last executing test programs: 1m16.897852362s ago: executing program 0 (id=76): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./cgroup\x00') 1m16.897104248s ago: executing program 0 (id=78): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl(r3, 0x4048aecb, &(0x7f0000000400)) dup(r2) flock(r0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000240)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffc, 0x1fc1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000004c0)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0x80, &(0x7f0000000500)={0x0, 0x15, 0x5, 0x8000, 0x9}, 0x8, 0x1ff, 0x4, 0x0, 0x1, 0x1, &(0x7f0000000540)="cecac0733d428113942341e4dcca3f0c21226a8fad8af2005a6ab1b814ad46f13bdea7"}) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="21000000f9ffffff02800000160b000000208100", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="04000000020000000300"/28], 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m16.689865656s ago: executing program 0 (id=80): syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="7ace905cd8ba", @empty, @val={@val, {0x8100, 0x7, 0x1, 0x3}}, {@x25={0x805, {0x2, 0x3, 0x9, "eb7808803ea6c5816462ea7482cc5a52c37094a8c63094fd39d4"}}}}, &(0x7f0000000040)={0x0, 0x1, [0x4c2, 0x24, 0xb53, 0x7e8]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmmsg$sock(r0, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="a022f6468dd171e8d3bf2065857766097a3e30c40fb3b3f1bd3fd92a28a8701e6d9813d574bd6b67efbc2448c2ffd62a71e70de88fb79bbc85ea545b8c6b0d5a9d", 0x41}, {&(0x7f00000002c0)="1e606d736126fccdd88fb57b9969b610b79f7ca97817d18351f24567ff2ae9cfaa504125e2692cb0fe797e40f360faf84450ce791e69d43c6c1d727406f5bc9f6832f2cf1f61060f3f28d78c8f307a04db2fd41cdc808c622a8dd600f89b895c4f4d28fcc002a5f668c71b38d5e4c60e2861296179ed9885689a048de4b107327cc5f6e1a97fb9087002923eb06074", 0x8f}, {&(0x7f0000000380)="30085c04a688b9424dcc2e1f5302659960dc6963141a034dee21e11d7329d5215c73ae2cd5fe0a9e4ac69869ea02fc8eb9c4d081f084c225e80030df648a40a51ec24166eee9a7c4019a01dec78efde218abbae0623d48544dc810d1c273d8479547b079e9cdbc42e6e8969c9bf4568c866b12f77b3182538ddb0366", 0x7c}, {&(0x7f0000000400)="43d455a6d5d5ce316e4578dbd289cc4f56cb8cef676d32fcd92dc41681ba649e3aad19df53b3148a249730415ccb09ad981bca60345a53932f2380e9147dcdde923926db40955f912bfbdc6c1aa82d5c3771efbafe82eb6b57f52a1be41391dc8df4ed7d2464906aea93758a99545ab6ee91be5fb3c20bd1bd8acec812b771dde0b298e436bd00993278f7e14c97239c66e5c3fa320a9fabd6b2f204643ccc1a36f80000b5f81c45af9e5ad995c674c0ba6f324b0c91d86bcdbcdd5ef464899dc0", 0xc1}, {&(0x7f0000000500)="3db7c70ff025b295c0211b278fe057de3b5667e85b359d423e3dffa456137562323cb23b7e1544dc768a4cf3c8a4aa0c92d8945098242f92f1a18c14ba61670f2f93416eff952dfdfaadfa14332ba814c73a5b459877c0b60c97997f034888cbc99295da6cf89b5c29562e2109a29cd6049c7514614e", 0x76}, {&(0x7f0000000580)="455ac04954a0b5b490e7bea18ac07f64a49b2d4c069b4cd70d6def47a79445232a5fccd8e0ea068b81d3deb0bff55505b3bee11eb3d756aad56309e92b87d6859299ab8568b02833ef2e29433191c3", 0x4f}], 0x6, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd35}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x852}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x84}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xc615}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xd8}}, {{&(0x7f0000000780)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="0af87d9858973c5b84c310a9352864bd9541a2", 0x13}, {&(0x7f0000000840)="7dd9774d40002a9ff76250a05f6e503b53d6e290e3329a5fbc987df39e1bce7f31e9ffb455675600c50c6285ed9f33f56c0f", 0x32}], 0x2}}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000940)="eca765de02a1ac7022a53fdb34bf8367cff07ab69864d05274bd7ead0c74d6760f6951f98f3893", 0x27}], 0x1}}, {{&(0x7f00000009c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1, &(0x7f0000001a80)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5f}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x4660}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x34}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xa8}}], 0x4, 0x40044) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0xc00, 0x20) mknodat(r2, &(0x7f0000001c80)='./file0\x00', 0x40, 0x10) (async) r3 = syz_open_dev$hiddev(&(0x7f0000001cc0), 0x1, 0x40287) (async) fdatasync(r2) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001d00), 0x10000, 0x0) (rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d80), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x15) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x40, r7, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000002140)=0xd0a) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002180)={0x9, r0, 'id1\x00'}) write$binfmt_register(r10, &(0x7f0000002200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'IPVS\x00', 0x3a, '\x05', 0x3a, './file0', 0x3a, [0x43, 0x46]}, 0x2f) (async) symlinkat(&(0x7f0000002240)='./file0\x00', r2, &(0x7f0000002280)='./file0\x00') (async) mount$overlay(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x104848, &(0x7f0000002340)={[{@uuid_off}], [{@smackfsdef}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0xd}}, {@obj_user}, {@obj_user={'obj_user', 0x3d, 'IPVS\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, 'syz3'}}]}) (async) getsockname$packet(r10, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002400)=0x14) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000028c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002880)={&(0x7f0000002480)={0x3ec, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4f}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfc}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x152}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CSA_IES={0x388, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x25, 0x80, [@prep={0x83, 0x1f, {{}, 0x3a, 0x62, @device_b, 0x9, @void, 0x5, 0x9, @broadcast, 0x5}}]}, @NL80211_ATTR_BEACON_HEAD={0x329, 0xe, {{{}, {}, @broadcast, @device_a, @random="96c363b259b5", {0x5, 0x4}}, 0xcfc, @random=0x2, 0x400, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x7e, 0x9, 0x1ff, 0x2}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x3, 0x0, {0x2, 0x1ffd, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x8, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0xff, 0x8}}, @val={0x76, 0x6, {0x7, 0x10, 0xa, 0xc38}}, [{0xdd, 0xba, "6bcfe905a92e4681cd78508605cd4b2e39710d628de9bf034ededddebaf1b635e21c78f8ef8dae0f3d0b117bb0f71485744b8739a62812cbd0e1f75f18dcde5e6626d1048663cbab0e1e61f2e76810824c47a4359eb1160ebcfcb791a7f5bb259518ed939d990f792dd5205f04855f95aaa7252d123ee7ab571434ffd6b06cf78e61955542fd48a7b37a7b67a6f684e3afbb6d6f00372943c9c8a48fbda9e00255bc02da1c975d30cf0d6f58251ad3b665168033127df6d2dbef"}, {0xdd, 0xf, "ae14e94a5250a138f8795c86859e50"}, {0xdd, 0xa4, "d83838ef3bc916e990a59a6ebc09681caed5690ca9d90f547c2ccf12b92521e320fa6de5268aee2f4c410266fc3c8684039d83059b64fc296c31eed32e6b3a23e8d63927fa6165740160058cfe727f48d2497553714fefef878914f8f91203a13041e23a5a72740f93e1a0ad603f54eba8119693dd8b8f1cacceee98ae9159e8c01cc936af6b19a20fc35e9f29daaedc00d1c2ba73271e36381a28566a3a56b0302a5478"}, {0xdd, 0x98, "2f5232c33b19069b49c348045dbaf43d6634680410d54cec7fef261eada79865f51c2ea6a6e6aa63e77a2593d257880db67b69eff3f965fabf757ff6941effe7d022640c02237f5c7e40e3c47f8896a2b024b913e872ae08ca412ed9cb41b018ac678d85e480f947a709f2f921a03339251ee77b10cb5b05213aa0242c42b7ceef31dc2f29e55dd81413b687853cca3adc990661fffd8133"}, {0xdd, 0xab, "23d4f5e969de66dfa879ad6fcb019a9038791e0d505c2e4a176fb09006ea2931c13dcee5c57168307f19b587e860e626ba102a4b15fd3c099df66fff5b3afcb44bbd5f43fe74a5c7ca2348ac3bda548f06cee0ddb29b708813e5a4f626dd1671de24485de7218516f807105cf18c934da34c68da10fc6d5d433eec111b20bd0ecf3d03e307083716606428b22b4be615f723330a6410033a8f998d4ebbe634c2c9c971089f1c737820809b"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x2f, 0x7f, [@ibss={0x6, 0x2, 0x7ff}, @peer_mgmt={0x75, 0x14, {0x1, 0x3, @void, @void, @val="58a3c42e0e3ff8c05fe109ed8b777d2a"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xc, 0xb71f3a7771d8a5d0}}, @supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x2}, {0x30, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40}, 0x880) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002900), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000002940)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0xb0, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) mount(&(0x7f0000002b00)=@rnullb, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)='ocfs2\x00', 0x3010000, &(0x7f0000002bc0)='\x01\x01\x01\x01\x01\x01') 1m16.616747572s ago: executing program 0 (id=81): ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) mkdir(0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xe26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x72bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d6, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x4, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x2, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x6, 0x7, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x4, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xffffeffe, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x9, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000004, 0xd3, 0x10000, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) 1m16.448810101s ago: executing program 0 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x40}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x950}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x40}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x950}, 0x0) (async) 1m16.180580282s ago: executing program 0 (id=83): syz_usbip_server_init(0x1) socket$inet_tcp(0x2, 0x1, 0x0) 1m16.149350681s ago: executing program 32 (id=83): syz_usbip_server_init(0x1) socket$inet_tcp(0x2, 0x1, 0x0) 27.658707697s ago: executing program 2 (id=797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x10000)=nil, &(0x7f00000ac000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00000aa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000ab000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x31e1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28efff0511"], 0x28}}, 0x802) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 27.589372727s ago: executing program 2 (id=798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x6f, 0x0, 0x400, 0x101, r0, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x5}, 0x50) 27.528487533s ago: executing program 2 (id=801): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 27.440162031s ago: executing program 2 (id=802): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb470}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) 27.432339293s ago: executing program 2 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 27.270230452s ago: executing program 2 (id=806): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31b078bd7000fcdbdf25190000001400018008000100", @ANYRES32=r5, @ANYBLOB="0800030006"], 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="d535b2bac9afb5a0b20eecdd6f7781cea29b54f2aadaff5390104b42b24e887bc0f8b9cf6a58490af3c50578359459fab919d6e6c3f0d40015b7f60e107066167afcb6cf087ac78b676fd9fec9485f85cf673e66eb48aefc8f002547533a32409d3bfbce03a11379db46956b9469cdee8af502c72c09eb7d4f01fa960a1696ed212b0b", 0x83}, {&(0x7f0000000140)="3ec6a6cc4da30b4d5e5f5d1af3d5d7a2ab4272d6a4266a48374f6071e4bbfb0395b8f962fcc23d34d5926b2ae680393aad2bcf47c96792ca21d2f2b117d7a1351bfad6167a241fd5eb98d228e3f464ff9c43187ed118f5dc7f6c3a47da52776698c18611f6e83c8c47c74d86faea8c37eff1bf7f1dfa744875839925effa50cd22721b746cf43c91af8883b8f9feba87e9f0", 0x92}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xfc, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}], 0x90}, 0x40040) 12.237544971s ago: executing program 33 (id=806): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31b078bd7000fcdbdf25190000001400018008000100", @ANYRES32=r5, @ANYBLOB="0800030006"], 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="d535b2bac9afb5a0b20eecdd6f7781cea29b54f2aadaff5390104b42b24e887bc0f8b9cf6a58490af3c50578359459fab919d6e6c3f0d40015b7f60e107066167afcb6cf087ac78b676fd9fec9485f85cf673e66eb48aefc8f002547533a32409d3bfbce03a11379db46956b9469cdee8af502c72c09eb7d4f01fa960a1696ed212b0b", 0x83}, {&(0x7f0000000140)="3ec6a6cc4da30b4d5e5f5d1af3d5d7a2ab4272d6a4266a48374f6071e4bbfb0395b8f962fcc23d34d5926b2ae680393aad2bcf47c96792ca21d2f2b117d7a1351bfad6167a241fd5eb98d228e3f464ff9c43187ed118f5dc7f6c3a47da52776698c18611f6e83c8c47c74d86faea8c37eff1bf7f1dfa744875839925effa50cd22721b746cf43c91af8883b8f9feba87e9f0", 0x92}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xfc, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}], 0x90}, 0x40040) 7.235898291s ago: executing program 5 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x10, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a060e04"], 0xd) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000111004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000111004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 7.235492571s ago: executing program 5 (id=1066): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{}, 0x800003}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002ba8ec10064b6f2f000000fb71658bda9bb49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f621a9d94412158e7077fe34232aa8b319d7666d0998a61d7da0c86d7000000101000"/170], 0x10b8}, 0x0) 7.156717567s ago: executing program 5 (id=1068): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 7.155832375s ago: executing program 5 (id=1069): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000300)="2a000010", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xfffffffc}, 0x1c) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b7f495, 0x0) 7.056496578s ago: executing program 5 (id=1070): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 6.257331646s ago: executing program 5 (id=1084): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000000)) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0x221000d, 0x0) 6.193643544s ago: executing program 34 (id=1084): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000000)) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0x221000d, 0x0) 4.720375593s ago: executing program 3 (id=1112): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x3e0, 0x1b0, 0xd0, 0xd0, 0x1b0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [0x0, 0x0, 0xa4ff], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, [0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth1_to_bond\x00', 'gre0\x00', {}, {0xff}, 0x33, 0x4, 0x5, 0x25}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 4.653941226s ago: executing program 3 (id=1113): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 4.520114384s ago: executing program 3 (id=1115): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\b\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8-\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x13\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~f\xb4%!X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xaek\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\b\x00\x00\x00\x00\x00\x00\x00\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x93(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/704, 0x7) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYBLOB="0717c7"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\x02\x00\x00\x00\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x80b00, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000020000000b0000"], 0x513300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x195, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000200000", @ANYRES32=r3, @ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) 3.669919234s ago: executing program 3 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="66634066b20f00000000000000aa1d776d15e8e489f8759804a02ef17550bb6de767f21c92e67f827d51cc0fdbaf48c33a4621b228d342", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x60bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newtfilter={0x48, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0xc010) 3.528090613s ago: executing program 3 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 3.458636625s ago: executing program 3 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf253100000005003300030000000a0001007770616e300000000500350002000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r6, @ANYBLOB="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"], 0xe0}}, 0x4000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf258800000008000300", @ANYRES32=r10, @ANYBLOB="cca628a902af95"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf253a00000046005b0041fb5e12bfa9f147fbf32ca5d43ee2e197a2b6a70ed2a0928547e7090104f0dccd4220839354ec9d8a5ce220e73adb56404cd991c1d6bdd5ce319a45c345fd859ada00000a005b00d2fbb146bc7a000017005b00003611c75bc3313ef2ac52e27a5c59e1f8754100e0005b002c3a70855a4ef235fd979340012562fcda2f4d46dbfa82335403ea48263d3d12904d5c3e85afab6fb739d8d7a7a663aa6af921df79ab03ecee1da47d2c6eeb5f0bb9287e9decfb6a8ffa192d0e007956044b01ea13885cfddcf6ec1e760e56089dec41a1f39e86fe042a601978687f08d4249f823bedfa2ded9768eadc6c0b933bcc28d56d89b72399fb410c6698dee98e4af7ea3aafd4da33fa66113355fb91d493b72ff6f0e3899aa40465cf5e854674b55749fd7130c018c09676a8500ab83d192805f709bd33a90a6c2dbb1852abf590752f9006502183a4076d7b005b0018d1b29ec367e0a037ed363fa63ba6fce81600bf1f9ce2a3bae24602c83abbf98c547bce4a6507523ebeab835e6c1cf59cf14d05c37a8bfa4b65e8abe39fe197905b9be4629fd5ab22a28f861f11b945bb1c4d259322077b64f5199a362e52c7f16546dc5d9c61f5d3c3278722989ddaaef14c3827cef600"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) (async, rerun: 64) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="19002abd70d1d06a5325860000080800a00000000000080027004300000008002700030000000800060001040000"], 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x1) (async, rerun: 64) mount(0x0, &(0x7f0000000700)='./mnt/test2\x00', &(0x7f0000000380)='autofs\x00', 0x220000, 0x0) setxattr$security_evm(&(0x7f0000000040)='./dev\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "86bcd5e37abf1a8de9ca8b387332110250ee4025"}, 0x15, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r12, 0x0, 0x0) 3.353236024s ago: executing program 35 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf253100000005003300030000000a0001007770616e300000000500350002000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r6, @ANYBLOB="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"], 0xe0}}, 0x4000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf258800000008000300", @ANYRES32=r10, @ANYBLOB="cca628a902af95"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) (async, rerun: 64) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="19002abd70d1d06a5325860000080800a00000000000080027004300000008002700030000000800060001040000"], 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x1) (async, rerun: 64) mount(0x0, &(0x7f0000000700)='./mnt/test2\x00', &(0x7f0000000380)='autofs\x00', 0x220000, 0x0) setxattr$security_evm(&(0x7f0000000040)='./dev\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "86bcd5e37abf1a8de9ca8b387332110250ee4025"}, 0x15, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r12, 0x0, 0x0) 3.308207289s ago: executing program 6 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001"], 0x58}}, 0x0) (async) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x80, 0x29, 0xf}, 0x10) 3.229008014s ago: executing program 6 