last executing test programs: 2m28.726632146s ago: executing program 2 (id=321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x4, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'nr0\x00', {}, 0x401}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x3}]}) 2m27.74503525s ago: executing program 2 (id=329): r0 = socket(0x10, 0x3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2m27.744895908s ago: executing program 2 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x6200) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r1, 0x5, 0xc, 0x204}) 2m27.578520203s ago: executing program 2 (id=331): mkdir(&(0x7f0000000000)='./file0\x00', 0xb65954f38e4c490b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x128) lseek(r0, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x5a3882) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m27.479446308s ago: executing program 2 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x4, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80b00}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0xff000000) 2m27.196850086s ago: executing program 2 (id=335): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x2fe, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2c8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2m27.062699223s ago: executing program 32 (id=335): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x2fe, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2c8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 25.295597389s ago: executing program 1 (id=2069): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000f5a000/0x1000)=nil, 0x1000, 0x2, 0x10050, r0, 0xb99ab000) r1 = io_uring_setup(0x75b0, &(0x7f0000000140)={0x0, 0x3679, 0x80, 0x2, 0x8f}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x355, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000ff4000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03feffffff4e22d4283c09b2b17f5401000000ff0080000800"/56, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}}, 0x20004010) r5 = userfaultfd(0x80401) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a507ed93a820a0b040000000000000000020000002400048033750e23777c7c476f73660014000280080003400000000108000140000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 24.355913608s ago: executing program 1 (id=2077): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) close_range(r0, r0, 0x2) (async) close_range(r0, r0, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x82) (async) fsmount(0xffffffffffffffff, 0x1, 0x82) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000140)={@msf={0x7, 0x48, 0x81}, 0x0, 0x0, 0x0}) (async) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000140)={@msf={0x7, 0x48, 0x81}, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {0x5}, {0x10}}}, 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r13 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) (async) ioctl$VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) r14 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMRESUME(r14, 0x5302) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x5}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x5}) 24.215957236s ago: executing program 1 (id=2078): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0xa}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) write$yama_ptrace_scope(r0, &(0x7f0000000040)='0\x00', 0x2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 23.254053901s ago: executing program 1 (id=2090): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffe, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23.251876423s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0xffffffffffffff11}], 0x1, 0x6be3ec20edb75600, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv(r4, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = io_uring_setup(0x497c, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r11, 0x5760, 0x5e) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="31030020b7284cec61820ab2fd5c004008000000"], 0x14}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r8, @ANYRES16=0x0], 0x1bbc}, 0x1, 0x0, 0x0, 0x40400d0}, 0xc000) 23.042361057s ago: executing program 1 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async) r0 = epoll_create1(0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4008040) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r3, 0xa0a01c0298e756fd, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x9f, 0x45, "4637acaad5c108d988c626b64682c430d44a0e7346a448f2ce715745a4d223e03522e7926f23d52f6c0985f75a7d1d3718c7138f057ae462374bc8d9c553b81940e6e02531d4d4e6209d77430abb555fe07d37f7c120c0d342b42ea1faa257b432dbe08bedafec61517732c7dcb30c350d009e2c63ddeed140011f2e16b02ea5bd52d78dc46ad1d4c784d22a12203f74fd47c3eef24b0983c15931"}, @NL80211_ATTR_TESTDATA={0x7b, 0x45, "28587e24ce0e0049db79025f496354a8d865807d453629f2908b5e29521dce778433252b5c369fb4f547b91328e51b3342388f7ef4489927fa9987eb96bcda2bd4325bdbf1194bc2a1b34171caa6a2162bb476d74c7fa1dccc12e684136e4b4d20f87e5179846a6ce9f04f50019a4d9983c7753758d30b"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) 8.038234283s ago: executing program 33 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') (async) r0 = epoll_create1(0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4008040) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r3, 0xa0a01c0298e756fd, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x9f, 0x45, "4637acaad5c108d988c626b64682c430d44a0e7346a448f2ce715745a4d223e03522e7926f23d52f6c0985f75a7d1d3718c7138f057ae462374bc8d9c553b81940e6e02531d4d4e6209d77430abb555fe07d37f7c120c0d342b42ea1faa257b432dbe08bedafec61517732c7dcb30c350d009e2c63ddeed140011f2e16b02ea5bd52d78dc46ad1d4c784d22a12203f74fd47c3eef24b0983c15931"}, @NL80211_ATTR_TESTDATA={0x7b, 0x45, "28587e24ce0e0049db79025f496354a8d865807d453629f2908b5e29521dce778433252b5c369fb4f547b91328e51b3342388f7ef4489927fa9987eb96bcda2bd4325bdbf1194bc2a1b34171caa6a2162bb476d74c7fa1dccc12e684136e4b4d20f87e5179846a6ce9f04f50019a4d9983c7753758d30b"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) 5.82614128s ago: executing program 4 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, &(0x7f0000000080)="98703a27c7901755315436d1652a02450cdc45b343bb6a452c48339f781a34970dbc81104a7e4c507afae6e612f10d5e9d907912e7b786673e41da41848d4996f0a0a2bb15cd45b0e14570dff6643da929196e39c62855147028834c0a7de40a5b2b1166f85d24f31e24fc", &(0x7f0000000100)=""/235, 0x4}, 0x20) 5.825377478s ago: executing program 4 (id=2306): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0xffffffff, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x50a0000) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0x2d, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r4}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r7}) clock_getres(0x9, 0x0) r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000002c0)=0x22) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000001440)=0x82) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400400c4) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000005e00000000080045000024000000000073907800000300e000000100000000fe9a90780200000000000000"], 0x0) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000000080)=0x8000, 0x4) recvfrom$inet(r9, 0x0, 0x0, 0x120, 0x0, 0x0) 5.431363074s ago: executing program 0 (id=2311): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00000000000000000040"}]}}}}}}}, 0x0) 5.364162458s ago: executing program 0 (id=2313): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="afefa8340000bbf1bd88472fa77f31fa57474dfddd2ba58ace0b0c", @ANYRES16=0x0, @ANYBLOB="210027bd7000fedbdf25010000000000000001410000001800170000001e000008857564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000019}, 0x8000) (async) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000002740)) (async) fcntl$setflags(r0, 0x2, 0x1) 3.715892356s ago: executing program 5 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xb0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000900)={r0, 0xffffffff00000000, 0xd, 0x1}) io_uring_enter(r3, 0x3165, 0xa065, 0x10, &(0x7f0000000940)={[0x2]}, 0x8) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dcec4f78b5102caeee8e6f20000000fdff000000000000"], 0x20}}, 0x0) close_range(r0, r3, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xe, &(0x7f0000000300)=@raw=[@exit, @ldst={0x1, 0x3, 0x3, 0x2, 0xd, 0xfffffffffffffffc}, @exit, @tail_call, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x5}, @generic={0x7, 0x1, 0x3, 0xa45, 0x7}, @generic={0x1, 0x5, 0x5, 0x8, 0x3}], &(0x7f0000000540)='syzkaller\x00', 0xcae, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x9, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000007c0)=[{0x3, 0x3, 0x0, 0x1}], 0x10, 0x8676}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYRES8=r7], &(0x7f00000008c0)='GPL\x00', 0x5, 0xc3, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) 3.635885536s ago: executing program 5 (id=2333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x24048800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 3.495749517s ago: executing program 3 (id=2335): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x13, 0xffffffffffffffff, 0xbf6b5000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x26e1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) close(r1) socket$kcm(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x4880) r3 = socket(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000180), 0x14) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) write(r3, 0x0, 0x0) madvise(&(0x7f0000771000/0x1000)=nil, 0x1000, 0x64) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x8801, 0x0) ioctl$TCGETS2(r8, 0x802c542a, &(0x7f0000000280)) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x44000}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01000800000000000000000000000000000000ebffffff000000000000000000"]) ioctl$RTC_ALM_READ(r1, 0x40187014, &(0x7f0000000040)) syz_open_dev$dri(0x0, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 3.495227479s ago: executing program 5 (id=2336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment={0x1, 0x0, 0x1, 0x1, 0x0, 0x14, 0x64}, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000003c0), 0x6b3b, 0x86200) 3.479431242s ago: executing program 3 (id=2337): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sendmmsg$alg(r2, &(0x7f0000001e40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="598f720e2d2d8474004281525f95", 0xe}, {&(0x7f0000000380)="c4546db7e091c9fc93711105978767cf7e97c72ef9537a9fcd6317ad683cfaef365f4fcce1138a4c4134e621acacf44af425ca5cf462a5868ca505bd379673f0e66522901b4a66ec492a13d9bb08f3e7ad3d54da6763f177949071da3bb74e4b3d444d3b5e7a3fa25f5b4b7152f989d27932d2f0691f28cc6b147e05b01bdd4afe2281fdcd2c9fa910612ee6b8af400bd619ad9c066146f7324a7974116fa84c1bc3215692efe793172b5ddfebf90f24a659f023d574a9d057f0415d", 0xbc}, {&(0x7f0000000440)="36c1332e6ecf77db1a424a9fde5c17b77428e0eb8b2bb12af8410ef2747ea080edad0e2defb96e03f9a022257c418587a636e14001b616abbabffff668a79f9dd5f4b8ddbe811ff6b597dd6061501ae64b1e63ce4df7a36a5f2b4991726de412fc060caa9e317a77b0ecbeffaef3eacbd97397d0335f8169ca5471b78bca4c1917d336772886126d87d73fc2ccce11dcfb1b0f299b9fa93adbb23c1e2922942ced54d1ab7fceac77f3f601b71bebaae8cb8ead0571c9cf665c9913e6", 0xbc}, {&(0x7f0000000040)="895ca708c72c4cd08aca", 0xa}, {&(0x7f0000000080)="5aee4fc2ffed199adbbcd8aa81c12722eb0f3d76a128d19722c7", 0x1a}, {&(0x7f0000000100)="4fa743ae52465f955b630acf51d88528a70991e321080302e91288554f1e533323c0e721385fa0efffbee23a11c132fb6fdb605ad1f04f247610f9a4a9d3", 0x3e}, {&(0x7f0000000180)="a7df4ec180fee55104508d4def4b0e5b2ae6b3c4f2634e0d1e8e4b475ed5f4c0beddd1e6744b70fe4f2987304bdd430394dba22e361c65837fdc41001dc97517c0b8c01a4cfef7b56d559f2eab65b84dbd8c2a611396a69dc85d313c8bc7bb51094ad7c6d9a5a88ae163a4adfb13af08299f5848a8cda05089c7092c68", 0x7d}, {&(0x7f0000000500)="c341b5b18963ab841bffa4d2494c44560daf1f57e5991e2add7ae784531ca8917f3493aa8c557d827265bc8ff156166fc28652f1613fa86510aab62622c5f4acd501def3022424df7dabfe86", 0x4c}, {&(0x7f0000000600)="cfc1817f66a0919cdaa89e694a907ae583f27ae4dcabdb7c34bb02f17577eabf48a1c5983d16aa9f1181bcb067b06b435c9dc1180911fc263e24ad0006f0cb1535f71bf1bd69cc19a8725ae37c35836339b90ad1add41709a8fd4264c0f02e2ce5011cf905a3ab0da32cbef9fe0b651f8da37338b9e6aa44466e0b08f22a160a840a3537619a39ab06e35c0e0e32a405db7239ceafe8bacc87dec91347e74686ba4771f17664af9a6167a0e4c3a4b1aa8d688bef732ef3eb041fd6bead97c8d117de36af9ac3856ab72fba301f4af9380256bba30923bf0cb6fb10d968ee1e701948", 0xe2}], 0x9, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="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", 0xfc}], 0x1, &(0x7f00000008c0)=[@iv={0x88, 0x117, 0x2, 0x70, "796320d1d9856c2d0a179e48e7e2ac8157f58ad6fd306eade47e98d8b2062e4a3b727fb0acd6cb7594f42fcfc2f74203dc93a63352c36c96fdc4c69ebc54597e932cfc9a9e44e389f5eab977401816b16a0eb5ed1527a77ba86362839a4d06de026c5e7cd37ba392a3a2d5cd2d3935fe"}, @iv={0x110, 0x117, 0x2, 0xf7, "0b0fc8bad8d01b1c8c3d36e8e11de6af79d7b52d0bbc1e22c8096cd26cf3b2655f6b0345a42c8736ce8126746472bc070656252f494502401aa5a7eb4b8bce55165f847a28fd0b3aeee081bc7ab93a92d3d1d81cdfc42e7ae901a049c10861911efb10d078daa884ecdd95c07558b2a0c4a0d0d5d9e676e95302f28291eac70701eb3544c11e341bdd1b808adeb82f5d3106716d513b9e267334acb763b7eb549736881fcd94aafb62ec998d3aeae2e5fe05f11c72ccbb3d466f7bd8462971221973324183a44e254f19bc3045599837b05712cf22910e9d2f8ddac573c79f2cdc5e416c978390d68874b9466ce3f96318bb72835e0954"}], 0x198, 0x4000}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="c3f4991d9f1c80cad9081984b8ab215a7be804b8ea83553e2a4ae04b0df89edfde38b207a56ce4c84b155acff0664d5f829cfe5089ffbfe0b453dfe4fb8d5d86094b261f8c77a16dd4c3a8c4313d8d345eacf7dc3fb7f6f03eac284556666c84a8d9381018c0fdfd25f2368e2ab7ebc58dbb9bff4179401de46abb6455f7cacdabf12a19fa2bc529188634f543bdbf616bc0f4188fdf19365c81ba9f", 0x9c}, {&(0x7f0000000300)="443d38596764af988f10b3fcfbd043ba590b360958837c2b03d44ecda2f6", 0x1e}], 0x2, &(0x7f0000000b80)=[@iv={0xa0, 0x117, 0x2, 0x87, "532c9319bd7c5b6a16c8c21eb22e6d1890733700d41c0326d4dab5ee51206fa436bd5b035f374b3fd6e7710561ca6e76ae22d8be6b213b9d626dd06148291f68dda22c60c913e200a929b13ca96838888d4d6fdf780ddce5ad2becfee4c712e6c97f893fa998a9de0d48a897e3c2682d9dc11cadfcdefc7f6984dd7c7406fd4462b30c9a0de693"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xb0, 0x117, 0x2, 0x9c, "eec9f459a4daa3d29fe7bc3c4c56ef377d12f8ccf42cd81fc90ff5cf3d22b2b3965632e0ca6ad092e6e9f38a23ef0b32e723350ffa669248dd786b5c4df0fdf5372d5a14d16d156311024b5a1c43db94bd00537dbf9bf3d73bf432b2fef7611dfd87e24eb139d9d1bb5e8def3eca2a8311b1dd6f59c1c449a68043ba3ddc63724efe3d7f950c400d46311dc9ad53f6f08c4dac5052815efabc55310b"}], 0x168, 0x40000}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d00)="9b022a2b7ea78d80980321a985c557f85b2680486cd5", 0x16}], 0x1, &(0x7f0000000d80)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x81}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="e9a3f466af171a6f0b717d392406d84f59ecbe744a9167424bdf79cd9c99eef86507981076f132d21d3c57db141324cdc3b98ee675247de3bc575892dd97c83ff3ef68964d0a1f77b96ad70894ae1b5a65ba3bc317a9167f2b61d75040e9a58b0a827023f4f0aeba712cd805c9e3563b2414c3a4fb81a530be28433fd88e7af0d270fdb8496efe471c1d915b9e37a6d09a2d1548df4bd72c0f5fe61578b5cc86c582532a1d8d3e2c7faefc770d88e8ce8e8c492a", 0xb4}, {&(0x7f0000000ec0)="93740289eedd2a1913eb091c2dc586af0219999b825050f99818d90ff3f5c0a0621397d36de6d8b2c489f0869dd58999a5c6fe1c1d53fb6ebbecef18b633a617370c70d434eaf554dc037c500db371a4a0d0271033d22c647f591f61506a0e4e66aee259ee3e85d147c6070f9633b5b2a3e0ae4d4a2ee5c20e6042a9c570400415d2c7650917bd7c5d555107fdc5ee3159c86a834591c25eda25bc6ff2d6f7a2c955c6b37f9f77708488037c58", 0xad}, {&(0x7f0000000f80)="12ff94e6b5ccb5f0a2d06c367dbd02d64110bd6f4f66a20df229ed091c49d62478d0a5e47f8c2f7db16ee569c9ad76471d102b126098c1e95966f060f6124a1b6913f853703868c0fe6de9b86225841f860af71959c4fd86dd05bce65dfb6fbe11a5774ee30b2006aed1eb5c9aed617a863e0ecb4d8147b11695a0bc5da42f99711e7224c3acb0", 0x87}, {&(0x7f0000001040)="3bcef6f7974de34c4641d75a305ee10aea2c974c40e7257e3d8d9ee23dec44685028a06035d09e5c25591cef32ebd72a9c7c92e01925e969d80dd895cb06694be8b1945b8aae0dca60f6b920814a5ef9835c92604ce15d214493a92e85a8683a2c04a4856297848f464e5e89a176487e1a231e09f166ae3ad2ffd78678c7ca714677c6e9d856d3f27861824ebbad55a9697dad6ff0d4f47e679884638b6fd1acb8d37e40c6bae1cf2838c217546e71a1d77cb6d4ccee0188e834a60fb41b4e14a1b4789f28c946cbea48945addf3ca81de0cad53d4", 0xd5}, {&(0x7f0000001140)="e2fde23c1b39aaf2c861e2dea0a07c3ae8b727728511d91ecea3a609eba896a4cf696a8527174b44abe89ca97c5ba9d104889d787836c8b92866eb8435c3cc9148bd4f6043feed6e53152f40fad35c28082c6ac9fb51d74d857dee271038ea38f7a8a96ce8cb04b139907252807c38803c46f3b148908f5ad286871ef530740ce77e4ab48e3d364e123a90397884edcdf6787d9e8261abe48a3ab7162a0267aba079218bee21cf68df6a8e2d5757149093c13d", 0xb3}, {&(0x7f0000001200)="8ed280ddaa7c9c7b378140c2906711c90d97532eeded7306a7bbe471af42e0e9c522b4b5996c7220824c526ec984752f932e10c952ae779643c73b67d41e8038a45191f9258b273bc8dbb19f154a4a80c337b75ccaaf29154e4e23326485490e6397fbe5aab8031870211e674456ef3780bf8898501d5108b9c2b630012b6e817e3ca5a1fae6c5e56ea22575c0053876a4b1718b8b70a3bccdc4aaa1814de72004aa54b1109ffe0c78d476ec378bcfa923c2aa1f6a4fa19776f8044529f01dff", 0xc0}], 0x6, &(0x7f0000001440)=[@iv={0xb8, 0x117, 0x2, 0xa1, "ecf29aaaa500f2a4b47e65cb28c87d1f6bd87cba4ebed87a137048217baa86d0219e022b5b945abb8ac7cafb0c2b9bede7c85e8d04bc685477c54b6ce5714aa75241c0ed9e6c560963c00b76841539352aaa459877fae211b16fc391f4e68f3acfd127ec4f8d9f35ea4823f226593bfb04f6b0c99ab1f86bfabdadad512fd2441525d016c613ed4ce54aa9eac957e3fde2fa2e413c33eed0f79f2a2cb465cbba84"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x5a, "e07f99c461d8573b3f6c1d0b5291a1f65d3fb547bd961ff01d4122b00cb058eab9cf9ef903f883be1fde5fae3470b0c18dde9d879113cd0b3690b13f7a46608c9d5ebd9da9c8f266512855f8383b45616fca510869440c8c0a3f"}], 0x140, 0x4050015}, {0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001580)=[@assoc={0x18}, @iv={0x98, 0x117, 0x2, 