last executing test programs: 54.228230666s ago: executing program 1 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018f5018008000100666962000ce7018008000240000000030900010073797a30000000000900020073797a32"], 0x70}}, 0x0) 54.228014494s ago: executing program 1 (id=1180): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x2000) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffef}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000380)) 53.675339005s ago: executing program 1 (id=1189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0xfffffd4e, 0x41, 0x0, 0x0) 53.67468s ago: executing program 1 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x0) memfd_create(&(0x7f0000000240)='(\x00', 0x0) mount$bind(&(0x7f0000000080)='./dev\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x320400, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000040)='./dev/mtdblock0\x00', &(0x7f0000000400)='msdos\x00', 0x0, 0x0) (fail_nth: 14) 53.614282s ago: executing program 1 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES16=r3, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8040) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x48080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$OTPSELECT(r7, 0x80044d0d, &(0x7f0000000200)=0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x10040004}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103}) 53.297045224s ago: executing program 1 (id=1200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000100000086dd60fec00000403a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b0880000000000000000000000000000000000000000ff0200000000000020000000000000017d63dc392c1fc890d71f65a22bfcf08e1100000000000000fafb17c133d11e59"], 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3, 0x1}) sendto$inet(r0, &(0x7f0000000a00)="b9", 0x1, 0x0, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x3, 0x58000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d2abd700000000000020000000000f60600000000060015000400000014001680100008800c0002801a00010000000000"], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) fchown(r4, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2b6e65745f636c73202d6e65745f7072696f2070b684f97979da622fc337ead11e78db9899d9a4f25f60045a15a19fdd80986e0655f9f82d2e5fed9884f89e7d519996ab54e1a8356a0fc11d59a4f3b3263b"], 0x13) r9 = syz_io_uring_complete(0x0, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="200661f73827187b00cc540000000201000004004900c00400000200000032bcf62f93ff03000000000000cb44dc48263ed22156bcd943", @ANYRES32=0x0, @ANYBLOB='0\x00'], 0x50, 0x40001}, 0x4881) 38.986520461s ago: executing program 3 (id=1334): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x40408c0) 38.986036354s ago: executing program 3 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x53) (async, rerun: 64) r4 = accept$alg(r2, 0x0, 0x0) (rerun: 64) r5 = dup3(r4, r2, 0x0) sendfile(r5, r1, 0x0, 0x1000009) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x28c00, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000000300)={r4, &(0x7f00000001c0)='bond\x00', 0x94082, &(0x7f0000000200)={@_ha_fsid={[0x7fffffff, 0xfffffff9]}, {0x9, 0x6, 0x81, 0x2b}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000a00000011000300686173683a69702c6d61726b00000000050004000300000014000780050015000c0100000800114000000000050005000a0000000900020073797a32000000000500010007"], 0x60}}, 0x84000) (async, rerun: 64) getpeername$netlink(r6, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000d0429bd7000fcffff1f0000ecf12c6feee055530cd1d3145e5994000072cf03326c0806abd700600936380ae0e3313185617b9e5575d1f0dfe0687276f97b1d2b143f1c860f635ca0b8bc0ead608862aea2ec7a586e92514caa261bbc4d58c3c6902deabd36345fe9358a00cf0bdd51bc00c5a00ab38778942ef30ba6ee0e023163c6db85a3e5d4c863694fd1c14342aa47dd2d9b641848ae966d6a22c720692e414b693910ef6a51c522ac7d6c2775f05386e321803ee33073e0ac", @ANYRES32=0x0, @ANYBLOB="df310600202000002400128009000100626f6e6400000000140002800500010004000000080005000c000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 38.811521347s ago: executing program 3 (id=1336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801800018008000100666962000ce7018008000240000300030900010073797a30000000000900020073797a32"], 0x70}}, 0x0) 38.811243116s ago: executing program 3 (id=1337): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc8, 0xffd, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x6a, 0xfffffffffffffffb], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0xf6, 0xc, 0x4, 0x0, 0x8000008, 0x8, 0x0, 0x2, 0x8, 0x4, 0x8, 0x0, 0x0, 0x81, 0x9, 0xdd, 0xa, 0x7, 0xf, '\x00', 0xf, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0) 38.568753639s ago: executing program 3 (id=1338): r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0xff5c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r1, &(0x7f00000028c0), 0x0, 0x20, 0x0) write$nbd(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xd03d, 0x5, {}, {0xee01}, 0x7, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x600, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 38.357429775s ago: executing program 3 (id=1339): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @multicast2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2448900e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2c4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0x50a, 0x2, 0x400, 0x9b10, 0x29, 0xc, 0x7250, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000400), 0x4) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x100, 0x81) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000480)={0x1, 0x9, 0x1}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r7) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) (async, rerun: 64) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000680)) openat(r6, &(0x7f00000006c0)='./file0\x00', 0x2, 0x0) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast1, @remote}, &(0x7f0000000740)=0xc) socket(0x2c, 0x1, 0x8) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x4801) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f00000008c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_open_procfs(r10, &(0x7f0000000940)='fdinfo\x00') (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000a00)=0x40000) (async) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) 38.290398317s ago: executing program 32 (id=1339): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @multicast2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2448900e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2c4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10c4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x2, 0x50a, 0x2, 0x400, 0x9b10, 0x29, 0xc, 0x7250, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000400), 0x4) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x100, 0x81) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000480)={0x1, 0x9, 0x1}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r7) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) (async, rerun: 64) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000680)) openat(r6, &(0x7f00000006c0)='./file0\x00', 0x2, 0x0) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast1, @remote}, &(0x7f0000000740)=0xc) socket(0x2c, 0x1, 0x8) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x4801) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f00000008c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_open_procfs(r10, &(0x7f0000000940)='fdinfo\x00') (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000a00)=0x40000) (async) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) 38.236620079s ago: executing program 33 (id=1200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000100000086dd60fec00000403a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b0880000000000000000000000000000000000000000ff0200000000000020000000000000017d63dc392c1fc890d71f65a22bfcf08e1100000000000000fafb17c133d11e59"], 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3, 0x1}) sendto$inet(r0, &(0x7f0000000a00)="b9", 0x1, 0x0, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x3, 0x58000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d2abd700000000000020000000000f60600000000060015000400000014001680100008800c0002801a00010000000000"], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) fchown(r4, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2b6e65745f636c73202d6e65745f7072696f2070b684f97979da622fc337ead11e78db9899d9a4f25f60045a15a19fdd80986e0655f9f82d2e5fed9884f89e7d519996ab54e1a8356a0fc11d59a4f3b3263b"], 0x13) r9 = syz_io_uring_complete(0x0, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="200661f73827187b00cc540000000201000004004900c00400000200000032bcf62f93ff03000000000000cb44dc48263ed22156bcd943", @ANYRES32=0x0, @ANYBLOB='0\x00'], 0x50, 0x40001}, 0x4881) 4.294354321s ago: executing program 0 (id=1814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x20, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000ff020000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x7, 0x5}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x48000}, 0x40000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/1000, 0x3e8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0xa2, 0x77, 0x40, 0x112a, 0x1, 0xcc2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x50, 0xf5, "", [{{0x9, 0x4, 0x24, 0x81, 0x0, 0x92, 0x84, 0x73, 0x9f}}]}}]}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x109400) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/95) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a80)={r2, 0x6ef9, 0x1, [0x2, 0x401, 0xfffffffffffff8a4, 0x1000, 0x4c], [0x4, 0xa341, 0x0, 0x6, 0xbd61, 0x100, 0x10000, 0x200, 0x2, 0x8, 0x9, 0x1, 0x3, 0x5, 0x1, 0x3, 0x5, 0x9, 0x4, 0xb7ecdad, 0x6, 0x2, 0x1000, 0xffffffffffffffff, 0x100000000, 0x5, 0x7, 0x80000001, 0xfffffffffffffffc, 0x2, 0x4, 0x8, 0x82dc, 0x51, 0x6, 0x0, 0x40, 0x8, 0x2, 0x1ff, 0xd4df, 0x1e0, 0x2da1, 0x8, 0x8, 0x9, 0x800, 0xff, 0x2614, 0x8, 0xa791, 0x7, 0x10, 0x3, 0x5, 0x3, 0x40, 0x3, 0x7fffffffffffffff, 0x0, 0xfb, 0x9, 0xb8, 0x7, 0xfffffffffffffff9, 0x2, 0x7c, 0x2, 0x8, 0x1, 0x7, 0x6, 0x2, 0x5, 0x4, 0x0, 0x7fffffffffffffff, 0x1, 0x5, 0x7f, 0x9, 0x1, 0x6, 0x6, 0x7, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffe, 0x1000, 0x6, 0x8, 0x8001, 0x6, 0x0, 0x80000001, 0x9, 0x80, 0xff, 0x2, 0x7fffffffffffffff, 0x3, 0xd9d, 0x101, 0x7, 0x200, 0xfff, 0x38000000000, 0x1ff, 0x6, 0x5, 0x1b9, 0x40, 0x7fffffff, 0x7, 0xfffffffffffffff9, 0x8, 0x1, 0xcc1d, 0xfffffffffffffffe, 0x8, 0xf]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x20, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000ff020000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x7, 0x5}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x48000}, 0x40000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) (async) read(r4, &(0x7f0000000000)=""/1000, 0x3e8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x1d, 0xa2, 0x77, 0x40, 0x112a, 0x1, 0xcc2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x50, 0xf5, "", [{{0x9, 0x4, 0x24, 0x81, 0x0, 0x92, 0x84, 0x73, 0x9f}}]}}]}}, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x109400) (async) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/95) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a80)={r2, 0x6ef9, 0x1, [0x2, 0x401, 0xfffffffffffff8a4, 0x1000, 0x4c], [0x4, 0xa341, 0x0, 0x6, 0xbd61, 0x100, 0x10000, 0x200, 0x2, 0x8, 0x9, 0x1, 0x3, 0x5, 0x1, 0x3, 0x5, 0x9, 0x4, 0xb7ecdad, 0x6, 0x2, 0x1000, 0xffffffffffffffff, 0x100000000, 0x5, 0x7, 0x80000001, 0xfffffffffffffffc, 0x2, 0x4, 0x8, 0x82dc, 0x51, 0x6, 0x0, 0x40, 0x8, 0x2, 0x1ff, 0xd4df, 0x1e0, 0x2da1, 0x8, 0x8, 0x9, 0x800, 0xff, 0x2614, 0x8, 0xa791, 0x7, 0x10, 0x3, 0x5, 0x3, 0x40, 0x3, 0x7fffffffffffffff, 0x0, 0xfb, 0x9, 0xb8, 0x7, 0xfffffffffffffff9, 0x2, 0x7c, 0x2, 0x8, 0x1, 0x7, 0x6, 0x2, 0x5, 0x4, 0x0, 0x7fffffffffffffff, 0x1, 0x5, 0x7f, 0x9, 0x1, 0x6, 0x6, 0x7, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffe, 0x1000, 0x6, 0x8, 0x8001, 0x6, 0x0, 0x80000001, 0x9, 0x80, 0xff, 0x2, 0x7fffffffffffffff, 0x3, 0xd9d, 0x101, 0x7, 0x200, 0xfff, 0x38000000000, 0x1ff, 0x6, 0x5, 0x1b9, 0x40, 0x7fffffff, 0x7, 0xfffffffffffffff9, 0x8, 0x1, 0xcc1d, 0xfffffffffffffffe, 0x8, 0xf]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) (async) 1.070498311s ago: executing program 0 (id=1853): r0 = fanotify_init(0x0, 0x80000) fanotify_mark(r0, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6}}) 908.384861ms ago: executing program 5 (id=1857): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xdcd1, 0x140, 0x0, 0x76}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb89e, 0x8000, 0x1, 0x20b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83a5, 0x800, 0x0, 0x290}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d1c, 0x738fd35dc95b3e03, 0x2, 0x115}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0c5, 0x0, 0x1, 0x99}}], 0x4, &(0x7f0000002040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, '\x00', {0x4, 0xa0e, 0x0, &(0x7f0000001040)=@buf_512="040abc7a39beec23c66a6c41a707fd7471031c574a2ea920408f1a69e8c20fd45a6e51f3ada0324fb93bfd019fece8077549ce57129b9e10496d302c7e424eb2f0c4f9fdd324ac40ab4f54ea0db0a778e899eb676883105693b10bfbfd22951182badef14462fb44120505b15e378fd39ef81ac84d93a91e4c71031568374da2aef7adefd289d0d86989a2611553239541a95aea396c636590b0560fe8be8d8527b29c35cba8ec5fe9f87f61e2db93d1e5ba604efd38434681f6cb113c8f7d2d739b9ca366528980e8a97c06763535e5c07f84d1b18bddaef2123e8def4d2f4a421475bb96994e3c99d0a516b8bab0bf956b728e3a2dc3eff2abf2cd273826834968c1e28b89b565847fdfc5e775e2029902cb64772e86858930e87df5c228551c3471ee4727012b595a8a03b5cb566db776d90821906398dd97309d47a3f158512e8906e158f97e55922edb96c31b044ea35cb5135b8156778cc038d6bc9133d502ae26689eea7cda76f3307ec6052aa43c7d432cb1518cf57dbd2f6f73b71ac9b1497887a0935ed7f03026f0680a1b524959d20abbf8d91cdfb0d4371da9ff541331e2d80334796aea760223de3a1eb5241fc185b3c097b4c20347a84ffe692ec665cd2d8d24f5ed56f8f35c6944fa2a33b82d7fa069bd78ef1f6d704a40483286e8bfa532bc1fb45bc1a6c686c9589ef8d627598527031a6658b1bb9f19d1"}}, &(0x7f00000020c0)) io_uring_enter(r0, 0x59d5, 0x3b76, 0x80, &(0x7f0000002100)={[0x3]}, 0x8) r1 = creat(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x42) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7d202a392a2077001938211191b010dc22d0fdc1a8fcf5c799656a7d10b41b2057a7c26dd2efdcd3813919fae84ce3945de21b6ab62de2c3658ddef4a04504046f4ab93f388a455de04449c1aa6a45d8b69bb298bb15885ca937e071e4ecaee18c5c19143a0035666c83e3412482c9e39492b9c3653a6def91b16ab82abd15808bf513505dbe53ffb5b8"], 0x8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000c300000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 908.126202ms ago: executing program 2 (id=1858): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 788.813203ms ago: executing program 0 (id=1859): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00?', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 786.752255ms ago: executing program 5 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000100005040000006a0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 786.570805ms ago: executing program 2 (id=1862): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) 786.476617ms ago: executing program 0 (id=1863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080004000000000008000500ea8c00002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}, 0x1, 0x0, 0x8cffffff}, 0x0) 706.1568ms ago: executing program 0 (id=1864): setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 706.001844ms ago: executing program 2 (id=1865): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0xf000000) 705.822182ms ago: executing program 5 (id=1866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0', 0x1) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0xd65}}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0xfffffff8, 0x4, 0x3}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r4, 0x1}, 0x8) 587.628025ms ago: executing program 5 (id=1869): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'macsec0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}) 517.661898ms ago: executing program 4 (id=1870): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="020afc00070000002bbd7000fedbdf2d05001a0000000000000000000000000000000000ac1414aa0005000000000000000000000a002000151b"], 0x38}}, 0x40408c0) 517.474613ms ago: executing program 5 (id=1871): socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40a400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000005800000229bd7000fddbdf250008000300", @ANYRES32=r0, @ANYBLOB='\x00'/10], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20000081) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x10001, 0x4) 514.347159ms ago: executing program 4 (id=1872): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="020afc00070000002bbd7000fedbdf2d05001a0000000000000000000000000000000000ac1414aa0005000000000000000000000a002000151b"], 0x38}}, 0x40408c0) (fail_nth: 1) 393.659029ms ago: executing program 5 (id=1873): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x131) write$tcp_congestion(r4, 0x0, 0x0) r5 = dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f00000000c0)={0x1, 0x1, 0x101, 0x1a, 0x10, 0x5}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="020afc00070000002bbd7000fedbdf2d05001a0000000000000000000000000000000000ac1414aa0005000000000000000000000a002000151b"], 0x38}}, 0x40408c0) 311.486641ms ago: executing program 4 (id=1874): io_setup(0x3fd, &(0x7f0000000500)=0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)=@arm64={0x80, 0x1, 0x7, '\x00', 0x2}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000), 0x4) io_destroy(r0) 254.553012ms ago: executing program 2 (id=1875): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0xdcd1, 0x140, 0x0, 0x76}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb89e, 0x8000, 0x1, 0x20b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83a5, 0x800, 0x0, 0x290}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d1c, 0x738fd35dc95b3e03, 0x2, 0x115}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0c5, 0x0, 0x1, 0x99}}], 0x4, &(0x7f0000002040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, '\x00', {0x4, 0xa0e, 0x0, &(0x7f0000001040)=@buf_512="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"}}, &(0x7f00000020c0)) io_uring_enter(r0, 0x59d5, 0x3b76, 0x80, &(0x7f0000002100)={[0x3]}, 0x8) r1 = creat(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x42) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7d202a392a2077001938211191b010dc22d0fdc1a8fcf5c799656a7d10b41b2057a7c26dd2efdcd3813919fae84ce3945de21b6ab62de2c3658ddef4a04504046f4ab93f388a455de04449c1aa6a45d8b69bb298bb15885ca937e071e4ecaee18c5c19143a0035666c83e3412482c9e39492b9c3653a6def91b16ab82abd15808bf513505dbe53ffb5b8"], 0x8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000fe00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 166.212125ms ago: executing program 2 (id=1876): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="080001ff", @ANYRES32=r1], 0x90}}, 0x0) 165.921617ms ago: executing program 4 (id=1877): userfaultfd(0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad880000000014d2250000000000006c616e000000000400028008001b0000000000"], 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xf, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 65.127179ms ago: executing program 4 (id=1878): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00@', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 64.955404ms ago: executing program 2 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080004000000000008000500ea8c00002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}, 0x1, 0x0, 0xeaffffff}, 0x0) 64.724781ms ago: executing program 0 (id=1880): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0xc, @loopback, 0x4e22, 0x3, 'sed\x00', 0x1, 0x80007, 0x6f}, 0x2c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='on', 0x2) (async) r3 = socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x40040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c00018008000f00e0000001080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xed, 0x8, 0x2, 0x3, @remote, @loopback, 0x20, 0x1, 0x9, 0x7}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) r5 = socket(0x1d, 0x3, 0x0) setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) setrlimit(0x9, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x142) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) (async) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 0s ago: executing program 4 (id=1881): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) kernel console output (not intermixed with test programs): ore: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.467641][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.475988][ T9] usb 8-1: USB disconnect, device number 5 [ 148.568772][T11240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.620288][T11242] lo speed is unknown, defaulting to 1000 [ 148.625140][T11242] lo speed is unknown, defaulting to 1000 [ 148.633148][T11242] lo speed is unknown, defaulting to 1000 [ 148.736458][T11244] syz_tun (unregistering): left allmulticast mode [ 148.789221][ T2323] lo speed is unknown, defaulting to 1000 [ 148.794023][ T42] kauditd_printk_skb: 293 callbacks suppressed [ 148.794051][ T42] audit: type=1400 audit(1787927788.125:6044): avc: denied { mounton } for pid=11241 comm="syz.2.1326" path="/342/debug" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.795011][T11242] infiniband sz1: set down [ 148.799905][ T42] audit: type=1400 audit(1787927788.125:6045): avc: denied { mount } for pid=11241 comm="syz.2.1326" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 148.807878][T11242] infiniband sz1: added lo [ 148.824659][ T42] audit: type=1400 audit(1787927788.155:6046): avc: denied { watch watch_reads } for pid=11241 comm="syz.2.1326" path="/342" dev="tmpfs" ino=1779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.838456][T11242] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.845454][T11242] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.851657][T11242] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.880710][T11242] RDS/IB: sz1: added [ 148.882830][T11242] smc: adding ib device sz1 with port count 1 [ 148.887156][T11242] smc: ib device sz1 port 1 has no pnetid [ 148.891913][ T5833] lo speed is unknown, defaulting to 1000 [ 148.898956][T11242] lo speed is unknown, defaulting to 1000 [ 149.064859][T11242] lo speed is unknown, defaulting to 1000 [ 149.071056][ T42] audit: type=1400 audit(1787927788.405:6047): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.134248][ T42] audit: type=1400 audit(1787927788.465:6048): avc: denied { execmem } for pid=11249 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 149.146480][ T42] audit: type=1400 audit(1787927788.465:6049): avc: denied { mmap_zero } for pid=11249 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 149.159494][ T42] audit: type=1400 audit(1787927788.475:6050): avc: denied { create } for pid=11250 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.168311][ T42] audit: type=1400 audit(1787927788.475:6051): avc: denied { write } for pid=11250 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.177499][ T42] audit: type=1400 audit(1787927788.475:6052): avc: denied { nlmsg_write } for pid=11250 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.186681][ T42] audit: type=1400 audit(1787927788.485:6053): avc: denied { recv } for pid=11249 comm="syz.0.1328" saddr=::1 daddr=::1 dest=48692 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 149.251131][T11260] FAULT_INJECTION: forcing a failure. [ 149.251131][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 149.258810][T11260] CPU: 0 UID: 0 PID: 11260 Comm: syz.3.1331 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.258842][T11260] Tainted: [L]=SOFTLOCKUP [ 149.258849][T11260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.258862][T11260] Call Trace: [ 149.258869][T11260] [ 149.258877][T11260] dump_stack_lvl+0x100/0x190 [ 149.258912][T11260] should_fail_ex.cold+0x5/0xa [ 149.258940][T11260] should_failslab+0xc2/0x120 [ 149.258971][T11260] __kmalloc_cache_noprof+0x91/0x6b0 [ 149.258997][T11260] ? find_held_lock+0x2b/0x80 [ 149.259021][T11260] ? alloc_fs_context+0x57/0xf40 [ 149.259050][T11260] alloc_fs_context+0x57/0xf40 [ 149.259080][T11260] ? __get_fs_type+0xe3/0x200 [ 149.259105][T11260] path_mount+0xdbd/0x24c0 [ 149.259131][T11260] ? __pfx_path_mount+0x10/0x10 [ 149.259151][T11260] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.259175][T11260] ? putname+0xb1/0x110 [ 149.259192][T11260] ? kmem_cache_free+0x127/0x6b0 [ 149.259223][T11260] ? __x64_sys_mount+0x293/0x310 [ 149.259246][T11260] __x64_sys_mount+0x293/0x310 [ 149.259267][T11260] ? __pfx___x64_sys_mount+0x10/0x10 [ 149.259297][T11260] do_syscall_64+0x123/0x790 [ 149.259321][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.259345][T11260] RIP: 0033:0x7f0e8259e159 [ 149.259364][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.259383][T11260] RSP: 002b:00007f0e834e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.259403][T11260] RAX: ffffffffffffffda RBX: 00007f0e82825fa0 RCX: 00007f0e8259e159 [ 149.259417][T11260] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 149.259430][T11260] RBP: 00007f0e834e6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.259441][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.259453][T11260] R13: 00007f0e82826038 R14: 00007f0e82825fa0 R15: 00007ffde14944c8 [ 149.259481][T11260] [ 149.313821][T11242] lo speed is unknown, defaulting to 1000 [ 149.483270][T11242] lo speed is unknown, defaulting to 1000 [ 149.589347][T11243] infiniband syz1: set down [ 149.593281][T11243] infiniband syz1: added syz_tun [ 149.605591][T11243] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 149.611886][T11243] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 149.618248][T11243] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 149.648866][T11243] RDS/IB: syz1: added [ 149.657770][T11243] smc: adding ib device syz1 with port count 1 [ 149.660444][T11243] smc: ib device syz1 port 1 has no pnetid [ 150.149634][ T1163] smc: removing ib device syz1 [ 150.200509][ T1163] smbdirect: ib_dev[syz1] removed [ 150.278088][T11267] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 150.281360][T11267] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 150.412974][T11273] __nla_validate_parse: 1 callbacks suppressed [ 150.412992][T11273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1335'. [ 150.485647][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 150.999426][ T5778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.004413][ T5778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.176010][ T5778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.180497][ T5778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.193289][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.193750][ T5730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.213051][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.214947][ T5730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.219766][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.222404][ T5730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.239963][ T5730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.244144][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.244789][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.251235][ T5730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.422103][ T5778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.434373][ T5778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.469418][ T5733] bridge0: port 1(syz_tun) entered disabled state [ 151.496452][ T5733] syz_tun (unregistering): left allmulticast mode [ 151.499321][ T5733] syz_tun (unregistering): left promiscuous mode [ 151.503216][ T5733] bridge0: port 1(syz_tun) entered disabled state [ 151.577078][ T5778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.586261][T11304] binder: 11303:11304 ioctl 400c620e 200000000080 returned -22 [ 151.587662][ T5778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.702882][T11283] lo speed is unknown, defaulting to 1000 [ 151.772708][T11316] tmpfs: Bad value for 'mpol' [ 151.778235][T11316] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 151.781906][T11316] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 151.850517][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 151.854641][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 152.189833][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 152.193402][T11334] netlink: 'syz.2.1356': attribute type 7 has an invalid length. [ 152.197078][T11334] netlink: 'syz.2.1356': attribute type 8 has an invalid length. [ 152.201467][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 152.235483][ T5778] bond0 (unregistering): Released all slaves [ 152.246644][ T5778] bond2 (unregistering): Released all slaves [ 152.263852][ T5778] bond3 (unregistering): Released all slaves [ 152.281596][ T5778] bond4 (unregistering): Released all slaves [ 152.302621][ T5778] bond5 (unregistering): Released all slaves [ 152.310351][T11340] pi3usb30532 0-0005: Error reading config register -6 [ 152.318236][T11340] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 152.319298][ T5778] bond6 (unregistering): Released all slaves [ 152.333586][ T5778] bond7 (unregistering): Released all slaves [ 152.350739][ T5778] bond1 (unregistering): (slave bond8): Releasing backup interface [ 152.359672][ T5778] bond1 (unregistering): Released all slaves [ 152.374872][ T5778] bond8 (unregistering): Released all slaves [ 152.438910][T11282] lo speed is unknown, defaulting to 1000 [ 152.464027][T11348] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 152.543980][T11348] bond11: entered allmulticast mode [ 152.575846][T11353] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 152.578818][T11353] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 152.590179][T11352] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 152.595469][T11352] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 152.629769][T11356] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 152.633106][T11352] bond11: (slave vti0): making interface the new active one [ 152.637126][T11352] vti0: entered allmulticast mode [ 152.656261][T11352] bond11: (slave vti0): Enslaving as an active interface with an up link [ 152.681674][T11348] bond11 (unregistering): (slave vti0): Releasing backup interface [ 152.684466][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 152.685493][T11348] vti0: left allmulticast mode [ 152.689803][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 152.709875][T11348] bond11 (unregistering): Released all slaves [ 152.726401][ T5778] tipc: Disabling bearer [ 152.731606][ T5778] tipc: Left network mode [ 152.810472][T11356] bond11: entered allmulticast mode [ 152.929027][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'. [ 152.932470][T11374] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 153.078227][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.192754][T11399] Cannot find map_set index 135 as target [ 153.360350][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 153.363433][T11416] netlink: 'syz.0.1379': attribute type 7 has an invalid length. [ 153.366540][T11416] netlink: 'syz.0.1379': attribute type 8 has an invalid length. [ 153.376733][ T5088] Bluetooth: hci4: command tx timeout [ 153.412928][T11420] netlink: Setting conntrack mark requires 'commit' flag. [ 153.416668][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.465800][ T5088] Bluetooth: hci2: command tx timeout [ 153.570995][T11429] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 153.590198][T11429] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 153.613420][T11439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 153.616170][T11439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.625393][T11439] vhci_hcd vhci_hcd.0: Device attached [ 153.682500][ T5778] hsr_slave_0: left promiscuous mode [ 153.685907][ T5778] hsr_slave_1: left promiscuous mode [ 153.693280][ T5778] veth1_macvtap: left promiscuous mode [ 153.699178][ T5778] veth0_macvtap: left promiscuous mode [ 153.701745][ T5778] veth1_vlan: left promiscuous mode [ 153.706225][ T5778] veth0_vlan: left promiscuous mode [ 153.750438][T11444] dlm: no locking on control device [ 153.866182][ T5812] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 153.870028][T11441] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 153.872705][ T5805] vhci_hcd vhci_hcd.0: stop threads [ 153.874826][ T5805] vhci_hcd vhci_hcd.0: release socket [ 153.882885][ T5805] vhci_hcd vhci_hcd.0: disconnect device [ 154.022597][ T42] kauditd_printk_skb: 256 callbacks suppressed [ 154.022610][ T42] audit: type=1400 audit(1787927793.355:6310): avc: denied { create } for pid=11453 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.041007][ T42] audit: type=1400 audit(1787927793.355:6311): avc: denied { setopt } for pid=11453 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.052673][ T42] audit: type=1400 audit(1787927793.355:6312): avc: denied { prog_load } for pid=11453 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.062380][ T42] audit: type=1400 audit(1787927793.355:6313): avc: denied { bpf } for pid=11453 comm="syz.2.1386" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.070039][ T42] audit: type=1400 audit(1787927793.355:6314): avc: denied { read } for pid=11453 comm="syz.2.1386" dev="nsfs" ino=4026533031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.080004][ T42] audit: type=1400 audit(1787927793.355:6315): avc: denied { open } for pid=11453 comm="syz.2.1386" path="net:[4026533031]" dev="nsfs" ino=4026533031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.090880][ T42] audit: type=1400 audit(1787927793.355:6316): avc: denied { create } for pid=11453 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.099820][ T42] audit: type=1400 audit(1787927793.355:6317): avc: denied { recv } for pid=5644 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37812 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 