last executing test programs: 16.419871347s ago: executing program 2 (id=278): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4000, 0x123, 0x8}, 0x18) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080)) (async) r1 = socket(0x11, 0x1, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x77bcbea0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x7, 0x0}, 0xfff}, {@remote, 0x7}]}, @rr={0x7, 0x7, 0x47, [@local]}, @generic={0x88, 0x12, "b6fc8bd77c931e627c71fea311968c5b"}, @timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x5, [{@remote, 0xff}, {@broadcast}]}, @noop]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x81, 0x6, {{0x10, 0x4, 0x2, 0x1e, 0x40, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x65, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xad, [@broadcast, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback, @loopback]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048005}, 0x40000a0) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) (async, rerun: 32) r5 = semget(0x3, 0x3, 0x180) (rerun: 32) semctl$GETPID(r5, 0x2, 0xb, &(0x7f00000007c0)=""/4096) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001800)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000001880)={0x1, 0x10, 0xfa00, {&(0x7f00000017c0), r6}}, 0x18) (async) setrlimit(0x9, &(0x7f00000018c0)={0x6, 0x89}) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000001900)={0x7, 0x8, 0xfa00, {r6, 0x8}}, 0x10) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001980), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x7c, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) getsockname$packet(r0, &(0x7f0000001ac0), &(0x7f0000001b00)=0x14) setrlimit(0x9, &(0x7f0000001b40)={0xfffffffffffffffb, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001c80)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000001c40)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000001cc0)={0xb, 0x10, 0xfa00, {&(0x7f0000001b80), r8, 0x9}}, 0x18) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x64, r10, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @random="b5a9b3131cf2", {0x6, 0x6}, @value=@ver_80211n={0x0, 0xa7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x7fff, @void}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) semop(r5, &(0x7f0000001f00)=[{0x2, 0x5}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000001f40)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xdf5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0xff01, 0x8, {"a24dec008c3fb7d1f5f85a47d21b99ea"}, 0x80, 0x3}}}, 0x118) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000002180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x90) (async, rerun: 32) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000002440)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002400)={&(0x7f0000002280)={0x17c, 0x4, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "53503caa7f6fcfb91ea81bc99602f978d16db930d853d4a4961a821cf6abe6f4cb3057acf3667959b32e5a6680da69c477734eb184278c444e8ad9ac6e636a72b292bb54dfa3f53f12c6ac13d7cf8a53044d1fd6f1828cea00390b9b454d2abac4ca490ec81c50c196d1ba1445138c75b10b8fafe40bf61237944338ec5c6cac861e1276729ed41b161830f34ceaa98984cbb8d0563cc72ee3239a94087694be78f7e40456d1ba6b8c010583f206b488b3a385ddb1a7b524c8e59fc8608eab44a0d180e1ce97322efdc3df56ced4a3"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (rerun: 32) 16.321059806s ago: executing program 2 (id=279): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0x4, 0x1, 0x2, 0x3}, @x25={0x2, 0xe3, 0x27, "35616030acde075ab9b8b0185f70f8fd88cf37d08533fd3a1dc964fe6fa59f75202a1eeaa2fe7ea9f1e13c45"}}, 0x39) 16.316548049s ago: executing program 2 (id=280): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000f50000008500000083000000bf090000000000005509010000000000950000000000000017090000f6ffffffbf91000000000000b7020000020000008500000085000000b70000000000400095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3}, 0x94) 16.248584558s ago: executing program 2 (id=281): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (async) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) (async) 16.048713745s ago: executing program 2 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000008000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 15.640638606s ago: executing program 2 (id=287): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x4, 0x9dc9, 0x1, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffefe00}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x802) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 15.588327146s ago: executing program 32 (id=287): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000540)={0x4, 0x9dc9, 0x1, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffefe00}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x802) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 6.650596608s ago: executing program 3 (id=405): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) statx(0xffffffffffffffff, 0x0, 0x1000, 0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x400000000000000) 6.410413366s ago: executing program 3 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x4, 0x39, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x80, 0x7, 0x6, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) ioctl$EVIOCRMFF(r4, 0x4004550f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x3e) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05100000000100000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="30000e0080000600ffffffffffff08021100000008021100000000000000000000000000640001007206030303030303120091008b722244c46a07c0e897786a5c5f00000500a3000100000008000c006400000008000d0008000000"], 0x78}}, 0x0) 3.379895513s ago: executing program 3 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000140)) 3.24997505s ago: executing program 3 (id=452): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) syz_usb_connect$midi(0x2, 0x63, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xe, 0x80, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x9}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x29, 0x5, 0xfb, {0x7, 0x25, 0x1, 0x3, "487fdb"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xff, 0x0, 0x0, {0x13, 0x25, 0x1, 0xf, "bcb7d4ced36fcbbf55a2cc6a02abf8"}}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xff, 0xfd, 0x7, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x94, 0x1, 0xb, 0x70, 0x81}, 0x6c, &(0x7f0000000280)={0x5, 0xf, 0x6c, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x3ff, 0xf000, 0x3, [0x0, 0x0, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b208b1b380aee44a1bc9dc1c005469da"}, @generic={0x3b, 0x10, 0xa, "32370bc20234930696c3432432c4471baa4da7fdb95d7ff9d9b73c5ce189cbc0903e79d1bbf239f6885d033c1833c1a120c8f52dcb82076d"}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}]}) 2.200681294s ago: executing program 0 (id=477): r0 = socket(0x6, 0xa, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 2.200367947s ago: executing program 0 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000060}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140)=0x7, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000000180)={0xf0dc, 0x5e00}) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000001c0)={0x9, 0x2, 0x682b46ff, 0x3, 0x200}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000200)) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='esdfs\x00', 0x20000, &(0x7f0000000300)='IPVS\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa5b1e3749a806116}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x860}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) r4 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x50180) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f00000005c0)={0xf090}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000600)={0x2000000000000000, 0x8080000, 0x4, 0xa, 0xa}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x980, 0x0) write$binfmt_script(r6, &(0x7f0000000680)={'#! ', './file0', [], 0xa, "25e14a1893011c6a7c8e51e6ed267723cb5fcecdd325493fe09df87410b5c26685b387fd6d268e3448eedb55cff9ed44c130f6928de141284e105eced6"}, 0x48) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x2) ioctl$TCFLSH(r6, 0x540b, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000700)={0x2, 0x0, [{}, {}]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) kcmp(r7, 0xffffffffffffffff, 0x5, r5, r0) r8 = open$dir(&(0x7f0000000800)='./file0\x00', 0x40040, 0x40) move_mount(r6, &(0x7f00000007c0)='./file0\x00', r8, &(0x7f0000000840)='./file0\x00', 0x41) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000880)={0x6, 0x70e, 0x100, {0x1, 0x2}, 0x0, 0x39}) socket$l2tp(0x2, 0x2, 0x73) ioctl$CDROM_DISC_STATUS(r6, 0x5327) ioctl$BSG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f0000000900)) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000000b00)={0x0, &(0x7f0000000ac0)=[&(0x7f0000000940)="dfde0cfdc8bb5928e910fd37b41b93448ca43b9f9156dccf15594329d644c2ac537e5840a8f71eb531753f8c78bc8fe394ac069530084191b3ca69664c256f598e85df26234f58b8b8706beec547b028f77f8b367d5733fc", &(0x7f00000009c0)="15320a6fdad5266f288675da70970024460c4851faa6a8a6946b7e9c7425baa281601d2422f52369a002c6fc989c1f70d9e454ef6f4dfb8c1b4824842b347b35097ab4fab691b37523ebaa11bc1f8096323bd23d91a28c0385294f92dad5001bfddc00eb3de92c6c811d4a874783e5ac0cab4ea0953b95823a18063f2da2e4f9c58282ae864c6ec1d69b3827cbfddaf8d6602edfa4f6d315f6ceea01c043c174efc45117fe76327ff34a6847bcce17ba8e095fade5ff9b6edb4fb63f88fecd04cd51387175ccc1c756bc014952"], 0xaf4}) 2.139822783s ago: executing program 0 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000140)="03000000000000") 1.929713429s ago: executing program 0 (id=485): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000f50000008500000083000000bf090000000000005509010000000000950000000000000017090000f6ffffffbf91000000000000b7020000020000008500000085000000b700000000003f0095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3}, 0x94) 1.868759143s ago: executing program 0 (id=488): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3E`\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat(r1, &(0x7f00000000c0)='./proc\x00', 0x12200, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x8012, 0xa01, 0xfffffffc, 0x0, {0xa}, [@nested={0x64, 0xa3, 0x0, 0x1, [@nested={0x60, 0x15c, 0x0, 0x1, [@generic="3fc82d8ff96756bf9d92694bc0fe1be60e94cb780fed4e37c8aefc347d8e5103c2ca6de50309606271e130ebc0b00f87fd981c857f5397fbd8719816bd7340e600d26064c191315b287210fd0cfbc26170dd09cb6ff6c8bcae8fb28e"]}]}]}, 0x78}}, 0x0) 1.807268719s ago: executing program 0 (id=489): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201900301"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @loopback}, {0x1, @remote}, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 'batadv_slave_0\x00'}) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000000040110000ac141414e000000104d204d200080000"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000f"], 0x0, 0x96}, 0x28) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r6, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x7, 0x0, 0xd04, 0xfffffffffffffffc, 0x1, 0x4, {0x0, 0xa, 0xfffffffffffffffd, 0x7fffffff, 0x4, 0x6, 0x4, 0x4, 0x4, 0xa000, 0x101, r6, r7, 0xf0ee, 0x9c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1.807022868s ago: executing program 4 (id=490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8326}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x89}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0xd0}, 0x4000800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000001040)) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r4, 0x0, 0x109) unshare(0x38030540) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x104}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x24008000) syz_emit_ethernet(0x114, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xde, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, [{0x1, 0xf, "60d515a387d578b5562e8a2597e442218e5bf044314ce52f5691367b58137b941e8361d14ec2dec2944e04ecbdea5dbcf49c89c7b661e4c8d543e5aa311336b1687e9eaab8831c62de33f14b72efb542d04e5d175bae6bb2802b35c18a88d855b524967d260512955e612bf5561d35db6fee9056cd050a6c93a9"}, {0x2, 0x5, "1a9324c1a925dfffb82f5d6d1bf1dbf7ba1070f3a773083a35b0ed3a2d94476087748e36a33dd4d52fda3145"}, {0x22, 0x1, "e72b5df013e17222a2e4"}]}}}}}}, 0x0) 1.738248763s ago: executing program 4 (id=491): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setresuid(0x0, 0xee00, 0xee01) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.668411887s ago: executing program 4 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x78, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x12, 0x91, "8b722244c46a07c0e897786a5c5f"}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x78}}, 0x0) 1.667919117s ago: executing program 4 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f0000000140)="03000000000000") 1.550618661s ago: executing program 1 (id=496): syz_emit_ethernet(0x78, &(0x7f0000000080)={@random="8e7ed13cf0a1", @random="4badf8895a0e", @void, {@llc={0x4, {@snap={0x1, 0x0, 'Lf', 'L,y', 0x6000, "8549d375e4ef77ed6de88e44027659e40722e13489c3cbf02fc4fd3e1c4cf36cf255521585b446659b4ffee7cb4397e748a7d8e11ecf451c6de34791774d80e9ad792066ca340c205e18f4a782415482f9567b2354602725fe6ebc895b3acd280d"}}}}}, 0x0) 1.490756585s ago: executing program 1 (id=497): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000f50000008500000083000000bf090000000000005509010000000000950000000000000017090000f6ffffffbf91000000000000b7020000020000008500000085000000b70000000000500095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3}, 0x94) 1.490115401s ago: executing program 1 (id=498): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, 0x0, 0x101240, 0x0, 0x9, 0x0, 0x0}, 0x1, &(0x7f0000000740)=[{0x0, 0x185, 0x0, &(0x7f00000005c0)="078582f1177576fa68736206a1809fe6b74b1382afdce76d51920ffaa756492e152df54f63165774a7b4f01cd0d7ce0c4d4b29a6c39b6decbe190bfe2de3164fafd163d50d977fbb309678a3cad0bf3ab4b5b7fcb6d53e81694f90e98241af6b17e0335b59c1d7d08d75c9365dee38d91b44cbbb7bd3b800d669a5454f05e0075d8fa0ba3f7f2c069d8f16f298fb07beaf7c5336d533f1ea", 0x98}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xc8c7) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x3}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c020000100001002dbd7000000000f9ff000000000000000000000000000000ac14140d0000000000000400000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000ffffffff32000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000090000000000000005000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000000000000000000000a0004002c00000000000000680002006362632874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000"], 0x20c}}, 0x44050) 1.489625089s ago: executing program 4 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x12, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="00000000000000208510003baab281c1b49d0003000000180000000000000000000000e2ffff009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044864}, 0x40048d4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000540)={0x9}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0xc009, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x4000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES32=r4, @ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfffffe3e, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1b, r6}, 0x10) syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x44000) 1.330948672s ago: executing program 1 (id=500): socket$kcm(0x21, 0x2, 0xa) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1040, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x8000000000000001) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x4000000000005, 0x181040) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64=0x0], 0x128}, 0x8015) recvmsg$unix(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffe49, 0x0, 0x62, &(0x7f00000000c0), 0x100}, 0x10101) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000005c0)=[{0x30, '\x00', @st={0x4, [{0x1, @svalue=0x8}, {0x0, @svalue=0xfffffffffffffffc}, {0x2, @uvalue=0x4}, {0x3, @uvalue=0x280000000000}]}, 0xfff}, {0x37, '\x00', @buffer={"e127312c427385db031bf25cc30e5d421174a4fbfeb8fa5d4cf1512cf17bd5a0", 0x20}, 0x8}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0x1a, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 940.530501ms ago: executing program 1 (id=501): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x22020400) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x400c4d09, &(0x7f0000000900)) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0xff68, @rand_addr=0x64010102}}, 0xfffffffffffffdc5) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, 0x0) 860.794811ms ago: executing program 1 (id=502): ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={@lba=0x100000, 0x0, 0x0, 0x0}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) lseek(r3, 0xfffffffffffffffd, 0x0) (async) lseek(r3, 0xfffffffffffffffd, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r6, 0x89f0, &(0x7f00000194c0)={0x20008043, 0x530, 0x1000c, 