last executing test programs: 37.180612997s ago: executing program 3 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x20000, 0x3) fcntl$notify(r2, 0x402, 0x80000002) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000001300), 0x6ea040, 0x0) r6 = syz_ublk_setup_io_uring(0x7580, &(0x7f0000001340)={0x0, 0xb4b1, 0x10000, 0x2, 0x27e}, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)) sendmmsg$unix(r5, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x804}}], 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x40, 0x5, @vifc_lcl_addr=@local, @local}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 37.042673542s ago: executing program 3 (id=199): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) (async) r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079100800000000004000000000000000950000000000000099a1aae9e4a6f8b821bf0e5d67028ff5ec80128ba45db82a5ceb41f4b54ac9b08873f9d351c714258e6f485e7777200852f33e5a35a4b6c55470692389c53123a50ec579c2a5fd1361cea9a10cb1fa3fbb2331f4e5107cf16fdef1eefd0c2da93f02b6ebfa597416bc0a9a0a59754710751e4a61f5a4087262e07e21bc24520f422f8e285daac6822b1d7e5df170c58cb3f553f05beeb6c33605a11f4a78785ac65e6eaaf686ec49c945f976d6a5738cbcd468fdca0541e9c3ca6322ce8eeb56b544525a8d96cab3516df5b0fc42c38e76355f4e888c5f389f872815ad49b813b03b305121a60bb6fa878a6fa46b7d8c54fb5812c4750137376f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 36.991428857s ago: executing program 3 (id=200): r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/igmp\x00') preadv(r0, &(0x7f0000003100)=[{&(0x7f0000002b40)=""/150, 0x96}, {&(0x7f0000002f40)=""/206, 0xce}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b00130000000800030003000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x2f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="c34e7c8f1bf71d0b96d47698bf948ed123d9d498848a979380bc6119a7fdaf33aac161b0a01c9a8bc146e5", @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000300", @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r1], 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40030000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="24033300d0000000080211000001080211000000080211000000000004000000", @ANYBLOB='\x00'/794], 0x340}}, 0x0) 34.903501468s ago: executing program 3 (id=218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x4000) ioctl$BLKALIGNOFF(r1, 0x127a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.current\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) setns(0xc9, 0x0) r4 = socket(0x8, 0x800, 0x3) cachestat(r0, &(0x7f0000000100)={0x9, 0x9}, &(0x7f0000000140), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101180, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x582ae32a, 0x691, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x66, 0x0, 0xfc, 0x3aff051448067933, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x28, 0x6a, 0x0, 0x4, [0x10, 0x4, 0x8, 0x40, 0x7, 0x9, 0x1000, 0x3, 0x5]}, @rr={0x7, 0x13, 0x92, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20064006}, 0x90) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4004743c, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x200, &(0x7f00000001c0)={0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 34.770604151s ago: executing program 3 (id=219): clock_gettime(0x3, &(0x7f0000000400)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x4008af30, &(0x7f0000000040)) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000fb00000000fb1500098d2356daccf8d9cff0111d5ebb0b8caf076db4c74931788c9525ce"], 0xe80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x8000000000005, 0x800040068], 0x22271fff, 0x547d1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000000440)=@svm={0x1, 0x1, 0x1080, {0xdddd1000, 0xffffffff}, {"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"}}) 34.379315715s ago: executing program 3 (id=221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x80, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xfffffffe, @rand_addr=' \x01\x00', 0x8e}, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x509}, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, @in6={0xa, 0x4e22, 0x8, @private0, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010101}}, 0xff7f, 0x9}, &(0x7f00000003c0)=0x90) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="a7affe", 0x3}], 0x1) 34.347734492s ago: executing program 32 (id=221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x80, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xfffffffe, @rand_addr=' \x01\x00', 0x8e}, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x509}, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, @in6={0xa, 0x4e22, 0x8, @private0, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @private=0xa010101}}, 0xff7f, 0x9}, &(0x7f00000003c0)=0x90) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) (async, rerun: 64) shutdown(r0, 0x1) (rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="a7affe", 0x3}], 0x1) 3.341427741s ago: executing program 2 (id=510): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x254, 0x7d, 0x2, {{0x500, 