154.111120][ T42] audit: type=1400 audit(1787927793.355:6318): avc: denied { write } for pid=11453 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.120025][ T42] audit: type=1400 audit(1787927793.355:6319): avc: denied { module_request } for pid=11453 comm="syz.2.1386" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.185099][T11460] Cannot find map_set index 135 as target [ 154.198565][T11283] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.204834][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.208814][T11283] bridge_slave_0: entered allmulticast mode [ 154.212858][T11283] bridge_slave_0: entered promiscuous mode [ 154.217917][T11283] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.220956][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.224153][T11283] bridge_slave_1: entered allmulticast mode [ 154.229925][T11283] bridge_slave_1: entered promiscuous mode [ 154.338078][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.352736][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.357671][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.361578][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.364653][T11282] bridge_slave_0: entered allmulticast mode [ 154.367692][T11282] bridge_slave_0: entered promiscuous mode [ 154.374362][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.388145][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.390914][T11282] bridge_slave_1: entered allmulticast mode [ 154.393752][T11282] bridge_slave_1: entered promiscuous mode [ 154.407041][T11469] 8021q: adding VLAN 0 to HW filter on device bond11 [ 154.430479][T11283] team0: Port device team_slave_0 added [ 154.464655][T11470] 8021q: adding VLAN 0 to HW filter on device bond12 [ 154.468127][T11470] bond11: (slave bond12): Enslaving as an active interface with an up link [ 154.494267][T11282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.499742][T11283] team0: Port device team_slave_1 added [ 154.510981][T11469] bond11 (unregistering): (slave bond12): Releasing backup interface [ 154.515829][T11469] bond11 (unregistering): Released all slaves [ 154.530442][T11282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.578101][T11282] team0: Port device team_slave_0 added [ 154.583786][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.586983][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.596882][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.604033][T11282] team0: Port device team_slave_1 added [ 154.616967][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.620446][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.631305][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.646575][T11282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.650123][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.661903][T11282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.679346][T11282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.682463][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.691163][T11282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.719534][T11283] hsr_slave_0: entered promiscuous mode [ 154.722081][T11283] hsr_slave_1: entered promiscuous mode [ 154.724362][T11283] debugfs: 'hsr0' already exists in 'hsr' [ 154.729166][ T5778] IPVS: stop unused estimator thread 0... [ 154.731291][T11283] Cannot create hsr debugfs directory [ 154.782707][T11282] hsr_slave_0: entered promiscuous mode [ 154.785872][T11282] hsr_slave_1: entered promiscuous mode [ 154.788665][T11282] debugfs: 'hsr0' already exists in 'hsr' [ 154.791529][T11282] Cannot create hsr debugfs directory [ 154.802118][T11485] binder: 11484:11485 ioctl c0306201 200000000680 returned -14 [ 154.853040][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 154.860613][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.2.1395 [ 154.875296][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz.2.1395 [ 155.034244][T11492] macvlan44: entered allmulticast mode [ 155.060038][T11492] 8021q: adding VLAN 0 to HW filter on device macvlan44 [ 155.172577][T11283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.181585][T11283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.186260][T11283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.200017][T11283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.208755][T11283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.222756][T11283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.228077][T11283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.234815][T11283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.339136][T11282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.349989][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.355688][T11282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.364696][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.385988][T11282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.393221][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.401891][T11282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.410992][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.455562][ T5088] Bluetooth: hci4: command tx timeout [ 155.514593][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.526227][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 155.544456][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.545426][ T5088] Bluetooth: hci2: command tx timeout [ 155.561968][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.564378][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.580441][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.583731][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.602798][T11282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.632461][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.646224][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.648758][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.668453][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.671078][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.830414][T11558] Cannot find map_set index 135 as target [ 155.872312][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 155.904571][T11567] 8021q: adding VLAN 0 to HW filter on device bond12 [ 155.933302][T11567] 8021q: adding VLAN 0 to HW filter on device bond13 [ 155.938885][T11567] bond12: (slave bond13): Enslaving as an active interface with an up link [ 155.965553][T11567] bond12 (unregistering): (slave bond13): Releasing backup interface [ 155.991107][T11567] bond12 (unregistering): Released all slaves [ 156.006377][T11581] binder: 11580:11581 ioctl c0306201 200000000680 returned -14 [ 156.080471][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.141419][T11282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.274890][T11615] netlink: 'syz.0.1415': attribute type 11 has an invalid length. [ 156.278859][T11615] __nla_validate_parse: 4 callbacks suppressed [ 156.278873][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1415'. [ 156.334012][T11283] veth0_vlan: entered promiscuous mode [ 156.346899][T11283] veth1_vlan: entered promiscuous mode [ 156.378414][T11283] veth0_macvtap: entered promiscuous mode [ 156.386121][T11283] veth1_macvtap: entered promiscuous mode [ 156.430090][T11283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.445877][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 156.451187][T11283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.479621][T11624] macvlan45: entered allmulticast mode [ 156.502028][T11624] 8021q: adding VLAN 0 to HW filter on device macvlan45 [ 156.530983][T11282] veth0_vlan: entered promiscuous mode [ 156.547838][ T5778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.554894][T11282] veth1_vlan: entered promiscuous mode [ 156.575322][ T5805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.588091][T11631] netlink: Unknown conntrack attr (type=15366, max=9) [ 156.591200][T11631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.626147][ T5778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.721934][T11282] veth0_macvtap: entered promiscuous mode [ 156.729847][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.732976][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.780420][T11282] veth1_macvtap: entered promiscuous mode [ 156.800182][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 156.807738][ T235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.812883][ T235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.819203][T11641] macvlan46: entered allmulticast mode [ 156.826910][T11641] 8021q: adding VLAN 0 to HW filter on device macvlan46 [ 156.859625][T11282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.869523][T11282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.875343][ T5805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.902652][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.910707][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.931594][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.970487][T11647] bridge_slave_0: left allmulticast mode [ 156.972821][T11647] bridge_slave_0: left promiscuous mode [ 156.976091][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.984814][T11647] bridge_slave_1: left allmulticast mode [ 156.988164][T11647] bridge_slave_1: left promiscuous mode [ 156.991430][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.013863][T11647] bond0: (slave bond_slave_0): Releasing backup interface [ 157.022082][T11647] bond0: (slave bond_slave_1): Releasing backup interface [ 157.034071][T11647] team0: Port device team_slave_0 removed [ 157.043539][T11647] team0: Port device team_slave_1 removed [ 157.047511][T11647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.051026][T11647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.055656][T11647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.058366][T11647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.061821][T11647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.102414][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.106672][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.173559][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.178333][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.185438][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.254246][T11658] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1341'. [ 157.257377][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'. [ 157.261421][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1341'. [ 157.271728][T11658] xt_socket: unknown flags 0x4c [ 157.545795][ T5088] Bluetooth: hci4: command tx timeout [ 157.615502][ T5088] Bluetooth: hci2: command tx timeout [ 157.874301][T11675] Cannot find del_set index 0 as target [ 158.026639][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 158.059114][T11695] macvlan47: entered allmulticast mode [ 158.076697][T11695] 8021q: adding VLAN 0 to HW filter on device macvlan47 [ 158.162482][T11704] FAULT_INJECTION: forcing a failure. [ 158.162482][T11704] name failslab, interval 1, probability 0, space 0, times 0 [ 158.168317][T11704] CPU: 2 UID: 0 PID: 11704 Comm: syz.5.1438 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.168338][T11704] Tainted: [L]=SOFTLOCKUP [ 158.168341][T11704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.168348][T11704] Call Trace: [ 158.168352][T11704] [ 158.168357][T11704] dump_stack_lvl+0x100/0x190 [ 158.168393][T11704] should_fail_ex.cold+0x5/0xa [ 158.168408][T11704] should_failslab+0xc2/0x120 [ 158.168434][T11704] __kmalloc_flags_noprof+0x122/0x8b0 [ 158.168457][T11704] ? alloc_slab_obj_exts+0x5a/0x160 [ 158.168485][T11704] alloc_slab_obj_exts+0x5a/0x160 [ 158.168509][T11704] __memcg_slab_post_alloc_hook+0x3da/0x1150 [ 158.168536][T11704] ? kasan_unpoison+0x27/0x60 [ 158.168561][T11704] __kmalloc_cache_noprof+0x590/0x6b0 [ 158.168580][T11704] ? find_held_lock+0x2b/0x80 [ 158.168598][T11704] ? alloc_fs_context+0x57/0xf40 [ 158.168619][T11704] alloc_fs_context+0x57/0xf40 [ 158.168644][T11704] ? __get_fs_type+0xe3/0x200 [ 158.168663][T11704] path_mount+0xdbd/0x24c0 [ 158.168685][T11704] ? __pfx_path_mount+0x10/0x10 [ 158.168697][T11704] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.168719][T11704] ? putname+0xb1/0x110 [ 158.168733][T11704] ? kmem_cache_free+0x127/0x6b0 [ 158.168761][T11704] ? __x64_sys_mount+0x293/0x310 [ 158.168776][T11704] __x64_sys_mount+0x293/0x310 [ 158.168797][T11704] ? __pfx___x64_sys_mount+0x10/0x10 [ 158.168820][T11704] do_syscall_64+0x123/0x790 [ 158.168841][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.168858][T11704] RIP: 0033:0x7fc0b859e159 [ 158.168873][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.168888][T11704] RSP: 002b:00007fc0b9476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.168907][T11704] RAX: ffffffffffffffda RBX: 00007fc0b8825fa0 RCX: 00007fc0b859e159 [ 158.168916][T11704] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 158.168926][T11704] RBP: 00007fc0b9476090 R08: 0000000000000000 R09: 0000000000000000 [ 158.168936][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.168948][T11704] R13: 00007fc0b8826038 R14: 00007fc0b8825fa0 R15: 00007ffd3fcaa7e8 [ 158.168970][T11704] [ 158.169385][T11704] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 158.258957][T11704] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 158.968491][ T5812] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 159.253857][ T42] kauditd_printk_skb: 370 callbacks suppressed [ 159.253877][ T42] audit: type=1400 audit(1787927798.585:6690): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 159.269785][ T42] audit: type=1400 audit(1787927798.605:6691): avc: denied { node_bind } for pid=11736 comm="syz.0.1442" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 159.280125][ T42] audit: type=1400 audit(1787927798.605:6692): avc: denied { read } for pid=11737 comm="syz.4.1444" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.291123][ T42] audit: type=1400 audit(1787927798.605:6693): avc: denied { open } for pid=11737 comm="syz.4.1444" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.301117][ T42] audit: type=1400 audit(1787927798.615:6694): avc: denied { prog_load } for pid=11737 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.306273][T11739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.311270][ T42] audit: type=1400 audit(1787927798.615:6695): avc: denied { create } for pid=11737 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.334225][ T42] audit: type=1400 audit(1787927798.615:6696): avc: denied { map_create } for pid=11741 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.355485][ T42] audit: type=1400 audit(1787927798.615:6697): avc: denied { bpf } for pid=11741 comm="syz.2.1443" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.369525][ T42] audit: type=1400 audit(1787927798.615:6698): avc: denied { map_read map_write } for pid=11741 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.378480][ T42] audit: type=1400 audit(1787927798.615:6699): avc: denied { perfmon } for pid=11741 comm="syz.2.1443" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.555030][T11780] openvswitch: netlink: IP tunnel dst address not specified [ 159.593951][T11786] netlink: 'syz.0.1456': attribute type 2 has an invalid length. [ 159.620168][ T5088] Bluetooth: hci4: command tx timeout [ 159.660402][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 159.663130][T11800] FAULT_INJECTION: forcing a failure. [ 159.663130][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 159.670912][T11800] CPU: 2 UID: 0 PID: 11800 Comm: syz.4.