0x2, 0xf, "a533b60908000000000600", 0x9, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRESHEX=r4], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x8080) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) close(r5) ioctl$CDROMPLAYMSF(r5, 0x5303, &(0x7f0000000140)={0x1, 0x7, 0x7, 0x81, 0x3, 0x4}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r4}, 0x0, 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r4}, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x88f8}, @val={0x2, 0x80, 0x9, 0x2f4a, 0x43, 0xfe01}, @arp=@generic={0x30d, 0xfbfb, 0x6, 0x8, 0x3, @multicast, "eadb3493178d30ba", @multicast, "4d851696adf41830cad74e87be75c82b"}}, 0x3a) 180.951918ms ago: executing program 3 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x78, r1, 0x5, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x12, 0x91, "8b722244c46a07c0e897786a5c5f"}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x78}}, 0x0) 274.807µs ago: executing program 3 (id=504): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@noextend}, {@noxattr}, {@ignoreqv}]}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000006c0), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) write(r5, &(0x7f0000000040)="09000000010001", 0x7) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x2c9e, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}, 0xa0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r7], 0x16c}}, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@noextend}, {@noxattr}, {@ignoreqv}]}}) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) (async) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000006c0), 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0001, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$inet6(0xa, 0x3, 0x6) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) (async) write(r5, &(0x7f0000000040)="09000000010001", 0x7) (async) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000002c0)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x2c9e, {0x80}, 0x41ed, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}, 0xa0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r7], 0x16c}}, 0x0) (async) 0s ago: executing program 4 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ioperm(0x1, 0xb2be, 0x163f) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f00000001c0)={0x0, 0x300}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x3}, {0x3, 0x7}}}}, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async) write(r4, &(0x7f00000002c0)='-', 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/acpi/parameters/trace_state\x00', 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './sys'}, 0x9) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000003d, r9}) kernel console output (not intermixed with test programs): 0: renamed from eth0 [ 39.429682][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.434981][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.438615][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.438987][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.440413][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.444120][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.446737][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.506218][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.528009][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.531230][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.535015][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.535666][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.539089][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.542119][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.546303][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.555189][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.555271][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.556931][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.560714][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.577082][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.577127][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.597216][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.631999][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.675238][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.675319][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.677619][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.677671][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.696925][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.729474][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.739255][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.739301][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.745059][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.750705][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.772006][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.772101][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.778202][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.788291][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.788338][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.792775][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.792926][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.854783][ T5745] Bluetooth: hci1: command tx timeout [ 39.854944][ T5745] Bluetooth: hci0: command tx timeout [ 39.855022][ T5745] Bluetooth: hci3: command tx timeout [ 39.855097][ T5739] Bluetooth: hci2: command tx timeout [ 40.010320][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.041794][ T5730] veth0_vlan: entered promiscuous mode [ 40.046816][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.051666][ T5730] veth1_vlan: entered promiscuous mode [ 40.100095][ T5730] veth0_macvtap: entered promiscuous mode [ 40.105627][ T5730] veth1_macvtap: entered promiscuous mode [ 40.108468][ T5733] veth0_vlan: entered promiscuous mode [ 40.110934][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.119745][ T5733] veth1_vlan: entered promiscuous mode [ 40.130587][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.144404][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.169734][ T5735] veth0_vlan: entered promiscuous mode [ 40.172922][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.174071][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.174221][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.174255][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.174286][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193231][ T5733] veth0_macvtap: entered promiscuous mode [ 40.196802][ T5735] veth1_vlan: entered promiscuous mode [ 40.203055][ T5733] veth1_macvtap: entered promiscuous mode [ 40.240024][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.264554][ T5735] veth0_macvtap: entered promiscuous mode [ 40.271283][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.280386][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.280399][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.286901][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286939][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286966][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286992][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.296130][ T5735] veth1_macvtap: entered promiscuous mode [ 40.320399][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.320420][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.328624][ T5729] veth0_vlan: entered promiscuous mode [ 40.348209][ T5729] veth1_vlan: entered promiscuous mode [ 40.356433][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.362912][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.402056][ T5730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.407295][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.407352][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.415054][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.444783][ T5729] veth0_macvtap: entered promiscuous mode [ 40.467763][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.467787][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.475585][ T5729] veth1_macvtap: entered promiscuous mode [ 40.484473][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.484775][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.485048][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.512863][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.522975][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.522996][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.525424][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.594926][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.594946][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.614801][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615146][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615431][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615653][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.640911][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.640932][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.664249][ T5884] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 40.669954][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.669978][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.745586][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.756929][ T5888] bridge1: entered promiscuous mode [ 40.756976][ T5888] bridge1: entered allmulticast mode [ 40.793185][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 40.848579][ T5895] bridge2: entered promiscuous mode [ 40.848604][ T5895] bridge2: entered allmulticast mode [ 40.896553][ T5898] bridge2: entered promiscuous mode [ 40.896605][ T5898] bridge2: entered allmulticast mode [ 41.001555][ T5898] Zero length message leads to an empty skb [ 41.010577][ T5904] netlink: 'syz.3.10': attribute type 13 has an invalid length. [ 41.077545][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082361][ T5917] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082392][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082405][ T5917] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082413][ T5917] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082425][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082438][ T5917] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.082447][ T5917] netlink: 19340 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.146024][ T5918] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 41.228911][ T5919] block nbd0: Receive control failed (result -32) [ 41.229426][ T66] block nbd0: Receive control failed (result -32) [ 41.281585][ T5924] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.511469][ T5940] bridge1: entered promiscuous mode [ 41.511492][ T5940] bridge1: entered allmulticast mode [ 41.839934][ T5970] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.938090][ T5745] Bluetooth: hci3: command tx timeout [ 41.938113][ T5745] Bluetooth: hci2: command tx timeout [ 41.938126][ T5745] Bluetooth: hci1: command tx timeout [ 41.938126][ T5739] Bluetooth: hci0: command tx timeout [ 42.017113][ T5982] bridge2: entered promiscuous mode [ 42.017163][ T5982] bridge2: entered allmulticast mode [ 42.771266][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 42.771280][ T43] audit: type=1400 audit(1789448330.145:233): avc: denied { write } for pid=5989 comm="syz.0.39" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.771305][ T43] audit: type=1400 audit(1789448330.145:234): avc: denied { open } for pid=5989 comm="syz.0.39" path="/dev/input/event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.816306][ T43] audit: type=1400 audit(1789448330.195:235): avc: denied { read write } for pid=5991 comm="syz.3.40" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.816335][ T43] audit: type=1400 audit(1789448330.195:236): avc: denied { open } for pid=5991 comm="syz.3.40" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.819028][ T43] audit: type=1400 audit(1789448330.195:237): avc: denied { create } for pid=5991 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.819548][ T43] audit: type=1400 audit(1789448330.195:238): avc: denied { create } for pid=5991 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.826809][ T43] audit: type=1400 audit(1789448330.205:239): avc: denied { ioctl } for pid=5992 comm="syz.0.41" path="socket:[10946]" dev="sockfs" ino=10946 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.831772][ T43] audit: type=1400 audit(1789448330.205:240): avc: denied { setopt } for pid=5899 comm="syz.2.9" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.841112][ T5994] Process accounting resumed [ 42.928236][ T6000] netlink: 'syz.3.44': attribute type 5 has an invalid length. [ 42.935108][ T43] audit: type=1400 audit(1789448330.305:241): avc: denied { append } for pid=6001 comm="syz.0.45" name="media5" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.967287][ T43] audit: type=1400 audit(1789448330.345:242): avc: denied { name_bind } for pid=6005 comm="syz.2.47" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.997160][ T6007] ipvlan2: entered allmulticast mode [ 42.997178][ T6007] veth0_virt_wifi: entered allmulticast mode [ 42.998439][ T6007] batman_adv: batadv0: Adding interface: ipvlan2 [ 42.998447][ T6007] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.998461][ T6007] batman_adv: batadv0: Interface activated: ipvlan2 [ 43.001626][ T6008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 43.026079][ T6013] ipvlan3: entered allmulticast mode [ 43.027643][ T6013] batman_adv: batadv0: Adding interface: ipvlan3 [ 43.027651][ T6013] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.027666][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:2d) already exists on: ipvlan2 [ 43.027673][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.027679][ T6013] batman_adv: batadv0: Interface activated: ipvlan3 [ 43.297350][ T6046] bridge1: entered promiscuous mode [ 43.297383][ T6046] bridge1: entered allmulticast mode [ 43.323392][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 43.347527][ T6048] bridge1: entered promiscuous mode [ 43.347560][ T6048] bridge1: entered allmulticast mode [ 43.457838][ T5836] usb 7-1: device descriptor read/64, error -71 [ 43.590407][ T6056] binder: 6055:6056 ioctl 4018620d 0 returned -22 [ 43.693665][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 43.823413][ T5836] usb 7-1: device descriptor read/64, error -71 [ 43.852846][ T1041] cfg80211: failed to load regulatory.db [ 43.933757][ T5836] usb usb7-port1: attempt power cycle [ 44.013446][ T5739] Bluetooth: hci2: command tx timeout [ 44.013502][ T5742] Bluetooth: hci0: command tx timeout [ 44.026021][ T5742] Bluetooth: hci1: command tx timeout [ 44.026058][ T5742] Bluetooth: hci3: command tx timeout [ 44.153403][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.274092][ T5836] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 44.296285][ T5836] usb 7-1: device descriptor read/8, error -71 [ 44.314269][ T58] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 44.315721][ T58] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 44.315735][ T58] usb 6-1: config 1 has no interface number 0 [ 44.326770][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.326785][ T58] usb 6-1: Product: syz [ 44.326793][ T58] usb 6-1: Manufacturer: syz [ 44.326801][ T58] usb 6-1: SerialNumber: syz [ 44.347707][ T58] usb 6-1: cannot find UAC_HEADER [ 44.381289][ T58] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 44.432952][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 44.533365][ T5836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 44.535434][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.536191][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.540861][ T50] usb 6-1: USB disconnect, device number 2 [ 44.555940][ T5836] usb 7-1: device descriptor read/8, error -71 [ 44.559754][ T6071] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 44.664733][ T5836] usb usb7-port1: unable to enumerate USB device [ 44.694752][ T6077] bridge1: entered promiscuous mode [ 44.694788][ T6077] bridge1: entered allmulticast mode [ 44.742786][ T6078] bridge1: entered promiscuous mode [ 44.742835][ T6078] bridge1: entered allmulticast mode [ 44.908087][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908238][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908374][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908513][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908639][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908764][ T6085] 9pnet_virtio: no channels available for device syz [ 44.908945][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909081][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909213][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909343][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909471][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909613][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909740][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909866][ T6085] 9pnet_virtio: no channels available for device syz [ 44.909995][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910141][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910319][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910449][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910574][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910712][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910840][ T6085] 9pnet_virtio: no channels available for device syz [ 44.910967][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911123][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911267][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911412][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911568][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911740][ T6085] 9pnet_virtio: no channels available for device syz [ 44.911899][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912024][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912156][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912299][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912437][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912568][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912708][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912855][ T6085] 9pnet_virtio: no channels available for device syz [ 44.912997][ T6085] 9pnet_virtio: no channels available for device syz [ 44.913154][ T6085] 9pnet_virtio: no channels available for device syz [ 44.913501][ T6085] 9pnet_virtio: no channels available for device syz [ 44.913649][ T6085] 9pnet_virtio: no channels available for device syz [ 44.913790][ T6085] 9pnet_virtio: no channels available for device syz [ 44.913915][ T6085] 9pnet_virtio: no channels available for device syz [ 44.914040][ T6085] 9pnet_virtio: no channels available for device syz [ 44.914172][ T6085] 9pnet_virtio: no channels available for device syz [ 44.914469][ T6085] 9pnet_virtio: no channels available for device syz [ 44.914897][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915031][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915164][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915290][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915418][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915603][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915768][ T6085] 9pnet_virtio: no channels available for device syz [ 44.915895][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916025][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916157][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916283][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916413][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916540][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916692][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916849][ T6085] 9pnet_virtio: no channels available for device syz [ 44.916979][ T6085] 9pnet_virtio: no channels available for device syz [ 44.917109][ T6085] 9pnet_virtio: no channels available for device syz [ 44.917235][ T6085] 9pnet_virtio: no channels available for device syz [ 44.917370][ T6085] 9pnet_virtio: no channels available for device syz [ 44.917497][ T6085] 9pnet_virtio: no channels available for device syz [ 45.420430][ T6108] bridge1: entered promiscuous mode [ 45.420464][ T6108] bridge1: entered allmulticast mode [ 45.757866][ T6122] __nla_validate_parse: 11 callbacks suppressed [ 45.757880][ T6122] netlink: 128 bytes leftover after parsing attributes in process `syz.3.74'. [ 45.757974][ T6122] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 45.800700][ T6122] mmap: syz.3.74 (6122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.997956][ T6135] process 'syz.0.83' launched '/dev/fd/3' with NULL argv: empty string added [ 46.053735][ T6137] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 46.086611][ T37] Bluetooth: Error in BCSP hdr checksum [ 46.095094][ T5745] Bluetooth: hci1: command tx timeout [ 46.095123][ T5745] Bluetooth: hci0: command tx timeout [ 46.095144][ T5745] Bluetooth: hci2: command tx timeout [ 46.095187][ T5742] Bluetooth: hci3: command tx timeout [ 46.153675][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 46.170517][ T6145] bridge1: entered promiscuous mode [ 46.170533][ T6145] bridge1: entered allmulticast mode [ 46.212900][ T6146] bridge1: entered promiscuous mode [ 46.212954][ T6146] bridge1: entered allmulticast mode [ 46.428905][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 46.448472][ T6169] team0: Port device team_slave_0 removed [ 46.490070][ T6171] input: syz1 as /devices/virtual/input/input5 [ 46.578859][ T6174] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 46.586809][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.675765][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.95'. [ 46.744252][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 46.744786][ T5836] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 46.746712][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 46.750042][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.750061][ T5836] usb 5-1: Product: syz [ 46.750075][ T5836] usb 5-1: Manufacturer: syz [ 46.750086][ T5836] usb 5-1: SerialNumber: syz [ 46.753233][ T5836] usb 5-1: config 0 descriptor?? [ 46.776387][ T5836] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 46.776414][ T5836] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 47.016102][ T5836] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 47.274098][ T6185] bridge1: entered promiscuous mode [ 47.274114][ T6185] bridge1: entered allmulticast mode [ 47.328193][ T6186] bridge1: entered promiscuous mode [ 47.328242][ T6186] bridge1: entered allmulticast mode [ 47.420176][ T6159] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 47.420189][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.0.89'. [ 47.633751][ T5836] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 47.633784][ T5836] em28xx 5-1:0.0: board has no eeprom [ 47.693357][ T5836] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 47.693375][ T5836] em28xx 5-1:0.0: dvb set to bulk mode. [ 47.699611][ T1482] em28xx 5-1:0.0: Binding DVB extension [ 47.704096][ T5836] usb 5-1: USB disconnect, device number 2 [ 47.722383][ T5836] em28xx 5-1:0.0: Disconnecting em28xx [ 47.737074][ T1482] em28xx 5-1:0.0: Registering input extension [ 47.737614][ T5836] em28xx 5-1:0.0: Closing input extension [ 47.764866][ T5836] em28xx: Freeing device [ 47.853589][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 47.853629][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 48.098638][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 48.101345][ T6210] input: syz1 as /devices/virtual/input/input7 [ 48.152127][ T6216] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.226827][ T43] kauditd_printk_skb: 61 callbacks suppressed [ 48.226840][ T43] audit: type=1400 audit(1789448335.605:304): avc: denied { name_bind } for pid=6220 comm="syz.0.106" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.227797][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 48.228624][ T43] audit: type=1400 audit(1789448335.605:305): avc: denied { setattr } for pid=6220 comm="syz.0.106" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.268076][ T43] audit: type=1400 audit(1789448335.645:306): avc: denied { read } for pid=6222 comm="syz.0.107" name="dvr0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 48.268293][ T43] audit: type=1400 audit(1789448335.645:307): avc: denied { open } for pid=6222 comm="syz.0.107" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 48.271113][ T43] audit: type=1400 audit(1789448335.645:308): avc: denied { ioctl } for pid=6222 comm="syz.0.107" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=950 ioctlcmd=0x6f2d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 48.324419][ T43] audit: type=1400 audit(1789448335.705:309): avc: denied { create } for pid=6226 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.325259][ T43] audit: type=1400 audit(1789448335.705:310): avc: denied { connect } for pid=6226 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.330181][ T43] audit: type=1400 audit(1789448335.705:311): avc: denied { getopt } for pid=6226 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.332253][ T43] audit: type=1400 audit(1789448335.705:312): avc: denied { ioctl } for pid=6227 comm="syz.1.110" path="socket:[13361]" dev="sockfs" ino=13361 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.333459][ T5836] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.368194][ T43] audit: type=1400 audit(1789448335.745:313): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 48.391981][ T6238] FAULT_INJECTION: forcing a failure. [ 48.391981][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.392002][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 48.392014][ T6238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.392020][ T6238] Call Trace: [ 48.392024][ T6238] [ 48.392028][ T6238] dump_stack_lvl+0x100/0x190 [ 48.392058][ T6238] should_fail_ex.cold+0x5/0xa [ 48.392074][ T6238] _copy_from_iter+0x1f4/0x1690 [ 48.392091][ T6238] ? __asan_memset+0x23/0x50 [ 48.392103][ T6238] ? __pfx__copy_from_iter+0x10/0x10 [ 48.392114][ T6238] ? __pfx___alloc_skb+0x10/0x10 [ 48.392135][ T6238] netlink_sendmsg+0x808/0xda0 [ 48.392150][ T6238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.392163][ T6238] ? selinux_socket_sendmsg+0x198/0x2f0 [ 48.392177][ T6238] ____sys_sendmsg+0xa4d/0xbe0 [ 48.392192][ T6238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.392205][ T6238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.392223][ T6238] ? lock_acquire+0x1d1/0x380 [ 48.392235][ T6238] ? get_pid_task+0x2a/0x250 [ 48.392251][ T6238] ___sys_sendmsg+0x190/0x1e0 [ 48.392268][ T6238] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.392284][ T6238] ? get_pid_task+0x106/0x250 [ 48.392303][ T6238] ? find_held_lock+0x2b/0x80 [ 48.392326][ T6238] __sys_sendmsg+0x160/0x210 [ 48.392339][ T6238] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.392359][ T6238] do_syscall_64+0x123/0x790 [ 48.392378][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.392389][ T6238] RIP: 0033:0x7fc3c2b9e159 [ 48.392398][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.392408][ T6238] RSP: 002b:00007fc3c39e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.392419][ T6238] RAX: ffffffffffffffda RBX: 00007fc3c2e25fa0 RCX: 00007fc3c2b9e159 [ 48.392426][ T6238] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 48.392432][ T6238] RBP: 00007fc3c39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.392438][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.392444][ T6238] R13: 00007fc3c2e26038 R14: 00007fc3c2e25fa0 R15: 00007ffd183a1cd8 [ 48.392457][ T6238] [ 48.395281][ T6238] input: syz1 as /devices/virtual/input/input8 [ 48.463397][ T5836] usb 8-1: device descriptor read/64, error -71 [ 48.582307][ T6246] evm: overlay not supported [ 48.631399][ T6250] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.705020][ T5836] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 48.712691][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 48.798732][ T6262] FAULT_INJECTION: forcing a failure. [ 48.798732][ T6262] name failslab, interval 1, probability 0, space 0, times 1 [ 48.798763][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 48.798784][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.798796][ T6262] Call Trace: [ 48.798803][ T6262] [ 48.798810][ T6262] dump_stack_lvl+0x100/0x190 [ 48.798857][ T6262] should_fail_ex.cold+0x5/0xa [ 48.798879][ T6262] ? __netlink_lookup+0x652/0x900 [ 48.798928][ T6262] should_failslab+0xc2/0x120 [ 48.798960][ T6262] kmem_cache_alloc_noprof+0x92/0x6a0 [ 48.798984][ T6262] ? skb_clone+0x190/0x400 [ 48.799011][ T6262] skb_clone+0x190/0x400 [ 48.799035][ T6262] netlink_deliver_tap+0xaed/0xcc0 [ 48.799061][ T6262] netlink_unicast+0x62b/0x850 [ 48.799086][ T6262] ? __pfx_netlink_unicast+0x10/0x10 [ 48.799115][ T6262] netlink_sendmsg+0x8b0/0xda0 [ 48.799141][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.799166][ T6262] ? selinux_socket_sendmsg+0x198/0x2f0 [ 48.799192][ T6262] ____sys_sendmsg+0xa4d/0xbe0 [ 48.799219][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.799243][ T6262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 48.799277][ T6262] ? lock_acquire+0x1d1/0x380 [ 48.799297][ T6262] ? get_pid_task+0x2a/0x250 [ 48.799325][ T6262] ___sys_sendmsg+0x190/0x1e0 [ 48.799362][ T6262] ? __pfx____sys_sendmsg+0x10/0x10 [ 48.799392][ T6262] ? get_pid_task+0x106/0x250 [ 48.799427][ T6262] ? find_held_lock+0x2b/0x80 [ 48.799470][ T6262] __sys_sendmsg+0x160/0x210 [ 48.799495][ T6262] ? __pfx___sys_sendmsg+0x10/0x10 [ 48.799533][ T6262] do_syscall_64+0x123/0x790 [ 48.799567][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.799587][ T6262] RIP: 0033:0x7fc3c2b9e159 [ 48.799603][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.799620][ T6262] RSP: 002b:00007fc3c39e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.799639][ T6262] RAX: ffffffffffffffda RBX: 00007fc3c2e25fa0 RCX: 00007fc3c2b9e159 [ 48.799651][ T6262] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 48.799662][ T6262] RBP: 00007fc3c39e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.799673][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.799684][ T6262] R13: 00007fc3c2e26038 R14: 00007fc3c2e25fa0 R15: 00007ffd183a1cd8 [ 48.799711][ T6262] [ 48.799776][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 48.821962][ T6262] team0: Port device team_slave_0 removed [ 48.833591][ T5836] usb 8-1: device descriptor read/64, error -71 [ 48.849295][ T6262] input: syz1 as /devices/virtual/input/input9 [ 48.944648][ T5836] usb usb8-port1: attempt power cycle [ 49.183462][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 49.226129][ T6278] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET) [ 49.284085][ T5836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 49.305196][ T5836] usb 8-1: device descriptor read/8, error -71 [ 49.313555][ T9] usb 7-1: device descriptor read/64, error -71 [ 49.351976][ T6290] ======================================================= [ 49.351976][ T6290] WARNING: The mand mount option has been deprecated and [ 49.351976][ T6290] and is ignored by this kernel. Remove the mand [ 49.351976][ T6290] option from the mount to silence this warning. [ 49.351976][ T6290] ======================================================= [ 49.511603][ T6308] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.543389][ T5836] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 49.567465][ T5836] usb 8-1: device descriptor read/8, error -71 [ 49.573372][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 49.587588][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'. [ 49.674126][ T5836] usb usb8-port1: unable to enumerate USB device [ 49.713449][ T9] usb 7-1: device descriptor read/64, error -71 [ 49.781029][ T6336] FAULT_INJECTION: forcing a failure. [ 49.781029][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 49.781057][ T6336] CPU: 2 UID: 0 PID: 6336 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 49.781077][ T6336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.781087][ T6336] Call Trace: [ 49.781093][ T6336] [ 49.781100][ T6336] dump_stack_lvl+0x100/0x190 [ 49.781146][ T6336] should_fail_ex.cold+0x5/0xa [ 49.781167][ T6336] ? __netlink_lookup+0x652/0x900 [ 49.781194][ T6336] should_failslab+0xc2/0x120 [ 49.781222][ T6336] kmem_cache_alloc_noprof+0x92/0x6a0 [ 49.781243][ T6336] ? skb_clone+0x190/0x400 [ 49.781269][ T6336] skb_clone+0x190/0x400 [ 49.781292][ T6336] netlink_deliver_tap+0xaed/0xcc0 [ 49.781316][ T6336] netlink_unicast+0x62b/0x850 [ 49.781340][ T6336] ? __pfx_netlink_unicast+0x10/0x10 [ 49.781372][ T6336] netlink_sendmsg+0x8b0/0xda0 [ 49.781396][ T6336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.781419][ T6336] ? selinux_socket_sendmsg+0x198/0x2f0 [ 49.781443][ T6336] ____sys_sendmsg+0xa4d/0xbe0 [ 49.781468][ T6336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.781490][ T6336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.781522][ T6336] ? lock_acquire+0x1d1/0x380 [ 49.781541][ T6336] ? get_pid_task+0x2a/0x250 [ 49.781567][ T6336] ___sys_sendmsg+0x190/0x1e0 [ 49.781597][ T6336] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.781624][ T6336] ? get_pid_task+0x106/0x250 [ 49.781658][ T6336] ? find_held_lock+0x2b/0x80 [ 49.781700][ T6336] __sys_sendmsg+0x160/0x210 [ 49.781723][ T6336] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.781759][ T6336] do_syscall_64+0x123/0x790 [ 49.781792][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.781810][ T6336] RIP: 0033:0x7f210ab9e159 [ 49.781826][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.781842][ T6336] RSP: 002b:00007f210b9db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.781861][ T6336] RAX: ffffffffffffffda RBX: 00007f210ae25fa0 RCX: 00007f210ab9e159 [ 49.781872][ T6336] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 