0x7d, "c60a57c65d560d62154f79fb52ab25d1015636ad28511f7b7684fc57c4ca248bc1fd34911d9f99f31addfc0b332e659fb62c16c2af714fe8bed5cc852008bebd9f1e65cd2c2297952cae2cde6f66fe6ca15042bc3de68cca258d18df5c2a9b2ab564d80470450d731d2ac873d37f78197c6e04cc9bff9905377e5ba252"}, @assoc={0x18, 0x117, 0x4, 0x91}], 0xc8}, {0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001380)="e79892f532", 0x5}, {&(0x7f00000013c0)="64f4c9588fe9208eede4b34f19cd09cb7bbfeeeb0f271915a9685e79e762f800031a1f", 0x23}, {&(0x7f0000001680)="df88ce0875fd8393e3251327abea290fb2b6ef93caaf9c65c8d0f34ef41d68518ab76f7a5eb2faf275639a39d387a6e9ad87f104966b38e914f348b1e2802ea919be84f070b0fc1467faeb073d7dab334d474ae98d1c513df68f522d003125c06ee44af4429bc9059c609e46508020e41a31f9b1bdbe3666fd2736d11dffbe43a67a2a9f07e15904ebef3cc3e19809397f535641a6c0e8fbb2c089b7e9619139d9c8cc562f5cf9a60cab10b5acd736", 0xaf}, {&(0x7f0000001740)="87ae6b5c1753d02f0ed40618eaa14001a8fe29bdb1f369e6de4d6e5c972c64eadc2110e8172906c7cbd4bffcad64c80d01ec8f43becded008e5fb27606e119f3d202098466e0e0f717610a98d6d87ffc138c628cba2395e6d0fbba49e9f015ab4253", 0x62}, {&(0x7f00000017c0)="693a7a15084266069589d8286279b249f646476ab8afcd75a490f7d47bccf053f14fb519e2f669a79707eeaaa11047c423a3e49241b5da03edc9f81e3225e061bea245977298504ab76addf88964d47cddda544cf0d6c9238b11973a432c7ee12b7467b1a7b0958cacee5ae2f547815d69a97592124e558df057f32d0dd770a7d2a20b0bb6c4c03440e46ad4fabf6dcb40c110169619ffb00b342b73f12830b3305435fd3031235b3362c32dac392c594be5eece", 0xb4}, {&(0x7f0000001880)="f6e6ad74300e9de0eac8b618582d362c3163b185f29bdeaf067df632e9636aebaa", 0x21}], 0x6, &(0x7f0000001940)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}], 0x48}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000019c0)="513c24d527c29f4c527c8ba5dffbbef031e56901f2c7459267ea037e0083dc0024f0eec380d5d79a7171ba58abee501aab3c33103eb795327ddb88cae6bd5dbccb7407ce0691c0acb057081af8a9bc23a6feb1fef08ae37597009330a87445e4b56d425dc25ffd6d5971c239003944aecea3410e3f1aae43811299f52770578f0fa0852e567e3a33df5f79617f6a725cf12774927dffa7aedbe39dbed3850ecc8d12483370f381872e53611610aac1cf143d17c73ebf1fef7f20b68df1364f90f37b4eb0510776655b75ea6a6f9357721bc0eba785649d60d71337f0f7e4d5b7f2db3ac63f", 0xe5}, {&(0x7f0000001ac0)="07c7995bc7aab93d80ead3c4fb2584a10f8ea25c52d7a1ad9ae093f260e30381482488ca4413ba6df325433dbfc802a1f551a64957d264a5ce7f54c6981e2c2f6f89faeb962989a3cbf9afeb70e49de59c5d00fe1778db50a90aeeaa171fd0890480e50d31c69e54d42d7e9fa5df10bdc03dba94d51b3fa2f3a2b8fbe8e09f8eb8ea269ee412aebff9bdb0a86357e9d695bceb7582f77f8b1887520e83e3aaa518fcde894918c00ca8f297efd5ed8629dd8170c025a2", 0xb6}, {&(0x7f0000001b80)="32dc4f956ac8a0cc0e097e209128536300ab987e275d5f80b7b73592ee85161b0414e0ebcad1b72ac24c346e1daab7429a2be33dfef6d14751bd6bc8d93ccd052e0e413576bb908ee5eaa897c986e0c2a8a0fafa804a1b8a01860627076cc9531603d275075ab01500b6d310822bd6abca11b64e9345c7aef45eb52390f8a83c9bed6434a67576d103ee86331f897dfefcb581f8fbd0b1220a67aaf21320bc8d2e639b954a28d5589cb6319219020637c434c6ae36e045a672ada4f670abf091f902a562442b633a4be39990940b71885da3abc22d730779bb692721c112d3afe880307e3af25a4750149763d3122a", 0xef}, {&(0x7f0000001c80)="91c619162881a0c6c446a6d58b80afc09d80969a3780e69c6869e1c6b454a130ccd979e060a0603eb1f26575ddc0a55d6df87b95b7d042f1b86fd79d54b95d1253fb990d52c9c3b773a5c6acba57c7c982617731d630c0b23cd63a362df47ac08c40dd2496742ca4be2da59514f30adc11ee7c08786eec1897b0e8d780066bde429195f7d9d0cc8ea80960121e52f97b63bec4f8a13c985f", 0x98}, {&(0x7f0000001d40)="031468274372c8d1074d8a08f3e66a09d67b5938c2f5e7a9b2d879bb662f54ab50a0a660f35fc11aeb3764fbf8080933c79de7cbb794a9b1b728692f3cf2b8b1dd9e16d537c26e65e521b4e0953a6cf439daf0dc243cc9ee5de39074a70051ab64decc5fd3f0151c1f8eb8484f2c103f24bc35b6f6afb196a21aa9", 0x7b}], 0x5, 0x0, 0x0, 0x8080}], 0x8, 0x24000000) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0xfff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x48, 0xc9, "299a53d4c6010dc1"}}}}, 0xf) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 3.385570371s ago: executing program 5 (id=2338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x820800, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, 0x0) mount$fuseblk(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2009c71, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x7, {0xffffffffffffffff, 0x0, 0x1000001, 0x3, 0x3, 0x1, {0x0, 0x1ff, 0x2004, 0x1, 0x4362d09f, 0x80200000, 0x2, 0x6, 0x0, 0x2000, 0x3, r2, 0x0, 0x4, 0xdffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, 0x0) 3.357708099s ago: executing program 0 (id=2314): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x686842, 0x0) 3.28590932s ago: executing program 3 (id=2339): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a0000000000000000fffd"}]}}}}}}}, 0x0) 3.22573052s ago: executing program 3 (id=2340): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x3], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.225488006s ago: executing program 5 (id=2341): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x47, 0xffffffffffffffff, {0x3fc, 0xa8d4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 262.834716ms ago: executing program 0 (id=2342): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000e40)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) read$FUSE(r0, &(0x7f0000002e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2d, 0x2, 0x8, 0x8, 0xa155, 0x87, 0x4, 0x0, 0x0, 0x8, 0x5}}, 0x50) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) read$fb(r3, &(0x7f0000000180)=""/194, 0xc2) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0xffffffffffffffda, r2, {{0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x2, 0x6, 0x2, 0x7fffffff, 0x100}}}, 0x60) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={r3, 0x7, 0x4, 0x81}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 155.096745ms ago: executing program 0 (id=2348): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0xffe0}, {0xf, 0x5}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/116, 0x74}], 0x1}, 0x1}], 0x2, 0x2023, 0x0) 648.163µs ago: executing program 0 (id=2349): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './bus\x00'}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x9}, [{0x2, 0x2, r0}], {0x4, 0x4}, [{0x8, 0x3, r1}, {0x8, 0x4, r2}, {0x8, 0x2, r3}], {}, {0x20, 0x4}}, 0x44, 0x3) chdir(&(0x7f0000000000)='./file1\x00') 370.358µs ago: executing program 3 (id=2350): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000400)={r4, 0x3}, 0x8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) r6 = socket$kcm(0x10, 0x7, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 0s ago: executing program 4 (id=2351): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x3], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): c_noprof+0x2ff/0x780 [ 181.540894][T10988] alloc_pages_noprof+0x131/0x390 [ 181.540919][T10988] get_free_pages_noprof+0x10/0xb0 [ 181.540942][T10988] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 181.540976][T10988] mmu_topup_memory_caches+0xbc/0x170 [ 181.541002][T10988] kvm_mmu_load+0xd6/0x23e0 [ 181.541025][T10988] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 181.541043][T10988] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 181.541060][T10988] ? kvm_msr_allowed+0x47/0x450 [ 181.541084][T10988] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 181.541101][T10988] ? __pfx_kvm_mmu_load+0x10/0x10 [ 181.541140][T10988] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 181.541163][T10988] ? kvm_check_and_inject_events+0x961/0x10c0 [ 181.541193][T10988] vcpu_run+0x39ee/0x5ca0 [ 181.541222][T10988] ? __lock_acquire+0x4a5/0x2630 [ 181.541246][T10988] ? __pfx_vcpu_run+0x10/0x10 [ 181.541281][T10988] ? rcu_is_watching+0x12/0xc0 [ 181.541308][T10988] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 181.541333][T10988] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 181.541366][T10988] kvm_vcpu_ioctl+0x730/0x16d0 [ 181.541389][T10988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.541409][T10988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.541436][T10988] ? do_vfs_ioctl+0x226/0x13e0 [ 181.541455][T10988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.541470][T10988] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 181.541494][T10988] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.541531][T10988] ? selinux_file_ioctl+0x139/0x290 [ 181.541548][T10988] ? selinux_file_ioctl+0xb4/0x290 [ 181.541569][T10988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.541590][T10988] __x64_sys_ioctl+0x18e/0x210 [ 181.541609][T10988] do_syscall_64+0xc9/0xf80 [ 181.541631][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.541648][T10988] RIP: 0033:0x7f26f919aeb9 [ 181.541664][T10988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.541681][T10988] RSP: 002b:00007f26fa0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.541699][T10988] RAX: ffffffffffffffda RBX: 00007f26f9415fa0 RCX: 00007f26f919aeb9 [ 181.541710][T10988] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.541720][T10988] RBP: 00007f26fa0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.541732][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.541742][T10988] R13: 00007f26f9416038 R14: 00007f26f9415fa0 R15: 00007fff5a7decc8 [ 181.541768][T10988] [ 181.623434][T10964] ªªªªªª speed is unknown, defaulting to 1000 [ 181.876084][T10999] deleting an unspecified loop device is not supported. [ 181.877861][ T40] audit: type=1400 audit(1769685887.141:54116): avc: denied { read append } for pid=10998 comm="syz.4.1655" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.889306][ T40] audit: type=1400 audit(1769685887.141:54117): avc: denied { open } for pid=10998 comm="syz.4.1655" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.898696][ T40] audit: type=1400 audit(1769685887.141:54118): avc: denied { ioctl } for pid=10998 comm="syz.4.1655" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.997901][T11017] usb usb9: usbfs: process 11017 (syz.4.1662) did not claim interface 0 before use [ 182.008986][T11017] syzkaller0: entered promiscuous mode [ 182.010951][T11017] syzkaller0: entered allmulticast mode [ 182.016345][ T9587] 0: reclassify loop, rule prio 0, protocol 800 [ 182.372024][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.852274][T11071] FAULT_INJECTION: forcing a failure. [ 182.852274][T11071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.856897][T11071] CPU: 3 UID: 0 PID: 11071 Comm: syz.3.1679 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.856925][T11071] Tainted: [L]=SOFTLOCKUP [ 182.856932][T11071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.856943][T11071] Call Trace: [ 182.856950][T11071] [ 182.856958][T11071] dump_stack_lvl+0x100/0x190 [ 182.857005][T11071] should_fail_ex.cold+0x5/0xa [ 182.857032][T11071] ? prepare_alloc_pages+0x16d/0x5f0 [ 182.857061][T11071] should_fail_alloc_page+0xeb/0x140 [ 182.857086][T11071] prepare_alloc_pages+0x1f0/0x5f0 [ 182.857110][T11071] ? rcu_is_watching+0x12/0xc0 [ 182.857136][T11071] __alloc_frozen_pages_noprof+0x193/0x2410 [ 182.857158][T11071] ? kasan_save_stack+0x3f/0x50 [ 182.857177][T11071] ? kasan_save_stack+0x30/0x50 [ 182.857194][T11071] ? kasan_save_track+0x14/0x30 [ 182.857213][T11071] ? __kasan_kmalloc+0xaa/0xb0 [ 182.857232][T11071] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 182.857251][T11071] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 182.857271][T11071] ? mmu_topup_memory_caches+0xbc/0x170 [ 182.857294][T11071] ? kvm_mmu_load+0xd6/0x23e0 [ 182.857313][T11071] ? vcpu_run+0x39ee/0x5ca0 [ 182.857336][T11071] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 182.857359][T11071] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 182.857376][T11071] ? __x64_sys_ioctl+0x18e/0x210 [ 182.857391][T11071] ? do_syscall_64+0xc9/0xf80 [ 182.857417][T11071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.857440][T11071] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.857474][T11071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.857503][T11071] ? policy_nodemask+0xed/0x4f0 [ 182.857530][T11071] alloc_pages_mpol+0x1fb/0x550 [ 182.857555][T11071] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 182.857579][T11071] ? trace_kmalloc+0x83/0xb0 [ 182.857600][T11071] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 182.857619][T11071] ? trace_kmem_cache_alloc+0x80/0xb0 [ 182.857641][T11071] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 182.857665][T11071] alloc_pages_noprof+0x131/0x390 [ 182.857690][T11071] get_free_pages_noprof+0x10/0xb0 [ 182.857713][T11071] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 182.857742][T11071] mmu_topup_memory_caches+0xbc/0x170 [ 182.857772][T11071] kvm_mmu_load+0xd6/0x23e0 [ 182.857795][T11071] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 182.857812][T11071] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 182.857828][T11071] ? kvm_msr_allowed+0x47/0x450 [ 182.857854][T11071] ? __pfx_kvm_mmu_load+0x10/0x10 [ 182.857876][T11071] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 182.857897][T11071] ? kvm_check_and_inject_events+0x961/0x10c0 [ 182.857927][T11071] vcpu_run+0x39ee/0x5ca0 [ 182.857955][T11071] ? __lock_acquire+0x4a5/0x2630 [ 182.857978][T11071] ? __pfx_vcpu_run+0x10/0x10 [ 182.858011][T11071] ? rcu_is_watching+0x12/0xc0 [ 182.858038][T11071] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 182.858062][T11071] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 182.858096][T11071] kvm_vcpu_ioctl+0x730/0x16d0 [ 182.858119][T11071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.858140][T11071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.858167][T11071] ? do_vfs_ioctl+0x226/0x13e0 [ 182.858185][T11071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.858201][T11071] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 182.858230][T11071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.858268][T11071] ? selinux_file_ioctl+0x139/0x290 [ 182.858286][T11071] ? selinux_file_ioctl+0xb4/0x290 [ 182.858307][T11071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.858328][T11071] __x64_sys_ioctl+0x18e/0x210 [ 182.858348][T11071] do_syscall_64+0xc9/0xf80 [ 182.858371][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.858389][T11071] RIP: 0033:0x7f3e7259aeb9 [ 182.858405][T11071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.858423][T11071] RSP: 002b:00007f3e707f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.858442][T11071] RAX: ffffffffffffffda RBX: 00007f3e72815fa0 RCX: 00007f3e7259aeb9 [ 182.858454][T11071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 182.858466][T11071] RBP: 00007f3e707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.858477][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.858488][T11071] R13: 00007f3e72816038 R14: 00007f3e72815fa0 R15: 00007fffd28f79e8 [ 182.858515][T11071] [ 183.069117][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'. [ 183.661232][T11108] FAULT_INJECTION: forcing a failure. [ 183.661232][T11108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.670117][T11108] CPU: 2 UID: 0 PID: 11108 Comm: syz.0.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.670144][T11108] Tainted: [L]=SOFTLOCKUP [ 183.670150][T11108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.670161][T11108] Call Trace: [ 183.670167][T11108] [ 183.670174][T11108] dump_stack_lvl+0x100/0x190 [ 183.670202][T11108] should_fail_ex.cold+0x5/0xa [ 183.670227][T11108] ? prepare_alloc_pages+0x16d/0x5f0 [ 183.670253][T11108] should_fail_alloc_page+0xeb/0x140 [ 183.670276][T11108] prepare_alloc_pages+0x1f0/0x5f0 [ 183.670299][T11108] ? rcu_is_watching+0x12/0xc0 [ 183.670323][T11108] __alloc_frozen_pages_noprof+0x193/0x2410 [ 183.670345][T11108] ? kasan_save_stack+0x3f/0x50 [ 183.670363][T11108] ? kasan_save_stack+0x30/0x50 [ 183.670379][T11108] ? kasan_save_track+0x14/0x30 [ 183.670397][T11108] ? __kasan_kmalloc+0xaa/0xb0 [ 183.670414][T11108] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 183.670432][T11108] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 183.670451][T11108] ? mmu_topup_memory_caches+0xbc/0x170 [ 183.670471][T11108] ? kvm_mmu_load+0xd6/0x23e0 [ 183.670489][T11108] ? vcpu_run+0x39ee/0x5ca0 [ 183.670510][T11108] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 183.670532][T11108] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 183.670547][T11108] ? __x64_sys_ioctl+0x18e/0x210 [ 183.670562][T11108] ? do_syscall_64+0xc9/0xf80 [ 183.670580][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.670600][T11108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.670633][T11108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.670659][T11108] ? policy_nodemask+0xed/0x4f0 [ 183.670683][T11108] alloc_pages_mpol+0x1fb/0x550 [ 183.670705][T11108] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 183.670726][T11108] ? trace_kmalloc+0x83/0xb0 [ 183.670745][T11108] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 183.670764][T11108] ? trace_kmem_cache_alloc+0x80/0xb0 [ 183.670790][T11108] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 183.670812][T11108] alloc_pages_noprof+0x131/0x390 [ 183.670834][T11108] get_free_pages_noprof+0x10/0xb0 [ 183.670855][T11108] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 183.670881][T11108] mmu_topup_memory_caches+0xbc/0x170 [ 183.670903][T11108] kvm_mmu_load+0xd6/0x23e0 [ 183.670923][T11108] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 183.670939][T11108] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 183.670954][T11108] ? kvm_msr_allowed+0x47/0x450 [ 183.670977][T11108] ? __pfx_kvm_mmu_load+0x10/0x10 [ 183.670998][T11108] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 183.671017][T11108] ? kvm_check_and_inject_events+0x961/0x10c0 [ 183.671043][T11108] vcpu_run+0x39ee/0x5ca0 [ 183.671069][T11108] ? __lock_acquire+0x4a5/0x2630 [ 183.671090][T11108] ? __pfx_vcpu_run+0x10/0x10 [ 183.671121][T11108] ? rcu_is_watching+0x12/0xc0 [ 183.671146][T11108] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 