last executing test programs: 15.512685038s ago: executing program 1 (id=458): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x10409, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) io_uring_setup(0x4ee8, &(0x7f0000000040)={0x0, 0x3cad, 0x1003, 0x0, 0x25f}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x4004454) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r4 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00'], 0x50) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.377585536s ago: executing program 1 (id=462): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x80000000000005, 0x5}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000003c0)='cgroup\x00') readv(r3, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) 14.650593006s ago: executing program 1 (id=471): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) listen(r0, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) 14.562103377s ago: executing program 1 (id=473): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) dup3(r0, r5, 0x80000) 14.482167747s ago: executing program 1 (id=474): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) r1 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) process_madvise(r2, 0x0, 0x0, 0x15, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000080)={0x7, "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"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xd0b2535b371df242, 0x0, 0x0}) dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x80000001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f82420"], 0x7) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x10000000, 0x0, 0x1}, {{@in=@rand_addr=0x640100ff, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setns(0xc9, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000007000000040000001000000080040100", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000e7ffffff00000000", @ANYRES32, @ANYBLOB], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r8, r9, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r7}, 0x20) 14.412042573s ago: executing program 1 (id=476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000182feffffff00010000fe800000000000000100000000000023fe8000000000000000000000000000aa000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000002000092010000000000000600000000000000ffff0000000000001c250800000000000500000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff0200000005000000000000002abd70000435000002000500200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.312637579s ago: executing program 2 (id=663): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000040), 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/192, 0xc0}], 0x7}, 0x122) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000600)=0x1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x46d2) r2 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r2, 0x6, &(0x7f0000000640)={0x800, 0x8}, &(0x7f0000000680)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000006c0)=0x1, 0x4) r3 = open_tree(r0, &(0x7f0000000700)='./file0\x00', 0x8000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000940)={0x3, 0x0, [{0x7, 0x5016, 0x2, [0x400, 0x3, 0x3, 0x0, 0xf81, 0x1, 0x5, 0x800]}, {0x6, 0xd840, 0x3, [0xfc8, 0x6, 0x8, 0x1000, 0x997800, 0x0, 0x5, 0xab24]}, {0x40000, 0x69, 0x9, [0x10000, 0x6, 0x3, 0x1, 0x31, 0x2, 0x4, 0x2]}]}) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000a00)) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000a40)={0x1000, 0x4, 0x5}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@fallback=r3, 0x35, 0x1, 0x9, &(0x7f0000000ac0)=[0x0], 0x1, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c40)={0x1, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@fallback=r0, r3, 0x0, 0x20, r4, @void, @void, @void, @value=r7, r6}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000c80)={'syz_tun\x00', {0x2, 0x4e20, @empty}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x82c17586868888b1}}, [@NFT_MSG_DELRULE={0xb8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "57372ceada27bc16918c9b0c0d6e5203e49b2a3139079eb0518a046fcccae10ed583f84b97b0430e525f567f860ba0ee0264e0ba9dad4666152450ef3c05deb88322d125dfbbbc7ec6e8283c114a487e404675d906107557fb88"}]}, @NFT_MSG_DELFLOWTABLE={0x7c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x41, 0xd, 0x1, 0x0, "6bd07b326dbf1227c816994b97420c0d336879c5383883897de3e5018083c669ded03a52d654febc91623401494383d664437d1b40d38a78d5f83fb8a3"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x25c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000001040)={0x2, 0x0, &(0x7f0000001000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f00000010c0)={r8, 0x0, 0xc0d, 0x6, &(0x7f0000001080)=[{0xfff, 0x4, 0x5, 0x8}, {0x5, 0x4, 0x0, 0x5}, {0x3ff, 0x8, 0xfffc, 0xb13}, {0x4, 0x2, 0x7, 0x7f}, {0xb, 0x0, 0x5, 0x7}, {0xf42e, 0x1, 0x40b, 0x3}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001100)) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000001140)) r9 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001180)=@assoc_value, &(0x7f00000011c0)=0x8) ioctl$CDROMRESET(r0, 0x5312) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000001200)={0xfd, 0x8, 0xd}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000001280)={{0x4, 0x2, 0x10001, 0x3ff, 'syz1\x00', 0x4}, 0x5, 0x100, 0xffff630a, r2, 0x2, 0x8, 'syz1\x00', &(0x7f0000001240)=['[\'#\x00', '\x00'], 0x5}) 1.191832756s ago: executing program 2 (id=665): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xdfe6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x809}}, @jmp={0x5, 0x0, 0x1, 0x3, 0x4, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 1.12234082s ago: executing program 2 (id=666): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f0000000180)=[{0xa, '\x00', @data=0x80000001, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) symlinkat(&(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00') (async) symlinkat(&(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0xa) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0xa) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0x3b, r8}) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2d, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000, r9}) 862.773863ms ago: executing program 3 (id=669): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x10409, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) io_uring_setup(0x4ee8, &(0x7f0000000040)={0x0, 0x3cad, 0x1003, 0x0, 0x25f}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x4004454) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00'], 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0xffffffff, 0x85, 0x2, 0x0, 0xf98, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x8000000000000000, 0x80000004000020, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 862.388631ms ago: executing program 3 (id=670): r0 = syz_open_dev$dri(0x0, 0x1, 0xc2702) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000000f000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000000f000)='./sys\x00', &(0x7f000000f040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/block/md127/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000008000)='7:0\x00', 0x4) 834.828649ms ago: executing program 3 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12bc}, 0x1, 0x0, 0x0, 0x40000020}, 0x0) 760.564181ms ago: executing program 3 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000001c0)=0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000280)={0x6, 0x958, 0x10001, 0xaa1a, 0x80000001, 0xb}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x17d) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2000000000000000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) 652.719824ms ago: executing program 0 (id=674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={'ip6erspan0\x00', {0x2, 0x4e22, @multicast1}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e22, @local}, {0x6, @local}, 0x0, {0x2, 0x4e22, @private=0xa010102}, 'nicvf0\x00'}) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB='\b'], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendto$inet(r0, &(0x7f0000000600)="98", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044041}, 0x4040050) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x3}, {0xffe0, 0xa}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4c, 0xf}}, @TCA_RATE={0x6, 0x5, {0x2a, 0x86}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB="f0020000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250a0000008b000300dc01d0525bfd88edf835156b9fdc316aebe97da3829c6207b56dcb5d9b5dfe5e9b651b0ea5febdb97a96ead01d6574341e304342de7cc6260a0b53442eefa29162ee5b72bcc55ff44895b3ace3d8292abaa8c17b23ed3c572cd206081f30391ee13e2b28be2bd18bf635227ba045d0bb4d1a8ad49a7b05895d0d97638a680040000180140002006e723000000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030002000000ad00030025560034399b533270d3517d74e00371341467742eee5c7a4a21d277afb6253f99a6a371215a67939d763abb1a12b14c9072e609fe0ac3199f43d2d525e6a6cdf55a16831c0b6281d69f95d58e2eed51475df127e2dfea8fe5ae7841c034f8f840022dd70757a2d514e3876b4139920e174b046cb05e9feb04a0da72517455b860933d18e62781858a8794d1ccae680588912c6210c67900d26ca2d19c6851690ec75fd9058a2ff12e000000"], 0x2f0}, 0x1, 0x0, 0x0, 0x20004091}, 0x8000) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="070f28", 0x3}], 0x1}}], 0x1, 0x810) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0xff) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) (async) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000300)=0x7, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0xc0001, 0x0) write(r7, &(0x7f0000000200)='1500\x00', 0x5) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 651.397388ms ago: executing program 3 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r5, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, &(0x7f00000000c0)) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000180)) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1100070080000900", 0x33a) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@map=r1, r1, 0x2f, 0x8, 0x4, @void, @value, @void, @void, r2}, 0x20) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r10, &(0x7f0000002240)={0x2020}, 0x2020) write$binfmt_misc(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) 580.009393ms ago: executing program 0 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x5, @meta={0x53314b52, 0x29b068ca, 0xaff7, 0x20f4, 0x443039d3}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c070b8008000100ac1414bb0800020057397b2f4144e0a13451fb1431c93bfe8c5cacf296751c27e7361f0cda0e7cf955d0b3251d0ee782414db4f5efc8dd6ad07d3e56381a6a5db9069388deea0c2fd7cc15590f268db938551c1f9c1efb3e9b371b4c2fbf8800c5295a11978e9f", @ANYRES8=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x400cc91) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000006, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="01002abd706b00dbdf255c000000080003", @ANYRES16=r12, @ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r13, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe, 0xfffffffd}]}}]}, 0x38}}, 0x20000800) connect$llc(r13, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000100)=[{{&(0x7f0000000700)=@ieee802154={0x24, @short={0x2, 0xffff, 0xffff}}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000000c0)='C', 0x1}], 0x1}}], 0x1, 0x34000081) dup(r4) 421.232408ms ago: executing program 0 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="8000000000"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 253.844161ms ago: executing program 0 (id=678): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000f95000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0xcd4d0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) r1 = openat(r0, &(0x7f0000000000)='./mnt\x00', 0x101082, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 243.741325ms ago: executing program 2 (id=679): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x10409, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) io_uring_setup(0x4ee8, &(0x7f0000000040)={0x0, 0x3cad, 0x1003, 0x0, 0x25f}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x4004454) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00'], 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0xffffffff, 0x85, 0x2, 0x0, 0xf98, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x8000000000000000, 0x80000004000020, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 142.275849ms ago: executing program 0 (id=680): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x8, 0xa2103) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) r4 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x5) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_open_dev$usbmon(&(0x7f0000000180), 0x8, 0xa2103) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) (async) fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) 142.044709ms ago: executing program 2 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 771.727µs ago: executing program 2 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000000000000000000000000500000305000100"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffffffffe, 0x4, 0x0, 0x7, 0x80000000, 0x122, 0x6000, 0x10000, r3, r4, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1008001, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x201}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) syslog(0x4, &(0x7f0000000ac0)=""/50, 0x32) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r11, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000044) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r12, &(0x7f0000000200)='offline', 0x7) 572.084µs ago: executing program 0 (id=683): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="020000000000000000000000000000fb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000"], 0x50) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0xc592, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2000000000000000, 0x4000000000000b3, 0xffffffffffffff04], 0xeeee0000, 0x201893}) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x76) (async) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0xeb) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 0s ago: executing program 3 (id=684): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000001c0)=0x40) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x2000010, 0x0) (async) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x2000010, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000600)=@IORING_OP_SEND={0x1a, 0x68, 0x0, 0xffffffffffffffff, &(0x7f00000018c0)="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", &(0x7f00000007c0)="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", 0x1002, 0x4000000, 0x1}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config\x00', 0xe9) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) (async) write(r3, 0x0, 0x0) close(r3) (async) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) (async) write(r4, &(0x7f0000000340)='1', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r5) (async) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='1\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x60240, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x60240, 