0x11f, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e6, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x67, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x120, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff@\x00\xdb\xa0\xc2\xf7\xf0\x05\x00\x00\x00M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82\x18}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\x00'/288}}, 0x254) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x68, 0x265, 0x0, 0x20, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0xff, {[@nop, @fastopen={0x22, 0x4, "9fe4"}, @mss={0x2, 0x4, 0x40c8}, @sack={0x5, 0x16, [0x4, 0x7, 0x80, 0x262, 0xfffffffe]}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xf, "20c73b5282b32bba5c2e122aae"}, @fastopen={0x22, 0xd, "eecfd45a6c988cbaf8c849"}]}}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb}, 0x94) 3.331178621s ago: executing program 2 (id=512): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xb, 0x1000, 0xfff}) (async) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xb, 0x1000, 0xfff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) 3.330666423s ago: executing program 2 (id=513): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x2000003, 0x400, 0x6, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffe, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x200, 0x3, 0x367}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080), 0x1, 0x20080) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x6a, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1}}}}) 3.251945447s ago: executing program 2 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x80a0000, 0x9, &(0x7f0000000040)=""/9}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000010, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) 3.161138193s ago: executing program 2 (id=515): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fstat(r1, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x48000) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000000)=0xd, 0x4) sendmmsg$inet6(r2, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r7, 0x48faea5cd8971a39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xd4b5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000001006e657464657673696d0000000f0002006e6574646576d5dd44c900000d0087006c325f31060000000000000008008e0002000000bfc48ad08f00b059068fd8767e0000000000000035d9ba83b87e012810f594b87f8ecd203baf9d9d9671527133a4e40480a083babb433e72"], 0x4c}}, 0x0) 2.652213692s ago: executing program 2 (id=519): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) close(0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x9, 0x5, 0x8, 0x7ffffbfe, 0x8, "3113ed2e000000000000000000000000001000"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x4006) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x61, 0x2, 0x1, 0x6, 0x9, "c7d92c16d5a900"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a) setregid(0xffffffffffffffff, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000380), 0x0, 0x2) write(r2, &(0x7f00000003c0)="00b37c58c26c12db8c3adb133a720041a12fd42298590cd8c273520aca3beee7c63489bd822754412739a8301a43bfac59e02aa31a7ad0fef65ae660eba826ef56c14ca1eabb7bbd0366de408e65de7d9f8d3670738ba12b9e69b3cf6f3b69cc58e69489a28e202bf0c17d4d261377d15fca8f9b2bd728e390f2729335c037f64905c25397eebee27706e466924023840bfbcb686574e5149f967ebc69ab70751369511ef24c4c2c910c63f3a07f831b561987f6ed12fc2f1d6aae555a4042d0e570b0fc9d75a14a3e179cc65200aca9303f4a94291d7041e1bc34318f7a1c14df193246301f2c5bd401", 0xea) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) syz_usb_connect$cdc_ecm(0x4, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0xa35ce0defe6c636a, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0xff, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "fd8b97"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb826, 0x6, 0xfff9, 0x8}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1c00}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x3a99, 0x1, 0x3, 0x8, 0x0, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0xf1, 0x5, 0x80, 0xff, 0xf8}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c09}}]}) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) 1.682252526s ago: executing program 4 (id=523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@security={'security\x00', 0x4, 0x4, 0x4b0, 0xffffffff, 0x238, 0x308, 0x238, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {}, {}, 0x2b, 0x1, 0x3, 0x18}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0xff, 0x6], 0x9, 0x30, 0xd, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @local}, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @remote, @private0={0xfc, 0x0, '\x00', 0x20}], 0x6}}, @common=@frag={{0x30}, {[0x7, 0x101], 0x6, 0x10, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x910, 0x80, 0x1}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'ip6gretap0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2, 0x7, 0x3, 0x7d}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x0, 0x3}, {0x2, 0x4, 0x4}, 0x7, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) setresuid(0x0, 