49.781882][ T6336] RBP: 00007f210b9db090 R08: 0000000000000000 R09: 0000000000000000 [ 49.781892][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.781902][ T6336] R13: 00007f210ae26038 R14: 00007f210ae25fa0 R15: 00007ffca03ba678 [ 49.781927][ T6336] [ 49.791086][ T6336] input: syz1 as /devices/virtual/input/input10 [ 49.835597][ T9] usb usb7-port1: attempt power cycle [ 49.893163][ T6349] bridge2: entered promiscuous mode [ 49.893180][ T6349] bridge2: entered allmulticast mode [ 49.947423][ T6355] bridge2: entered promiscuous mode [ 49.947473][ T6355] bridge2: entered allmulticast mode [ 50.173463][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 50.193949][ T9] usb 7-1: device descriptor read/8, error -71 [ 50.194097][ T6378] netfs: Duplicate cookie detected [ 50.194108][ T6378] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 50.194123][ T6378] netfs: O-cookie V=00000001 [9p,syz,] [ 50.194133][ T6378] netfs: O-key=[8] 'c17d740400000000' [ 50.194144][ T6378] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 50.194156][ T6378] netfs: N-cookie V=00000001 [9p,syz,] [ 50.194164][ T6378] netfs: N-key=[8] 'c17d740400000000' [ 50.373061][ T6387] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 50.434308][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 50.466074][ T9] usb 7-1: device descriptor read/8, error -71 [ 50.495238][ T6399] FAULT_INJECTION: forcing a failure. [ 50.495238][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 50.495259][ T6399] CPU: 2 UID: 0 PID: 6399 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) [ 50.495272][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.495278][ T6399] Call Trace: [ 50.495282][ T6399] [ 50.495287][ T6399] dump_stack_lvl+0x100/0x190 [ 50.495307][ T6399] should_fail_ex.cold+0x5/0xa [ 50.495322][ T6399] should_failslab+0xc2/0x120 [ 50.495337][ T6399] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.495349][ T6399] ? __alloc_skb+0x5b7/0x710 [ 50.495362][ T6399] ? __alloc_skb+0x140/0x710 [ 50.495376][ T6399] __alloc_skb+0x140/0x710 [ 50.495400][ T6399] ? __alloc_skb+0x5b7/0x710 [ 50.495411][ T6399] ? __pfx___alloc_skb+0x10/0x10 [ 50.495427][ T6399] netlink_ack+0x117/0xb80 [ 50.495443][ T6399] netlink_rcv_skb+0x333/0x420 [ 50.495455][ T6399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.495471][ T6399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.495487][ T6399] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.495501][ T6399] netlink_unicast+0x585/0x850 [ 50.495514][ T6399] ? __pfx_netlink_unicast+0x10/0x10 [ 50.495530][ T6399] netlink_sendmsg+0x8b0/0xda0 [ 50.495544][ T6399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.495557][ T6399] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.495572][ T6399] ____sys_sendmsg+0xa4d/0xbe0 [ 50.495587][ T6399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.495600][ T6399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.495619][ T6399] ? lock_acquire+0x1d1/0x380 [ 50.495631][ T6399] ? get_pid_task+0x2a/0x250 [ 50.495671][ T6399] ___sys_sendmsg+0x190/0x1e0 [ 50.495688][ T6399] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.495705][ T6399] ? get_pid_task+0x106/0x250 [ 50.495724][ T6399] ? find_held_lock+0x2b/0x80 [ 50.495748][ T6399] __sys_sendmsg+0x160/0x210 [ 50.495762][ T6399] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.495782][ T6399] do_syscall_64+0x123/0x790 [ 50.495799][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.495810][ T6399] RIP: 0033:0x7f210ab9e159 [ 50.495820][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.495830][ T6399] RSP: 002b:00007f210b9ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.495841][ T6399] RAX: ffffffffffffffda RBX: 00007f210ae26090 RCX: 00007f210ab9e159 [ 50.495848][ T6399] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 50.495854][ T6399] RBP: 00007f210b9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 50.495860][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.495866][ T6399] R13: 00007f210ae26128 R14: 00007f210ae26090 R15: 00007ffca03ba678 [ 50.495880][ T6399] [ 50.497981][ T6399] input: syz1 as /devices/virtual/input/input11 [ 50.585329][ T9] usb usb7-port1: unable to enumerate USB device [ 50.601429][ T6401] xt_hashlimit: invalid interval [ 50.813039][ T6401] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 50.813619][ T6401] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 51.204123][ T6406] __nla_validate_parse: 2 callbacks suppressed [ 51.204135][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 51.390503][ T6409] overlayfs: missing 'lowerdir' [ 51.456639][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 51.470900][ T6414] team0: Port device team_slave_0 removed [ 51.513458][ T6415] input: syz1 as /devices/virtual/input/input12 [ 51.836801][ T6424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 51.836817][ T6424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.839788][ T6424] vhci_hcd vhci_hcd.0: Device attached [ 51.846636][ T6431] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 51.846651][ T6431] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.846720][ T6431] vhci_hcd vhci_hcd.0: Device attached [ 51.855707][ T6432] vhci_hcd: connection closed [ 51.856767][ T6425] vhci_hcd: connection closed [ 51.857991][ T5837] vhci_hcd vhci_hcd.0: stop threads [ 51.858213][ T5837] vhci_hcd vhci_hcd.0: release socket [ 51.858231][ T5837] vhci_hcd vhci_hcd.0: disconnect device [ 51.858689][ T5837] vhci_hcd vhci_hcd.0: stop threads [ 51.858701][ T5837] vhci_hcd vhci_hcd.0: release socket [ 51.858711][ T5837] vhci_hcd vhci_hcd.0: disconnect device [ 51.888407][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 51.898917][ T6435] input: syz1 as /devices/virtual/input/input13 [ 52.056348][ T6443] random: crng reseeded on system resumption [ 52.266408][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 52.273550][ T6457] input: syz1 as /devices/virtual/input/input14 [ 52.407977][ T6462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.155'. [ 52.617162][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 52.643434][ T58] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 52.658212][ T6472] team0: Port device team_slave_0 removed [ 52.670248][ T6473] input: syz1 as /devices/virtual/input/input15 [ 52.794237][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.795045][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.795061][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.795071][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.795090][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.801156][ T58] usb 7-1: config 0 descriptor?? [ 52.872141][ T6479] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 53.129735][ T6491] No fuse device found [ 53.141606][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 53.213711][ T58] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 53.228421][ T58] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 53.240634][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 53.240692][ T6501] FAULT_INJECTION: forcing a failure. [ 53.240692][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.240707][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 53.240719][ T6501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.240726][ T6501] Call Trace: [ 53.240729][ T6501] [ 53.240734][ T6501] dump_stack_lvl+0x100/0x190 [ 53.240754][ T6501] should_fail_ex.cold+0x5/0xa [ 53.240794][ T6501] _copy_to_user+0x32/0xd0 [ 53.240809][ T6501] simple_read_from_buffer+0xcb/0x170 [ 53.240824][ T6501] proc_fail_nth_read+0x1af/0x230 [ 53.240839][ T6501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.240853][ T6501] ? rw_verify_area+0xce/0x6d0 [ 53.240869][ T6501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.240882][ T6501] vfs_read+0x1e4/0xb40 [ 53.240893][ T6501] ? lock_acquire+0x1d1/0x380 [ 53.240904][ T6501] ? __fget_files+0x34/0x3d0 [ 53.240918][ T6501] ? __pfx_vfs_read+0x10/0x10 [ 53.240927][ T6501] ? find_held_lock+0x2b/0x80 [ 53.240943][ T6501] ? __fget_files+0x215/0x3d0 [ 53.240958][ T6501] ? __fget_files+0x21f/0x3d0 [ 53.240975][ T6501] ksys_read+0x12a/0x250 [ 53.240986][ T6501] ? __pfx_ksys_read+0x10/0x10 [ 53.241000][ T6501] do_syscall_64+0x123/0x790 [ 53.241016][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.241028][ T6501] RIP: 0033:0x7f493a75e98e [ 53.241037][ T6501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.241047][ T6501] RSP: 002b:00007f493b708fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.241058][ T6501] RAX: ffffffffffffffda RBX: 00007f493b7096c0 RCX: 00007f493a75e98e [ 53.241065][ T6501] RDX: 000000000000000f RSI: 00007f493b7090a0 RDI: 0000000000000004 [ 53.241071][ T6501] RBP: 00007f493b709090 R08: 0000000000000000 R09: 0000000000000000 [ 53.241077][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.241083][ T6501] R13: 00007f493aa26128 R14: 00007f493aa26090 R15: 00007ffef1e60518 [ 53.241097][ T6501] [ 53.371582][ T6508] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 53.393414][ T6512] misc userio: Can't change port extra on an already running userio instance [ 53.406468][ T6508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.407357][ T6508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=6508 comm=syz.0.173 [ 53.409313][ T6515] cifs: Unknown parameter ' [ 53.409313][ T6515] ' [ 53.422266][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 53.422277][ T43] audit: type=1400 audit(1789448340.795:388): avc: denied { connect } for pid=6514 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.506025][ T6528] mmap: syz.3.176 (6528): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 53.581973][ T5814] usb 7-1: USB disconnect, device number 10 [ 53.603686][ T6531] bridge2: entered promiscuous mode [ 53.603702][ T6531] bridge2: entered allmulticast mode [ 53.651463][ T6535] bridge2: entered promiscuous mode [ 53.651486][ T6535] bridge2: entered allmulticast mode [ 53.775092][ T43] audit: type=1400 audit(1789448341.155:389): avc: denied { map_create } for pid=6546 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.775297][ T43] audit: type=1400 audit(1789448341.155:390): avc: denied { map_read map_write } for pid=6546 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.777181][ T43] audit: type=1400 audit(1789448341.155:391): avc: denied { prog_load } for pid=6546 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.786220][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 53.855220][ T43] audit: type=1400 audit(1789448341.235:392): avc: denied { setopt } for pid=6552 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.862645][ T43] audit: type=1400 audit(1789448341.235:393): avc: denied { bind } for pid=6552 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.870452][ T43] audit: type=1400 audit(1789448341.245:394): avc: denied { read } for pid=6557 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.870503][ T43] audit: type=1400 audit(1789448341.245:395): avc: denied { read open } for pid=6557 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.870539][ T43] audit: type=1400 audit(1789448341.245:396): avc: denied { getattr } for pid=6557 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.877326][ T43] audit: type=1400 audit(1789448341.255:397): avc: denied { write } for pid=6556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.040342][ T6570] raw_sendmsg: syz.3.187 forgot to set AF_INET. Fix it! [ 54.216419][ T6574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.238094][ T6578] futex_wake_op: syz.1.190 tries to shift op by 144; fix this program [ 54.238204][ T6578] futex_wake_op: syz.1.190 tries to shift op by 144; fix this program [ 54.324129][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.189'. [ 54.481394][ T6607] cgroup: release_agent respecified [ 54.482714][ T6607] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 54.773463][ T1041] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.925626][ T1041] usb 6-1: Using ep0 maxpacket: 8 [ 54.926826][ T1041] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.932568][ T1041] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 54.932610][ T1041] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.932628][ T1041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.932646][ T1041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.932664][ T1041] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.932698][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.146693][ T1041] usb 6-1: usb_control_msg returned -32 [ 55.146719][ T1041] usbtmc 6-1:16.0: can't read capabilities [ 55.260344][ T6665] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.343343][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 55.505464][ T35] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0310, bcdDevice=3f.c3 [ 55.506930][ T35] usb 8-1: config 0 has an invalid interface number: 31 but max is 1 [ 55.506953][ T35] usb 8-1: config 0 has an invalid interface number: 94 but max is 1 [ 55.506969][ T35] usb 8-1: config 0 has an invalid interface number: 210 but max is 1 [ 55.506986][ T35] usb 8-1: config 0 has an invalid interface number: 35 but max is 1 [ 55.507002][ T35] usb 8-1: config 0 has an invalid interface number: 6 but max is 1 [ 55.507017][ T35] usb 8-1: config 0 has 5 interfaces, different from the descriptor's value: 2 [ 55.507034][ T35] usb 8-1: config 0 has no interface number 0 [ 55.507047][ T35] usb 8-1: config 0 has no interface number 1 [ 55.507059][ T35] usb 8-1: config 0 has no interface number 2 [ 55.507072][ T35] usb 8-1: config 0 has no interface number 3 [ 55.507085][ T35] usb 8-1: config 0 has no interface number 4 [ 55.507144][ T35] usb 8-1: config 0 interface 31 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 55.507164][ T35] usb 8-1: config 0 interface 31 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 55.507186][ T35] usb 8-1: config 0 interface 31 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 55.507205][ T35] usb 8-1: config 0 interface 31 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 55.507222][ T35] usb 8-1: config 0 interface 31 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 55.507240][ T35] usb 8-1: config 0 interface 31 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 55.508862][ T35] usb 8-1: config 0 interface 31 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 55.508885][ T35] usb 8-1: config 0 interface 31 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 55.508902][ T35] usb 8-1: config 0 interface 31 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 55.508937][ T35] usb 8-1: config 0 interface 94 altsetting 27 has a duplicate endpoint with address 0xD, skipping [ 55.508954][ T35] usb 8-1: config 0 interface 94 altsetting 27 has a duplicate endpoint with address 0x7, skipping [ 55.508971][ T35] usb 8-1: config 0 interface 94 altsetting 27 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 55.509005][ T35] usb 8-1: config 0 interface 210 altsetting 8 bulk endpoint 0xC has invalid maxpacket 1024 [ 55.509026][ T35] usb 8-1: config 0 interface 210 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 55.509042][ T35] usb 8-1: config 0 interface 210 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 55.509057][ T35] usb 8-1: config 0 interface 210 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 55.509078][ T35] usb 8-1: too many endpoints for config 0 interface 35 altsetting 140: 244, using maximum allowed: 30 [ 55.509110][ T35] usb 8-1: config 0 interface 35 altsetting 140 has an invalid descriptor for endpoint zero, skipping [ 55.509128][ T35] usb 8-1: config 0 interface 35 altsetting 140 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 55.509149][ T35] usb 8-1: config 0 interface 35 altsetting 140 has a duplicate endpoint with address 0xE, skipping [ 55.509168][ T35] usb 8-1: config 0 interface 35 altsetting 140 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 55.509186][ T35] usb 8-1: config 0 interface 35 altsetting 140 has a duplicate endpoint with address 0x6, skipping [ 55.509202][ T35] usb 8-1: config 0 interface 35 altsetting 140 has a duplicate endpoint with address 0xD, skipping [ 55.509217][ T35] usb 8-1: config 0 interface 35 altsetting 140 has a duplicate endpoint with address 0xE, skipping [ 55.509234][ T35] usb 8-1: config 0 interface 35 altsetting 140 has a duplicate endpoint with address 0xF, skipping [ 55.509251][ T35] usb 8-1: config 0 interface 35 altsetting 140 has 9 endpoint descriptors, different from the interface descriptor's value: 244 [ 55.509270][ T35] usb 8-1: too many endpoints for config 0 interface 6 altsetting 206: 230, using maximum allowed: 30 [ 55.509295][ T35] usb 8-1: config 0 interface 6 altsetting 206 has a duplicate endpoint with address 0x1, skipping [ 55.509311][ T35] usb 8-1: config 0 interface 6 altsetting 206 has a duplicate endpoint with address 0xF, skipping [ 55.509327][ T35] usb 8-1: config 0 interface 6 altsetting 206 has a duplicate endpoint with address 0xA, skipping [ 55.509346][ T35] usb 8-1: config 0 interface 6 altsetting 206 has 4 endpoint descriptors, different