0x1ff) write(r1, &(0x7f0000000200)="020c0b0c040800000000000000", 0xd) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000680)={0xfffffff8, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000680)={0xfffffff8, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) kernel console output (not intermixed with test programs): 47.894606][ T5731] hsr_slave_0: entered promiscuous mode [ 47.895181][ T5731] hsr_slave_1: entered promiscuous mode [ 47.902994][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.903005][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.903018][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.913953][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.913965][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.913977][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.958771][ T5739] hsr_slave_0: entered promiscuous mode [ 47.959776][ T5739] hsr_slave_1: entered promiscuous mode [ 47.960363][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.960447][ T5739] Cannot create hsr debugfs directory [ 47.982843][ T5732] hsr_slave_0: entered promiscuous mode [ 47.983334][ T5732] hsr_slave_1: entered promiscuous mode [ 47.983619][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.983632][ T5732] Cannot create hsr debugfs directory [ 48.030123][ T5734] hsr_slave_0: entered promiscuous mode [ 48.030935][ T5734] hsr_slave_1: entered promiscuous mode [ 48.031465][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.031481][ T5734] Cannot create hsr debugfs directory [ 48.284784][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.291469][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.291977][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.297334][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.298941][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.304226][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.312817][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.317729][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.351578][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.357934][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.363344][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.368667][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.369163][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.372866][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.374768][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.374816][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.375087][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.375132][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.385924][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.390354][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.442012][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.442466][ T5739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.442592][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.442649][ T5739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.446369][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.453330][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.453983][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.458625][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.463418][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.465135][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.471705][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.474318][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.484592][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.489019][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.489484][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.493968][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.568912][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.573494][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.579666][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.584060][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.584579][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.588436][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.591245][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.598993][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.601591][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.634731][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.638840][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.653733][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.654010][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.661182][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.665903][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.665994][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.678618][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.678709][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.694794][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.694907][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.732753][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.772574][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.777534][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.788371][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.788461][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.789388][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.789428][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.808970][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.830001][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.838801][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.838866][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.856394][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.856493][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.998671][ T67] Bluetooth: hci0: command tx timeout [ 49.022196][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.029923][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.074843][ T5739] veth0_vlan: entered promiscuous mode [ 49.075155][ T5731] veth0_vlan: entered promiscuous mode [ 49.080860][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.084129][ T5739] veth1_vlan: entered promiscuous mode [ 49.087359][ T67] Bluetooth: hci3: command tx timeout [ 49.087668][ T67] Bluetooth: hci1: command tx timeout [ 49.087679][ T5733] Bluetooth: hci2: command tx timeout [ 49.095977][ T5731] veth1_vlan: entered promiscuous mode [ 49.111214][ T5739] veth0_macvtap: entered promiscuous mode [ 49.113970][ T5739] veth1_macvtap: entered promiscuous mode [ 49.133937][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.142900][ T5731] veth0_macvtap: entered promiscuous mode [ 49.150553][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.159036][ T5731] veth1_macvtap: entered promiscuous mode [ 49.163425][ T5734] veth0_vlan: entered promiscuous mode [ 49.174000][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.185001][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.188052][ T5734] veth1_vlan: entered promiscuous mode [ 49.193690][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.239670][ T5732] veth0_vlan: entered promiscuous mode [ 49.253192][ T5734] veth0_macvtap: entered promiscuous mode [ 49.264567][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.264627][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.267103][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.275260][ T5734] veth1_macvtap: entered promiscuous mode [ 49.277957][ T5732] veth1_vlan: entered promiscuous mode [ 49.298859][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.298921][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.312779][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.321645][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 49.321715][ T43] audit: type=1400 audit(1788551025.593:167): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.321766][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.322768][ T43] audit: type=1400 audit(1788551025.593:168): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.8Zvs4V/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.323972][ T43] audit: type=1400 audit(1788551025.593:169): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.326187][ T43] audit: type=1400 audit(1788551025.593:170): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.8Zvs4V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.327439][ T43] audit: type=1400 audit(1788551025.603:171): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.8Zvs4V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.331296][ T43] audit: type=1400 audit(1788551025.603:172): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.333546][ T43] audit: type=1400 audit(1788551025.603:173): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.334605][ T43] audit: type=1400 audit(1788551025.603:174): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="gadgetfs" ino=10472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.339172][ T43] audit: type=1400 audit(1788551025.613:175): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.339568][ T43] audit: type=1400 audit(1788551025.613:176): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.341646][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.341659][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.387142][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.387214][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.387343][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.398532][ T5732] veth0_macvtap: entered promiscuous mode [ 49.411607][ T5739] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.418857][ T5732] veth1_macvtap: entered promiscuous mode [ 49.430899][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.430952][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.462062][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.467099][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.467161][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.474864][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.560345][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.560401][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.582143][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.582204][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.619172][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.622046][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.627003][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627870][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627893][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627912][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627933][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.637269][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.652274][ T5882] Invalid source name [ 49.652344][ T5882] UBIFS error (pid: 5882): cannot open "/dev/sg0", error -22 [ 49.667421][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667698][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667719][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667736][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667754][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667771][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.738667][ T5899] loop3: detected capacity change from 0 to 7 [ 49.745357][ T5899] loop3: p1 p4 [ 49.745422][ T5899] loop3: partition table partially beyond EOD, truncated [ 49.796205][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.803827][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.813042][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 49.823388][ T5907] gretap0: entered promiscuous mode [ 49.826155][ T5907] macvlan2: entered allmulticast mode [ 49.828895][ T5907] gretap0: entered allmulticast mode [ 49.947979][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 49.994851][ T5945] loop3: detected capacity change from 0 to 7 [ 49.997085][ T5945] loop3: p1 p4 [ 49.997101][ T5945] loop3: partition table partially beyond EOD, truncated [ 50.011810][ T5947] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 50.011866][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.035529][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 50.039401][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 50.039533][ T5949] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 50.045041][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 50.052111][ T5949] gretap0: entered promiscuous mode [ 50.052247][ T5949] macvlan2: entered allmulticast mode [ 50.052256][ T5949] gretap0: entered allmulticast mode [ 50.210233][ T5960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.210950][ T5960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.217958][ T5960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.221335][ T5960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.221487][ T5960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.228394][ T5960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.231582][ T5960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.231654][ T5960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.236661][ T5960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.240856][ T5960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.240937][ T5960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.246096][ T5960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.274546][ T5967] Bluetooth: MGMT ver 1.23 [ 50.274640][ T5967] Bluetooth: hci0: unsupported parameter 28 [ 50.275336][ T5967] Bluetooth: hci0: unsupported parameter 28 [ 50.275871][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 50.291242][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 50.468539][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 50.469276][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33'. [ 50.664549][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 50.692202][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 50.730467][ T6021] autofs4:pid:6021:validate_dev_ioctl: invalid path supplied for cmd(0xc0189379) [ 50.735503][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 50.757539][ T6021] Unknown status report in ack skb [ 50.825949][ T6026] evm: overlay not supported [ 50.864676][ T6026] xt_CT: No such helper "snmp_trap" [ 50.956550][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 50.986415][ T6053] Zero length message leads to an empty skb [ 51.101138][ T6073] loop3: detected capacity change from 0 to 7 [ 51.102005][ T6073] loop3: p1 p4 [ 51.102021][ T6073] loop3: partition table partially beyond EOD, truncated [ 51.155010][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 51.159833][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 51.189891][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 51.216668][ T6080] NFSD: Failed to start, no listeners configured. [ 51.310017][ T6090] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 51.416990][ T5837] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 