0xee00, 0x0) fstat(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000a000000095a8b5781a2f9e847d799afdfdcdd39a2a7fa31b9e9ee6e20b7585ac928d084e9450ef6900"/115], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0003080006007f0026f4000000008a5d09fd0f9f68ca7b1cc4afb132cfea250a2a00c924d370c24a575d10e9a6818f6470c927efee3ac6bd65a17b3939655ae236fb3d74ca6ee5312e23ccbb5232bd317e70457c202fbf31573c026a0889f89d11495131da52a0f4353da6023a92d7802cd4a062695c9db500d6d331a85a4af3b35698252704d99dc80cf9ba303f8835bca7c7514ea601d21f694800f55f28fe7b27793331d621"], 0x40) 1.622254938s ago: executing program 4 (id=524): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04040aaaaaaaaa"], 0xd) 1.311606196s ago: executing program 0 (id=525): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000000000000ff7f0000000000000000000000000000000000000000934ae943aa75c7d7491f253774324ee20d94e6c6b4cc4580fdec00aa3f6c2afc0edc5ca2cc6e005907eafd9224ae"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.201544625s ago: executing program 0 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES16], 0x3c}}, 0x4055) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x20000, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.201093406s ago: executing program 0 (id=527): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @multicast}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) (async) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xe45, &(0x7f00009fd000/0x1000)=nil, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x54000000, 0x3ff, 0xc0, 0x4, 0xef, 0x2996}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1000}]}}}]}, 0x58}}, 0x4c840) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 32) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) listen(r13, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @multicast2}], 0x10) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r14, 0x0) 1.081139693s ago: executing program 0 (id=528): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0xffffffffffffff82, 0x3, 0x1000}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a21}]}}}]}, 0x44}}, 0x0) 1.077227786s ago: executing program 4 (id=529): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000394000/0x3000)=nil, 0x3000}}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 1.011692591s ago: executing program 0 (id=530): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x208060, 0x1, 0xfffa, 0x7, 0xfffffffc, 0x0, 0x0, 0x100, 0x100}}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00'}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0x1001) 351.95458ms ago: executing program 1 (id=533): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x8, 0x7d6}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)={0x200000, 0x8, 0x8}, 0x18) name_to_handle_at(r1, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0xb9f1, 0x4, 0x8000, 0x6}}, &(0x7f0000000200), 0x1000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x40000, 0x101) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000340)={0xa}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x8, 0x7d6}) (async) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)={0x200000, 0x8, 0x8}, 0x18) (async) name_to_handle_at(r1, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0xb9f1, 0x4, 0x8000, 0x6}}, &(0x7f0000000200), 0x1000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x40000, 0x101) (async) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000340)={0xa}) (async) 351.505071ms ago: executing program 1 (id=534): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0015003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) writev(r4, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="6bd5b590", 0x4}], 0x1) syz_ublk_setup_queues(r3, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 292.342926ms ago: executing program 1 (id=535): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="04", 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x50180, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) r2 = socket(0x10, 0x2, 0x7) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x40, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x0, 0x80, 0xfffffffc, 0xdc66}}) 291.921386ms ago: executing program 1 (id=536): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x13, 0x80000000, 0x0, 0xd, 0x11, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x5, 0xff, 0x0, 0x5, [0xffffffff, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000656000/0x4000)=nil, 0x4000, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f01ca66b82c010f00d0b9800000c00f3235000400000f30670f01cf660f38810c87c4e27d58954fd287989afcffffff57003e0f215bc4e2f93306c4c27924b0a5000000", 0x44}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f000027c000/0x2000)=nil, 0x2000, 0xb, 0x10012, r1, 0x69457000) 182.266794ms ago: executing program 4 (id=537): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0xe68}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7, 0x20400) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0x7) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r3, r4], 