183.671168][T11108] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 183.671197][T11108] kvm_vcpu_ioctl+0x730/0x16d0 [ 183.671217][T11108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.671236][T11108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.671261][T11108] ? do_vfs_ioctl+0x226/0x13e0 [ 183.671278][T11108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.671292][T11108] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 183.671313][T11108] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 183.671347][T11108] ? selinux_file_ioctl+0x139/0x290 [ 183.671363][T11108] ? selinux_file_ioctl+0xb4/0x290 [ 183.671381][T11108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.671400][T11108] __x64_sys_ioctl+0x18e/0x210 [ 183.671419][T11108] do_syscall_64+0xc9/0xf80 [ 183.671438][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.671454][T11108] RIP: 0033:0x7f439bd9aeb9 [ 183.671469][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.671486][T11108] RSP: 002b:00007f439cce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.671502][T11108] RAX: ffffffffffffffda RBX: 00007f439c015fa0 RCX: 00007f439bd9aeb9 [ 183.671514][T11108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 183.671524][T11108] RBP: 00007f439cce2090 R08: 0000000000000000 R09: 0000000000000000 [ 183.671535][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.671544][T11108] R13: 00007f439c016038 R14: 00007f439c015fa0 R15: 00007ffdf590e1b8 [ 183.671568][T11108] [ 184.025218][T11124] veth1: entered promiscuous mode [ 184.029560][T11124] veth1: entered allmulticast mode [ 184.037611][T11121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1695'. [ 184.047370][T11124] evm: overlay not supported [ 184.091457][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 184.091475][ T40] audit: type=1400 audit(1769685889.351:54127): avc: denied { map } for pid=11129 comm="syz.1.1697" path="socket:[60354]" dev="sockfs" ino=60354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.103949][ T40] audit: type=1400 audit(1769685889.351:54128): avc: denied { read } for pid=11129 comm="syz.1.1697" path="socket:[60354]" dev="sockfs" ino=60354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.331206][T11144] FAULT_INJECTION: forcing a failure. [ 184.331206][T11144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.339445][T11144] CPU: 2 UID: 0 PID: 11144 Comm: syz.4.1703 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.339474][T11144] Tainted: [L]=SOFTLOCKUP [ 184.339481][T11144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.339491][T11144] Call Trace: [ 184.339498][T11144] [ 184.339505][T11144] dump_stack_lvl+0x100/0x190 [ 184.339535][T11144] should_fail_ex.cold+0x5/0xa [ 184.339561][T11144] ? prepare_alloc_pages+0x16d/0x5f0 [ 184.339589][T11144] should_fail_alloc_page+0xeb/0x140 [ 184.339614][T11144] prepare_alloc_pages+0x1f0/0x5f0 [ 184.339638][T11144] ? rcu_is_watching+0x12/0xc0 [ 184.339664][T11144] __alloc_frozen_pages_noprof+0x193/0x2410 [ 184.339687][T11144] ? kasan_save_stack+0x3f/0x50 [ 184.339707][T11144] ? kasan_save_stack+0x30/0x50 [ 184.339758][T11144] ? kasan_save_track+0x14/0x30 [ 184.339776][T11144] ? __kasan_kmalloc+0xaa/0xb0 [ 184.339795][T11144] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 184.339821][T11144] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 184.339841][T11144] ? mmu_topup_memory_caches+0xbc/0x170 [ 184.339863][T11144] ? kvm_mmu_load+0xd6/0x23e0 [ 184.339882][T11144] ? vcpu_run+0x39ee/0x5ca0 [ 184.339904][T11144] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.339927][T11144] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 184.339945][T11144] ? __x64_sys_ioctl+0x18e/0x210 [ 184.339960][T11144] ? do_syscall_64+0xc9/0xf80 [ 184.339978][T11144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.340000][T11144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 184.340039][T11144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.340067][T11144] ? policy_nodemask+0xed/0x4f0 [ 184.340092][T11144] alloc_pages_mpol+0x1fb/0x550 [ 184.340118][T11144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 184.340140][T11144] ? trace_kmalloc+0x83/0xb0 [ 184.340161][T11144] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 184.340181][T11144] ? trace_kmem_cache_alloc+0x80/0xb0 [ 184.340201][T11144] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 184.340226][T11144] alloc_pages_noprof+0x131/0x390 [ 184.340252][T11144] get_free_pages_noprof+0x10/0xb0 [ 184.340276][T11144] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 184.340305][T11144] mmu_topup_memory_caches+0xbc/0x170 [ 184.340330][T11144] kvm_mmu_load+0xd6/0x23e0 [ 184.340353][T11144] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 184.340371][T11144] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 184.340387][T11144] ? kvm_msr_allowed+0x47/0x450 [ 184.340412][T11144] ? __pfx_kvm_mmu_load+0x10/0x10 [ 184.340434][T11144] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 184.340456][T11144] ? kvm_check_and_inject_events+0x961/0x10c0 [ 184.340486][T11144] vcpu_run+0x39ee/0x5ca0 [ 184.340514][T11144] ? __lock_acquire+0x4a5/0x2630 [ 184.340537][T11144] ? __pfx_vcpu_run+0x10/0x10 [ 184.340571][T11144] ? rcu_is_watching+0x12/0xc0 [ 184.340598][T11144] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.340623][T11144] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.340656][T11144] kvm_vcpu_ioctl+0x730/0x16d0 [ 184.340678][T11144] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.340697][T11144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.340725][T11144] ? do_vfs_ioctl+0x226/0x13e0 [ 184.340743][T11144] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.340759][T11144] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 184.340782][T11144] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.340824][T11144] ? selinux_file_ioctl+0x139/0x290 [ 184.340842][T11144] ? selinux_file_ioctl+0xb4/0x290 [ 184.340861][T11144] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.340883][T11144] __x64_sys_ioctl+0x18e/0x210 [ 184.340902][T11144] do_syscall_64+0xc9/0xf80 [ 184.340924][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.340941][T11144] RIP: 0033:0x7f26f919aeb9 [ 184.340956][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.340972][T11144] RSP: 002b:00007f26fa0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.340990][T11144] RAX: ffffffffffffffda RBX: 00007f26f9415fa0 RCX: 00007f26f919aeb9 [ 184.341002][T11144] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 184.341014][T11144] RBP: 00007f26fa0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.341024][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.341035][T11144] R13: 00007f26f9416038 R14: 00007f26f9415fa0 R15: 00007fff5a7decc8 [ 184.341060][T11144] [ 184.606080][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 184.659670][T11168] openvswitch: netlink: Invalid VLAN frame [ 184.666351][ T40] audit: type=1400 audit(1769685889.931:54129): avc: denied { read } for pid=11167 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.740110][T11176] netlink: 'syz.0.1713': attribute type 11 has an invalid length. [ 184.775632][ T40] audit: type=1400 audit(1769685890.041:54130): avc: denied { map } for pid=11179 comm="syz.0.1714" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.780289][T11181] FAULT_INJECTION: forcing a failure. [ 184.780289][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 184.793302][T11181] CPU: 3 UID: 0 PID: 11181 Comm: syz.4.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.793328][T11181] Tainted: [L]=SOFTLOCKUP [ 184.793334][T11181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.793344][T11181] Call Trace: [ 184.793351][T11181] [ 184.793359][T11181] dump_stack_lvl+0x100/0x190 [ 184.793386][T11181] should_fail_ex.cold+0x5/0xa [ 184.793414][T11181] should_failslab+0xc2/0x120 [ 184.793436][T11181] __kvmalloc_node_noprof+0x101/0xac0 [ 184.793457][T11181] ? trace_kmem_cache_alloc+0x80/0xb0 [ 184.793477][T11181] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 184.793497][T11181] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 184.793522][T11181] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 184.793541][T11181] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 184.793566][T11181] mmu_topup_memory_caches+0x11a/0x170 [ 184.793590][T11181] kvm_mmu_load+0xd6/0x23e0 [ 184.793612][T11181] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 184.793629][T11181] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 184.793644][T11181] ? kvm_msr_allowed+0x47/0x450 [ 184.793667][T11181] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 184.793683][T11181] ? __pfx_kvm_mmu_load+0x10/0x10 [ 184.793704][T11181] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 184.793723][T11181] ? kvm_check_and_inject_events+0x961/0x10c0 [ 184.793750][T11181] vcpu_run+0x39ee/0x5ca0 [ 184.793783][T11181] ? __lock_acquire+0x4a5/0x2630 [ 184.793808][T11181] ? __pfx_vcpu_run+0x10/0x10 [ 184.793839][T11181] ? rcu_is_watching+0x12/0xc0 [ 184.793864][T11181] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.793891][T11181] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.793921][T11181] kvm_vcpu_ioctl+0x730/0x16d0 [ 184.793940][T11181] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.793959][T11181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.793985][T11181] ? do_vfs_ioctl+0x226/0x13e0 [ 184.794002][T11181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.794016][T11181] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 184.794038][T11181] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.794073][T11181] ? selinux_file_ioctl+0x139/0x290 [ 184.794088][T11181] ? selinux_file_ioctl+0xb4/0x290 [ 184.794107][T11181] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.794126][T11181] __x64_sys_ioctl+0x18e/0x210 [ 184.794165][T11181] do_syscall_64+0xc9/0xf80 [ 184.794186][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.794204][T11181] RIP: 0033:0x7f26f919aeb9 [ 184.794218][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.794234][T11181] RSP: 002b:00007f26fa085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.794252][T11181] RAX: ffffffffffffffda RBX: 00007f26f9416090 RCX: 00007f26f919aeb9 [ 184.794263][T11181] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 184.794273][T11181] RBP: 00007f26fa085090 R08: 0000000000000000 R09: 0000000000000000 [ 184.794283][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.794293][T11181] R13: 00007f26f9416128 R14: 00007f26f9416090 R15: 00007fff5a7decc8 [ 184.794317][T11181] [ 185.022145][ T1331] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 185.106830][T11191] FAULT_INJECTION: forcing a failure. [ 185.106830][T11191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.111374][T11191] CPU: 2 UID: 0 PID: 11191 Comm: syz.1.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.111392][T11191] Tainted: [L]=SOFTLOCKUP [ 185.111396][T11191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.111403][T11191] Call Trace: [ 185.111407][T11191] [ 185.111412][T11191] dump_stack_lvl+0x100/0x190 [ 185.111431][T11191] should_fail_ex.cold+0x5/0xa [ 185.111448][T11191] ? prepare_alloc_pages+0x16d/0x5f0 [ 185.111465][T11191] should_fail_alloc_page+0xeb/0x140 [ 185.111481][T11191] prepare_alloc_pages+0x1f0/0x5f0 [ 185.111497][T11191] ? rcu_is_watching+0x12/0xc0 [ 185.111514][T11191] __alloc_frozen_pages_noprof+0x193/0x2410 [ 185.111528][T11191] ? kasan_save_stack+0x3f/0x50 [ 185.111540][T11191] ? kasan_save_stack+0x30/0x50 [ 185.111552][T11191] ? kasan_save_track+0x14/0x30 [ 185.111564][T11191] ? __kasan_kmalloc+0xaa/0xb0 [ 185.111575][T11191] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 185.111587][T11191] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 185.111599][T11191] ? mmu_topup_memory_caches+0xbc/0x170 [ 185.111614][T11191] ? kvm_mmu_load+0xd6/0x23e0 [ 185.111626][T11191] ? vcpu_run+0x39ee/0x5ca0 [ 185.111641][T11191] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.111656][T11191] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 185.111666][T11191] ? __x64_sys_ioctl+0x18e/0x210 [ 185.111676][T11191] ? do_syscall_64+0xc9/0xf80 [ 185.111693][T11191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.111726][T11191] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.111749][T11191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.111779][T11191] ? policy_nodemask+0xed/0x4f0 [ 185.111796][T11191] alloc_pages_mpol+0x1fb/0x550 [ 185.111812][T11191] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.111826][T11191] ? trace_kmalloc+0x83/0xb0 [ 185.111840][T11191] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 185.111852][T11191] ? trace_kmem_cache_alloc+0x80/0xb0 [ 185.111866][T11191] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 185.111881][T11191] alloc_pages_noprof+0x131/0x390 [ 185.111897][T11191] get_free_pages_noprof+0x10/0xb0 [ 185.111912][T11191] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 185.111929][T11191] mmu_topup_memory_caches+0xbc/0x170 [ 185.111945][T11191] kvm_mmu_load+0xd6/0x23e0 [ 185.111959][T11191] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 185.111970][T11191] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.111980][T11191] ? kvm_msr_allowed+0x47/0x450 [ 185.111996][T11191] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.112010][T11191] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 185.112023][T11191] ? kvm_check_and_inject_events+0x961/0x10c0 [ 185.112041][T11191] vcpu_run+0x39ee/0x5ca0 [ 185.112059][T11191] ? __lock_acquire+0x4a5/0x2630 [ 185.112073][T11191] ? __pfx_vcpu_run+0x10/0x10 [ 185.112094][T11191] ? rcu_is_watching+0x12/0xc0 [ 185.112110][T11191] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.112125][T11191] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.112145][T11191] kvm_vcpu_ioctl+0x730/0x16d0 [ 185.112158][T11191] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.112171][T11191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.112188][T11191] ? do_vfs_ioctl+0x226/0x13e0 [ 185.112199][T11191] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.112208][T11191] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 185.112222][T11191] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.112244][T11191] ? selinux_file_ioctl+0x139/0x290 [ 185.112254][T11191] ? selinux_file_ioctl+0xb4/0x290 [ 185.112267][T11191] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.112279][T11191] __x64_sys_ioctl+0x18e/0x210 [ 185.112292][T11191] do_syscall_64+0xc9/0xf80 [ 185.112305][T11191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.112316][T11191] RIP: 0033:0x7f9c8579aeb9 [ 185.112326][T11191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.112336][T11191] RSP: 002b:00007f9c866d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.112347][T11191] RAX: ffffffffffffffda RBX: 00007f9c85a15fa0 RCX: 00007f9c8579aeb9 [ 185.112355][T11191] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.112361][T11191] RBP: 00007f9c866d7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.112368][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.112374][T11191] R13: 00007f9c85a16038 R14: 00007f9c85a15fa0 R15: 00007fffae382ad8 [ 185.112389][T11191] [ 185.134923][T11189] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 185.267256][T11189] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.1717'. [ 185.294441][ T1331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.297817][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.300659][ T1331] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.303745][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.308127][ T1331] usb 5-1: config 0 descriptor?? [ 185.313269][ T1331] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 185.316468][ T1331] dvb-usb: bulk message failed: -22 (3/0) [ 185.325085][ T1331] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 185.329580][ T1331] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 185.333035][ T1331] usb 5-1: media controller created [ 185.338225][ T1331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.357917][ T1331] dvb-usb: bulk message failed: -22 (6/0) [ 185.360591][ T1331] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 185.373477][ T1331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input26 [ 185.393763][ T1331] dvb-usb: schedule remote query interval to 150 msecs. [ 185.396704][ T1331] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 185.424102][T11200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1720'. [ 185.516491][T11180] dvb-usb: bulk message failed: -22 (2/0) [ 185.524456][ T34] usb 5-1: USB disconnect, device number 18 [ 185.536631][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1725'. [ 185.551113][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 185.662410][ T6007] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 185.821870][ T6007] usb 6-1: Using ep0 maxpacket: 16 [ 185.826379][ T6007] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.830138][ T6007] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.843567][ T6007] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.849287][ T6007] usb 6-1: config 1 interface 0 has no altsetting 0 [ 185.859332][ T6007] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.863460][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.865168][T11217] FAULT_INJECTION: forcing a failure. [ 185.865168][T11217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.867473][ T6007] usb 6-1: Product: syz [ 185.873693][T11217] CPU: 2 UID: 0 PID: 11217 Comm: syz.4.1727 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.873722][T11217] Tainted: [L]=SOFTLOCKUP [ 185.873729][T11217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.873740][T11217] Call Trace: [ 185.873756][T11217] [ 185.873764][T11217] dump_stack_lvl+0x100/0x190 [ 185.873810][T11217] should_fail_ex.cold+0x5/0xa [ 185.873837][T11217] ? prepare_alloc_pages+0x16d/0x5f0 [ 