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde6811100"], 0xfdef) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000000)={0xfffffffffffffffd, 0x8, 0x6, 0x8}) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000000040)=0x400, 0x4) write(r8, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=t', 0x31) 2.835731062s ago: executing program 6 (id=1134): socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000002c0)="ed", 0x1, 0x8c9d0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f0000000440)=0x18) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000040)='./my_configfs/usb_gadget/g1/functions/tcm.usb0/../file0\x00', 0x18b) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_emit_vhci(0x0, 0xd) (async, rerun: 32) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) (rerun: 32) write$P9_RSTATu(r1, &(0x7f0000000480)={0x248, 0x7d, 0x1, {{0x500, 0x107, 0x0, 0x5000000, {0x1, 0x0, 0x4}, 0x0, 0x9, 0x3, 0x36e, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x28, '\x94\t\xa4\x10_A\xff\x0f&\xbd\x0e\x82b4\xd5:|\xf5-\xc6\x8a\xfc[\xc3\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4@\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1W\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee00}}, 0x248) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) (async) lsetxattr$security_ima(&(0x7f0000000040)='./proc\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@md5={0x1, "433a5fd3cdbca55608d66ee7222ab1f8"}, 0x11, 0x0) 2.489369869s ago: executing program 4 (id=1140): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000180)={0x0, 0x1, 0x2}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1fb, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x38413542, 0x0, [r8, r9, 0x0, r9], [0x401], [0x0, 0x1], [0x0, 0x5, 0x0, 0x7fb0]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r2, 0xd, 0x2, 0x8, 0x1, [0x0, r3, r8, r10], [0xaa, 0x3, 0x3, 0x48], [0x9, 0x4a0d, 0xfbf], [0x2, 0x6, 0x6, 0x6]}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0xc0000000, 0x7ee}]}, 0xc, 0x2) 2.45425201s ago: executing program 4 (id=1142): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2.390375208s ago: executing program 4 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000480)='syzkaller\x00', 0x40, 0x0, 0x0, 0x60780, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd0e}, 0x94) r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='./proc/file0\x00', 0x440a02, 0x10) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './proc/thread-self/fail-nth\x00'}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f00000005c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x4000) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5b926062) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) chown(&(0x7f00000003c0)='./file0\x00', r8, 0xee01) sendmsg$netlink(r0, &(0x7f0000000800)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="ac0100002900000425bd7000fcdbdf259901598008000f0048c08ca413ebc5df112963e0a86577094e479f894e2b413c4c434c2ba1e01576f54a7caca87c46f44963f392e87b7c395f97abb30143c24f0a693fc39ae0b6b8291766f5481de0a04ff7d8744ae6b62d92b56f92641b2512aee640c02f6e241884adb0cae67fd44f5ed371faf29dc58d5b943946d605476db63844e94f30d2ca6accf5aeee7ce56405e57d05a47285a41f407fdbae5bdb71a1670f11b19f99c4c730abb837c2369b2a5bbe66bd16a427623027c4f9c27bcc6a7bed338a003b53a65de46b832e1f1e682ec881405ae46346be5d47d5a14bfbb5965a962d", @ANYRES32=r4, @ANYBLOB="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"], 0x1ac}, {&(0x7f0000000780)=ANY=[@ANYBLOB="18981338839d9bf90fe6000000270002002dbd7000fddbdf2508007a005e2b9666f3a57756bcd4533dd9977734fbfd4efd37296fa66b9b761c5c4e2ef05ca7cd7d9e0b5345ea35af928a179aba32c948da60ac4e5dcf4371eeac18ce8d12af99119380d6176ee84ed763ed55", @ANYRES32=r5, @ANYBLOB], 0x18}, {&(0x7f0000000640)=ANY=[@ANYBLOB="7c000000300001002ab47000ffdbdf256a007800ecf6f13f7950dbd67ad9e7ad2d772579873e10f3c70915892c8816c792a247c30087b463bd3063a0f2a530d4da76c33d7e5eba89970cad8e01c977b29726b86f7c96cb29e4f00f4b5a23ab9c11670f2a5fc0ad5c539b87243fec75e4e2d336e9c1150cc20bc2424b5c411fd83abb0223ff0000edae7ee79ffa2c8d2f46a95ca6317e5700683463fe9a4a9404b3457f7f40751ff9ea235cd9801c9c7bfb94"], 0x7c}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="00000000000001000200000000000000000000009afa76f9dc2db2445889dd2478016dc66504c01407d6a6883f74f574c5802db553fd4b6dc6ee4ff4a5ea0e496bab9b7d388a2401176fe88260ea3ebd8a6384e3214f512e79c12974f902faf8e33b1cde4f83730102f55dffcd736246183b22175c4472838de8e7200076435318a86a7d554c181593947ba601704dd74fd5ca05ff950bc2b49f3eae46932e3f4fff2ab915033fde24f16ed8bccb3e066100"/191, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x70, 0x400c004}, 0x24008000) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r9 = accept(r3, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.458028863s ago: executing program 6 (id=1145): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 1.457488227s ago: executing program 4 (id=1147): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x21, 0x20004) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x171, 0x0) 1.338233392s ago: executing program 6 (id=1148): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xce23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000840)={'veth0_macvtap\x00', &(0x7f0000000740)=@ethtool_gstrings={0x1b, 0x4, 0x5, "df858db020"}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r3) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8949, &(0x7f0000000900)={'vlan0\x00', @remote}) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) close_range(r0, r6, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r7, r9, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) 1.248990275s ago: executing program 6 (id=1151): syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) io_uring_setup(0x126a, &(0x7f00000001c0)={0x0, 0x6865, 0x8, 0x1, 0x37a}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000001c0)={0x8000, "a5fa60384dad3ea9b4bed881c9b8450f791ae86f43edca6868bbc2d68413de86", 0x3, 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x100004d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x6, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x5, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0x8001, 0x4, 0x8, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x8, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x8001, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000008, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x8, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000001800)=[{&(0x7f0000000080)="a9a6b87f2d", 0x5}], 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x4, @addr=0x3}, 0x8, 0xd, 0xe}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.1900424s ago: executing program 1 (id=1153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x4, &(0x7f0000000140)={0x0, 0x37, 0x2, @thr={&(0x7f0000000080)="cd866caec8ed4da640a71f8016d5cbe708571ba0cea774a76e02571dc1182268bdd9df953616b935299efe91e2a35f", &(0x7f0000000100)}}, &(0x7f0000000180)=0x0) timer_getoverrun(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 557.199362ms ago: executing program 4 (id=1154): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) 556.691787ms ago: executing program 4 (id=1156): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './proc/thread-self/fail-nth\x00'}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./proc\x00', 0x1f6) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r3) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x1f90, @empty}, 0x10) listen(r4, 0x80) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x1f90, @empty}, 0x10) listen(r5, 0x80) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x22, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb00}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @ldst={0x3, 0x2, 0x2, 0x0, 0x7, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xeba6, 0xb7, &(0x7f0000000640)=""/183, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x5, 0x7, 0xfffffff7}, 0x10, 0x12b43, 0xffffffffffffffff, 0x7, &(0x7f0000000c80)=[r0, 0xffffffffffffffff, r1, r0, r2, r2, r0, r2, 0x1, r2], &(0x7f0000000cc0)=[{0x1, 0x5, 0x8, 0x6}, {0x2, 0x5, 0xb, 0x3}, {0x3, 0x2, 0x5}, {0x1, 0x3, 0xf, 0xc}, {0x3, 0x3, 0x6, 0x2}, {0x2, 0x1, 0x1, 0x9}, {0x2, 0x5, 0xa, 0x5}], 0x10, 0x80000001}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r7, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r8}, 0x8) read(r9, &(0x7f0000000800)=""/1024, 0x400) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r11 = syz_usb_connect(0x0, 0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="120040440647d201096144ea6b712c07904eb2fc02e4ca77fd60945db755b7d026360f489510cf89de2a24509ace66b4adc67f9efb9aa43c281e8f82cba1af1cfda68982c84f58b8b56cf32bcc72543f943a043dec1d454e527f1ed52087ff82f281fdf16b4c"], 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) ioctl(r12, 0xc4c85513, &(0x7f0000000200)) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 470.012224ms ago: executing program 1 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 410.422466ms ago: executing program 1 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b3000000", @ANYRES16=r5, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x10, 0x8700, 0x7, 0x6, {{0x19, 0x4, 0x1, 0xd, 0x64, 0x68, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @ssrr={0x89, 0x7, 0x71, [@local]}, @cipso={0x86, 0x46, 0x3, [{0x7, 0x2}, {0x7, 0x4, "0ffe"}, {0x5, 0xd, "31c6110f62875c6cf9e26b"}, {0x5, 0xb, "cfe9dd7ac5fc6677bc"}, {0x7, 0xa, "ef39338d774c773b"}, {0x5, 0x11, "d66e4645fb242eb6084476b19fe186"}, {0x2, 0x3, '4'}, {0x0, 0x4, "8656"}]}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x214, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfffa, 0x6, 0x4, 0x8}, {0x9, 0x2, 0x9, 0x8}, {0x3, 0x4, 0x1, 0x7fe}, {0x7, 0x7, 0x2, 0x1}, {0x7, 0x7, 0x0, 0x5}, {0x3, 0x6, 0x5, 0x10001}, {0xf, 0xf4, 0x5}, {0x5, 0x0, 0x9, 0x8}, {0xffff, 0x2, 0x8, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x75d4}}, {0x8, 0x6, r1}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000000) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getroute={0x58, 0x1a, 0x100, 0x70bd26, 0x25dfdc01, {0xa, 0x80, 0x80, 0x9f, 0xff, 0x7, 0xfd, 0x1}, [@RTA_MARK={0x8, 0x10, 0x9a3}, @RTA_OIF={0x8, 0x4, r1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2e, 0x1, r1}}, @RTA_PREF={0x5, 0x14, 0xf3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044891}, 0x20000040) 355.849058ms ago: executing program 1 (id=1161): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 355.171901ms ago: executing program 1 (id=1164): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x12}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'log\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xa28}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6f3b}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x1000000, 0x4008085}, 0x4004044) 279.967671ms ago: executing program 7 (id=1165): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 279.661507ms ago: executing program 1 (id=1166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8e, 0x180000504) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ftruncate(r1, 0x0) 279.183178ms ago: executing program 7 (id=1167): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"cfff00", 0xba45, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000082100e4fe", "00000001", "0052008f", "0100f807", ["fdd5c01000", "000040000000040000000004", "00f63000f18e000000000600", "ffe9ff00"]}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000003000a0500000000e0fe09ffff00000003795bf52addf2e61ff542bbecde51f0174ba4868386a99707f76fd44e88f708cbaea3cb37cb5cc189c8f3b0d5d1397dd6bc3443f39d66a5d98279a3217f0559787d9a774d2847e1987dfdbeb9e40b41233f6e1bea"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4000800) 179.795979ms ago: executing program 7 (id=1168): r0 = socket$inet6(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0xb}, {0x80, "7b9dca674a9aa39e4d8486d2097ccfc1", "90ce7089b15f00b7be5de5815c7c4666"}}}}, 0x27) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x106}, @nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x67}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000040000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYBLOB="705c3684bdc7f292fea8a3e79b7b1494c8d05a49fdd7f77f4603c1599d04dbc265c0ea56656abcbff9220edb1205c30e2bdfecce04b3e1ef823aa07cdb0dffc3a273109d85494b483d9d56c8d2639e52fd3c2162ba778468e67b8be32ff72f9e58317fa90f14bb7c5731"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20010800) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900d41d73797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900d41d73797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000780)="f400090180000025", 0x8}, {&(0x7f0000000380)="6be6ae01811b869426776b03b9940860f4b82fea190b06483fb6f1ddb84248056577054d42bb522458240e93632b064adbe0c4bb6fd9a9fe74b6744d000ac0d611cb1a1400f041bc25b87ccb4105e3ff638ce589035e18740b2c9745bbe427ac9a9c9da8287c0f8454ac62f3f1930ff491b7ccbc6944b3615c8d06cce6ccf615dea87fef3448713e3c", 0x89}], 0x2}, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000780)="f400090180000025", 0x8}, {&(0x7f0000000380)="6be6ae01811b869426776b03b9940860f4b82fea190b06483fb6f1ddb84248056577054d42bb522458240e93632b064adbe0c4bb6fd9a9fe74b6744d000ac0d611cb1a1400f041bc25b87ccb4105e3ff638ce589035e18740b2c9745bbe427ac9a9c9da8287c0f8454ac62f3f1930ff491b7ccbc6944b3615c8d06cce6ccf615dea87fef3448713e3c", 0x89}], 0x2}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000001060108000000000000000005000002050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000000000000000000e05000100070000000500010007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 110.065389ms ago: executing program 7 (id=1169): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x68}}, 0x0) 60.198309ms ago: executing program 7 (id=1170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x405, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10408, 0x2140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x200400c0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 0s ago: executing program 7 (id=1171): pipe(&(0x7f0000000140)={0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2508000000180001801400020073797a5f74756e00000000000000000014000280100003800c"], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) r4 = mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0) mq_notify(r4, &(0x7f00000002c0)={0x110c230000, 0x3f, 0x0, @thr={&(0x7f00000000c0), 0x0}}) mq_timedsend(r4, 0x0, 0x0, 0x48000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r6, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x2001, 0x0) write(r8, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r9, &(0x7f0000000840)='6\x00', 0x1) kernel console output (not intermixed with test programs): dummy_hcd [ 95.229520][ T5832] imon 7-1:0.0: unable to initialize intf0, err 0 [ 95.229534][ T5832] imon:imon_probe: failed to initialize context! [ 95.229541][ T5832] imon 7-1:0.0: unable to register, err -19 [ 95.233466][ T5832] usb 7-1: USB disconnect, device number 14 [ 95.282106][ T8090] input: syz1 as /devices/virtual/input/input12 [ 95.368848][ T852] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.376310][ T852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.376333][ T852] usb 9-1: Product: syz [ 95.376346][ T852] usb 9-1: Manufacturer: syz [ 95.376359][ T852] usb 9-1: SerialNumber: syz [ 95.511283][ T7268] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.567826][ T5832] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 95.671943][ T8069] kernel read not supported for file /cpu.stat (pid: 8069 comm: syz.3.656) [ 95.722492][ T5832] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 95.724117][ T5832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 95.724135][ T5832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 95.724148][ T5832] usb 7-1: config 0 interface 0 has no altsetting 0 [ 95.727161][ T6338] usb 9-1: USB disconnect, device number 10 [ 95.738270][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.738285][ T5832] usb 7-1: Product: syz [ 95.738292][ T5832] usb 7-1: Manufacturer: syz [ 95.738300][ T5832] usb 7-1: SerialNumber: syz [ 95.740852][ T5832] usb 7-1: config 0 descriptor?? [ 95.741662][ T8077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.948371][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 95.952321][ T5832] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 96.045942][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 96.102375][ T8135] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 96.174217][ T8140] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 96.174247][ T8140] SELinux: failed to load policy [ 96.218877][ T5832] rc_core: IR keymap rc-imon-pad not found [ 96.218889][ T5832] Registered IR keymap rc-empty [ 96.218922][ T5832] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 96.218931][ T5832] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 96.250972][ T8144] overlayfs: workdir and upperdir must reside under the same mount [ 96.371676][ T5832] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 96.372589][ T5832] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 96.381552][ T5832] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:15> initialized [ 96.559257][ T7268] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 96.560108][ T7268] ath9k_htc: Failed to initialize the device [ 96.565191][ T6338] usb 9-1: ath9k_htc: USB layer deinitialized [ 96.578022][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 96.578033][ T43] audit: type=1400 audit(1789048444.660:705): avc: denied { read write } for pid=8145 comm="syz.4.679" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.578131][ T43] audit: type=1400 audit(1789048444.660:706): avc: denied { open } for pid=8145 comm="syz.4.679" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.578308][ T8146] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.590057][ T8148] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.701421][ T43] audit: type=1400 audit(1789048444.780:707): avc: denied { read write } for pid=8075 comm="syz.2.659" name="lcd0" dev="devtmpfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.701468][ T43] audit: type=1400 audit(1789048444.780:708): avc: denied { open } for pid=8075 comm="syz.2.659" path="/dev/lcd0" dev="devtmpfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.969311][ T43] audit: type=1400 audit(1789048445.050:709): avc: denied { write } for pid=8154 comm="syz.4.681" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.019174][ T43] audit: type=1400 audit(1789048445.100:710): avc: denied { read write } for pid=8154 comm="syz.4.681" name="video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.019204][ T43] audit: type=1400 audit(1789048445.100:711): avc: denied { open } for pid=8154 comm="syz.4.681" path="/dev/video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.021995][ T43] audit: type=1400 audit(1789048445.100:712): avc: denied { ioctl } for pid=8154 comm="syz.4.681" path="/dev/video36" dev="devtmpfs" ino=1064 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.079126][ T43] audit: type=1400 audit(1789048445.160:713): avc: denied { create } for pid=8075 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.081371][ T43] audit: type=1400 audit(1789048445.160:714): avc: denied { connect } for pid=8075 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.293662][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 97.308985][ T8164] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 97.309002][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.309057][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 97.313918][ T8164] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 97.313934][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.313989][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 97.319399][ T8167] vhci_hcd: connection closed [ 97.319595][ T5803] vhci_hcd vhci_hcd.4: stop threads [ 97.319611][ T5803] vhci_hcd vhci_hcd.4: release socket [ 97.319621][ T5803] vhci_hcd vhci_hcd.4: disconnect device [ 97.319749][ T8165] vhci_hcd: connection closed [ 97.319998][ T5803] vhci_hcd vhci_hcd.4: stop threads [ 97.320008][ T5803] vhci_hcd vhci_hcd.4: release socket [ 97.320017][ T5803] vhci_hcd vhci_hcd.4: disconnect device [ 97.904490][ T8173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8173 comm=syz.3.686 [ 98.282151][ T35] usb 7-1: USB disconnect, device number 15 [ 98.328191][ T8177] FAULT_INJECTION: forcing a failure. [ 98.328191][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 98.328215][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.2.