from the interface descriptor's value: 230 [ 55.509366][ T35] usb 8-1: config 0 interface 31 has no altsetting 0 [ 55.509380][ T35] usb 8-1: config 0 interface 94 has no altsetting 0 [ 55.509395][ T35] usb 8-1: config 0 interface 210 has no altsetting 0 [ 55.509529][ T35] usb 8-1: config 0 interface 35 has no altsetting 0 [ 55.509543][ T35] usb 8-1: config 0 interface 6 has no altsetting 0 [ 55.512362][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.512386][ T35] usb 8-1: Product: 㭨邤릲Ñ⠻Ⰶ綈ዤ晠닯桓⌮㴼쒯䆄쨡鱡梻㧞៌矀⻗ꓪà¡èœŒç¬¦ç ·äŸ¹áº¿ï°†ä‹¡è¨²é©©ì½‹á·¡â¥ä…½àºŠì ¤ê âž£î´¯Ëœê´§ç’•ï“¬ï¾æ¢‹á«…å¯Å˜å—”৲è½Ç«êµ [ 55.512407][ T35] usb 8-1: Manufacturer: Ъ [ 55.512418][ T35] usb 8-1: SerialNumber: ä Š [ 55.521778][ T35] usb 8-1: config 0 descriptor?? [ 55.527669][ T6653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 55.529089][ T6653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 55.751053][ T35] option 8-1:0.31: GSM modem (1-port) converter detected [ 55.763603][ T35] option 8-1:0.210: GSM modem (1-port) converter detected [ 55.795260][ T35] usb 8-1: USB disconnect, device number 6 [ 55.824435][ T35] option 8-1:0.31: device disconnected [ 55.835157][ T35] option 8-1:0.210: device disconnected [ 56.372393][ T6716] binder: 6715:6716 ioctl 80086601 2000000002c0 returned -22 [ 56.451874][ T6723] bridge2: entered promiscuous mode [ 56.451919][ T6723] bridge2: entered allmulticast mode [ 56.963506][ T58] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 57.114202][ T58] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 57.114240][ T58] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 57.115338][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.115379][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.115400][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.116370][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.116405][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.116426][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.117321][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.117357][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.117379][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.118665][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.118700][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.118721][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.119714][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.119748][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.119769][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.120887][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.120921][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.120943][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.122065][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.122099][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.122120][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.122967][ T58] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.123000][ T58] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.123022][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.125462][ T58] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 57.125482][ T58] usb 7-1: Product: syz [ 57.125494][ T58] usb 7-1: Manufacturer: syz [ 57.125504][ T58] usb 7-1: SerialNumber: syz [ 57.128053][ T58] usb 7-1: config 0 descriptor?? [ 57.137685][ T58] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 57.319183][ T6764] bridge2: entered promiscuous mode [ 57.319231][ T6764] bridge2: entered allmulticast mode [ 57.429217][ T35] usb 7-1: USB disconnect, device number 11 [ 57.444278][ T35] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 57.532393][ T6769] ip_tables: iptables: counters copy to user failed while replacing table [ 57.544357][ T1041] usb 6-1: USB disconnect, device number 3 [ 57.565899][ T6772] ªªªªªª: renamed from vlan0 (while UP) [ 57.716809][ T6778] __nla_validate_parse: 1 callbacks suppressed [ 57.716831][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717017][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717166][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717308][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717479][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717632][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717783][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.717934][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.718085][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 57.718264][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 58.352021][ T6811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6811 comm=syz.1.243 [ 58.352383][ T6811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6811 comm=syz.1.243 [ 58.360021][ T6816] bridge2: entered promiscuous mode [ 58.360066][ T6816] bridge2: entered allmulticast mode [ 58.382601][ T6811] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 58.388066][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.389381][ T6811] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 58.396012][ T6811] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 58.401154][ T6811] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 58.638911][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 58.638927][ T43] audit: type=1400 audit(1789448346.015:449): avc: denied { read } for pid=6838 comm="syz.3.249" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.638973][ T43] audit: type=1400 audit(1789448346.015:450): avc: denied { open } for pid=6838 comm="syz.3.249" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.639657][ T43] audit: type=1400 audit(1789448346.015:451): avc: denied { ioctl } for pid=6838 comm="syz.3.249" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.646313][ T43] audit: type=1400 audit(1789448346.025:452): avc: denied { create } for pid=6838 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 58.646774][ T43] audit: type=1400 audit(1789448346.025:453): avc: denied { write } for pid=6838 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 58.647255][ T43] audit: type=1400 audit(1789448346.025:454): avc: denied { ioctl } for pid=6838 comm="syz.3.249" path="socket:[13226]" dev="sockfs" ino=13226 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 58.708143][ T6846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.894962][ T1482] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.988166][ T6866] qrtr: Invalid version 47 [ 59.064481][ T1482] usb 5-1: Using ep0 maxpacket: 8 [ 59.065105][ T1482] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.067725][ T1482] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 59.067795][ T1482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 59.067818][ T1482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 59.067835][ T1482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 59.067856][ T1482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 59.067876][ T1482] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.067908][ T1482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.175108][ T43] audit: type=1400 audit(1789448346.545:455): avc: denied { mount } for pid=6870 comm="syz.2.260" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 59.177596][ T43] audit: type=1400 audit(1789448346.555:456): avc: denied { mounton } for pid=6870 comm="syz.2.260" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 59.177837][ T6871] overlayfs: failed to resolve './bus': -2 [ 59.219902][ T6876] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 59.219915][ T6876] netlink: 'syz.2.261': attribute type 4 has an invalid length. [ 59.278112][ T1482] usb 5-1: usb_control_msg returned -32 [ 59.278152][ T1482] usbtmc 5-1:16.0: can't read capabilities [ 59.318057][ T43] audit: type=1400 audit(1789448346.695:457): avc: denied { write } for pid=6879 comm="syz.2.262" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.321747][ T6883] binder: 6879:6883 ioctl c01864c6 200000000180 returned -22 [ 59.322770][ T43] audit: type=1400 audit(1789448346.695:458): avc: denied { bind } for pid=6879 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.418817][ T6888] bridge2: entered promiscuous mode [ 59.418850][ T6888] bridge2: entered allmulticast mode [ 59.498045][ T6893] bridge_slave_1: left allmulticast mode [ 59.498066][ T6893] bridge_slave_1: left promiscuous mode [ 59.502214][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.514490][ T6893] bridge_slave_0: left allmulticast mode [ 59.514505][ T6893] bridge_slave_0: left promiscuous mode [ 59.514605][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.629405][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 59.629442][ T6898] usbtmc 5-1:16.0: Unable to send data, error -71 [ 59.630461][ T6898] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 59.660048][ T5522] usb 5-1: USB disconnect, device number 3 [ 59.690634][ T6904] binder: 6903:6904 ioctl c0306201 200000000040 returned -22 [ 59.831751][ T6908] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.837742][ T6910] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.876340][ T6913] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 59.885989][ T6913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.886928][ T6913] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 60.347030][ T6924] bridge2: entered promiscuous mode [ 60.347054][ T6924] bridge2: entered allmulticast mode [ 60.533372][ T1041] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.695247][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 60.695773][ T1041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.696704][ T1041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 60.696726][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.696768][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.696786][ T1041] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.696817][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.712480][ T6940] sg_write: data in/out 131037/11 bytes for SCSI command 0x3a-- guessing data in; [ 60.712480][ T6940] program syz.2.279 not setting count and/or reply_len properly [ 60.871070][ T6950] netfs: Duplicate cookie detected [ 60.871982][ T6950] netfs: O-cookie c=00000005 [fl=50c8 na=1 nA=0 s=-] [ 60.871999][ T6950] netfs: O-cookie V=00000002 [9p,syz,] [ 60.872014][ T6950] netfs: O-key=[8] 'c17d740400000000' [ 60.872027][ T6950] netfs: N-cookie c=00000006 [fl=0 na=0 nA=0 s=-] [ 60.872040][ T6950] netfs: N-cookie V=00000002 [9p,syz,] [ 60.872049][ T6950] netfs: N-key=[8] 'c17d740400000000' [ 60.918784][ T1041] usb 5-1: GET_CAPABILITIES returned 0 [ 60.918826][ T1041] usbtmc 5-1:16.0: can't read capabilities [ 60.922786][ T6957] bridge0: entered promiscuous mode [ 60.922833][ T6957] bridge0: entered allmulticast mode [ 60.924705][ T6954] 9pnet_virtio: no channels available for device syz [ 61.123392][ T1041] usb 5-1: USB disconnect, device number 4 [ 61.543730][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.547303][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.548028][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.551244][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.551833][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.981304][ T7000] bridge1: entered promiscuous mode [ 61.981337][ T7000] bridge1: entered allmulticast mode [ 62.037166][ T7004] bridge1: entered promiscuous mode [ 62.037200][ T7004] bridge1: entered allmulticast mode [ 62.046527][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.046605][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.046700][ T6974] bridge_slave_0: entered allmulticast mode [ 62.048114][ T6974] bridge_slave_0: entered promiscuous mode [ 62.052013][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.052053][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.052207][ T6974] bridge_slave_1: entered allmulticast mode [ 62.053133][ T6974] bridge_slave_1: entered promiscuous mode [ 62.077419][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.079492][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.099643][ T6974] team0: Port device team_slave_0 added [ 62.102194][ T6974] team0: Port device team_slave_1 added [ 62.127430][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.127446][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.127466][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.129212][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.129226][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.129246][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.171415][ T6974] hsr_slave_0: entered promiscuous mode [ 62.171846][ T6974] hsr_slave_1: entered promiscuous mode [ 62.172148][ T6974] debugfs: 'hsr0' already exists in 'hsr' [ 62.172159][ T6974] Cannot create hsr debugfs directory [ 62.308300][ T6974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.310447][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.310890][ T6974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.314228][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.314689][ T6974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.331463][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.333023][ T6974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.335564][ T6974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.403232][ T7023] overlayfs: workdir and upperdir must reside under the same mount [ 62.410800][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.426613][ T6974] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.434707][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.434792][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.444291][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.444365][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.572605][ T7036] bridge1: entered promiscuous mode [ 62.572659][ T7036] bridge1: entered allmulticast mode [ 62.616187][ T7039] bridge1: entered promiscuous mode [ 62.616217][ T7039] bridge1: entered allmulticast mode [ 62.778387][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.941433][ T6974] veth0_vlan: entered promiscuous mode [ 62.945243][ T7058] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 62.945263][ T7058] __nla_validate_parse: 10 callbacks suppressed [ 62.945274][ T7058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 62.959820][ T7058] : entered promiscuous mode [ 62.963827][ T6974] veth1_vlan: entered promiscuous mode [ 62.965508][ T7058] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 62.965527][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 62.990636][ T6974] veth0_macvtap: entered promiscuous mode [ 62.994315][ T6974] veth1_macvtap: entered promiscuous mode [ 63.010320][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.017291][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.033454][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033482][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033502][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033520][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.084359][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.084374][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.124317][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.124340][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.131211][ T7062] FAULT_INJECTION: forcing a failure. [ 63.131211][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 63.131234][ T7062] CPU: 0 UID: 0 PID: 7062 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT(full) [ 63.131250][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.131257][ T7062] Call Trace: [ 63.131262][ T7062] [ 63.131268][ T7062] dump_stack_lvl+0x100/0x190 [ 63.131406][ T7062] should_fail_ex.cold+0x5/0xa [ 63.131427][ T7062] should_failslab+0xc2/0x120 [ 63.131464][ T7062] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.131480][ T7062] ? security_file_alloc+0x34/0x2c0 [ 63.131501][ T7062] security_file_alloc+0x34/0x2c0 [ 63.131519][ T7062] init_file+0x95/0x480 [ 63.131536][ T7062] alloc_empty_file+0x79/0x1c0 [ 63.131551][ T7062] alloc_file_pseudo+0x183/0x290 [ 63.131569][ T7062] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 63.131589][ T7062] ? alloc_fd+0x471/0x7a0 [ 63.131606][ T7062] sock_alloc_file+0x50/0x210 [ 63.131628][ T7062] __sys_socket+0x1c0/0x260 [ 63.131643][ T7062] ? __pfx___sys_socket+0x10/0x10 [ 63.131706][ T7062] __x64_sys_socket+0x72/0xb0 [ 63.131729][ T7062] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.131758][ T7062] do_syscall_64+0x123/0x790 [ 63.131778][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.131792][ T7062] RIP: 0033:0x7f493a79e159 [ 63.131805][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.131817][ T7062] RSP: 002b:00007f493b729fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.131857][ T7062] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f493a79e159 [ 63.131870][ T7062] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 63.131879][ T7062] RBP: 00007f493a83503b R08: 0000000000000000 R09: 0000000000000000 [ 63.131887][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.131898][ T7062] R13: 00007f493aa26038 R14: 00007f493aa25fa0 R15: 00007ffef1e60518 [ 63.131915][ T7062] [ 63.328044][ T7073] bridge1: entered promiscuous mode [ 63.328067][ T7073] bridge1: entered allmulticast mode [ 63.352569][ T7071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.354126][ T7071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.368837][ T7071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.379176][ T7071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.379298][ T7071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.382905][ T7076] bridge1: entered promiscuous mode [ 63.382928][ T7076] bridge1: entered allmulticast mode [ 63.392120][ T7071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.404662][ T7071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.404776][ T7071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.412541][ T7071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.436255][ T7071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.436647][ T7071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.440604][ T7071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.548291][ T7091] qnx6: unable to read the first superblock [ 63.548402][ T7091] qnx6: unable to read the first superblock [ 63.548407][ T7091] qnx6: unable to read the first superblock [ 63.556304][ T7092] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.593569][ T5742] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 63.617651][ T7093] kernel read not supported for file /policy (pid: 7093 comm: syz.4.316) [ 63.650931][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 63.822680][ T7116] jffs2: notice: (7116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.890208][ T7122] FAULT_INJECTION: forcing a failure. [ 63.890208][ T7122] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.890239][ T7122] CPU: 2 UID: 0 PID: 7122 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 63.890260][ T7122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.890270][ T7122] Call Trace: [ 63.890276][ T7122] [ 63.890283][ T7122] dump_stack_lvl+0x100/0x190 [ 63.890329][ T7122] should_fail_ex.cold+0x5/0xa [ 63.890351][ T7122] ? prepare_alloc_pages+0x16d/0x5b0 [ 63.890379][ T7122] should_fail_alloc_page+0xeb/0x140 [ 63.890404][ T7122] prepare_alloc_pages+0x1f0/0x5b0 [ 63.890426][ T7122] ? is_bpf_text_address+0x94/0x1a0 [ 63.890453][ T7122] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 63.890484][ T7122] ? stack_trace_save+0x8e/0xc0 [ 63.890501][ T7122] ? __pfx_stack_trace_save+0x10/0x10 [ 63.890517][ T7122] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 63.890546][ T7122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 63.890565][ T7122] ? is_bpf_text_address+0x94/0x1a0 [ 63.890589][ T7122] ? kasan_save_stack+0x3f/0x50 [ 63.890608][ T7122] ? kasan_save_stack+0x30/0x50 [ 63.890627][ T7122] ? kasan_save_track+0x14/0x30 [ 63.890644][ T7122] ? __kasan_slab_alloc+0x89/0x90 [ 63.890665][ T7122] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 63.890684][ T7122] ? alloc_vmap_area+0x1814/0x2bb0 [ 63.890703][ T7122] ? __get_vm_area_node+0x1ed/0x350 [ 63.890722][ T7122] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 63.890745][ T7122] ? __vmalloc_node_noprof+0xad/0xf0 [ 63.890768][ T7122] ? __vmalloc_noprof+0xa3/0x120 [ 63.890787][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.890805][ T7122] ? bpf_prog_alloc+0x3b/0x200 [ 63.890824][ T7122] ? bpf_prog_load+0x49e/0x2a80 [ 63.890845][ T7122] ? __sys_bpf+0x1f46/0x4a30 [ 63.890860][ T7122] ? __x64_sys_bpf+0xce/0x140 [ 63.890876][ T7122] ? do_syscall_64+0x123/0x790 [ 63.890907][ T7122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.890936][ T7122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.890959][ T7122] ? policy_nodemask+0xed/0x4f0 [ 63.890993][ T7122] alloc_pages_mpol+0x201/0x550 [ 63.891021][ T7122] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 63.891052][ T7122] alloc_pages_noprof+0x1a/0x160 [ 63.891080][ T7122] get_free_pages_noprof+0x10/0xb0 [ 63.891101][ T7122] __kasan_populate_vmalloc+0xa0/0x210 [ 63.891126][ T7122] alloc_vmap_area+0x95d/0x2bb0 [ 63.891153][ T7122] ? kasan_save_track+0x14/0x30 [ 63.891175][ T7122] ? __kasan_kmalloc+0xaa/0xb0 [ 63.891195][ T7122] ? __pfx_alloc_vmap_area+0x10/0x10 [ 63.891219][ T7122] ? __get_vm_area_node+0x124/0x350 [ 63.891245][ T7122] __get_vm_area_node+0x1ed/0x350 [ 63.891273][ T7122] __vmalloc_node_range_noprof+0x268/0x1420 [ 63.891298][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.891324][ T7122] ? do_raw_spin_lock+0x128/0x260 [ 63.891353][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.891377][ T7122] ? lock_acquire+0x1d1/0x380 [ 63.891397][ T7122] ? find_held_lock+0x2b/0x80 [ 63.891423][ T7122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 63.891447][ T7122] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 63.891477][ T7122] ? avc_has_perm_noaudit+0x145/0x3b0 [ 63.891503][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.891526][ T7122] __vmalloc_node_noprof+0xad/0xf0 [ 63.891573][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.891602][ T7122] __vmalloc_noprof+0xa3/0x120 [ 63.891628][ T7122] ? __pfx___vmalloc_noprof+0x10/0x10 [ 63.891655][ T7122] ? rcu_is_watching+0x13/0xc0 [ 63.891681][ T7122] ? cap_capable+0x107/0x430 [ 63.891711][ T7122] bpf_prog_alloc_no_stats+0x59/0x690 [ 63.891732][ T7122] ? security_capable+0x80/0x260 [ 63.891761][ T7122] bpf_prog_alloc+0x3b/0x200 [ 63.891783][ T7122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.891805][ T7122] bpf_prog_load+0x49e/0x2a80 [ 63.891835][ T7122] ? __pfx_bpf_prog_load+0x10/0x10 [ 63.891881][ T7122] __sys_bpf+0x1f46/0x4a30 [ 63.891906][ T7122] ? __pfx___sys_bpf+0x10/0x10 [ 63.891923][ T7122] ? find_held_lock+0x2b/0x80 [ 63.891948][ T7122] ? futex_wake+0x4ea/0x5e0 [ 63.892020][ T7122] ? __x64_sys_futex+0x34f/0x4d0 [ 63.892046][ T7122] ? __x64_sys_futex+0x358/0x4d0 [ 63.892075][ T7122] ? xfd_validate_state+0x129/0x190 [ 63.892098][ T7122] ? __x64_sys_bpf+0xce/0x140 [ 63.892115][ T7122] __x64_sys_bpf+0xce/0x140 [ 63.892134][ T7122] ? do_syscall_64+0xae/0x790 [ 63.892161][ T7122] do_syscall_64+0x123/0x790 [ 63.892189][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.892208][ T7122] RIP: 0033:0x7fd394b9e159 [ 63.892226][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.892243][ T7122] RSP: 002b:00007fd3959d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.892262][ T7122] RAX: ffffffffffffffda RBX: 00007fd394e26090 RCX: 00007fd394b9e159 [ 63.892274][ T7122] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 63.892286][ T7122] RBP: 00007fd394c3503b R08: 0000000000000000 R09: 0000000000000000 [ 63.892297][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.892308][ T7122] R13: 00007fd394e26128 R14: 00007fd394e26090 R15: 00007ffd5ef69108 [ 63.892333][ T7122] [ 63.892593][ T7122] syz.3.324: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 63.892716][ T7122] CPU: 2 UID: 0 PID: 7122 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 63.892772][ T7122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.892784][ T7122] Call Trace: [ 63.892791][ T7122] [ 63.892798][ T7122] dump_stack_lvl+0x100/0x190 [ 63.892827][ T7122] warn_alloc.cold+0x9e/0xb2 [ 63.892847][ T7122] ? __pfx_warn_alloc+0x10/0x10 [ 63.892874][ T7122] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.892899][ T7122] ? __get_vm_area_node+0x2f0/0x350 [ 63.892928][ T7122] ? __get_vm_area_node+0x22b/0x350 [ 63.892955][ T7122] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 63.892993][ T7122] ? do_raw_spin_lock+0x128/0x260 [ 63.893021][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.893045][ T7122] ? lock_acquire+0x1d1/0x380 [ 63.893066][ T7122] ? find_held_lock+0x2b/0x80 [ 63.893091][ T7122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 63.893116][ T7122] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 63.893146][ T7122] ? avc_has_perm_noaudit+0x145/0x3b0 [ 63.893174][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.893197][ T7122] __vmalloc_node_noprof+0xad/0xf0 [ 63.893221][ T7122] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 63.893247][ T7122] __vmalloc_noprof+0xa3/0x120 [ 63.893289][ T7122] ? __pfx___vmalloc_noprof+0x10/0x10 [ 63.893317][ T7122] ? rcu_is_watching+0x13/0xc0 [ 63.893342][ T7122] ? cap_capable+0x107/0x430 [ 63.893372][ T7122] bpf_prog_alloc_no_stats+0x59/0x690 [ 63.893394][ T7122] ? security_capable+0x80/0x260 [ 63.893424][ T7122] bpf_prog_alloc+0x3b/0x200 [ 63.893446][ T7122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.893469][ T7122] bpf_prog_load+0x49e/0x2a80 [ 63.893499][ T7122] ? __pfx_bpf_prog_load+0x10/0x10 [ 63.893542][ T7122] __sys_bpf+0x1f46/0x4a30 [ 63.893566][ T7122] ? __pfx___sys_bpf+0x10/0x10 [ 63.893583][ T7122] ? find_held_lock+0x2b/0x80 [ 63.893608][ T7122] ? futex_wake+0x4ea/0x5e0 [ 63.893671][ T7122] ? __x64_sys_futex+0x34f/0x4d0 [ 63.893694][ T7122] ? __x64_sys_futex+0x358/0x4d0 [ 63.893723][ T7122] ? xfd_validate_state+0x129/0x190 [ 63.893747][ T7122] ? __x64_sys_bpf+0xce/0x140 [ 63.893763][ T7122] __x64_sys_bpf+0xce/0x140 [ 63.893782][ T7122] ? do_syscall_64+0xae/0x790 [ 63.893808][ T7122] do_syscall_64+0x123/0x790 [ 63.893836][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.893856][ T7122] RIP: 0033:0x7fd394b9e159 [ 63.893871][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.893888][ T7122] RSP: 002b:00007fd3959d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.893907][ T7122] RAX: ffffffffffffffda RBX: 00007fd394e26090 RCX: 00007fd394b9e159 [ 63.893919][ T7122] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 63.893931][ T7122] RBP: 00007fd394c3503b R08: 0000000000000000 R09: 0000000000000000 [ 63.893942][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.893953][ T7122] R13: 00007fd394e26128 R14: 00007fd394e26090 R15: 00007ffd5ef69108 [ 63.893985][ T7122] [ 63.894719][ T7122] Mem-Info: [ 63.894731][ T7122] active_anon:9283 inactive_anon:0 isolated_anon:0 [ 63.894731][ T7122] active_file:511 inactive_file:58445 isolated_file:0 [ 63.894731][ T7122] unevictable:1000 dirty:424 writeback:0 [ 63.894731][ T7122] slab_reclaimable:9326 slab_unreclaimable:71566 [ 63.894731][ T7122] mapped:25078 shmem:1562 pagetables:3596 [ 63.894731][ T7122] sec_pagetables:301 bounce:0 [ 63.894731][ T7122] kernel_misc_reclaimable:0 [ 63.894731][ T7122] free:448892 free_pcp:13561 free_cma:0 [ 63.894779][ T7122] Node 0 active_anon:37128kB inactive_anon:0kB active_file:2044kB inactive_file:207756kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:91160kB dirty:732kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:8440kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 63.894832][ T7122] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:26024kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:9152kB dirty:964kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:5944kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 63.894882][ T7122] Node 0 DMA free:10852kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 63.894932][ T7122] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 63.894964][ T7122] Node 0 DMA32 free:181312kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37128kB inactive_anon:0kB active_file:2044kB inactive_file:207756kB unevictable:2000kB writepending:732kB zspages:0kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:53392kB local_pcp:4812kB free_cma:0kB [ 63.895066][ T7122] lowmem_reserve[]: 0 0 0 0 0 [ 63.895095][ T7122] Node 1 Normal free:1603404kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:26024kB unevictable:2000kB writepending:964kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:852kB local_pcp:192kB free_cma:0kB [ 63.895145][ T7122] lowmem_reserve[]: 0 0 0 0 0 [ 63.895176][ T7122] Node 0 DMA: 15*4kB (U) 13*8kB (U) 16*16kB (U) 22*32kB (UE) 18*64kB (UE) 15*128kB (UE) 12*256kB (UE) 5*512kB (UE) 1*1024kB (E) 0*2048kB 0*4096kB = 10852kB [ 63.895311][ T7122] Node 0 DMA32: 4*4kB (UME) 64*8kB (ME) 13*16kB (UME) 3*32kB (ME) 170*64kB (UME) 151*128kB (UME) 119*256kB (UE) 92*512kB (UE) 71*1024kB (UM) 0*2048kB 0*4096kB = 181312kB [ 63.895438][ T7122] Node 1 Normal: 109*4kB (UM) 228*8kB (UM) 255*16kB (UME) 260*32kB (UME) 224*64kB (UME) 205*128kB (UME) 180*256kB (UME) 156*512kB (UM) 147*1024kB (UME) 11*2048kB (UME) 305*4096kB (UM) = 1603524kB [ 63.895574][ T7122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.895591][ T7122] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.895612][ T7122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 63.895637][ T7122] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 63.895664][ T7122] 60514 total pagecache pages [ 63.895677][ T7122] 0 pages in swap cache [ 63.895689][ T7122] Free swap = 124996kB [ 63.895702][ T7122] Total swap = 124996kB [ 63.895716][ T7122] 1048443 pages RAM [ 63.895728][ T7122] 0 pages HighMem/MovableOnly [ 63.895740][ T7122] 285812 pages reserved [ 63.895753][ T7122] 0 pages cma reserved [ 63.989433][ T1161] Bluetooth: hci4: Frame reassembly failed (-84) [ 63.990590][ T7125] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 64.026884][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 64.547091][ T7131] binder: 7130:7131 ioctl 4018620d 0 returned -22 [ 64.547893][ T7131] netlink: 'syz.4.327': attribute type 26 has an invalid length. [ 64.555455][ T7131] Illegal XDP return value 4294967274 on prog (id 19) dev syzkaller1, expect packet loss! [ 64.777096][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.779564][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 64.779576][ T43] audit: type=1400 audit(1789448352.155:495): avc: denied { write } for pid=7135 comm="syz.4.330" name="usb_gadget" dev="configfs" ino=6553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.780797][ T43] audit: type=1400 audit(1789448352.155:496): avc: denied { add_name } for pid=7135 comm="syz.4.330" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.782241][ T43] audit: type=1400 audit(1789448352.155:497): avc: denied { create } for pid=7135 comm="syz.4.330" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 64.816537][ T43] audit: type=1400 audit(1789448352.195:498): avc: denied { write } for pid=7135 comm="syz.4.330" name="configs" dev="configfs" ino=15767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.818282][ T43] audit: type=1400 audit(1789448352.195:499): avc: denied { write } for pid=7135 comm="syz.4.330" name="os_desc" dev="configfs" ino=15769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.818506][ T43] audit: type=1400 audit(1789448352.195:500): avc: denied { create } for pid=7135 comm="syz.4.330" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 64.818910][ T43] audit: type=1400 audit(1789448352.195:501): avc: denied { write } for pid=7135 comm="syz.4.330" name="os_desc" dev="configfs" ino=15769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.882117][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 64.965265][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 64.971351][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 64.971762][ T43] audit: type=1400 audit(1789448352.345:502): avc: denied { read } for pid=7148 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.373473][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.405687][ T43] audit: type=1400 audit(1789448352.785:503): avc: denied { read } for pid=7171 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.463412][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.464235][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.472303][ T43] audit: type=1400 audit(1789448352.845:504): avc: denied { read } for pid=7173 comm="syz.3.340" name="mouse0" dev="devtmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 65.578146][ T7178] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.650467][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 65.816488][ T7184] FAULT_INJECTION: forcing a failure. [ 65.816488][ T7184] name fail_futex, interval 1, probability 0, space 0, times 1 [ 65.816520][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 65.816538][ T7184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.816548][ T7184] Call Trace: [ 65.816555][ T7184] [ 65.816563][ T7184] dump_stack_lvl+0x100/0x190 [ 65.816594][ T7184] should_fail_ex.cold+0x5/0xa [ 65.816622][ T7184] get_futex_key+0x1d0/0x14f0 [ 65.816651][ T7184] ? __pfx_get_futex_key+0x10/0x10 [ 65.816675][ T7184] ? __lock_acquire+0x5c0/0x1f40 [ 65.816701][ T7184] futex_wake+0xf4/0x5e0 [ 65.816763][ T7184] ? lock_acquire+0x1d1/0x380 [ 65.816787][ T7184] ? __pfx_futex_wake+0x10/0x10 [ 65.816817][ T7184] ? __fget_files+0x215/0x3d0 [ 65.816852][ T7184] do_futex+0x2b2/0x440 [ 65.816881][ T7184] ? __pfx_do_futex+0x10/0x10 [ 65.816906][ T7184] ? __sys_bind+0x1c7/0x260 [ 65.816937][ T7184] __x64_sys_futex+0x34f/0x4d0 [ 65.816966][ T7184] ? __pfx___x64_sys_futex+0x10/0x10 [ 65.817004][ T7184] do_syscall_64+0x123/0x790 [ 65.817030][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.817048][ T7184] RIP: 0033:0x7fd394b9e159 [ 65.817064][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.817078][ T7184] RSP: 