185.873864][T11217] should_fail_alloc_page+0xeb/0x140 [ 185.873889][T11217] prepare_alloc_pages+0x1f0/0x5f0 [ 185.873913][T11217] ? rcu_is_watching+0x12/0xc0 [ 185.873945][T11217] __alloc_frozen_pages_noprof+0x193/0x2410 [ 185.873966][T11217] ? kasan_save_stack+0x3f/0x50 [ 185.873986][T11217] ? kasan_save_stack+0x30/0x50 [ 185.874005][T11217] ? kasan_save_track+0x14/0x30 [ 185.874023][T11217] ? __kasan_kmalloc+0xaa/0xb0 [ 185.874042][T11217] ? __kvmalloc_node_noprof+0x34d/0xac0 [ 185.874062][T11217] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 185.874081][T11217] ? mmu_topup_memory_caches+0xbc/0x170 [ 185.874104][T11217] ? kvm_mmu_load+0xd6/0x23e0 [ 185.874124][T11217] ? vcpu_run+0x39ee/0x5ca0 [ 185.874146][T11217] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.874170][T11217] ? kvm_vcpu_ioctl+0x730/0x16d0 [ 185.874186][T11217] ? __x64_sys_ioctl+0x18e/0x210 [ 185.874202][T11217] ? do_syscall_64+0xc9/0xf80 [ 185.874227][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.874249][T11217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.874286][T11217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.874314][T11217] ? policy_nodemask+0xed/0x4f0 [ 185.874339][T11217] alloc_pages_mpol+0x1fb/0x550 [ 185.874365][T11217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.874388][T11217] ? trace_kmalloc+0x83/0xb0 [ 185.874409][T11217] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 185.874429][T11217] ? trace_kmem_cache_alloc+0x80/0xb0 [ 185.874449][T11217] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 185.874474][T11217] alloc_pages_noprof+0x131/0x390 [ 185.874498][T11217] get_free_pages_noprof+0x10/0xb0 [ 185.874521][T11217] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 185.874549][T11217] mmu_topup_memory_caches+0xbc/0x170 [ 185.874573][T11217] kvm_mmu_load+0xd6/0x23e0 [ 185.874596][T11217] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 185.874610][T11217] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.874623][T11217] ? kvm_msr_allowed+0x47/0x450 [ 185.874646][T11217] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.874669][T11217] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 185.874689][T11217] ? kvm_check_and_inject_events+0x961/0x10c0 [ 185.874718][T11217] vcpu_run+0x39ee/0x5ca0 [ 185.874745][T11217] ? __lock_acquire+0x4a5/0x2630 [ 185.874767][T11217] ? __pfx_vcpu_run+0x10/0x10 [ 185.874801][T11217] ? rcu_is_watching+0x12/0xc0 [ 185.874827][T11217] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.874851][T11217] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 185.874882][T11217] kvm_vcpu_ioctl+0x730/0x16d0 [ 185.874905][T11217] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.874924][T11217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.874957][T11217] ? do_vfs_ioctl+0x226/0x13e0 [ 185.874976][T11217] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.874989][T11217] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 185.875020][T11217] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.875056][T11217] ? selinux_file_ioctl+0x139/0x290 [ 185.875074][T11217] ? selinux_file_ioctl+0xb4/0x290 [ 185.875094][T11217] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.875114][T11217] __x64_sys_ioctl+0x18e/0x210 [ 185.875134][T11217] do_syscall_64+0xc9/0xf80 [ 185.875155][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.875174][T11217] RIP: 0033:0x7f26f919aeb9 [ 185.875188][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.875206][T11217] RSP: 002b:00007f26fa0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.875224][T11217] RAX: ffffffffffffffda RBX: 00007f26f9415fa0 RCX: 00007f26f919aeb9 [ 185.875235][T11217] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.875247][T11217] RBP: 00007f26fa0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.875257][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.875268][T11217] R13: 00007f26f9416038 R14: 00007f26f9415fa0 R15: 00007fff5a7decc8 [ 185.875293][T11217] [ 185.918138][T11220] ªªªªªª speed is unknown, defaulting to 1000 [ 185.920935][ T6007] usb 6-1: Manufacturer: syz [ 186.069084][ T6007] usb 6-1: SerialNumber: syz [ 186.070658][ T40] audit: type=1400 audit(1769685891.331:54131): avc: denied { map } for pid=11224 comm="syz.0.1729" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 186.193375][ T40] audit: type=1400 audit(1769685891.461:54132): avc: denied { write } for pid=11236 comm="syz.0.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.202560][T11237] overlayfs: missing 'workdir' [ 186.205615][T11237] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 186.214465][ T40] audit: type=1400 audit(1769685891.481:54133): avc: denied { map } for pid=11234 comm="syz.4.1733" path="socket:[61712]" dev="sockfs" ino=61712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.223050][ T40] audit: type=1400 audit(1769685891.481:54134): avc: denied { read accept } for pid=11234 comm="syz.4.1733" path="socket:[61712]" dev="sockfs" ino=61712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.279508][T11239] vivid-000: ================= START STATUS ================= [ 186.287591][T11239] vivid-000: Test Pattern: 100% Colorbar [ 186.290447][T11239] vivid-000: Fill Percentage of Frame: 100 [ 186.291293][ T6007] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 186.292347][T11239] vivid-000: Horizontal Movement: No Movement [ 186.292379][T11239] vivid-000: Vertical Movement: No Movement [ 186.292392][T11239] vivid-000: OSD Text Mode: Counters Only [ 186.292405][T11239] vivid-000: Show Border: false [ 186.292417][T11239] vivid-000: Show Square: false [ 186.292431][T11239] vivid-000: Sensor Flipped Horizontally: false [ 186.292444][T11239] vivid-000: Sensor Flipped Vertically: false [ 186.292457][T11239] vivid-000: Insert SAV Code in Image: false [ 186.292469][T11239] vivid-000: Insert EAV Code in Image: false [ 186.292482][T11239] vivid-000: Insert Video Guard Band: false [ 186.292494][T11239] vivid-000: Reduced Framerate: false [ 186.292506][T11239] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 186.292530][T11239] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 186.292543][T11239] vivid-000: Enable Capture Cropping: true grabbed [ 186.292559][T11239] vivid-000: Enable Capture Composing: true grabbed [ 186.292574][T11239] vivid-000: Enable Capture Scaler: true grabbed [ 186.292590][T11239] vivid-000: Timestamp Source: Start of Exposure [ 186.292603][T11239] vivid-000: Colorspace: sRGB [ 186.292616][T11239] vivid-000: Transfer Function: Default [ 186.292629][T11239] vivid-000: Y'CbCr Encoding: Default [ 186.292642][T11239] vivid-000: HSV Encoding: Hue 0-179 [ 186.292654][T11239] vivid-000: Quantization: Default [ 186.351502][T11239] vivid-000: Apply Alpha To Red Only: false [ 186.354887][T11239] vivid-000: Standard Aspect Ratio: 4x3 [ 186.357144][T11239] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 186.360209][T11239] vivid-000: DV Timings: 640x480p59 inactive [ 186.363145][T11239] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 186.366207][T11239] vivid-000: Maximum EDID Blocks: 2 [ 186.368396][T11239] vivid-000: Limited RGB Range (16-235): false [ 186.370972][T11239] vivid-000: Rx RGB Quantization Range: Automatic [ 186.374241][T11239] vivid-000: Power Present: 0x00000001 [ 186.376502][T11239] tpg source WxH: 320x240 (Y'CbCr) [ 186.378688][T11239] tpg field: 1 [ 186.380024][T11239] tpg crop: (0,0)/320x240 [ 186.381974][T11239] tpg compose: (0,0)/320x240 [ 186.383892][T11239] tpg colorspace: 8 [ 186.385557][T11239] tpg transfer function: 0/2 [ 186.387640][T11239] tpg Y'CbCr encoding: 0/1 [ 186.389532][T11239] tpg quantization: 0/2 [ 186.391132][T11239] tpg RGB range: 0/2 [ 186.392591][T11239] vivid-000: ================== END STATUS ================== [ 186.494951][ T6017] usb 6-1: USB disconnect, device number 10 [ 186.500902][ T6017] usblp0: removed [ 186.596789][T11268] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 186.740860][T11280] Unknown options in mask b7f2 [ 186.911554][ T40] audit: type=1400 audit(1769685892.171:54135): avc: denied { connect } for pid=11304 comm="syz.0.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.917553][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 186.947342][T11310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.949794][ T6017] IPVS: starting estimator thread 0... [ 187.035759][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1759'. [ 187.042465][T11311] IPVS: using max 44 ests per chain, 105600 per kthread [ 187.054405][T11314] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 187.133903][T11321] netlink: 'syz.4.1761': attribute type 21 has an invalid length. [ 187.254243][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 187.300945][T11332] Cannot find add_set index 3 as target [ 187.398668][T11337] unsupported nla_type 4111 [ 187.503125][T11344] tmpfs: Unknown parameter '4a:u' [ 187.636759][ T40] audit: type=1400 audit(1769685892.901:54136): avc: denied { ioctl } for pid=11355 comm="syz.3.1776" path="socket:[61837]" dev="sockfs" ino=61837 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.675388][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 187.874624][T11371] binder: 11369:11371 unknown command 0 [ 187.876414][T11371] binder: 11369:11371 ioctl c0306201 200000000080 returned -22 [ 187.925320][T11375] netfs: Couldn't get user pages (rc=-14) [ 188.128992][T11387] tipc: Started in network mode [ 188.130585][T11387] tipc: Node identity 7f000001, cluster identity 4711 [ 188.133827][T11387] tipc: Enabled bearer , priority 10 [ 188.138723][T11387] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 188.141712][T11387] tipc: Enabled bearer , priority 10 [ 188.456437][T11395] random: crng reseeded on system resumption [ 188.468483][T11395] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 188.471082][T11395] dvmrp1: linktype set to 23 [ 188.636502][T11402] QAT: Invalid ioctl 37934 [ 188.727112][T11412] ./file0: Can't lookup blockdev [ 188.763898][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 188.794037][T11416] netfs: Couldn't get user pages (rc=-14) [ 188.806938][T11422] netlink: 'syz.1.1800': attribute type 2 has an invalid length. [ 188.815933][T11422] !: entered promiscuous mode [ 188.822120][T11422] netlink: 'syz.1.1800': attribute type 2 has an invalid length. [ 188.825644][T11422] !: left promiscuous mode [ 189.025370][ T34] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 189.194316][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 189.215692][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 189.222266][ T34] usb 9-1: too many configurations: 254, using maximum allowed: 8 [ 189.226174][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 189.228766][ T34] usb 9-1: can't read configurations, error -71 [ 189.255739][ T6007] tipc: Node number set to 2130706433 [ 189.760940][T11467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=11467 comm=syz.4.1814 [ 189.806595][T11469] xt_nfacct: accounting object `syz0' does not exist [ 189.850003][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1817'. [ 190.093833][T11500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1827'. [ 190.098058][T11500] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 190.107615][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.111190][T11500] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.116235][T11500] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 190.118695][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1827'. [ 190.121672][T11500] batadv0: entered promiscuous mode [ 190.124324][T11500] batadv0: entered allmulticast mode [ 190.126879][T11500] bond0: (slave batadv0): Releasing backup interface [ 190.131261][T11500] bridge0: port 4(batadv0) entered blocking state [ 190.133959][T11500] bridge0: port 4(batadv0) entered disabled state [ 190.234901][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 190.238038][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 190.238048][ T40] audit: type=1400 audit(1769685895.501:54144): avc: denied { bind } for pid=11501 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.512178][T11514] netfs: Couldn't get user pages (rc=-14) [ 190.641970][ T7314] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 190.645920][ T7314] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 190.695693][T11518] bond2: option arp_validate: invalid value (2048) [ 190.702570][T11518] bond2 (unregistering): Released all slaves [ 190.867913][ T40] audit: type=1400 audit(1769685896.131:54145): avc: denied { read } for pid=11524 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.993731][ T40] audit: type=1400 audit(1769685896.261:54146): avc: denied { getopt } for pid=11521 comm="syz.4.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.065033][T11546] ªªªªªª speed is unknown, defaulting to 1000 [ 191.110121][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1845'. [ 191.234662][T11561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11561 comm=syz.1.1848 [ 191.235904][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 191.243892][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 191.410355][T11573] bridge_slave_0: left allmulticast mode [ 191.421141][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.461831][T11580] netfs: Couldn't get user pages (rc=-14) [ 191.591618][T11595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'. [ 191.864097][ T40] audit: type=1400 audit(1769685897.131:54147): avc: denied { write } for pid=11605 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.869295][T11606] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 191.874773][T11606] UDF-fs: Scanning with blocksize 2048 failed [ 191.877703][T11606] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 191.880077][T11606] UDF-fs: Scanning with blocksize 4096 failed [ 191.892244][ T6017] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 191.956467][T11614] netfs: Couldn't get user pages (rc=-14) [ 192.073713][ T6017] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 192.076696][ T6017] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 192.080145][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 192.083986][ T6017] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 192.088536][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 192.092626][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.096892][ T6017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 192.105357][ T6017] usb 5-1: string descriptor 0 read error: -22 [ 192.108165][ T6017] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 192.111738][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.118067][ T6017] usb 5-1: config 0 descriptor?? [ 192.123376][ T6017] hub 5-1:0.0: bad descriptor, ignoring hub [ 192.125843][ T6017] hub 5-1:0.0: probe with driver hub failed with error -5 [ 192.134400][ T6017] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input28 [ 192.416253][ T60] usb 5-1: USB disconnect, device number 19 [ 192.900565][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.936809][T11630] bridge_slave_0 (unregistering): left allmulticast mode [ 192.939054][T11630] bridge_slave_0 (unregistering): left promiscuous mode [ 192.941295][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.958202][ T40] audit: type=1400 audit(1769685898.221:54148): avc: denied { listen } for pid=11636 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 192.977262][ T40] audit: type=1400 audit(1769685898.241:54149): avc: denied { write } for pid=11638 comm="syz.1.1876" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 193.080900][ T9] IPVS: starting estimator thread 0... [ 193.083306][T11648] sctp: [Deprecated]: syz.1.1878 (pid 11648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.083306][T11648] Use struct sctp_sack_info instead [ 193.173335][T11650] IPVS: using max 29 ests per chain, 69600 per kthread [ 193.638124][ T40] audit: type=1400 audit(1769685898.901:54150): avc: denied { connect } for pid=11674 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.874000][T11695] __nla_validate_parse: 6 callbacks suppressed [ 193.874018][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 193.926881][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 193.931907][T11700] team_slave_0: entered allmulticast mode [ 193.939140][T11700] team_slave_0: entered promiscuous mode [ 194.125049][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.128216][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.131374][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.143723][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.146899][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.150115][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.154190][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.157333][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.160438][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.164448][ T6017] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 194.195291][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.195303][ T6017] hid-generic 0005:00B6:0009.0005: hidraw2: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 194.266251][T11708] fido_id[11708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.284850][T11712] dlm: plock device version mismatch: kernel (1.2.0), user (3.0.0) [ 194.288116][ T5952] Bluetooth: hci2: Invalid handle: 0xfe00 > 0x0eff [ 194.300483][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.401528][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.484854][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.589795][ T12] bridge_slave_1: left allmulticast mode [ 194.595082][ T12] bridge_slave_1: left promiscuous mode [ 194.599198][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.606104][ T12] bridge_slave_0: left allmulticast mode [ 194.608975][ T12] bridge_slave_0: left promiscuous mode [ 194.611487][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.705963][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 194.789439][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 194.835952][T11731] comedi comedi3: mpc624: I/O port conflict (0x4f27,16) [ 194.877963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.883204][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.890601][ T12] bond0 (unregistering): Released all slaves [ 195.317260][T11766] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 195.329890][T11764] netfs: Couldn't get user pages (rc=-14) [ 195.438966][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 195.469137][ T12] hsr_slave_0: left promiscuous mode [ 195.479956][ T12] hsr_slave_1: left promiscuous mode [ 195.490813][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.495510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.502792][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.523993][ T12] veth1_macvtap: left promiscuous mode [ 195.526294][ T12] veth0_macvtap: left promiscuous mode [ 195.532174][ T12] veth1_vlan: left promiscuous mode [ 195.535025][ T12] veth0_vlan: left promiscuous mode [ 195.989598][ T12] team0 (unregistering): Port device team_slave_1 removed [ 196.020477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 196.334358][ T40] audit: type=1400 audit(1769685901.601:54151): avc: denied { nlmsg_read } for pid=11803 comm="syz.3.