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.670945][T11800] Tainted: [L]=SOFTLOCKUP [ 159.670955][T11800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.670968][T11800] Call Trace: [ 159.670976][T11800] [ 159.670984][T11800] dump_stack_lvl+0x100/0x190 [ 159.671022][T11800] should_fail_ex.cold+0x5/0xa [ 159.671052][T11800] should_failslab+0xc2/0x120 [ 159.671086][T11800] kmem_cache_alloc_noprof+0x91/0x6a0 [ 159.671118][T11800] ? do_getname_kernel+0x5d/0x250 [ 159.671156][T11800] do_getname_kernel+0x5d/0x250 [ 159.671182][T11800] kern_path+0x1f/0x50 [ 159.671213][T11800] lookup_bdev+0xd8/0x2a0 [ 159.671255][T11800] ? __pfx_lookup_bdev+0x10/0x10 [ 159.671308][T11800] ? cred_has_capability.isra.0+0x186/0x300 [ 159.671342][T11800] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 159.671379][T11800] get_tree_bdev_flags+0xbe/0x620 [ 159.671424][T11800] ? __pfx_msdos_fill_super+0x10/0x10 [ 159.671452][T11800] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.671480][T11800] ? cap_capable+0x107/0x430 [ 159.671509][T11800] ? bpf_lsm_capable+0x9/0x10 [ 159.671535][T11800] ? security_capable+0x80/0x260 [ 159.671561][T11800] vfs_get_tree+0x92/0x320 [ 159.671588][T11800] path_mount+0x7d0/0x24c0 [ 159.671617][T11800] ? __pfx_path_mount+0x10/0x10 [ 159.671639][T11800] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.671664][T11800] ? putname+0xb1/0x110 [ 159.671685][T11800] ? kmem_cache_free+0x127/0x6b0 [ 159.671716][T11800] ? __x64_sys_mount+0x293/0x310 [ 159.671738][T11800] __x64_sys_mount+0x293/0x310 [ 159.671764][T11800] ? __pfx___x64_sys_mount+0x10/0x10 [ 159.671795][T11800] do_syscall_64+0x123/0x790 [ 159.671823][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.671846][T11800] RIP: 0033:0x7f6128f9e159 [ 159.671866][T11800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.671887][T11800] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.671909][T11800] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 159.671922][T11800] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 159.671934][T11800] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 159.671946][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.671960][T11800] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 159.671989][T11800] [ 159.672150][T11800] ./dev/mtdblock0: Can't lookup blockdev [ 159.695951][ T5088] Bluetooth: hci2: command tx timeout [ 159.700742][T11799] macvlan48: entered allmulticast mode [ 159.756488][T11806] netlink: 'syz.5.1465': attribute type 3 has an invalid length. [ 159.763714][T11799] 8021q: adding VLAN 0 to HW filter on device macvlan48 [ 159.833967][T11813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.883630][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'. [ 159.887477][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1469'. [ 161.008265][T11851] Cannot find set identified by id 0 to match [ 161.028141][T11852] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP) [ 161.179889][T11871] FAULT_INJECTION: forcing a failure. [ 161.179889][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 161.185454][T11873] openvswitch: netlink: Message has 8 unknown bytes. [ 161.186150][T11871] CPU: 3 UID: 0 PID: 11871 Comm: syz.0.1480 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.186180][T11871] Tainted: [L]=SOFTLOCKUP [ 161.186186][T11871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.186195][T11871] Call Trace: [ 161.186201][T11871] [ 161.186207][T11871] dump_stack_lvl+0x100/0x190 [ 161.186238][T11871] should_fail_ex.cold+0x5/0xa [ 161.186261][T11871] should_failslab+0xc2/0x120 [ 161.186304][T11871] kmem_cache_alloc_noprof+0x91/0x6a0 [ 161.186327][T11871] ? do_getname_kernel+0x5d/0x250 [ 161.186348][T11871] do_getname_kernel+0x5d/0x250 [ 161.186367][T11871] kern_path+0x1f/0x50 [ 161.186389][T11871] lookup_bdev+0xd8/0x2a0 [ 161.186412][T11871] ? __pfx_lookup_bdev+0x10/0x10 [ 161.186434][T11871] ? cred_has_capability.isra.0+0x186/0x300 [ 161.186462][T11871] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 161.186488][T11871] get_tree_bdev_flags+0xbe/0x620 [ 161.186508][T11871] ? __pfx_msdos_fill_super+0x10/0x10 [ 161.186530][T11871] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 161.186550][T11871] ? cap_capable+0x107/0x430 [ 161.186572][T11871] ? bpf_lsm_capable+0x9/0x10 [ 161.186590][T11871] ? security_capable+0x80/0x260 [ 161.186621][T11871] vfs_get_tree+0x92/0x320 [ 161.186641][T11871] path_mount+0x7d0/0x24c0 [ 161.186664][T11871] ? __pfx_path_mount+0x10/0x10 [ 161.186683][T11871] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.186704][T11871] ? putname+0xb1/0x110 [ 161.186719][T11871] ? kmem_cache_free+0x127/0x6b0 [ 161.186744][T11871] ? __x64_sys_mount+0x293/0x310 [ 161.186762][T11871] __x64_sys_mount+0x293/0x310 [ 161.186783][T11871] ? __pfx___x64_sys_mount+0x10/0x10 [ 161.186807][T11871] do_syscall_64+0x123/0x790 [ 161.186829][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.186848][T11871] RIP: 0033:0x7f475e39e159 [ 161.186864][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.186880][T11871] RSP: 002b:00007f475f310028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.186896][T11871] RAX: ffffffffffffffda RBX: 00007f475e625fa0 RCX: 00007f475e39e159 [ 161.186908][T11871] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 161.186918][T11871] RBP: 00007f475f310090 R08: 0000000000000000 R09: 0000000000000000 [ 161.186927][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.186936][T11871] R13: 00007f475e626038 R14: 00007f475e625fa0 R15: 00007fff043810d8 [ 161.186959][T11871] [ 161.187001][T11871] ./dev/mtdblock0: Can't lookup blockdev [ 161.291949][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 161.301328][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 161.302676][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 161.321961][T11880] tmpfs: Bad value for 'mpol' [ 161.413152][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 161.445603][T11886] macvlan49: entered allmulticast mode [ 161.466789][T11886] 8021q: adding VLAN 0 to HW filter on device macvlan49 [ 161.567867][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 161.573039][T11900] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.579078][T11900] Cannot find add_set index 0 as target [ 161.583149][T11898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1489'. [ 161.588706][T11895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.965642][ T5833] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 162.095454][ T5833] usb 9-1: device descriptor read/64, error -71 [ 162.337090][ T5833] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 162.465497][ T5833] usb 9-1: device descriptor read/64, error -71 [ 162.576436][ T5833] usb usb9-port1: attempt power cycle [ 162.648547][T11928] SET target dimension over the limit! [ 162.660032][T11932] netlink: 'syz.5.1495': attribute type 10 has an invalid length. [ 162.679197][T11932] team0 (unregistering): Port device team_slave_0 removed [ 162.690473][T11932] team0 (unregistering): Port device team_slave_1 removed [ 162.703700][T11937] FAULT_INJECTION: forcing a failure. [ 162.703700][T11937] name failslab, interval 1, probability 0, space 0, times 0 [ 162.708889][T11937] CPU: 3 UID: 0 PID: 11937 Comm: syz.2.1497 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.708907][T11937] Tainted: [L]=SOFTLOCKUP [ 162.708911][T11937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.708917][T11937] Call Trace: [ 162.708920][T11937] [ 162.708925][T11937] dump_stack_lvl+0x100/0x190 [ 162.708944][T11937] should_fail_ex.cold+0x5/0xa [ 162.708960][T11937] should_failslab+0xc2/0x120 [ 162.708977][T11937] __kmalloc_cache_noprof+0x91/0x6b0 [ 162.708989][T11937] ? sget_fc+0x117/0x1f20 [ 162.709002][T11937] ? sget_fc+0x117/0x1f20 [ 162.709014][T11937] ? sget_fc+0x1ba/0x1f20 [ 162.709029][T11937] sget_fc+0x1ba/0x1f20 [ 162.709042][T11937] ? mntput_no_expire+0xd8/0x220 [ 162.709057][T11937] ? __pfx_super_s_dev_test+0x10/0x10 [ 162.709072][T11937] ? __pfx_super_s_dev_set+0x10/0x10 [ 162.709091][T11937] ? __pfx_sget_fc+0x10/0x10 [ 162.709103][T11937] ? mntput+0x70/0xa0 [ 162.709118][T11937] ? lookup_bdev+0x16b/0x2a0 [ 162.709134][T11937] ? __pfx_lookup_bdev+0x10/0x10 [ 162.709148][T11937] ? cred_has_capability.isra.0+0x186/0x300 [ 162.709165][T11937] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 162.709184][T11937] get_tree_bdev_flags+0x1ba/0x620 [ 162.709198][T11937] ? __pfx_msdos_fill_super+0x10/0x10 [ 162.709211][T11937] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 162.709225][T11937] ? cap_capable+0x107/0x430 [ 162.709239][T11937] ? bpf_lsm_capable+0x9/0x10 [ 162.709251][T11937] ? security_capable+0x80/0x260 [ 162.709265][T11937] vfs_get_tree+0x92/0x320 [ 162.709277][T11937] path_mount+0x7d0/0x24c0 [ 162.709291][T11937] ? __pfx_path_mount+0x10/0x10 [ 162.709301][T11937] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.709314][T11937] ? putname+0xb1/0x110 [ 162.709323][T11937] ? kmem_cache_free+0x127/0x6b0 [ 162.709340][T11937] ? __x64_sys_mount+0x293/0x310 [ 162.709351][T11937] __x64_sys_mount+0x293/0x310 [ 162.709363][T11937] ? __pfx___x64_sys_mount+0x10/0x10 [ 162.709378][T11937] do_syscall_64+0x123/0x790 [ 162.709392][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.709403][T11937] RIP: 0033:0x7fea4799e159 [ 162.709413][T11937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.709424][T11937] RSP: 002b:00007fea488d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.709435][T11937] RAX: ffffffffffffffda RBX: 00007fea47c25fa0 RCX: 00007fea4799e159 [ 162.709441][T11937] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 162.709448][T11937] RBP: 00007fea488d8090 R08: 0000000000000000 R09: 0000000000000000 [ 162.709454][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.709460][T11937] R13: 00007fea47c26038 R14: 00007fea47c25fa0 R15: 00007ffe437433b8 [ 162.709473][T11937] [ 162.889230][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 162.893158][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 162.915384][ T5833] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 162.936174][ T5833] usb 9-1: device descriptor read/8, error -71 [ 163.078402][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 163.103969][T11971] macvlan50: entered allmulticast mode [ 163.109669][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 163.115852][T11971] 8021q: adding VLAN 0 to HW filter on device macvlan50 [ 163.176251][ T5833] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 163.180103][T11974] 8021q: adding VLAN 0 to HW filter on device bond11 [ 163.195879][ T5833] usb 9-1: device descriptor read/8, error -71 [ 163.227844][T11984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.278705][T11988] Cannot find set identified by id 0 to match [ 163.305749][ T5833] usb usb9-port1: unable to enumerate USB device [ 164.351442][ T42] kauditd_printk_skb: 368 callbacks suppressed [ 164.351460][ T42] audit: type=1400 audit(1787927803.685:7068): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 164.377611][ T42] audit: type=1400 audit(1787927803.715:7069): avc: denied { mounton } for pid=12016 comm="syz.0.1517" path="/375/dev" dev="tmpfs" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.379184][T12018] FAULT_INJECTION: forcing a failure. [ 164.379184][T12018] name failslab, interval 1, probability 0, space 0, times 0 [ 164.387376][ T42] audit: type=1400 audit(1787927803.715:7070): avc: denied { mount } for pid=12017 comm="syz.2.1519" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 164.393389][T12018] CPU: 2 UID: 0 PID: 12018 Comm: syz.0.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.393420][T12018] Tainted: [L]=SOFTLOCKUP [ 164.393427][T12018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.393439][T12018] Call Trace: [ 164.393445][T12018] [ 164.393453][T12018] dump_stack_lvl+0x100/0x190 [ 164.393487][T12018] should_fail_ex.cold+0x5/0xa [ 164.393514][T12018] should_failslab+0xc2/0x120 [ 164.393545][T12018] __kmalloc_noprof+0xfc/0x820 [ 164.393573][T12018] ? lsm_blob_alloc+0x68/0x90 [ 164.393600][T12018] lsm_blob_alloc+0x68/0x90 [ 164.393626][T12018] security_sb_alloc+0x25/0x240 [ 164.393651][T12018] sget_fc+0x3ca/0x1f20 [ 164.393678][T12018] ? __pfx_super_s_dev_test+0x10/0x10 [ 164.393700][T12018] ? __pfx_super_s_dev_set+0x10/0x10 [ 164.393721][T12018] ? __pfx_sget_fc+0x10/0x10 [ 164.393743][T12018] ? mntput+0x70/0xa0 [ 164.393769][T12018] ? lookup_bdev+0x16b/0x2a0 [ 164.393796][T12018] ? __pfx_lookup_bdev+0x10/0x10 [ 164.393822][T12018] ? cred_has_capability.isra.0+0x186/0x300 [ 164.393853][T12018] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 164.393889][T12018] get_tree_bdev_flags+0x1ba/0x620 [ 164.393913][T12018] ? __pfx_msdos_fill_super+0x10/0x10 [ 164.393938][T12018] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 164.393998][T12018] ? cap_capable+0x107/0x430 [ 164.394024][T12018] ? bpf_lsm_capable+0x9/0x10 [ 164.394045][T12018] ? security_capable+0x80/0x260 [ 164.394071][T12018] vfs_get_tree+0x92/0x320 [ 164.394093][T12018] path_mount+0x7d0/0x24c0 [ 164.394118][T12018] ? __pfx_path_mount+0x10/0x10 [ 164.394138][T12018] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.394168][T12018] ? putname+0xb1/0x110 [ 164.394186][T12018] ? kmem_cache_free+0x127/0x6b0 [ 164.394221][T12018] ? __x64_sys_mount+0x293/0x310 [ 164.394244][T12018] __x64_sys_mount+0x293/0x310 [ 164.394267][T12018] ? __pfx___x64_sys_mount+0x10/0x10 [ 164.394300][T12018] do_syscall_64+0x123/0x790 [ 164.394325][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.394348][T12018] RIP: 0033:0x7f475e39e159 [ 164.394367][T12018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.394388][T12018] RSP: 002b:00007f475f310028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.394411][T12018] RAX: ffffffffffffffda RBX: 00007f475e625fa0 RCX: 00007f475e39e159 [ 164.394426][T12018] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 164.394440][T12018] RBP: 00007f475f310090 R08: 0000000000000000 R09: 0000000000000000 [ 164.394453][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.394466][T12018] R13: 00007f475e626038 R14: 00007f475e625fa0 R15: 00007fff043810d8 [ 164.394498][T12018] [ 164.520509][T12035] FAULT_INJECTION: forcing a failure. [ 164.520509][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 164.521671][ T42] audit: type=1400 audit(1787927803.715:7071): avc: denied { mount } for pid=12016 comm="syz.0.1517" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 164.528261][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.5.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.528289][T12035] Tainted: [L]=SOFTLOCKUP [ 164.528295][T12035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.528306][T12035] Call Trace: [ 164.528312][T12035] [ 164.528319][T12035] dump_stack_lvl+0x100/0x190 [ 164.528348][T12035] should_fail_ex.cold+0x5/0xa [ 164.528374][T12035] should_failslab+0xc2/0x120 [ 164.528402][T12035] __kmalloc_noprof+0xfc/0x820 [ 164.528426][T12035] ? rcu_is_watching+0x13/0xc0 [ 164.528447][T12035] ? tomoyo_realpath_from_path+0xb6/0x690 [ 164.528481][T12035] tomoyo_realpath_from_path+0xb6/0x690 [ 164.528514][T12035] tomoyo_path_number_perm+0x23c/0x580 [ 164.528537][T12035] ? tomoyo_path_number_perm+0x22e/0x580 [ 164.528563][T12035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.528610][T12035] ? find_held_lock+0x2b/0x80 [ 164.528632][T12035] ? hook_file_ioctl_common+0x140/0x440 [ 164.528658][T12035] ? __fget_files+0x21f/0x3d0 [ 164.528687][T12035] security_file_ioctl+0xd3/0x230 [ 164.528714][T12035] __x64_sys_ioctl+0xb7/0x210 [ 164.528738][T12035] do_syscall_64+0x123/0x790 [ 164.528761][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.528780][T12035] RIP: 0033:0x7fc0b859e159 [ 164.528796][T12035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.528812][T12035] RSP: 002b:00007fc0b9476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.528830][T12035] RAX: ffffffffffffffda RBX: 00007fc0b8825fa0 RCX: 00007fc0b859e159 [ 164.528841][T12035] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 164.528852][T12035] RBP: 00007fc0b9476090 R08: 0000000000000000 R09: 0000000000000000 [ 164.528863][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.528873][T12035] R13: 00007fc0b8826038 R14: 00007fc0b8825fa0 R15: 00007ffd3fcaa7e8 [ 164.528897][T12035] [ 164.528940][T12035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.535210][ T42] audit: type=1400 audit(1787927803.715:7072): avc: denied { mounton } for pid=12016 comm="syz.0.1517" path="/375/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.635327][ T5812] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 164.638117][ T42] audit: type=1400 audit(1787927803.715:7073): avc: denied { write } for pid=12017 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.648707][ T42] audit: type=1400 audit(1787927803.715:7074): avc: denied { read } for pid=12017 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.657464][ T42] audit: type=1400 audit(1787927803.715:7075): avc: denied { read write } for pid=12017 comm="syz.2.1519" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.672864][ T42] audit: type=1400 audit(1787927803.715:7076): avc: denied { open } for pid=12017 comm="syz.2.1519" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.689551][ T42] audit: type=1400 audit(1787927803.715:7077): avc: denied { ioctl } for pid=12017 comm="syz.2.1519" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.818131][ T5812] usb 7-1: not running at top speed; connect to a high speed hub [ 164.820765][ T5812] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 164.829385][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 164.833889][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 164.838203][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 164.841697][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 164.846704][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 164.850527][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 164.857171][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.859802][ T5812] usb 7-1: Product: syz [ 164.861258][ T5812] usb 7-1: Manufacturer: syz [ 164.862909][ T5812] usb 7-1: SerialNumber: syz [ 164.876035][T12022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.879318][T12055] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 164.892548][T12022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.896612][T12022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.899898][T12022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.903719][T12022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 164.923190][ T5812] usb 7-1: USB2VGA dongle found at address 5 [ 164.934017][ T5812] usb 7-1: Allocated 8 output buffers [ 164.937335][ T5812] usb 7-1: Not attached to USB 2.0 hub, deferring init [ 164.979909][T12057] macvlan51: entered allmulticast mode [ 165.001728][T12057] 8021q: adding VLAN 0 to HW filter on device macvlan51 [ 165.117640][T12063] bond1 (unregistering): Released all slaves [ 165.124902][T12019] usb 7-1: Device not attached to USB 2.0 hub [ 165.212686][T12021] bridge_slave_0: invalid flags given to default FDB implementation [ 165.261914][ T5812] usb 7-1: USB disconnect, device number 5 [ 165.432340][T12085] xt_hashlimit: size too large, truncated to 1048576 [ 165.496739][T12091] bridge_slave_0: left allmulticast mode [ 165.499222][T12091] bridge_slave_0: left promiscuous mode [ 165.502508][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.515685][T12091] bridge_slave_1: left allmulticast mode [ 165.518043][T12091] bridge_slave_1: left promiscuous mode [ 165.519882][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.529820][T12091] bond0: (slave bond_slave_0): Releasing backup interface [ 165.540613][T12091] bond0: (slave bond_slave_1): Releasing backup interface [ 165.556774][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.560031][T12091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.567827][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.576810][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.582556][T12091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.589692][T12095] Cannot find set identified by id 0 to match [ 166.361280][T12111] __nla_validate_parse: 5 callbacks suppressed [ 166.361296][T12111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1536'. [ 166.364017][T12116] FAULT_INJECTION: forcing a failure. [ 166.364017][T12116] name failslab, interval 1, probability 0, space 0, times 0 [ 166.370055][T12111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1536'. [ 166.379702][T12111] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1536'. [ 166.385761][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.2.