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.328236][ T8177] Tainted: [L]=SOFTLOCKUP [ 98.328240][ T8177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.328246][ T8177] Call Trace: [ 98.328250][ T8177] [ 98.328255][ T8177] dump_stack_lvl+0x100/0x190 [ 98.328276][ T8177] should_fail_ex.cold+0x5/0xa [ 98.328294][ T8177] should_failslab+0xc2/0x120 [ 98.328309][ T8177] kmem_cache_alloc_noprof+0x92/0x6a0 [ 98.328321][ T8177] ? __fget_files+0x215/0x3d0 [ 98.328335][ T8177] ? create_new_namespaces+0x30/0xac0 [ 98.328351][ T8177] create_new_namespaces+0x30/0xac0 [ 98.328367][ T8177] __do_sys_setns+0x213/0x1f30 [ 98.328382][ T8177] ? __pfx___do_sys_setns+0x10/0x10 [ 98.328399][ T8177] do_syscall_64+0x123/0x790 [ 98.328415][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.328426][ T8177] RIP: 0033:0x7f377439e159 [ 98.328435][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.328445][ T8177] RSP: 002b:00007f37725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 98.328456][ T8177] RAX: ffffffffffffffda RBX: 00007f3774625fa0 RCX: 00007f377439e159 [ 98.328463][ T8177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 98.328470][ T8177] RBP: 00007f377443503b R08: 0000000000000000 R09: 0000000000000000 [ 98.328564][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.328571][ T8177] R13: 00007f3774626038 R14: 00007f3774625fa0 R15: 00007fffd5882588 [ 98.328587][ T8177] [ 98.581514][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.692'. [ 98.582077][ T8187] xt_l2tp: wrong L2TP version: 4 [ 98.612012][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.693'. [ 98.612028][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.693'. [ 98.612036][ T8189] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 98.883779][ T8200] nftables ruleset with unbound set [ 99.061885][ T8211] netlink: 84 bytes leftover after parsing attributes in process `syz.3.700'. [ 99.142195][ T8214] loop7: detected capacity change from 0 to 7 [ 99.144655][ T8214] Dev loop7: unable to read RDB block 7 [ 99.144676][ T8214] loop7: unable to read partition table [ 99.144764][ T8214] loop7: partition table beyond EOD, truncated [ 99.144773][ T8214] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.184381][ T8216] Device name not specified. [ 99.184381][ T8216] [ 99.345809][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 99.353887][ T8220] /dev/sr0: Can't open blockdev [ 99.363744][ T8226] xfrm1: entered promiscuous mode [ 99.363756][ T8226] xfrm1: entered allmulticast mode [ 99.421300][ T8234] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 99.421318][ T8234] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 99.421334][ T8234] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 99.421344][ T8234] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 99.421351][ T8234] page dumped because: unmovable page [ 99.421358][ T8234] page_owner tracks the page as allocated [ 99.421364][ T8234] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 9350094144 [ 99.421390][ T8234] post_alloc_hook+0xfd/0x120 [ 99.421420][ T8234] get_page_from_freelist+0x110d/0x35d0 [ 99.421445][ T8234] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 99.421462][ T8234] alloc_pages_mpol+0x201/0x550 [ 99.421476][ T8234] alloc_pages_noprof+0x1a/0x160 [ 99.421490][ T8234] __vmalloc_node_range_noprof+0x833/0x1420 [ 99.421511][ T8234] __vmalloc_node_noprof+0xad/0xf0 [ 99.421531][ T8234] tpg_alloc+0x166/0x9b0 [ 99.421563][ T8234] vivid_probe.cold+0x2166/0x921e [ 99.421582][ T8234] platform_probe+0x106/0x1d0 [ 99.421598][ T8234] really_probe+0x241/0xa60 [ 99.421651][ T8234] __driver_probe_device+0x210/0x460 [ 99.421664][ T8234] driver_probe_device+0x4a/0x140 [ 99.421675][ T8234] __driver_attach+0x21f/0x5b0 [ 99.421686][ T8234] bus_for_each_dev+0x13e/0x1d0 [ 99.421701][ T8234] bus_add_driver+0x305/0x5b0 [ 99.421711][ T8234] page_owner free stack trace missing [ 99.505902][ T8238] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 99.526748][ T8241] FAULT_INJECTION: forcing a failure. [ 99.526748][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 99.526780][ T8241] CPU: 2 UID: 0 PID: 8241 Comm: syz.2.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.526805][ T8241] Tainted: [L]=SOFTLOCKUP [ 99.526811][ T8241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.526822][ T8241] Call Trace: [ 99.526828][ T8241] [ 99.526835][ T8241] dump_stack_lvl+0x100/0x190 [ 99.526865][ T8241] should_fail_ex.cold+0x5/0xa [ 99.526891][ T8241] should_failslab+0xc2/0x120 [ 99.526914][ T8241] kmem_cache_alloc_noprof+0x92/0x6a0 [ 99.526934][ T8241] ? do_getname+0x35/0x390 [ 99.526964][ T8241] do_getname+0x35/0x390 [ 99.526991][ T8241] __x64_sys_mkdirat+0x78/0xc0 [ 99.527034][ T8241] do_syscall_64+0x123/0x790 [ 99.527063][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.527081][ T8241] RIP: 0033:0x7f377439e159 [ 99.527096][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.527113][ T8241] RSP: 002b:00007f37725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 99.527132][ T8241] RAX: ffffffffffffffda RBX: 00007f3774625fa0 RCX: 00007f377439e159 [ 99.527144][ T8241] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 99.527156][ T8241] RBP: 00007f37725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.527166][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.527176][ T8241] R13: 00007f3774626038 R14: 00007f3774625fa0 R15: 00007fffd5882588 [ 99.527201][ T8241] [ 99.538031][ T35] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 99.580725][ T8243] netlink: 44 bytes leftover after parsing attributes in process `syz.3.711'. [ 99.605320][ T8245] binder: 8244:8245 ioctl c0306201 200000000080 returned -14 [ 99.636177][ T8245] binder: 8244:8245 ioctl c0306201 200000000640 returned -22 [ 99.690814][ T35] usb 6-1: not running at top speed; connect to a high speed hub [ 99.690841][ T35] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 99.691964][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 99.693885][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.693897][ T35] usb 6-1: Product: syz [ 99.693904][ T35] usb 6-1: Manufacturer: syz [ 99.693912][ T35] usb 6-1: SerialNumber: syz [ 99.698508][ T35] oti6858 6-1:1.0: oti6858 converter detected [ 99.701767][ T35] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 99.721270][ T8253] SELinux: common does not define every permission it declares [ 99.721430][ T8253] SELinux: failed to load policy [ 99.748655][ T8255] comedi comedi3: pcm3724: I/O base address or length out of range [ 99.798364][ T8262] FAULT_INJECTION: forcing a failure. [ 99.798364][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.798396][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.3.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.798421][ T8262] Tainted: [L]=SOFTLOCKUP [ 99.798427][ T8262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.798439][ T8262] Call Trace: [ 99.798445][ T8262] [ 99.798452][ T8262] dump_stack_lvl+0x100/0x190 [ 99.798483][ T8262] should_fail_ex.cold+0x5/0xa [ 99.798509][ T8262] strncpy_from_user+0x3b/0x2d0 [ 99.798533][ T8262] do_getname+0x78/0x390 [ 99.798561][ T8262] __x64_sys_mkdirat+0x78/0xc0 [ 99.798587][ T8262] do_syscall_64+0x123/0x790 [ 99.798613][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.798632][ T8262] RIP: 0033:0x7fbf39d9e159 [ 99.798647][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.798665][ T8262] RSP: 002b:00007fbf3ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 99.798682][ T8262] RAX: ffffffffffffffda RBX: 00007fbf3a025fa0 RCX: 00007fbf39d9e159 [ 99.798694][ T8262] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 99.798705][ T8262] RBP: 00007fbf3ad29090 R08: 0000000000000000 R09: 0000000000000000 [ 99.798716][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.798727][ T8262] R13: 00007fbf3a026038 R14: 00007fbf3a025fa0 R15: 00007ffc8e21a118 [ 99.798759][ T8262] [ 99.903701][ T35] usb 6-1: USB disconnect, device number 21 [ 99.917646][ T8273] netlink: 'syz.2.723': attribute type 39 has an invalid length. [ 99.934412][ T35] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 99.935018][ T35] oti6858 6-1:1.0: device disconnected [ 99.944591][ T8271] ubi0: attaching mtd0 [ 99.946547][ T8271] ubi0: scanning is finished [ 99.946572][ T8271] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 100.112549][ T8271] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 100.151731][ T1480] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 100.192397][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 100.193286][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 100.292267][ T8294] netlink: 104 bytes leftover after parsing attributes in process `syz.2.727'. [ 100.304431][ T1480] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.305567][ T1480] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.305585][ T1480] usb 9-1: config 0 has no interface number 0 [ 100.305614][ T1480] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 100.305634][ T1480] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 100.305663][ T1480] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.308647][ T1480] usb 9-1: config 0 descriptor?? [ 100.309255][ T8269] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.313243][ T1480] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.458600][ T8313] FAULT_INJECTION: forcing a failure. [ 100.458600][ T8313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.458632][ T8313] CPU: 2 UID: 0 PID: 8313 Comm: syz.2.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.458657][ T8313] Tainted: [L]=SOFTLOCKUP [ 100.458664][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.458675][ T8313] Call Trace: [ 100.458682][ T8313] [ 100.458689][ T8313] dump_stack_lvl+0x100/0x190 [ 100.458721][ T8313] should_fail_ex.cold+0x5/0xa [ 100.458748][ T8313] _copy_to_user+0x32/0xd0 [ 100.458769][ T8313] simple_read_from_buffer+0xcb/0x170 [ 100.458795][ T8313] proc_fail_nth_read+0x1af/0x230 [ 100.458825][ T8313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.458849][ T8313] ? rw_verify_area+0xce/0x6d0 [ 100.458876][ T8313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.458898][ T8313] vfs_read+0x1e4/0xb40 [ 100.458917][ T8313] ? lock_acquire+0x1d1/0x380 [ 100.458936][ T8313] ? __fget_files+0x34/0x3d0 [ 100.458957][ T8313] ? __pfx_vfs_read+0x10/0x10 [ 100.458973][ T8313] ? find_held_lock+0x2b/0x80 [ 100.458998][ T8313] ? __fget_files+0x215/0x3d0 [ 100.459024][ T8313] ? __fget_files+0x21f/0x3d0 [ 100.459054][ T8313] ksys_read+0x12a/0x250 [ 100.459071][ T8313] ? __pfx_ksys_read+0x10/0x10 [ 100.459097][ T8313] do_syscall_64+0x123/0x790 [ 100.459125][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.459143][ T8313] RIP: 0033:0x7f377435e98e [ 100.459159][ T8313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.459176][ T8313] RSP: 002b:00007f37725f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.459195][ T8313] RAX: ffffffffffffffda RBX: 00007f37725f66c0 RCX: 00007f377435e98e [ 100.459206][ T8313] RDX: 000000000000000f RSI: 00007f37725f60a0 RDI: 0000000000000004 [ 100.459218][ T8313] RBP: 00007f37725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.459229][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.459240][ T8313] R13: 00007f3774626038 R14: 00007f3774625fa0 R15: 00007fffd5882588 [ 100.459265][ T8313] [ 100.470163][ T8306] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 100.471240][ T8311] overlayfs: workdir and upperdir must reside under the same mount [ 100.479168][ T8308] x_tables: duplicate underflow at hook 2 [ 100.535731][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.539916][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.542849][ T5811] usb 9-1: USB disconnect, device number 11 [ 101.286985][ T8342] ubi0: attaching mtd0 [ 101.290985][ T8342] ubi0: scanning is finished [ 101.291011][ T8342] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 101.608023][ T8342] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 101.652776][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 101.652788][ T43] audit: type=1326 audit(1789048449.730:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.2.743" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f377439e159 code=0x0 [ 101.958329][ T43] audit: type=1400 audit(1789048450.030:806): avc: denied { mount } for pid=8359 comm="syz.1.747" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 101.990761][ T8360] jffs2: notice: (8360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 102.004222][ T43] audit: type=1400 audit(1789048450.080:807): avc: denied { watch watch_reads } for pid=8359 comm="syz.1.747" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 102.134314][ T43] audit: type=1400 audit(1789048450.210:808): avc: denied { append } for pid=8365 comm="syz.3.750" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.137160][ T43] audit: type=1400 audit(1789048450.210:809): avc: denied { read } for pid=8365 comm="syz.3.750" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.137416][ T43] audit: type=1400 audit(1789048450.210:810): avc: denied { open } for pid=8365 comm="syz.3.750" path="/dev/usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.203878][ T43] audit: type=1400 audit(1789048450.280:811): avc: denied { mounton } for pid=8369 comm="syz.3.751" path="/184/file0" dev="tmpfs" ino=1015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.204093][ T8370] 9pnet_virtio: no channels available for device syz [ 102.382280][ T43] audit: type=1400 audit(1789048450.460:812): avc: denied { mount } for pid=8371 comm="syz.1.752" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.384374][ T43] audit: type=1400 audit(1789048450.460:813): avc: denied { mounton } for pid=8371 comm="syz.1.752" path="/157/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.390135][ T8379] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 102.390154][ T8379] __nla_validate_parse: 1 callbacks suppressed [ 102.390164][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.752'. [ 102.445908][ T8379] dummy0: entered promiscuous mode [ 102.570393][ T43] audit: type=1400 audit(1789048450.650:814): avc: denied { getopt } for pid=8382 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.579113][ T8386] FAULT_INJECTION: forcing a failure. [ 102.579113][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 102.579145][ T8386] CPU: 3 UID: 0 PID: 8386 Comm: syz.3.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.579171][ T8386] Tainted: [L]=SOFTLOCKUP [ 102.579178][ T8386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.579189][ T8386] Call Trace: [ 102.579196][ T8386] [ 102.579203][ T8386] dump_stack_lvl+0x100/0x190 [ 102.579238][ T8386] should_fail_ex.cold+0x5/0xa [ 102.579266][ T8386] should_failslab+0xc2/0x120 [ 102.579291][ T8386] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.579310][ T8386] ? __fget_files+0x215/0x3d0 [ 102.579334][ T8386] ? create_new_namespaces+0x30/0xac0 [ 102.579362][ T8386] create_new_namespaces+0x30/0xac0 [ 102.579390][ T8386] __do_sys_setns+0x213/0x1f30 [ 102.579411][ T8386] ? __pfx___do_sys_setns+0x10/0x10 [ 102.579439][ T8386] do_syscall_64+0x123/0x790 [ 102.579464][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.579484][ T8386] RIP: 0033:0x7fbf39d9e159 [ 102.579500][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.579518][ T8386] RSP: 002b:00007fbf3ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 102.579537][ T8386] RAX: ffffffffffffffda RBX: 00007fbf3a025fa0 RCX: 00007fbf39d9e159 [ 102.579549][ T8386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 102.579561][ T8386] RBP: 00007fbf39e3503b R08: 0000000000000000 R09: 0000000000000000 [ 102.579573][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.579583][ T8386] R13: 00007fbf3a026038 R14: 00007fbf3a025fa0 R15: 00007ffc8e21a118 [ 102.579637][ T8386] [ 102.852048][ T8403] netlink: 164 bytes leftover after parsing attributes in process `syz.3.759'. [ 103.098572][ T8412] FAULT_INJECTION: forcing a failure. [ 103.098572][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 103.098602][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.3.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.098627][ T8412] Tainted: [L]=SOFTLOCKUP [ 103.098634][ T8412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.098652][ T8412] Call Trace: [ 103.098659][ T8412] [ 103.098666][ T8412] dump_stack_lvl+0x100/0x190 [ 103.098698][ T8412] should_fail_ex.cold+0x5/0xa [ 103.098723][ T8412] should_failslab+0xc2/0x120 [ 103.098745][ T8412] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 103.098766][ T8412] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 103.098789][ T8412] ? __d_alloc+0x35/0xa50 [ 103.098817][ T8412] __d_alloc+0x35/0xa50 [ 103.098841][ T8412] d_alloc_pseudo+0x1c/0xc0 [ 103.098859][ T8412] alloc_file_pseudo+0x118/0x290 [ 103.098883][ T8412] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 103.098913][ T8412] create_pipe_files+0x360/0x970 [ 103.098937][ T8412] do_pipe2+0xbd/0x1e0 [ 103.098958][ T8412] ? __pfx_do_pipe2+0x10/0x10 [ 103.098988][ T8412] __x64_sys_pipe+0x33/0x50 [ 103.099009][ T8412] do_syscall_64+0x123/0x790 [ 103.099034][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.099052][ T8412] RIP: 0033:0x7fbf39d9e159 [ 103.099067][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.099083][ T8412] RSP: 002b:00007fbf3ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 103.099101][ T8412] RAX: ffffffffffffffda RBX: 00007fbf3a025fa0 RCX: 00007fbf39d9e159 [ 103.099113][ T8412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.099123][ T8412] RBP: 00007fbf39e3503b R08: 0000000000000000 R09: 0000000000000000 [ 103.099132][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.099142][ T8412] R13: 00007fbf3a026038 R14: 00007fbf3a025fa0 R15: 00007ffc8e21a118 [ 103.099165][ T8412] [ 103.198595][ T8420] FAULT_INJECTION: forcing a failure. [ 103.198595][ T8420] name failslab, interval 1, probability 0, space 0, times 0 [ 103.198628][ T8420] CPU: 2 UID: 0 PID: 8420 Comm: syz.4.