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 196.393186][T11812] openvswitch: netlink: Key type 58 is out of range max 32 [ 196.396213][T11814] openvswitch: netlink: Key type 58 is out of range max 32 [ 196.427583][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 196.427583][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 196.427635][T11814] netlink: 'syz.0.1924': attribute type 30 has an invalid length. [ 196.430414][T11812] netlink: 'syz.0.1924': attribute type 30 has an invalid length. [ 196.531891][T11832] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1929'. [ 196.535729][T11832] xt_socket: unknown flags 0xd0 [ 196.580219][ T40] audit: type=1400 audit(1769685901.841:54152): avc: denied { bind } for pid=11839 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.852344][ T6007] page_pool_release_retry() stalled pool shutdown: id 25, 51 inflight 121 sec [ 196.987721][T11854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 196.991409][T11855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 197.493118][T11869] xt_bpf: check failed: parse error [ 197.496714][T11875] sp0: Synchronizing with TNC [ 197.511713][ T40] audit: type=1400 audit(1769685902.771:54153): avc: denied { write } for pid=11870 comm="syz.1.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.550024][T11881] syzkaller1: entered promiscuous mode [ 197.551982][T11881] syzkaller1: entered allmulticast mode [ 197.561978][T11884] binder: 11883:11884 ioctl c0306201 0 returned -14 [ 197.565063][T11884] binder: 11883:11884 ioctl c0306201 200000000300 returned -11 [ 197.593185][T11886] binder: 11883:11886 ioctl c0306201 0 returned -14 [ 197.627656][T11889] Unsupported ieee802154 address type: 0 [ 197.737661][ T40] audit: type=1400 audit(1769685903.001:54154): avc: denied { accept } for pid=11891 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.904252][T11896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.906498][T11896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.606635][ T40] audit: type=1326 audit(1769685903.871:54155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.1.1950" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c8579aeb9 code=0x0 [ 198.951908][ T6007] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 199.026308][T11920] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 199.030416][T11920] netlink: 'syz.4.1952': attribute type 2 has an invalid length. [ 199.088407][T11921] fuse: Bad value for 'user_id' [ 199.090514][T11921] fuse: Bad value for 'user_id' [ 199.104343][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.108677][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.112821][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.118013][ T6007] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.121601][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.127710][ T6007] usb 6-1: config 0 descriptor?? [ 199.255214][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.257803][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.982171][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.982281][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.983917][T11902] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 199.989427][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.616110][ T6007] usbhid 6-1:0.0: can't add hid device: -71 [ 201.618121][ T6007] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.623012][ T6007] usb 6-1: USB disconnect, device number 11 [ 201.885638][T11933] __nla_validate_parse: 8 callbacks suppressed [ 201.885655][T11933] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1956'. [ 202.052231][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.054952][T11902] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 202.098324][ T40] audit: type=1400 audit(1769685907.361:54156): avc: denied { listen } for pid=11936 comm="syz.0.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.306006][T11951] cgroup: Unknown subsys name 'cpuset' [ 202.363682][T11956] tmpfs: Bad value for 'mpol' [ 202.367264][T11956] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 202.716570][T11962] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1966'. [ 202.834104][T11966] cdrom: dropping to single frame dma [ 203.148425][T11977] fuse: Bad value for 'group_id' [ 203.150647][T11977] fuse: Bad value for 'group_id' [ 203.219106][T11980] bridge_slave_0 (unregistering): left allmulticast mode [ 203.223951][T11980] bridge_slave_0 (unregistering): left promiscuous mode [ 203.227007][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.317865][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 203.385374][T11988] hsr_slave_1 (unregistering): left promiscuous mode [ 203.394972][T11995] netlink: 'syz.0.1976': attribute type 5 has an invalid length. [ 203.398737][T11995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11995 comm=syz.0.1976 [ 203.399192][ T40] audit: type=1400 audit(1769685908.661:54157): avc: denied { shutdown } for pid=11997 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.447752][T11999] netlink: 'syz.4.1974': attribute type 2 has an invalid length. [ 203.450361][T11999] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 203.533978][ T40] audit: type=1400 audit(1769685908.801:54158): avc: denied { accept } for pid=12001 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.543345][ T40] audit: type=1400 audit(1769685908.811:54159): avc: denied { setattr } for pid=12001 comm="syz.0.1979" name="UDP-Lite" dev="sockfs" ino=67726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.601504][ T40] audit: type=1800 audit(1769685908.861:54160): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1979" name="/" dev="sockfs" ino=67726 res=0 errno=0 [ 203.638629][T12008] syz_tun: left allmulticast mode [ 203.640313][T12008] syz_tun: left promiscuous mode [ 203.645880][T12008] bridge0: port 3(syz_tun) entered disabled state [ 203.656106][T12008] bridge0: port 4(batadv0) entered disabled state [ 203.669717][T12008] bridge_slave_1: left allmulticast mode [ 203.672525][T12008] bridge_slave_1: left promiscuous mode [ 203.675132][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.684701][T12008] bond0: (slave bond_slave_0): Releasing backup interface [ 203.693449][T12008] bond0: (slave bond_slave_1): Releasing backup interface [ 203.705584][T12008] team0: Port device team_slave_0 removed [ 203.711300][T12008] team0: Port device team_slave_1 removed [ 203.714419][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.716828][T12008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.720406][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.723605][T12008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.727908][T12008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.762262][T12011] team0: Mode changed to "activebackup" [ 203.766134][T12008] vlan0: entered promiscuous mode [ 203.777603][T12008] team0: Port device vlan0 added [ 203.788015][ T5294] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 203.789329][T12008] tipc: Started in network mode [ 203.794601][T12008] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 203.797776][T12008] tipc: Enabled bearer , priority 0 [ 203.841633][T12013] syzkaller1: entered promiscuous mode [ 203.843920][T12013] syzkaller1: entered allmulticast mode [ 203.864330][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 203.937382][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 203.989113][T12027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12027 comm=syz.3.1987 [ 204.050967][ T40] audit: type=1400 audit(1769685909.311:54161): avc: denied { mounton } for pid=12026 comm="syz.1.1989" path="/proc/1437/task/1438/net" dev="proc" ino=65996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 204.061407][T12036] hsr0: entered promiscuous mode [ 204.064702][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 204.066061][ T40] audit: type=1400 audit(1769685909.331:54162): avc: denied { write } for pid=12029 comm="syz.0.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.077670][T12036] hsr_slave_0: left promiscuous mode [ 204.080318][T12036] hsr_slave_1: left promiscuous mode [ 204.098586][T12036] hsr0 (unregistering): left promiscuous mode [ 204.793505][ T6017] tipc: Node number set to 11578026 [ 205.001565][ T40] audit: type=1400 audit(1769685910.261:54163): avc: denied { validate_trans } for pid=12059 comm="syz.4.1998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 205.236577][ T40] audit: type=1400 audit(1769685910.501:54164): avc: denied { execute } for pid=12074 comm="syz.3.2004" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 205.237138][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'. [ 205.249608][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'. [ 205.423319][ T40] audit: type=1400 audit(1769685910.691:54165): avc: denied { setattr } for pid=12081 comm="syz.3.2006" name="tty27" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 205.900166][T12106] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 205.904231][T12104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2014'. [ 206.262881][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 206.658651][T12141] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 206.707692][T12139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12139 comm=syz.4.2024 [ 206.884132][T12151] : entered promiscuous mode [ 206.962051][ T60] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 207.114805][ T60] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 207.118088][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.123298][ T60] usb 5-1: config 0 has no interface number 0 [ 207.126408][ T60] usb 5-1: config 0 interface 205 has no altsetting 0 [ 207.137602][ T60] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 207.140778][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.152525][ T60] usb 5-1: Product: syz [ 207.154195][ T60] usb 5-1: Manufacturer: syz [ 207.156950][ T60] usb 5-1: SerialNumber: syz [ 207.159144][T12167] __nla_validate_parse: 2 callbacks suppressed [ 207.159159][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2031'. [ 207.173336][ T60] usb 5-1: config 0 descriptor?? [ 207.176210][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2031'. [ 207.178302][ T60] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 207.188917][ T60] dvb-usb: bulk message failed: -22 (3/0) [ 207.219355][ T60] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 207.227627][ T60] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 207.232874][ T60] usb 5-1: media controller created [ 207.243540][ T60] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.280750][ T60] dvb-usb: bulk message failed: -22 (6/0) [ 207.291593][ T60] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 207.310104][ T60] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input30 [ 207.317654][ T60] dvb-usb: schedule remote query interval to 150 msecs. [ 207.320619][ T60] dvb-usb: bulk message failed: -22 (3/0) [ 207.342560][ T60] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 207.383639][ T60] usb 5-1: USB disconnect, device number 20 [ 207.408775][ T60] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 207.959702][T12208] ªªªªªª speed is unknown, defaulting to 1000 [ 208.310624][ T5294] block nbd3: Receive control failed (result -32) [ 208.321232][T12199] block nbd3: shutting down sockets [ 208.418755][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 208.553091][T12235] bridge_slave_0: left allmulticast mode [ 208.555659][T12235] bridge_slave_0: left promiscuous mode [ 208.558457][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.565989][T12235] bridge_slave_1: left allmulticast mode [ 208.568344][T12235] bridge_slave_1: left promiscuous mode [ 208.570816][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.579932][T12235] bond0: (slave bond_slave_0): Releasing backup interface [ 208.585543][T12235] bond0: (slave bond_slave_1): Releasing backup interface [ 208.599056][T12235] team0: Port device team_slave_0 removed [ 208.606528][T12235] team0: Port device team_slave_1 removed [ 208.609664][T12235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.615328][T12235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.619808][T12235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.623166][T12235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.636312][T12235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.645054][ T60] ªªªªªª speed is unknown, defaulting to 1000 [ 208.655393][T12236] team0: Mode changed to "loadbalance" [ 208.679339][T12235] netfs: Couldn't get user pages (rc=-14) [ 208.721950][ T6017] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 208.813696][T12244] netlink: 'syz.3.2049': attribute type 58 has an invalid length. [ 208.849974][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 208.849989][ T40] audit: type=1400 audit(1769685914.111:54173): avc: denied { append } for pid=12247 comm="syz.3.2053" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 208.882805][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 208.893327][ T6017] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.898250][T12250] FAULT_INJECTION: forcing a failure. [ 208.898250][T12250] name failslab, interval 1, probability 0, space 0, times 0 [ 208.904694][ T6017] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.906440][T12250] CPU: 3 UID: 0 PID: 12250 Comm: syz.4.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.906468][T12250] Tainted: [L]=SOFTLOCKUP [ 208.906474][T12250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.906485][T12250] Call Trace: [ 208.906492][T12250] [ 208.906499][T12250] dump_stack_lvl+0x100/0x190 [ 208.906529][T12250] should_fail_ex.cold+0x5/0xa [ 208.906561][T12250] should_failslab+0xc2/0x120 [ 208.906585][T12250] ? p9_fcall_init+0x101/0x420 [ 208.906606][T12250] __kmalloc_noprof+0xf6/0x9c0 [ 208.906633][T12250] ? p9_fcall_init+0x101/0x420 [ 208.906653][T12250] p9_fcall_init+0x101/0x420 [ 208.906678][T12250] p9_tag_alloc+0x16c/0x860 [ 208.906704][T12250] ? __pfx_p9_tag_alloc+0x10/0x10 [ 208.906725][T12250] ? stack_depot_save_flags+0x27/0x9c0 [ 208.906761][T12250] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 208.906781][T12250] ? kasan_save_stack+0x3f/0x50 [ 208.906806][T12250] p9_client_prepare_req+0x19b/0x4a0 [ 208.906831][T12250] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 208.906858][T12250] ? __lock_acquire+0x4a5/0x2630 [ 208.906883][T12250] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 208.906901][T12250] p9_client_rpc+0x1c4/0xc80 [ 208.906928][T12250] ? __pfx_p9_client_rpc+0x10/0x10 [ 208.906953][T12250] ? idr_alloc_u32+0x22b/0x320 [ 208.906975][T12250] ? __pfx_idr_alloc_u32+0x10/0x10 [ 208.906991][T12250] ? do_raw_spin_lock+0x128/0x260 [ 208.907014][T12250] ? find_held_lock+0x2b/0x80 [ 208.907036][T12250] ? p9_fid_create+0x26d/0x460 [ 208.907057][T12250] ? p9_fid_create+0x26d/0x460 [ 208.907082][T12250] ? trace_9p_fid_ref+0x70/0x1b0 [ 208.907106][T12250] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 208.907126][T12250] p9_client_xattrwalk+0xc0/0x2a0 [ 208.907156][T12250] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 208.907174][T12250] v9fs_fid_xattr_get+0x10f/0x300 [ 208.907194][T12250] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 208.907224][T12250] ? v9fs_fid_lookup+0xec/0xec0 [ 208.907248][T12250] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 208.907266][T12250] v9fs_xattr_handler_get+0x6b/0x120 [ 208.907288][T12250] __vfs_getxattr+0x13d/0x1a0 [ 208.907312][T12250] ? __pfx___vfs_getxattr+0x10/0x10 [ 208.907340][T12250] cap_inode_need_killpriv+0x40/0x60 [ 208.907368][T12250] security_inode_need_killpriv+0x87/0x1e0 [ 208.907389][T12250] file_remove_privs_flags+0x2b8/0x590 [ 208.907418][T12250] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 208.907446][T12250] ? generic_write_checks+0x321/0x490 [ 208.907467][T12250] ? __pfx_generic_write_checks+0x10/0x10 [ 208.907514][T12250] netfs_unbuffered_write_iter+0x1c9/0x6a0 [ 208.907547][T12250] v9fs_file_write_iter+0xbf/0x100 [ 208.907575][T12250] vfs_write+0x6ac/0x1070 [ 208.907597][T12250] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 208.907626][T12250] ? __pfx_vfs_write+0x10/0x10 [ 208.907644][T12250] ? find_held_lock+0x2b/0x80 [ 208.907684][T12250] ksys_write+0x12a/0x250 [ 208.907705][T12250] ? __pfx_ksys_write+0x10/0x10 [ 208.907738][T12250] do_syscall_64+0xc9/0xf80 [ 208.907762][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.907780][T12250] RIP: 0033:0x7f26f919aeb9 [ 208.907797][T12250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.907813][T12250] RSP: 002b:00007f26fa0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.907832][T12250] RAX: ffffffffffffffda RBX: 00007f26f9415fa0 RCX: 00007f26f919aeb9 [ 208.907843][T12250] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 208.907854][T12250] RBP: 00007f26fa0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.907881][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.907891][T12250] R13: 00007f26f9416038 R14: 00007f26f9415fa0 R15: 00007fff5a7decc8 [ 208.907917][T12250] [ 208.909459][T12250] netfs: Couldn't get user pages (rc=-14) [ 208.913743][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.917816][T12253] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 208.918696][ T6017] usb 5-1: Product: syz [ 208.957226][T12253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.958032][ T6017] usb 5-1: Manufacturer: syz [ 208.965497][T12254] vlan2: entered allmulticast mode [ 208.967136][ T6017] usb 5-1: SerialNumber: syz [ 208.968916][T12254] vlan1: entered allmulticast mode [ 208.973476][ T6017] usb 5-1: config 0 descriptor?? [ 208.977604][T12254] veth0_vlan: entered allmulticast mode [ 208.980509][T12231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.983758][T12254] bond2: (slave vlan2): Opening slave failed [ 209.147284][ T40] audit: type=1400 audit(1769685914.411:54174): avc: denied { read } for pid=12260 comm="syz.3.