kB, failcnt 0 [ 61.884040][ T5917] kmem: usage 5356kB, limit 9007199254740988kB, failcnt 0 [ 61.884047][ T5917] Memory cgroup stats for /syz3: [ 61.884122][ T5917] cache 308957184 [ 61.884127][ T5917] rss 81920 [ 61.884131][ T5917] rss_huge 0 [ 61.884135][ T5917] shmem 308948992 [ 61.884139][ T5917] mapped_file 0 [ 61.884142][ T5917] dirty 0 [ 61.884146][ T5917] writeback 0 [ 61.884149][ T5917] workingset_refault_anon 66 [ 61.884154][ T5917] workingset_refault_file 33203 [ 61.884158][ T5917] swap 127672320 [ 61.884161][ T5917] swapcached 188952576 [ 61.884165][ T5917] pgpgin 212887 [ 61.884169][ T5917] pgpgout 137426 [ 61.884173][ T5917] pgfault 9608 [ 61.884177][ T5917] pgmajfault 229 [ 61.884180][ T5917] inactive_anon 17047552 [ 61.884184][ T5917] active_anon 292032512 [ 61.884188][ T5917] inactive_file 0 [ 61.884192][ T5917] active_file 4096 [ 61.884196][ T5917] unevictable 0 [ 61.884199][ T5917] hierarchical_memory_limit 314572800 [ 61.884204][ T5917] hierarchical_memsw_limit 9223372036854771712 [ 61.884208][ T5917] total_cache 308957184 [ 61.884212][ T5917] total_rss 81920 [ 61.884216][ T5917] total_rss_huge 0 [ 61.884220][ T5917] total_shmem 308948992 [ 61.884224][ T5917] total_mapped_file 0 [ 61.884228][ T5917] total_dirty 0 [ 61.884231][ T5917] total_writeback 0 [ 61.884235][ T5917] total_workingset_refault_anon 66 [ 61.884239][ T5917] total_workingset_refault_file 33203 [ 61.884243][ T5917] total_swap 127672320 [ 61.884247][ T5917] total_swapcached 188952576 [ 61.884251][ T5917] total_pgpgin 212887 [ 61.884255][ T5917] total_pgpgout 137426 [ 61.884259][ T5917] total_pgfault 9608 [ 61.884263][ T5917] total_pgmajfault 229 [ 61.884267][ T5917] total_inactive_anon 17047552 [ 61.884272][ T5917] total_active_anon 292032512 [ 61.884277][ T5917] total_inactive_file 0 [ 61.884281][ T5917] total_active_file 4096 [ 61.884285][ T5917] total_unevictable 0 [ 61.884289][ T5917] anon_cost 0 [ 61.884293][ T5917] file_cost 0 [ 61.884297][ T5917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7,pid=5918,uid=0 [ 61.886223][ T5917] Memory cgroup out of memory: Killed process 5918 (syz.3.7) total-vm:99000kB, anon-rss:1276kB, file-rss:43764kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 61.973483][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.1.73'. [ 62.062807][ T5929] syz.3.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 62.062837][ T5929] CPU: 2 UID: 0 PID: 5929 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 62.062850][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.062858][ T5929] Call Trace: [ 62.062862][ T5929] [ 62.062868][ T5929] dump_stack_lvl+0x100/0x190 [ 62.062902][ T5929] dump_header+0xfb/0x606 [ 62.062920][ T5929] oom_kill_process.cold+0xd/0x380 [ 62.062935][ T5929] out_of_memory+0x340/0x14f0 [ 62.062955][ T5929] ? __pfx_out_of_memory+0x10/0x10 [ 62.062975][ T5929] mem_cgroup_out_of_memory+0xc6/0x130 [ 62.062989][ T5929] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 62.063002][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063022][ T5929] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.063038][ T5929] ? _raw_spin_unlock+0x28/0x50 [ 62.063055][ T5929] try_charge_memcg+0x783/0xf60 [ 62.063076][ T5929] ? __pfx_try_charge_memcg+0x10/0x10 [ 62.063093][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063109][ T5929] ? rcu_read_unlock+0x17/0x60 [ 62.063127][ T5929] ? rcu_read_unlock+0x17/0x60 [ 62.063144][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063162][ T5929] ? rcu_read_unlock+0x17/0x60 [ 62.063183][ T5929] charge_memcg+0x1ae/0x210 [ 62.063201][ T5929] __mem_cgroup_charge+0x2b/0x1c0 [ 62.063222][ T5929] filemap_add_folio+0xe7/0x6a0 [ 62.063240][ T5929] ? __pfx_filemap_add_folio+0x10/0x10 [ 62.063261][ T5929] __filemap_get_folio_mpol+0x584/0x1320 [ 62.063282][ T5929] filemap_fault+0x879/0x3130 [ 62.063303][ T5929] ? __pfx_filemap_fault+0x10/0x10 [ 62.063325][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063343][ T5929] ? __pfx_filemap_map_pages+0x10/0x10 [ 62.063358][ T5929] __do_fault+0x10b/0x440 [ 62.063372][ T5929] do_fault+0xb3f/0x1830 [ 62.063389][ T5929] ? __pfx_do_fault+0x10/0x10 [ 62.063402][ T5929] ? rcu_read_unlock+0x2d/0xb0 [ 62.063419][ T5929] ? rcu_read_unlock+0x2d/0xb0 [ 62.063437][ T5929] ? __pte_offset_map+0x179/0x310 [ 62.063453][ T5929] __handle_mm_fault+0x150b/0x2f60 [ 62.063474][ T5929] ? __pfx___handle_mm_fault+0x10/0x10 [ 62.063491][ T5929] ? pte_offset_map_lock+0x174/0x320 [ 62.063505][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063522][ T5929] ? find_held_lock+0x2b/0x80 [ 62.063538][ T5929] ? follow_page_pte+0x536/0x1050 [ 62.063561][ T5929] handle_mm_fault+0x363/0xa20 [ 62.063582][ T5929] __get_user_pages+0x8ae/0x2c30 [ 62.063601][ T5929] ? lock_acquire+0x1d1/0x380 [ 62.063614][ T5929] ? __pfx___get_user_pages+0x10/0x10 [ 62.063630][ T5929] ? __pfx___might_resched+0x10/0x10 [ 62.063647][ T5929] get_dump_page+0x27e/0x3d0 [ 62.063662][ T5929] ? __pfx_get_dump_page+0x10/0x10 [ 62.063676][ T5929] ? dump_user_range+0x65e/0xad0 [ 62.063692][ T5929] dump_user_range+0x18d/0xad0 [ 62.063708][ T5929] ? __pfx_dump_user_range+0x10/0x10 [ 62.063730][ T5929] ? __pfx_writenote+0x10/0x10 [ 62.063743][ T5929] ? elf_core_dump+0x1f25/0x3d20 [ 62.063759][ T5929] elf_core_dump+0x2d68/0x3d20 [ 62.063781][ T5929] ? __pfx_elf_core_dump+0x10/0x10 [ 62.063794][ T5929] ? kasan_save_stack+0x3f/0x50 [ 62.063807][ T5929] ? kasan_save_stack+0x30/0x50 [ 62.063820][ T5929] ? kasan_save_track+0x14/0x30 [ 62.063832][ T5929] ? __kasan_kmalloc+0xaa/0xb0 [ 62.063845][ T5929] ? vfs_coredump+0x21f6/0x54a0 [ 62.063856][ T5929] ? get_signal+0x1f2a/0x21e0 [ 62.063869][ T5929] ? arch_do_signal_or_restart+0x91/0x7e0 [ 62.063891][ T5929] ? 0xffffffffff600000 [ 62.063920][ T5929] ? lock_acquire+0x1d1/0x380 [ 62.063932][ T5929] ? get_signal+0x1f2a/0x21e0 [ 62.063950][ T5929] ? vfs_coredump+0x281a/0x54a0 [ 62.063961][ T5929] vfs_coredump+0x281a/0x54a0 [ 62.063979][ T5929] ? __pfx_vfs_coredump+0x10/0x10 [ 62.063991][ T5929] ? __lock_acquire+0x5c0/0x1f40 [ 62.064007][ T5929] ? __lock_acquire+0x5c0/0x1f40 [ 62.064021][ T5929] ? lock_acquire+0x1d1/0x380 [ 62.064033][ T5929] ? unwind_next_frame+0xbd/0x2090 [ 62.064059][ T5929] ? lock_acquire+0x1d1/0x380 [ 62.064081][ T5929] ? bpf_ksym_find+0x128/0x1c0 [ 62.064106][ T5929] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.064142][ T5929] ? arch_stack_walk+0xa6/0xf0 [ 62.064174][ T5929] ? __sigqueue_free+0xbe/0x2a0 [ 62.064199][ T5929] ? stack_trace_save+0x8e/0xc0 [ 62.064228][ T5929] ? __pfx_stack_trace_save+0x10/0x10 [ 62.064256][ T5929] ? stack_depot_save_flags+0x27/0x9f0 [ 62.064278][ T5929] ? __lock_acquire+0x5c0/0x1f40 [ 62.064341][ T5929] ? proc_coredump_connector+0x2d3/0x4f0 [ 62.064370][ T5929] ? __pfx_proc_coredump_connector+0x10/0x10 [ 62.064403][ T5929] ? rcu_is_watching+0x13/0xc0 [ 62.064431][ T5929] get_signal+0x1f2a/0x21e0 [ 62.064460][ T5929] ? __pfx_get_signal+0x10/0x10 [ 62.064487][ T5929] arch_do_signal_or_restart+0x91/0x7e0 [ 62.064515][ T5929] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.064547][ T5929] ? cond_local_irq_disable.part.0+0x38/0x40 [ 62.064574][ T5929] ? exc_general_protection+0x120/0x240 [ 62.064609][ T5929] irqentry_exit+0x402/0xa10 [ 62.064635][ T5929] asm_exc_general_protection+0x26/0x30 [ 62.064654][ T5929] RIP: 0033:0x7fca1ef9e161 [ 62.064670][ T5929] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.064686][ T5929] RSP: 002b:0000200000000280 EFLAGS: 00010217 [ 62.064702][ T5929] RAX: 0000000000000000 RBX: 00007fca1f226090 RCX: 00007fca1ef9e159 [ 62.064713][ T5929] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000008000000 [ 62.064731][ T5929] RBP: 00007fca1f03503b R08: 0000200000000340 R09: 0000200000000340 [ 62.064743][ T5929] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 62.064753][ T5929] R13: 00007fca1f226128 R14: 00007fca1f226090 R15: 00007fffef39d358 [ 62.064779][ T5929] [ 62.078923][ T5929] memory: usage 306992kB, limit 307200kB, failcnt 65581 [ 62.078939][ T5929] memory+swap: usage 431740kB, limit 9007199254740988kB, failcnt 0 [ 62.078950][ T5929] kmem: usage 5324kB, limit 9007199254740988kB, failcnt 0 [ 62.078959][ T5929] Memory cgroup stats for /syz3: [ 62.079238][ T5929] cache 308772864 [ 62.079247][ T5929] rss 81920 [ 62.079253][ T5929] rss_huge 0 [ 62.079259][ T5929] shmem 308645888 [ 62.079264][ T5929] mapped_file 0 [ 62.079270][ T5929] dirty 0 [ 62.079279][ T5929] writeback 0 [ 62.079284][ T5929] workingset_refault_anon 66 [ 62.079291][ T5929] workingset_refault_file 33234 [ 62.079298][ T5929] swap 127741952 [ 62.079303][ T5929] swapcached 189145088 [ 62.079309][ T5929] pgpgin 212927 [ 62.079315][ T5929] pgpgout 137510 [ 62.079321][ T5929] pgfault 9609 [ 62.079326][ T5929] pgmajfault 231 [ 62.079332][ T5929] inactive_anon 237981696 [ 62.079338][ T5929] active_anon 70459392 [ 62.079401][ T5929] inactive_file 12288 [ 62.079409][ T5929] active_file 36864 [ 62.079415][ T5929] unevictable 0 [ 62.079420][ T5929] hierarchical_memory_limit 314572800 [ 62.079427][ T5929] hierarchical_memsw_limit 9223372036854771712 [ 62.079434][ T5929] total_cache 308772864 [ 62.079440][ T5929] total_rss 81920 [ 62.079446][ T5929] total_rss_huge 0 [ 62.079451][ T5929] total_shmem 308645888 [ 62.079458][ T5929] total_mapped_file 0 [ 62.079463][ T5929] total_dirty 0 [ 62.079469][ T5929] total_writeback 0 [ 62.079475][ T5929] total_workingset_refault_anon 66 [ 62.079482][ T5929] total_workingset_refault_file 33234 [ 62.079489][ T5929] total_swap 127741952 [ 62.079495][ T5929] total_swapcached 189145088 [ 62.079501][ T5929] total_pgpgin 212927 [ 62.079506][ T5929] total_pgpgout 137510 [ 62.079512][ T5929] total_pgfault 9609 [ 62.079577][ T5929] total_pgmajfault 231 [ 62.079584][ T5929] total_inactive_anon 237981696 [ 62.079591][ T5929] total_active_anon 70459392 [ 62.079597][ T5929] total_inactive_file 12288 [ 62.079603][ T5929] total_active_file 36864 [ 62.079609][ T5929] total_unevictable 0 [ 62.079614][ T5929] anon_cost 0 [ 62.079620][ T5929] file_cost 0 [ 62.079626][ T5929] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7,pid=5917,uid=0 [ 62.079858][ T5929] Memory cgroup out of memory: Killed process 5917 (syz.3.7) total-vm:99000kB, anon-rss:1252kB, file-rss:38812kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 62.093113][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 62.164954][ T5545] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.165074][ T5545] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.165101][ T5545] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.165128][ T5545] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.342232][ T851] input: HID 046d:c09b as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:046D:C09B.0002/input/input5 [ 62.515739][ T851] logitech-hidpp-device 0003:046D:C09B.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.2-1/input0 [ 62.652528][ T6225] usb usb8: usbfs: process 6225 (syz.1.77) did not claim interface 0 before use [ 62.750677][ T6227] overlayfs: cannot append lower layer [ 62.830133][ T6182] loop6: detected capacity change from 0 to 8 [ 62.832892][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 62.832907][ T43] audit: type=1400 audit(1789190253.500:410): avc: denied { create } for pid=6228 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.838670][ T43] audit: type=1400 audit(1789190253.500:411): avc: denied { create } for pid=6228 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.839531][ T43] audit: type=1400 audit(1789190253.500:412): avc: denied { bind } for pid=6228 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.845650][ T43] audit: type=1400 audit(1789190253.510:413): avc: denied { write } for pid=6228 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.878724][ T43] audit: type=1400 audit(1789190253.540:414): avc: denied { allowed } for pid=6232 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.939660][ T6182] loop6: detected capacity change from 8 to 7 [ 62.958564][ C0] blk_print_req_error: 10 callbacks suppressed [ 62.958585][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.958652][ C0] buffer_io_error: 10 callbacks suppressed [ 62.958663][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.965717][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.965774][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.966970][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.967035][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.967474][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.967528][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.967712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.967760][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.967919][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.967966][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.968072][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.968118][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.968148][ T6182] ldm_validate_partition_table(): Disk read failed. [ 62.968340][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.968386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.968489][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.968536][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.968635][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 62.968681][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.968835][ T6182] Dev loop6: unable to read RDB block 0 [ 62.969391][ T6182] loop6: unable to read partition table [ 62.969545][ T6182] loop6: partition table beyond EOD, truncated [ 62.971002][ T6182] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 62.971002][ T6182] .BL_se) failed (rc=-5) [ 62.977042][ T10] usb 7-1: USB disconnect, device number 2 [ 63.166487][ T43] audit: type=1400 audit(1789190253.830:415): avc: denied { unlink } for pid=5732 comm="syz-executor" name="file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.349227][ T6238] nft_compat: unsupported protocol 1 [ 63.501424][ T6252] usb usb8: usbfs: process 6252 (syz.0.86) did not claim interface 0 before use [ 63.627522][ T6255] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002 [ 63.630172][ T6255] xt_MASQUERADE: bad MAP_IPS. [ 63.690819][ T43] audit: type=1400 audit(1789190254.350:416): avc: denied { create } for pid=6257 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.692943][ T43] audit: type=1400 audit(1789190254.350:417): avc: denied { bind } for pid=6257 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.750984][ T6254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.757058][ T6260] process 'syz.2.88' launched './file2' with NULL argv: empty string added [ 63.758635][ T43] audit: type=1400 audit(1789190254.420:418): avc: denied { execute_no_trans } for pid=6257 comm="syz.2.88" path="/23/file2" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.759195][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.85'. [ 63.764321][ T6255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6255 comm=syz.0.87 [ 63.771907][ T6266] ======================================================= [ 63.771907][ T6266] WARNING: The mand mount option has been deprecated and [ 63.771907][ T6266] and is ignored by this kernel. Remove the mand [ 63.771907][ T6266] option from the mount to silence this warning. [ 63.771907][ T6266] ======================================================= [ 63.869045][ T43] audit: type=1400 audit(1789190254.530:419): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.105599][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 64.170219][ T6276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5127 sclass=netlink_tcpdiag_socket pid=6276 comm=syz.0.93 [ 64.173923][ T6276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.93'. [ 64.209077][ T6276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.93'. [ 64.209621][ T6290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5127 sclass=netlink_tcpdiag_socket pid=6290 comm=syz.0.93 [ 64.491850][ T5877] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.526799][ T6302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 64.526824][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.526886][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 64.544489][ T6306] vhci_hcd: connection closed [ 64.545327][ T5545] vhci_hcd vhci_hcd.1: stop threads [ 64.545352][ T5545] vhci_hcd vhci_hcd.1: release socket [ 64.545369][ T5545] vhci_hcd vhci_hcd.1: disconnect device [ 64.559479][ T6308] netlink: ct_mark mask cannot be 0 [ 64.559503][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.692783][ T5877] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 64.693813][ T5877] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 64.693831][ T5877] usb 8-1: config 1 has no interface number 0 [ 64.695745][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.695764][ T5877] usb 8-1: Product: syz [ 64.695775][ T5877] usb 8-1: Manufacturer: syz [ 64.695786][ T5877] usb 8-1: SerialNumber: syz [ 64.731191][ T5877] usb 8-1: 3:1 : does not exist [ 64.731205][ T5877] usb 8-1: 3:0 : does not exist [ 64.803649][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.814152][ T6311] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 64.845574][ T6311] 9p: Unknown Cache mode or invalid value m [ 64.853250][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.952139][ T5904] syz.3.7 (5904) used greatest stack depth: 16776 bytes left [ 65.119811][ T6319] SET target dimension over the limit! [ 65.120500][ T6320] SET target dimension over the limit! [ 65.194936][ T6320] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 65.203327][ T37] IPVS: starting estimator thread 0... [ 65.291872][ T6323] IPVS: using max 26 ests per chain, 62400 per kthread [ 65.577495][ T6330] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 65.577516][ T6330] netlink: 'syz.0.106': attribute type 7 has an invalid length. [ 65.656114][ T6330] U: entered promiscuous mode [ 65.949168][ T6339] jffs2: notice: (6339) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.640288][ T6372] netlink: 108 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.649345][ T6372] netlink: 108 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.649369][ T6372] netlink: 84 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.671020][ T6375] netlink: 108 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.671303][ T6375] netlink: 108 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.671318][ T6375] netlink: 84 bytes leftover after parsing attributes in process `syz.1.115'. [ 66.794847][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.796037][ T5741] Bluetooth: hci4: command 0x1003 tx timeout [ 66.939022][ T6394] syzkaller0: entered promiscuous mode [ 66.939048][ T6394] syzkaller0: entered allmulticast mode [ 66.963005][ T5092] Bluetooth: hci1: ACL packet too small [ 67.028436][ T6401] netlink: 'syz.0.124': attribute type 34 has an invalid length. [ 67.145072][ T6407] Zero length message leads to an empty skb [ 69.139306][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 69.139320][ T43] audit: type=1400 audit(1789190259.800:440): avc: denied { create } for pid=6421 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.146481][ T43] audit: type=1400 audit(1789190259.810:441): avc: denied { write } for pid=6421 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.146521][ T43] audit: type=1400 audit(1789190259.810:442): avc: denied { nlmsg_write } for pid=6421 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.209576][ T6426] 9pnet_fd: p9_fd_create_tcp (6426): problem connecting socket to 127.0.0.1 [ 69.209928][ T6426] __nla_validate_parse: 3 callbacks suppressed [ 69.209937][ T6426] netlink: 778 bytes leftover after parsing attributes in process `syz.2.132'. [ 69.211984][ T6429] netlink: 778 bytes leftover after parsing attributes in process `syz.2.132'. [ 69.226837][ T43] audit: type=1400 audit(1789190259.890:443): avc: denied { read } for pid=6421 comm="syz.0.130" path="socket:[13318]" dev="sockfs" ino=13318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.229534][ T6432] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.232504][ T43] audit: type=1804 audit(1789190259.890:444): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.133" name="/newroot/45/file0" dev="tmpfs" ino=259 res=1 errno=0 [ 69.236629][ T6431] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 69.236648][ T6431] ref_ctr increment failed for inode: 0x103 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025795940 [ 69.253585][ T6431] ipvlan2: entered allmulticast mode [ 69.253609][ T6431] virt_wifi0: entered allmulticast mode [ 69.255099][ T6431] batman_adv: batadv0: Adding interface: ipvlan2 [ 69.255114][ T6431] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.255143][ T6431] batman_adv: batadv0: Interface activated: ipvlan2 [ 69.311670][ T43] audit: type=1400 audit(1789190259.970:445): avc: denied { read } for pid=6435 comm="syz.2.134" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.312214][ T43] audit: type=1400 audit(1789190259.980:446): avc: denied { open } for pid=6435 comm="syz.2.134" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.313186][ T43] audit: type=1400 audit(1789190259.980:447): avc: denied { ioctl } for pid=6435 comm="syz.2.134" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.315135][ T43] audit: type=1400 audit(1789190259.980:448): avc: denied { set_context_mgr } for pid=6435 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.316623][ T6436] binder: 6435:6436 ioctl c0306201 2000000003c0 returned -14 [ 69.359043][ T6427] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 69.359057][ T6427] ref_ctr decrement failed for inode: 0x103 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025795940 [ 69.359079][ T6427] uprobe: syz.1.133:6427 failed to unregister, leaking uprobe [ 69.419843][ T43] audit: type=1400 audit(1789190260.080:449): avc: denied { create } for pid=6442 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.442792][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 69.444165][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 69.451654][ T6443] syzkaller1: entered promiscuous mode [ 69.451674][ T6443] syzkaller1: entered allmulticast mode [ 69.487978][ T6454] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 69.487998][ T6454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.489693][ T6454] Trying to write to read-only block-device nullb0 [ 69.495435][ T6455] netlink: 'syz.2.137': attribute type 5 has an invalid length. [ 69.608575][ T6464] /dev/sr0: Can't open blockdev [ 69.677193][ T6471] XFS (nullb0): Invalid superblock magic number [ 69.703462][ T6480] : renamed from lo (while UP) [ 69.725004][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 69.725025][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 69.725046][ T6483] netlink: 'syz.1.146': attribute type 5 has an invalid length. [ 69.747449][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 69.747463][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 69.747477][ T6483] netlink: 'syz.1.146': attribute type 5 has an invalid length. [ 69.762340][ T5545] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.762366][ T5545] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.762384][ T5545] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.762402][ T5545] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.901222][ T6499] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 69.901338][ T6499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.950277][ T6506] No buffer was provided with the request [ 70.101627][ T2344] usb 8-1: USB disconnect, device number 2 [ 70.194262][ T6522] bridge0: port 3(macsec1) entered blocking state [ 70.194339][ T6522] bridge0: port 3(macsec1) entered disabled state [ 70.194409][ T6522] macsec1: entered allmulticast mode [ 70.197233][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197233][ T6516] Use struct sctp_sack_info instead [ 70.197275][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197275][ T6516] Use struct sctp_sack_info instead [ 70.197304][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197304][ T6516] Use struct sctp_sack_info instead [ 70.197339][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197339][ T6516] Use struct sctp_sack_info instead [ 70.197368][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197368][ T6516] Use struct sctp_sack_info instead [ 70.197397][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197397][ T6516] Use struct sctp_sack_info instead [ 70.197426][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197426][ T6516] Use struct sctp_sack_info instead [ 70.197455][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197455][ T6516] Use struct sctp_sack_info instead [ 70.197484][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197484][ T6516] Use struct sctp_sack_info instead [ 70.197512][ T6516] sctp: [Deprecated]: syz.1.155 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.197512][ T6516] Use struct sctp_sack_info instead [ 70.204623][ T6522] macsec1: entered promiscuous mode [ 70.233071][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 70.475325][ T6532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6532 comm=syz.2.160 [ 70.549586][ T6535] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 70.762975][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 70.763308][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 70.779842][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 70.780009][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 70.986570][ T6559] IPv4: Oversized IP packet from 127.202.26.0 [ 70.996701][ T6567] IPv4: Oversized IP packet from 127.202.26.0 [ 71.035045][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 71.035226][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 71.284141][ T6585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.444040][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444102][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449704][ T77] cfg80211: failed to load regulatory.db [ 71.477186][ T5545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.477224][ T5545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.552129][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 71.563041][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 71.569955][ T6543] ceph: No mds server is up or the cluster is laggy [ 71.619451][ T5545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.619483][ T5545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.723521][ T1540] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 71.758600][ T5545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.758623][ T5545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.766566][ T1540] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 71.773258][ T1540] wiimote 0005:057E:0306.0003: New device registered [ 71.803657][ T6601] wiimote 0005:057E:0306.0003: Device removed [ 71.828454][ T6604] fido_id[6604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.839561][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.841188][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.841606][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.842413][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.842664][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.881229][ T5545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.881259][ T5545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.016140][ T6618] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 72.016173][ T6618] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 72.019149][ T6618] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 72.090836][ T5545] bridge_slave_1: left allmulticast mode [ 72.090877][ T5545] bridge_slave_1: left promiscuous mode [ 72.091670][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.103631][ T5545] bridge_slave_0: left allmulticast