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.198653][ T8420] Tainted: [L]=SOFTLOCKUP [ 103.198660][ T8420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.198671][ T8420] Call Trace: [ 103.198678][ T8420] [ 103.198686][ T8420] dump_stack_lvl+0x100/0x190 [ 103.198721][ T8420] should_fail_ex.cold+0x5/0xa [ 103.198750][ T8420] should_failslab+0xc2/0x120 [ 103.198776][ T8420] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.198796][ T8420] ? __fget_files+0x215/0x3d0 [ 103.198827][ T8420] ? create_new_namespaces+0x30/0xac0 [ 103.198870][ T8420] create_new_namespaces+0x30/0xac0 [ 103.198901][ T8420] __do_sys_setns+0x213/0x1f30 [ 103.198928][ T8420] ? __pfx___do_sys_setns+0x10/0x10 [ 103.198962][ T8420] do_syscall_64+0x123/0x790 [ 103.198991][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.199012][ T8420] RIP: 0033:0x7efda3f9e159 [ 103.199027][ T8420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.199045][ T8420] RSP: 002b:00007efda4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 103.199067][ T8420] RAX: ffffffffffffffda RBX: 00007efda4225fa0 RCX: 00007efda3f9e159 [ 103.199079][ T8420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 103.199090][ T8420] RBP: 00007efda403503b R08: 0000000000000000 R09: 0000000000000000 [ 103.199101][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.199111][ T8420] R13: 00007efda4226038 R14: 00007efda4225fa0 R15: 00007ffe49d35928 [ 103.199136][ T8420] [ 103.256086][ T8426] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.284575][ T8433] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 103.297024][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 103.298139][ T8433] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 103.298149][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 103.301422][ T8433] dummy0: entered promiscuous mode [ 103.588659][ T852] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 103.720348][ T8450] 9pnet_virtio: no channels available for device syz [ 103.720366][ T8451] 9pnet_virtio: no channels available for device syz [ 103.748767][ T852] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 103.751914][ T852] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.751939][ T852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.757581][ T852] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 103.758080][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 103.758134][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 103.761090][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 103.761155][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 103.766259][ T852] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.766950][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 103.767000][ T852] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 103.768050][ T852] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.072806][ T852] usb 9-1: USB disconnect, device number 12 [ 104.085998][ T852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.089188][ T852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.089712][ T852] keyspan 9-1:1.0: device disconnected [ 104.100365][ T8454] FAULT_INJECTION: forcing a failure. [ 104.100365][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 104.100398][ T8454] CPU: 2 UID: 0 PID: 8454 Comm: syz.1.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.100424][ T8454] Tainted: [L]=SOFTLOCKUP [ 104.100431][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.100443][ T8454] Call Trace: [ 104.100449][ T8454] [ 104.100457][ T8454] dump_stack_lvl+0x100/0x190 [ 104.100491][ T8454] should_fail_ex.cold+0x5/0xa [ 104.100519][ T8454] should_failslab+0xc2/0x120 [ 104.100544][ T8454] kmem_cache_alloc_noprof+0x92/0x6a0 [ 104.100563][ T8454] ? d_instantiate+0x8a/0xb0 [ 104.100588][ T8454] ? alloc_empty_file+0x5b/0x1c0 [ 104.100619][ T8454] alloc_empty_file+0x5b/0x1c0 [ 104.100645][ T8454] alloc_file_pseudo+0x183/0x290 [ 104.100672][ T8454] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 104.100706][ T8454] create_pipe_files+0x360/0x970 [ 104.100732][ T8454] do_pipe2+0xbd/0x1e0 [ 104.100763][ T8454] ? __pfx_do_pipe2+0x10/0x10 [ 104.100797][ T8454] __x64_sys_pipe+0x33/0x50 [ 104.100822][ T8454] do_syscall_64+0x123/0x790 [ 104.100851][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.100871][ T8454] RIP: 0033:0x7f7a6e39e159 [ 104.100886][ T8454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.100903][ T8454] RSP: 002b:00007f7a6c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 104.100922][ T8454] RAX: ffffffffffffffda RBX: 00007f7a6e625fa0 RCX: 00007f7a6e39e159 [ 104.100935][ T8454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.100946][ T8454] RBP: 00007f7a6e43503b R08: 0000000000000000 R09: 0000000000000000 [ 104.100956][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.100967][ T8454] R13: 00007f7a6e626038 R14: 00007f7a6e625fa0 R15: 00007ffd19e2c358 [ 104.100992][ T8454] [ 104.832525][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 104.832555][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.787'. [ 104.833243][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 104.833267][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.787'. [ 104.992782][ T8511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8511 comm=syz.3.794 [ 104.993072][ T8511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8511 comm=syz.3.794 [ 105.059563][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.794'. [ 105.060125][ T8515] netlink: 52 bytes leftover after parsing attributes in process `syz.3.794'. [ 105.177871][ T5811] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 105.357764][ T5811] usb 9-1: Using ep0 maxpacket: 32 [ 105.359448][ T5811] usb 9-1: unable to get BOS descriptor or descriptor too short [ 105.359472][ T5811] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 105.379609][ T5811] usb 9-1: string descriptor 0 read error: -22 [ 105.379683][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.387201][ T5811] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 105.387223][ T5811] dw2102: su3000_power_ctrl: 1, initialized 0 [ 105.392347][ T5811] dvb-usb: bulk message failed: -22 (2/0) [ 105.399730][ T8542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.404316][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.405516][ T5811] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 105.405541][ T5811] usb 9-1: media controller created [ 105.406915][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406926][ T5811] dw2102: i2c transfer failed. [ 105.406945][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406951][ T5811] dw2102: i2c transfer failed. [ 105.406956][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406963][ T5811] dw2102: i2c transfer failed. [ 105.406968][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406974][ T5811] dw2102: i2c transfer failed. [ 105.406979][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406985][ T5811] dw2102: i2c transfer failed. [ 105.406991][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 105.406997][ T5811] dw2102: i2c transfer failed. [ 105.407001][ T5811] dvb-usb: MAC address: 02:02:02:02:02:02 [ 105.416180][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.450195][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 105.450207][ T5811] dw2102: command 0x0e transfer failed. [ 105.450211][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 105.450218][ T5811] dw2102: command 0x0e transfer failed. [ 105.539737][ T8545] /dev/sr0: Can't open blockdev [ 105.595828][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.763198][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 105.763213][ T5811] dw2102: command 0x0e transfer failed. [ 105.763217][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 105.763224][ T5811] dw2102: command 0x0e transfer failed. [ 105.763227][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 105.763234][ T5811] dw2102: command 0x51 transfer failed. [ 105.795952][ T5811] DVB: Unable to find symbol ds3000_attach() [ 105.795965][ T5811] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 105.847887][ T5811] rc_core: IR keymap rc-su3000 not found [ 105.847902][ T5811] Registered IR keymap rc-empty [ 105.852222][ T5811] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 105.867010][ T5811] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input16 [ 105.888377][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 105.888397][ T5811] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.888407][ T5811] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 105.893026][ T5811] usb 9-1: USB disconnect, device number 13 [ 105.984747][ T5811] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 106.138216][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.141247][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.310374][ T8569] FAULT_INJECTION: forcing a failure. [ 106.310374][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.310403][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.310427][ T8569] Tainted: [L]=SOFTLOCKUP [ 106.310433][ T8569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.310443][ T8569] Call Trace: [ 106.310449][ T8569] [ 106.310455][ T8569] dump_stack_lvl+0x100/0x190 [ 106.310481][ T8569] should_fail_ex.cold+0x5/0xa [ 106.310504][ T8569] _copy_from_user+0x2e/0xd0 [ 106.310522][ T8569] move_addr_to_kernel+0x65/0x170 [ 106.310547][ T8569] __sys_sendto+0x1b8/0x4e0 [ 106.310561][ T8569] ? __pfx___sys_sendto+0x10/0x10 [ 106.310576][ T8569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.310597][ T8569] ? ksys_write+0x1ac/0x250 [ 106.310608][ T8569] ? __pfx_ksys_write+0x10/0x10 [ 106.310620][ T8569] __x64_sys_sendto+0xe0/0x1c0 [ 106.310631][ T8569] ? do_syscall_64+0xae/0x790 [ 106.310645][ T8569] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.310659][ T8569] do_syscall_64+0x123/0x790 [ 106.310675][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.310687][ T8569] RIP: 0033:0x7f7a6e39e159 [ 106.310696][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.310707][ T8569] RSP: 002b:00007f7a6c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.310718][ T8569] RAX: ffffffffffffffda RBX: 00007f7a6e625fa0 RCX: 00007f7a6e39e159 [ 106.310725][ T8569] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.310732][ T8569] RBP: 00007f7a6c5f6090 R08: 0000200000000540 R09: 0000000000000014 [ 106.310738][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.310745][ T8569] R13: 00007f7a6e626038 R14: 00007f7a6e625fa0 R15: 00007ffd19e2c358 [ 106.310758][ T8569] [ 106.336731][ T8571] tipc: Started in network mode [ 106.336743][ T8571] tipc: Node identity 1000001, cluster identity 4369 [ 106.336750][ T8571] tipc: Node number set to 16777217 [ 106.336859][ T8571] tipc: Cannot configure node identity twice [ 106.337509][ T8571] tipc: New replicast peer: 127.0.0.1 [ 106.340424][ T8571] tipc: Enabled bearer , priority 10 [ 106.478757][ T5811] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 106.638591][ T5811] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 106.639561][ T5811] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.639615][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.639636][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.639653][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 106.639672][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 106.639689][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 106.639708][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 106.639724][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 106.639743][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 106.639760][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.639778][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 106.639795][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 106.639814][ T5811] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.639832][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.639856][ T5811] usb 9-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 106.641756][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.641775][ T5811] usb 9-1: Product: syz [ 106.641786][ T5811] usb 9-1: Manufacturer: syz [ 106.641796][ T5811] usb 9-1: SerialNumber: syz [ 106.644022][ T8577] syzkaller0: entered promiscuous mode [ 106.644040][ T8577] syzkaller0: entered allmulticast mode [ 106.648086][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648173][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648249][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648326][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648403][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648477][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.648553][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.653974][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.654057][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.654136][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.654209][ T8559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.655700][ T5811] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 106.657128][ T5811] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 106.667267][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 106.667282][ T43] audit: type=1400 audit(1789048454.740:859): avc: denied { setopt } for pid=8576 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.671631][ T5811] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 106.702451][ T5811] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 106.708644][ T5811] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.008422][ T1162] IPVS: starting estimator thread 0... [ 107.102534][ T8592] IPVS: using max 22 ests per chain, 52800 per kthread [ 107.266712][ T30] usb 9-1: USB disconnect, device number 14 [ 107.307486][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.323517][ T8601] FAULT_INJECTION: forcing a failure. [ 107.323517][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.323547][ T8601] CPU: 3 UID: 0 PID: 8601 Comm: syz.3.824 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.323570][ T8601] Tainted: [L]=SOFTLOCKUP [ 107.323576][ T8601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.323626][ T8601] Call Trace: [ 107.323633][ T8601] [ 107.323639][ T8601] dump_stack_lvl+0x100/0x190 [ 107.323667][ T8601] should_fail_ex.cold+0x5/0xa [ 107.323696][ T8601] _copy_from_iter+0x1f4/0x1690 [ 107.323718][ T8601] ? __pfx__copy_from_iter+0x10/0x10 [ 107.323735][ T8601] ? find_held_lock+0x2b/0x80 [ 107.323758][ T8601] ? dev_get_by_index+0x180/0x380 [ 107.323776][ T8601] ? dev_get_by_index+0x180/0x380 [ 107.323798][ T8601] packet_sendmsg+0x1be3/0x4ef0 [ 107.323819][ T8601] ? __pfx_avc_has_perm+0x10/0x10 [ 107.323844][ T8601] ? __lock_acquire+0x5c0/0x1f40 [ 107.323865][ T8601] ? sock_has_perm+0x25a/0x2f0 [ 107.323887][ T8601] ? __pfx_sock_has_perm+0x10/0x10 [ 107.323916][ T8601] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.323934][ T8601] ? __might_fault+0xc5/0x140 [ 107.323962][ T8601] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.323987][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.323992][ T8601] __sys_sendto+0x48b/0x4e0 [ 107.324008][ T8601] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.324027][ T8601] ? __pfx___sys_sendto+0x10/0x10 [ 107.324050][ T8601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.324082][ T8601] ? ksys_write+0x1ac/0x250 [ 107.324099][ T8601] ? __pfx_ksys_write+0x10/0x10 [ 107.324118][ T8601] __x64_sys_sendto+0xe0/0x1c0 [ 107.324135][ T8601] ? do_syscall_64+0xae/0x790 [ 107.324154][ T8601] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.324174][ T8601] do_syscall_64+0x123/0x790 [ 107.324197][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.324213][ T8601] RIP: 0033:0x7fbf39d9e159 [ 107.324229][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.324243][ T8601] RSP: 002b:00007fbf3ad29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.324260][ T8601] RAX: ffffffffffffffda RBX: 00007fbf3a025fa0 RCX: 00007fbf39d9e159 [ 107.324271][ T8601] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 107.324281][ T8601] RBP: 00007fbf3ad29090 R08: 0000200000000540 R09: 0000000000000014 [ 107.324291][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.324301][ T8601] R13: 00007fbf3a026038 R14: 00007fbf3a025fa0 R15: 00007ffc8e21a118 [ 107.324323][ T8601] [ 107.325277][ T30] keyspan 9-1:1.0: device disconnected [ 107.798049][ T8610] xt_esp: unknown flags DD [ 107.872783][ T8615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.829'. [ 107.925065][ T8618] overlayfs: workdir and upperdir must reside under the same mount [ 108.059165][ T43] audit: type=1400 audit(1789048456.140:860): avc: denied { setopt } for pid=8621 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 108.253083][ T43] audit: type=1400 audit(1789048456.330:861): avc: denied { read } for pid=8625 comm="syz.1.833" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.253359][ T43] audit: type=1400 audit(1789048456.330:862): avc: denied { open } for pid=8625 comm="syz.1.833" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.253874][ T43] audit: type=1400 audit(1789048456.330:863): avc: denied { ioctl } for pid=8625 comm="syz.1.833" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.315389][ T43] audit: type=1400 audit(1789048456.390:864): avc: denied { map } for pid=8628 comm="syz.3.834" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.321718][ T8629] netlink: 'syz.3.834': attribute type 49 has an invalid length. [ 108.332902][ T43] audit: type=1400 audit(1789048456.410:865): avc: denied { create } for pid=8625 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.334013][ T43] audit: type=1400 audit(1789048456.410:866): avc: denied { bind } for pid=8625 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.334310][ T43] audit: type=1400 audit(1789048456.410:867): avc: denied { getopt } for pid=8625 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.354393][ T43] audit: type=1400 audit(1789048456.430:868): avc: denied { ioctl } for pid=8625 comm="syz.1.833" path="socket:[25928]" dev="sockfs" ino=25928 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.809809][ T8618] kernel read not supported for file /cpu.stat (pid: 8618 comm: syz.4.830) [ 110.198322][ T5811] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 110.327838][ T5811] usb 9-1: device descriptor read/64, error -71 [ 110.580109][ T5811] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 110.710385][ T5811] usb 9-1: device descriptor read/64, error -71 [ 110.828090][ T5811] usb usb9-port1: attempt power cycle [ 111.073365][ T8728] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 111.073815][ T8728] rnbd_client L1256: Session s+ not found, and path parameter not given [ 111.167842][ T5811] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 111.188289][ T5811] usb 9-1: device descriptor read/8, error -71 [ 111.345686][ T8743] IPv4: Oversized IP packet from 127.202.26.0 [ 111.396344][ T8747] loop5: detected capacity change from 0 to 7 [ 111.403518][ T8747] Dev loop5: unable to read RDB block 7 [ 111.403542][ T8747] loop5: AHDI p1 [ 111.403583][ T8747] loop5: partition table partially beyond EOD, truncated [ 111.438139][ T5811] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 111.458317][ T5811] usb 9-1: device descriptor read/8, error -71 [ 111.554935][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.869'. [ 111.554957][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 111.573412][ T5811] usb usb9-port1: unable to enumerate USB device [ 112.974732][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 112.974745][ T43] audit: type=1400 audit(1789048461.050:911): avc: denied { ioctl } for pid=8760 comm="syz.3.871" path="socket:[26910]" dev="sockfs" ino=26910 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.975921][ T43] audit: type=1400 audit(1789048461.050:912): avc: denied { write } for pid=8760 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.978207][ T43] audit: type=1400 audit(1789048461.050:913): avc: denied { mount } for pid=8760 comm="syz.3.871" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.063597][ T8766] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 113.105406][ T8768] rnbd_client L607: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 113.105446][ T8768] rnbd_client L1256: Session s+ not found, and path parameter not given [ 113.187435][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 113.250414][ T8774] bond2: entered promiscuous mode [ 113.267851][ T8774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.294211][ T43] audit: type=1400 audit(1789048461.370:914): avc: denied { write } for pid=8770 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 113.316007][ T43] audit: type=1400 audit(1789048461.390:915): avc: denied { ioctl } for pid=8770 comm="syz.3.874" path="socket:[26930]" dev="sockfs" ino=26930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.510497][ T8787] netlink: 'syz.4.878': attribute type 39 has an invalid length. [ 113.542604][ T8787] hsr_slave_0 (unregistering): left promiscuous mode [ 113.737584][ T43] audit: type=1400 audit(1789048461.810:916): avc: denied { bind } for pid=8797 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.935585][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 114.053998][ T43] audit: type=1400 audit(1789048462.130:917): avc: denied { map } for pid=8821 comm="syz.3.891" path="socket:[26189]" dev="sockfs" ino=26189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.054129][ T43] audit: type=1400 audit(1789048462.130:918): avc: denied { read } for pid=8821 comm="syz.3.891" path="socket:[26189]" dev="sockfs" ino=26189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.083130][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.083242][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.083253][ T8824] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 114.083260][ T8824] UDF-fs: Scanning with blocksize 512 failed [ 114.087586][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.088081][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.088102][ T8824] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 114.088113][ T8824] UDF-fs: Scanning with blocksize 1024 failed [ 114.090309][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.090398][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.090415][ T8824] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 114.090428][ T8824] UDF-fs: Scanning with blocksize 2048 failed [ 114.090874][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.090954][ T8824] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.090970][ T8824] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 114.090980][ T8824] UDF-fs: Scanning with blocksize 4096 failed [ 114.090988][ T8824] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 114.091385][ T43] audit: type=1400 audit(1789048462.170:919): avc: denied { bind } for pid=8825 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.092619][ T43] audit: type=1400 audit(1789048462.170:920): avc: denied { setopt } for pid=8825 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.232725][ T8831] dvmrp0: left allmulticast mode [ 114.365687][ T8841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8841 comm=syz.3.899 [ 114.683676][ T8870] tmpfs: Bad value for 'mpol' [ 114.683747][ T8871] tmpfs: Bad value for 'mpol' [ 114.730564][ T8870] netlink: 84 bytes leftover after parsing attributes in process `syz.3.912'. [ 114.730585][ T8871] netlink: 84 bytes leftover after parsing attributes in process `syz.3.912'. [ 114.731139][ T8870] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.731350][ T8870] Cannot find add_set index 0 as target [ 114.931062][ T8878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.915'. [ 115.298313][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.299075][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.363028][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 115.365840][ T8919] binder: BINDER_SET_CONTEXT_MGR already set [ 115.365851][ T8919] binder: 8917:8919 ioctl 4018620d 200000000100 returned -16 [ 115.390758][ T8918] team0: Port device vlan2 added [ 115.696620][ T8938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.931'. [ 115.727086][ T8938] block nbd3: not configured, cannot reconfigure [ 116.057787][ T852] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 116.066700][ T8959] loop5: detected capacity change from 0 to 7 [ 116.068358][ T8959] Dev loop5: unable to read RDB block 7 [ 116.068377][ T8959] loop5: AHDI p1 [ 116.068387][ T8959] loop5: partition table partially beyond EOD, truncated [ 116.080102][ T5733] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 116.080244][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.152303][ T8966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.197371][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 116.218234][ T852] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 116.219030][ T852] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.219054][ T852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.236229][ T852] as10x_usb: device has been detected [ 116.236544][ T852] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 116.239369][ T8971] binder: 8970:8971 ioctl 5412 2000000001c0 returned -22 [ 116.243944][ T8971] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) ! [ 116.262580][ T852] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 116.286727][ T852] as10x_usb: error during firmware upload part1 [ 116.287132][ T852] Registered device Abilis Systems DVB-Titan [ 116.750332][ T9017] tmpfs: Unknown parameter '00000000000000000000000' [ 116.778242][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 116.780787][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 116.836645][ T9020] ip6tnl2: entered allmulticast mode [ 117.358319][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.838042][ T35] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 117.851753][ T9052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 117.851776][ T9052] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.852012][ T9052] vhci_hcd vhci_hcd.0: Device attached [ 117.856654][ T9055] vhci_hcd: connection closed [ 117.860420][ T12] vhci_hcd vhci_hcd.1: stop threads [ 117.860436][ T12] vhci_hcd vhci_hcd.1: release socket [ 117.860447][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 118.010308][ T9064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.010574][ T9064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.032318][ T9064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.035716][ T9064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.035793][ T9064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.048937][ T9064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.050111][ T9064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.050143][ T9064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.054074][ T9064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.215245][ T9076] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 118.227492][ T9076] iommufd_mock iommufd_mock1: Adding to iommu group 5 [ 118.286222][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 118.286234][ T43] audit: type=1400 audit(1789048466.360:989): avc: denied { read write } for pid=9077 comm="syz.3.977" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.286410][ T43] audit: type=1400 audit(1789048466.360:990): avc: denied { open } for pid=9077 comm="syz.3.977" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.325359][ T43] audit: type=1400 audit(1789048466.400:991): avc: denied { connect } for pid=9079 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.388969][ T9081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.391732][ T9081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.393041][ T9081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.459684][ T9085] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.489220][ T9086] __nla_validate_parse: 3 callbacks suppressed [ 118.489238][ T9086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.979'. [ 118.597080][ T43] audit: type=1400 audit(1789048466.670:992): avc: denied { name_bind } for pid=9096 comm="syz.3.982" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.622949][ T43] audit: type=1400 audit(1789048466.700:993): avc: denied { getopt } for pid=9100 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.623265][ T43] audit: type=1400 audit(1789048466.700:994): avc: denied { setopt } for pid=9100 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.623725][ T43] audit: type=1400 audit(1789048466.700:995): avc: denied { read } for pid=9100 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.775042][ T30] libceph: connect (1)[c::]:6789 error -101 [ 118.775278][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 118.782141][ T30] libceph: connect (1)[c::]:6789 error -101 [ 118.782303][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 118.873720][ T852] libceph: connect (1)[c::]:6789 error -101 [ 118.873819][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 119.040094][ T30] libceph: connect (1)[c::]:6789 error -101 [ 119.040256][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 119.061514][ T852] usb 9-1: USB disconnect, device number 19 [ 119.088358][ T852] Unregistered device Abilis Systems DVB-Titan [ 119.092257][ T852] as10x_usb: device has been disconnected [ 119.131908][ T25] libceph: connect (1)[c::]:6789 error -101 [ 119.132061][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 119.166423][ T9116] syzkaller0: entered promiscuous mode [ 119.166437][ T9116] syzkaller0: entered allmulticast mode [ 119.178628][ T9118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.987'. [ 119.462924][ T43] audit: type=1400 audit(1789048467.540:996): avc: denied { ioctl } for pid=9122 comm="syz.4.989" path="socket:[28313]" dev="sockfs" ino=28313 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.463251][ T43] audit: type=1400 audit(1789048467.540:997): avc: denied { bind } for pid=9122 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.516362][ T43] audit: type=1400 audit(1789048467.590:998): avc: denied { listen } for pid=9122 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.549386][ T30] libceph: connect (1)[c::]:6789 error -101 [ 119.549540][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 119.583122][ T9106] ceph: No mds server is up or the cluster is laggy [ 119.586153][ T9110] ceph: No mds server is up or the cluster is laggy [ 119.638019][ T852] libceph: connect (1)[c::]:6789 error -101 [ 119.638111][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 119.655279][ T9133] overlayfs: workdir and upperdir must reside under the same mount [ 120.318344][ T9152] FAULT_INJECTION: forcing a failure. [ 120.318344][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 120.318366][ T9152] CPU: 2 UID: 0 PID: 9152 Comm: syz.4.1001 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.318382][ T9152] Tainted: [L]=SOFTLOCKUP [ 120.318386][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.318392][ T9152] Call Trace: [ 120.318396][ T9152] [ 120.318401][ T9152] dump_stack_lvl+0x100/0x190 [ 120.318432][ T9152] should_fail_ex.cold+0x5/0xa [ 120.318448][ T9152] should_failslab+0xc2/0x120 [ 120.318466][ T9152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 120.318478][ T9152] ? do_getname+0x35/0x390 [ 120.318497][ T9152] do_getname+0x35/0x390 [ 120.318514][ T9152] do_sys_openat2+0xc7/0x1e0 [ 120.318529][ T9152] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.318544][ T9152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.318568][ T9152] __x64_sys_openat+0x12d/0x210 [ 120.318586][ T9152] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.318602][ T9152] ? ksys_write+0x1ac/0x250 [ 120.318617][ T9152] do_syscall_64+0x123/0x790 [ 120.318633][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.318645][ T9152] RIP: 0033:0x7efda3f5e98e [ 120.318654][ T9152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.318665][ T9152] RSP: 002b:00007efda4eaef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.318676][ T9152] RAX: ffffffffffffffda RBX: 00007efda4eaf6c0 RCX: 00007efda3f5e98e [ 120.318684][ T9152] RDX: 0000000000000002 RSI: 00007efda4034942 RDI: ffffffffffffff9c [ 120.318690][ T9152] RBP: 00007efda403503b R08: 0000000000000000 R09: 0000000000000000 [ 120.318697][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.318703][ T9152] R13: 00007efda4226038 R14: 00007efda4225fa0 R15: 00007ffe49d35928 [ 120.318717][ T9152] [ 120.397791][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.397849][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.397876][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.420885][ T9154] syzkaller1: entered promiscuous mode [ 120.420900][ T9154] syzkaller1: entered allmulticast mode [ 120.423172][ T9154] FAULT_INJECTION: forcing a failure. [ 120.423172][ T9154] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.423201][ T9154] CPU: 3 UID: 0 PID: 9154 Comm: syz.4.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.423224][ T9154] Tainted: [L]=SOFTLOCKUP [ 120.423231][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.423241][ T9154] Call Trace: [ 120.423247][ T9154] [ 120.423253][ T9154] dump_stack_lvl+0x100/0x190 [ 120.423282][ T9154] should_fail_ex.cold+0x5/0xa [ 120.423307][ T9154] get_futex_key+0x1d0/0x14f0 [ 120.423331][ T9154] ? __pfx_get_futex_key+0x10/0x10 [ 120.423353][ T9154] ? find_held_lock+0x2b/0x80 [ 120.423375][ T9154] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 120.423398][ T9154] ? look_up_lock_class+0x64/0x120 [ 120.423419][ T9154] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 120.423442][ T9154] ? register_lock_class+0x3f/0x7b0 [ 120.423463][ T9154] futex_wake+0xf4/0x5e0 [ 120.423489][ T9154] ? __lock_acquire+0x5c0/0x1f40 [ 120.423506][ T9154] ? __pfx_futex_wake+0x10/0x10 [ 120.423561][ T9154] ? perf_event_namespaces+0x1ad/0x200 [ 120.423594][ T9154] do_futex+0x2b2/0x440 [ 120.423632][ T9154] ? __pfx_do_futex+0x10/0x10 [ 120.423658][ T9154] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.423686][ T9154] __x64_sys_futex+0x34f/0x4d0 [ 120.423713][ T9154] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.423745][ T9154] do_syscall_64+0x123/0x790 [ 120.423770][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.423788][ T9154] RIP: 0033:0x7efda3f9e159 [ 120.423803][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.423819][ T9154] RSP: 002b:00007efda4eaf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.423836][ T9154] RAX: ffffffffffffffda RBX: 00007efda4225fa8 RCX: 00007efda3f9e159 [ 120.423848][ T9154] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efda4225fac [ 120.423858][ T9154] RBP: 00007efda4225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 120.423869][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.423879][ T9154] R13: 00007efda4226038 R14: 00007ffe49d35840 R15: 00007ffe49d35928 [ 120.423903][ T9154] [ 120.689499][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.695908][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.703299][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.704310][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.704675][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.797837][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 120.847337][ T9168] FAULT_INJECTION: forcing a failure. [ 120.847337][ T9168] name failslab, interval 1, probability 0, space 0, times 0 [ 120.847375][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.1.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.847400][ T9168] Tainted: [L]=SOFTLOCKUP [ 120.847407][ T9168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.847416][ T9168] Call Trace: [ 120.847422][ T9168] [ 120.847430][ T9168] dump_stack_lvl+0x100/0x190 [ 120.847461][ T9168] should_fail_ex.cold+0x5/0xa [ 120.847487][ T9168] should_failslab+0xc2/0x120 [ 120.847511][ T9168] kmem_cache_alloc_noprof+0x92/0x6a0 [ 120.847561][ T9168] ? __fget_files+0x215/0x3d0 [ 120.847582][ T9168] ? create_new_namespaces+0x30/0xac0 [ 120.847604][ T9168] create_new_namespaces+0x30/0xac0 [ 120.847628][ T9168] __do_sys_setns+0x213/0x1f30 [ 120.847650][ T9168] ? __pfx___do_sys_setns+0x10/0x10 [ 120.847694][ T9168] do_syscall_64+0x123/0x790 [ 120.847725][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.847745][ T9168] RIP: 0033:0x7f7a6e39e159 [ 120.847759][ T9168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.847780][ T9168] RSP: 002b:00007f7a6c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 120.847797][ T9168] RAX: ffffffffffffffda RBX: 00007f7a6e625fa0 RCX: 00007f7a6e39e159 [ 120.847807][ T9168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 120.847818][ T9168] RBP: 00007f7a6e43503b R08: 0000000000000000 R09: 0000000000000000 [ 120.847829][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.847840][ T9168] R13: 00007f7a6e626038 R14: 00007f7a6e625fa0 R15: 00007ffd19e2c358 [ 120.847864][ T9168] [ 121.108643][ T9183] capability: warning: `syz.1.1012' uses 32-bit capabilities (legacy support in use) [ 121.133635][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.310590][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.606113][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.615859][ T9210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.678525][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.728973][ T9216] tipc: Resetting bearer [ 121.743483][ T9216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.756976][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 121.759505][ T9217] tipc: Resetting bearer [ 121.776051][ T9217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.784413][ T9206] netlink: 'syz.4.1020': attribute type 64 has an invalid length. [ 121.797331][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.819737][ T9216] tipc: Enabling of bearer rejected, already enabled [ 121.820025][ T9215] tipc: Enabling of bearer rejected, already enabled [ 122.020018][ T9231] overlayfs: workdir and upperdir must reside under the same mount [ 122.172919][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.172997][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.173116][ T9160] bridge_slave_0: entered allmulticast mode [ 122.174471][ T9160] bridge_slave_0: entered promiscuous mode [ 122.177304][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.177382][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.177488][ T9160] bridge_slave_1: entered allmulticast mode [ 122.179175][ T9160] bridge_slave_1: entered promiscuous mode [ 122.210529][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.239412][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.280714][ T9160] team0: Port device team_slave_0 added [ 122.282765][ T9160] team0: Port device team_slave_1 added [ 122.293095][ T12] bridge_slave_1: left allmulticast mode [ 122.293110][ T12] bridge_slave_1: left promiscuous mode [ 122.293211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.294527][ T12] bridge_slave_0: left allmulticast mode [ 122.294538][ T12] bridge_slave_0: left promiscuous mode [ 122.294622][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.453774][ T9248] FAULT_INJECTION: forcing a failure. [ 122.453774][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 122.453808][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.3.