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.219674][ T40] audit: type=1400 audit(1769685914.481:54175): avc: denied { setopt } for pid=12260 comm="syz.3.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.257307][T12267] netlink: 'syz.4.2059': attribute type 30 has an invalid length. [ 209.277294][T12270] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 209.278671][T12267] bond2: option arp_missed_max: invalid value (0) [ 209.282298][T12267] bond2: option arp_missed_max: allowed values 1 - 255 [ 209.285917][T12267] bond2 (unregistering): Released all slaves [ 209.328894][T12270] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.338849][T12270] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 209.345687][T12270] bond3: (slave vxcan3): making interface the new active one [ 209.349666][T12270] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 209.357185][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 209.364025][T12270] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 209.368870][T12270] bond3 (unregistering): Released all slaves [ 209.507075][T12287] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 209.539412][T12287] bond3: entered promiscuous mode [ 209.543651][T12287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.592004][T12295] netlink: 'syz.3.2066': attribute type 28 has an invalid length. [ 209.658440][ T40] audit: type=1400 audit(1769685914.921:54176): avc: denied { watch watch_reads } for pid=12298 comm="syz.4.2068" path="/442/file0/file0" dev="9p" ino=72613907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.694662][T12299] netfs: Couldn't get user pages (rc=-14) [ 209.736145][T12293] syz.3.2066 (12293): drop_caches: 1 [ 209.833928][T12302] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 209.849740][ T40] audit: type=1400 audit(1769685915.111:54177): avc: denied { connect } for pid=12307 comm="syz.4.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.880015][T12308] netlink: 'syz.4.2072': attribute type 4 has an invalid length. [ 209.888084][T12308] xt_hashlimit: overflow, rate too high: 0 [ 209.984358][ T40] audit: type=1400 audit(1769685915.251:54178): avc: denied { checkpoint_restore } for pid=12312 comm="syz.4.2074" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.004474][ T40] audit: type=1400 audit(1769685915.271:54179): avc: denied { shutdown } for pid=12312 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.405636][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 210.555588][T12326] syzkaller0: entered promiscuous mode [ 210.557941][T12326] syzkaller0: entered allmulticast mode [ 210.769811][T12331] netfs: Couldn't get user pages (rc=-14) [ 210.851691][T12333] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2079'. [ 211.004760][T12337] bond0: entered allmulticast mode [ 211.010737][T12336] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 211.344597][T12343] rdma_op ffff8880555ff1f0 conn xmit_rdma 0000000000000000 [ 211.489182][ T1331] usb 5-1: USB disconnect, device number 21 [ 211.864499][ T40] audit: type=1400 audit(1769685917.131:54180): avc: denied { setattr } for pid=5937 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.902108][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.912203][T12389] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 211.941696][ T40] audit: type=1400 audit(1769685917.201:54181): avc: denied { write } for pid=12385 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.025688][T12394] loop7: detected capacity change from 0 to 2640 [ 212.033009][ T9324] buffer_io_error: 251 callbacks suppressed [ 212.033024][ T9324] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.102377][T12394] loop7: detected capacity change from 2640 to 524287944 [ 212.106386][ T9324] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.112308][ T9324] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.122156][ T9324] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.125702][ T9324] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.149665][ T9324] Buffer I/O error on dev loop7, logical block 32767996, async page read [ 212.297120][T12405] syzkaller1: entered promiscuous mode [ 212.301986][T12405] syzkaller1: entered allmulticast mode [ 212.391747][ T40] audit: type=1400 audit(1769685917.651:54182): avc: denied { setattr } for pid=12408 comm="syz.3.2103" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.876346][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 213.140415][T12445] netfs: Couldn't get user pages (rc=-14) [ 213.240424][T12446] xt_bpf: check failed: parse error [ 214.236702][T12466] vxfs: unable to read disk superblock at 1 [ 214.239958][T12466] vxfs: unable to read disk superblock at 8 [ 214.243196][T12466] vxfs: can't find superblock. [ 214.337239][T12472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 214.339974][T12472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.346455][T12472] vhci_hcd vhci_hcd.0: Device attached [ 214.351981][T12473] vhci_hcd: connection closed [ 214.352463][ T7119] vhci_hcd vhci_hcd.0: stop threads [ 214.356243][ T7119] vhci_hcd vhci_hcd.0: release socket [ 214.358025][ T7119] vhci_hcd vhci_hcd.0: disconnect device [ 215.226026][T12485] netfs: Couldn't get user pages (rc=-14) [ 215.329623][T12497] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 215.349652][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 215.349668][ T40] audit: type=1400 audit(1769685920.611:54185): avc: denied { create } for pid=12496 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.396235][ T40] audit: type=1400 audit(1769685920.661:54186): avc: denied { getopt } for pid=12498 comm="syz.4.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.397204][T12499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12499 comm=syz.4.2131 [ 215.413165][ T40] audit: type=1400 audit(1769685920.681:54187): avc: denied { write } for pid=12496 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.413387][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2132'. [ 215.574856][T12518] sctp: [Deprecated]: syz.3.2138 (pid 12518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.574856][T12518] Use struct sctp_sack_info instead [ 215.606230][ T40] audit: type=1400 audit(1769685920.871:54188): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 215.666161][ T40] audit: type=1400 audit(1769685920.931:54189): avc: denied { watch } for pid=12521 comm="syz.3.2139" path="/481/file0" dev="tmpfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.731721][T12522] syz.3.2139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.889509][T12533] program syz.0.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.988406][T12545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12545 comm=syz.3.2145 [ 216.286243][T12559] xt_bpf: check failed: parse error [ 216.369254][T12572] FAULT_INJECTION: forcing a failure. [ 216.369254][T12572] name failslab, interval 1, probability 0, space 0, times 0 [ 216.375925][T12572] CPU: 1 UID: 0 PID: 12572 Comm: syz.0.2152 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.375953][T12572] Tainted: [L]=SOFTLOCKUP [ 216.375960][T12572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.375971][T12572] Call Trace: [ 216.375977][T12572] [ 216.375984][T12572] dump_stack_lvl+0x100/0x190 [ 216.376011][T12572] should_fail_ex.cold+0x5/0xa [ 216.376039][T12572] should_failslab+0xc2/0x120 [ 216.376061][T12572] __kmalloc_cache_noprof+0x80/0x810 [ 216.376076][T12572] ? trace_kmem_cache_alloc+0x80/0xb0 [ 216.376097][T12572] ? kmem_cache_alloc_lru_noprof+0x319/0x7d0 [ 216.376117][T12572] ? fuse_dentry_init+0x45/0x100 [ 216.376139][T12572] ? __pfx_fuse_dentry_init+0x10/0x10 [ 216.376160][T12572] ? fuse_dentry_init+0x45/0x100 [ 216.376180][T12572] fuse_dentry_init+0x45/0x100 [ 216.376198][T12572] ? __pfx_fuse_dentry_init+0x10/0x10 [ 216.376218][T12572] __d_alloc+0x62b/0xa80 [ 216.376243][T12572] d_alloc_parallel+0x111/0x14e0 [ 216.376262][T12572] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 216.376284][T12572] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 216.376310][T12572] ? __pfx_d_alloc_parallel+0x10/0x10 [ 216.376329][T12572] ? lockdep_init_map_type+0x5c/0x250 [ 216.376349][T12572] ? lockdep_init_map_type+0x5c/0x250 [ 216.376370][T12572] __lookup_slow+0x193/0x460 [ 216.376395][T12572] ? __pfx___lookup_slow+0x10/0x10 [ 216.376439][T12572] lookup_slow+0x50/0x70 [ 216.376469][T12572] path_lookupat+0x5e8/0xc40 [ 216.376491][T12572] filename_lookup+0x202/0x590 [ 216.376512][T12572] ? __pfx_filename_lookup+0x10/0x10 [ 216.376548][T12572] ? strncpy_from_user+0x19d/0x2d0 [ 216.376575][T12572] user_path_at+0xb6/0x100 [ 216.376594][T12572] __x64_sys_mount+0x1fb/0x310 [ 216.376618][T12572] ? __pfx___x64_sys_mount+0x10/0x10 [ 216.376647][T12572] do_syscall_64+0xc9/0xf80 [ 216.376668][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.376685][T12572] RIP: 0033:0x7f439bd9aeb9 [ 216.376699][T12572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.376715][T12572] RSP: 002b:00007f439ccc1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.376733][T12572] RAX: ffffffffffffffda RBX: 00007f439c016090 RCX: 00007f439bd9aeb9 [ 216.376743][T12572] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 216.376754][T12572] RBP: 00007f439ccc1090 R08: 0000000000000000 R09: 0000000000000000 [ 216.376764][T12572] R10: 0000000002009c71 R11: 0000000000000246 R12: 0000000000000001 [ 216.376774][T12572] R13: 00007f439c016128 R14: 00007f439c016090 R15: 00007ffdf590e1b8 [ 216.376797][T12572] [ 216.380486][T12574] sit0: entered promiscuous mode [ 216.488890][T12574] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 216.492147][T12574] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2154'. [ 216.515110][ T40] audit: type=1400 audit(1769685921.781:54190): avc: denied { watch } for pid=12579 comm="syz.0.2155" path="/542/file0" dev="tmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.526925][ T40] audit: type=1400 audit(1769685921.781:54191): avc: denied { watch_sb watch_reads } for pid=12579 comm="syz.0.2155" path="/542/file0" dev="tmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.546332][T12580] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 216.666278][ T40] audit: type=1400 audit(1769685921.931:54192): avc: denied { ioctl } for pid=12588 comm="syz.0.2159" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 216.861933][ T1331] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 216.874432][T12593] netfs: Couldn't get user pages (rc=-14) [ 217.013664][ T1331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.017245][ T1331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.020267][ T1331] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.025888][ T1331] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.029701][ T1331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.036902][ T40] audit: type=1400 audit(1769685922.301:54193): avc: denied { accept } for pid=12594 comm="syz.0.2162" path="socket:[68594]" dev="sockfs" ino=68594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.039096][ T1331] usb 9-1: config 0 descriptor?? [ 217.124254][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 217.320613][ T40] audit: type=1400 audit(1769685922.581:54194): avc: denied { bind } for pid=12606 comm="syz.0.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.453512][ T1331] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 217.464142][ T1331] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 217.735935][ T1331] usb 9-1: USB disconnect, device number 9 [ 218.091846][ T1331] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 218.105081][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 218.108022][T12622] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2171'. [ 218.256186][ T1331] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 218.262432][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.265319][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.268790][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.284087][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.286892][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.290237][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.293500][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.296339][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.296627][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2175'. [ 218.299683][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.302683][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 218.311936][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.315321][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.319125][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.337033][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.340533][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.344616][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.348396][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.351180][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.354857][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.357761][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.360551][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.364211][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.367235][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.370009][ T1331] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.374622][ T1331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.378333][ T1331] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.381160][ T1331] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.385545][ T1331] usb 5-1: Product: syz [ 218.386897][ T1331] usb 5-1: Manufacturer: syz [ 218.388365][ T1331] usb 5-1: SerialNumber: syz [ 218.391577][ T1331] usb 5-1: config 0 descriptor?? [ 218.397918][ T1331] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.452181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.657995][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 218.658414][ T60] usb 5-1: USB disconnect, device number 22 [ 218.664636][ T60] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 218.913953][T12655] FAULT_INJECTION: forcing a failure. [ 218.913953][T12655] name failslab, interval 1, probability 0, space 0, times 0 [ 218.918168][T12655] CPU: 2 UID: 0 PID: 12655 Comm: syz.4.2180 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.918187][T12655] Tainted: [L]=SOFTLOCKUP [ 218.918192][T12655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.918198][T12655] Call Trace: [ 218.918203][T12655] [ 218.918208][T12655] dump_stack_lvl+0x100/0x190 [ 218.918243][T12655] should_fail_ex.cold+0x5/0xa [ 218.918263][T12655] should_failslab+0xc2/0x120 [ 218.918279][T12655] ? tomoyo_encode2+0xfb/0x3c0 [ 218.918295][T12655] __kmalloc_noprof+0xf6/0x9c0 [ 218.918311][T12655] ? tomoyo_encode2+0xfb/0x3c0 [ 218.918322][T12655] tomoyo_encode2+0xfb/0x3c0 [ 218.918335][T12655] tomoyo_encode+0x29/0x50 [ 218.918347][T12655] tomoyo_realpath_from_path+0x18c/0x690 [ 218.918363][T12655] tomoyo_mount_acl+0x1b6/0x8b0 [ 218.918375][T12655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.918392][T12655] ? is_bpf_text_address+0x94/0x1a0 [ 218.918410][T12655] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 218.918421][T12655] ? unwind_get_return_address+0x59/0xa0 [ 218.918474][T12655] ? tomoyo_domain+0xb2/0x150 [ 218.918507][T12655] ? tomoyo_profile+0x47/0x60 [ 218.918523][T12655] tomoyo_mount_permission+0x214/0x460 [ 218.918534][T12655] ? tomoyo_mount_permission+0x1f6/0x460 [ 218.918546][T12655] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 218.918566][T12655] security_sb_mount+0xdd/0x270 [ 218.918585][T12655] path_mount+0x158/0x23c0 [ 218.918601][T12655] ? rcu_is_watching+0x12/0xc0 [ 218.918617][T12655] ? __pfx_path_mount+0x10/0x10 [ 218.918633][T12655] ? kmem_cache_free+0x143/0x720 [ 218.918644][T12655] ? strncpy_from_user+0x19d/0x2d0 [ 218.918658][T12655] ? putname+0xf5/0x1a0 [ 218.918674][T12655] ? putname+0xf5/0x1a0 [ 218.918687][T12655] ? putname+0xfa/0x1a0 [ 218.918703][T12655] ? __x64_sys_mount+0x293/0x310 [ 218.918718][T12655] __x64_sys_mount+0x293/0x310 [ 218.918734][T12655] ? __pfx___x64_sys_mount+0x10/0x10 [ 218.918758][T12655] do_syscall_64+0xc9/0xf80 [ 218.918778][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.918789][T12655] RIP: 0033:0x7f26f919aeb9 [ 218.918799][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.918810][T12655] RSP: 002b:00007f26fa086028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 218.918821][T12655] RAX: ffffffffffffffda RBX: 00007f26f9416090 RCX: 00007f26f919aeb9 [ 218.918828][T12655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 218.918836][T12655] RBP: 00007f26fa086090 R08: 0000000000000000 R09: 0000000000000000 [ 218.918842][T12655] R10: 0000000002009c71 R11: 0000000000000246 R12: 0000000000000001 [ 218.918849][T12655] R13: 00007f26f9416128 R14: 00007f26f9416090 R15: 00007fff5a7decc8 [ 218.918863][T12655] [ 218.918877][T12655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.966726][T12662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20586 sclass=netlink_route_socket pid=12662 comm=syz.0.2182 [ 219.130186][T12668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.184974][T12668] ip6gre1: entered allmulticast mode [ 219.189459][T12668] team0: Device ip6gre1 is of different type [ 219.270583][T12664] bond2 (unregistering): Released all slaves [ 219.541670][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 220.082390][ T1331] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 220.244537][ T1331] usb 9-1: config 0 has no interfaces? [ 220.248282][ T1331] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 220.253298][ T1331] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 220.256699][ T1331] usb 9-1: Product: syz [ 220.258464][ T1331] usb 9-1: Manufacturer: syz [ 220.260443][ T1331] usb 9-1: SerialNumber: syz [ 220.274539][ T1331] usb 9-1: config 0 descriptor?? [ 220.418194][T12728] FAULT_INJECTION: forcing a failure. [ 220.418194][T12728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.423781][T12728] CPU: 2 UID: 0 PID: 12728 Comm: syz.3.