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.385795][T12116] Tainted: [L]=SOFTLOCKUP [ 166.385802][T12116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.385811][T12116] Call Trace: [ 166.385817][T12116] [ 166.385824][T12116] dump_stack_lvl+0x100/0x190 [ 166.385856][T12116] should_fail_ex.cold+0x5/0xa [ 166.385877][T12116] should_failslab+0xc2/0x120 [ 166.385901][T12116] __kmalloc_noprof+0xfc/0x820 [ 166.386035][T12116] ? __pfx_dynamic_dname+0x10/0x10 [ 166.386058][T12116] ? tomoyo_encode2+0xfb/0x3c0 [ 166.386090][T12116] tomoyo_encode2+0xfb/0x3c0 [ 166.386120][T12116] tomoyo_encode+0x29/0x50 [ 166.386145][T12116] tomoyo_realpath_from_path+0x18c/0x690 [ 166.386186][T12116] tomoyo_path_number_perm+0x23c/0x580 [ 166.386209][T12116] ? tomoyo_path_number_perm+0x22e/0x580 [ 166.386233][T12116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.386281][T12116] ? find_held_lock+0x2b/0x80 [ 166.386301][T12116] ? hook_file_ioctl_common+0x140/0x440 [ 166.386326][T12116] ? __fget_files+0x21f/0x3d0 [ 166.386355][T12116] security_file_ioctl+0xd3/0x230 [ 166.386382][T12116] __x64_sys_ioctl+0xb7/0x210 [ 166.386405][T12116] do_syscall_64+0x123/0x790 [ 166.386426][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.386445][T12116] RIP: 0033:0x7fea4799e159 [ 166.386461][T12116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.386478][T12116] RSP: 002b:00007fea488d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.386496][T12116] RAX: ffffffffffffffda RBX: 00007fea47c25fa0 RCX: 00007fea4799e159 [ 166.386507][T12116] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 166.386520][T12116] RBP: 00007fea488d8090 R08: 0000000000000000 R09: 0000000000000000 [ 166.386531][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.386542][T12116] R13: 00007fea47c26038 R14: 00007fea47c25fa0 R15: 00007ffe437433b8 [ 166.386571][T12116] [ 166.386591][T12116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.493265][T12129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1536'. [ 166.500975][T12130] netlink: 604 bytes leftover after parsing attributes in process `syz.0.1536'. [ 166.501553][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 166.521153][T12127] macvlan52: entered allmulticast mode [ 166.532951][T12127] 8021q: adding VLAN 0 to HW filter on device macvlan52 [ 166.603822][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1544'. [ 166.612776][T12142] macvlan53: entered allmulticast mode [ 166.624118][T12142] 8021q: adding VLAN 0 to HW filter on device macvlan53 [ 166.673046][T12137] tipc: Enabling of bearer rejected, failed to enable media [ 166.770196][T12144] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 167.324332][T12180] ubi0: attaching mtd0 [ 167.360508][T12180] ubi0: scanning is finished [ 167.364231][T12180] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 167.378694][T12186] devpts: Bad value for 'max' [ 167.402605][T12182] 8021q: adding VLAN 0 to HW filter on device bond13 [ 167.409225][T12186] devpts: Bad value for 'max' [ 167.428982][T12187] 8021q: adding VLAN 0 to HW filter on device bond14 [ 167.434555][T12187] bond13: (slave bond14): Enslaving as an active interface with an up link [ 167.476684][T12182] bond13 (unregistering): (slave bond14): Releasing backup interface [ 167.484313][T12182] bond13 (unregistering): Released all slaves [ 167.648330][T12180] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 167.653339][T12188] ubi0: attaching mtd0 [ 167.657559][T12188] ubi0: scanning is finished [ 167.659574][T12188] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 167.778799][T12188] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 168.009067][T12213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1554'. [ 168.071530][T12222] FAULT_INJECTION: forcing a failure. [ 168.071530][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.077490][T12222] CPU: 3 UID: 0 PID: 12222 Comm: syz.4.1558 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.077510][T12222] Tainted: [L]=SOFTLOCKUP [ 168.077514][T12222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.077521][T12222] Call Trace: [ 168.077527][T12222] [ 168.077533][T12222] dump_stack_lvl+0x100/0x190 [ 168.077563][T12222] should_fail_ex.cold+0x5/0xa [ 168.077588][T12222] _copy_from_user+0x2e/0xd0 [ 168.077614][T12222] get_user_ifreq+0xe7/0x250 [ 168.077631][T12222] sock_ioctl+0x467/0x6b0 [ 168.077660][T12222] ? __pfx_sock_ioctl+0x10/0x10 [ 168.077689][T12222] ? selinux_file_ioctl+0x13b/0x290 [ 168.077711][T12222] ? selinux_file_ioctl+0xb6/0x290 [ 168.077737][T12222] ? __pfx_sock_ioctl+0x10/0x10 [ 168.077760][T12222] __x64_sys_ioctl+0x18e/0x210 [ 168.077784][T12222] do_syscall_64+0x123/0x790 [ 168.077802][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.077820][T12222] RIP: 0033:0x7f6128f9e159 [ 168.077835][T12222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.077851][T12222] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.077870][T12222] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 168.077880][T12222] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 168.077887][T12222] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 168.077896][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.077906][T12222] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 168.077930][T12222] [ 168.143104][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 168.173976][T12227] macvlan54: entered allmulticast mode [ 168.194873][T12227] 8021q: adding VLAN 0 to HW filter on device macvlan54 [ 168.239412][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1562'. [ 168.306927][T12241] syz.0.1563 uses obsolete (PF_INET,SOCK_PACKET) [ 168.366601][T12246] macvlan55: entered allmulticast mode [ 168.379602][T12246] 8021q: adding VLAN 0 to HW filter on device macvlan55 [ 169.269773][T12286] 8021q: adding VLAN 0 to HW filter on device bond13 [ 169.319269][T12286] 8021q: adding VLAN 0 to HW filter on device bond15 [ 169.322366][T12286] bond13: (slave bond15): Enslaving as an active interface with an up link [ 169.350012][T12286] bond13 (unregistering): (slave bond15): Releasing backup interface [ 169.355614][T12286] bond13 (unregistering): Released all slaves [ 169.358376][ T42] kauditd_printk_skb: 381 callbacks suppressed [ 169.358390][ T42] audit: type=1400 audit(1787927808.695:7459): avc: denied { bpf } for pid=12300 comm="syz.0.1573" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.359549][ T42] audit: type=1400 audit(1787927808.695:7460): avc: denied { ioctl } for pid=12283 comm="syz.5.1570" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.367699][ T42] audit: type=1400 audit(1787927808.705:7461): avc: denied { read } for pid=12300 comm="syz.0.1573" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.367745][ T42] audit: type=1400 audit(1787927808.705:7462): avc: denied { open } for pid=12300 comm="syz.0.1573" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.371256][ T42] audit: type=1400 audit(1787927808.705:7463): avc: denied { ioctl } for pid=12300 comm="syz.0.1573" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.443267][ T42] audit: type=1400 audit(1787927808.775:7464): avc: denied { read } for pid=12304 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.459116][ T42] audit: type=1400 audit(1787927808.785:7465): avc: denied { read open } for pid=12304 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.469480][ T42] audit: type=1400 audit(1787927808.785:7466): avc: denied { getattr } for pid=12304 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.486917][ T42] audit: type=1400 audit(1787927808.825:7467): avc: denied { search } for pid=12304 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.505187][ T42] audit: type=1400 audit(1787927808.825:7469): avc: denied { search } for pid=12304 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.552743][T12313] FAULT_INJECTION: forcing a failure. [ 169.552743][T12313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.556959][T12313] CPU: 0 UID: 0 PID: 12313 Comm: syz.4.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.556977][T12313] Tainted: [L]=SOFTLOCKUP [ 169.556981][T12313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.556987][T12313] Call Trace: [ 169.556991][T12313] [ 169.556995][T12313] dump_stack_lvl+0x100/0x190 [ 169.557014][T12313] should_fail_ex.cold+0x5/0xa [ 169.557029][T12313] _copy_from_user+0x2e/0xd0 [ 169.557046][T12313] br_dev_read_uargs+0x141/0x3d0 [ 169.557059][T12313] ? do_syscall_64+0x123/0x790 [ 169.557073][T12313] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 169.557089][T12313] br_dev_siocdevprivate+0xeb/0x1660 [ 169.557103][T12313] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 169.557119][T12313] ? __lock_acquire+0x4c5/0x1ec0 [ 169.557136][T12313] ? avc_has_extended_perms+0x484/0x1080 [ 169.557153][T12313] ? lock_acquire+0x1b9/0x370 [ 169.557173][T12313] ? netdev_name_node_lookup+0x107/0x150 [ 169.557190][T12313] dev_ifsioc+0xc7a/0x1fc0 [ 169.557202][T12313] ? __pfx_dev_ifsioc+0x10/0x10 [ 169.557212][T12313] ? __pfx___mutex_lock+0x10/0x10 [ 169.557228][T12313] ? dev_load+0x8e/0x240 [ 169.557237][T12313] ? dev_load+0x8e/0x240 [ 169.557250][T12313] dev_ioctl+0x70e/0x10e0 [ 169.557261][T12313] sock_ioctl+0x494/0x6b0 [ 169.557276][T12313] ? __pfx_sock_ioctl+0x10/0x10 [ 169.557294][T12313] ? selinux_file_ioctl+0x13b/0x290 [ 169.557309][T12313] ? selinux_file_ioctl+0xb6/0x290 [ 169.557326][T12313] ? __pfx_sock_ioctl+0x10/0x10 [ 169.557340][T12313] __x64_sys_ioctl+0x18e/0x210 [ 169.557355][T12313] do_syscall_64+0x123/0x790 [ 169.557368][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.557379][T12313] RIP: 0033:0x7f6128f9e159 [ 169.557389][T12313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.557398][T12313] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.557409][T12313] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 169.557416][T12313] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 169.557422][T12313] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 169.557428][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.557434][T12313] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 169.557447][T12313] [ 169.661324][T12318] macvlan56: entered allmulticast mode [ 169.682910][T12318] 8021q: adding VLAN 0 to HW filter on device macvlan56 [ 169.832604][T12337] binder: BINDER_SET_CONTEXT_MGR already set [ 169.847384][T12337] binder: 12333:12337 ioctl 4018620d 200000004a80 returned -16 [ 169.978637][T12356] macvlan57: entered allmulticast mode [ 169.991833][T12356] 8021q: adding VLAN 0 to HW filter on device macvlan57 [ 171.416077][T12410] binder: 12409:12410 ioctl c0306201 200000000680 returned -14 [ 171.486379][T12419] __nla_validate_parse: 5 callbacks suppressed [ 171.486398][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 171.561543][T12429] Cannot find set identified by id 0 to match [ 171.561993][T12428] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 171.618380][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1598'. [ 171.623283][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1598'. [ 171.629233][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1598'. [ 171.634760][T12435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1598'. [ 171.847601][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 171.859524][T12468] macvlan58: entered allmulticast mode [ 171.873841][T12468] 8021q: adding VLAN 0 to HW filter on device macvlan58 [ 171.897881][T12473] 9pnet_virtio: no channels available for device 127.0.0.1 [ 172.802574][T12516] binder: 12515:12516 ioctl c0306201 200000000680 returned -14 [ 172.881114][T12525] netlink: 'syz.4.1617': attribute type 2 has an invalid length. [ 172.925053][T12528] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 172.934303][T12528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1616'. [ 172.941131][T12528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1616'. [ 172.957847][T12520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 172.960625][T12520] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.964777][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1618'. [ 172.970138][T12520] vhci_hcd vhci_hcd.0: Device attached [ 172.982413][T12535] vhci_hcd: connection closed [ 172.984080][ T5805] vhci_hcd vhci_hcd.2: stop threads [ 172.984343][T12531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12531 comm=syz.5.1618 [ 172.991082][ T5805] vhci_hcd vhci_hcd.2: release socket [ 172.998348][ T5805] vhci_hcd vhci_hcd.2: disconnect device [ 173.186383][T12542] XFS (nbd4): SB validate failed with error -5. [ 173.340822][T12563] FAULT_INJECTION: forcing a failure. [ 173.340822][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 173.346524][T12563] CPU: 0 UID: 0 PID: 12563 Comm: syz.5.1625 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.346560][T12563] Tainted: [L]=SOFTLOCKUP [ 173.346566][T12563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.346581][T12563] Call Trace: [ 173.346589][T12563] [ 173.346596][T12563] dump_stack_lvl+0x100/0x190 [ 173.346634][T12563] should_fail_ex.cold+0x5/0xa [ 173.346667][T12563] should_failslab+0xc2/0x120 [ 173.346703][T12563] __kmalloc_noprof+0xfc/0x820 [ 173.346756][T12563] ? lockdep_init_map_type+0x5c/0x250 [ 173.346792][T12563] ? __list_lru_init+0xd9/0x4b0 [ 173.346826][T12563] __list_lru_init+0xd9/0x4b0 [ 173.346855][T12563] sget_fc+0xac6/0x1f20 [ 173.346888][T12563] ? __pfx_super_s_dev_test+0x10/0x10 [ 173.346913][T12563] ? __pfx_super_s_dev_set+0x10/0x10 [ 173.346935][T12563] ? __pfx_sget_fc+0x10/0x10 [ 173.346953][T12563] ? mntput+0x70/0xa0 [ 173.346980][T12563] ? lookup_bdev+0x16b/0x2a0 [ 173.347000][T12563] ? __pfx_lookup_bdev+0x10/0x10 [ 173.347019][T12563] ? cred_has_capability.isra.0+0x186/0x300 [ 173.347043][T12563] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 173.347068][T12563] get_tree_bdev_flags+0x1ba/0x620 [ 173.347085][T12563] ? __pfx_msdos_fill_super+0x10/0x10 [ 173.347103][T12563] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 173.347121][T12563] ? cap_capable+0x107/0x430 [ 173.347140][T12563] ? bpf_lsm_capable+0x9/0x10 [ 173.347156][T12563] ? security_capable+0x80/0x260 [ 173.347174][T12563] vfs_get_tree+0x92/0x320 [ 173.347190][T12563] path_mount+0x7d0/0x24c0 [ 173.347208][T12563] ? __pfx_path_mount+0x10/0x10 [ 173.347222][T12563] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.347239][T12563] ? putname+0xb1/0x110 [ 173.347251][T12563] ? kmem_cache_free+0x127/0x6b0 [ 173.347273][T12563] ? __x64_sys_mount+0x293/0x310 [ 173.347288][T12563] __x64_sys_mount+0x293/0x310 [ 173.347304][T12563] ? __pfx___x64_sys_mount+0x10/0x10 [ 173.347324][T12563] do_syscall_64+0x123/0x790 [ 173.347341][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.347356][T12563] RIP: 0033:0x7fc0b859e159 [ 173.347370][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.347383][T12563] RSP: 002b:00007fc0b9476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.347397][T12563] RAX: ffffffffffffffda RBX: 00007fc0b8825fa0 RCX: 00007fc0b859e159 [ 173.347406][T12563] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 