mode [ 72.103654][ T5545] bridge_slave_0: left promiscuous mode [ 72.103828][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.268821][ T5545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.277413][ T5545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.281630][ T5545] bond0 (unregistering): Released all slaves [ 72.285198][ T5545] bond1 (unregistering): Released all slaves [ 72.416634][ T5545] U: left promiscuous mode [ 72.534210][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.622793][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.623283][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.623388][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.623524][ T6606] bridge_slave_0: entered allmulticast mode [ 72.626145][ T6606] bridge_slave_0: entered promiscuous mode [ 72.658861][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.658911][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.658999][ T6606] bridge_slave_1: entered allmulticast mode [ 72.659854][ T6606] bridge_slave_1: entered promiscuous mode [ 72.680334][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.682918][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.701226][ T6606] team0: Port device team_slave_0 added [ 72.703428][ T6606] team0: Port device team_slave_1 added [ 72.723395][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.723407][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.723423][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.724841][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.724855][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.724878][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.779108][ T5545] hsr_slave_0: left promiscuous mode [ 72.779504][ T5545] hsr_slave_1: left promiscuous mode [ 72.779891][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.779912][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.780697][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.780707][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.784794][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 72.795027][ T5545] veth1_macvtap: left promiscuous mode [ 72.795074][ T5545] veth0_macvtap: left promiscuous mode [ 72.795182][ T5545] veth1_vlan: left promiscuous mode [ 72.795248][ T5545] veth0_vlan: left promiscuous mode [ 72.801833][ T10] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 72.816695][ T5821] usb 8-1: unable to get BOS descriptor or descriptor too short [ 72.816722][ T5821] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 72.819958][ T5821] usb 8-1: string descriptor 0 read error: -22 [ 72.820049][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.842964][ T5821] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 72.842987][ T5821] dw2102: su3000_power_ctrl: 1, initialized 0 [ 72.843185][ T5821] dvb-usb: bulk message failed: -22 (2/0) [ 72.880992][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input7 [ 72.917137][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.917876][ T5821] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 72.917903][ T5821] usb 8-1: media controller created [ 72.919447][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919459][ T5821] dw2102: i2c transfer failed. [ 72.919478][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919485][ T5821] dw2102: i2c transfer failed. [ 72.919491][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919498][ T5821] dw2102: i2c transfer failed. [ 72.919504][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919511][ T5821] dw2102: i2c transfer failed. [ 72.919517][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919524][ T5821] dw2102: i2c transfer failed. [ 72.919530][ T5821] dvb-usb: bulk message failed: -22 (6/0) [ 72.919537][ T5821] dw2102: i2c transfer failed. [ 72.919541][ T5821] dvb-usb: MAC address: 02:02:02:02:02:02 [ 72.934105][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input8 [ 72.964517][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input6 [ 72.967787][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.991871][ T6652] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.995287][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 72.995303][ T5821] dw2102: command 0x0e transfer failed. [ 72.995309][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 72.995319][ T5821] dw2102: command 0x0e transfer failed. [ 73.199800][ T5545] team0 (unregistering): Port device team_slave_1 removed [ 73.245897][ T5545] team0 (unregistering): Port device team_slave_0 removed [ 73.314023][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 73.314044][ T5821] dw2102: command 0x0e transfer failed. [ 73.314052][ T5821] dvb-usb: bulk message failed: -22 (3/0) [ 73.314064][ T5821] dw2102: command 0x0e transfer failed. [ 73.314093][ T5821] dvb-usb: bulk message failed: -22 (1/0) [ 73.314104][ T5821] dw2102: command 0x51 transfer failed. [ 73.315434][ T6633] dvb-usb: bulk message failed: -22 (18/0) [ 73.315451][ T6633] dw2102: i2c transfer failed. [ 73.353434][ T5821] DVB: Unable to find symbol ds3000_attach() [ 73.353449][ T5821] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 73.410854][ T6606] hsr_slave_0: entered promiscuous mode [ 73.411644][ T6606] hsr_slave_1: entered promiscuous mode [ 73.416221][ T6606] debugfs: 'hsr0' already exists in 'hsr' [ 73.416241][ T6606] Cannot create hsr debugfs directory [ 73.430501][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.437040][ T5821] rc_core: IR keymap rc-su3000 not found [ 73.437056][ T5821] Registered IR keymap rc-empty [ 73.439989][ T5821] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 73.464576][ T5821] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input9 [ 73.485623][ T5821] dvb-usb: schedule remote query interval to 150 msecs. [ 73.485643][ T5821] dw2102: su3000_power_ctrl: 0, initialized 1 [ 73.485653][ T5821] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 73.494500][ T6654] cgroup: fork rejected by pids controller in /syz3 [ 73.516204][ T6656] vlan1: entered promiscuous mode [ 73.516413][ T6656] vlan1: entered allmulticast mode [ 73.516426][ T6656] veth0_vlan: entered allmulticast mode [ 73.610854][ T6696] usb usb8: usbfs: process 6696 (syz.2.190) did not claim interface 0 before use [ 73.653814][ T5821] dvb-usb: bulk message failed: -22 (1/0) [ 73.653833][ T5821] dw2102: i2c transfer failed. [ 73.680109][ T6701] usb usb8: usbfs: process 6701 (syz.2.191) did not claim interface 0 before use [ 73.805450][ T6708] FAULT_INJECTION: forcing a failure. [ 73.805450][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 73.805478][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 73.805497][ T6708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.805509][ T6708] Call Trace: [ 73.805515][ T6708] [ 73.805522][ T6708] dump_stack_lvl+0x100/0x190 [ 73.805570][ T6708] should_fail_ex.cold+0x5/0xa [ 73.805594][ T6708] should_failslab+0xc2/0x120 [ 73.805621][ T6708] __kmalloc_noprof+0xfc/0x840 [ 73.805640][ T6708] ? tomoyo_encode2+0xfb/0x3c0 [ 73.805671][ T6708] tomoyo_encode2+0xfb/0x3c0 [ 73.805696][ T6708] tomoyo_encode+0x29/0x50 [ 73.805715][ T6708] tomoyo_realpath_from_path+0x18c/0x690 [ 73.805741][ T6708] tomoyo_path_number_perm+0x23c/0x580 [ 73.805770][ T6708] ? tomoyo_path_number_perm+0x22e/0x580 [ 73.805800][ T6708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.805838][ T6708] ? __lock_acquire+0x5c0/0x1f40 [ 73.805868][ T6708] ? __fget_files+0x34/0x3d0 [ 73.805891][ T6708] ? find_held_lock+0x2b/0x80 [ 73.805915][ T6708] ? hook_file_ioctl_common+0x140/0x440 [ 73.805945][ T6708] ? __fget_files+0x21f/0x3d0 [ 73.805969][ T6708] security_file_ioctl+0xd3/0x230 [ 73.805990][ T6708] __x64_sys_ioctl+0xb7/0x210 [ 73.806011][ T6708] do_syscall_64+0x123/0x790 [ 73.806044][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.806062][ T6708] RIP: 0033:0x7f41f1d9e159 [ 73.806101][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.806119][ T6708] RSP: 002b:00007f41f2d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.806137][ T6708] RAX: ffffffffffffffda RBX: 00007f41f2025fa0 RCX: 00007f41f1d9e159 [ 73.806148][ T6708] RDX: 00002000000002c0 RSI: 000000008008551d RDI: 0000000000000003 [ 73.806161][ T6708] RBP: 00007f41f2d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.806171][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.806182][ T6708] R13: 00007f41f2026038 R14: 00007f41f2025fa0 R15: 00007fff46211608 [ 73.806208][ T6708] [ 73.806226][ T6708] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.806259][ T6708] usb usb8: usbfs: process 6708 (syz.2.192) did not claim interface 0 before use [ 73.818126][ T5821] dvb-usb: bulk message failed: -22 (1/0) [ 73.818145][ T5821] dw2102: i2c transfer failed. [ 73.912460][ T5092] Bluetooth: hci1: command tx timeout [ 73.928089][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 73.928163][ T5092] Bluetooth: hci3: Injecting HCI hardware error event [ 73.928877][ T5092] Bluetooth: hci3: hardware error 0x00 [ 73.935985][ T2344] usb 8-1: USB disconnect, device number 3 [ 73.960127][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.043708][ T6716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.043753][ T6716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.065268][ T2344] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 74.071270][ T6606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.078589][ T6606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.078988][ T6606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.080392][ T6606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.081042][ T6606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.082941][ T6606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.083402][ T6606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.088770][ T6606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.145248][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.149999][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 74.150012][ T43] audit: type=1400 audit(1789190264.810:519): avc: denied { write } for pid=6724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.161752][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.167589][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.167668][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.175990][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.176091][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.209073][ T43] audit: type=1400 audit(1789190264.870:520): avc: denied { write } for pid=6729 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.253351][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.396682][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 74.514219][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.629244][ T6763] usb usb8: usbfs: process 6763 (syz.2.198) did not claim interface 0 before use [ 74.718584][ T6606] veth0_vlan: entered promiscuous mode [ 74.731476][ T6606] veth1_vlan: entered promiscuous mode [ 74.749150][ T6606] veth0_macvtap: entered promiscuous mode [ 74.749674][ T43] audit: type=1400 audit(1789190265.410:521): avc: denied { shutdown } for pid=6765 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.752704][ T6606] veth1_macvtap: entered promiscuous mode [ 74.761471][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.766531][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.812320][ T43] audit: type=1400 audit(1789190265.470:522): avc: denied { ioctl } for pid=6765 comm="syz.2.199" path="socket:[15388]" dev="sockfs" ino=15388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.813249][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813287][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813320][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813347][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.858125][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.858147][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.885371][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.885386][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.906459][ T43] audit: type=1400 audit(1789190265.570:523): avc: denied { mounton } for pid=6606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.989554][ T43] audit: type=1400 audit(1789190265.650:524): avc: denied { mount } for pid=6773 comm="syz.4.184" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 75.000439][ T43] audit: type=1400 audit(1789190265.660:525): avc: denied { bind } for pid=6773 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.013184][ T43] audit: type=1400 audit(1789190265.680:526): avc: denied { write } for pid=6773 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.199381][ T6790] netlink: 220 bytes leftover after parsing attributes in process `syz.3.205'. [ 75.220699][ T43] audit: type=1400 audit(1789190265.880:527): avc: denied { listen } for pid=6785 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.250713][ T6794] jffs2: notice: (6794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 75.254797][ T43] audit: type=1400 audit(1789190265.920:528): avc: denied { write } for pid=6793 comm="syz.3.206" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.390493][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 75.427253][ T6807] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 75.432606][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 75.432638][ T6807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 75.437607][ T6807] erspan0: entered promiscuous mode [ 75.438609][ T6807] gretap0: entered promiscuous mode [ 75.439175][ T6807] debugfs: 'hsr1' already exists in 'hsr' [ 75.439194][ T6807] Cannot create hsr debugfs directory [ 75.505648][ T6809] netlink: 'syz.4.211': attribute type 11 has an invalid length. [ 75.620503][ T6820] FAULT_INJECTION: forcing a failure. [ 75.620503][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 75.620525][ T6820] CPU: 2 UID: 0 PID: 6820 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT(full) [ 