51.589248][ T5837] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 51.597672][ T5837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 51.597738][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.597774][ T5837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.597788][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.597801][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.598659][ T5837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 51.598680][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.598693][ T5837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.598705][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.598717][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.600042][ T5837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 51.600064][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.600077][ T5837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.600089][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.600101][ T5837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.602479][ T5837] usb 7-1: string descriptor 0 read error: -22 [ 51.602533][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.616572][ T5837] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 52.030358][ T6114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.030414][ T6114] IPv6: NLM_F_CREATE should be set when creating new route [ 52.030458][ T6114] IPv6: NLM_F_CREATE should be set when creating new route [ 52.058655][ T6114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.061007][ T6114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.099258][ T6119] tun0: tun_chr_ioctl cmd 1074025675 [ 52.099341][ T6119] tun0: persist disabled [ 52.173302][ T6123] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 52.201192][ T6123] syzkaller0: entered promiscuous mode [ 52.201259][ T6123] syzkaller0: entered allmulticast mode [ 52.278418][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.278487][ T5742] Bluetooth: hci1: command 0x040f tx timeout [ 52.278504][ T67] Bluetooth: hci0: command 0x040f tx timeout [ 52.278567][ T5733] Bluetooth: hci2: command 0x040f tx timeout [ 53.400414][ T6145] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 53.780556][ T6161] bq24190-charger 0-0006: Can't get irq info [ 53.783387][ T6161] bq24190-charger 0-0006: probe with driver bq24190-charger failed with error -22 [ 53.788859][ T6161] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 54.251845][ T6163] loop3: detected capacity change from 0 to 7 [ 54.254870][ T6163] loop3: p1 p4 [ 54.254951][ T6163] loop3: partition table partially beyond EOD, truncated [ 54.283128][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.288642][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.358748][ T5733] Bluetooth: hci0: command 0x040f tx timeout [ 54.358821][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 54.358858][ T5733] Bluetooth: hci2: command 0x040f tx timeout [ 54.358875][ T5733] Bluetooth: hci1: command 0x040f tx timeout [ 54.375311][ T43] kauditd_printk_skb: 146 callbacks suppressed [ 54.375711][ T43] audit: type=1400 audit(1788551030.643:323): avc: denied { getopt } for pid=6169 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.564345][ T43] audit: type=1400 audit(1788551030.833:324): avc: denied { read } for pid=6188 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.690804][ T43] audit: type=1400 audit(1788551030.963:325): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.755382][ T6206] FAULT_INJECTION: forcing a failure. [ 54.755382][ T6206] name failslab, interval 1, probability 0, space 0, times 1 [ 54.755470][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 54.755495][ T6206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.755503][ T6206] Call Trace: [ 54.755508][ T6206] [ 54.755513][ T6206] dump_stack_lvl+0x100/0x190 [ 54.755534][ T6206] should_fail_ex.cold+0x5/0xa [ 54.755553][ T6206] should_failslab+0xc2/0x120 [ 54.755569][ T6206] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.755585][ T6206] ? snd_ctl_get_preferred_subdevice+0x38/0x1d0 [ 54.755601][ T6206] ? open_substream+0xec/0x970 [ 54.755616][ T6206] open_substream+0xec/0x970 [ 54.755629][ T6206] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.755643][ T6206] rawmidi_open_priv+0x55d/0x6f0 [ 54.755659][ T6206] snd_rawmidi_open+0x4b4/0xb90 [ 54.755676][ T6206] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 54.755691][ T6206] ? __pfx_default_wake_function+0x10/0x10 [ 54.755705][ T6206] ? lock_acquire+0x1d1/0x380 [ 54.755716][ T6206] ? do_raw_spin_lock+0x128/0x260 [ 54.755731][ T6206] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 54.755775][ T6206] snd_open+0x201/0x450 [ 54.755796][ T6206] ? __pfx_snd_open+0x10/0x10 [ 54.755813][ T6206] chrdev_open+0x234/0x6a0 [ 54.755832][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 54.755852][ T6206] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 54.755884][ T6206] do_dentry_open+0x6ab/0x14d0 [ 54.755900][ T6206] ? __pfx_chrdev_open+0x10/0x10 [ 54.755915][ T6206] vfs_open+0x82/0x3f0 [ 54.755934][ T6206] path_openat+0x19fa/0x2440 [ 54.755956][ T6206] ? __pfx_path_openat+0x10/0x10 [ 54.755977][ T6206] do_file_open+0x20e/0x430 [ 54.755998][ T6206] ? __pfx_do_file_open+0x10/0x10 [ 54.756037][ T6206] ? _raw_spin_unlock+0x28/0x50 [ 54.756054][ T6206] ? alloc_fd+0x471/0x7a0 [ 54.756078][ T6206] do_sys_openat2+0x10f/0x1e0 [ 54.756123][ T6206] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.756148][ T6206] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 54.756175][ T6206] __x64_sys_openat+0x12d/0x210 [ 54.756204][ T6206] ? __pfx___x64_sys_openat+0x10/0x10 [ 54.756237][ T6206] do_syscall_64+0x123/0x790 [ 54.756256][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.756274][ T6206] RIP: 0033:0x7f973fb5e98e [ 54.756290][ T6206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.756308][ T6206] RSP: 002b:00007f9740a84b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.756327][ T6206] RAX: ffffffffffffffda RBX: 00007f9740a856c0 RCX: 00007f973fb5e98e [ 54.756336][ T6206] RDX: 0000000000143102 RSI: 00007f9740a84c00 RDI: ffffffffffffff9c [ 54.756347][ T6206] RBP: 00007f9740a84c00 R08: 0000000000000000 R09: 0000000000000000 [ 54.756359][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 54.756369][ T6206] R13: 00007f973fe26038 R14: 00007f973fe25fa0 R15: 00007fff62acd3e8 [ 54.756394][ T6206] [ 54.831441][ T6210] __nla_validate_parse: 21 callbacks suppressed [ 54.831454][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 54.969425][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 54.976611][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 55.071370][ T6231] ptrace attach of "/syz-executor exec"[5732] was attempted by " ¥(vƒ\x0a"[6231] [ 55.113629][ T43] audit: type=1400 audit(1788551031.383:326): avc: denied { wake_alarm } for pid=6233 comm="syz.1.123" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.438765][ T43] audit: type=1400 audit(1788551031.713:327): avc: denied { create } for pid=6263 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.445319][ T43] audit: type=1400 audit(1788551031.713:328): avc: denied { bind } for pid=6263 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.452456][ T6264] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 55.490135][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 55.963331][ T1482] usb 7-1: USB disconnect, device number 2 [ 56.009773][ T43] audit: type=1400 audit(1788551032.273:329): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.087230][ T43] audit: type=1400 audit(1788551032.363:330): avc: denied { create } for pid=6299 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.092358][ T43] audit: type=1400 audit(1788551032.363:331): avc: denied { ioctl } for pid=6299 comm="syz.2.133" path="socket:[11695]" dev="sockfs" ino=11695 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.095767][ T43] audit: type=1400 audit(1788551032.363:332): avc: denied { ioctl } for pid=6299 comm="syz.2.133" path="socket:[11697]" dev="sockfs" ino=11697 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.236349][ T6317] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 56.269335][ T6317] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 56.285980][ T6317] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 56.312092][ T6317] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 56.312451][ T6325] loop3: detected capacity change from 0 to 7 [ 56.332321][ T6325] loop3: p1 p4 [ 56.332393][ T6325] loop3: partition table partially beyond EOD, truncated [ 56.376355][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 56.377391][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 56.379763][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 56.379782][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 56.436896][ T67] Bluetooth: hci1: command 0x040f tx timeout [ 56.436941][ T67] Bluetooth: hci2: command 0x040f tx timeout [ 56.436988][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.437015][ T67] Bluetooth: hci0: command 0x040f tx timeout [ 56.461917][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 56.471920][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 57.737266][ T6372] afs: Bad value for 'flock' [ 57.749522][ T6369] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 57.753506][ T6369] syz_tun: entered promiscuous mode [ 57.794574][ T6378] loop3: detected capacity change from 0 to 7 [ 57.795515][ T6378] loop3: p1 p4 [ 57.795528][ T6378] loop3: partition table partially beyond EOD, truncated [ 57.845237][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.852624][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.958016][ T5733] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 57.958796][ T6392] ======================================================= [ 57.958796][ T6392] WARNING: The mand mount option has been deprecated and [ 57.958796][ T6392] and is ignored by this kernel. Remove the mand [ 57.958796][ T6392] option from the mount to silence this warning. [ 57.958796][ T6392] ======================================================= [ 58.077279][ T1482] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 58.094056][ T6412] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 58.154315][ T6409] MTD: Couldn't look up 'mtd0/file0': -2 [ 58.182204][ T6423] loop3: detected capacity change from 0 to 7 [ 58.182775][ T6423] loop3: p1 p4 [ 58.182786][ T6423] loop3: partition table partially beyond EOD, truncated [ 58.229921][ T1482] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 58.230064][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 58.233969][ T1482] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.233983][ T1482] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.234772][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 58.235988][ T1482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 58.236001][ T1482] usb 6-1: Product: syz [ 58.236008][ T1482] usb 6-1: Manufacturer: syz [ 58.236015][ T1482] usb 6-1: SerialNumber: syz [ 58.449369][ T1482] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 58.517120][ T5733] Bluetooth: hci0: command 0x040f tx timeout [ 58.517187][ T5733] Bluetooth: hci2: command 0x040f tx timeout [ 58.517240][ T5733] Bluetooth: hci1: command 0x040f tx timeout [ 58.600431][ T6443] binder: 6442:6443 ioctl c0306201 2000000001c0 returned -14 [ 58.701422][ T5824] usb 6-1: USB disconnect, device number 2 [ 58.716041][ T5824] usblp0: removed [ 58.973861][ T6459] tipc: Started in network mode [ 58.973920][ T6459] tipc: Node identity 2000004, cluster identity 4711 [ 58.974128][ T6459] tipc: Node number set to 33554436 [ 58.982028][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 58.985879][ T6464] syz.3.175 uses obsolete (PF_INET,SOCK_PACKET) [ 59.065623][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 59.074929][ T6464] Process accounting resumed [ 59.339406][ T6487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.418469][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 59.418608][ T43] audit: type=1400 audit(1788551035.693:395): avc: denied { execute } for pid=6492 comm="syz.1.186" path="/31/cgroup.controllers" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.789510][ T6477] syz.0.181 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 59.789576][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 59.789609][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.789620][ T6477] Call Trace: [ 59.789627][ T6477] [ 59.789636][ T6477] dump_stack_lvl+0x100/0x190 [ 59.789680][ T6477] dump_header+0xfb/0x606 [ 59.789703][ T6477] oom_kill_process.cold+0xd/0x380 [ 59.789726][ T6477] out_of_memory+0x340/0x14f0 [ 59.789756][ T6477] ? __pfx_out_of_memory+0x10/0x10 [ 59.789785][ T6477] mem_cgroup_out_of_memory+0xc6/0x130 [ 59.789805][ T6477] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.789821][ T6477] ? find_held_lock+0x2b/0x80 [ 59.789849][ T6477] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.789871][ T6477] ? _raw_spin_unlock+0x28/0x50 [ 59.789897][ T6477] try_charge_memcg+0x783/0xf60 [ 59.789927][ T6477] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.789952][ T6477] ? find_held_lock+0x2b/0x80 [ 59.789973][ T6477] ? rcu_read_unlock+0x17/0x60 [ 59.789996][ T6477] ? rcu_read_unlock+0x17/0x60 [ 59.790028][ T6477] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 59.790062][ T6477] ? kasan_save_track+0x14/0x30 [ 59.790084][ T6477] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 59.790103][ T6477] ? xas_nomem+0x101/0x2c0 [ 59.790128][ T6477] xas_nomem+0x101/0x2c0 [ 59.790146][ T6477] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.790164][ T6477] __filemap_add_folio+0xbb8/0x1370 [ 59.790195][ T6477] ? __pfx___filemap_add_folio+0x10/0x10 [ 59.790220][ T6477] ? __pfx_workingset_update_node+0x10/0x10 [ 59.790255][ T6477] filemap_add_folio+0x1d8/0x6a0 [ 59.790278][ T6477] ? __pfx_filemap_add_folio+0x10/0x10 [ 59.790309][ T6477] __filemap_get_folio_mpol+0x584/0x1320 [ 59.790338][ T6477] filemap_fault+0x879/0x3130 [ 59.790372][ T6477] ? __pfx_filemap_fault+0x10/0x10 [ 59.790403][ T6477] ? find_held_lock+0x2b/0x80 [ 59.790429][ T6477] ? __pfx_filemap_map_pages+0x10/0x10 [ 59.790449][ T6477] __do_fault+0x10b/0x440 [ 59.790468][ T6477] do_fault+0xb3f/0x1830 [ 59.790492][ T6477] ? __pfx_do_fault+0x10/0x10 [ 59.790511][ T6477] ? rcu_read_unlock+0x2d/0xb0 [ 59.790533][ T6477] ? rcu_read_unlock+0x2d/0xb0 [ 59.790558][ T6477] ? __pte_offset_map+0x179/0x310 [ 59.790580][ T6477] __handle_mm_fault+0x150b/0x2f60 [ 59.790610][ T6477] ? __pfx___handle_mm_fault+0x10/0x10 [ 59.790633][ T6477] ? pte_offset_map_lock+0x174/0x320 [ 59.790653][ T6477] ? find_held_lock+0x2b/0x80 [ 59.790675][ T6477] ? find_held_lock+0x2b/0x80 [ 59.790711][ T6477] ? follow_page_pte+0x536/0x1050 [ 59.790745][ T6477] handle_mm_fault+0x363/0xa20 [ 59.790775][ T6477] __get_user_pages+0x8ae/0x2c30 [ 59.790800][ T6477] ? __pfx_mt_find+0x10/0x10 [ 59.790823][ T6477] ? __pfx___get_user_pages+0x10/0x10 [ 59.790852][ T6477] populate_vma_page_range+0x267/0x3f0 [ 59.790876][ T6477] ? __pfx_populate_vma_page_range+0x10/0x10 [ 59.790895][ T6477] ? __pfx_find_vma_intersection+0x10/0x10 [ 59.790921][ T6477] __mm_populate+0x107/0x3a0 [ 59.790944][ T6477] ? __pfx___mm_populate+0x10/0x10 [ 59.790966][ T6477] ? up_write+0x2dc/0x5b0 [ 59.790988][ T6477] vm_mmap_pgoff+0x441/0x470 [ 59.791013][ T6477] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 59.791029][ T6477] ? __fget_files+0x215/0x3d0 [ 59.791054][ T6477] ? __fget_files+0x21f/0x3d0 [ 59.791080][ T6477] ksys_mmap_pgoff+0x3cb/0x610 [ 59.791100][ T6477] ? __x64_sys_futex+0x358/0x4d0 [ 59.791127][ T6477] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 59.791146][ T6477] ? xfd_validate_state+0x129/0x190 [ 59.791169][ T6477] __x64_sys_mmap+0x125/0x190 [ 59.791193][ T6477] do_syscall_64+0x123/0x790 [ 59.791216][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.791234][ T6477] RIP: 0033:0x7f847b39e159 [ 59.791252][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.791266][ T6477] RSP: 002b:00007f84795f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.791284][ T6477] RAX: ffffffffffffffda RBX: 00007f847b625fa0 RCX: 00007f847b39e159 [ 59.791295][ T6477] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 59.791307][ T6477] RBP: 00007f847b435024 R08: 0000000000000008 R09: 000000002c93a000 [ 59.791318][ T6477] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 59.791328][ T6477] R13: 00007f847b626038 R14: 00007f847b625fa0 R15: 00007ffc6e6b9078 [ 59.791352][ T6477] [ 59.792634][ T6477] memory: usage 96kB, limit 96kB, failcnt 1861 [ 59.792650][ T6477] memory+swap: usage 108kB, limit 9007199254740988kB, failcnt 0 [ 59.792660][ T6477] kmem: usage 72kB, limit 9007199254740988kB, failcnt 0 [ 59.792671][ T6477] Memory cgroup stats for /syz0/test: [ 59.792900][ T6477] cache 4096 [ 59.792908][ T6477] rss 4096 [ 59.792914][ T6477] rss_huge 0 [ 59.792919][ T6477] shmem 0 [ 59.792925][ T6477] mapped_file 4096 [ 59.792932][ T6477] dirty 4096 [ 59.792938][ T6477] writeback 0 [ 59.792943][ T6477] workingset_refault_anon 17 [ 59.792949][ T6477] workingset_refault_file 730 [ 59.792956][ T6477] swap 12288 [ 59.792963][ T6477] swapcached 98304 [ 59.792969][ T6477] pgpgin 1064 [ 59.792975][ T6477] pgpgout 1058 [ 59.792980][ T6477] pgfault 115 [ 59.792987][ T6477] pgmajfault 92 [ 59.792993][ T6477] inactive_anon 8192 [ 59.792999][ T6477] active_anon 4096 [ 59.793005][ T6477] inactive_file 0 [ 59.793010][ T6477] active_file 0 [ 59.793016][ T6477] unevictable 0 [ 59.793023][ T6477] hierarchical_memory_limit 98304 [ 59.793030][ T6477] hierarchical_memsw_limit 9223372036854771712 [ 59.793036][ T6477] total_cache 4096 [ 59.793042][ T6477] total_rss 4096 [ 59.793048][ T6477] total_rss_huge 0 [ 59.793055][ T6477] total_shmem 0 [ 59.793061][ T6477] total_mapped_file 4096 [ 59.793067][ T6477] total_dirty 4096 [ 59.793072][ T6477] total_writeback 0 [ 59.793078][ T6477] total_workingset_refault_anon 17 [ 59.793084][ T6477] total_workingset_refault_file 730 [ 59.793093][ T6477] total_swap 12288 [ 59.793099][ T6477] total_swapcached 98304 [ 59.793104][ T6477] total_pgpgin 1064 [ 59.793110][ T6477] total_pgpgout 1058 [ 59.793117][ T6477] total_pgfault 115 [ 59.793124][ T6477] total_pgmajfault 92 [ 59.793130][ T6477] total_inactive_anon 8192 [ 59.793136][ T6477] total_active_anon 4096 [ 59.793142][ T6477] total_inactive_file 0 [ 59.793148][ T6477] total_active_file 0 [ 59.793155][ T6477] total_unevictable 0 [ 59.793161][ T6477] anon_cost 0 [ 59.793167][ T6477] file_cost 0 [ 59.793173][ T6477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.181,pid=6476,uid=0 [ 59.793813][ T6477] Memory cgroup out of memory: Killed process 6476 (syz.0.181) total-vm:102384kB, anon-rss:1408kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 60.062764][ T6510] syzkaller0: entered promiscuous mode [ 60.062817][ T6510] syzkaller0: entered allmulticast mode [ 60.074933][ T43] audit: type=1400 audit(1788551036.343:396): avc: denied { write } for pid=6505 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.075019][ T43] audit: type=1400 audit(1788551036.343:397): avc: denied { setopt } for pid=6505 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.097895][ T6508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 60.248206][ T43] audit: type=1400 audit(1788551036.523:398): avc: denied { mount } for pid=6525 comm="syz.0.194" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.248954][ T43] audit: type=1400 audit(1788551036.523:399): avc: denied { setopt } for pid=6525 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.377141][ T43] audit: type=1400 audit(1788551036.653:400): avc: denied { append } for pid=6535 comm="syz.1.197" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 60.392055][ T6536] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 60.411759][ T43] audit: type=1400 audit(1788551036.683:401): avc: denied { allowed } for pid=6544 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.419835][ T43] audit: type=1400 audit(1788551036.693:402): avc: denied { sqpoll } for pid=6544 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.443637][ T6553] hugetlbfs: syz.0.202 (6553): Using mlock ulimits for SHM_HUGETLB is obsolete [ 60.537084][ T1482] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.609066][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 60.609187][ T67] Bluetooth: hci1: command 0x040f tx timeout [ 60.614150][ T67] Bluetooth: hci2: command 0x040f tx timeout [ 60.708702][ T43] audit: type=1400 audit(1788551036.983:403): avc: denied { create } for pid=6601 comm="syz.3.207" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.719810][ T1482] usb 7-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 60.720739][ T1482] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.720775][ T1482] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.720795][ T1482] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.720807][ T1482] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 60.720946][ T43] audit: type=1400 audit(1788551036.993:404): avc: denied { bind } for pid=6601 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.723372][ T1482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.723391][ T1482] usb 7-1: Product: syz [ 60.723402][ T1482] usb 7-1: Manufacturer: syz [ 60.723413][ T1482] usb 7-1: SerialNumber: syz [ 60.933523][ T6628] loop3: detected capacity change from 0 to 7 [ 60.936771][ T6628] loop3: p1 p4 [ 60.937847][ T6628] loop3: partition table partially beyond EOD, truncated [ 60.966243][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.973374][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 61.093765][ T6637] __nla_validate_parse: 1 callbacks suppressed [ 61.093876][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 61.207056][ T6639] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.360219][ T6642] usb 7-1: controller version 25 is not supported [ 61.360687][ T6642] ushc 7-1:1.0: probe with driver ushc failed with error -22 [ 61.561085][ T6534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 61.577722][ T6648] 9p: Bad value for 'wfdno' [ 61.641379][ T1523] usb 7-1: USB disconnect, device number 3 [ 61.737785][ T6659] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.980622][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 62.017880][ T6685] FAULT_INJECTION: forcing a failure. [ 62.017880][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 62.017958][ T6685] CPU: 2 UID: 0 PID: 6685 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT(full) [ 62.017992][ T6685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.018005][ T6685] Call Trace: [ 62.018011][ T6685] [ 62.018018][ T6685] dump_stack_lvl+0x100/0x190 [ 62.018062][ T6685] should_fail_ex.cold+0x5/0xa [ 62.018089][ T6685] should_failslab+0xc2/0x120 [ 62.018119][ T6685] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 62.018141][ T6685] ? __alloc_skb+0x5b7/0x710 [ 62.018176][ T6685] ? __alloc_skb+0x140/0x710 [ 62.018211][ T6685] __alloc_skb+0x140/0x710 [ 62.018238][ T6685] ? __alloc_skb+0x5b7/0x710 [ 62.018266][ T6685] ? __pfx___alloc_skb+0x10/0x10 [ 62.018301][ T6685] netlink_alloc_large_skb+0x69/0x150 [ 62.018333][ T6685] netlink_sendmsg+0x680/0xda0 [ 62.018365][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.018396][ T6685] ? selinux_socket_sendmsg+0x198/0x2f0 [ 62.018431][ T6685] ____sys_sendmsg+0xa4d/0xbe0 [ 62.018453][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.018488][ T6685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.018524][ T6685] ___sys_sendmsg+0x190/0x1e0 [ 62.018551][ T6685] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.018579][ T6685] ? futex_wait+0x11e/0x370 [ 62.018618][ T6685] ? find_held_lock+0x2b/0x80 [ 62.018660][ T6685] __sys_sendmsg+0x160/0x210 [ 62.018680][ T6685] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.018712][ T6685] do_syscall_64+0x123/0x790 [ 62.018744][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.018765][ T6685] RIP: 0033:0x7f847b39e159 [ 62.018782][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.018801][ T6685] RSP: 002b:00007f84795f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.018821][ T6685] RAX: ffffffffffffffda RBX: 00007f847b625fa0 RCX: 00007f847b39e159 [ 62.018833][ T6685] RDX: 0000000000008800 RSI: 0000200000000180 RDI: 0000000000000005 [ 62.018844][ T6685] RBP: 00007f847b435024 R08: 0000000000000000 R09: 0000000000000000 [ 62.018855][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.018866][ T6685] R13: 00007f847b626038 R14: 00007f847b625fa0 R15: 00007ffc6e6b9078 [ 62.018890][ T6685] [ 62.056125][ T6687] loop4: detected capacity change from 0 to 7 [ 62.066728][ T6687] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 62.066744][ T6687] loop4: partition table partially beyond EOD, truncated [ 62.066954][ T6687] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 62.080919][ T6687] binder: 6686:6687 ioctl c0306201 2000000004c0 returned -14 [ 62.100778][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.187668][ T5824] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.352903][ T5824] usb 6-1: not running at top speed; connect to a high speed hub [ 62.356738][ T5824] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 62.361594][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.361684][ T5824] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.361720][ T5824] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.361770][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.392153][ T5824] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 62.398812][ T5824] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 62.411286][ T5824] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 62.421245][ T5824] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 62.426683][ T5824] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 62.434224][ T5824] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 62.623557][ T6719] loop3: detected capacity change from 0 to 7 [ 62.625242][ T6719] loop3: p1 p4 [ 62.625255][ T6719] loop3: partition table partially beyond EOD, truncated [ 62.654394][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.231'. [ 62.655132][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 62.679219][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 62.683274][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.696366][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 62.705341][ T6727] 9p: Bad value for 'wfdno' [ 62.753843][ T6735] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.784790][ T1482] usb 6-1: USB disconnect, device number 3 [ 62.793432][ T1482] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.803381][ T1482] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.808736][ T1482] keyspan 6-1:1.0: device disconnected [ 63.022515][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.022936][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023082][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023230][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023375][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023528][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023670][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.023886][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024033][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024187][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024331][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024476][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024672][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.024988][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025160][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025320][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025473][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025631][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025786][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.025947][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.026142][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.026344][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.026608][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.027013][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.027198][ T6763] loop3: detected capacity change from 0 to 7 [ 63.027301][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.027636][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.028060][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.028380][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.028673][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.028998][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.029261][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.029516][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.029666][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.029812][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030057][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030221][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030367][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030538][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030703][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030851][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.030995][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031166][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031311][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031460][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031615][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031811][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.031961][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.032129][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.032697][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.032853][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.032999][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.033150][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.033216][ T6763] loop3: p1 p4 [ 63.033230][ T6763] loop3: partition table partially beyond EOD, truncated [ 63.033298][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.033468][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.033674][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.033879][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.034024][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.034184][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.034598][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.034743][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.034888][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.035040][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.035323][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.035488][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.035636][ T6749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.082295][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.083656][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.096223][ T6765] 9p: Bad value for 'wfdno' [ 63.339637][ T6772] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 63.511042][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511113][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511176][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511194][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511212][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511230][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511248][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511272][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511289][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.511303][ T50] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 63.518832][ T50] hid-generic 000A:FFFFFF1D:0002.