002b:00007fd3959d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 65.817097][ T7184] RAX: ffffffffffffffda RBX: 00007fd394e26098 RCX: 00007fd394b9e159 [ 65.817109][ T7184] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd394e2609c [ 65.817119][ T7184] RBP: 00007fd394e26090 R08: 0000000000000001 R09: 0000000000000000 [ 65.817131][ T7184] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 65.817143][ T7184] R13: 00007fd394e26128 R14: 00007ffd5ef69020 R15: 00007ffd5ef69108 [ 65.817164][ T7184] [ 66.014303][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.117910][ T7203] batman_adv: batadv0: Adding interface: syzkaller0 [ 66.117922][ T7203] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.117938][ T7203] batman_adv: batadv0: Interface activated: syzkaller0 [ 66.671321][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 66.671345][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 66.946516][ T7227] bridge2: entered promiscuous mode [ 66.946539][ T7227] bridge2: entered allmulticast mode [ 67.040124][ T7202] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 67.061156][ T7202] batman_adv: batadv0: Removing interface: syzkaller0 [ 67.255612][ T7252] jffs2: notice: (7252) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.276570][ T7253] FAULT_INJECTION: forcing a failure. [ 67.276570][ T7253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 67.276606][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 67.276630][ T7253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.276664][ T7253] Call Trace: [ 67.276673][ T7253] [ 67.276681][ T7253] dump_stack_lvl+0x100/0x190 [ 67.276750][ T7253] should_fail_ex.cold+0x5/0xa [ 67.276782][ T7253] get_futex_key+0x1d0/0x14f0 [ 67.276820][ T7253] ? __pfx_get_futex_key+0x10/0x10 [ 67.276850][ T7253] ? __lock_acquire+0x5c0/0x1f40 [ 67.276880][ T7253] futex_wake+0xf4/0x5e0 [ 67.276916][ T7253] ? lock_acquire+0x1d1/0x380 [ 67.276937][ T7253] ? __pfx_futex_wake+0x10/0x10 [ 67.276970][ T7253] ? __fget_files+0x215/0x3d0 [ 67.277007][ T7253] do_futex+0x2b2/0x440 [ 67.277036][ T7253] ? __pfx_do_futex+0x10/0x10 [ 67.277064][ T7253] ? __sys_bind+0x1c7/0x260 [ 67.277090][ T7253] __x64_sys_futex+0x34f/0x4d0 [ 67.277125][ T7253] ? __pfx___x64_sys_futex+0x10/0x10 [ 67.277166][ T7253] do_syscall_64+0x123/0x790 [ 67.277201][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.277224][ T7253] RIP: 0033:0x7f210ab9e159 [ 67.277242][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.277262][ T7253] RSP: 002b:00007f210b9ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 67.277284][ T7253] RAX: ffffffffffffffda RBX: 00007f210ae26098 RCX: 00007f210ab9e159 [ 67.277298][ T7253] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f210ae2609c [ 67.277311][ T7253] RBP: 00007f210ae26090 R08: 0000000000000001 R09: 0000000000000000 [ 67.277324][ T7253] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 67.277337][ T7253] R13: 00007f210ae26128 R14: 00007ffca03ba590 R15: 00007ffca03ba678 [ 67.277363][ T7253] [ 67.413022][ T7267] bridge1: entered promiscuous mode [ 67.413072][ T7267] bridge1: entered allmulticast mode [ 67.463459][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.469393][ T7275] bridge1: entered promiscuous mode [ 67.469446][ T7275] bridge1: entered allmulticast mode [ 67.533549][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.533586][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.654706][ T7290] SET target dimension over the limit! [ 67.830777][ T7313] bridge1: entered promiscuous mode [ 67.831392][ T7313] bridge1: entered allmulticast mode [ 67.880267][ T7315] bridge1: entered promiscuous mode [ 67.880317][ T7315] bridge1: entered allmulticast mode [ 67.917316][ T7317] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.283420][ T5522] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.454068][ T5522] usb 5-1: Using ep0 maxpacket: 8 [ 68.457838][ T5522] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.458777][ T5522] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 68.458816][ T5522] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.458836][ T5522] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.458858][ T5522] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.458879][ T5522] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.458913][ T5522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.665837][ T5522] usb 5-1: usb_control_msg returned -32 [ 68.665862][ T5522] usbtmc 5-1:16.0: can't read capabilities [ 68.672549][ T7344] netlink: NAT attribute has 5 unknown bytes [ 68.672576][ T7344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.681283][ T7344] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 68.738324][ T2419] usb 5-1: USB disconnect, device number 5 [ 68.793430][ T5837] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.819149][ T7349] gadgetfs: bound to dummy_udc driver [ 69.551148][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.623453][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.623479][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.997435][ T7354] bridge1: entered promiscuous mode [ 69.997485][ T7354] bridge1: entered allmulticast mode [ 70.008883][ T7357] bridge1: entered promiscuous mode [ 70.008898][ T7357] bridge1: entered allmulticast mode [ 70.033522][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 70.033540][ T43] audit: type=1400 audit(1789448357.405:536): avc: denied { unmount } for pid=6974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.076113][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 70.105043][ T7367] FAULT_INJECTION: forcing a failure. [ 70.105043][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 70.105072][ T7367] CPU: 1 UID: 0 PID: 7367 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 70.105089][ T7367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.105098][ T7367] Call Trace: [ 70.105104][ T7367] [ 70.105110][ T7367] dump_stack_lvl+0x100/0x190 [ 70.105138][ T7367] should_fail_ex.cold+0x5/0xa [ 70.105159][ T7367] should_failslab+0xc2/0x120 [ 70.105181][ T7367] __kmalloc_node_noprof+0xff/0x880 [ 70.105199][ T7367] ? __get_vm_area_node+0x1ff/0x350 [ 70.105215][ T7367] ? __get_vm_area_node+0x22b/0x350 [ 70.105227][ T7367] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 70.105245][ T7367] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 70.105264][ T7367] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 70.105280][ T7367] ? find_held_lock+0x2b/0x80 [ 70.105296][ T7367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.105313][ T7367] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 70.105331][ T7367] ? avc_has_perm_noaudit+0x145/0x3b0 [ 70.105348][ T7367] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 70.105362][ T7367] __vmalloc_node_noprof+0xad/0xf0 [ 70.105376][ T7367] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 70.105392][ T7367] __vmalloc_noprof+0xa3/0x120 [ 70.105406][ T7367] ? __pfx___vmalloc_noprof+0x10/0x10 [ 70.105440][ T7367] ? rcu_is_watching+0x13/0xc0 [ 70.105458][ T7367] ? cap_capable+0x107/0x430 [ 70.105477][ T7367] bpf_prog_alloc_no_stats+0x59/0x690 [ 70.105492][ T7367] ? security_capable+0x80/0x260 [ 70.105510][ T7367] bpf_prog_alloc+0x3b/0x200 [ 70.105524][ T7367] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.105539][ T7367] bpf_prog_load+0x49e/0x2a80 [ 70.105558][ T7367] ? __pfx_bpf_prog_load+0x10/0x10 [ 70.105584][ T7367] __sys_bpf+0x1f46/0x4a30 [ 70.105594][ T7367] ? plist_check_list+0x1b8/0x280 [ 70.105608][ T7367] ? plist_check_list+0x190/0x280 [ 70.105620][ T7367] ? __pfx___sys_bpf+0x10/0x10 [ 70.105629][ T7367] ? find_held_lock+0x2b/0x80 [ 70.105644][ T7367] ? futex_wake+0x4ea/0x5e0 [ 70.105662][ T7367] ? futex_private_hash_put.part.0+0xdc/0x180 [ 70.105676][ T7367] ? futex_private_hash_put+0x24/0x30 [ 70.105693][ T7367] ? __pfx_futex_wake+0x10/0x10 [ 70.105724][ T7367] ? __x64_sys_futex+0x34f/0x4d0 [ 70.105739][ T7367] ? __x64_sys_futex+0x358/0x4d0 [ 70.105756][ T7367] ? xfd_validate_state+0x129/0x190 [ 70.105771][ T7367] ? __x64_sys_bpf+0xce/0x140 [ 70.105783][ T7367] __x64_sys_bpf+0xce/0x140 [ 70.105794][ T7367] ? do_syscall_64+0xae/0x790 [ 70.105815][ T7367] do_syscall_64+0x123/0x790 [ 70.105832][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.105845][ T7367] RIP: 0033:0x7f210ab9e159 [ 70.105856][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.105868][ T7367] RSP: 002b:00007f210b9ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.105880][ T7367] RAX: ffffffffffffffda RBX: 00007f210ae26090 RCX: 00007f210ab9e159 [ 70.105887][ T7367] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 70.105894][ T7367] RBP: 00007f210ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 70.105900][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.105907][ T7367] R13: 00007f210ae26128 R14: 00007f210ae26090 R15: 00007ffca03ba678 [ 70.105921][ T7367] [ 70.211018][ T7381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7381 comm=syz.0.399 [ 70.220006][ T43] audit: type=1400 audit(1789448357.595:537): avc: denied { search } for pid=7380 comm="syz.0.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.220174][ T43] audit: type=1400 audit(1789448357.595:538): avc: denied { write } for pid=7380 comm="syz.0.399" name="current_tracer" dev="tracefs" ino=6706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 70.239161][ T7383] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 70.278640][ T7386] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 70.290819][ T7386] erspan1: entered allmulticast mode [ 70.302669][ T7388] __nla_validate_parse: 126 callbacks suppressed [ 70.302686][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 70.411847][ T7396] bridge2: entered promiscuous mode [ 70.411877][ T7396] bridge2: entered allmulticast mode [ 70.462853][ T7402] bridge2: entered promiscuous mode [ 70.462868][ T7402] bridge2: entered allmulticast mode [ 70.536818][ T7406] team0: entered allmulticast mode [ 70.536837][ T7406] team_slave_0: entered allmulticast mode [ 70.536851][ T7406] team_slave_1: entered allmulticast mode [ 70.675860][ T43] audit: type=1400 audit(1789448358.055:539): avc: denied { write } for pid=9 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19199 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.857435][ T43] audit: type=1400 audit(1789448358.235:540): avc: denied { audit_write } for pid=7413 comm="syz.0.411" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.858555][ T7414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7414 comm=syz.0.411 [ 70.860257][ T7414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7414 comm=syz.0.411 [ 70.861082][ T7414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7414 comm=syz.0.411 [ 70.861311][ T7414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7414 comm=syz.0.411 [ 70.861671][ T7414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7414 comm=syz.0.411 [ 70.945428][ T7419] CUSE: info not properly terminated [ 70.977646][ T7424] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.070586][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 71.155788][ T7435] bridge1: entered promiscuous mode [ 71.155809][ T7435] bridge1: entered allmulticast mode [ 71.210996][ T7435] bridge1: entered promiscuous mode [ 71.211048][ T7435] bridge1: entered allmulticast mode [ 71.348851][ T7448] trusted_key: syz.0.423 sent an empty control message without MSG_MORE. [ 71.349026][ T43] audit: type=1400 audit(1789448358.725:541): avc: denied { read } for pid=7447 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.358858][ T43] audit: type=1400 audit(1789448358.735:542): avc: denied { call } for pid=7447 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.359183][ T7448] binder_alloc: 7447: pid 7447 spamming oneway? 1 buffers allocated for a total size of 4096 [ 71.408932][ T43] audit: type=1326 audit(1789448358.785:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.424" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69e7f9e159 code=0x0 [ 71.461602][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.461663][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498785][ T7454] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.504260][ T7452] loop2: detected capacity change from 0 to 7 [ 71.507792][ T7452] Dev loop2: unable to read RDB block 7 [ 71.507811][ T7452] loop2: AHDI p1 p2 p3 [ 71.507822][ T7452] loop2: partition table partially beyond EOD, truncated [ 71.509807][ T7452] loop2: p1 start 1601398130 is beyond EOD, truncated [ 71.509828][ T7452] loop2: p2 start 1702059890 is beyond EOD, truncated [ 71.539769][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 71.566686][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'. [ 71.589846][ T7464] overlayfs: overlapping lowerdir path [ 71.657052][ T7471] input: syz0 as /devices/virtual/input/input22 [ 71.658048][ T43] audit: type=1400 audit(1789448359.035:544): avc: denied { read } for pid=5128 comm="acpid" name="event4" dev="devtmpfs" ino=2931 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.658163][ T43] audit: type=1400 audit(1789448359.035:545): avc: denied { open } for pid=5128 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2931 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.794030][ T7476] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 71.795697][ T7471] netlink: 'syz.0.431': attribute type 16 has an invalid length. [ 71.795711][ T7471] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.431'. [ 71.804273][ T5814] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 72.253383][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.835674][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 73.696413][ T7543] 9p: Bad value for 'debug' [ 73.730389][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.448'. [ 73.745990][ T7547] FAULT_INJECTION: forcing a failure. [ 73.745990][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.746019][ T7547] CPU: 3 UID: 0 PID: 7547 Comm: syz.0.449 Not tainted syzkaller #0 PREEMPT(full) [ 73.746040][ T7547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.746052][ T7547] Call Trace: [ 73.746058][ T7547] [ 73.746066][ T7547] dump_stack_lvl+0x100/0x190 [ 73.746093][ T7547] should_fail_ex.cold+0x5/0xa [ 73.746109][ T7547] _copy_from_iter+0x1f4/0x1690 [ 73.746124][ T7547] ? __asan_memset+0x23/0x50 [ 73.746136][ T7547] ? __pfx__copy_from_iter+0x10/0x10 [ 73.746147][ T7547] ? __pfx___alloc_skb+0x10/0x10 [ 73.746166][ T7547] netlink_sendmsg+0x808/0xda0 [ 73.746180][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.746194][ T7547] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.746208][ T7547] ____sys_sendmsg+0xa4d/0xbe0 [ 73.746224][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.746237][ T7547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.746256][ T7547] ? lock_acquire+0x1d1/0x380 [ 73.746268][ T7547] ? get_pid_task+0x2a/0x250 [ 73.746284][ T7547] ___sys_sendmsg+0x190/0x1e0 [ 73.746302][ T7547] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.746319][ T7547] ? get_pid_task+0x106/0x250 [ 73.746338][ T7547] ? find_held_lock+0x2b/0x80 [ 73.746364][ T7547] __sys_sendmsg+0x160/0x210 [ 73.746377][ T7547] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.746398][ T7547] do_syscall_64+0x123/0x790 [ 73.746414][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.746426][ T7547] RIP: 0033:0x7f493a79e159 [ 73.746435][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.746446][ T7547] RSP: 002b:00007f493b72a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.746458][ T7547] RAX: ffffffffffffffda RBX: 00007f493aa25fa0 RCX: 00007f493a79e159 [ 73.746465][ T7547] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 73.746472][ T7547] RBP: 00007f493b72a090 R08: 0000000000000000 R09: 0000000000000000 [ 73.746478][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.746484][ T7547] R13: 00007f493aa26038 R14: 00007f493aa25fa0 R15: 00007ffef1e60518 [ 73.746497][ T7547] [ 73.797257][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 73.797278][ T7551] netlink: 92 bytes leftover after parsing attributes in process `syz.4.450'. [ 73.805866][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 74.068631][ T7575] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 74.367745][ T7594] FAULT_INJECTION: forcing a failure. [ 74.367745][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 74.367766][ T7594] CPU: 3 UID: 0 PID: 7594 Comm: syz.0.465 Not tainted syzkaller #0 PREEMPT(full) [ 74.367778][ T7594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.367785][ T7594] Call Trace: [ 74.367789][ T7594] [ 74.367794][ T7594] dump_stack_lvl+0x100/0x190 [ 74.367815][ T7594] should_fail_ex.cold+0x5/0xa [ 74.367829][ T7594] ? __netlink_lookup+0x652/0x900 [ 74.367842][ T7594] should_failslab+0xc2/0x120 [ 74.367860][ T7594] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.367873][ T7594] ? skb_clone+0x190/0x400 [ 74.367888][ T7594] skb_clone+0x190/0x400 [ 74.367901][ T7594] netlink_deliver_tap+0xaed/0xcc0 [ 74.367915][ T7594] netlink_unicast+0x62b/0x850 [ 74.367929][ T7594] ? __pfx_netlink_unicast+0x10/0x10 [ 74.367945][ T7594] netlink_sendmsg+0x8b0/0xda0 [ 