173.347414][T12563] RBP: 00007fc0b9476090 R08: 0000000000000000 R09: 0000000000000000 [ 173.347422][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.347430][T12563] R13: 00007fc0b8826038 R14: 00007fc0b8825fa0 R15: 00007ffd3fcaa7e8 [ 173.347448][T12563] [ 173.549534][T12576] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 173.552964][T12576] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 173.603561][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 173.611994][T12582] macvlan59: entered allmulticast mode [ 173.619139][T12582] 8021q: adding VLAN 0 to HW filter on device macvlan59 [ 173.735351][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 173.886186][ T34] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 173.890432][ T34] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 173.894916][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.903795][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.908615][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.913090][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.917460][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.921969][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.926221][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.930525][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.935805][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.939944][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.943756][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.948803][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.953366][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.957850][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.962675][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.967951][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.972530][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.977885][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.986763][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.990600][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.995733][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 173.999916][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.004235][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.009324][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 174.014250][ T34] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.018106][ T34] usb 10-1: Product: syz [ 174.019874][ T34] usb 10-1: Manufacturer: syz [ 174.021552][ T34] usb 10-1: SerialNumber: syz [ 174.026174][ T34] usb 10-1: config 0 descriptor?? [ 174.032351][ T34] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 174.247229][ T34] usb 10-1: USB disconnect, device number 2 [ 174.276040][ T34] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 174.413452][ T42] kauditd_printk_skb: 401 callbacks suppressed [ 174.413472][ T42] audit: type=1400 audit(1787927813.745:7870): avc: denied { create } for pid=12605 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.434703][ T42] audit: type=1400 audit(1787927813.765:7871): avc: denied { write } for pid=12605 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.441988][T12606] netlink: 'syz.2.1635': attribute type 2 has an invalid length. [ 174.444689][ T42] audit: type=1400 audit(1787927813.765:7872): avc: denied { read } for pid=12605 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.486548][ T42] audit: type=1400 audit(1787927813.825:7873): avc: denied { read } for pid=12609 comm="syz.2.1637" dev="nsfs" ino=4026533031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.498008][ T42] audit: type=1400 audit(1787927813.825:7874): avc: denied { search } for pid=5441 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.508046][ T42] audit: type=1400 audit(1787927813.825:7875): avc: denied { search } for pid=5441 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.509468][T12608] overlayfs: failed to resolve 'audit': -2 [ 174.518725][ T42] audit: type=1400 audit(1787927813.825:7876): avc: denied { search } for pid=5441 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.536980][T12608] cgroup2: Unknown parameter 'trans' [ 174.544955][ T42] audit: type=1400 audit(1787927813.825:7877): avc: denied { open } for pid=12609 comm="syz.2.1637" path="net:[4026533031]" dev="nsfs" ino=4026533031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.562691][ T42] audit: type=1400 audit(1787927813.835:7878): avc: denied { read write } for pid=12607 comm="syz.0.1636" name="vbi2" dev="devtmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 174.583765][ T42] audit: type=1400 audit(1787927813.835:7879): avc: denied { open } for pid=12607 comm="syz.0.1636" path="/dev/vbi2" dev="devtmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 174.657722][T12624] Cannot find del_set index 0 as target [ 174.687574][T12628] FAULT_INJECTION: forcing a failure. [ 174.687574][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 174.691923][T12628] CPU: 0 UID: 0 PID: 12628 Comm: syz.4.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.691943][T12628] Tainted: [L]=SOFTLOCKUP [ 174.691947][T12628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.691954][T12628] Call Trace: [ 174.691961][T12628] [ 174.691967][T12628] dump_stack_lvl+0x100/0x190 [ 174.691991][T12628] should_fail_ex.cold+0x5/0xa [ 174.692009][T12628] should_failslab+0xc2/0x120 [ 174.692027][T12628] __kmalloc_cache_noprof+0x91/0x6b0 [ 174.692043][T12628] ? sget_fc+0xb15/0x1f20 [ 174.692060][T12628] sget_fc+0xb15/0x1f20 [ 174.692075][T12628] ? __pfx_super_s_dev_test+0x10/0x10 [ 174.692088][T12628] ? __pfx_super_s_dev_set+0x10/0x10 [ 174.692100][T12628] ? __pfx_sget_fc+0x10/0x10 [ 174.692112][T12628] ? mntput+0x70/0xa0 [ 174.692128][T12628] ? lookup_bdev+0x16b/0x2a0 [ 174.692145][T12628] ? __pfx_lookup_bdev+0x10/0x10 [ 174.692160][T12628] ? cred_has_capability.isra.0+0x186/0x300 [ 174.692183][T12628] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 174.692203][T12628] get_tree_bdev_flags+0x1ba/0x620 [ 174.692217][T12628] ? __pfx_msdos_fill_super+0x10/0x10 [ 174.692232][T12628] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 174.692246][T12628] ? cap_capable+0x107/0x430 [ 174.692261][T12628] ? bpf_lsm_capable+0x9/0x10 [ 174.692275][T12628] ? security_capable+0x80/0x260 [ 174.692438][T12628] vfs_get_tree+0x92/0x320 [ 174.692458][T12628] path_mount+0x7d0/0x24c0 [ 174.692473][T12628] ? __pfx_path_mount+0x10/0x10 [ 174.692484][T12628] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.692499][T12628] ? putname+0xb1/0x110 [ 174.692509][T12628] ? kmem_cache_free+0x127/0x6b0 [ 174.692526][T12628] ? __x64_sys_mount+0x293/0x310 [ 174.692537][T12628] __x64_sys_mount+0x293/0x310 [ 174.692550][T12628] ? __pfx___x64_sys_mount+0x10/0x10 [ 174.692566][T12628] do_syscall_64+0x123/0x790 [ 174.692580][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.692592][T12628] RIP: 0033:0x7f6128f9e159 [ 174.692604][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.692615][T12628] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.692627][T12628] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 174.692635][T12628] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 174.692641][T12628] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 174.692648][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.692654][T12628] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 174.692668][T12628] [ 174.846855][T12644] macvlan60: entered allmulticast mode [ 174.859660][T12644] 8021q: adding VLAN 0 to HW filter on device macvlan60 [ 175.026978][T12659] pci_bus 0000:01: busn_res: [bus 01] is released [ 175.335389][T12684] Cannot find del_set index 0 as target [ 175.435588][T12695] FAULT_INJECTION: forcing a failure. [ 175.435588][T12695] name failslab, interval 1, probability 0, space 0, times 0 [ 175.441803][T12695] CPU: 3 UID: 0 PID: 12695 Comm: syz.0.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.441832][T12695] Tainted: [L]=SOFTLOCKUP [ 175.441838][T12695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.441849][T12695] Call Trace: [ 175.441854][T12695] [ 175.441861][T12695] dump_stack_lvl+0x100/0x190 [ 175.441892][T12695] should_fail_ex.cold+0x5/0xa [ 175.441943][T12695] should_failslab+0xc2/0x120 [ 175.441971][T12695] __kmalloc_cache_noprof+0x91/0x6b0 [ 175.441995][T12695] ? sget_fc+0xb15/0x1f20 [ 175.442020][T12695] sget_fc+0xb15/0x1f20 [ 175.442057][T12695] ? __pfx_super_s_dev_test+0x10/0x10 [ 175.442078][T12695] ? __pfx_super_s_dev_set+0x10/0x10 [ 175.442098][T12695] ? __pfx_sget_fc+0x10/0x10 [ 175.442116][T12695] ? mntput+0x70/0xa0 [ 175.442140][T12695] ? lookup_bdev+0x16b/0x2a0 [ 175.442164][T12695] ? __pfx_lookup_bdev+0x10/0x10 [ 175.442186][T12695] ? cred_has_capability.isra.0+0x186/0x300 [ 175.442215][T12695] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 175.442246][T12695] get_tree_bdev_flags+0x1ba/0x620 [ 175.442267][T12695] ? __pfx_msdos_fill_super+0x10/0x10 [ 175.442289][T12695] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 175.442311][T12695] ? cap_capable+0x107/0x430 [ 175.442335][T12695] ? bpf_lsm_capable+0x9/0x10 [ 175.442355][T12695] ? security_capable+0x80/0x260 [ 175.442375][T12695] vfs_get_tree+0x92/0x320 [ 175.442390][T12695] path_mount+0x7d0/0x24c0 [ 175.442413][T12695] ? __pfx_path_mount+0x10/0x10 [ 175.442432][T12695] ? lockdep_hardirqs_on+0x7d/0x110 [ 175.442454][T12695] ? putname+0xb1/0x110 [ 175.442469][T12695] ? kmem_cache_free+0x127/0x6b0 [ 175.442496][T12695] ? __x64_sys_mount+0x293/0x310 [ 175.442513][T12695] __x64_sys_mount+0x293/0x310 [ 175.442531][T12695] ? __pfx___x64_sys_mount+0x10/0x10 [ 175.442557][T12695] do_syscall_64+0x123/0x790 [ 175.442580][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.442599][T12695] RIP: 0033:0x7f475e39e159 [ 175.442616][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.442632][T12695] RSP: 002b:00007f475f310028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.442650][T12695] RAX: ffffffffffffffda RBX: 00007f475e625fa0 RCX: 00007f475e39e159 [ 175.442661][T12695] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 175.442677][T12695] RBP: 00007f475f310090 R08: 0000000000000000 R09: 0000000000000000 [ 175.442689][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.442698][T12695] R13: 00007f475e626038 R14: 00007f475e625fa0 R15: 00007fff043810d8 [ 175.442723][T12695] [ 175.666598][T12709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.749171][T12719] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 175.769703][T12719] 8021q: adding VLAN 0 to HW filter on device bond14 [ 175.789817][T12719] bond15: entered promiscuous mode [ 175.793218][T12719] 8021q: adding VLAN 0 to HW filter on device bond15 [ 175.801399][T12719] bond14: (slave bond15): Enslaving as an active interface with a down link [ 175.817377][T12719] bond14: (slave ip6erspan0): making interface the new active one [ 175.821443][T12719] ip6erspan0: entered promiscuous mode [ 175.824697][T12719] bond14: (slave ip6erspan0): Enslaving as an active interface with an up link [ 175.935955][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 175.936153][ T5730] Bluetooth: hci1: command 0x0406 tx timeout [ 176.069675][T12749] Cannot find del_set index 0 as target [ 176.204825][T12757] macvlan61: entered allmulticast mode [ 176.240375][T12757] 8021q: adding VLAN 0 to HW filter on device macvlan61 [ 176.468417][T12772] FAULT_INJECTION: forcing a failure. [ 176.468417][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 176.473339][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.2.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.473358][T12772] Tainted: [L]=SOFTLOCKUP [ 176.473369][T12772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.473376][T12772] Call Trace: [ 176.473380][T12772] [ 176.473385][T12772] dump_stack_lvl+0x100/0x190 [ 176.473406][T12772] should_fail_ex.cold+0x5/0xa [ 176.473422][T12772] should_failslab+0xc2/0x120 [ 176.473440][T12772] kmem_cache_alloc_noprof+0x91/0x6a0 [ 176.473455][T12772] ? d_instantiate+0x8a/0xb0 [ 176.473467][T12772] ? d_instantiate+0x8a/0xb0 [ 176.473478][T12772] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 176.473493][T12772] alloc_empty_file_noaccount+0x2b/0xd0 [ 176.473506][T12772] alloc_file_pseudo_noaccount+0x183/0x290 [ 176.473523][T12772] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 176.473549][T12772] ? iput+0x3a/0x40 [ 176.473568][T12772] bdev_file_open_by_dev+0x13a/0x210 [ 176.473590][T12772] setup_bdev_super+0x78/0x770 [ 176.473613][T12772] get_tree_bdev_flags+0x363/0x620 [ 176.473633][T12772] ? __pfx_msdos_fill_super+0x10/0x10 [ 176.473651][T12772] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 176.473665][T12772] ? cap_capable+0x107/0x430 [ 176.473681][T12772] ? bpf_lsm_capable+0x9/0x10 [ 176.473693][T12772] ? security_capable+0x80/0x260 [ 176.473708][T12772] vfs_get_tree+0x92/0x320 [ 176.473722][T12772] path_mount+0x7d0/0x24c0 [ 176.473737][T12772] ? __pfx_path_mount+0x10/0x10 [ 176.473749][T12772] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.473762][T12772] ? putname+0xb1/0x110 [ 176.473771][T12772] ? kmem_cache_free+0x127/0x6b0 [ 176.473789][T12772] ? __x64_sys_mount+0x293/0x310 [ 176.473800][T12772] __x64_sys_mount+0x293/0x310 [ 176.473813][T12772] ? __pfx___x64_sys_mount+0x10/0x10 [ 176.473829][T12772] do_syscall_64+0x123/0x790 [ 176.473842][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.473854][T12772] RIP: 0033:0x7fea4799e159 [ 176.473865][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.473875][T12772] RSP: 002b:00007fea488d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.473887][T12772] RAX: ffffffffffffffda RBX: 00007fea47c25fa0 RCX: 00007fea4799e159 [ 176.473919][T12772] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 176.473927][T12772] RBP: 00007fea488d8090 R08: 0000000000000000 R09: 0000000000000000 [ 176.473934][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.473940][T12772] R13: 00007fea47c26038 R14: 00007fea47c25fa0 R15: 00007ffe437433b8 [ 176.473955][T12772] [ 176.474040][T12772] ./dev/mtdblock0: Can't open blockdev [ 176.641845][T12783] __nla_validate_parse: 7 callbacks suppressed [ 176.641862][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 176.656466][T12783] macvlan62: entered allmulticast mode [ 176.671978][T12783] 8021q: adding VLAN 0 to HW filter on device macvlan62 [ 176.787923][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.791850][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.866043][T12796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.977148][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 177.001659][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.019127][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.027927][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.032356][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.036777][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.043773][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.052437][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.056670][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.060524][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.070044][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.076592][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 177.345495][ T9] usb 7-1: device descriptor read/64, error -71 [ 177.811718][T12845] FAULT_INJECTION: forcing a failure. [ 177.811718][T12845] name failslab, interval 1, probability 0, space 0, times 0 [ 177.815376][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 177.816610][T12845] CPU: 1 UID: 0 PID: 12845 Comm: syz.0.