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 63.573010][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.634967][ T6790] loop3: detected capacity change from 0 to 7 [ 63.637983][ T6790] loop3: p1 p4 [ 63.638028][ T6790] loop3: partition table partially beyond EOD, truncated [ 63.657008][ T6680] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.662213][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.665755][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.679766][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 63.753494][ T6799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.265'. [ 63.830211][ T6680] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 63.831110][ T6680] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.831123][ T6680] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.832630][ T6680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.832643][ T6680] usb 8-1: Product: syz [ 63.832650][ T6680] usb 8-1: Manufacturer: syz [ 63.832657][ T6680] usb 8-1: SerialNumber: syz [ 63.838485][ T67] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 63.976258][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 64.012430][ T6817] loop3: detected capacity change from 0 to 7 [ 64.015450][ T6817] loop3: p1 p4 [ 64.018435][ T6817] loop3: partition table partially beyond EOD, truncated [ 64.044932][ T6680] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 64.069980][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.073946][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 64.105176][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 64.313148][ T6832] Console: switching to colour dummy device 80x25 [ 64.419136][ T1482] usb 8-1: USB disconnect, device number 2 [ 64.421762][ T1482] usblp0: removed [ 64.468154][ T6838] loop3: detected capacity change from 0 to 7 [ 64.468989][ T6838] loop3: p1 p4 [ 64.469000][ T6838] loop3: partition table partially beyond EOD, truncated [ 64.500407][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.524133][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 64.524216][ T43] audit: type=1400 audit(2000000001.369:452): avc: denied { ioctl } for pid=6839 comm="syz.0.281" path="socket:[13585]" dev="sockfs" ino=13585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.524882][ T43] audit: type=1400 audit(2000000001.369:453): avc: denied { bind } for pid=6839 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.665424][ T43] audit: type=1400 audit(2000000001.509:454): avc: denied { append } for pid=6843 comm="syz.0.282" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.955200][ T6847] warning: `syz.3.283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.068761][ T43] audit: type=1400 audit(2000000001.919:455): avc: denied { name_bind } for pid=6849 comm="syz.3.284" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.501782][ T6844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.502081][ T6844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.503444][ T6844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.503660][ T6844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.627779][ T6867] loop3: detected capacity change from 0 to 7 [ 65.634989][ T6867] loop3: p1 p4 [ 65.635062][ T6867] loop3: partition table partially beyond EOD, truncated [ 65.658580][ T5142] loop3: p1 p4 [ 65.658666][ T5142] loop3: partition table partially beyond EOD, truncated [ 65.702147][ T6875] batman_adv: batadv0: Adding interface: veth0 [ 65.702202][ T6875] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.702267][ T6875] batman_adv: batadv0: Interface activated: veth0 [ 65.719823][ T6877] pimreg: entered allmulticast mode [ 65.757593][ T6877] pimreg: left allmulticast mode [ 65.771840][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.771880][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.775984][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.776005][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.786564][ T6880] batman_adv: batadv0: Interface deactivated: veth0 [ 65.786611][ T6880] batman_adv: batadv0: Removing interface: veth0 [ 65.862552][ T43] audit: type=1400 audit(2000000002.709:456): avc: denied { ioctl } for pid=6884 comm="syz.0.296" path="socket:[13697]" dev="sockfs" ino=13697 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.868934][ T43] audit: type=1400 audit(2000000002.719:457): avc: denied { setopt } for pid=6884 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.870321][ T43] audit: type=1400 audit(2000000002.719:458): avc: denied { mount } for pid=6886 comm="syz.2.297" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.005222][ T6895] ip_tables: iptables: counters copy to user failed while replacing table [ 66.012011][ T43] audit: type=1400 audit(2000000002.859:459): avc: denied { write } for pid=6894 comm="syz.3.300" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.024122][ T43] audit: type=1400 audit(2000000002.879:460): avc: denied { call } for pid=6894 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.027105][ T6895] binder_alloc: 6894: binder_alloc_buf, no vma [ 66.036035][ T43] audit: type=1400 audit(2000000002.889:461): avc: denied { create } for pid=6896 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.054709][ T6895] syz.3.300 (6895): drop_caches: 2 [ 66.056494][ T6895] binder: 6894:6895 ioctl 4008941a 2000000002c0 returned -22 [ 66.120373][ T6903] __nla_validate_parse: 3 callbacks suppressed [ 66.120468][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 66.157849][ T1482] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.327325][ T1482] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 66.330800][ T1482] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.330861][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.346685][ T1482] as10x_usb: device has been detected [ 66.350593][ T1482] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 66.388333][ T1482] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 66.413870][ T6852] syz.3.284 (6852) used greatest stack depth: 19816 bytes left [ 66.446730][ T1482] as10x_usb: error during firmware upload part1 [ 66.449387][ T1482] Registered device Abilis Systems DVB-Titan [ 66.518166][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 66.547587][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 66.713328][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.752970][ T6953] syzkaller0: entered promiscuous mode [ 66.754823][ T6953] syzkaller0: entered allmulticast mode [ 66.790376][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.790786][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.849841][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 67.046971][ T6352] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.139124][ T6975] overlay: Unknown parameter 'smackfsdef' [ 67.176893][ T6352] usb 6-1: device descriptor read/64, error -71 [ 67.308625][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 67.334322][ T6988] devtmpfs: Cannot change global quota limit on remount [ 67.380346][ T6991] trusted_key: encrypted_key: master key parameter '²efault' is invalid [ 67.436954][ T6352] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.557963][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.560622][ T5741] Bluetooth: hci2: command 0x040f tx timeout [ 67.560651][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 67.571093][ T6352] usb 6-1: device descriptor read/64, error -71 [ 67.683098][ T6352] usb usb6-port1: attempt power cycle [ 68.019508][ T6352] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.040415][ T6352] usb 6-1: device descriptor read/8, error -71 [ 68.290391][ T6352] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.308673][ T6352] usb 6-1: device descriptor read/8, error -71 [ 68.417416][ T6352] usb usb6-port1: unable to enumerate USB device [ 68.538027][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 68.538086][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 68.549487][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 68.664991][ T7043] nvmet: adding nsid 1 to subsystem testsubsys [ 68.667372][ T7037] configfs-gadget.g1 gadget.0: HOST MAC ce:ac:98:07:10:2c [ 68.667393][ T7037] configfs-gadget.g1 gadget.0: MAC d2:f0:cc:f7:97:ae [ 68.917213][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.965979][ T7071] xt_hashlimit: size too large, truncated to 1048576 [ 69.067385][ T30] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 69.068105][ T30] usb 5-1: Dual-Role OTG device on HNP port [ 69.068596][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.093547][ T7079] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.096924][ T7079] CIFS mount error: No usable UNC path provided in device string! [ 69.096924][ T7079] [ 69.097152][ T7079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.109686][ T30] cdc_ncm 5-1:1.0: MAC-Address: ce:ac:98:07:10:2c [ 69.125225][ T30] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), ce:ac:98:07:10:2c [ 69.528555][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 69.530823][ T43] audit: type=1400 audit(2000000006.379:550): avc: denied { connect } for pid=7100 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.580954][ T43] audit: type=1400 audit(2000000006.429:551): avc: denied { write } for pid=7100 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.587066][ T43] audit: type=1400 audit(2000000006.429:552): avc: denied { write } for pid=7107 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.833913][ T43] audit: type=1400 audit(2000000006.679:553): avc: denied { mount } for pid=7117 comm="syz.0.351" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.849715][ T43] audit: type=1400 audit(2000000006.699:554): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.880735][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.881723][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.916158][ T43] audit: type=1400 audit(2000000006.759:555): avc: denied { bind } for pid=7123 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.036446][ T7133] loop3: detected capacity change from 0 to 7 [ 70.037930][ T7133] loop3: p1 p4 [ 70.037959][ T7133] loop3: partition table partially beyond EOD, truncated [ 70.074774][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.077059][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 70.083506][ T43] audit: type=1400 audit(2000000006.929:556): avc: denied { lock } for pid=7134 comm="syz.1.357" path="socket:[14103]" dev="sockfs" ino=14103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 70.206311][ T43] audit: type=1400 audit(2000000007.049:557): avc: denied { write } for pid=7139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.262610][ T43] audit: type=1400 audit(2000000007.109:558): avc: denied { write } for pid=7142 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.374149][ T7147] netlink: 'syz.3.359': attribute type 4 has an invalid length. [ 70.400389][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 70.501164][ T43] audit: type=1400 audit(2000000007.349:559): avc: denied { create } for pid=7151 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.508594][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 70.617427][ T7165] rnbd_client L607: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 70.621953][ T7165] rnbd_client L1256: Session s1 not found, and path parameter not given [ 70.959800][ T7170] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 71.482944][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.483530][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.601024][ T7183] fuseblk: block size(6144) > page size(4096) not supported by filesystem [ 72.777183][ T1523] usb 7-1: USB disconnect, device number 4 [ 72.796561][ T1523] Unregistered device Abilis Systems DVB-Titan [ 72.800236][ T1523] as10x_usb: device has been disconnected [ 73.418674][ T7186] capability: warning: `syz.1.368' uses 32-bit capabilities (legacy support in use) [ 73.608937][ T5741] Bluetooth: hci0: Malformed Event: 0x2f [ 73.610916][ T7188] xt_hashlimit: size too large, truncated to 1048576 [ 73.891465][ T7204] kvm: user requested TSC rate below hardware speed [ 73.899796][ T1140] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 73.899907][ T1140] sr 2:0:0:0: [sr0] tag#5 Sense Key : Illegal Request [current] [ 73.899976][ T1140] sr 2:0:0:0: [sr0] tag#5 Add. Sense: Invalid command operation code [ 73.900029][ T1140] sr 2:0:0:0: [sr0] tag#5 CDB: Mode Sense(6) 1a 02 8a bb 51 ca 78 da 5c 3e 59 8d [ 74.051556][ T7210] netlink: 144 bytes leftover after parsing attributes in process `syz.0.376'. [ 74.177669][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.182766][ T7216] netlink: 'syz.2.379': attribute type 9 has an invalid length. [ 74.313103][ T7221] No such timeout policy "syz1" [ 74.327704][ T25] usb 8-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 74.328560][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.328590][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.328606][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.328620][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.330456][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.330476][ T25] usb 8-1: Product: syz [ 74.330491][ T25] usb 8-1: Manufacturer: syz [ 74.330500][ T25] usb 8-1: SerialNumber: syz [ 74.468098][ T25] ushc 8-1:1.0: probe with driver ushc failed with error -110 [ 74.654943][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 74.655110][ T43] audit: type=1400 audit(2000000011.499:582): avc: denied { ioctl } for pid=7241 