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.423809][T12728] Tainted: [L]=SOFTLOCKUP [ 220.423815][T12728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.423826][T12728] Call Trace: [ 220.423834][T12728] [ 220.423842][T12728] dump_stack_lvl+0x100/0x190 [ 220.423870][T12728] should_fail_ex.cold+0x5/0xa [ 220.423901][T12728] _copy_to_user+0x32/0xd0 [ 220.423926][T12728] simple_read_from_buffer+0xcb/0x170 [ 220.423950][T12728] proc_fail_nth_read+0x1af/0x230 [ 220.423976][T12728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.424002][T12728] ? rw_verify_area+0xce/0x6d0 [ 220.424019][T12728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.424042][T12728] vfs_read+0x1e4/0xb30 [ 220.424065][T12728] ? __pfx_vfs_read+0x10/0x10 [ 220.424082][T12728] ? find_held_lock+0x2b/0x80 [ 220.424106][T12728] ? __fget_files+0x215/0x3d0 [ 220.424132][T12728] ? __fget_files+0x21f/0x3d0 [ 220.424160][T12728] ksys_read+0x12a/0x250 [ 220.424180][T12728] ? __pfx_ksys_read+0x10/0x10 [ 220.424206][T12728] do_syscall_64+0xc9/0xf80 [ 220.424242][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.424262][T12728] RIP: 0033:0x7f3e7255b78e [ 220.424277][T12728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.424295][T12728] RSP: 002b:00007f3e707d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.424312][T12728] RAX: ffffffffffffffda RBX: 00007f3e707d56c0 RCX: 00007f3e7255b78e [ 220.424325][T12728] RDX: 000000000000000f RSI: 00007f3e707d50a0 RDI: 0000000000000004 [ 220.424336][T12728] RBP: 00007f3e707d5090 R08: 0000000000000000 R09: 0000000000000000 [ 220.424348][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.424359][T12728] R13: 00007f3e72816128 R14: 00007f3e72816090 R15: 00007fffd28f79e8 [ 220.424384][T12728] [ 220.480548][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2199'. [ 220.511604][ T6017] usb 9-1: USB disconnect, device number 10 [ 220.541326][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 220.545246][T12734] veth1_macvtap: default FDB implementation only supports local addresses [ 220.688530][ T5294] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 220.806968][T12743] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 220.806999][T12744] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 220.812669][T12743] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2205'. [ 220.971265][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 220.971282][ T40] audit: type=1400 audit(1769685926.231:54197): avc: denied { mount } for pid=12754 comm="syz.3.2209" name="/" dev="pstore" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 220.989103][T12755] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2209'. [ 221.033825][ T40] audit: type=1400 audit(1769685926.301:54198): avc: denied { listen } for pid=12756 comm="syz.3.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.040932][ T40] audit: type=1400 audit(1769685926.301:54199): avc: denied { accept } for pid=12756 comm="syz.3.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.858180][T12768] overlayfs: failed to resolve './file2': -2 [ 221.860553][ T40] audit: type=1400 audit(1769685927.121:54200): avc: denied { mounton } for pid=12765 comm="syz.4.2213" path="/488/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 222.062594][T12776] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.647210][ T40] audit: type=1400 audit(1769685927.911:54201): avc: denied { ioctl } for pid=12784 comm="syz.4.2220" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 223.035819][T12796] No control pipe specified [ 223.040646][T12796] overlayfs: missing 'lowerdir' [ 223.061619][T12799] ªªªªªª speed is unknown, defaulting to 1000 [ 223.118383][T12805] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 223.140051][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.295420][ T40] audit: type=1400 audit(1769685928.561:54202): avc: denied { override_creds } for pid=12814 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.471873][ T6007] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 223.622977][ T6007] usb 5-1: Using ep0 maxpacket: 8 [ 223.625964][ T6007] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.629095][ T6007] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.632443][ T6007] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.635563][ T6007] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.639780][ T6007] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.642959][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.862043][ T6007] usb 5-1: GET_CAPABILITIES returned 0 [ 223.863928][ T6007] usbtmc 5-1:16.0: can't read capabilities [ 224.070696][ T34] usb 5-1: USB disconnect, device number 23 [ 224.791331][T12853] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2237'. [ 224.798484][T12853] gfs2: error -5 reading superblock [ 225.206130][T12859] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 225.269318][T12860] fuse: Bad value for 'user_id' [ 225.271563][T12860] fuse: Bad value for 'user_id' [ 225.303834][ T40] audit: type=1400 audit(1769685930.571:54203): avc: denied { lock } for pid=12857 comm="syz.3.2239" path="socket:[72591]" dev="sockfs" ino=72591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.511898][ T40] audit: type=1400 audit(1769685930.761:54204): avc: denied { mount } for pid=12861 comm="syz.0.2240" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 225.525138][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 225.539653][ T40] audit: type=1400 audit(1769685930.801:54205): avc: denied { remount } for pid=12861 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 225.549433][ T40] audit: type=1400 audit(1769685930.811:54206): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 225.747099][T12872] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.087829][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 226.087840][ T40] audit: type=1400 audit(1769685931.351:54208): avc: denied { bind } for pid=12885 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.149565][ T40] audit: type=1400 audit(1769685931.411:54209): avc: denied { bind } for pid=12895 comm="syz.3.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.214512][ T40] audit: type=1400 audit(1769685931.481:54210): avc: denied { append } for pid=12899 comm="syz.3.2253" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.223678][ T40] audit: type=1400 audit(1769685931.481:54211): avc: denied { map } for pid=12899 comm="syz.3.2253" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.233230][ T40] audit: type=1400 audit(1769685931.481:54212): avc: denied { execute } for pid=12899 comm="syz.3.2253" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.428212][T12900] tmpfs: Unknown parameter 'gr' [ 226.430003][ T40] audit: type=1400 audit(1769685931.691:54213): avc: denied { mounton } for pid=12899 comm="syz.3.2253" path="/syzcgroup/unified/syz3" dev="pstore" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 226.480193][ T40] audit: type=1400 audit(1769685931.741:54214): avc: denied { mount } for pid=12904 comm="syz.3.2254" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 226.489546][T12905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.813134][T12913] fuse: Unknown parameter 'rootܯaode' [ 226.824568][T12912] block nbd0: not configured, cannot reconfigure [ 227.041063][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.045683][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.049483][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.066563][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.069691][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.119374][T12923] ªªªªªª speed is unknown, defaulting to 1000 [ 227.266506][T12923] chnl_net:caif_netlink_parms(): no params data found [ 227.338392][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.340860][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.343762][T12923] bridge_slave_0: entered allmulticast mode [ 227.346529][T12923] bridge_slave_0: entered promiscuous mode [ 227.349724][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.352399][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.354789][T12923] bridge_slave_1: entered allmulticast mode [ 227.357540][T12923] bridge_slave_1: entered promiscuous mode [ 227.372437][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.377803][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.397129][T12923] team0: Port device team_slave_0 added [ 227.399630][ T40] audit: type=1400 audit(1769685932.661:54215): avc: denied { mounton } for pid=12940 comm="syz.4.2264" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 227.400491][T12923] team0: Port device team_slave_1 added [ 227.408771][T12941] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 227.411264][T12941] UDF-fs: Scanning with blocksize 2048 failed [ 227.415104][T12941] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 227.418168][T12941] UDF-fs: Scanning with blocksize 4096 failed [ 227.420049][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.423243][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.431402][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.438989][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.441269][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.452554][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.456219][T12905] Set syz1 is full, maxelem 65536 reached [ 227.472629][ T40] audit: type=1400 audit(1769685932.741:54216): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.503246][T12943] netlink: 'syz.3.2265': attribute type 322 has an invalid length. [ 227.507362][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 227.515211][T12923] hsr_slave_0: entered promiscuous mode [ 227.518021][T12923] hsr_slave_1: entered promiscuous mode [ 227.575086][T12947] netfs: Couldn't get user pages (rc=-14) [ 227.631285][T12923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.635670][T12923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.640176][T12923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.646271][T12923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.664468][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.667030][T12923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.669456][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.671731][T12923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.701647][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.711976][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.715348][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.732555][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.740645][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.743073][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.747508][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.749837][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.880390][ T40] audit: type=1400 audit(1769685933.141:54217): avc: denied { ioctl } for pid=12980 comm="syz.3.2273" path="socket:[75063]" dev="sockfs" ino=75063 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.887654][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.891496][T12984] /dev/nullb0: Can't open blockdev [ 227.994594][T12997] ªªªªªª speed is unknown, defaulting to 1000 [ 228.035710][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2280'. [ 228.116668][T12923] veth0_vlan: entered promiscuous mode [ 228.125794][T12923] veth1_vlan: entered promiscuous mode [ 228.140829][T12923] veth0_macvtap: entered promiscuous mode [ 228.146122][T12923] veth1_macvtap: entered promiscuous mode [ 228.155663][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.171185][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.205663][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.223008][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.242677][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.247499][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.275484][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.278840][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.333263][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.337214][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.504437][T13027] sit0: left promiscuous mode [ 228.529238][T13027] macvlan3: left promiscuous mode [ 228.901538][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.966216][T13073] Invalid source name [ 228.968052][T13073] UBIFS error (pid: 13073): cannot open "/dev/sg0", error -22 [ 229.091908][ T5294] Bluetooth: hci4: command tx timeout [ 229.351108][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 229.352468][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 229.445045][T13102] [ 229.523329][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 229.526983][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 229.530879][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 229.537561][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.540490][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.544392][ T10] usb 9-1: Product: syz [ 229.545801][ T10] usb 9-1: Manufacturer: syz [ 229.547396][ T10] usb 9-1: SerialNumber: syz [ 229.553157][ T10] usb 9-1: config 0 descriptor?? [ 229.558573][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 229.560549][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 229.566003][ T10] usb 9-1: selecting invalid altsetting 0 [ 229.687196][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.693812][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.699960][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.706785][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.710935][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.730013][T13121] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2315'. [ 229.760620][T13118] ªªªªªª speed is unknown, defaulting to 1000 [ 229.782345][T13092] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 229.902894][ T9] usb 9-1: USB disconnect, device number 11 [ 230.011939][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'. [ 230.022890][T13118] chnl_net:caif_netlink_parms(): no params data found [ 230.090579][T13118] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.093052][T13118] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.095464][T13118] bridge_slave_0: entered allmulticast mode [ 230.098204][T13118] bridge_slave_0: entered promiscuous mode [ 230.105307][T13118] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.107526][T13118] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.109691][T13118] bridge_slave_1: entered allmulticast mode [ 230.113054][T13118] bridge_slave_1: entered promiscuous mode [ 230.133740][T13118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.138328][T13118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.169599][T13118] team0: Port device team_slave_0 added [ 230.184810][T13118] team0: Port device team_slave_1 added [ 230.204361][T13118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.207116][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.216711][T13118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.222947][T13118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.225787][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.236970][T13118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.295808][T13118] hsr_slave_0: entered promiscuous mode [ 230.298130][T13118] hsr_slave_1: entered promiscuous mode [ 230.300412][T13118] debugfs: 'hsr0' already exists in 'hsr' [ 230.304331][T13118] Cannot create hsr debugfs directory [ 230.416407][T13118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.486969][T13118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.524159][T13155] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 230.574350][T13118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.650295][T13172] overlayfs: failed to resolve './file0': -2 [ 230.703207][T13118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.858580][T13118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.872211][T13118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.878731][T13118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.885293][T13118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.953738][T13118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.968236][T13118] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.975479][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.977959][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.985967][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.989123][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.120953][T13118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.179155][T13118] veth0_vlan: entered promiscuous mode [ 231.181831][ T5294] Bluetooth: hci4: command tx timeout [ 231.187522][T13118] veth1_vlan: entered promiscuous mode [ 231.227392][T13184] FAULT_INJECTION: forcing a failure. [ 231.227392][T13184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.229133][T13118] veth0_macvtap: entered promiscuous mode [ 231.232628][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.3.