74.367959][ T7594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.367973][ T7594] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.367988][ T7594] ____sys_sendmsg+0xa4d/0xbe0 [ 74.368003][ T7594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.368016][ T7594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.368035][ T7594] ? lock_acquire+0x1d1/0x380 [ 74.368047][ T7594] ? get_pid_task+0x2a/0x250 [ 74.368063][ T7594] ___sys_sendmsg+0x190/0x1e0 [ 74.368081][ T7594] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.368098][ T7594] ? get_pid_task+0x106/0x250 [ 74.368117][ T7594] ? find_held_lock+0x2b/0x80 [ 74.368140][ T7594] __sys_sendmsg+0x160/0x210 [ 74.368154][ T7594] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.368174][ T7594] do_syscall_64+0x123/0x790 [ 74.368191][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.368203][ T7594] RIP: 0033:0x7f493a79e159 [ 74.368212][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.368225][ T7594] RSP: 002b:00007f493b72a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.368236][ T7594] RAX: ffffffffffffffda RBX: 00007f493aa25fa0 RCX: 00007f493a79e159 [ 74.368243][ T7594] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 74.368250][ T7594] RBP: 00007f493b72a090 R08: 0000000000000000 R09: 0000000000000000 [ 74.368256][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.368262][ T7594] R13: 00007f493aa26038 R14: 00007f493aa25fa0 R15: 00007ffef1e60518 [ 74.368276][ T7594] [ 74.435161][ T7601] SELinux: policydb version 0 does not match my version range 15-35 [ 74.435302][ T7601] SELinux: failed to load policy [ 74.695231][ T7618] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 74.696840][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=7618 comm=syz.0.474 [ 74.763427][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.943643][ T1164] IPVS: starting estimator thread 0... [ 75.033382][ T7637] IPVS: using max 43 ests per chain, 103200 per kthread [ 75.168266][ T5739] Bluetooth: hci3: Malformed Event: 0x2f [ 75.179490][ T7652] FAULT_INJECTION: forcing a failure. [ 75.179490][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 75.179511][ T7652] CPU: 2 UID: 0 PID: 7652 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(full) [ 75.179523][ T7652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.179529][ T7652] Call Trace: [ 75.179533][ T7652] [ 75.179538][ T7652] dump_stack_lvl+0x100/0x190 [ 75.179559][ T7652] should_fail_ex.cold+0x5/0xa [ 75.179577][ T7652] should_failslab+0xc2/0x120 [ 75.179593][ T7652] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.179612][ T7652] ? do_getname+0x35/0x390 [ 75.179640][ T7652] do_getname+0x35/0x390 [ 75.179669][ T7652] do_sys_openat2+0xc7/0x1e0 [ 75.179696][ T7652] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.179721][ T7652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.179742][ T7652] __x64_sys_openat+0x12d/0x210 [ 75.179757][ T7652] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.179777][ T7652] do_syscall_64+0x123/0x790 [ 75.179794][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.179805][ T7652] RIP: 0033:0x7f493a79e159 [ 75.179816][ T7652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.179826][ T7652] RSP: 002b:00007f493b72a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.179838][ T7652] RAX: ffffffffffffffda RBX: 00007f493aa25fa0 RCX: 00007f493a79e159 [ 75.179845][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 75.179852][ T7652] RBP: 00007f493a83503b R08: 0000000000000000 R09: 0000000000000000 [ 75.179858][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.179865][ T7652] R13: 00007f493aa26038 R14: 00007f493aa25fa0 R15: 00007ffef1e60518 [ 75.179878][ T7652] [ 75.180617][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32786 sclass=netlink_route_socket pid=7652 comm=syz.0.488 [ 75.216418][ T7650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.252049][ T7650] warning: `syz.1.487' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.349791][ T7662] __nla_validate_parse: 1 callbacks suppressed [ 75.349804][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 75.367418][ T7662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.372735][ T7662] macvlan0: entered promiscuous mode [ 75.372748][ T7662] macvlan0: entered allmulticast mode [ 75.373153][ T7662] bond1: entered promiscuous mode [ 75.375255][ T7662] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 75.385981][ T7662] bond1: left promiscuous mode [ 75.421649][ T7668] netlink: 830 bytes leftover after parsing attributes in process `syz.1.492'. [ 75.483434][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.560277][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 75.560289][ T43] audit: type=1400 audit(1789448362.935:563): avc: denied { setopt } for pid=7675 comm="syz.1.498" lport=48360 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 75.560467][ T7676] netlink: 180 bytes leftover after parsing attributes in process `syz.1.498'. [ 75.611781][ T7680] syzkaller0: entered promiscuous mode [ 75.611806][ T7680] syzkaller0: entered allmulticast mode [ 75.618812][ T43] audit: type=1400 audit(1789448362.995:564): avc: denied { setopt } for pid=7678 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.657343][ T5846] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 75.662520][ T5846] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 75.662539][ T5846] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.668604][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 75.668627][ T5846] usb 5-1: Product: syz [ 75.668642][ T5846] usb 5-1: Manufacturer: syz [ 75.709929][ T43] audit: type=1804 audit(1789448363.085:565): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.500" name="bus" dev="ramfs" ino=20663 res=1 errno=0 [ 75.710543][ T43] audit: type=1804 audit(1789448363.085:566): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.500" name="bus" dev="ramfs" ino=20663 res=1 errno=0 [ 76.020916][ T7689] Bluetooth: MGMT ver 1.23 [ 76.101160][ T43] audit: type=1400 audit(1789448363.475:567): avc: denied { bind } for pid=7690 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.304585][ T7697] random: crng reseeded on system resumption [ 76.983858][ T5846] dvb_ttusb_budget: ttusb_init_controller: error [ 76.983921][ T5846] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 77.037655][ T43] audit: type=1400 audit(1789448364.415:568): avc: denied { write } for pid=7708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.039134][ T5846] DVB: Unable to find symbol cx22700_attach() [ 77.061166][ T5846] DVB: Unable to find symbol tda10046_attach() [ 77.061176][ T5846] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 77.063972][ T43] audit: type=1400 audit(1789448364.435:569): avc: denied { mmap_zero } for pid=7712 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 77.075557][ T5846] usb 5-1: USB disconnect, device number 6 [ 77.102707][ T43] audit: type=1400 audit(1789448364.475:570): avc: denied { write } for pid=7719 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.127558][ T7710] ------------[ cut here ]------------ [ 77.127568][ T7710] 1 [ 77.127571][ T7710] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#3: syz.3.504/7710 [ 77.134359][ T7710] Modules linked in: [ 77.135851][ T7710] CPU: 3 UID: 0 PID: 7710 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 77.138795][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.141998][ T7710] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.144361][ T7710] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d e2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 d5 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 77.150850][ T7710] RSP: 0018:ffffc900041ff758 EFLAGS: 00010246 [ 77.152776][ T7710] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 77.155616][ T7710] RDX: 0000000000000000 RSI: 0000000000000029 RDI: 0000000000040d40 [ 77.158071][ T7710] RBP: 0000000000000029 R08: 0000000000000000 R09: 0000000000000009 [ 77.160549][ T7710] R10: 0000000000000029 R11: 0000000000000000 R12: 0000000000040d40 [ 77.163026][ T7710] R13: 1ffff9200083ff47 R14: 0000000000000000 R15: 1ffff9200083ff05 [ 77.165704][ T7710] FS: 00007fd3959f56c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 77.168610][ T7710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.170691][ T7710] CR2: 00007fd392d93d58 CR3: 000000003905b000 CR4: 0000000000352ef0 [ 77.173413][ T7710] Call Trace: [ 77.174473][ T7710] [ 77.175418][ T7710] ? p9_client_clunk+0x12a/0x170 [ 77.177007][ T7710] ? kasan_save_stack+0x3f/0x50 [ 77.178528][ T7710] ? kasan_save_stack+0x30/0x50 [ 77.180051][ T7710] ? kasan_save_track+0x14/0x30 [ 77.181593][ T7710] ? kasan_save_free_info+0x3b/0x70 [ 77.183570][ T7710] ? __kasan_slab_free+0x5f/0x80 [ 77.185118][ T7710] ? kfree+0x22b/0x6d0 [ 77.186405][ T7710] ? p9_client_clunk+0x12a/0x170 [ 77.187950][ T7710] ? v9fs_fid_xattr_get+0x217/0x300 [ 77.189577][ T7710] ? v9fs_fid_get_acl+0x22/0x120 [ 77.191121][ T7710] ? v9fs_get_acl+0xe8/0x480 [ 77.192612][ T7710] ? v9fs_inode_from_fid_dotl+0x26d/0x300 [ 77.194685][ T7710] ? v9fs_get_tree+0x55c/0xb50 [ 77.196505][ T7710] ? vfs_get_tree+0x92/0x320 [ 77.197968][ T7710] ? path_mount+0x7d0/0x24c0 [ 77.199446][ T7710] ? __x64_sys_mount+0x293/0x310 [ 77.201020][ T7710] ? do_syscall_64+0x123/0x790 [ 77.202523][ T7710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.204869][ T7710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.206836][ T7710] ? kasan_quarantine_put+0x104/0x240 [ 77.208506][ T7710] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.210128][ T7710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.211961][ T7710] ? policy_nodemask+0xed/0x4f0 [ 77.213712][ T7710] alloc_pages_mpol+0x201/0x550 [ 77.215231][ T7710] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.218389][ T7710] ___kmalloc_large_node+0xe8/0x130 [ 77.220026][ T7710] __kmalloc_large_node_noprof+0x1c/0x70 [ 77.221793][ T7710] __kmalloc_noprof+0x5a8/0x840 [ 77.223897][ T7710] ? find_held_lock+0x2b/0x80 [ 77.225378][ T7710] ? v9fs_fid_get_acl+0x7a/0x120 [ 77.225490][ T43] audit: type=1400 audit(1789448364.595:571): avc: denied { write } for pid=7733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.233951][ T7710] v9fs_fid_get_acl+0x7a/0x120 [ 77.235450][ T7710] v9fs_get_acl+0xe8/0x480 [ 77.236856][ T7710] v9fs_inode_from_fid_dotl+0x26d/0x300 [ 77.238570][ T7710] v9fs_get_tree+0x55c/0xb50 [ 77.240024][ T7710] ? __pfx_v9fs_get_tree+0x10/0x10 [ 77.241640][ T7710] ? bpf_lsm_capable+0x9/0x10 [ 77.243123][ T7710] ? security_capable+0x80/0x260 [ 77.244774][ T7710] vfs_get_tree+0x92/0x320 [ 77.246174][ T7710] path_mount+0x7d0/0x24c0 [ 77.247584][ T7710] ? __pfx_path_mount+0x10/0x10 [ 77.249123][ T7710] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.250970][ T7710] ? putname+0xb1/0x110 [ 77.252275][ T7710] ? kmem_cache_free+0x127/0x6c0 [ 77.254051][ T7710] ? __x64_sys_mount+0x293/0x310 [ 77.255600][ T7710] __x64_sys_mount+0x293/0x310 [ 77.257103][ T7710] ? __pfx___x64_sys_mount+0x10/0x10 [ 77.258757][ T7710] do_syscall_64+0x123/0x790 [ 77.260219][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.262064][ T7710] RIP: 0033:0x7fd394b9e159 [ 77.263530][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.269425][ T7710] RSP: 002b:00007fd3959f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.271999][ T7710] RAX: ffffffffffffffda RBX: 00007fd394e25fa0 RCX: 00007fd394b9e159 [ 77.274507][ T7710] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 77.276951][ T7710] RBP: 00007fd394c3503b R08: 0000200000000180 R09: 0000000000000000 [ 77.279405][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.281888][ T7710] R13: 00007fd394e26038 R14: 00007fd394e25fa0 R15: 00007ffd5ef69108 [ 77.281913][ T43] audit: type=1400 audit(1789448364.655:572): avc: denied { write } for pid=7736 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.290952][ T7710] [ 77.291931][ T7710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.294220][ T7710] CPU: 3 UID: 0 PID: 7710 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 77.297018][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.300089][ T7710] Call Trace: [ 77.301150][ T7710] [ 77.302079][ T7710] dump_stack_lvl+0x100/0x190 [ 77.303569][ T7710] vpanic+0x553/0x970 [ 77.304820][ T7710] ? __pfx_vpanic+0x10/0x10 [ 77.306232][ T7710] panic+0xd1/0xe0 [ 77.307407][ T7710] ? __pfx_panic+0x10/0x10 [ 77.308810][ T7710] check_panic_on_warn.cold+0x19/0x34 [ 77.310482][ T7710] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.312383][ T7710] __warn.cold+0x191/0x318 [ 77.313797][ T7710] __report_bug+0x30f/0x440 [ 77.315213][ T7710] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.317118][ T7710] ? __pfx___report_bug+0x10/0x10 [ 77.318687][ T7710] ? is_bpf_text_address+0x25/0x1a0 [ 77.320312][ T7710] ? __lock_acquire+0x5c0/0x1f40 [ 77.321865][ T7710] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.323781][ T7710] report_bug+0xb3/0x220 [ 77.325114][ T7710] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.327011][ T7710] handle_bug+0x16a/0x2a0 [ 77.328369][ T7710] exc_invalid_op+0x17/0x50 [ 77.329799][ T7710] asm_exc_invalid_op+0x1a/0x20 [ 77.331318][ T7710] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 77.333413][ T7710] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d e2 93 bb 0e 00 0f 85 9d e2 ff ff c6 05 d5 93 bb 0e 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 77.339270][ T7710] RSP: 0018:ffffc900041ff758 EFLAGS: 00010246 [ 77.341185][ T7710] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 77.343610][ T7710] RDX: 0000000000000000 RSI: 0000000000000029 RDI: 0000000000040d40 [ 77.346042][ T7710] RBP: 0000000000000029 R08: 0000000000000000 R09: 0000000000000009 [ 77.348471][ T7710] R10: 0000000000000029 R11: 0000000000000000 R12: 0000000000040d40 [ 77.350908][ T7710] R13: 1ffff9200083ff47 R14: 0000000000000000 R15: 1ffff9200083ff05 [ 77.353369][ T7710] ? p9_client_clunk+0x12a/0x170 [ 77.354901][ T7710] ? kasan_save_stack+0x3f/0x50 [ 77.356416][ T7710] ? kasan_save_stack+0x30/0x50 [ 77.357935][ T7710] ? kasan_save_track+0x14/0x30 [ 77.359452][ T7710] ? kasan_save_free_info+0x3b/0x70 [ 77.361094][ T7710] ? __kasan_slab_free+0x5f/0x80 [ 77.362657][ T7710] ? kfree+0x22b/0x6d0 [ 77.363941][ T7710] ? p9_client_clunk+0x12a/0x170 [ 77.365493][ T7710] ? v9fs_fid_xattr_get+0x217/0x300 [ 77.367109][ T7710] ? v9fs_fid_get_acl+0x22/0x120 [ 77.368648][ T7710] ? v9fs_get_acl+0xe8/0x480 [ 77.370110][ T7710] ? v9fs_inode_from_fid_dotl+0x26d/0x300 [ 77.371877][ T7710] ? v9fs_get_tree+0x55c/0xb50 [ 77.373381][ T7710] ? vfs_get_tree+0x92/0x320 [ 77.374819][ T7710] ? path_mount+0x7d0/0x24c0 [ 77.376256][ T7710] ? __x64_sys_mount+0x293/0x310 [ 77.377813][ T7710] ? do_syscall_64+0x123/0x790 [ 77.379305][ T7710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.381192][ T7710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.383151][ T7710] ? kasan_quarantine_put+0x104/0x240 [ 77.384762][ T7710] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.386312][ T7710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.388115][ T7710] ? policy_nodemask+0xed/0x4f0 [ 77.389570][ T7710] alloc_pages_mpol+0x201/0x550 [ 77.391023][ T7710] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.392640][ T7710] ___kmalloc_large_node+0xe8/0x130 [ 77.394209][ T7710] __kmalloc_large_node_noprof+0x1c/0x70 [ 77.395888][ T7710] __kmalloc_noprof+0x5a8/0x840 [ 77.397412][ T7710] ? find_held_lock+0x2b/0x80 [ 77.398857][ T7710] ? v9fs_fid_get_acl+0x7a/0x120 [ 77.400363][ T7710] v9fs_fid_get_acl+0x7a/0x120 [ 77.401814][ T7710] v9fs_get_acl+0xe8/0x480 [ 77.403193][ T7710] v9fs_inode_from_fid_dotl+0x26d/0x300 [ 77.404866][ T7710] v9fs_get_tree+0x55c/0xb50 [ 77.406277][ T7710] ? __pfx_v9fs_get_tree+0x10/0x10 [ 77.407830][ T7710] ? bpf_lsm_capable+0x9/0x10 [ 77.409265][ T7710] ? security_capable+0x80/0x260 [ 77.410770][ T7710] vfs_get_tree+0x92/0x320 [ 77.412167][ T7710] path_mount+0x7d0/0x24c0 [ 77.413541][ T7710] ? __pfx_path_mount+0x10/0x10 [ 77.414986][ T7710] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.416536][ T7710] ? putname+0xb1/0x110 [ 77.417840][ T7710] ? kmem_cache_free+0x127/0x6c0 [ 77.419348][ T7710] ? __x64_sys_mount+0x293/0x310 [ 77.420844][ T7710] __x64_sys_mount+0x293/0x310 [ 77.422284][ T7710] ? __pfx___x64_sys_mount+0x10/0x10 [ 77.423876][ T7710] do_syscall_64+0x123/0x790 [ 77.425291][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.427078][ T7710] RIP: 0033:0x7fd394b9e159 [ 77.428405][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.434118][ T7710] RSP: 002b:00007fd3959f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.436668][ T7710] RAX: ffffffffffffffda RBX: 00007fd394e25fa0 RCX: 00007fd394b9e159 [ 77.439030][ T7710] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 77.441386][ T7710] RBP: 00007fd394c3503b R08: 0000200000000180 R09: 0000000000000000 [ 77.443780][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.446121][ T7710] R13: 00007fd394e26038 R14: 00007fd394e25fa0 R15: 00007ffd5ef69108 [ 77.448499][ T7710] [ 77.450219][ T7710] Kernel Offset: disabled [ 77.451517][ T7710] Rebooting in 86400 seconds..