comm="syz.1.389" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.717586][ T7243] mmap: syz.2.388 (7243) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.756336][ T7239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 74.786136][ T43] audit: type=1400 audit(2000000011.629:583): avc: denied { execute_no_trans } for pid=7238 comm="syz.2.388" path="/68/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.808480][ T7239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7239 comm=syz.2.388 [ 74.846601][ T7246] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 74.952205][ T43] audit: type=1400 audit(2000000011.799:584): avc: denied { bind } for pid=7254 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.013230][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 75.018977][ T7253] ushc 8-1:1.0: probe with driver ushc failed with error -110 [ 75.027645][ T25] usb 8-1: USB disconnect, device number 3 [ 75.044800][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 75.077713][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.077786][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.079331][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.079390][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.199941][ T43] audit: type=1400 audit(2000000012.039:585): avc: denied { mounton } for pid=7285 comm="syz.0.401" path="/155/nfsd" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 75.229508][ T43] audit: type=1400 audit(2000000012.079:586): avc: denied { read write } for pid=7290 comm="syz.1.402" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.234994][ T43] audit: type=1400 audit(2000000012.079:587): avc: denied { open } for pid=7290 comm="syz.1.402" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.254596][ T43] audit: type=1400 audit(2000000012.109:588): avc: denied { create } for pid=7293 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 75.288085][ T7294] syzkaller0: entered promiscuous mode [ 75.288232][ T7294] syzkaller0: entered allmulticast mode [ 75.313268][ T43] audit: type=1400 audit(2000000012.169:589): avc: denied { write } for pid=7290 comm="syz.1.402" name="dlm" dev="configfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.315065][ T43] audit: type=1400 audit(2000000012.169:590): avc: denied { write } for pid=7290 comm="syz.1.402" name="comms" dev="configfs" ino=19507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.315824][ T43] audit: type=1400 audit(2000000012.169:591): avc: denied { ioctl } for pid=7290 comm="syz.1.402" path="socket:[19510]" dev="sockfs" ino=19510 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.457874][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 75.546282][ T7319] bridge_slave_1: default FDB implementation only supports local addresses [ 75.547308][ T7319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28184 sclass=netlink_route_socket pid=7319 comm=syz.2.409 [ 75.607053][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 75.607118][ T7321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.410'. [ 75.664908][ T7326] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 75.665009][ T7326] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 76.069472][ T7368] CIFS: Attempting to mount //127.0.0.1/share [ 76.076455][ T7368] CIFS: VFS: Error connecting to socket. Aborting operation. [ 76.079583][ T7368] CIFS: VFS: cifs_mount failed w/return code = -111 [ 76.115901][ T7372] 8021q: VLANs not supported on wg0 [ 76.140249][ T7288] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 76.142108][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 76.142259][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 76.236726][ T7384] loop3: detected capacity change from 0 to 7 [ 76.239813][ T7384] loop3: p1 p4 [ 76.239938][ T7384] loop3: partition table partially beyond EOD, truncated [ 76.246416][ T7386] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 76.296025][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 76.309604][ T7390] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 76.309657][ T7390] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 76.320776][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.400137][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 76.450667][ T7399] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 76.474473][ T7399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.481134][ T7402] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 76.497724][ T7402] Process accounting resumed [ 76.511311][ T7399] gretap1: entered promiscuous mode [ 76.516174][ T7399] bond5: (slave gretap1): making interface the new active one [ 76.521540][ T7399] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 76.596355][ T7409] macvlan3: entered promiscuous mode [ 76.596401][ T7409] macvlan3: entered allmulticast mode [ 76.597334][ T7409] bond5: entered promiscuous mode [ 76.600334][ T7409] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 76.600660][ T7409] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 76.601383][ T7409] bond5: left promiscuous mode [ 76.617018][ T42] cfg80211: failed to load regulatory.db [ 76.995539][ T7415] usb 2-1: USB disconnect, device number 2 [ 77.171020][ T7426] 9pnet_virtio: no channels available for device syz [ 77.247732][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 77.265583][ T1523] lg-g15 0003:046D:0A07.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 77.275244][ T1523] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input6 [ 77.285199][ T7429] process 'syz.3.441' launched './file0' with NULL argv: empty string added [ 77.296604][ T7426] cgroup: Unknown subsys name 'measure' [ 77.359302][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.561380][ T7451] binder: 7450:7451 ioctl c0306201 2000000004c0 returned -22 [ 77.657157][ T7460] loop3: detected capacity change from 0 to 7 [ 77.658241][ T7460] loop3: p1 p4 [ 77.658252][ T7460] loop3: partition table partially beyond EOD, truncated [ 77.690450][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 77.692459][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 77.730392][ T7473] netlink: 'syz.3.457': attribute type 21 has an invalid length. [ 77.912861][ T7490] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 78.024419][ T7496] FAULT_INJECTION: forcing a failure. [ 78.024419][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 78.024505][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz.3.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.024542][ T7496] Tainted: [L]=SOFTLOCKUP [ 78.024549][ T7496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.024560][ T7496] Call Trace: [ 78.024566][ T7496] [ 78.024572][ T7496] dump_stack_lvl+0x100/0x190 [ 78.024616][ T7496] should_fail_ex.cold+0x5/0xa [ 78.024643][ T7496] should_failslab+0xc2/0x120 [ 78.024669][ T7496] __kmalloc_noprof+0xfc/0x840 [ 78.024687][ T7496] ? load_msg+0x118/0x4a0 [ 78.024711][ T7496] load_msg+0x118/0x4a0 [ 78.024735][ T7496] do_msgrcv+0x209/0x16f0 [ 78.024755][ T7496] ? __pfx_do_msg_fill+0x10/0x10 [ 78.024779][ T7496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.024808][ T7496] ? __pfx_do_msgrcv+0x10/0x10 [ 78.024829][ T7496] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 78.024856][ T7496] ? xfd_validate_state+0x129/0x190 [ 78.024882][ T7496] ? do_syscall_64+0x123/0x790 [ 78.024901][ T7496] do_syscall_64+0x123/0x790 [ 78.024923][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.024941][ T7496] RIP: 0033:0x7f973fb9e159 [ 78.024956][ T7496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.024973][ T7496] RSP: 002b:00007f9740a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 78.024990][ T7496] RAX: ffffffffffffffda RBX: 00007f973fe25fa0 RCX: 00007f973fb9e159 [ 78.025002][ T7496] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000 [ 78.025012][ T7496] RBP: 00007f973fc35024 R08: 0000000000004800 R09: 0000000000000000 [ 78.025023][ T7496] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 78.025033][ T7496] R13: 00007f973fe26038 R14: 00007f973fe25fa0 R15: 00007fff62acd3e8 [ 78.025057][ T7496] [ 78.139770][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 78.327630][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.331594][ T7515] tipc: Enabled bearer , priority 0 [ 78.335105][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.345336][ T7522] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 78.348383][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.350581][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.522820][ T7514] tipc: Disabling bearer [ 78.670583][ T7541] nft_compat: unsupported protocol 0 [ 78.688429][ T7541] bridge1: entered promiscuous mode [ 78.727684][ T7547] openvswitch: netlink: Missing key (keys=40, expected=100) [ 78.843527][ T5741] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 78.992859][ T5613] hsr0: entered promiscuous mode [ 79.238278][ T7574] __nla_validate_parse: 13 callbacks suppressed [ 79.238402][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 79.238435][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 79.238483][ T7574] netlink: 'syz.0.484': attribute type 11 has an invalid length. [ 79.238496][ T7574] netlink: 'syz.0.484': attribute type 7 has an invalid length. [ 79.325829][ T7576] capability: warning: `syz.3.485' uses deprecated v2 capabilities in a way that may be insecure [ 79.361732][ T7581] nbd0: detected capacity change from 0 to 127 [ 79.374293][ T68] block nbd0: Receive control failed (result -104) [ 79.563791][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 79.757283][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 79.757349][ T43] audit: type=1400 audit(2000000016.609:628): avc: denied { write } for pid=7597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.831321][ T43] audit: type=1400 audit(2000000016.679:629): avc: denied { write } for pid=7602 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.863028][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.493'. [ 79.866424][ T7610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.493'. [ 79.923266][ T43] audit: type=1400 audit(2000000016.769:630): avc: denied { module_request } for pid=7613 comm="syz.2.494" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.098911][ T7631] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 80.141007][ T43] audit: type=1400 audit(2000000016.989:631): avc: denied { ioctl } for pid=7634 comm="syz.0.499" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.213909][ T7639] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.214684][ T7640] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 80.222709][ T7640] iommufd_mock iommufd_mock3: Adding to iommu group 11 [ 80.224070][ T7640] iommufd_mock iommufd_mock4: Adding to iommu group 12 [ 80.225676][ T7640] iommufd_mock iommufd_mock5: Adding to iommu group 13 [ 80.226917][ T7640] iommufd_mock iommufd_mock6: Adding to iommu group 14 [ 80.228091][ T7640] iommufd_mock iommufd_mock7: Adding to iommu group 15 [ 80.229263][ T7640] iommufd_mock iommufd_mock8: Adding to iommu group 16 [ 80.230333][ T7640] iommufd_mock iommufd_mock9: Adding to iommu group 17 [ 80.231442][ T7640] iommufd_mock iommufd_mock10: Adding to iommu group 18 [ 80.232635][ T7640] iommufd_mock iommufd_mock11: Adding to iommu group 19 [ 80.233722][ T7640] iommufd_mock iommufd_mock12: Adding to iommu group 20 [ 80.235414][ T7640] iommufd_mock iommufd_mock13: Adding to iommu group 21 [ 80.236597][ T7640] iommufd_mock iommufd_mock14: Adding to iommu group 22 [ 80.241871][ T7640] iommufd_mock iommufd_mock15: Adding to iommu group 23 [ 80.262051][ T7640] iommufd_mock iommufd_mock16: Adding to iommu group 24 [ 80.285695][ T7639] iommufd_mock iommufd_mock2: Adding to iommu group 25 [ 80.299391][ T7640] iommufd_mock iommufd_mock17: Adding to iommu group 26 [ 80.302613][ T7639] iommufd_mock iommufd_mock18: Adding to iommu group 27 [ 80.307706][ T7639] iommufd_mock iommufd_mock20: Adding to iommu group 28 [ 80.309922][ T7640] iommufd_mock iommufd_mock19: Adding to iommu group 29 [ 80.313886][ T7640] iommufd_mock iommufd_mock21: Adding to iommu group 30 [ 80.323118][ T7639] iommufd_mock iommufd_mock22: Adding to iommu group 31 [ 80.337665][ T7639] iommufd_mock iommufd_mock24: Adding to iommu group 32 [ 80.344339][ T7639] iommufd_mock iommufd_mock25: Adding to iommu group 33 [ 80.351725][ T7640] iommufd_mock iommufd_mock23: Adding to iommu group 34 [ 80.364059][ T7640] iommufd_mock iommufd_mock27: Adding to iommu group 35 [ 80.365278][ T7640] iommufd_mock iommufd_mock28: Adding to iommu group 36 [ 80.375371][ T7639] iommufd_mock iommufd_mock26: Adding to iommu group 37 [ 80.382291][ T7639] iommufd_mock iommufd_mock30: Adding to iommu group 38 [ 80.385947][ T7639] iommufd_mock iommufd_mock31: Adding to iommu group 39 [ 80.414637][ T7640] iommufd_mock iommufd_mock29: Adding to iommu group 40 [ 80.415007][ T7639] iommufd_mock iommufd_mock32: Adding to iommu group 41 [ 80.415583][ T7640] iommufd_mock iommufd_mock33: Adding to iommu group 42 [ 80.416477][ T7640] iommufd_mock iommufd_mock35: Adding to iommu group 43 [ 80.422080][ T7640] iommufd_mock iommufd_mock36: Adding to iommu group 44 [ 80.434163][ T7639] iommufd_mock iommufd_mock34: Adding to iommu group 45 [ 80.436475][ T7640] iommufd_mock iommufd_mock37: Adding to iommu group 46 [ 80.442988][ T7639] iommufd_mock iommufd_mock38: Adding to iommu group 47 [ 80.444031][ T7639] iommufd_mock iommufd_mock40: Adding to iommu group 48 [ 80.444227][ T7640] iommufd_mock iommufd_mock39: Adding to iommu group 49 [ 80.461789][ T7640] iommufd_mock iommufd_mock41: Adding to iommu group 50 [ 80.468328][ T7639] iommufd_mock iommufd_mock42: Adding to iommu group 51 [ 80.471311][ T7639] iommufd_mock iommufd_mock43: Adding to iommu group 52 [ 80.472806][ T7639] iommufd_mock iommufd_mock44: Adding to iommu group 53 [ 80.497225][ T7640] iommufd_mock iommufd_mock46: Adding to iommu group 54 [ 80.498339][ T7639] iommufd_mock iommufd_mock45: Adding to iommu group 55 [ 80.504314][ T7640] iommufd_mock iommufd_mock47: Adding to iommu group 56 [ 80.508480][ T7639] iommufd_mock iommufd_mock48: Adding to iommu group 57 [ 80.524645][ T7640] iommufd_mock iommufd_mock49: Adding to iommu group 58 [ 80.525413][ T7640] iommufd_mock iommufd_mock51: Adding to iommu group 59 [ 80.528826][ T7640] iommufd_mock iommufd_mock52: Adding to iommu group 60 [ 80.532601][ T7639] iommufd_mock iommufd_mock50: Adding to iommu group 61 [ 80.533320][ T7639] iommufd_mock iommufd_mock53: Adding to iommu group 62 [ 80.534037][ T7639] iommufd_mock iommufd_mock54: Adding to iommu group 63 [ 80.542849][ T7639] iommufd_mock iommufd_mock55: Adding to iommu group 64 [ 80.544633][ T7639] iommufd_mock iommufd_mock56: Adding to iommu group 65 [ 80.548772][ T7639] iommufd_mock iommufd_mock57: Adding to iommu group 66 [ 80.550994][ T7639] iommufd_mock iommufd_mock58: Adding to iommu group 67 [ 80.551684][ T7639] iommufd_mock iommufd_mock59: Adding to iommu group 68 [ 80.564039][ T7639] iommufd_mock iommufd_mock60: Adding to iommu group 69 [ 80.565089][ T7639] iommufd_mock iommufd_mock61: Adding to iommu group 70 [ 80.566247][ T7639] iommufd_mock iommufd_mock62: Adding to iommu group 71 [ 