75.620538][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.620545][ T6820] Call Trace: [ 75.620549][ T6820] [ 75.620555][ T6820] dump_stack_lvl+0x100/0x190 [ 75.620595][ T6820] should_fail_ex.cold+0x5/0xa [ 75.620621][ T6820] should_failslab+0xc2/0x120 [ 75.620657][ T6820] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 75.620682][ T6820] ? __d_alloc+0x35/0xa50 [ 75.620711][ T6820] __d_alloc+0x35/0xa50 [ 75.620734][ T6820] ? do_raw_spin_lock+0x128/0x260 [ 75.620761][ T6820] d_alloc+0x4a/0x1e0 [ 75.620787][ T6820] d_alloc_name+0x83/0xb0 [ 75.620812][ T6820] ? __pfx_d_alloc_name+0x10/0x10 [ 75.620834][ T6820] ? fast_dput+0x168/0x6f0 [ 75.620861][ T6820] ? dput.part.0+0x4f/0x240 [ 75.620879][ T6820] proc_setup_thread_self+0x3f/0x1e0 [ 75.620906][ T6820] proc_fill_super+0x5d4/0x870 [ 75.620926][ T6820] ? __pfx_proc_fill_super+0x10/0x10 [ 75.620942][ T6820] get_tree_nodev+0xdd/0x190 [ 75.620954][ T6820] vfs_get_tree+0x92/0x320 [ 75.620970][ T6820] path_mount+0x7d0/0x24c0 [ 75.620988][ T6820] ? __pfx_path_mount+0x10/0x10 [ 75.621003][ T6820] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.621029][ T6820] ? putname+0xb1/0x110 [ 75.621043][ T6820] ? kmem_cache_free+0x127/0x6c0 [ 75.621072][ T6820] ? __x64_sys_mount+0x293/0x310 [ 75.621095][ T6820] __x64_sys_mount+0x293/0x310 [ 75.621121][ T6820] ? __pfx___x64_sys_mount+0x10/0x10 [ 75.621158][ T6820] do_syscall_64+0x123/0x790 [ 75.621185][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.621205][ T6820] RIP: 0033:0x7f90e339e159 [ 75.621223][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.621241][ T6820] RSP: 002b:00007f90e15f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.621260][ T6820] RAX: ffffffffffffffda RBX: 00007f90e3625fa0 RCX: 00007f90e339e159 [ 75.621273][ T6820] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 75.621286][ T6820] RBP: 00007f90e343503b R08: 0000000000000000 R09: 0000000000000000 [ 75.621298][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.621310][ T6820] R13: 00007f90e3626038 R14: 00007f90e3625fa0 R15: 00007fff1fa80918 [ 75.621336][ T6820] [ 75.621345][ T6820] proc_fill_super: can't allocate /proc/thread-self [ 76.001844][ T5741] Bluetooth: hci1: command tx timeout [ 76.071928][ T5092] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 76.212614][ T6846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.224'. [ 76.463668][ T6860] ipt_ah: unknown flags FF [ 76.463949][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 76.549507][ T6865] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 76.552191][ T6865] SELinux: failed to load policy [ 76.771865][ T5877] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.882380][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.885791][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.887365][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.888712][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.889235][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.921803][ T5877] usb 9-1: device descriptor read/64, error -71 [ 77.161832][ T5877] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 77.301907][ T5877] usb 9-1: device descriptor read/64, error -71 [ 77.304546][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.304656][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.304916][ T6872] bridge_slave_0: entered allmulticast mode [ 77.305733][ T6872] bridge_slave_0: entered promiscuous mode [ 77.307165][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.307233][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.307878][ T6872] bridge_slave_1: entered allmulticast mode [ 77.309197][ T6872] bridge_slave_1: entered promiscuous mode [ 77.330513][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.334164][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.355409][ T6872] team0: Port device team_slave_0 added [ 77.356787][ T6872] team0: Port device team_slave_1 added [ 77.370625][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.370636][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.370649][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.371871][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.371880][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.371893][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.392911][ T6872] hsr_slave_0: entered promiscuous mode [ 77.393523][ T6872] hsr_slave_1: entered promiscuous mode [ 77.393996][ T6872] debugfs: 'hsr0' already exists in 'hsr' [ 77.394011][ T6872] Cannot create hsr debugfs directory [ 77.413503][ T5877] usb usb9-port1: attempt power cycle [ 77.521149][ T6872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.524858][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.525539][ T6872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.527670][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.528250][ T6872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.530591][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.531237][ T6872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.533427][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.555488][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.555560][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.555692][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.555735][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.594141][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.594444][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.600186][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.610947][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.615762][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.615808][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.618741][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.618788][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.751836][ T5877] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 77.782593][ T5877] usb 9-1: device descriptor read/8, error -71 [ 77.890908][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.021823][ T5877] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 78.043780][ T5877] usb 9-1: device descriptor read/8, error -71 [ 78.056552][ T6872] veth0_vlan: entered promiscuous mode [ 78.059625][ T6872] veth1_vlan: entered promiscuous mode [ 78.071803][ T5741] Bluetooth: hci1: command tx timeout [ 78.078608][ T6872] veth0_macvtap: entered promiscuous mode [ 78.080729][ T6872] veth1_macvtap: entered promiscuous mode [ 78.092243][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.097308][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.113027][ T5545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.113064][ T5545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.113085][ T5545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.113116][ T5545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.151576][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.151596][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.164948][ T5877] usb usb9-port1: unable to enumerate USB device [ 78.177966][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.177983][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.286729][ T6916] smpboot: CPU 1 is now offline [ 78.534382][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 78.557047][ T6924] netlink: 'syz.5.236': attribute type 4 has an invalid length. [ 78.567254][ T6924] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 78.567271][ T6924] PKCS7: Only support pkcs7_signedData type [ 78.951612][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 78.951635][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.243'. [ 78.964606][ T5741] Bluetooth: hci3: command tx timeout [ 79.152717][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.160778][ T6988] FAULT_INJECTION: forcing a failure. [ 79.160778][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 79.160811][ T6988] CPU: 3 UID: 0 PID: 6988 Comm: syz.5.248 Not tainted syzkaller #0 PREEMPT(full) [ 79.160833][ T6988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.160845][ T6988] Call Trace: [ 79.160852][ T6988] [ 79.160859][ T6988] dump_stack_lvl+0x100/0x190 [ 79.160909][ T6988] should_fail_ex.cold+0x5/0xa [ 79.160938][ T6988] should_failslab+0xc2/0x120 [ 79.160971][ T6988] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.160999][ T6988] ? copy_cgroup_ns+0x405/0x970 [ 79.161022][ T6988] ? copy_time_ns+0xf2/0x790 [ 79.161049][ T6988] copy_time_ns+0xf2/0x790 [ 79.161072][ T6988] create_new_namespaces+0x48a/0xac0 [ 79.161101][ T6988] unshare_nsproxy_namespaces+0xf2/0x220 [ 79.161126][ T6988] ksys_unshare+0x4a2/0xa70 [ 79.161150][ T6988] ? __pfx_ksys_unshare+0x10/0x10 [ 79.161189][ T6988] __x64_sys_unshare+0x31/0x40 [ 79.161212][ T6988] do_syscall_64+0x123/0x790 [ 79.161247][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.161267][ T6988] RIP: 0033:0x7fa0cad9e159 [ 79.161284][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.161303][ T6988] RSP: 002b:00007fa0cbd15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 79.161324][ T6988] RAX: ffffffffffffffda RBX: 00007fa0cb026090 RCX: 00007fa0cad9e159 [ 79.161336][ T6988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 79.161348][ T6988] RBP: 00007fa0cae3503b R08: 0000000000000000 R09: 0000000000000000 [ 79.161361][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.161373][ T6988] R13: 00007fa0cb026128 R14: 00007fa0cb026090 R15: 00007fff5af367f8 [ 79.161401][ T6988] [ 79.166236][ T6988] Bluetooth: MGMT ver 1.23 [ 79.166491][ T6988] Bluetooth: MGMT ver 1.23 [ 79.176216][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.183480][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.203367][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.215208][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.241425][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.257681][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.273941][ T6989] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 79.324846][ T6991] openvswitch: netlink: Message has 24 unknown bytes. [ 79.421962][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 79.421975][ T43] audit: type=1400 audit(1789190270.080:557): avc: denied { accept } for pid=6996 comm="syz.5.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.460815][ T43] audit: type=1400 audit(1789190270.120:558): avc: denied { write } for pid=6999 comm="syz.5.253" name="/" dev="9p" ino=82051127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.475353][ T43] audit: type=1400 audit(1789190270.140:559): avc: denied { read } for pid=6999 comm="syz.5.253" name="file1" dev="9p" ino=82051155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.476865][ T43] audit: type=1400 audit(1789190270.140:560): avc: denied { open } for pid=6999 comm="syz.5.253" path="/14/file0/file1" dev="9p" ino=82051155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.483585][ T43] audit: type=1400 audit(1789190270.140:561): avc: denied { write } for pid=6999 comm="syz.5.253" name="/" dev="9p" ino=82051127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.484354][ T43] audit: type=1400 audit(1789190270.150:562): avc: denied { remove_name } for pid=6999 comm="syz.5.253" name="file1" dev="9p" ino=82051155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.484478][ T43] audit: type=1400 audit(1789190270.150:563): avc: denied { unlink } for pid=6999 comm="syz.5.253" name="file1" dev="9p" ino=82051155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.615698][ T43] audit: type=1400 audit(1789190270.280:564): avc: denied { watch } for pid=7008 comm="syz.5.254" path="/15" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.669598][ T43] audit: type=1400 audit(1789190270.330:565): avc: denied { read } for pid=7011 comm="syz.4.258" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.669641][ T43] audit: type=1400 audit(1789190270.330:566): avc: denied { open } for pid=7011 comm="syz.4.258" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 79.670237][ T7012] __nla_validate_parse: 3 callbacks suppressed [ 79.670250][ T7012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 79.719488][ T5877] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 79.731461][ T5877] wiimote 0005:057E:0306.0004: hidraw2: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 79.736142][ T5877] wiimote 0005:057E:0306.0004: New device registered [ 79.951870][ T77] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 80.084001][ T77] usb 9-1: device descriptor read/64, error -71 [ 80.152943][ T5741] Bluetooth: hci1: command tx timeout [ 80.253134][ T7037] nfs4: Unknown parameter '' [ 80.322396][ T77] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 80.388404][ T7045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.440155][ T7047] syzkaller0: entered promiscuous mode [ 80.440169][ T7047] syzkaller0: entered allmulticast mode [ 80.451726][ T77] usb 9-1: device descriptor read/64, error -71 [ 80.561943][ T77] usb usb9-port1: attempt power cycle [ 80.693958][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.706932][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.708117][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.709687][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.709818][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.709878][ T6950] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710251][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710296][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710337][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710374][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710411][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710448][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710486][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710523][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710561][ T7073] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710590][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710629][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710668][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710705][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710742][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710780][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710818][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710855][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710893][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710930][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.710969][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711007][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711044][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711085][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711123][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711160][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711196][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711233][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711280][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711343][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.711404][ T7072] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.713772][ T6951] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.713820][ T6951] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.715563][ T6951] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.715619][ T6951] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.741999][ T851] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.804056][ T5877] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 80.827302][ T5877] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input11 [ 80.842313][ T5877] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input12 [ 80.844800][ T5877] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input10 [ 80.892318][ T851] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 80.893290][ T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.906029][ T77] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 80.937222][ T77] usb 9-1: device descriptor read/8, error -71 [ 81.097071][ T7086] binder: 7085:7086 ioctl c00c6211 0 returned -14 [ 81.111536][ T5092] Bluetooth: hci3: command tx timeout [ 81.118905][ T851] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 81.172063][ T77] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 81.189574][ T7090] FAULT_INJECTION: forcing a failure. [ 81.189574][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.189593][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.5.276 Not tainted syzkaller #0 PREEMPT(full) [ 81.189606][ T7090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.189613][ T7090] Call Trace: [ 81.189623][ T7090] [ 81.189653][ T7090] dump_stack_lvl+0x100/0x190 [ 81.189681][ T7090] should_fail_ex.cold+0x5/0xa [ 81.189697][ T7090] _copy_from_user+0x2e/0xd0 [ 81.189712][ T7090] copy_msghdr_from_user+0x9f/0x4c0 [ 81.189735][ T7090] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 81.189763][ T7090] ? lock_acquire+0x1d1/0x380 [ 81.189783][ T7090] ? get_pid_task+0x2a/0x250 [ 81.189806][ T7090] ___sys_sendmsg+0x106/0x1e0 [ 81.189834][ T7090] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.189859][ T7090] ? get_pid_task+0x106/0x250 [ 81.189889][ T7090] ? find_held_lock+0x2b/0x80 [ 81.189927][ T7090] __sys_sendmsg+0x160/0x210 [ 81.189942][ T7090] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.189962][ T7090] do_syscall_64+0x123/0x790 [ 81.189983][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.189995][ T7090] RIP: 0033:0x7fa0cad9e159 [ 81.190004][ T7090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.190015][ T7090] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.190049][ T7090] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 81.190057][ T7090] RDX: 0000000004040800 RSI: 0000200000001000 RDI: 0000000000000004 [ 81.190063][ T7090] RBP: 00007fa0cbd36090 R08: 0000000000000000 R09: 0000000000000000 [ 81.190070][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.190078][ T7090] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 81.190100][ T7090] [ 81.194688][ T77] usb 9-1: device descriptor read/8, error -71 [ 81.277640][ T7094] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 81.302669][ T77] usb usb9-port1: unable to enumerate USB device [ 82.463477][ T7111] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 82.545424][ T7115] FAULT_INJECTION: forcing a failure. [ 82.545424][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 82.545454][ T7115] CPU: 3 UID: 0 PID: 7115 Comm: syz.5.285 Not tainted syzkaller #0 PREEMPT(full) [ 82.545475][ T7115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.545486][ T7115] Call Trace: [ 82.545493][ T7115] [ 82.545500][ T7115] dump_stack_lvl+0x100/0x190 [ 82.545532][ T7115] should_fail_ex.cold+0x5/0xa [ 82.545558][ T7115] should_failslab+0xc2/0x120 [ 82.545581][ T7115] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 82.545602][ T7115] ? __alloc_skb+0x5b7/0x710 [ 82.545622][ T7115] ? __alloc_skb+0x140/0x710 [ 82.545670][ T7115] __alloc_skb+0x140/0x710 [ 82.545689][ T7115] ? __alloc_skb+0x5b7/0x710 [ 82.545708][ T7115] ? __pfx___alloc_skb+0x10/0x10 [ 82.545735][ T7115] netlink_alloc_large_skb+0x69/0x150 [ 82.545757][ T7115] netlink_sendmsg+0x680/0xda0 [ 82.545781][ T7115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.545803][ T7115] ? selinux_socket_sendmsg+0x198/0x2f0 [ 82.545837][ T7115] ____sys_sendmsg+0xa4d/0xbe0 [ 82.545863][ T7115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.545884][ T7115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.545915][ T7115] ? lock_acquire+0x1d1/0x380 [ 82.545935][ T7115] ? get_pid_task+0x2a/0x250 [ 82.545962][ T7115] ___sys_sendmsg+0x190/0x1e0 [ 82.545990][ T7115] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.546016][ T7115] ? get_pid_task+0x106/0x250 [ 82.546074][ T7115] ? find_held_lock+0x2b/0x80 [ 82.546114][ T7115] __sys_sendmsg+0x160/0x210 [ 82.546136][ T7115] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.546171][ T7115] do_syscall_64+0x123/0x790 [ 82.546197][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.546217][ T7115] RIP: 0033:0x7fa0cad9e159 [ 82.546233][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.546250][ T7115] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.546269][ T7115] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 82.546282][ T7115] RDX: 0000000004040800 RSI: 0000200000001000 RDI: 0000000000000004 [ 82.546293][ T7115] RBP: 00007fa0cbd36090 R08: 0000000000000000 R09: 0000000000000000 [ 82.546304][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.546315][ T7115] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 82.546340][ T7115] [ 82.613577][ T7117] CUSE: unknown device info "" [ 82.613591][ T7117] CUSE: unknown device info "" [ 82.613599][ T7117] CUSE: unknown device info "" [ 82.613607][ T7117] CUSE: unknown device info "" [ 82.613613][ T7117] CUSE: zero length info key specified [ 82.710750][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.723586][ T7016] wiimote 0005:057E:0306.0004: Device removed [ 82.825563][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 83.203417][ T5741] Bluetooth: hci3: command tx timeout [ 83.467093][ T7160] binder: 7159:7160 ioctl c0306201 200000000640 returned -14 [ 83.823936][ T7172] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 83.866794][ T7172] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 83.867642][ T7173] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.868911][ T7173] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.877851][ T7172] pci 0000:00:00.0: Adding to iommu group 0 [ 83.954131][ T77] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.971783][ T7175] warning: `syz.5.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.972460][ T7175] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.301'. [ 83.973180][ T7175] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.301'. [ 84.052394][ T7180] Config c/1 of g1 needs at least one function. [ 84.052584][ T7180] udc dummy_udc.0: failed to start g1: -22 [ 84.052597][ T7180] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 84.055921][ T7180] UDC core: g1: couldn't find an available UDC or it's busy [ 84.121110][ T7187] FAULT_INJECTION: forcing a failure. [ 84.121110][ T7187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.121140][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.5.306 Not tainted syzkaller #0 PREEMPT(full) [ 84.121160][ T7187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.121169][ T7187] Call Trace: [ 84.121174][ T7187] [ 84.121180][ T7187] dump_stack_lvl+0x100/0x190 [ 84.121219][ T7187] should_fail_ex.cold+0x5/0xa [ 84.121240][ T7187] _copy_from_iter+0x1f4/0x1690 [ 84.121262][ T7187] ? __asan_memset+0x23/0x50 [ 84.121277][ T7187] ? __pfx__copy_from_iter+0x10/0x10 [ 84.121292][ T7187] ? __pfx___alloc_skb+0x10/0x10 [ 84.121320][ T7187] netlink_sendmsg+0x808/0xda0 [ 84.121340][ T7187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.121357][ T7187] ? selinux_socket_sendmsg+0x198/0x2f0 [ 84.121384][ T7187] ____sys_sendmsg+0xa4d/0xbe0 [ 84.121404][ T7187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.121421][ T7187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.121446][ T7187] ? lock_acquire+0x1d1/0x380 [ 84.121461][ T7187] ? get_pid_task+0x2a/0x250 [ 84.121484][ T7187] ___sys_sendmsg+0x190/0x1e0 [ 84.121497][ T7186] xt_ipcomp: unknown flags 1D [ 84.121511][ T7187] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.121538][ T7187] ? get_pid_task+0x106/0x250 [ 84.121568][ T7187] ? find_held_lock+0x2b/0x80 [ 84.121605][ T7187] __sys_sendmsg+0x160/0x210 [ 84.121643][ T7187] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.121678][ T7187] do_syscall_64+0x123/0x790 [ 84.121709][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.121727][ T7187] RIP: 0033:0x7fa0cad9e159 [ 84.121742][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.121759][ T7187] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.121777][ T7187] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 84.121789][ T7187] RDX: 0000000004040800 RSI: 0000200000001000 RDI: 0000000000000004 [ 84.121800][ T7187] RBP: 00007fa0cbd36090 R08: 0000000000000000 R09: 0000000000000000 [ 84.121811][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.121821][ T7187] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 84.121846][ T7187] [ 84.596736][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 84.596749][ T43] audit: type=1400 audit(1789190275.258:594): avc: denied { write } for pid=7188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.665290][ T43] audit: type=1400 audit(1789190275.328:595): avc: denied { write } for pid=7191 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.004319][ T43] audit: type=1400 audit(1789190275.668:596): avc: denied { write } for pid=7199 comm="syz.1.309" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 85.004394][ T43] audit: type=1400 audit(1789190275.668:597): avc: denied { open } for pid=7199 comm="syz.1.309" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 85.069791][ T43] audit: type=1400 audit(1789190275.738:598): avc: denied { write } for pid=7202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.122836][ T43] audit: type=1400 audit(1789190275.788:599): avc: denied { write } for pid=7209 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.191726][ T43] audit: type=1400 audit(1789190275.848:600): avc: denied { write } for pid=7213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.246405][ T43] audit: type=1400 audit(1789190275.908:601): avc: denied { write } for pid=7219 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.295365][ T43] audit: type=1400 audit(1789190275.958:602): avc: denied { ioctl } for pid=7199 comm="syz.1.309" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 85.340454][ T7228] FAULT_INJECTION: forcing a failure. [ 85.340454][ T7228] name failslab, interval 1, probability 0, space 0, times 0 [ 85.340475][ T7228] CPU: 3 UID: 0 PID: 7228 Comm: syz.5.315 Not tainted syzkaller #0 PREEMPT(full) [ 85.340488][ T7228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.340495][ T7228] Call Trace: [ 85.340499][ T7228] [ 85.340503][ T7228] dump_stack_lvl+0x100/0x190 [ 85.340549][ T7228] should_fail_ex.cold+0x5/0xa [ 85.340566][ T7228] should_failslab+0xc2/0x120 [ 85.340585][ T7228] __kmalloc_noprof+0xfc/0x840 [ 85.340596][ T7228] ? __pfx___mutex_lock+0x10/0x10 [ 85.340615][ T7228] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 85.340638][ T7228] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 85.340655][ T7228] genl_start+0x18f/0x970 [ 85.340670][ T7228] __netlink_dump_start+0x60e/0x990 [ 85.340683][ T7228] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 85.340698][ T7228] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 85.340715][ T7228] ? rcu_is_watching+0x13/0xc0 [ 85.340730][ T7228] ? __pfx_genl_start+0x10/0x10 [ 85.340742][ T7228] ? __pfx_genl_dumpit+0x10/0x10 [ 85.340754][ T7228] ? __pfx_genl_done+0x10/0x10 [ 85.340767][ T7228] ? bpf_lsm_capable+0x9/0x10 [ 85.340783][ T7228] ? security_capable+0x80/0x260 [ 85.340802][ T7228] genl_rcv_msg+0x471/0x800 [ 85.340817][ T7228] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.340830][ T7228] ? __lock_acquire+0x5c0/0x1f40 [ 85.340842][ T7228] ? __pfx_nl802154_dump_llsec_key+0x10/0x10 [ 85.340857][ T7228] ? __lock_acquire+0x5c0/0x1f40 [ 85.340872][ T7228] netlink_rcv_skb+0x159/0x420 [ 85.340885][ T7228] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.340899][ T7228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.340917][ T7228] ? netlink_deliver_tap+0x1ae/0xcc0 [ 85.340937][ T7228] genl_rcv+0x28/0x40 [ 85.340948][ T7228] netlink_unicast+0x585/0x850 [ 85.340961][ T7228] ? __pfx_netlink_unicast+0x10/0x10 [ 85.340977][ T7228] netlink_sendmsg+0x8b0/0xda0 [ 85.340991][ T7228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.341004][ T7228] ? selinux_socket_sendmsg+0x198/0x2f0 [ 85.341025][ T7228] ____sys_sendmsg+0xa4d/0xbe0 [ 85.341041][ T7228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.341054][ T7228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.341072][ T7228] ? lock_acquire+0x1d1/0x380 [ 85.341084][ T7228] ? get_pid_task+0x2a/0x250 [ 85.341101][ T7228] ___sys_sendmsg+0x190/0x1e0 [ 85.341118][ T7228] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.341138][ T7228] ? get_pid_task+0x106/0x250 [ 85.341161][ T7228] ? find_held_lock+0x2b/0x80 [ 85.341197][ T7228] __sys_sendmsg+0x160/0x210 [ 85.341215][ T7228] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.341244][ T7228] do_syscall_64+0x123/0x790 [ 85.341270][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.341286][ T7228] RIP: 0033:0x7fa0cad9e159 [ 85.341299][ T7228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.341316][ T7228] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.341335][ T7228] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 85.341346][ T7228] RDX: 0000000004040800 RSI: 0000200000001000 RDI: 0000000000000004 [ 85.341354][ T7228] RBP: 00007fa0cbd36090 R08: 0000000000000000 R09: 0000000000000000 [ 85.341361][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.341368][ T7228] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 85.341382][ T7228] [ 85.437327][ T7231] (syz.5.316,7231,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.437346][ T7231] (syz.5.316,7231,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 85.443642][ T43] audit: type=1400 audit(1789190276.108:603): avc: denied { mount } for pid=7229 comm="syz.5.316" name="/" dev="hugetlbfs" ino=16072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 85.448564][ T7231] capability: warning: `syz.5.316' uses 32-bit capabilities (legacy support in use) [ 85.999443][ T7247] SELinux: policydb version 0 does not match my version range 15-35 [ 85.999471][ T7247] SELinux: failed to load policy [ 86.288872][ T5821] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.448773][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 86.451516][ T5821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.452837][ T5821] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 86.452878][ T5821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.452899][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.452920][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.452941][ T5821] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.452976][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.490816][ T7275] xt_hashlimit: size too large, truncated to 1048576 [ 86.634104][ T77] usb 8-1: USB disconnect, device number 4 [ 86.673170][ T5821] usb 6-1: usb_control_msg returned -32 [ 86.673214][ T5821] usbtmc 6-1:16.0: can't read capabilities [ 86.787271][ T7284] cramfs: checking physical address 0x000000002ac00000 for linear cramfs image [ 86.787461][ T7284] cramfs: wrong magic [ 86.790186][ T7284] cramfs: wrong magic [ 86.840353][ T7287] FAULT_INJECTION: forcing a failure. [ 86.840353][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 86.840382][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.5.325 Not tainted syzkaller #0 PREEMPT(full) [ 86.840401][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.840412][ T7287] Call Trace: [ 86.840418][ T7287] [ 86.840425][ T7287] dump_stack_lvl+0x100/0x190 [ 86.840454][ T7287] should_fail_ex.cold+0x5/0xa [ 86.840480][ T7287] should_failslab+0xc2/0x120 [ 86.840504][ T7287] __kmalloc_cache_noprof+0x91/0x6d0 [ 86.840531][ T7287] ? genl_start+0x1e8/0x970 [ 86.840572][ T7287] genl_start+0x1e8/0x970 [ 86.840596][ T7287] __netlink_dump_start+0x60e/0x990 [ 86.840618][ T7287] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 86.840642][ T7287] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 86.840668][ T7287] ? rcu_is_watching+0x13/0xc0 [ 86.840693][ T7287] ? __pfx_genl_start+0x10/0x10 [ 86.840716][ T7287] ? __pfx_genl_dumpit+0x10/0x10 [ 86.840735][ T7287] ? __pfx_genl_done+0x10/0x10 [ 86.840755][ T7287] ? bpf_lsm_capable+0x9/0x10 [ 86.840779][ T7287] ? security_capable+0x80/0x260 [ 86.840810][ T7287] genl_rcv_msg+0x471/0x800 [ 86.840834][ T7287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.840855][ T7287] ? __lock_acquire+0x5c0/0x1f40 [ 86.840872][ T7287] ? __pfx_nl802154_dump_llsec_key+0x10/0x10 [ 86.840897][ T7287] ? __lock_acquire+0x5c0/0x1f40 [ 86.840921][ T7287] netlink_rcv_skb+0x159/0x420 [ 86.840938][ T7287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.840961][ T7287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.840989][ T7287] ? netlink_deliver_tap+0x1ae/0xcc0 [ 86.841021][ T7287] genl_rcv+0x28/0x40 [ 86.841039][ T7287] netlink_unicast+0x585/0x850 [ 86.841061][ T7287] ? __pfx_netlink_unicast+0x10/0x10 [ 86.841087][ T7287] netlink_sendmsg+0x8b0/0xda0 [ 86.841110][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.841131][ T7287] ? selinux_socket_sendmsg+0x198/0x2f0 [ 86.841163][ T7287] ____sys_sendmsg+0xa4d/0xbe0 [ 86.841188][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.841207][ T7287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.841237][ T7287] ? lock_acquire+0x1d1/0x380 [ 86.841255][ T7287] ? get_pid_task+0x2a/0x250 [ 86.841279][ T7287] ___sys_sendmsg+0x190/0x1e0 [ 86.841307][ T7287] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.841332][ T7287] ? get_pid_task+0x106/0x250 [ 86.841364][ T7287] ? find_held_lock+0x2b/0x80 [ 86.841402][ T7287] __sys_sendmsg+0x160/0x210 [ 86.841424][ T7287] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.841457][ T7287] do_syscall_64+0x123/0x790 [ 86.841484][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.841502][ T7287] RIP: 0033:0x7fa0cad9e159 [ 86.841517][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.841534][ T7287] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.841552][ T7287] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 86.841564][ T7287] RDX: 0000000004040800 RSI: 0000200000001000 RDI: 0000000000000004 [ 86.841574][ T7287] RBP: 00007fa0cbd36090 R08: 0000000000000000 R09: 0000000000000000 [ 86.841584][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.841595][ T7287] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 86.841618][ T7287] [ 86.871629][ T7289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.326'. [ 86.906992][ T7293] xt_hashlimit: size too large, truncated to 1048576 [ 87.141471][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'. [ 87.211284][ T7315] validate_nla: 57 callbacks suppressed [ 87.211301][ T7315] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 87.382099][ T7323] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 87.399963][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.400266][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.415499][ T7327] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 87.708369][ T6770] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 87.868917][ T6770] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 87.869822][ T6770] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 87.869843][ T6770] usb 10-1: config 0 has no interface number 0 [ 87.869873][ T6770] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.871704][ T6770] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.871723][ T6770] usb 10-1: Product: syz [ 87.871734][ T6770] usb 10-1: Manufacturer: syz [ 87.871744][ T6770] usb 10-1: SerialNumber: syz [ 87.876307][ T6770] usb 10-1: config 0 descriptor?? [ 87.899452][ T6770] yurex 10-1:0.50: USB YUREX device now attached to Yurex #1 [ 88.086314][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'. [ 88.087337][ T10] usb 10-1: USB disconnect, device number 2 [ 88.102728][ T10] yurex 10-1:0.50: USB YUREX #1 now disconnected [ 88.316242][ T7359] usb usb8: usbfs: process 7359 (syz.3.340) did not claim interface 0 before use [ 89.061292][ T5821] usb 6-1: USB disconnect, device number 3 [ 89.094146][ T7366] EXT4-fs (nbd1): unable to read superblock [ 89.306399][ T7375] FAULT_INJECTION: forcing a failure. [ 89.306399][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 89.306420][ T7375] CPU: 3 UID: 0 PID: 7375 Comm: syz.1.347 Not tainted syzkaller #0 PREEMPT(full) [ 89.306433][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.306440][ T7375] Call Trace: [ 89.306444][ T7375] [ 89.306448][ T7375] dump_stack_lvl+0x100/0x190 [ 89.306468][ T7375] should_fail_ex.cold+0x5/0xa [ 89.306484][ T7375] should_failslab+0xc2/0x120 [ 89.306499][ T7375] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.306511][ T7375] ? alloc_empty_file+0x5b/0x1c0 [ 89.306529][ T7375] alloc_empty_file+0x5b/0x1c0 [ 89.306544][ T7375] path_openat+0xdb/0x2440 [ 89.306560][ T7375] ? __pfx_path_openat+0x10/0x10 [ 89.306583][ T7375] do_file_open+0x20e/0x430 [ 89.306604][ T7375] ? __pfx_do_file_open+0x10/0x10 [ 89.306641][ T7375] ? _raw_spin_unlock+0x28/0x50 [ 89.306664][ T7375] ? alloc_fd+0x471/0x7a0 [ 89.306692][ T7375] do_sys_openat2+0x10f/0x1e0 [ 89.306712][ T7375] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.306731][ T7375] __x64_sys_openat+0x12d/0x210 [ 89.306747][ T7375] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.306767][ T7375] do_syscall_64+0x123/0x790 [ 89.306783][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.306794][ T7375] RIP: 0033:0x7f861f59e159 [ 89.306804][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.306815][ T7375] RSP: 002b:00007f86204f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.306827][ T7375] RAX: ffffffffffffffda RBX: 00007f861f825fa0 RCX: 00007f861f59e159 [ 89.306834][ T7375] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 89.306841][ T7375] RBP: 00007f861f63503b R08: 0000000000000000 R09: 0000000000000000 [ 89.306847][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.306854][ T7375] R13: 00007f861f826038 R14: 00007f861f825fa0 R15: 00007fff6f3dad58 [ 89.306867][ T7375] [ 89.421371][ T7389] usb usb8: usbfs: process 7389 (syz.3.349) did not claim interface 0 before use [ 89.519262][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 89.685232][ T7406] FAULT_INJECTION: forcing a failure. [ 89.685232][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.685251][ T7406] CPU: 0 UID: 0 PID: 7406 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) [ 89.685264][ T7406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.685271][ T7406] Call Trace: [ 89.685275][ T7406] [ 89.685279][ T7406] dump_stack_lvl+0x100/0x190 [ 89.685300][ T7406] should_fail_ex.cold+0x5/0xa [ 89.685316][ T7406] _copy_to_user+0x32/0xd0 [ 89.685329][ T7406] simple_read_from_buffer+0xcb/0x170 [ 89.685344][ T7406] proc_fail_nth_read+0x1af/0x230 [ 89.685358][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.685373][ T7406] ? rw_verify_area+0xce/0x6d0 [ 89.685389][ T7406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.685402][ T7406] vfs_read+0x1e4/0xb40 [ 89.685413][ T7406] ? lock_acquire+0x1d1/0x380 [ 89.685425][ T7406] ? __fget_files+0x34/0x3d0 [ 89.685438][ T7406] ? __pfx_vfs_read+0x10/0x10 [ 89.685448][ T7406] ? find_held_lock+0x2b/0x80 [ 89.685463][ T7406] ? __fget_files+0x215/0x3d0 [ 89.685479][ T7406] ? __fget_files+0x21f/0x3d0 [ 89.685496][ T7406] ksys_read+0x12a/0x250 [ 89.685507][ T7406] ? __pfx_ksys_read+0x10/0x10 [ 89.685522][ T7406] do_syscall_64+0x123/0x790 [ 89.685562][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.685577][ T7406] RIP: 0033:0x7f861f55e98e [ 89.685587][ T7406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.685597][ T7406] RSP: 002b:00007f86204f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.685609][ T7406] RAX: ffffffffffffffda RBX: 00007f86204f36c0 RCX: 00007f861f55e98e [ 89.685616][ T7406] RDX: 000000000000000f RSI: 00007f86204f30a0 RDI: 0000000000000006 [ 89.685623][ T7406] RBP: 00007f86204f3090 R08: 0000000000000000 R09: 0000000000000000 [ 89.685629][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.685635][ T7406] R13: 00007f861f826038 R14: 00007f861f825fa0 R15: 00007fff6f3dad58 [ 89.685650][ T7406] [ 89.717293][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 89.717310][ T43] audit: type=1400 audit(1789190280.380:621): avc: denied { setattr } for pid=7403 comm="syz.4.353" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.774776][ T5741] Bluetooth: Frame is too long (len 46, expected len 4) [ 89.862148][ T7412] xt_limit: Overflow, try lower: 0/0 [ 89.862840][ T43] audit: type=1400 audit(1789190280.530:622): avc: denied { accept } for pid=7411 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 89.993371][ T7419] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 89.993390][ T7419] netlink: 'syz.4.360': attribute type 7 has an invalid length. [ 90.007220][ T43] audit: type=1400 audit(1789190280.670:623): avc: denied { write } for pid=7416 comm="syz.1.359" name="/" dev="9p" ino=82051127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.016439][ T7421] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.019620][ T7419] U: entered promiscuous mode [ 90.107556][ T7424] bond0: option arp_interval: invalid value (0X4wHf(4oީAiMH^@|=&$A) [ 90.107571][ T7424] bond0: option arp_interval: allowed values 0 - 2147483647 [ 90.113983][ T7428] bond0: option arp_interval: invalid value (0X4wHf(4oީAiMH^@|=&$A) [ 90.114027][ T7428] bond0: option arp_interval: allowed values 0 - 2147483647 [ 90.300565][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 90.348695][ T43] audit: type=1400 audit(1789190281.020:624): avc: denied { name_bind } for pid=7434 comm="syz.1.364" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.435934][ T7441] overlay: ./file0 is not a directory [ 90.468601][ T43] audit: type=1400 audit(1789190281.140:625): avc: denied { read } for pid=7434 comm="syz.1.364" dev="nsfs" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.468631][ T43] audit: type=1400 audit(1789190281.140:626): avc: denied { open } for pid=7434 comm="syz.1.364" path="net:[4026533287]" dev="nsfs" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.473745][ T43] audit: type=1400 audit(1789190281.140:627): avc: denied { map } for pid=7434 comm="syz.1.364" path="socket:[18209]" dev="sockfs" ino=18209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.473774][ T43] audit: type=1400 audit(1789190281.140:628): avc: denied { read } for pid=7434 comm="syz.1.364" path="socket:[18209]" dev="sockfs" ino=18209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.550664][ T7448] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 90.598148][ T7454] xt_hashlimit: size too large, truncated to 1048576 [ 90.669539][ T7460] GUP no longer grows the stack in syz.5.372 (7460): 200000002000-200000009000 (200000001000) [ 90.669561][ T7460] CPU: 2 UID: 0 PID: 7460 Comm: syz.5.372 Not tainted syzkaller #0 PREEMPT(full) [ 90.669575][ T7460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.669590][ T7460] Call Trace: [ 90.669596][ T7460] [ 90.669607][ T7460] dump_stack_lvl+0x100/0x190 [ 90.669645][ T7460] gup_vma_lookup.cold+0x83/0x96 [ 90.669669][ T7460] __get_user_pages+0x252/0x2c30 [ 90.669696][ T7460] ? check_noncircular+0x97/0x160 [ 90.669711][ T7460] ? __pfx___get_user_pages+0x10/0x10 [ 90.669724][ T7460] ? __pfx_down_read_killable+0x10/0x10 [ 90.669747][ T7460] ? __lock_acquire+0x5c0/0x1f40 [ 90.669760][ T7460] __gup_longterm_locked+0x279/0x16f0 [ 90.669777][ T7460] ? __pfx___gup_longterm_locked+0x10/0x10 [ 90.669792][ T7460] ? find_held_lock+0x2b/0x80 [ 90.669807][ T7460] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 90.669822][ T7460] gup_fast_fallback+0x16dc/0x2790 [ 90.669846][ T7460] ? __pfx_gup_fast_fallback+0x10/0x10 [ 90.669863][ T7460] ? rcu_is_watching+0x13/0xc0 [ 90.669881][ T7460] pin_user_pages_fast+0xa7/0xf0 [ 90.669895][ T7460] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 90.669910][ T7460] ? io_pin_pages+0xc3/0x1d0 [ 90.669928][ T7460] io_pin_pages+0xe6/0x1d0 [ 90.669943][ T7460] __zcrx_create_area+0x44a/0x2280 [ 90.669964][ T7460] ? __pfx___zcrx_create_area+0x10/0x10 [ 90.669980][ T7460] ? io_register_zcrx+0x8d4/0x1e20 [ 90.670023][ T7460] ? io_register_zcrx+0x8d4/0x1e20 [ 90.670044][ T7460] io_register_zcrx+0x1420/0x1e20 [ 90.670080][ T7460] ? __pfx_io_register_zcrx+0x10/0x10 [ 90.670100][ T7460] ? lock_acquire+0x1d1/0x380 [ 90.670111][ T7460] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 90.670129][ T7460] ? rcu_is_watching+0x13/0xc0 [ 90.670145][ T7460] ? trace_contention_end+0x126/0x160 [ 90.670165][ T7460] ? __fget_files+0x215/0x3d0 [ 90.670192][ T7460] __do_sys_io_uring_register+0x1193/0x1bc0 [ 90.670210][ T7460] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 90.670227][ T7460] ? __x64_sys_futex+0x34f/0x4d0 [ 90.670243][ T7460] ? __x64_sys_futex+0x358/0x4d0 [ 90.670259][ T7460] ? xfd_validate_state+0x129/0x190 [ 90.670278][ T7460] do_syscall_64+0x123/0x790 [ 90.670293][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.670305][ T7460] RIP: 0033:0x7fa0cad9e159 [ 90.670316][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.670326][ T7460] RSP: 002b:00007fa0cbd36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 90.670337][ T7460] RAX: ffffffffffffffda RBX: 00007fa0cb025fa0 RCX: 00007fa0cad9e159 [ 90.670345][ T7460] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000006 [ 90.670351][ T7460] RBP: 00007fa0cae3503b R08: 0000000000000000 R09: 0000000000000000 [ 90.670359][ T7460] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.670366][ T7460] R13: 00007fa0cb026038 R14: 00007fa0cb025fa0 R15: 00007fff5af367f8 [ 90.670382][ T7460] [ 90.713337][ T43] audit: type=1400 audit(1789190281.380:629): avc: denied { name_bind } for pid=7461 comm="syz.4.373" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.726832][ T43] audit: type=1400 audit(1789190281.390:630): avc: denied { mmap_zero } for pid=7463 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 90.756057][ T7462] xt_IDLETIMER: timeout value is too big [ 90.770512][ T7468] netlink: 'syz.5.375': attribute type 10 has an invalid length. [ 90.775942][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.790527][ T7468] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.096872][ T5877] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 91.169540][ T5821] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 91.237705][ T5877] usb 9-1: device descriptor read/64, error -71 [ 91.338192][ T5821] usb 10-1: not running at top speed; connect to a high speed hub [ 91.338312][ T5821] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.339387][ T5821] usb 10-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.339410][ T5821] usb 10-1: config 1 interface 0 has no altsetting 0 [ 91.343791][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.343803][ T5821] usb 10-1: Product: syz [ 91.343810][ T5821] usb 10-1: Manufacturer: syz [ 91.343818][ T5821] usb 10-1: SerialNumber: syz [ 91.487038][ T5877] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 91.555876][ T5821] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 91.561407][ T5821] usb 10-1: USB disconnect, device number 3 [ 91.616634][ T5877] usb 9-1: device descriptor read/64, error -71 [ 91.737609][ T5877] usb usb9-port1: attempt power cycle [ 92.076720][ T5877] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 92.097291][ T5877] usb 9-1: device descriptor read/8, error -71 [ 92.162765][ T7489] tc_dump_action: action bad kind [ 92.219106][ T7491] netlink: 'syz.5.382': attribute type 10 has an invalid length. [ 92.235945][ T7491] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 92.338468][ T5877] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 92.358298][ T5877] usb 9-1: device descriptor read/8, error -71 [ 92.466661][ T5877] usb usb9-port1: unable to enumerate USB device [ 92.675459][ T7511] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 92.675482][ T7511] netlink: 'syz.3.387': attribute type 6 has an invalid length. [ 92.675494][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.387'. [ 92.988044][ T7527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=7527 comm=syz.3.391 [ 92.989106][ T7527] vivid-007: ================= START STATUS ================= [ 92.989120][ T7527] vivid-007: Enable Output Cropping: true [ 92.989141][ T7527] vivid-007: Enable Output Composing: true [ 92.989159][ T7527] vivid-007: Enable Output Scaler: true [ 92.989177][ T7527] vivid-007: Tx RGB Quantization Range: Automatic [ 92.989195][ T7527] vivid-007: Transmit Mode: HDMI [ 92.989212][ T7527] vivid-007: Hotplug Present: 0x00000000 [ 92.989230][ T7527] vivid-007: RxSense Present: 0x00000000 [ 92.989247][ T7527] vivid-007: EDID Present: 0x00000000 [ 92.989265][ T7527] vivid-007: ================== END STATUS ================== [ 93.042232][ T7529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.059510][ T7529] bond2: Removing last ns target with arp_interval on [ 93.641311][ T7561] No control pipe specified [ 93.664718][ T10] bridge0: entered promiscuous mode [ 93.960320][ T7580] o2cb: This node has not been configured. [ 93.960334][ T7580] o2cb: Cluster check failed. Fix errors before retrying. [ 93.960353][ T7580] (syz.3.407,7580,0):user_dlm_register:674 ERROR: status = -22 [ 93.960375][ T7580] (syz.3.407,7580,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "sys" [ 94.026586][ T7584] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 94.026818][ T7584] Error validating options; rc = [-22] [ 94.110001][ T7588] cgroup: noprefix used incorrectly [ 94.161896][ T7591] openvswitch: netlink: Missing key (keys=40, expected=100) [ 94.188101][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 94.250506][ T7594] loop4: detected capacity change from 0 to 6847 [ 94.678919][ T7604] netlink: 168 bytes leftover after parsing attributes in process `syz.5.417'. [ 94.792793][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 94.975388][ T5877] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 95.124863][ T5877] usb 10-1: Using ep0 maxpacket: 32 [ 95.127166][ T5877] usb 10-1: unable to get BOS descriptor or descriptor too short [ 95.127204][ T5877] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 95.128366][ T5877] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.130389][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.130409][ T5877] usb 10-1: Product: syz [ 95.130423][ T5877] usb 10-1: Manufacturer: syz [ 95.130437][ T5877] usb 10-1: SerialNumber: syz [ 95.145130][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 95.305748][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 95.305769][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 95.306639][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.308236][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.308249][ T10] usb 6-1: Product: syz [ 95.308257][ T10] usb 6-1: Manufacturer: syz [ 95.308265][ T10] usb 6-1: SerialNumber: syz [ 95.332439][ T10] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 95.332565][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 95.332599][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 95.333599][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 95.337119][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 95.338094][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 95.341735][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 95.342900][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 95.344790][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 95.345486][ T10] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 95.349394][ T10] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 95.355521][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 95.355532][ T43] audit: type=1400 audit(1789190286.033:652): avc: denied { ioctl } for pid=7606 comm="syz.5.418" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.365557][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.372935][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.411031][ T5877] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.411059][ T5877] usb 10-1: MIDIStreaming interface descriptor not found [ 95.459142][ T5877] usb 10-1: USB disconnect, device number 4 [ 95.662168][ T35] usb 6-1: USB disconnect, device number 4 [ 95.668692][ T35] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 95.670235][ T35] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 95.674984][ T35] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 95.680857][ T35] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 95.681229][ T35] keyspan 6-1:1.0: device disconnected [ 95.826803][ T43] audit: type=1400 audit(1789190286.503:653): avc: denied { setopt } for pid=7641 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.827193][ T43] audit: type=1400 audit(1789190286.503:654): avc: denied { map } for pid=7641 comm="syz.3.427" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 95.827308][ T43] audit: type=1400 audit(1789190286.503:655): avc: denied { execute } for pid=7641 comm="syz.3.427" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 95.873308][ T43] audit: type=1400 audit(1789190286.543:656): avc: denied { setopt } for pid=7644 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.882063][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 95.883142][ T7646] netlink: 92 bytes leftover after parsing attributes in process `syz.3.429'. [ 95.952335][ T7651] FAULT_INJECTION: forcing a failure. [ 95.952335][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 95.952368][ T7651] CPU: 3 UID: 0 PID: 7651 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 95.952388][ T7651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.952400][ T7651] Call Trace: [ 95.952406][ T7651] [ 95.952414][ T7651] dump_stack_lvl+0x100/0x190 [ 95.952445][ T7651] should_fail_ex.cold+0x5/0xa [ 95.952472][ T7651] should_failslab+0xc2/0x120 [ 95.952498][ T7651] __kmalloc_cache_noprof+0x91/0x6d0 [ 95.952524][ T7651] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 95.952549][ T7651] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 95.952578][ T7651] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 95.952606][ T7651] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 95.952631][ T7651] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 95.952657][ T7651] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 95.952689][ T7651] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 95.952726][ T7651] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 95.952777][ T7651] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 95.952805][ T7651] snd_pcm_oss_sync+0x265/0x840 [ 95.952833][ T7651] snd_pcm_oss_release+0x238/0x300 [ 95.952858][ T7651] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 95.952883][ T7651] __fput+0x3ff/0xb50 [ 95.952913][ T7651] task_work_run+0x150/0x240 [ 95.952942][ T7651] ? __pfx_task_work_run+0x10/0x10 [ 95.952967][ T7651] ? __x64_sys_openat+0x12d/0x210 [ 95.952999][ T7651] exit_to_user_mode_loop+0x1d8/0x700 [ 95.953021][ T7651] ? rcu_is_watching+0x13/0xc0 [ 95.953047][ T7651] do_syscall_64+0x661/0x790 [ 95.953075][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.953094][ T7651] RIP: 0033:0x7fca1ef9e159 [ 95.953109][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.953123][ T7651] RSP: 002b:00007fca1fead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.953143][ T7651] RAX: ffffffffffffffea RBX: 00007fca1f225fa0 RCX: 00007fca1ef9e159 [ 95.953155][ T7651] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 95.953166][ T7651] RBP: 00007fca1f03503b R08: 0000000000000000 R09: 0000000000000000 [ 95.953178][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.953188][ T7651] R13: 00007fca1f226038 R14: 00007fca1f225fa0 R15: 00007fffef39d358 [ 95.953213][ T7651] [ 96.011490][ T7663] xt_NETMAP: bad rangesize 37. [ 96.018811][ T7663] loop0: detected capacity change from 0 to 7 [ 96.040480][ T7663] Dev loop0: unable to read RDB block 7 [ 96.040507][ T7663] loop0: AHDI p1 p2 p3 [ 96.040526][ T7663] loop0: partition table partially beyond EOD, truncated [ 96.043839][ T7663] loop0: p1 