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.232655][T13184] Tainted: [L]=SOFTLOCKUP [ 231.232662][T13184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.232671][T13184] Call Trace: [ 231.232677][T13184] [ 231.232684][T13184] dump_stack_lvl+0x100/0x190 [ 231.232710][T13184] should_fail_ex.cold+0x5/0xa [ 231.232739][T13184] _copy_from_user+0x2e/0xd0 [ 231.232762][T13184] dev_ethtool+0x162/0x5d70 [ 231.232780][T13184] ? is_bpf_text_address+0x94/0x1a0 [ 231.232804][T13184] ? kernel_text_address+0x8d/0x100 [ 231.232824][T13184] ? __kernel_text_address+0xd/0x30 [ 231.232843][T13184] ? unwind_get_return_address+0x59/0xa0 [ 231.232866][T13184] ? arch_stack_walk+0xa6/0xf0 [ 231.232890][T13184] ? __pfx_dev_ethtool+0x10/0x10 [ 231.232911][T13184] ? stack_trace_save+0x8e/0xc0 [ 231.232934][T13184] ? __pfx_stack_trace_save+0x10/0x10 [ 231.232957][T13184] ? stack_depot_save_flags+0x27/0x9c0 [ 231.232979][T13184] ? __lock_acquire+0x4a5/0x2630 [ 231.233000][T13184] ? __lock_acquire+0x4a5/0x2630 [ 231.233016][T13184] ? do_syscall_64+0xc9/0xf80 [ 231.233032][T13184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.233059][T13184] ? find_held_lock+0x2b/0x80 [ 231.233080][T13184] ? avc_has_extended_perms+0x33a/0x1080 [ 231.233103][T13184] ? avc_has_extended_perms+0x33a/0x1080 [ 231.233132][T13184] ? __lock_acquire+0x4a5/0x2630 [ 231.233150][T13184] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 231.233179][T13184] ? find_held_lock+0x2b/0x80 [ 231.233198][T13184] ? dev_load+0x8e/0x240 [ 231.233217][T13184] ? dev_load+0x8e/0x240 [ 231.233240][T13184] dev_ioctl+0x63b/0x10e0 [ 231.233262][T13184] sock_do_ioctl+0x1a0/0x280 [ 231.233293][T13184] ? __pfx_sock_do_ioctl+0x10/0x10 [ 231.233316][T13184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.233344][T13184] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 231.233359][T13184] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 231.233379][T13184] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 231.233401][T13184] sock_ioctl+0x599/0x6b0 [ 231.233419][T13184] ? __pfx_sock_ioctl+0x10/0x10 [ 231.233441][T13184] ? selinux_file_ioctl+0x139/0x290 [ 231.233457][T13184] ? selinux_file_ioctl+0xb4/0x290 [ 231.233475][T13184] ? __pfx_sock_ioctl+0x10/0x10 [ 231.233493][T13184] __x64_sys_ioctl+0x18e/0x210 [ 231.233511][T13184] do_syscall_64+0xc9/0xf80 [ 231.233530][T13184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.233546][T13184] RIP: 0033:0x7f3e7259aeb9 [ 231.233561][T13184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.233577][T13184] RSP: 002b:00007f3e707f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.233595][T13184] RAX: ffffffffffffffda RBX: 00007f3e72815fa0 RCX: 00007f3e7259aeb9 [ 231.233607][T13184] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 231.233617][T13184] RBP: 00007f3e707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.233628][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.233638][T13184] R13: 00007f3e72816038 R14: 00007f3e72815fa0 R15: 00007fffd28f79e8 [ 231.233661][T13184] [ 231.282171][T13192] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2333'. [ 231.288559][T13118] veth1_macvtap: entered promiscuous mode [ 231.293945][T13192] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2333'. [ 231.300764][T13118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.397494][T13118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.406194][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.409190][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.410885][T13197] Unsupported ieee802154 address type: 0 [ 231.433295][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.437483][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.470581][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.478233][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.528443][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.531526][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.535917][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.538087][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.540819][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.544903][T13200] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.551997][T13200] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.563994][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.566773][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.574385][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.576979][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.579505][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.582268][T13200] xfrm0 speed is unknown, defaulting to 1000 [ 231.812787][ T5294] Bluetooth: hci0: command tx timeout [ 233.251994][ T5294] Bluetooth: hci4: command tx timeout [ 233.892387][ T5294] Bluetooth: hci0: command tx timeout [ 234.673545][T13219] 9pnet: Found fid 0 not clunked [ 234.703893][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 234.703905][ T40] audit: type=1400 audit(1769685939.971:54228): avc: denied { read } for pid=13227 comm="syz.4.2346" lport=12180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.718858][T13229] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2342'. [ 234.721591][T13229] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2342'. [ 234.797940][T13224] FAULT_INJECTION: forcing a failure. [ 234.797940][T13224] name failslab, interval 1, probability 0, space 0, times 0 [ 234.802206][T13224] CPU: 2 UID: 0 PID: 13224 Comm: syz.3.2343 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.802225][T13224] Tainted: [L]=SOFTLOCKUP [ 234.802229][T13224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.802236][T13224] Call Trace: [ 234.802240][T13224] [ 234.802245][T13224] dump_stack_lvl+0x100/0x190 [ 234.802268][T13224] should_fail_ex.cold+0x5/0xa [ 234.802289][T13224] should_failslab+0xc2/0x120 [ 234.802304][T13224] __kmalloc_cache_noprof+0x80/0x810 [ 234.802316][T13224] ? dev_ethtool+0x1a9/0x5d70 [ 234.802331][T13224] ? dev_ethtool+0x1a9/0x5d70 [ 234.802342][T13224] dev_ethtool+0x1a9/0x5d70 [ 234.802353][T13224] ? is_bpf_text_address+0x94/0x1a0 [ 234.802370][T13224] ? kernel_text_address+0x8d/0x100 [ 234.802384][T13224] ? __kernel_text_address+0xd/0x30 [ 234.802397][T13224] ? unwind_get_return_address+0x59/0xa0 [ 234.802413][T13224] ? arch_stack_walk+0xa6/0xf0 [ 234.802429][T13224] ? __pfx_dev_ethtool+0x10/0x10 [ 234.802443][T13224] ? stack_trace_save+0x8e/0xc0 [ 234.802460][T13224] ? __pfx_stack_trace_save+0x10/0x10 [ 234.802476][T13224] ? stack_depot_save_flags+0x27/0x9c0 [ 234.802491][T13224] ? __lock_acquire+0x4a5/0x2630 [ 234.802507][T13224] ? __lock_acquire+0x4a5/0x2630 [ 234.802518][T13224] ? do_syscall_64+0xc9/0xf80 [ 234.802530][T13224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.802547][T13224] ? find_held_lock+0x2b/0x80 [ 234.802562][T13224] ? avc_has_extended_perms+0x33a/0x1080 [ 234.802577][T13224] ? avc_has_extended_perms+0x33a/0x1080 [ 234.802597][T13224] ? __lock_acquire+0x4a5/0x2630 [ 234.802608][T13224] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 234.802628][T13224] ? find_held_lock+0x2b/0x80 [ 234.802642][T13224] ? dev_load+0x8e/0x240 [ 234.802655][T13224] ? dev_load+0x8e/0x240 [ 234.802671][T13224] dev_ioctl+0x63b/0x10e0 [ 234.802686][T13224] sock_do_ioctl+0x1a0/0x280 [ 234.802704][T13224] ? __pfx_sock_do_ioctl+0x10/0x10 [ 234.802721][T13224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.802740][T13224] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.802750][T13224] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 234.802763][T13224] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 234.802778][T13224] sock_ioctl+0x599/0x6b0 [ 234.802790][T13224] ? __pfx_sock_ioctl+0x10/0x10 [ 234.802804][T13224] ? selinux_file_ioctl+0x139/0x290 [ 234.802815][T13224] ? selinux_file_ioctl+0xb4/0x290 [ 234.802827][T13224] ? __pfx_sock_ioctl+0x10/0x10 [ 234.802839][T13224] __x64_sys_ioctl+0x18e/0x210 [ 234.802851][T13224] do_syscall_64+0xc9/0xf80 [ 234.802864][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.802875][T13224] RIP: 0033:0x7f3e7259aeb9 [ 234.802885][T13224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.802896][T13224] RSP: 002b:00007f3e707f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.802908][T13224] RAX: ffffffffffffffda RBX: 00007f3e72815fa0 RCX: 00007f3e7259aeb9 [ 234.802915][T13224] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 234.802922][T13224] RBP: 00007f3e707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.802928][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.802935][T13224] R13: 00007f3e72816038 R14: 00007f3e72815fa0 R15: 00007fffd28f79e8 [ 234.802948][T13224] [ 234.921902][T13225] ------------[ cut here ]------------ [ 234.931541][T13225] [CRTC:37:crtc-0] vblank wait timed out [ 234.934294][T13225] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1920 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#3: syz.5.2345/13225 [ 234.939986][T13225] Modules linked in: [ 234.942091][T13225] CPU: 3 UID: 0 PID: 13225 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.946525][T13225] Tainted: [L]=SOFTLOCKUP [ 234.948321][T13225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.952480][T13225] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 234.955573][T13225] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 28 37 2f 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 73 07 74 fc e9 7c fe ff ff e8 f9 [ 234.964211][T13225] RSP: 0018:ffffc900232277b0 EFLAGS: 00010246 [ 234.967163][T13225] RAX: 0000000000000000 RBX: ffff888027880040 RCX: 1ffff11004f10023 [ 234.970536][T13225] RDX: ffff888026b16ca0 RSI: 0000000000000025 RDI: ffffffff90c22b00 [ 234.975458][T13225] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 234.978816][T13225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 234.982772][T13225] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802f6c1f00 [ 234.986137][T13225] FS: 000055555b816500(0000) GS:ffff8880d68db000(0000) knlGS:0000000000000000 [ 234.990326][T13225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.993540][T13225] CR2: 00007f8725be8600 CR3: 0000000025675000 CR4: 0000000000352ef0 [ 234.996880][T13225] Call Trace: [ 234.998293][T13225] [ 234.999539][T13225] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 235.002978][T13225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.005486][T13225] ? lockdep_hardirqs_on+0x78/0x100 [ 235.007864][T13225] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.009906][T13225] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 235.012562][T13225] drm_atomic_helper_commit_tail+0xff/0x130 [ 235.014652][T13225] commit_tail+0x338/0x430 [ 235.016335][T13225] drm_atomic_helper_commit+0x303/0x380 [ 235.018653][T13225] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 235.021166][T13225] drm_atomic_commit+0x230/0x300 [ 235.023244][T13225] ? __pfx_drm_atomic_commit+0x10/0x10 [ 235.025613][T13225] ? __pfx___drm_printfn_info+0x10/0x10 [ 235.027424][T13225] ? drm_client_rotation+0x451/0x6a0 [ 235.029091][T13225] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 235.031310][T13225] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 235.034244][T13225] drm_client_modeset_commit_locked+0x14d/0x580 [ 235.036842][T13225] drm_client_modeset_commit+0x4f/0x80 [ 235.039118][T13225] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 235.042454][T13225] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 235.045397][T13225] drm_fbdev_client_restore+0x1b/0x30 [ 235.047697][T13225] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 235.050258][T13225] drm_client_dev_restore+0x205/0x2a0 [ 235.052760][T13225] drm_release+0x2c6/0x360 [ 235.054675][T13225] ? __pfx_drm_release+0x10/0x10 [ 235.056440][T13225] __fput+0x3ff/0xb40 [ 235.058118][T13225] task_work_run+0x150/0x240 [ 235.060041][T13225] ? __pfx_task_work_run+0x10/0x10 [ 235.062343][T13225] exit_to_user_mode_loop+0x100/0x4b0 [ 235.064664][T13225] ? rcu_is_watching+0x12/0xc0 [ 235.066594][T13225] do_syscall_64+0x4fe/0xf80 [ 235.068547][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.071000][T13225] RIP: 0033:0x7f8725b9aeb9 [ 235.072762][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.080267][T13225] RSP: 002b:00007fffd26e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 235.083392][T13225] RAX: 0000000000000000 RBX: 00007f8725e17da0 RCX: 00007f8725b9aeb9 [ 235.085953][T13225] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 235.088402][T13225] RBP: 00007f8725e17da0 R08: 00007f8725e16128 R09: 0000000000000000 [ 235.090960][T13225] R10: 00000000003ffd0c R11: 0000000000000246 R12: 0000000000039774 [ 235.094250][T13225] R13: 00007f8725e15fac R14: 0000000000039505 R15: 00007f8725e15fa0 [ 235.097548][T13225] [ 235.098860][T13225] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.101730][T13225] CPU: 3 UID: 0 PID: 13225 Comm: syz.5.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.106090][T13225] Tainted: [L]=SOFTLOCKUP [ 235.107917][T13225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.112073][T13225] Call Trace: [ 235.113496][T13225] [ 235.114758][T13225] dump_stack_lvl+0x100/0x190 [ 235.116628][T13225] vpanic+0x20d/0x630 [ 235.118168][T13225] panic+0xd1/0xd1 [ 235.119760][T13225] ? __pfx_panic+0x10/0x10 [ 235.121646][T13225] ? check_panic_on_warn+0x1f/0x90 [ 235.123823][T13225] check_panic_on_warn.cold+0x19/0x34 [ 235.126117][T13225] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 235.129130][T13225] __warn.cold+0x191/0x2f8 [ 235.131020][T13225] __report_bug+0x296/0x3d0 [ 235.132940][T13225] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 235.135978][T13225] ? __pfx___report_bug+0x10/0x10 [ 235.138085][T13225] ? lockdep_hardirqs_on+0x78/0x100 [ 235.140296][T13225] report_bug_entry+0xe1/0x290 [ 235.142310][T13225] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 235.145350][T13225] handle_bug+0x1c9/0x2a0 [ 235.147171][T13225] exc_invalid_op+0x17/0x50 [ 235.149098][T13225] asm_exc_invalid_op+0x1a/0x20 [ 235.151097][T13225] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 235.154348][T13225] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 28 37 2f 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 73 07 74 fc e9 7c fe ff ff e8 f9 [ 235.162409][T13225] RSP: 0018:ffffc900232277b0 EFLAGS: 00010246 [ 235.164746][T13225] RAX: 0000000000000000 RBX: ffff888027880040 RCX: 1ffff11004f10023 [ 235.167844][T13225] RDX: ffff888026b16ca0 RSI: 0000000000000025 RDI: ffffffff90c22b00 [ 235.171172][T13225] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 235.174556][T13225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 235.177879][T13225] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802f6c1f00 [ 235.181079][T13225] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 235.184172][T13225] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.186550][T13225] ? lockdep_hardirqs_on+0x78/0x100 [ 235.188788][T13225] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.191195][T13225] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 235.193808][T13225] drm_atomic_helper_commit_tail+0xff/0x130 [ 235.196326][T13225] commit_tail+0x338/0x430 [ 235.198222][T13225] drm_atomic_helper_commit+0x303/0x380 [ 235.200545][T13225] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 235.203182][T13225] drm_atomic_commit+0x230/0x300 [ 235.205338][T13225] ? __pfx_drm_atomic_commit+0x10/0x10 [ 235.207661][T13225] ? __pfx___drm_printfn_info+0x10/0x10 [ 235.210016][T13225] ? drm_client_rotation+0x451/0x6a0 [ 235.212248][T13225] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 235.214867][T13225] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 235.217712][T13225] drm_client_modeset_commit_locked+0x14d/0x580 [ 235.220340][T13225] drm_client_modeset_commit+0x4f/0x80 [ 235.222628][T13225] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 235.225928][T13225] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 235.228782][T13225] drm_fbdev_client_restore+0x1b/0x30 [ 235.231044][T13225] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 235.233606][T13225] drm_client_dev_restore+0x205/0x2a0 [ 235.235899][T13225] drm_release+0x2c6/0x360 [ 235.237714][T13225] ? __pfx_drm_release+0x10/0x10 [ 235.239749][T13225] __fput+0x3ff/0xb40 [ 235.241454][T13225] task_work_run+0x150/0x240 [ 235.243392][T13225] ? __pfx_task_work_run+0x10/0x10 [ 235.245554][T13225] exit_to_user_mode_loop+0x100/0x4b0 [ 235.247832][T13225] ? rcu_is_watching+0x12/0xc0 [ 235.249866][T13225] do_syscall_64+0x4fe/0xf80 [ 235.251639][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.253509][T13225] RIP: 0033:0x7f8725b9aeb9 [ 235.254947][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.260944][T13225] RSP: 002b:00007fffd26e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 235.263588][T13225] RAX: 0000000000000000 RBX: 00007f8725e17da0 RCX: 00007f8725b9aeb9 [ 235.266083][T13225] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 235.268577][T13225] RBP: 00007f8725e17da0 R08: 00007f8725e16128 R09: 0000000000000000 [ 235.271055][T13225] R10: 00000000003ffd0c R11: 0000000000000246 R12: 0000000000039774 [ 235.274261][T13225] R13: 00007f8725e15fac R14: 0000000000039505 R15: 00007f8725e15fa0 [ 235.277579][T13225] [ 235.279657][T13225] Kernel Offset: disabled [ 235.281517][T13225] Rebooting in 86400 seconds..