80.570182][ T7639] iommufd_mock iommufd_mock63: Adding to iommu group 72 [ 80.579616][ T7639] iommufd_mock iommufd_mock64: Adding to iommu group 73 [ 80.580463][ T7639] iommufd_mock iommufd_mock65: Adding to iommu group 74 [ 80.733575][ T43] audit: type=1400 audit(2000000017.579:632): avc: denied { accept } for pid=7672 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.734393][ T43] audit: type=1400 audit(2000000017.579:633): avc: denied { ioctl } for pid=7672 comm="syz.3.507" path="socket:[19092]" dev="sockfs" ino=19092 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.936917][ T5824] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.005380][ T43] audit: type=1400 audit(2000000017.849:634): avc: denied { write } for pid=7676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.031723][ T43] audit: type=1400 audit(2000000017.879:635): avc: denied { setopt } for pid=7679 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.064438][ T43] audit: type=1400 audit(2000000017.909:636): avc: denied { write } for pid=7681 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.099347][ T5824] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 81.100225][ T5824] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.100251][ T5824] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 81.100263][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.101831][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.101843][ T5824] usb 7-1: Product: syz [ 81.101850][ T5824] usb 7-1: Manufacturer: syz [ 81.101858][ T5824] usb 7-1: SerialNumber: syz [ 81.105456][ T7671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.107769][ T5824] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 81.107782][ T5824] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 81.107801][ T5824] usbserial_generic 7-1:1.0: generic converter detected [ 81.114969][ T5824] usb 7-1: generic converter now attached to ttyUSB0 [ 81.155448][ T43] audit: type=1400 audit(2000000017.999:637): avc: denied { write } for pid=7686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.372339][ T63] usb 7-1: USB disconnect, device number 5 [ 81.394307][ T63] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 81.394834][ T63] usbserial_generic 7-1:1.0: device disconnected [ 81.814480][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 81.861791][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.511'. [ 81.953053][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 81.954100][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 81.963131][ T7707] macvlan0: entered allmulticast mode [ 81.963186][ T7707] bridge0: entered allmulticast mode [ 81.963848][ T7707] bridge0: entered promiscuous mode [ 82.012261][ T7717] ptrace attach of "/syz-executor exec"[5734] was attempted by "/syz-executor exec"[7717] [ 82.012537][ T7716] ptrace attach of "/syz-executor exec"[5734] was attempted by "/syz-executor exec"[7716] [ 82.198577][ T5741] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 82.198773][ T5741] Bluetooth: hci0: Injecting HCI hardware error event [ 82.200935][ T5741] Bluetooth: hci0: hardware error 0x00 [ 82.226978][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.377205][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 82.380386][ T63] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 82.384919][ T63] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 82.384967][ T63] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 82.385015][ T63] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.385056][ T63] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 82.385100][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 82.385136][ T63] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 82.408311][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 82.416276][ T63] usb 8-1: string descriptor 0 read error: -22 [ 82.422143][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.431981][ T63] usb 8-1: config 0 descriptor?? [ 82.436191][ T63] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.438948][ T63] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.451268][ T63] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 82.678278][ T1311] block nbd0: Connection timed out, retrying (0/1 alive) [ 82.682293][ T1311] block nbd0: Dead connection, failed to find a fallback [ 82.692176][ T1311] block nbd0: shutting down sockets [ 82.692431][ T1311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 82.692506][ T1311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 82.692533][ T1311] Buffer I/O error on dev nbd0, logical block 1, async page read [ 82.692544][ T1311] Buffer I/O error on dev nbd0, logical block 2, async page read [ 82.692554][ T1311] Buffer I/O error on dev nbd0, logical block 3, async page read [ 82.693426][ T1311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.693448][ T1311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 82.693525][ T1311] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.693550][ T1311] Buffer I/O error on dev nbd0, logical block 1, async page read [ 82.693608][ T1311] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.693626][ T1311] Buffer I/O error on dev nbd0, logical block 2, async page read [ 82.693739][ T1311] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.693757][ T1311] Buffer I/O error on dev nbd0, logical block 3, async page read [ 82.693984][ T1311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.694003][ T1311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 82.694064][ T1311] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.694082][ T1311] Buffer I/O error on dev nbd0, logical block 1, async page read [ 82.694139][ T1311] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.694205][ T1311] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.694279][ T1311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.695391][ T5743] ldm_validate_partition_table(): Disk read failed. [ 82.698066][ T5743] Dev nbd0: unable to read RDB block 0 [ 82.699003][ T5743] nbd0: unable to read partition table [ 82.711073][ T5743] ldm_validate_partition_table(): Disk read failed. [ 82.711533][ T5743] Dev nbd0: unable to read RDB block 0 [ 82.713300][ T5743] nbd0: unable to read partition table [ 83.221543][ T6680] usb 8-1: USB disconnect, device number 4 [ 83.879997][ T7780] loop3: detected capacity change from 0 to 7 [ 83.887678][ T7780] loop3: p1 p4 [ 83.887734][ T7780] loop3: partition table partially beyond EOD, truncated [ 83.924888][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.926927][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 84.033601][ T7787] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 84.067045][ T7787] VFS: Can't find a romfs filesystem on dev nullb0. [ 84.067045][ T7787] [ 84.110050][ T7803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.277036][ T5741] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 84.371527][ T7825] FAULT_INJECTION: forcing a failure. [ 84.371527][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 84.371604][ T7825] CPU: 3 UID: 0 PID: 7825 Comm: syz.3.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.371645][ T7825] Tainted: [L]=SOFTLOCKUP [ 84.371649][ T7825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.371656][ T7825] Call Trace: [ 84.371661][ T7825] [ 84.371665][ T7825] dump_stack_lvl+0x100/0x190 [ 84.371686][ T7825] should_fail_ex.cold+0x5/0xa [ 84.371703][ T7825] should_failslab+0xc2/0x120 [ 84.371717][ T7825] __kmalloc_cache_noprof+0x91/0x6d0 [ 84.371733][ T7825] ? copy_mount_options+0x55/0x190 [ 84.371753][ T7825] copy_mount_options+0x55/0x190 [ 84.371773][ T7825] __x64_sys_mount+0x1ab/0x310 [ 84.371789][ T7825] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.371809][ T7825] do_syscall_64+0x123/0x790 [ 84.371824][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.371838][ T7825] RIP: 0033:0x7f973fb9e159 [ 84.371848][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.371859][ T7825] RSP: 002b:00007f9740a85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.371870][ T7825] RAX: ffffffffffffffda RBX: 00007f973fe25fa0 RCX: 00007f973fb9e159 [ 84.371877][ T7825] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 84.371884][ T7825] RBP: 00007f9740a85090 R08: 0000200000000240 R09: 0000000000000000 [ 84.371891][ T7825] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000001 [ 84.371897][ T7825] R13: 00007f973fe26038 R14: 00007f973fe25fa0 R15: 00007fff62acd3e8 [ 84.371911][ T7825] [ 84.406221][ T7833] openvswitch: netlink: Invalid VLAN frame [ 84.453806][ T7839] __nla_validate_parse: 4 callbacks suppressed [ 84.454086][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 84.458631][ T7833] jffs2: notice: (7833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.665682][ T7854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.549'. [ 84.721032][ T7859] FAULT_INJECTION: forcing a failure. [ 84.721032][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.721408][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.2.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.721450][ T7859] Tainted: [L]=SOFTLOCKUP [ 84.721457][ T7859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.721467][ T7859] Call Trace: [ 84.721473][ T7859] [ 84.721479][ T7859] dump_stack_lvl+0x100/0x190 [ 84.721523][ T7859] should_fail_ex.cold+0x5/0xa [ 84.721545][ T7859] _copy_from_user+0x2e/0xd0 [ 84.721570][ T7859] copy_mount_options+0x76/0x190 [ 84.721597][ T7859] __x64_sys_mount+0x1ab/0x310 [ 84.721619][ T7859] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.721647][ T7859] do_syscall_64+0x123/0x790 [ 84.721665][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.721682][ T7859] RIP: 0033:0x7f161519e159 [ 84.721696][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.721712][ T7859] RSP: 002b:00007f161614a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.721729][ T7859] RAX: ffffffffffffffda RBX: 00007f1615425fa0 RCX: 00007f161519e159 [ 84.721740][ T7859] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 84.721750][ T7859] RBP: 00007f161614a090 R08: 0000200000000240 R09: 0000000000000000 [ 84.721760][ T7859] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000001 [ 84.721770][ T7859] R13: 00007f1615426038 R14: 00007f1615425fa0 R15: 00007fffe4583078 [ 84.721795][ T7859] [ 84.802662][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 84.802749][ T43] audit: type=1400 audit(2000000021.649:665): avc: denied { append } for pid=7862 comm="syz.0.552" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.914490][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 84.959392][ T7882] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 84.974372][ T7874] smpboot: CPU 1 is now offline [ 85.095245][ T7888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.158745][ T43] audit: type=1400 audit(2000000022.009:666): avc: denied { name_connect } for pid=7889 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 85.183374][ T7890] netlink: 236 bytes leftover after parsing attributes in process `syz.2.562'. [ 85.203236][ T7891] netlink: 236 bytes leftover after parsing attributes in process `syz.2.562'. [ 85.208813][ T7891] sctp: [Deprecated]: syz.2.562 (pid 7891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.208813][ T7891] Use struct sctp_sack_info instead [ 85.215684][ T7895] sctp: [Deprecated]: syz.2.562 (pid 7895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.215684][ T7895] Use struct sctp_sack_info instead [ 85.227494][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 85.227562][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 85.244810][ T7897] FAULT_INJECTION: forcing a failure. [ 85.244810][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 85.244900][ T7897] CPU: 3 UID: 0 PID: 7897 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.244920][ T7897] Tainted: [L]=SOFTLOCKUP [ 85.244924][ T7897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.244932][ T7897] Call Trace: [ 85.244936][ T7897] [ 85.244941][ T7897] dump_stack_lvl+0x100/0x190 [ 85.244966][ T7897] should_fail_ex.cold+0x5/0xa [ 85.244983][ T7897] should_failslab+0xc2/0x120 [ 85.245000][ T7897] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.245012][ T7897] ? do_getname+0x35/0x390 [ 85.245031][ T7897] do_getname+0x35/0x390 [ 85.245047][ T7897] user_path_at+0x26/0x60 [ 85.245059][ T7897] __x64_sys_mount+0x1fb/0x310 [ 85.245075][ T7897] ? __pfx___x64_sys_mount+0x10/0x10 [ 85.245094][ T7897] do_syscall_64+0x123/0x790 [ 85.245109][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.245121][ T7897] RIP: 0033:0x7f973fb9e159 [ 85.245131][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.245142][ T7897] RSP: 002b:00007f9740a85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.245154][ T7897] RAX: ffffffffffffffda RBX: 00007f973fe25fa0 RCX: 00007f973fb9e159 [ 85.245161][ T7897] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 85.245167][ T7897] RBP: 00007f9740a85090 R08: 0000200000000240 R09: 0000000000000000 [ 85.245174][ T7897] R10: 0000000000010800 R11: 0000000000000246 R12: 0000000000000001 [ 85.245180][ T7897] R13: 00007f973fe26038 R14: 00007f973fe25fa0 R15: 00007fff62acd3e8 [ 85.245194][ T7897] [ 85.327349][ T7899] kvm: faulting far call emulation tainted memory [ 85.332284][ T7899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.337112][ T7899] 9p: Bad value for 'wfdno' [ 85.427159][ T43] audit: type=1400 audit(2000000022.279:667): avc: denied { block_suspend } for pid=7902 comm="syz.2.568" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.442326][ T7907] 9p: Unknown access argument 00000000000000000000: -22 [ 85.463593][ T43] audit: type=1400 audit(2000000022.309:668): avc: denied { setattr } for pid=7904 comm="syz.0.567" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.512776][ T7910] loop5: detected capacity change from 0 to 2640 [ 85.516423][ T7910] ldm_validate_partition_table(): Disk read failed. [ 85.517258][ T7910] Dev loop5: unable to read RDB block 0 [ 85.517405][ T7910] loop5: unable to read partition table [ 85.517582][ T7910] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 85.542014][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 85.548683][ T5142] ldm_validate_partition_table(): Disk read failed. [ 85.548768][ T5142] Dev loop5: unable to read RDB block 0 [ 85.549097][ T5142] loop5: unable to read partition table [ 85.636142][ T7914] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 85.636556][ T7913] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 85.822509][ T7917] macvlan1: entered promiscuous mode [ 85.822577][ T7917] macvlan1: entered allmulticast mode [ 85.822780][ T7917] bridge0: port 3(macvlan1) entered blocking state [ 85.822831][ T7917] bridge0: port 3(macvlan1) entered disabled state [ 86.020954][ T7922] loop3: detected capacity change from 0 to 7 [ 86.021983][ T7922] loop3: p1 p4 [ 86.021999][ T7922] loop3: partition table partially beyond EOD, truncated [ 86.065826][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 86.069664][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 86.091125][ T7925] No control pipe specified [ 86.091364][ T7924] No control pipe specified [ 86.091776][ T43] audit: type=1400 