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.453834][ T9248] Tainted: [L]=SOFTLOCKUP [ 122.453841][ T9248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.453852][ T9248] Call Trace: [ 122.453859][ T9248] [ 122.453866][ T9248] dump_stack_lvl+0x100/0x190 [ 122.453901][ T9248] should_fail_ex.cold+0x5/0xa [ 122.453931][ T9248] should_failslab+0xc2/0x120 [ 122.453956][ T9248] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.453976][ T9248] ? __fget_files+0x215/0x3d0 [ 122.453998][ T9248] ? create_new_namespaces+0x30/0xac0 [ 122.454024][ T9248] create_new_namespaces+0x30/0xac0 [ 122.454051][ T9248] __do_sys_setns+0x213/0x1f30 [ 122.454074][ T9248] ? __pfx___do_sys_setns+0x10/0x10 [ 122.454103][ T9248] do_syscall_64+0x123/0x790 [ 122.454131][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.454149][ T9248] RIP: 0033:0x7fbf39d9e159 [ 122.454166][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.454182][ T9248] RSP: 002b:00007fbf3ad08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 122.454202][ T9248] RAX: ffffffffffffffda RBX: 00007fbf3a026090 RCX: 00007fbf39d9e159 [ 122.454213][ T9248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 122.454224][ T9248] RBP: 00007fbf39e3503b R08: 0000000000000000 R09: 0000000000000000 [ 122.454234][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.454244][ T9248] R13: 00007fbf3a026128 R14: 00007fbf3a026090 R15: 00007ffc8e21a118 [ 122.454265][ T9248] [ 122.480218][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.480250][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.503808][ T9248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.672060][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.676768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.684992][ T12] bond0 (unregistering): Released all slaves [ 122.693669][ T12] bond1 (unregistering): Released all slaves [ 122.722346][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 122.722857][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.722866][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.722879][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.756041][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.756051][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.756065][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.798289][ T5088] Bluetooth: hci4: command tx timeout [ 122.829646][ T9160] hsr_slave_0: entered promiscuous mode [ 122.830128][ T9160] hsr_slave_1: entered promiscuous mode [ 122.830433][ T9160] debugfs: 'hsr0' already exists in 'hsr' [ 122.830444][ T9160] Cannot create hsr debugfs directory [ 122.857835][ T30] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 123.008441][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 123.009050][ T30] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 123.010108][ T30] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 123.010127][ T30] usb 9-1: config 0 has no interface number 0 [ 123.010157][ T30] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.010174][ T30] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 123.010194][ T30] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.010214][ T30] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.012220][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.012238][ T30] usb 9-1: Product: syz [ 123.012251][ T30] usb 9-1: Manufacturer: syz [ 123.012263][ T30] usb 9-1: SerialNumber: syz [ 123.019792][ T30] usb 9-1: config 0 descriptor?? [ 123.034979][ T30] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input17 [ 123.176385][ T12] hsr_slave_0: left promiscuous mode [ 123.193509][ T12] hsr_slave_1: left promiscuous mode [ 123.196151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.205013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.217242][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.217262][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.222602][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.222808][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.225449][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.225636][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.226107][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.231930][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.233302][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.233904][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.246654][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.246986][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.267209][ T35] usb 9-1: USB disconnect, device number 20 [ 123.267245][ C0] bcm5974 9-1:0.119: trackpad urb failed: -19 [ 123.269516][ T12] veth1_macvtap: left promiscuous mode [ 123.269538][ T12] veth0_macvtap: left promiscuous mode [ 123.269628][ T12] veth1_vlan: left promiscuous mode [ 123.269658][ T12] veth0_vlan: left promiscuous mode [ 123.519962][ T12] team0 (unregistering): Port device team_slave_1 removed [ 123.525124][ T12] team0 (unregistering): Port device team_slave_0 removed [ 123.630138][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 123.825197][ T9160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.843572][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.844141][ T9160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.858425][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.859053][ T9160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.860952][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.861571][ T9160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.867265][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.878378][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 123.878390][ T43] audit: type=1400 audit(1789048471.960:1010): avc: denied { write } for pid=9275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.943399][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.958067][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.964850][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.964902][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.973053][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.973104][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.012920][ T9160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.023098][ T43] audit: type=1400 audit(1789048472.100:1011): avc: denied { write } for pid=9284 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.105931][ T43] audit: type=1400 audit(1789048472.180:1012): avc: denied { ioctl } for pid=9287 comm="syz.3.1034" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 124.120557][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 124.231217][ T43] audit: type=1400 audit(1789048472.310:1013): avc: denied { write } for pid=9297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.270754][ T43] audit: type=1400 audit(1789048472.350:1014): avc: denied { write } for pid=9302 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.305045][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 124.393358][ T43] audit: type=1400 audit(1789048472.470:1015): avc: denied { create } for pid=9317 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.393748][ T43] audit: type=1400 audit(1789048472.470:1016): avc: denied { ioctl } for pid=9317 comm="syz.1.1037" path="socket:[29104]" dev="sockfs" ino=29104 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.397036][ T43] audit: type=1400 audit(1789048472.470:1017): avc: denied { write } for pid=9317 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.403586][ T9319] team0: entered allmulticast mode [ 124.403889][ T9319] tipc: Resetting bearer [ 124.403920][ T9319] team0: Cannot enslave team device to itself [ 124.462588][ T9323] bridge4: entered allmulticast mode [ 124.470277][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.533620][ T43] audit: type=1400 audit(1789048472.610:1018): avc: denied { connect } for pid=9336 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.558847][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.558878][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.563391][ T9339] bond3 (unregistering): Released all slaves [ 124.698945][ T9160] veth0_vlan: entered promiscuous mode [ 124.709936][ T9160] veth1_vlan: entered promiscuous mode [ 124.739767][ T9160] veth0_macvtap: entered promiscuous mode [ 124.744813][ T9160] veth1_macvtap: entered promiscuous mode [ 124.762465][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.766732][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.822736][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.822780][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.822810][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.822840][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.888248][ T5088] Bluetooth: hci4: command tx timeout [ 124.888473][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.888486][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.890161][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.890175][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.894557][ T43] audit: type=1400 audit(1789048472.970:1019): avc: denied { mounton } for pid=9160 comm="syz-executor" path="/syzkaller.XDqUDg/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 124.963878][ T9370] binder: BINDER_SET_CONTEXT_MGR already set [ 124.963887][ T9370] binder: 9368:9370 ioctl 4018620d 200000000100 returned -16 [ 124.963936][ T9371] binder: 9368:9371 ioctl c018620c 200000000000 returned -22 [ 125.000959][ T9378] team0: Device gtp0 is of different type [ 125.019565][ T9380] SELinux: syz.3.1051 (9380) wrote to user. This is no longer supported. [ 125.068658][ T9382] netlink: 'syz.5.1055': attribute type 6 has an invalid length. [ 125.403405][ T9406] tmpfs: Unknown parameter '' [ 125.540821][ T9410] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 125.540934][ T9409] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 125.664221][ T9422] overlayfs: workdir and upperdir must reside under the same mount [ 125.780745][ T9368] ima: policy update completed [ 125.920562][ T9431] overlayfs: failed to resolve './file1': -2 [ 125.986805][ T9434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1075'. [ 126.444955][ T9415] ceph: No mds server is up or the cluster is laggy [ 126.565019][ T5803] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.637656][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'. [ 126.637938][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.682933][ T9472] overlayfs: workdir and upperdir must reside under the same mount [ 126.700974][ T9472] kernel read not supported for file /cpu.stat (pid: 9472 comm: syz.1.1089) [ 126.715074][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.715781][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.716361][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.723086][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.726199][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.804897][ T9483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1091'. [ 126.812772][ T9484] geneve2: entered allmulticast mode [ 126.916829][ T9491] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 126.954314][ T9493] bridge_slave_1: entered promiscuous mode [ 127.057835][ T852] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 127.106574][ T9509] FAULT_INJECTION: forcing a failure. [ 127.106574][ T9509] name failslab, interval 1, probability 0, space 0, times 0 [ 127.106594][ T9509] CPU: 2 UID: 0 PID: 9509 Comm: syz.1.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.106610][ T9509] Tainted: [L]=SOFTLOCKUP [ 127.106613][ T9509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.106619][ T9509] Call Trace: [ 127.106623][ T9509] [ 127.106628][ T9509] dump_stack_lvl+0x100/0x190 [ 127.106657][ T9509] should_fail_ex.cold+0x5/0xa [ 127.106674][ T9509] should_failslab+0xc2/0x120 [ 127.106693][ T9509] kmem_cache_alloc_noprof+0x92/0x6a0 [ 127.106704][ T9509] ? __fget_files+0x215/0x3d0 [ 127.106718][ T9509] ? create_new_namespaces+0x30/0xac0 [ 127.106734][ T9509] create_new_namespaces+0x30/0xac0 [ 127.106750][ T9509] __do_sys_setns+0x213/0x1f30 [ 127.106765][ T9509] ? __pfx___do_sys_setns+0x10/0x10 [ 127.106783][ T9509] do_syscall_64+0x123/0x790 [ 127.106821][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.106836][ T9509] RIP: 0033:0x7f7a6e39e159 [ 127.106846][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.106856][ T9509] RSP: 002b:00007f7a6c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 127.106869][ T9509] RAX: ffffffffffffffda RBX: 00007f7a6e625fa0 RCX: 00007f7a6e39e159 [ 127.106877][ T9509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 127.106884][ T9509] RBP: 00007f7a6e43503b R08: 0000000000000000 R09: 0000000000000000 [ 127.106891][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.106898][ T9509] R13: 00007f7a6e626038 R14: 00007f7a6e625fa0 R15: 00007ffd19e2c358 [ 127.106913][ T9509] [ 127.140989][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.141125][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.141224][ T9474] bridge_slave_0: entered allmulticast mode [ 127.142833][ T9474] bridge_slave_0: entered promiscuous mode [ 127.147184][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.147268][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.147574][ T9474] bridge_slave_1: entered allmulticast mode [ 127.149197][ T9474] bridge_slave_1: entered promiscuous mode [ 127.174531][ T9515] overlayfs: workdir and upperdir must reside under the same mount [ 127.175938][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.178996][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.200429][ T9474] team0: Port device team_slave_0 added [ 127.202221][ T9474] team0: Port device team_slave_1 added [ 127.220593][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.220607][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.220624][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.223339][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.223350][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.223367][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.230432][ T852] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 127.231273][ T852] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.231296][ T852] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 127.231309][ T852] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 127.231328][ T852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.257064][ T9474] hsr_slave_0: entered promiscuous mode [ 127.263940][ T9474] hsr_slave_1: entered promiscuous mode [ 127.369237][ T5803] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.447267][ T9474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.456431][ T9474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.456835][ T9474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.463952][ T9474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.464763][ T9474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.471853][ T9474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.472591][ T9474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.481234][ T9474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.504988][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.505080][ T9474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.505285][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.505372][ T9474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.554307][ T5803] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.577165][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.593512][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.593978][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.621964][ T5803] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.631323][ T9474] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.640149][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.640199][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.645392][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.645438][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.667309][ T852] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 127.667322][ T852] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 127.677041][ T9547] UHID_CREATE from different security context by process 921 (syz.3.1108), this is not allowed. [ 127.682412][ T852] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 127.693534][ T852] usb 9-1: USB disconnect, device number 21 [ 127.695624][ T9474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.733068][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 127.812299][ T5803] bridge_slave_1: left allmulticast mode [ 127.812315][ T5803] bridge_slave_1: left promiscuous mode [ 127.812415][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.814658][ T5803] bridge_slave_0: left allmulticast mode [ 127.814673][ T5803] bridge_slave_0: left promiscuous mode [ 127.814784][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.935607][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.937346][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.947415][ T5803] bond0 (unregistering): Released all slaves [ 128.101781][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.101992][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102166][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102356][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102530][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102695][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102888][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.102964][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103038][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103111][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103185][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103265][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103339][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103412][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103504][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103582][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103685][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103759][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103860][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.103935][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104008][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104081][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104154][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104231][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104305][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104378][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104451][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104525][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104598][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104672][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104745][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104819][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.104892][ T9572] binder: binder_mmap: 9560 200000000000-200000200000 bad vm_flags failed -1 [ 128.158652][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 128.191335][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 128.200883][ T9474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.287406][ T5803] hsr_slave_0: left promiscuous mode [ 128.290665][ T5803] hsr_slave_1: left promiscuous mode [ 128.291334][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.291351][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.293439][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.293454][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.322465][ T5803] veth1_macvtap: left promiscuous mode [ 128.322498][ T5803] veth0_macvtap: left promiscuous mode [ 128.322568][ T5803] veth1_vlan: left promiscuous mode [ 128.322622][ T5803] veth0_vlan: left promiscuous mode [ 128.384917][ T9597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9597 comm=syz.1.1117 [ 128.385426][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 128.486806][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 128.495726][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 128.533166][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 128.578708][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 128.641203][ T9609] 9pnet_virtio: no channels available for device syz [ 128.678263][ T35] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.679078][ T35] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 128.679095][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 128.682631][ T35] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.682644][ T35] usb 8-1: Product: syz [ 128.682651][ T35] usb 8-1: Manufacturer: syz [ 128.682658][ T35] usb 8-1: SerialNumber: syz [ 128.683989][ T35] usb 8-1: config 0 descriptor?? [ 128.708868][ T35] usb 8-1: selecting invalid altsetting 0 [ 128.809458][ T9474] veth0_vlan: entered promiscuous mode [ 128.814878][ T67] Bluetooth: hci0: command tx timeout [ 128.817647][ T9474] veth1_vlan: entered promiscuous mode [ 128.852787][ T9474] veth0_macvtap: entered promiscuous mode [ 128.856386][ T9474] veth1_macvtap: entered promiscuous mode [ 128.858397][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 128.867425][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.871765][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.877795][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 128.921484][ T5811] usb 8-1: USB disconnect, device number 5 [ 128.948995][ T5775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.949021][ T5775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.949038][ T5775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.949056][ T5775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.953053][ T43] kauditd_printk_skb: 120 callbacks suppressed [ 128.953070][ T43] audit: type=1400 audit(1789048477.030:1139): avc: denied { ioctl } for pid=9586 comm="syz.3.1115" path="socket:[32074]" dev="sockfs" ino=32074 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.972932][ T9626] FAULT_INJECTION: forcing a failure. [ 128.972932][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 128.972953][ T9626] CPU: 1 UID: 0 PID: 9626 Comm: syz.1.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.972969][ T9626] Tainted: [L]=SOFTLOCKUP [ 128.972973][ T9626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.972979][ T9626] Call Trace: [ 128.972983][ T9626] [ 128.972988][ T9626] dump_stack_lvl+0x100/0x190 [ 128.973007][ T9626] should_fail_ex.cold+0x5/0xa [ 128.973023][ T9626] should_failslab+0xc2/0x120 [ 128.973037][ T9626] __kmalloc_noprof+0xfc/0x840 [ 128.973048][ T9626] ? rcu_is_watching+0x13/0xc0 [ 128.973063][ T9626] ? tomoyo_realpath_from_path+0xb6/0x690 [ 128.973079][ T9626] tomoyo_realpath_from_path+0xb6/0x690 [ 128.973095][ T9626] tomoyo_path_number_perm+0x23c/0x580 [ 128.973112][ T9626] ? tomoyo_path_number_perm+0x22e/0x580 [ 128.973131][ T9626] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.973153][ T9626] ? __lock_acquire+0x5c0/0x1f40 [ 128.973171][ T9626] ? __fget_files+0x34/0x3d0 [ 128.973185][ T9626] ? find_held_lock+0x2b/0x80 [ 128.973200][ T9626] ? hook_file_ioctl_common+0x140/0x440 [ 128.973217][ T9626] ? __fget_files+0x21f/0x3d0 [ 128.973232][ T9626] security_file_ioctl+0xd3/0x230 [ 128.973245][ T9626] __x64_sys_ioctl+0xb7/0x210 [ 128.973257][ T9626] do_syscall_64+0x123/0x790 [ 128.973273][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.973285][ T9626] RIP: 0033:0x7f7a6e39e159 [ 128.973295][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.973305][ T9626] RSP: 002b:00007f7a6c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.973317][ T9626] RAX: ffffffffffffffda RBX: 00007f7a6e625fa0 RCX: 00007f7a6e39e159 [ 128.973323][ T9626] RDX: 00002000000001c0 RSI: 00000000000089f7 RDI: 0000000000000003 [ 128.973330][ T9626] RBP: 00007f7a6c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.973336][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.973342][ T9626] R13: 00007f7a6e626038 R14: 00007f7a6e625fa0 R15: 00007ffd19e2c358 [ 128.973356][ T9626] [ 128.973361][ T9626] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.979556][ T43] audit: type=1800 audit(1789048477.060:1140): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153273 res=0 errno=0 [ 129.003348][ T43] audit: type=1400 audit(1789048477.080:1141): avc: denied { write } for pid=9624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.054262][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.054282][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.074040][ T43] audit: type=1800 audit(1789048477.150:1142): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153399 res=0 errno=0 [ 129.094265][ T43] audit: type=1800 audit(1789048477.170:1143): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 129.102898][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.102910][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.122582][ T9635] fuse: Unknown parameter 'fc@f²' [ 129.125343][ T43] audit: type=1400 audit(1789048477.200:1144): avc: denied { write } for pid=9632 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.154865][ T43] audit: type=1800 audit(1789048477.230:1145): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 129.185771][ T43] audit: type=1800 audit(1789048477.260:1146): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 129.231944][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 129.252321][ T43] audit: type=1800 audit(1789048477.330:1147): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 129.271203][ T9645] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1126'. [ 129.351817][ T43] audit: type=1800 audit(1789048477.430:1148): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 129.385217][ T5803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.385239][ T5803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.465921][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1131'. [ 129.467061][ T9657] FAULT_INJECTION: forcing a failure. [ 129.467061][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 129.467091][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.4.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.467115][ T9657] Tainted: [L]=SOFTLOCKUP [ 129.467127][ T9657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.467138][ T9657] Call Trace: [ 129.467144][ T9657] [ 129.467150][ T9657] dump_stack_lvl+0x100/0x190 [ 129.467178][ T9657] should_fail_ex.cold+0x5/0xa [ 129.467206][ T9657] should_failslab+0xc2/0x120 [ 129.467227][ T9657] __kmalloc_noprof+0xfc/0x840 [ 129.467246][ T9657] ? __pfx_dynamic_dname+0x10/0x10 [ 129.467262][ T9657] ? tomoyo_encode2+0xfb/0x3c0 [ 129.467278][ T9657] tomoyo_encode2+0xfb/0x3c0 [ 129.467293][ T9657] tomoyo_encode+0x29/0x50 [ 129.467305][ T9657] tomoyo_realpath_from_path+0x18c/0x690 [ 129.467321][ T9657] tomoyo_path_number_perm+0x23c/0x580 [ 129.467338][ T9657] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.467356][ T9657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.467379][ T9657] ? __lock_acquire+0x5c0/0x1f40 [ 129.467396][ T9657] ? __fget_files+0x34/0x3d0 [ 129.467410][ T9657] ? find_held_lock+0x2b/0x80 [ 129.467425][ T9657] ? hook_file_ioctl_common+0x140/0x440 [ 129.467442][ T9657] ? __fget_files+0x21f/0x3d0 [ 129.467458][ T9657] security_file_ioctl+0xd3/0x230 [ 129.467470][ T9657] __x64_sys_ioctl+0xb7/0x210 [ 129.467504][ T9657] do_syscall_64+0x123/0x790 [ 129.467520][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.467532][ T9657] RIP: 0033:0x7efda3f9e159 [ 129.467542][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.467552][ T9657] RSP: 002b:00007efda4eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.467563][ T9657] RAX: ffffffffffffffda RBX: 00007efda4225fa0 RCX: 00007efda3f9e159 [ 129.467570][ T9657] RDX: 00002000000001c0 RSI: 00000000000089f7 RDI: 0000000000000003 [ 129.467577][ T9657] RBP: 00007efda4eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 129.467583][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.467590][ T9657] R13: 00007efda4226038 R14: 00007efda4225fa0 R15: 00007ffe49d35928 [ 129.467604][ T9657] [ 129.467613][ T9657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.481236][ T5803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.481256][ T5803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.493637][ T9656] IPv6: sit1: Disabled Multicast RS [ 129.494181][ T9656] sit1: entered allmulticast mode [ 129.553863][ T9663] 9pnet_virtio: no channels available for device syz [ 129.564876][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.580772][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.589124][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.590079][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.590570][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.592934][ T5803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.592959][ T5803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.646653][ T9663] sch_fq: defrate 0 ignored. [ 129.673424][ T5803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.673458][ T5803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.703984][ T9663] nvme nvme0: failed to connect socket: -111 [ 129.886390][ T5803] bridge_slave_1: left allmulticast mode [ 129.886413][ T5803] bridge_slave_1: left promiscuous mode [ 129.886587][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.902926][ T5803] bridge_slave_0: left allmulticast mode [ 129.902943][ T5803] bridge_slave_0: left promiscuous mode [ 129.904427][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.951631][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.951922][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.952194][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.952474][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.955763][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.957510][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.972541][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.975340][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.975751][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.976071][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.978721][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.979780][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.983349][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.983566][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.983765][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.983948][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.984924][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.985307][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.985631][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.985934][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.986245][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.988200][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.988586][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.990320][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.994071][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.994654][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.994796][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.994938][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.995104][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.995901][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.996053][ T9682] Unable to locate . in FUNC.INSTANCE [ 129.996198][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.011691][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.012747][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.014228][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.014553][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.014885][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.015197][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.018655][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.025338][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.025559][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.025749][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.025912][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026074][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026233][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026394][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026555][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026724][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.026886][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.027073][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.027235][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.027396][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.027626][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.030399][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.030985][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.031389][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.032420][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.032588][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.032756][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.032919][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.033120][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.033293][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.033464][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.033623][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.033792][ T9682] Unable to locate . in FUNC.INSTANCE [ 130.102014][ T9692] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 130.202146][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.204519][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.205883][ T5803] bond0 (unregistering): Released all slaves [ 130.213967][ T5803] bond1 (unregistering): Released all slaves [ 130.232170][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 130.281023][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 130.312731][ T9707] netlink: 'syz.4.1140': attribute type 3 has an invalid length. [ 130.312745][ T9707] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1140'. [ 130.321145][ T5803] tipc: Left network mode [ 130.450365][ T25] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 130.451040][ T25] usb 11-1: config 0 has no interfaces? [ 130.451097][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.454537][ T25] usb 11-1: config 0 descriptor?? [ 130.674593][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 130.674975][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.675095][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.675197][ T9661] bridge_slave_0: entered allmulticast mode [ 130.681235][ T9661] bridge_slave_0: entered promiscuous mode [ 130.696471][ T5803] hsr_slave_0: left promiscuous mode [ 130.701598][ T5803] hsr_slave_1: left promiscuous mode [ 130.702285][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.702301][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.703907][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.703925][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.711143][ T5803] veth1_macvtap: left promiscuous mode [ 130.711172][ T5803] veth0_macvtap: left promiscuous mode [ 130.711218][ T5803] veth1_vlan: left promiscuous mode [ 130.711247][ T5803] veth0_vlan: left promiscuous mode [ 130.735234][ T61] usb 11-1: USB disconnect, device number 2 [ 130.877765][ T67] Bluetooth: hci0: command tx timeout [ 130.908925][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 130.916490][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 131.000335][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.003773][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.005050][ T9661] bridge_slave_1: entered allmulticast mode [ 131.008987][ T9661] bridge_slave_1: entered promiscuous mode [ 131.047357][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.053087][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.075158][ T9661] team0: Port device team_slave_0 added [ 131.079427][ T9661] team0: Port device team_slave_1 added [ 131.095889][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.095904][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.095924][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.097230][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.097238][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.097256][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.134960][ T9661] hsr_slave_0: entered promiscuous mode [ 131.135458][ T9661] hsr_slave_1: entered promiscuous mode [ 131.136014][ T9661] debugfs: 'hsr0' already exists in 'hsr' [ 131.136026][ T9661] Cannot create hsr debugfs directory [ 131.288110][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.321464][ T5803] IPVS: stop unused estimator thread 0... [ 131.334519][ T9661] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.343658][ T9661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.344071][ T9661] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.354350][ T9661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.355598][ T9661] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.361644][ T9661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.362123][ T9661] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.371740][ T9661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.403927][ T9761] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1145'. [ 131.444465][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.464895][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.475363][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.475504][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.477231][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.477313][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.610250][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 131.688046][ T67] Bluetooth: hci2: command tx timeout [ 131.779119][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.787830][ T61] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 131.847833][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 131.921740][ T9661] veth0_vlan: entered promiscuous mode [ 131.925643][ T9661] veth1_vlan: entered promiscuous mode [ 131.938461][ T61] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 131.939348][ T61] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.941331][ T61] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 131.941349][ T61] usb 11-1: Product: syz [ 131.941360][ T61] usb 11-1: Manufacturer: syz [ 131.941371][ T61] usb 11-1: SerialNumber: syz [ 131.946467][ T9661] veth0_macvtap: entered promiscuous mode [ 131.949147][ T9661] veth1_macvtap: entered promiscuous mode [ 131.956716][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.961977][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.988025][ T5803] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.988401][ T5803] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.009226][ T5775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.014284][ T25] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 132.034029][ T25] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 132.034052][ T25] usb 6-1: config 253 has no interface number 0 [ 132.034074][ T25] usb 6-1: config 253 interface 130 has no altsetting 0 [ 132.038752][ T5775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.053265][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.053288][ T25] usb 6-1: Product: syz [ 132.053301][ T25] usb 6-1: Manufacturer: syz [ 132.053313][ T25] usb 6-1: SerialNumber: syz [ 132.079504][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.079516][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.112889][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.112902][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.154820][ T61] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.227988][ T9809] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1155'. [ 132.292995][ T25] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 132.304885][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 132.304925][ T25] dib0700: firmware download failed at 7 with -22 [ 132.316167][ T25] usb 6-1: USB disconnect, device number 22 [ 132.322300][ T9815] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.357010][ T9776] nvme_fabrics: unknown parameter or missing value '©¦¸-' in ctrl creation request [ 132.364987][ T852] usb 11-1: USB disconnect, device number 3 [ 132.372997][ T852] usblp0: removed [ 132.498442][ T9834] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1165'. [ 132.499181][ T30] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 132.590585][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1168'. [ 132.648417][ T30] usb 9-1: device descriptor read/64, error -71 [ 132.726593][ T9850] vlan2: entered promiscuous mode [ 132.726610][ T9850] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 132.733763][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733811][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.795095][ T9852] [ 132.796092][ T9852] ====================================================== [ 132.798478][ T9852] WARNING: possible circular locking dependency detected [ 132.800819][ T9852] syzkaller #0 Tainted: G L [ 132.803173][ T9852] ------------------------------------------------------ [ 132.805322][ T9852] syz.7.1171/9852 is trying to acquire lock: [ 132.807103][ T9852] ffff88802e68d170 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 132.809882][ T9852] [ 132.809882][ T9852] but task is already holding lock: [ 132.812044][ T9852] ffff88804c7b0ed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 132.815103][ T9852] [ 132.815103][ T9852] which lock already depends on the new lock. [ 132.815103][ T9852] [ 132.818167][ T9852] [ 132.818167][ T9852] the existing dependency chain (in reverse order) is: [ 132.820919][ T9852] [ 132.820919][ T9852] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 132.823516][ T9852] lock_acquire+0x1d1/0x380 [ 132.825055][ T9852] __mutex_lock+0x1a4/0x1bd0 [ 132.826642][ T9852] process_measurement+0x5ab/0x2350 [ 132.828400][ T9852] ima_file_check+0xc3/0x110 [ 132.829933][ T9852] security_file_post_open+0xc4/0x210 [ 132.831695][ T9852] path_openat+0x5cd/0x2440 [ 132.833229][ T9852] do_file_open+0x20e/0x430 [ 132.834737][ T9852] do_sys_openat2+0x10f/0x1e0 [ 132.836291][ T9852] __x64_sys_openat+0x12d/0x210 [ 132.837950][ T9852] do_syscall_64+0x123/0x790 [ 132.839518][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.841446][ T9852] [ 132.841446][ T9852] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 132.843692][ T9852] lock_acquire+0x1d1/0x380 [ 132.845224][ T9852] mnt_want_write+0x6f/0x420 [ 132.846805][ T9852] lookup_open+0x150/0x1990 [ 132.848626][ T9852] path_openat+0xa2c/0x2440 [ 132.850607][ T9852] do_file_open+0x20e/0x430 [ 132.852657][ T9852] file_open_name+0x1c3/0x3e0 [ 132.854793][ T9852] filp_open+0x2e/0x50 [ 132.856657][ T9852] nvmet_file_ns_enable+0x95/0x420 [ 132.858968][ T9852] nvmet_ns_enable+0x43b/0x650 [ 132.861076][ T9852] nvmet_ns_enable_store+0x11e/0x160 [ 132.863485][ T9852] configfs_write_iter+0x302/0x4e0 [ 132.865807][ T9852] vfs_write+0x6af/0x1050 [ 132.867786][ T9852] ksys_write+0x12a/0x250 [ 132.869704][ T9852] do_syscall_64+0x123/0x790 [ 132.871789][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.874365][ T9852] [ 132.874365][ T9852] -> #1 (&subsys->lock){+.+.}-{4:4}: [ 132.877462][ T9852] lock_acquire+0x1d1/0x380 [ 132.879600][ T9852] __mutex_lock+0x1a4/0x1bd0 [ 132.881678][ T9852] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 132.884184][ T9852] configfs_write_iter+0x302/0x4e0 [ 132.886483][ T9852] vfs_write+0x6af/0x1050 [ 132.887771][ T30] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 132.891566][ T9852] ksys_write+0x12a/0x250 [ 132.893556][ T9852] do_syscall_64+0x123/0x790 [ 132.895647][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.898070][ T9852] [ 132.898070][ T9852] -> #0 (&p->frag_sem){.+.+}-{4:4}: [ 132.900960][ T9852] check_prev_add+0xeb/0xe60 [ 132.903067][ T9852] __lock_acquire+0x1528/0x1f40 [ 132.905269][ T9852] lock_acquire+0x1d1/0x380 [ 132.907327][ T9852] down_read+0x99/0x4c0 [ 132.909121][ T9852] __configfs_open_file+0xe8/0x9c0 [ 132.911206][ T9852] do_dentry_open+0x6ab/0x14d0 [ 132.913193][ T9852] vfs_open+0x82/0x3f0 [ 132.914917][ T9852] dentry_open+0x71/0xd0 [ 132.916689][ T9852] ima_calc_file_hash+0xe1/0x380 [ 132.918502][ T9852] ima_collect_measurement+0x94f/0xb30 [ 132.920291][ T9852] process_measurement+0xdfe/0x2350 [ 132.922037][ T9852] ima_file_check+0xc3/0x110 [ 132.923593][ T9852] security_file_post_open+0xc4/0x210 [ 132.925814][ T9852] path_openat+0x5cd/0x2440 [ 132.927355][ T9852] do_file_open+0x20e/0x430 [ 132.929245][ T9852] do_sys_openat2+0x10f/0x1e0 [ 132.931227][ T9852] __x64_sys_openat+0x12d/0x210 [ 132.933261][ T9852] do_syscall_64+0x123/0x790 [ 132.935232][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.937436][ T9852] [ 132.937436][ T9852] other info that might help us debug this: [ 132.937436][ T9852] [ 132.941043][ T9852] Chain exists of: [ 132.941043][ T9852] &p->frag_sem --> sb_writers#6 --> &ima_iint_mutex_key[depth] [ 132.941043][ T9852] [ 132.945071][ T9852] Possible unsafe locking scenario: [ 132.945071][ T9852] [ 132.947329][ T9852] CPU0 CPU1 [ 132.949010][ T9852] ---- ---- [ 132.950637][ T9852] lock(&ima_iint_mutex_key[depth]); [ 132.952361][ T9852] lock(sb_writers#6); [ 132.954540][ T9852] lock(&ima_iint_mutex_key[depth]); [ 132.957455][ T9852] rlock(&p->frag_sem); [ 132.957857][ T67] Bluetooth: hci0: command tx timeout [ 132.961026][ T9852] [ 132.961026][ T9852] *** DEADLOCK *** [ 132.961026][ T9852] [ 132.963958][ T9852] locks held by syz.7.1171/9852: 1, last CPU#2: [ 132.966223][ T9852] #0: ffff88804c7b0ed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 132.970119][ T9852] [ 132.970119][ T9852] stack backtrace: [ 132.972371][ T9852] CPU: 2 UID: 0 PID: 9852 Comm: syz.7.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.976025][ T9852] Tainted: [L]=SOFTLOCKUP [ 132.977606][ T9852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.980817][ T9852] Call Trace: [ 132.981761][ T9852] [ 132.982611][ T9852] dump_stack_lvl+0x100/0x190 [ 132.984041][ T9852] print_circular_bug.cold+0x178/0x1be [ 132.985857][ T9852] check_noncircular+0x146/0x160 [ 132.987482][ T9852] ? kasan_save_stack+0x30/0x50 [ 132.989245][ T9852] ? process_measurement+0xdfe/0x2350 [ 132.991211][ T9852] check_prev_add+0xeb/0xe60 [ 132.992885][ T9852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.995176][ T9852] __lock_acquire+0x1528/0x1f40 [ 132.996958][ T9852] lock_acquire+0x1d1/0x380 [ 132.998650][ T9852] ? __configfs_open_file+0xe8/0x9c0 [ 133.000622][ T9852] ? __pfx___might_resched+0x10/0x10 [ 133.002518][ T9852] down_read+0x99/0x4c0 [ 133.003842][ T9852] ? __configfs_open_file+0xe8/0x9c0 [ 133.005729][ T9852] ? __pfx_down_read+0x10/0x10 [ 133.007345][ T9852] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 133.009368][ T9852] ? __configfs_open_file+0xcb/0x9c0 [ 133.011366][ T9852] __configfs_open_file+0xe8/0x9c0 [ 133.013372][ T9852] do_dentry_open+0x6ab/0x14d0 [ 133.015172][ T9852] ? __pfx_configfs_open_file+0x10/0x10 [ 133.017203][ T9852] vfs_open+0x82/0x3f0 [ 133.017803][ T30] usb 9-1: device descriptor read/64, error -71 [ 133.021040][ T9852] dentry_open+0x71/0xd0 [ 133.022627][ T9852] ima_calc_file_hash+0xe1/0x380 [ 133.024544][ T9852] ima_collect_measurement+0x94f/0xb30 [ 133.026570][ T9852] ? __pfx_ima_collect_measurement+0x10/0x10 [ 133.028870][ T9852] ? process_measurement+0x5ab/0x2350 [ 133.030821][ T9852] ? is_bad_inode+0xd/0x40 [ 133.032498][ T9852] ? xattr_resolve_name+0x27d/0x3f0 [ 133.034261][ T9852] ? vfs_getxattr_alloc+0xec/0x350 [ 133.035911][ T9852] ? ima_get_hash_algo+0x241/0x400 [ 133.037447][ T9852] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 133.039562][ T9852] ? process_measurement+0xdfe/0x2350 [ 133.041564][ T9852] process_measurement+0xdfe/0x2350 [ 133.043537][ T9852] ? __pfx_process_measurement+0x10/0x10 [ 133.045594][ T9852] ? lock_acquire+0x1d1/0x380 [ 133.047324][ T9852] ? __configfs_open_file+0x6ca/0x9c0 [ 133.049170][ T9852] ima_file_check+0xc3/0x110 [ 133.050853][ T9852] ? __pfx_ima_file_check+0x10/0x10 [ 133.052771][ T9852] security_file_post_open+0xc4/0x210 [ 133.054733][ T9852] path_openat+0x5cd/0x2440 [ 133.056210][ T9852] ? __pfx_path_openat+0x10/0x10 [ 133.058013][ T9852] do_file_open+0x20e/0x430 [ 133.059473][ T9852] ? __pfx_do_file_open+0x10/0x10 [ 133.060997][ T9852] ? _raw_spin_unlock+0x28/0x50 [ 133.062480][ T9852] ? alloc_fd+0x471/0x7a0 [ 133.063900][ T9852] do_sys_openat2+0x10f/0x1e0 [ 133.065599][ T9852] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.067472][ T9852] __x64_sys_openat+0x12d/0x210 [ 133.069218][ T9852] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.070926][ T9852] do_syscall_64+0x123/0x790 [ 133.072739][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.074580][ T9852] RIP: 0033:0x7f285299e159 [ 133.075932][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.081843][ T9852] RSP: 002b:00007f2853912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.084846][ T9852] RAX: ffffffffffffffda RBX: 00007f2852c25fa0 RCX: 00007f285299e159 [ 133.087633][ T9852] RDX: 0000000000002001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 133.090453][ T9852] RBP: 00007f2852a3503b R08: 0000000000000000 R09: 0000000000000000 [ 133.093316][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.096018][ T9852] R13: 00007f2852c26038 R14: 00007f2852c25fa0 R15: 00007fff9d099508 [ 133.098716][ T9852] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 133.131366][ T30] usb usb9-port1: attempt power cycle [ 133.468043][ T30] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 133.488677][ T30] usb 9-1: device descriptor read/8, error -71 [ 133.514288][ T5775] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.601319][ T5775] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.662019][ T5775] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.759773][ T5775] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.880608][ T5775] bridge_slave_1: left allmulticast mode [ 133.880623][ T5775] bridge_slave_1: left promiscuous mode [ 133.880694][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.881471][ T5775] bridge_slave_0: left allmulticast mode [ 133.881483][ T5775] bridge_slave_0: left promiscuous mode [ 133.881543][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.925724][ T5775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.927281][ T5775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.928269][ T5775] bond0 (unregistering): Released all slaves [ 133.981893][ T43] kauditd_printk_skb: 201 callbacks suppressed [ 133.981912][ T43] audit: type=1400 audit(1789048482.060:1350): avc: denied { write } for pid=9858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.020391][ T43] audit: type=1400 audit(1789048482.100:1351): avc: denied { write } for pid=9861 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.044716][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 134.086162][ T43] audit: type=1400 audit(1789048482.160:1352): avc: denied { write } for pid=9864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.121298][ T43] audit: type=1400 audit(1789048482.200:1353): avc: denied { write } for pid=9867 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.141388][ T5775] hsr_slave_0: left promiscuous mode [ 134.141656][ T5775] hsr_slave_1: left promiscuous mode [ 134.141857][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.141866][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.142149][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.142157][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.143565][ T5775] veth1_macvtap: left promiscuous mode [ 134.143585][ T5775] veth0_macvtap: left promiscuous mode [ 134.143613][ T5775] veth1_vlan: left promiscuous mode [ 134.143634][ T5775] veth0_vlan: left promiscuous mode [ 134.218935][ T5775] team0 (unregistering): Port device team_slave_1 removed [ 134.223307][ T5775] team0 (unregistering): Port device team_slave_0 removed [ 134.267193][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 134.322160][ T43] audit: type=1400 audit(1789048482.400:1354): avc: denied { write } for pid=9870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.357654][ T43] audit: type=1400 audit(1789048482.430:1355): avc: denied { write } for pid=9873 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.380439][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 134.444984][ T43] audit: type=1400 audit(1789048482.520:1356): avc: denied { write } for pid=9876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.485361][ T43] audit: type=1400 audit(1789048482.560:1357): avc: denied { write } for pid=9879 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.527248][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 134.612665][ T5775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.638215][ T6159] wlan1: Trigger new scan to find an IBSS to join [ 134.662906][ T5775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.740651][ T5775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.791213][ T5775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.887336][ T43] audit: type=1800 audit(1789048482.960:1358): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161222 res=0 errno=0 [ 134.888741][ T43] audit: type=1800 audit(1789048482.970:1359): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161227 res=0 errno=0 [ 134.960565][ T5775] bond0 (unregistering): Released all slaves [ 134.961969][ T5775] bond1 (unregistering): Released all slaves [ 134.965947][ T5775] bond2 (unregistering): Released all slaves [ 134.969623][ T5775] bond3 (unregistering): Released all slaves [ 134.973163][ T5775] bond4 (unregistering): Released all slaves [ 134.976528][ T5775] bond5 (unregistering): Released all slaves [ 135.016928][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22 [ 135.040826][ T5775] tipc: Disabling bearer [ 135.041403][ T5775] tipc: Disabling bearer [ 135.041525][ T5775] tipc: Left network mode [ 135.108986][ T5444] 8021q: adding VLAN 0 to HW filter on device eth23 [ 135.184974][ T5775] hsr_slave_0: left promiscuous mode [ 135.185296][ T5775] hsr_slave_1: left promiscuous mode [ 135.186746][ T5775] veth1_macvtap: left promiscuous mode [ 135.186760][ T5775] veth0_macvtap: left promiscuous mode [ 135.186794][ T5775] veth1_vlan: left promiscuous mode [ 135.186814][ T5775] veth0_vlan: left promiscuous mode [ 135.304284][ T5444] 8021q: adding VLAN 0 to HW filter on device eth24 [ 135.521933][ T5775] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.549178][ T5444] 8021q: adding VLAN 0 to HW filter on device eth25 [ 135.809841][ T5775] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.891561][ T5775] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.952322][ T5775] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.035814][ T5775] bridge_slave_1: left allmulticast mode [ 136.035837][ T5775] bridge_slave_1: left promiscuous mode [ 136.035944][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.037079][ T5775] bridge_slave_0: left allmulticast mode [ 136.037096][ T5775] bridge_slave_0: left promiscuous mode [ 136.037235][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.086336][ T5775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.089777][ T5775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.094289][ T5775] bond0 (unregistering): Released all slaves [ 136.209590][ T5444] 8021q: adding VLAN 0 to HW filter on device eth26 [ 136.264010][ T5775] hsr_slave_0: left promiscuous mode [ 136.264310][ T5775] hsr_slave_1: left promiscuous mode [ 136.264523][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.264532][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.264825][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.264834][ T5775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.266991][ T5775] veth1_macvtap: left promiscuous mode [ 136.267019][ T5775] veth0_macvtap: left promiscuous mode [ 136.267065][ T5775] veth1_vlan: left promiscuous mode [ 136.267097][ T5775] veth0_vlan: left promiscuous mode [ 136.336896][ T5775] team0 (unregistering): Port device team_slave_1 removed [ 136.344251][ T5775] team0 (unregistering): Port device team_slave_0 removed [ 136.373196][ T5444] 8021q: adding VLAN 0 to HW filter on device eth27 [ 136.740690][ T5444] 8021q: adding VLAN 0 to HW filter on device eth28 [ 136.840563][ T5444] 8021q: adding VLAN 0 to HW filter on device eth29 [ 140.331384][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 140.331401][ T43] audit: type=1400 audit(1789048488.410:1423): avc: denied { write } for pid=9991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.370313][ T43] audit: type=1400 audit(1789048488.450:1424): avc: denied { write } for pid=9994 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.189665][ T43] audit: type=1400 audit(1789048489.270:1425): avc: denied { write } for pid=10000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.231716][ T43] audit: type=1400 audit(1789048489.310:1426): avc: denied { write } for pid=10003 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.450066][ T43] audit: type=1400 audit(1789048489.530:1427): avc: denied { write } for pid=10007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.490936][ T43] audit: type=1400 audit(1789048489.570:1428): avc: denied { write } for pid=10010 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.696107][ T43] audit: type=1400 audit(1789048489.770:1429): avc: denied { write } for pid=10014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.739925][ T43] audit: type=1400 audit(1789048489.820:1430): avc: denied { write } for pid=10017 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.895475][ T43] audit: type=1400 audit(1789048489.970:1431): avc: denied { write } for pid=10020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.946654][ T43] audit: type=1400 audit(1789048490.020:1432): avc: denied { write } for pid=10023 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1