start 1601398130 is beyond EOD, truncated [ 96.043865][ T7663] loop0: p2 start 1702059890 is beyond EOD, truncated [ 96.109460][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.434'. [ 96.200160][ T43] audit: type=1400 audit(1789190286.873:657): avc: denied { getopt } for pid=7672 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.271532][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.273158][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.317257][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.320143][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.350433][ T43] audit: type=1400 audit(1789190287.023:658): avc: denied { mounton } for pid=7679 comm="syz.3.440" path="/84/file0/file0" dev="9p" ino=82051153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.350582][ T7686] 9pnet_virtio: no channels available for device syz [ 96.410881][ T7677] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 96.411255][ T7677] ipvlan2: left allmulticast mode [ 96.411272][ T7677] virt_wifi0: left allmulticast mode [ 96.424342][ T5545] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.424362][ T5545] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.424381][ T5545] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.424401][ T5545] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.424419][ T5545] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.424432][ T5545] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.424449][ T5545] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.424463][ T5545] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.484888][ T7693] ip6gre1: entered promiscuous mode [ 96.484902][ T7693] ip6gre1: entered allmulticast mode [ 96.488315][ T43] audit: type=1400 audit(1789190287.163:659): avc: denied { name_bind } for pid=7694 comm="syz.1.443" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.513916][ T7698] ceph: No mds server is up or the cluster is laggy [ 96.516987][ T77] libceph: connect (1)[c::]:6789 error -101 [ 96.517134][ T77] libceph: mon0 (1)[c::]:6789 connect error [ 96.580114][ T43] audit: type=1400 audit(1789190287.253:660): avc: denied { associate } for pid=7703 comm="syz.3.441" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.687266][ T43] audit: type=1400 audit(1789190287.363:661): avc: denied { name_bind } for pid=7709 comm="syz.1.445" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 96.707669][ T7648] orangefs_mount: mount request failed with -4 [ 96.754231][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 96.903980][ T35] usb 10-1: Using ep0 maxpacket: 8 [ 96.904729][ T35] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.905805][ T35] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 96.905841][ T35] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.905861][ T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.905876][ T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.905893][ T35] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.905923][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.053846][ T5877] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.114066][ T35] usb 10-1: GET_CAPABILITIES returned 0 [ 97.114104][ T35] usbtmc 10-1:16.0: can't read capabilities [ 97.206535][ T5741] Bluetooth: hci1: Malformed LE Event: 0x1b [ 97.224976][ T5877] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.225818][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.225834][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.225845][ T5877] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.225863][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.227111][ T5877] usb 8-1: config 0 descriptor?? [ 97.307500][ T7737] jffs2: notice: (7737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 97.315978][ T7693] usbtmc 10-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 97.319287][ T35] usb 10-1: USB disconnect, device number 5 [ 97.640694][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640713][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640726][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640738][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640749][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640761][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640773][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640785][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640796][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.640808][ T5877] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.647905][ T5877] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 97.846748][ T7761] fuse: root generation should be zero [ 97.904202][ T5814] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 97.960509][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 98.038909][ T5878] usb 8-1: USB disconnect, device number 5 [ 98.073418][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 98.076109][ T5814] usb 9-1: unable to get BOS descriptor or descriptor too short [ 98.076147][ T5814] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 98.077152][ T5814] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 98.079227][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.079244][ T5814] usb 9-1: Product: syz [ 98.079257][ T5814] usb 9-1: Manufacturer: syz [ 98.079269][ T5814] usb 9-1: SerialNumber: syz [ 98.183743][ T5545] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.183782][ T5545] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.183810][ T5545] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.183837][ T5545] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.287955][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.288454][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.401921][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.4.458'. [ 98.797843][ T7820] 9pnet_virtio: no channels available for device syz [ 99.030913][ T7827] netlink: 276 bytes leftover after parsing attributes in process `syz.3.478'. [ 99.054237][ T7829] netlink: 80 bytes leftover after parsing attributes in process `syz.5.481'. [ 99.204934][ T7842] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 99.240383][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.240398][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.240693][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.240703][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.240793][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.240800][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.240899][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.240907][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.240995][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.241003][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.241098][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.241106][ T7847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.486'. [ 99.241204][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.241353][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.241511][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.241658][ T7847] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 99.706866][ T7852] fuse: Unknown parameter '00000000000000000000' [ 99.708044][ T5741] [ 99.710847][ T5741] ====================================================== [ 99.713019][ T5741] WARNING: possible circular locking dependency detected [ 99.715189][ T5741] syzkaller #0 Not tainted [ 99.716667][ T5741] ------------------------------------------------------ [ 99.718826][ T5741] kworker/u34:4/5741 is trying to acquire lock: [ 99.720719][ T5741] ffffffff90f80200 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x3f/0x4b0 [ 99.723587][ T5741] [ 99.723587][ T5741] but task is already holding lock: [ 99.725855][ T5741] ffffffff90f53600 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 99.728890][ T5741] [ 99.728890][ T5741] which lock already depends on the new lock. [ 99.728890][ T5741] [ 99.732176][ T5741] [ 99.732176][ T5741] the existing dependency chain (in reverse order) is: [ 99.734930][ T5741] [ 99.734930][ T5741] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 99.737310][ T5741] lock_acquire+0x1d1/0x380 [ 99.738891][ T5741] __mutex_lock+0x1a4/0x1bd0 [ 99.740538][ T5741] hci_remote_features_evt+0x485/0x9b0 [ 99.742461][ T5741] hci_event_packet+0x8e9/0xcd0 [ 99.744139][ T5741] hci_rx_work+0x451/0xfc0 [ 99.745682][ T5741] process_one_work+0xac7/0x1b10 [ 99.747387][ T5741] worker_thread+0x5ef/0xe50 [ 99.748992][ T5741] kthread+0x373/0x450 [ 99.750493][ T5741] ret_from_fork+0x730/0xd60 [ 99.752107][ T5741] ret_from_fork_asm+0x1a/0x30 [ 99.753759][ T5741] [ 99.753759][ T5741] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 99.756045][ T5741] lock_acquire+0x1d1/0x380 [ 99.757612][ T5741] __mutex_lock+0x1a4/0x1bd0 [ 99.759212][ T5741] l2cap_chan_connect+0xac/0x2110 [ 99.760935][ T5741] l2cap_sock_connect+0x37a/0x770 [ 99.762704][ T5741] kernel_connect+0x107/0x160 [ 99.764334][ T5741] rfcomm_dlc_open+0x838/0xac0 [ 99.765986][ T5741] rfcomm_sock_connect+0x42c/0x690 [ 99.767709][ T5741] __sys_connect_file+0x146/0x1a0 [ 99.769403][ T5741] __sys_connect+0x141/0x170 [ 99.771016][ T5741] __x64_sys_connect+0x72/0xb0 [ 99.772607][ T5741] do_syscall_64+0x123/0x790 [ 99.774147][ T5741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.776086][ T5741] [ 99.776086][ T5741] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 99.778360][ T5741] check_prev_add+0xeb/0xe60 [ 99.779981][ T5741] __lock_acquire+0x1528/0x1f40 [ 99.781825][ T5741] lock_acquire+0x1d1/0x380 [ 99.783448][ T5741] __mutex_lock+0x1a4/0x1bd0 [ 99.785044][ T5741] rfcomm_security_cfm+0x3f/0x4b0 [ 99.786775][ T5741] hci_auth_complete_evt+0x811/0x1180 [ 99.788611][ T5741] hci_event_packet+0x8e9/0xcd0 [ 99.790357][ T5741] hci_rx_work+0x451/0xfc0 [ 99.791899][ T5741] process_one_work+0xac7/0x1b10 [ 99.793615][ T5741] worker_thread+0x5ef/0xe50 [ 99.795228][ T5741] kthread+0x373/0x450 [ 99.796706][ T5741] ret_from_fork+0x730/0xd60 [ 99.798307][ T5741] ret_from_fork_asm+0x1a/0x30 [ 99.799975][ T5741] [ 99.799975][ T5741] other info that might help us debug this: [ 99.799975][ T5741] [ 99.803124][ T5741] Chain exists of: [ 99.803124][ T5741] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 99.803124][ T5741] [ 99.806885][ T5741] Possible unsafe locking scenario: [ 99.806885][ T5741] [ 99.809220][ T5741] CPU0 CPU1 [ 99.810930][ T5741] ---- ---- [ 99.812456][ T5741] lock(hci_cb_list_lock); [ 99.813883][ T5741] lock(&hdev->lock); [ 99.815874][ T5741] lock(hci_cb_list_lock); [ 99.817962][ T5741] lock(rfcomm_mutex); [ 99.819228][ T5741] [ 99.819228][ T5741] *** DEADLOCK *** [ 99.819228][ T5741] [ 99.821461][ T5741] locks held by kworker/u34:4/5741: 4, last CPU#2: [ 99.823442][ T5741] #0: ffff8880578f2940 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 99.826652][ T5741] #1: ffffc900036e7d08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 99.830920][ T5741] #2: ffff88804064c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x99/0x1180 [ 99.834750][ T5741] #3: ffffffff90f53600 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 99.838773][ T5741] [ 99.838773][ T5741] stack backtrace: [ 99.841100][ T5741] CPU: 2 UID: 0 PID: 5741 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) [ 99.844802][ T5741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.848869][ T5741] Workqueue: hci3 hci_rx_work [ 99.850782][ T5741] Call Trace: [ 99.852084][ T5741] [ 99.852986][ T5741] dump_stack_lvl+0x100/0x190 [ 99.854428][ T5741] print_circular_bug.cold+0x178/0x1be [ 99.856112][ T5741] check_noncircular+0x146/0x160 [ 99.857669][ T5741] ? mgmt_send_event_skb+0x2f4/0x460 [ 99.859327][ T5741] ? lock_acquire+0x1d1/0x380 [ 99.860818][ T5741] check_prev_add+0xeb/0xe60 [ 99.862191][ T5741] __lock_acquire+0x1528/0x1f40 [ 99.863716][ T5741] ? l2cap_security_cfm+0x90b/0x1240 [ 99.865359][ T5741] lock_acquire+0x1d1/0x380 [ 99.866788][ T5741] ? rfcomm_security_cfm+0x3f/0x4b0 [ 99.868404][ T5741] ? __pfx___might_resched+0x10/0x10 [ 99.870142][ T5741] __mutex_lock+0x1a4/0x1bd0 [ 99.872466][ T5741] ? rfcomm_security_cfm+0x3f/0x4b0 [ 99.874102][ T5741] ? rfcomm_security_cfm+0x3f/0x4b0 [ 99.875723][ T5741] ? __pfx___mutex_lock+0x10/0x10 [ 99.877307][ T5741] ? __pfx___mutex_lock+0x10/0x10 [ 99.878897][ T5741] ? mgmt_send_event+0x13b/0x180 [ 99.880689][ T5741] ? rfcomm_security_cfm+0x3f/0x4b0 [ 99.882749][ T5741] rfcomm_security_cfm+0x3f/0x4b0 [ 99.884751][ T5741] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 99.886964][ T5741] hci_auth_complete_evt+0x811/0x1180 [ 99.889072][ T5741] ? __asan_memcpy+0x5/0x60 [ 99.890927][ T5741] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 99.893218][ T5741] ? __skb_clone+0x570/0x760 [ 99.895072][ T5741] ? skb_pull_data+0x15f/0x1e0 [ 99.896979][ T5741] hci_event_packet+0x8e9/0xcd0 [ 99.898921][ T5741] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 99.901252][ T5741] ? __pfx_hci_event_packet+0x10/0x10 [ 99.903369][ T5741] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.905415][ T5741] hci_rx_work+0x451/0xfc0 [ 99.907059][ T5741] process_one_work+0xac7/0x1b10 [ 99.908891][ T5741] ? __pfx_process_one_work+0x10/0x10 [ 99.911188][ T5741] ? lock_acquire+0x1d1/0x380 [ 99.913069][ T5741] ? __pfx_hci_rx_work+0x10/0x10 [ 99.914985][ T5741] worker_thread+0x5ef/0xe50 [ 99.916838][ T5741] ? __pfx_worker_thread+0x10/0x10 [ 99.918859][ T5741] ? kthread+0x13a/0x450 [ 99.920544][ T5741] ? __pfx_worker_thread+0x10/0x10 [ 99.922578][ T5741] kthread+0x373/0x450 [ 99.924195][ T5741] ? __pfx_kthread+0x10/0x10 [ 99.926022][ T5741] ret_from_fork+0x730/0xd60 [ 99.927834][ T5741] ? __pfx_ret_from_fork+0x10/0x10 [ 99.929873][ T5741] ? __switch_to+0x800/0x10f0 [ 99.931746][ T5741] ? __pfx_kthread+0x10/0x10 [ 99.933591][ T5741] ret_from_fork_asm+0x1a/0x30 [ 99.935516][ T5741] [ 100.650422][ T5814] usb 9-1: USB disconnect, device number 14 [ 106.069362][ T5741] Bluetooth: hci3: command 0x0406 tx timeout