audit(2000000022.939:669): avc: denied { write } for pid=7923 comm="syz.0.575" name="tcp6" dev="proc" ino=4026533160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.320440][ T7930] overlayfs: conflicting options: userxattr,redirect_dir=on qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 86.512482][ T7937] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4240390349 (8480780698 ns) > initial count (422248798 ns). Using initial count to start timer. [ 86.527360][ T7937] kvm [7936]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 86.528508][ T7937] kvm [7936]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 86.531067][ T43] audit: type=1400 audit(2000000023.379:670): avc: denied { listen } for pid=7943 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.858237][ T5741] Bluetooth: hci2: unexpected subevent 0x0c length: 30 > 5 [ 86.892618][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 87.000961][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 87.221559][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.238715][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.670141][ T43] audit: type=1400 audit(2000000024.519:671): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 88.596996][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.805007][ T8073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.873309][ T43] audit: type=1400 audit(2000000025.719:672): avc: denied { write } for pid=8072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.028563][ T43] audit: type=1400 audit(2000000025.869:673): avc: denied { write } for pid=8084 comm="syz.0.628" name="/" dev="ocfs2_dlmfs" ino=22518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.029083][ T43] audit: type=1400 audit(2000000025.879:674): avc: denied { create } for pid=8084 comm="syz.0.628" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 89.029230][ T8085] o2cb: This node has not been configured. [ 89.029238][ T8085] o2cb: Cluster check failed. Fix errors before retrying. [ 89.029251][ T8085] (syz.0.628,8085,3):user_dlm_register:674 ERROR: status = -22 [ 89.029274][ T8085] (syz.0.628,8085,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 89.039937][ T8088] o2cb: This node has not been configured. [ 89.039953][ T8088] o2cb: Cluster check failed. Fix errors before retrying. [ 89.039968][ T8088] (syz.0.628,8088,3):user_dlm_register:674 ERROR: status = -22 [ 89.040032][ T8088] (syz.0.628,8088,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 89.060029][ T8091] netlink: 'syz.2.627': attribute type 13 has an invalid length. [ 89.072269][ T8091] netlink: 'syz.2.627': attribute type 13 has an invalid length. [ 89.090705][ T8082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8082 comm=syz.2.627 [ 89.354623][ T8109] FAULT_INJECTION: forcing a failure. [ 89.354623][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 89.354718][ T8109] CPU: 3 UID: 0 PID: 8109 Comm: syz.2.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.354758][ T8109] Tainted: [L]=SOFTLOCKUP [ 89.354767][ T8109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.354778][ T8109] Call Trace: [ 89.354784][ T8109] [ 89.354792][ T8109] dump_stack_lvl+0x100/0x190 [ 89.354838][ T8109] should_fail_ex.cold+0x5/0xa [ 89.354861][ T8109] should_failslab+0xc2/0x120 [ 89.354885][ T8109] __kmalloc_noprof+0xfc/0x840 [ 89.354906][ T8109] ? tomoyo_encode2+0xfb/0x3c0 [ 89.354933][ T8109] tomoyo_encode2+0xfb/0x3c0 [ 89.354959][ T8109] tomoyo_encode+0x29/0x50 [ 89.354979][ T8109] tomoyo_mount_acl+0x14c/0x8b0 [ 89.355008][ T8109] ? is_bpf_text_address+0x8a/0x1a0 [ 89.355032][ T8109] ? is_bpf_text_address+0x8a/0x1a0 [ 89.355058][ T8109] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.355091][ T8109] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 89.355121][ T8109] ? kernel_text_address+0x8d/0x100 [ 89.355152][ T8109] ? unwind_get_return_address+0x59/0xa0 [ 89.355250][ T8109] ? arch_stack_walk+0xa6/0xf0 [ 89.355278][ T8109] ? __lock_acquire+0x4c5/0x1ec0 [ 89.355306][ T8109] ? tomoyo_mount_permission+0x1f6/0x460 [ 89.355345][ T8109] ? tomoyo_domain+0xb2/0x150 [ 89.355417][ T8109] ? tomoyo_profile+0x47/0x60 [ 89.355451][ T8109] tomoyo_mount_permission+0x214/0x460 [ 89.355485][ T8109] ? tomoyo_mount_permission+0x1f6/0x460 [ 89.355513][ T8109] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 89.355554][ T8109] security_sb_mount+0xdd/0x270 [ 89.355584][ T8109] path_mount+0x158/0x24c0 [ 89.355654][ T8109] ? __pfx_path_mount+0x10/0x10 [ 89.355682][ T8109] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.355724][ T8109] ? putname+0xb1/0x110 [ 89.355749][ T8109] ? kmem_cache_free+0x127/0x6c0 [ 89.355788][ T8109] ? __x64_sys_mount+0x293/0x310 [ 89.355816][ T8109] __x64_sys_mount+0x293/0x310 [ 89.355842][ T8109] ? __pfx___x64_sys_mount+0x10/0x10 [ 89.355876][ T8109] do_syscall_64+0x123/0x790 [ 89.355901][ T8109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.355922][ T8109] RIP: 0033:0x7f161519e159 [ 89.355938][ T8109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.355957][ T8109] RSP: 002b:00007f161614a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.355977][ T8109] RAX: ffffffffffffffda RBX: 00007f1615425fa0 RCX: 00007f161519e159 [ 89.356041][ T8109] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000200000000300 [ 89.356053][ T8109] RBP: 00007f1615235024 R08: 0000200000000600 R09: 0000000000000000 [ 89.356065][ T8109] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000 [ 89.356077][ T8109] R13: 00007f1615426038 R14: 00007f1615425fa0 R15: 00007fffe4583078 [ 89.356104][ T8109] [ 89.488591][ T8114] xt_l2tp: invalid flags combination: c [ 89.518160][ T8116] team0 (unregistering): Port device team_slave_0 removed [ 89.525309][ T8116] team0 (unregistering): Port device team_slave_1 removed [ 89.597114][ T1482] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.673054][ T8119] loop3: detected capacity change from 0 to 7 [ 89.676921][ T8119] loop3: p1 p4 [ 89.676968][ T8119] loop3: partition table partially beyond EOD, truncated [ 89.751411][ T8123] __nla_validate_parse: 42 callbacks suppressed [ 89.754327][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 89.768605][ T1482] usb 7-1: Using ep0 maxpacket: 8 [ 89.783297][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 89.788107][ T1482] usb 7-1: unable to get BOS descriptor or descriptor too short [ 89.788166][ T1482] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.792904][ T1482] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 89.792942][ T1482] usb 7-1: can't read configurations, error -71 [ 89.793056][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 89.810948][ T6390] udevd[6390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 89.816084][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 89.899120][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 89.899395][ T43] audit: type=1400 audit(2000000026.749:684): avc: denied { mount } for pid=8126 comm="syz.0.639" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 89.921606][ T8127] overlayfs: failed to verify upper (238/file1, ino=1291, err=-116) [ 89.921665][ T8127] overlayfs: failed to verify index dir 'upper' xattr [ 89.921761][ T8127] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 89.931080][ T8127] overlayfs: failed to verify upper root origin [ 89.957516][ T43] audit: type=1400 audit(2000000026.799:685): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.075555][ T8136] netlink: 71 bytes leftover after parsing attributes in process `syz.0.642'. [ 90.090431][ T8136] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 90.253459][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 90.348038][ T43] audit: type=1400 audit(2000000027.189:686): avc: denied { write } for pid=8150 comm="syz.2.645" name="functions" dev="configfs" ino=16414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.414630][ T43] audit: type=1400 audit(2000000027.259:687): avc: denied { write } for pid=8150 comm="syz.2.645" name="fs" dev="configfs" ino=23985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.423610][ T43] audit: type=1400 audit(2000000027.269:688): avc: denied { write } for pid=8150 comm="syz.2.645" name="c.1" dev="configfs" ino=16419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.428261][ T43] audit: type=1400 audit(2000000027.269:689): avc: denied { write } for pid=8150 comm="syz.2.645" name="c.1" dev="configfs" ino=16419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.441172][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 90.494296][ T43] audit: type=1400 audit(2000000027.339:690): avc: denied { name_bind } for pid=8160 comm="syz.0.648" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.495466][ T43] audit: type=1400 audit(2000000027.339:691): avc: denied { create } for pid=8160 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 90.496234][ T43] audit: type=1400 audit(2000000027.339:692): avc: denied { write } for pid=8160 comm="syz.0.648" path="socket:[24828]" dev="sockfs" ino=24828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 90.567205][ T43] audit: type=1400 audit(2000000027.409:693): avc: denied { set_context_mgr } for pid=8160 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.677093][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.828327][ T8165] trusted_key: encrypted_key: keylen parameter is missing [ 91.405396][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 91.405458][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 91.417181][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 91.417247][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 91.468080][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 91.568073][ T6576] IPVS: starting estimator thread 0... [ 91.660191][ T8185] IPVS: using max 42 ests per chain, 100800 per kthread [ 91.785732][ T8194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.786614][ T8194] netlink: 112 bytes leftover after parsing attributes in process `syz.0.657'. [ 91.813190][ T67] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 91.969916][ T8205] kvm: kvm [8201]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006f) = 0x6 [ 91.971813][ T8204] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.777336][ T5602] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.892812][ T8255] bridge0: port 3(syz_tun) entered blocking state [ 92.892976][ T8255] bridge0: port 3(syz_tun) entered disabled state [ 92.893141][ T8255] syz_tun: entered allmulticast mode [ 92.905080][ T8256] bridge0: port 3(syz_tun) entered blocking state [ 92.905239][ T8256] bridge0: port 3(syz_tun) entered forwarding state [ 92.925769][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.943820][ T8256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.948591][ T8256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.950925][ T8256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 92.952727][ T8256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 92.956261][ T8256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 92.988857][ T5810] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.988941][ T5810] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.997518][ T5810] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.316683][ T8274] jffs2: notice: (8274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 93.353481][ T8278] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 93.360705][ T8274] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 93.364714][ T8274] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 93.367888][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.3.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.371378][ T8274] Tainted: [L]=SOFTLOCKUP [ 93.372815][ T8274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.376066][ T8274] RIP: 0010:strlen+0x1e/0xa0 [ 93.377550][ T8274] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 93.383919][ T8274] RSP: 0018:ffffc90005aefb48 EFLAGS: 00010296 [ 93.385931][ T8274] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 93.388639][ T8274] RDX: 0000000000000000 RSI: ffffffff8297126e RDI: 0000000000000000 [ 93.391275][ T8274] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 93.393848][ T8274] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 93.396332][ T8274] R13: 0000000000000000 R14: ffff88801c7d7610 R15: ffff88805abba800 [ 93.399006][ T8274] FS: 00007f9740a856c0(0000) GS:ffff8880d5b60000(0000) knlGS:0000000000000000 [ 93.401901][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.403985][ T8274] CR2: 00007f84795d4ff8 CR3: 000000003c7f1000 CR4: 0000000000352ef0 [ 93.406548][ T8274] Call Trace: [ 93.407696][ T8274] [ 93.408695][ T8274] do_getname_kernel+0x26/0x250 [ 93.410315][ T8274] filp_open+0x1d/0x50 [ 93.411612][ T8274] nvmet_file_ns_enable+0x95/0x420 [ 93.413339][ T8274] nvmet_ns_enable+0x35f/0x5d0 [ 93.414947][ T8274] nvmet_ns_enable_store+0x11e/0x160 [ 93.416719][ T8274] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 93.418657][ T8274] ? configfs_write_iter+0x388/0x4e0 [ 93.420325][ T8274] configfs_write_iter+0x302/0x4e0 [ 93.421931][ T8274] vfs_write+0x6af/0x1050 [ 93.423285][ T8274] ? __pfx_configfs_write_iter+0x10/0x10 [ 93.425041][ T8274] ? __pfx_vfs_write+0x10/0x10 [ 93.426591][ T8274] ? find_held_lock+0x2b/0x80 [ 93.428197][ T8274] ksys_write+0x12a/0x250 [ 93.429691][ T8274] ? __pfx_ksys_write+0x10/0x10 [ 93.431372][ T8274] do_syscall_64+0x123/0x790 [ 93.433003][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.434996][ T8274] RIP: 0033:0x7f973fb9e159 [ 93.436539][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.442648][ T8274] RSP: 002b:00007f9740a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.445266][ T8274] RAX: ffffffffffffffda RBX: 00007f973fe25fa0 RCX: 00007f973fb9e159 [ 93.447778][ T8274] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000007 [ 93.450226][ T8274] RBP: 00007f973fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 93.452714][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.455177][ T8274] R13: 00007f973fe26038 R14: 00007f973fe25fa0 R15: 00007fff62acd3e8 [ 93.457750][ T8274] [ 93.458814][ T8274] Modules linked in: [ 93.460772][ T8274] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 93.537073][ T8274] RIP: 0010:strlen+0x1e/0xa0 [ 93.537134][ T8274] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 93.537221][ T8274] RSP: 0018:ffffc90005aefb48 EFLAGS: 00010296 [ 93.537233][ T8274] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 93.537241][ T8274] RDX: 0000000000000000 RSI: ffffffff8297126e RDI: 0000000000000000 [ 93.537247][ T8274] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 93.537254][ T8274] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 93.537260][ T8274] R13: 0000000000000000 R14: ffff88801c7d7610 R15: ffff88805abba800 [ 93.537267][ T8274] FS: 00007f9740a856c0(0000) GS:ffff8880d5b60000(0000) knlGS:0000000000000000 [ 93.537291][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.537300][ T8274] CR2: 00007f973fbeb840 CR3: 000000003c7f1000 CR4: 0000000000352ef0 [ 93.537309][ T8274] Kernel panic - not syncing: Fatal exception [ 93.572016][ T8274] Kernel Offset: disabled [ 93.573431][ T8274] Rebooting in 86400 seconds..