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.816642][T12845] Tainted: [L]=SOFTLOCKUP [ 177.816648][T12845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.816660][T12845] Call Trace: [ 177.816669][T12845] [ 177.816677][T12845] dump_stack_lvl+0x100/0x190 [ 177.816715][T12845] should_fail_ex.cold+0x5/0xa [ 177.816740][T12845] ? __pfx_setup+0x10/0x10 [ 177.816761][T12845] should_failslab+0xc2/0x120 [ 177.816795][T12845] ? __pfx_setup+0x10/0x10 [ 177.816813][T12845] __kmalloc_cache_noprof+0x91/0x6b0 [ 177.816836][T12845] ? fat_fill_super+0x197/0x3ab0 [ 177.816866][T12845] ? __pfx_setup+0x10/0x10 [ 177.816884][T12845] fat_fill_super+0x197/0x3ab0 [ 177.816912][T12845] ? __pfx_vsnprintf+0x10/0x10 [ 177.816936][T12845] ? __pfx_fat_fill_super+0x10/0x10 [ 177.816964][T12845] ? __pfx_snprintf+0x10/0x10 [ 177.816983][T12845] ? find_held_lock+0x2b/0x80 [ 177.817004][T12845] ? setup_bdev_super+0x4b6/0x770 [ 177.817031][T12845] ? sb_set_blocksize+0x1f6/0x290 [ 177.817060][T12845] ? setup_bdev_super+0x4e8/0x770 [ 177.817080][T12845] get_tree_bdev_flags+0x38c/0x620 [ 177.817103][T12845] ? __pfx_msdos_fill_super+0x10/0x10 [ 177.817124][T12845] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 177.817147][T12845] ? cap_capable+0x107/0x430 [ 177.817172][T12845] ? bpf_lsm_capable+0x9/0x10 [ 177.817193][T12845] ? security_capable+0x80/0x260 [ 177.817217][T12845] vfs_get_tree+0x92/0x320 [ 177.817238][T12845] path_mount+0x7d0/0x24c0 [ 177.817264][T12845] ? __pfx_path_mount+0x10/0x10 [ 177.817284][T12845] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.817304][T12845] ? putname+0xb1/0x110 [ 177.817320][T12845] ? kmem_cache_free+0x127/0x6b0 [ 177.817344][T12845] ? __x64_sys_mount+0x293/0x310 [ 177.817361][T12845] __x64_sys_mount+0x293/0x310 [ 177.817377][T12845] ? __pfx___x64_sys_mount+0x10/0x10 [ 177.817401][T12845] do_syscall_64+0x123/0x790 [ 177.817442][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.817463][T12845] RIP: 0033:0x7f475e39e159 [ 177.817480][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.817498][T12845] RSP: 002b:00007f475f310028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.817517][T12845] RAX: ffffffffffffffda RBX: 00007f475e625fa0 RCX: 00007f475e39e159 [ 177.817529][T12845] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 177.817541][T12845] RBP: 00007f475f310090 R08: 0000000000000000 R09: 0000000000000000 [ 177.817551][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.817562][T12845] R13: 00007f475e626038 R14: 00007f475e625fa0 R15: 00007fff043810d8 [ 177.817588][T12845] [ 177.982660][T12855] macvlan63: entered allmulticast mode [ 177.993531][T12855] 8021q: adding VLAN 0 to HW filter on device macvlan63 [ 178.132187][T12861] MTDSB: Device #1 doesn't appear to exist [ 178.132187][T12861] [ 178.196026][T12866] macvlan64: entered allmulticast mode [ 178.209244][T12866] 8021q: adding VLAN 0 to HW filter on device macvlan64 [ 178.335986][T12875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.224366][T12913] fuse: Unknown parameter 'g“oup_id' [ 179.369325][T12929] FAULT_INJECTION: forcing a failure. [ 179.369325][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 179.374879][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.4.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.374906][T12929] Tainted: [L]=SOFTLOCKUP [ 179.374912][T12929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.374922][T12929] Call Trace: [ 179.374933][T12929] [ 179.374940][T12929] dump_stack_lvl+0x100/0x190 [ 179.374970][T12929] should_fail_ex.cold+0x5/0xa [ 179.374993][T12929] ? __pfx_setup+0x10/0x10 [ 179.375011][T12929] should_failslab+0xc2/0x120 [ 179.375036][T12929] ? __pfx_setup+0x10/0x10 [ 179.375052][T12929] __kmalloc_cache_noprof+0x91/0x6b0 [ 179.375073][T12929] ? fat_fill_super+0x197/0x3ab0 [ 179.375100][T12929] ? __pfx_setup+0x10/0x10 [ 179.375117][T12929] fat_fill_super+0x197/0x3ab0 [ 179.375142][T12929] ? __pfx_vsnprintf+0x10/0x10 [ 179.375164][T12929] ? __pfx_fat_fill_super+0x10/0x10 [ 179.375191][T12929] ? __pfx_snprintf+0x10/0x10 [ 179.375209][T12929] ? find_held_lock+0x2b/0x80 [ 179.375247][T12929] ? setup_bdev_super+0x4b6/0x770 [ 179.375271][T12929] ? sb_set_blocksize+0x1f6/0x290 [ 179.375297][T12929] ? setup_bdev_super+0x4e8/0x770 [ 179.375320][T12929] get_tree_bdev_flags+0x38c/0x620 [ 179.375339][T12929] ? __pfx_msdos_fill_super+0x10/0x10 [ 179.375359][T12929] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 179.375496][T12929] ? cap_capable+0x107/0x430 [ 179.375518][T12929] ? bpf_lsm_capable+0x9/0x10 [ 179.375537][T12929] ? security_capable+0x80/0x260 [ 179.375559][T12929] vfs_get_tree+0x92/0x320 [ 179.375577][T12929] path_mount+0x7d0/0x24c0 [ 179.375600][T12929] ? __pfx_path_mount+0x10/0x10 [ 179.375617][T12929] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.375636][T12929] ? putname+0xb1/0x110 [ 179.375650][T12929] ? kmem_cache_free+0x127/0x6b0 [ 179.375676][T12929] ? __x64_sys_mount+0x293/0x310 [ 179.375692][T12929] __x64_sys_mount+0x293/0x310 [ 179.375710][T12929] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.375735][T12929] do_syscall_64+0x123/0x790 [ 179.375754][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.375771][T12929] RIP: 0033:0x7f6128f9e159 [ 179.375786][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.375802][T12929] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.375818][T12929] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 179.375829][T12929] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 179.375839][T12929] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 179.375849][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.375858][T12929] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 179.375880][T12929] [ 179.435505][ T42] kauditd_printk_skb: 422 callbacks suppressed [ 179.435525][ T42] audit: type=1400 audit(1787927818.765:8302): avc: denied { allowed } for pid=12933 comm="syz.5.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.482868][T12937] EXT4-fs: Conflicting test_dummy_encryption options [ 179.492022][ T42] audit: type=1400 audit(1787927818.765:8303): avc: denied { create } for pid=12933 comm="syz.5.1716" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.527029][ T42] audit: type=1400 audit(1787927818.765:8304): avc: denied { map } for pid=12933 comm="syz.5.1716" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.537778][ T42] audit: type=1400 audit(1787927818.765:8305): avc: denied { read write } for pid=12933 comm="syz.5.1716" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.550369][ T42] audit: type=1400 audit(1787927818.795:8306): avc: denied { write } for pid=12932 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.560364][ T42] audit: type=1400 audit(1787927818.795:8307): avc: denied { remove_name } for pid=12932 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=9473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.571154][ T42] audit: type=1400 audit(1787927818.855:8308): avc: denied { unmount } for pid=11283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.581157][ T42] audit: type=1400 audit(1787927818.915:8309): avc: denied { read write } for pid=12938 comm="syz.0.1717" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 179.595426][ T42] audit: type=1400 audit(1787927818.915:8310): avc: denied { open } for pid=12938 comm="syz.0.1717" path="/423/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 179.606094][ T42] audit: type=1400 audit(1787927818.925:8311): avc: denied { create } for pid=12938 comm="syz.0.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.828193][T12957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.858112][T12959] Cannot find set identified by id 0 to match [ 179.926311][T12963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12963 comm=syz.2.1724 [ 179.933978][T12969] macvlan65: entered allmulticast mode [ 179.961670][T12969] 8021q: adding VLAN 0 to HW filter on device macvlan65 [ 180.004564][T12978] netlink: 'syz.4.1728': attribute type 7 has an invalid length. [ 180.012682][T12978] netlink: 'syz.4.1728': attribute type 8 has an invalid length. [ 180.140245][T12988] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 180.200451][T12984] kvm: kvm [12983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 180.206375][T12984] kvm: kvm [12983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 180.433129][T13001] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 180.447580][T13001] rtrs_client L2829: pathname cannot contain / and . [ 180.607787][T13019] FAULT_INJECTION: forcing a failure. [ 180.607787][T13019] name failslab, interval 1, probability 0, space 0, times 0 [ 180.628889][T13019] CPU: 0 UID: 0 PID: 13019 Comm: syz.5.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.628926][T13019] Tainted: [L]=SOFTLOCKUP [ 180.628933][T13019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.628945][T13019] Call Trace: [ 180.628952][T13019] [ 180.628963][T13019] dump_stack_lvl+0x100/0x190 [ 180.628998][T13019] should_fail_ex.cold+0x5/0xa [ 180.629024][T13019] ? __pfx_setup+0x10/0x10 [ 180.629048][T13019] should_failslab+0xc2/0x120 [ 180.629078][T13019] ? __pfx_setup+0x10/0x10 [ 180.629100][T13019] __kmalloc_cache_noprof+0x91/0x6b0 [ 180.629126][T13019] ? fat_fill_super+0x197/0x3ab0 [ 180.629163][T13019] ? __pfx_setup+0x10/0x10 [ 180.629184][T13019] fat_fill_super+0x197/0x3ab0 [ 180.629218][T13019] ? __pfx_vsnprintf+0x10/0x10 [ 180.629248][T13019] ? __pfx_fat_fill_super+0x10/0x10 [ 180.629281][T13019] ? __pfx_snprintf+0x10/0x10 [ 180.629306][T13019] ? find_held_lock+0x2b/0x80 [ 180.629331][T13019] ? setup_bdev_super+0x4b6/0x770 [ 180.629363][T13019] ? sb_set_blocksize+0x1f6/0x290 [ 180.629395][T13019] ? setup_bdev_super+0x4e8/0x770 [ 180.629423][T13019] get_tree_bdev_flags+0x38c/0x620 [ 180.629449][T13019] ? __pfx_msdos_fill_super+0x10/0x10 [ 180.629474][T13019] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 180.629501][T13019] ? cap_capable+0x107/0x430 [ 180.629529][T13019] ? bpf_lsm_capable+0x9/0x10 [ 180.629552][T13019] ? security_capable+0x80/0x260 [ 180.629587][T13019] vfs_get_tree+0x92/0x320 [ 180.629610][T13019] path_mount+0x7d0/0x24c0 [ 180.629638][T13019] ? __pfx_path_mount+0x10/0x10 [ 180.629659][T13019] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.629684][T13019] ? putname+0xb1/0x110 [ 180.629701][T13019] ? kmem_cache_free+0x127/0x6b0 [ 180.629736][T13019] ? __x64_sys_mount+0x293/0x310 [ 180.629756][T13019] __x64_sys_mount+0x293/0x310 [ 180.629779][T13019] ? __pfx___x64_sys_mount+0x10/0x10 [ 180.629810][T13019] do_syscall_64+0x123/0x790 [ 180.629835][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.629856][T13019] RIP: 0033:0x7fc0b859e159 [ 180.629873][T13019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.629937][T13019] RSP: 002b:00007fc0b9476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.629959][T13019] RAX: ffffffffffffffda RBX: 00007fc0b8825fa0 RCX: 00007fc0b859e159 [ 180.629973][T13019] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000300 [ 180.629986][T13019] RBP: 00007fc0b9476090 R08: 0000000000000000 R09: 0000000000000000 [ 180.629999][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.630011][T13019] R13: 00007fc0b8826038 R14: 00007fc0b8825fa0 R15: 00007ffd3fcaa7e8 [ 180.630041][T13019] [ 181.328583][T13054] netlink: 'syz.2.1743': attribute type 7 has an invalid length. [ 181.329555][T13055] Cannot find del_set index 0 as target [ 181.332885][T13054] netlink: 'syz.2.1743': attribute type 8 has an invalid length. [ 181.353655][T13056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.471175][T13073] netlink: 'syz.4.1748': attribute type 2 has an invalid length. [ 181.583667][T13088] macvlan66: entered allmulticast mode [ 181.594214][T13088] 8021q: adding VLAN 0 to HW filter on device macvlan66 [ 181.639880][T13097] ipt_ECN: cannot use operation on non-tcp rule [ 182.004532][T13117] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 182.013298][T13117] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 182.650067][T13142] bridge0: entered promiscuous mode [ 182.652668][T13142] bridge0: entered allmulticast mode [ 182.708801][T13156] bridge1: entered promiscuous mode [ 182.708858][T13156] bridge1: entered allmulticast mode [ 182.775428][ T5740] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 183.040908][T13192] binder: 13186:13192 ioctl c0306201 200000000680 returned -14 [ 183.116864][T13203] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 183.119852][T13203] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 183.205469][T13212] __nla_validate_parse: 73 callbacks suppressed [ 183.205492][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 183.232309][T13212] macvlan67: entered allmulticast mode [ 183.246009][T13212] 8021q: adding VLAN 0 to HW filter on device macvlan67 [ 184.166110][T13262] binder: 13261:13262 ioctl c0306201 200000000680 returned -14 [ 184.365936][T13275] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 184.369342][T13275] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 184.430916][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 184.453496][T13277] macvlan68: entered allmulticast mode [ 184.467910][T13277] 8021q: adding VLAN 0 to HW filter on device macvlan68 [ 184.513197][T13284] binder: BINDER_SET_CONTEXT_MGR already set [ 184.515743][T13284] binder: 13282:13284 ioctl 4018620d 2000000000c0 returned -16 [ 184.521732][T13284] binder_alloc: 13282: pid 13282 spamming oneway? 1 buffers allocated for a total size of 4096 [ 184.535449][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 184.561209][ T42] kauditd_printk_skb: 511 callbacks suppressed [ 184.561227][ T42] audit: type=1400 audit(1787927823.796:8823): avc: denied { read write } for pid=11283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.584754][ T42] audit: type=1400 audit(1787927823.815:8824): avc: denied { open } for pid=11283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.596173][ T42] audit: type=1400 audit(1787927823.815:8825): avc: denied { ioctl } for pid=11283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.613149][ T42] audit: type=1400 audit(1787927823.843:8826): avc: denied { read } for pid=13285 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.622233][ T42] audit: type=1400 audit(1787927823.843:8827): avc: denied { ioctl } for pid=13285 comm="syz.4.1802" path="socket:[40638]" dev="sockfs" ino=40638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.660299][ T42] audit: type=1400 audit(1787927823.880:8828): avc: denied { create } for pid=13287 comm="syz.0.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.663406][T13288] netlink: 'syz.0.1804': attribute type 39 has an invalid length. [ 184.721421][ T42] audit: type=1400 audit(1787927823.946:8829): avc: denied { append } for pid=13287 comm="syz.0.1804" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.737314][ T42] audit: type=1400 audit(1787927823.964:8830): avc: denied { create } for pid=13287 comm="syz.0.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.792208][ T42] audit: type=1400 audit(1787927824.011:8831): avc: denied { write } for pid=13296 comm="syz.5.1807" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 184.806038][ T42] audit: type=1400 audit(1787927824.021:8832): avc: denied { create } for pid=13298 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.845322][T13297] sg_write: data in/out 808464396/251 bytes for SCSI command 0x0-- guessing data in; [ 184.845322][T13297] program syz.5.1807 not setting count and/or reply_len properly [ 184.892225][T13305] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 184.937118][T13309] binder: 13308:13309 ioctl c0306201 200000000680 returned -14 [ 185.034883][T13320] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1814'. [ 185.070308][T13323] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 185.074037][T13323] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 185.077507][T13323] FAULT_INJECTION: forcing a failure. [ 185.077507][T13323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.084144][T13323] CPU: 0 UID: 0 PID: 13323 Comm: syz.4.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.084171][T13323] Tainted: [L]=SOFTLOCKUP [ 185.084176][T13323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.084183][T13323] Call Trace: [ 185.084189][T13323] [ 185.084196][T13323] dump_stack_lvl+0x100/0x190 [ 185.084227][T13323] should_fail_ex.cold+0x5/0xa [ 185.084252][T13323] _copy_to_user+0x32/0xd0 [ 185.084275][T13323] simple_read_from_buffer+0xcb/0x170 [ 185.084299][T13323] proc_fail_nth_read+0x1af/0x230 [ 185.084328][T13323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.084359][T13323] ? rw_verify_area+0xce/0x6d0 [ 185.084378][T13323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.084405][T13323] vfs_read+0x1e4/0xb40 [ 185.084434][T13323] ? __pfx_vfs_read+0x10/0x10 [ 185.084455][T13323] ? find_held_lock+0x2b/0x80 [ 185.084476][T13323] ? __fget_files+0x215/0x3d0 [ 185.084509][T13323] ? __fget_files+0x21f/0x3d0 [ 185.084545][T13323] ksys_read+0x12a/0x250 [ 185.084569][T13323] ? __pfx_ksys_read+0x10/0x10 [ 185.084597][T13323] do_syscall_64+0x123/0x790 [ 185.084625][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.084645][T13323] RIP: 0033:0x7f6128f5e98e [ 185.084663][T13323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.084682][T13323] RSP: 002b:00007f6129e57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.084701][T13323] RAX: ffffffffffffffda RBX: 00007f6129e586c0 RCX: 00007f6128f5e98e [ 185.084711][T13323] RDX: 000000000000000f RSI: 00007f6129e580a0 RDI: 0000000000000004 [ 185.084722][T13323] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 185.084734][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.084745][T13323] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 185.084773][T13323] [ 185.256041][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'. [ 185.509298][T13352] netlink: 'syz.4.1822': attribute type 2 has an invalid length. [ 185.874072][T13371] binder: 13370:13371 ioctl c0306201 200000000680 returned -14 [ 186.246528][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 186.257081][T13393] macvlan69: entered allmulticast mode [ 186.262104][T13393] 8021q: adding VLAN 0 to HW filter on device macvlan69 [ 186.666178][T13415] netlink: 'syz.4.1836': attribute type 2 has an invalid length. [ 186.777718][ T41] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 186.865951][T13432] 8021q: adding VLAN 0 to HW filter on device bond13 [ 186.892370][T13432] 8021q: adding VLAN 0 to HW filter on device bond16 [ 186.895987][T13432] bond13: (slave bond16): Enslaving as an active interface with an up link [ 186.912667][T13432] bond13 (unregistering): (slave bond16): Releasing backup interface [ 186.926310][T13432] bond13 (unregistering): Released all slaves [ 186.939259][ T41] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 186.945554][ T41] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 186.954636][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.958546][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.963049][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 186.976773][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.980124][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.993566][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.010212][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.014127][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.025688][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.032858][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.042328][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.047519][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.054973][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.062687][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.068093][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.072469][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.076392][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.078292][T13455] binder: 13454:13455 ioctl c0306201 200000000680 returned -14 [ 187.083171][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.090918][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.095106][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.099311][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.102687][ T41] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.106083][ T41] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.110600][ T41] usb 10-1: config 0 interface 0 has no altsetting 0 [ 187.114941][ T41] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.118712][ T41] usb 10-1: Product: syz [ 187.120682][ T41] usb 10-1: Manufacturer: syz [ 187.122753][ T41] usb 10-1: SerialNumber: syz [ 187.129143][ T41] usb 10-1: config 0 descriptor?? [ 187.138821][ T41] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.249133][T13467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1844'. [ 187.253240][T13467] netlink: 'syz.2.1844': attribute type 7 has an invalid length. [ 187.256432][T13467] netlink: 'syz.2.1844': attribute type 8 has an invalid length. [ 187.261358][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 187.451405][ T5805] ip6erspan0: left promiscuous mode [ 187.467547][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.499489][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.609290][T13496] netlink: 'syz.2.1848': attribute type 2 has an invalid length. [ 187.616442][ T5833] usb 10-1: USB disconnect, device number 3 [ 187.623560][ T5833] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 187.674597][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 187.697586][T13499] macvlan70: entered allmulticast mode [ 187.734153][T13499] 8021q: adding VLAN 0 to HW filter on device macvlan70 [ 188.157967][T13516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.187684][T13516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.192423][T13516] bond1: (slave bond2): Enslaving as an active interface with an up link [ 188.214864][T13516] bond1 (unregistering): (slave bond2): Releasing backup interface [ 188.240679][T13516] bond1 (unregistering): Released all slaves [ 188.369341][T13531] binder: 13529:13531 ioctl c0306201 200000000680 returned -14 [ 188.448858][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 188.467998][T13548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.472757][T13543] netlink: 'syz.2.1858': attribute type 7 has an invalid length. [ 188.482393][T13543] netlink: 'syz.2.1858': attribute type 8 has an invalid length. [ 188.588919][T13559] netlink: 'syz.4.1860': attribute type 2 has an invalid length. [ 188.630018][T13562] __nla_validate_parse: 1 callbacks suppressed [ 188.630037][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 188.653065][T13562] macvlan71: entered allmulticast mode [ 188.668487][T13562] 8021q: adding VLAN 0 to HW filter on device macvlan71 [ 188.685399][T13564] 8021q: adding VLAN 0 to HW filter on device bond13 [ 188.732713][T13564] 8021q: adding VLAN 0 to HW filter on device bond17 [ 188.745669][T13564] bond13: (slave bond17): Enslaving as an active interface with an up link [ 188.784434][T13564] bond13 (unregistering): (slave bond17): Releasing backup interface [ 188.790113][T13564] bond13 (unregistering): Released all slaves [ 188.862649][T13587] FAULT_INJECTION: forcing a failure. [ 188.862649][T13587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.870275][T13587] CPU: 2 UID: 0 PID: 13587 Comm: syz.4.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.870313][T13587] Tainted: [L]=SOFTLOCKUP [ 188.870320][T13587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.870334][T13587] Call Trace: [ 188.870342][T13587] [ 188.870351][T13587] dump_stack_lvl+0x100/0x190 [ 188.870390][T13587] should_fail_ex.cold+0x5/0xa [ 188.870422][T13587] _copy_from_user+0x2e/0xd0 [ 188.870460][T13587] copy_msghdr_from_user+0x9f/0x4c0 [ 188.870496][T13587] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.870552][T13587] ___sys_sendmsg+0x106/0x1e0 [ 188.870584][T13587] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.870616][T13587] ? get_pid_task+0x106/0x250 [ 188.870656][T13587] ? find_held_lock+0x2b/0x80 [ 188.870706][T13587] __sys_sendmsg+0x160/0x210 [ 188.870730][T13587] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.870770][T13587] do_syscall_64+0x123/0x790 [ 188.870798][T13587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.870822][T13587] RIP: 0033:0x7f6128f9e159 [ 188.870842][T13587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.870863][T13587] RSP: 002b:00007f6129e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.870887][T13587] RAX: ffffffffffffffda RBX: 00007f6129225fa0 RCX: 00007f6128f9e159 [ 188.870902][T13587] RDX: 00000000040408c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.870916][T13587] RBP: 00007f6129e58090 R08: 0000000000000000 R09: 0000000000000000 [ 188.870929][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.870942][T13587] R13: 00007f6129226038 R14: 00007f6129225fa0 R15: 00007ffd288696f8 [ 188.870974][T13587] [ 189.096801][T13599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.171250][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1877'. [ 189.192293][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'. [ 189.201340][T13605] netlink: 'syz.2.1876': attribute type 7 has an invalid length. [ 189.205657][T13605] netlink: 'syz.2.1876': attribute type 8 has an invalid length. [ 189.208791][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 189.315454][T13613] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002 [ 189.325102][T13612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.369170][T13614] can: request_module (can-proto-0) failed. [ 189.416445][T13612] [ 189.417583][T13612] ====================================================== [ 189.420625][T13612] WARNING: possible circular locking dependency detected [ 189.423454][T13612] syzkaller #0 Tainted: G L [ 189.426569][T13612] ------------------------------------------------------ [ 189.430660][T13612] syz.0.1880/13612 is trying to acquire lock: [ 189.433185][T13612] ffffffff903dfc08 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.437979][T13612] [ 189.437979][T13612] but task is already holding lock: [ 189.441001][T13612] ffff888049f5da70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 189.445049][T13612] [ 189.445049][T13612] which lock already depends on the new lock. [ 189.445049][T13612] [ 189.450519][T13612] [ 189.450519][T13612] the existing dependency chain (in reverse order) is: [ 189.454289][T13612] [ 189.454289][T13612] -> #3 (&p->frag_sem){++++}-{4:4}: [ 189.457517][T13612] lock_acquire+0x1b9/0x370 [ 189.459629][T13612] down_write_killable+0x93/0x240 [ 189.461920][T13612] configfs_rmdir+0x3fa/0x950 [ 189.464145][T13612] vfs_rmdir+0x328/0x8a0 [ 189.466347][T13612] filename_rmdir+0x31a/0x5c0 [ 189.469029][T13612] __x64_sys_rmdir+0x46/0x70 [ 189.471549][T13612] do_syscall_64+0x123/0x790 [ 189.473949][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.476581][T13612] [ 189.476581][T13612] -> #2 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 189.480335][T13612] lock_acquire+0x1b9/0x370 [ 189.483031][T13612] down_write+0x8b/0x1f0 [ 189.485614][T13612] configfs_depend_item_unlocked+0xf3/0x6a0 [ 189.488672][T13612] usbg_make_tpg+0x261/0x620 [ 189.490837][T13612] target_fabric_make_tpg+0xab/0x8c0 [ 189.493225][T13612] configfs_mkdir+0x51e/0xb70 [ 189.495374][T13612] vfs_mkdir+0x364/0x850 [ 189.497416][T13612] filename_mkdirat+0x48b/0x5e0 [ 189.499620][T13612] __x64_sys_mkdir+0x6b/0x90 [ 189.501809][T13612] do_syscall_64+0x123/0x790 [ 189.504254][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.507538][T13612] [ 189.507538][T13612] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 189.510982][T13612] lock_acquire+0x1b9/0x370 [ 189.513063][T13612] __mutex_lock+0x1a4/0x1bc0 [ 189.515200][T13612] tcm_set_name+0x29/0xb0 [ 189.517296][T13612] function_make+0x21c/0x3f0 [ 189.519560][T13612] configfs_mkdir+0x51e/0xb70 [ 189.521830][T13612] vfs_mkdir+0x364/0x850 [ 189.524029][T13612] filename_mkdirat+0x48b/0x5e0 [ 189.526422][T13612] __x64_sys_mkdir+0x6b/0x90 [ 189.528680][T13612] do_syscall_64+0x123/0x790 [ 189.530820][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.533508][T13612] [ 189.533508][T13612] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 189.537091][T13612] check_prev_add+0xeb/0xe60 [ 189.539418][T13612] __lock_acquire+0x1492/0x1ec0 [ 189.541731][T13612] lock_acquire+0x1b9/0x370 [ 189.543744][T13612] __mutex_lock+0x1a4/0x1bc0 [ 189.545826][T13612] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.548765][T13612] configfs_write_iter+0x302/0x4e0 [ 189.551439][T13612] vfs_write+0x6af/0x1050 [ 189.553692][T13612] ksys_write+0x12a/0x250 [ 189.555732][T13612] do_syscall_64+0x123/0x790 [ 189.558236][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.560935][T13612] [ 189.560935][T13612] other info that might help us debug this: [ 189.560935][T13612] [ 189.565075][T13612] Chain exists of: [ 189.565075][T13612] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#29 --> &p->frag_sem [ 189.565075][T13612] [ 189.572423][T13612] Possible unsafe locking scenario: [ 189.572423][T13612] [ 189.575484][T13612] CPU0 CPU1 [ 189.577705][T13612] ---- ---- [ 189.579853][T13612] rlock(&p->frag_sem); [ 189.581589][T13612] lock(&sb->s_type->i_mutex_key#29); [ 189.584469][T13612] lock(&p->frag_sem); [ 189.587047][T13612] lock(gadget_subsys.su_mutex); [ 189.589310][T13612] [ 189.589310][T13612] *** DEADLOCK *** [ 189.589310][T13612] [ 189.594150][T13612] locks held by syz.0.1880/13612: 4, last CPU#2: [ 189.597020][T13612] #0: ffff888035452470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 189.600634][T13612] #1: ffff888024144460 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 189.604331][T13612] #2: ffff888064e84080 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 189.608689][T13612] #3: ffff888049f5da70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 189.613024][T13612] [ 189.613024][T13612] stack backtrace: [ 189.615942][T13612] CPU: 2 UID: 0 PID: 13612 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.615970][T13612] Tainted: [L]=SOFTLOCKUP [ 189.615976][T13612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.615987][T13612] Call Trace: [ 189.615994][T13612] [ 189.616003][T13612] dump_stack_lvl+0x100/0x190 [ 189.616030][T13612] print_circular_bug.cold+0x178/0x1be [ 189.616059][T13612] check_noncircular+0x146/0x160 [ 189.616086][T13612] check_prev_add+0xeb/0xe60 [ 189.616112][T13612] __lock_acquire+0x1492/0x1ec0 [ 189.616139][T13612] ? register_lock_class+0x3f/0x7b0 [ 189.616166][T13612] lock_acquire+0x1b9/0x370 [ 189.616189][T13612] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.616214][T13612] ? __pfx___might_resched+0x10/0x10 [ 189.616241][T13612] __mutex_lock+0x1a4/0x1bc0 [ 189.616262][T13612] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.616284][T13612] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.616309][T13612] ? __pfx___mutex_lock+0x10/0x10 [ 189.616328][T13612] ? find_held_lock+0x2b/0x80 [ 189.616348][T13612] ? __might_fault+0xc5/0x140 [ 189.616367][T13612] ? __might_fault+0xc5/0x140 [ 189.616392][T13612] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.616414][T13612] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 189.616438][T13612] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 189.616463][T13612] ? configfs_write_iter+0x388/0x4e0 [ 189.616484][T13612] configfs_write_iter+0x302/0x4e0 [ 189.616504][T13612] vfs_write+0x6af/0x1050 [ 189.616526][T13612] ? __pfx_configfs_write_iter+0x10/0x10 [ 189.616545][T13612] ? __pfx_vfs_write+0x10/0x10 [ 189.616565][T13612] ? find_held_lock+0x2b/0x80 [ 189.616597][T13612] ksys_write+0x12a/0x250 [ 189.616618][T13612] ? __pfx_ksys_write+0x10/0x10 [ 189.616642][T13612] do_syscall_64+0x123/0x790 [ 189.616661][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.616679][T13612] RIP: 0033:0x7f475e39e159 [ 189.616694][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.616711][T13612] RSP: 002b:00007f475f310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.616729][T13612] RAX: ffffffffffffffda RBX: 00007f475e625fa0 RCX: 00007f475e39e159 [ 189.616741][T13612] RDX: 0000000000000011 RSI: 0000200000000440 RDI: 0000000000000009 [ 189.616752][T13612] RBP: 00007f475e435024 R08: 0000000000000000 R09: 0000000000000000 [ 189.616762][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.616772][T13612] R13: 00007f475e626038 R14: 00007f475e625fa0 R15: 00007fff043810d8 [ 189.616789][T13612] [ 189.962296][ T42] kauditd_printk_skb: 434 callbacks suppressed [ 189.962310][ T42] audit: type=1400 audit(1787927828.849:9267): avc: denied { write } for pid=13668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.002972][ T42] audit: type=1400 audit(1787927828.887:9268): avc: denied { write } for pid=13671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.091059][ T42] audit: type=1400 audit(1787927828.971:9269): avc: denied { write } for pid=13673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.131685][ T42] audit: type=1400 audit(1787927828.999:9270): avc: denied { write } for pid=13676 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.240706][ T42] audit: type=1400 audit(1787927829.111:9271): avc: denied { write } for pid=13678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.286279][ T42] audit: type=1400 audit(1787927829.158:9272): avc: denied { write } for pid=13681 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.397127][ T42] audit: type=1400 audit(1787927829.252:9273): avc: denied { write } for pid=13686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.440705][ T42] audit: type=1400 audit(1787927829.289:9274): avc: denied { write } for pid=13689 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.530655][ T42] audit: type=1400 audit(1787927829.383:9275): avc: denied { write } for pid=13691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.564389][ T42] audit: type=1400 audit(1787927829.411:9276): avc: denied { write } for pid=13694 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.116816][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.118941][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.347665][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 195.347682][ T42] audit: type=1400 audit(1787927833.884:9304): avc: denied { write } for pid=13824 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.437551][ T42] audit: type=1400 audit(1787927833.977:9305): avc: denied { write } for pid=13827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.474167][ T42] audit: type=1400 audit(1787927834.006:9306): avc: denied { write } for pid=13830 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.813240][ T42] audit: type=1400 audit(1787927834.324:9307): avc: denied { write } for pid=13832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.853388][ T42] audit: type=1400 audit(1787927834.361:9308): avc: denied { write } for pid=13835 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.905257][ T42] audit: type=1400 audit(1787927835.344:9309): avc: denied { write } for pid=13842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.950360][ T42] audit: type=1400 audit(1787927835.381:9310): avc: denied { write } for pid=13845 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.273652][ T42] audit: type=1400 audit(1787927835.690:9311): avc: denied { write } for pid=13852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.316868][ T42] audit: type=1400 audit(1787927835.737:9312): avc: denied { write } for pid=13855 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.709086][ T42] audit: type=1400 audit(1787927836.092:9313): avc: denied { write } for pid=13860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1