0x2}) (async) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x200240, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000002c0)={@broadcast, @multicast2, 0x1, 0x3, [@local, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010101]}, 0x1c) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3, 0xa, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[{}, {}], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x9, 0x2, 0x0, r6}) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='\x00') getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f0000000700)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r5, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x700, 0x0, 0x1, 0x6, {{0x29, 0x4, 0x2, 0x9, 0xa4, 0x64, 0x0, 0xf7, 0x29, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x1b, 0x31, [@multicast2, @multicast2, @local, @private=0xa010101, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0x1f, 0x8a, [@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x9b, 0x0, 0x6, [0xfff, 0x9, 0x8, 0x0, 0x2, 0x2, 0x7, 0x5d937c1f, 0xfffff001, 0x7fffffff]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x7, 0x4, 'H3'}]}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x3, [{@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x125aeeff}, {@loopback, 0x6}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x31d9, 0x57, 0x4, 0x2200, r7, 0x6, '\x00', r8, r5, 0x5, 0x1, 0x3}, 0x50) (async, rerun: 64) r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000940)={0x3, 'geneve1\x00', {0x5}, 0x9}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000980)={'batadv0\x00'}) r10 = syz_open_dev$dri(&(0x7f00000009c0), 0x7fffffffffffffff, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000a00)={0xc, 0x8001, 0xffffffffffff6e70, 0xfffffffffffffff6, 0x4, 0x38}) (async, rerun: 32) sendto$l2tp(r5, &(0x7f0000000a40)="8030e75001642be6793270262ea0ed6b9ce9a0384f64c383b963fb2b841819a6492595fe01626d5dff5c30d5615fa1b919de44a84958b32094060a895f35a88c2d05", 0x42, 0x810, &(0x7f0000000ac0)={0x2, 0x0, @multicast2, 0x4}, 0x10) (async, rerun: 32) read$FUSE(r5, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) sendmsg$nl_xfrm(r5, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)=@getsadinfo={0x1c, 0x23, 0x200, 0x70bd28, 0x25dfdbfe, 0x0, [@iptfs_max_qsize={0x8, 0x28, 0x1000}]}, 0x1c}}, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000002c40)={0x0, 0x0, r10}) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000002c80)=0x6) syz_open_procfs(r11, &(0x7f0000002cc0)='net/ipv6_route\x00') 181.621268ms ago: executing program 0 (id=538): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04040aaaaaaaaaaa10cc"], 0xd) 176.574022ms ago: executing program 4 (id=539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x45, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x0, 0x10000000, 0x0, 0x8000}, @empty, @empty}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="03030800030016000c004557005c006700000611"], 0x66) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, r8, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000034}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300b68c530300000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c00014000"], 0xa4}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r12) listen(r13, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000001a40)={0x0, 0xea60}, 0x10) connect$vsock_stream(r14, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 71.80493ms ago: executing program 1 (id=540): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) syz_clone3(&(0x7f0000000800)={0x205000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600), {0x2c}, &(0x7f0000000640)=""/132, 0x84, &(0x7f0000000700)=""/133, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) process_madvise(r1, &(0x7f0000000880), 0x0, 0x17, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8020, 0x40, 0x5c, 0x2, {{0x27, 0x4, 0x2, 0x1, 0x9c, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x4, [{@empty, 0x8}, {@multicast2, 0x10000}, {@remote, 0x4}]}, @generic={0x86, 0x3, '\''}, @timestamp_addr={0x44, 0x4c, 0x7b, 0x1, 0x1, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x193}, {@multicast2, 0xf4}, {@broadcast, 0x1}, {@remote, 0xd4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xfffffffd}, {@multicast2, 0x80000000}, {@local, 0xfffffffc}, {@empty, 0x7689}]}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xffffff80}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000141100001c00128009000100626f6e64000000000c00028008000400060000001400350077673200000000000000000000000000100022000200c06eb72690e6bb649d3408002c800000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket(0x1d, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0x4, 0x3}, 0x6) getsockopt(r5, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00060000000000000000090000001c0004801300636173742d6c696e6b000004000780"], 0x30}}, 0xc000) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="e4000000010a010300000000000000000a000005cd00060063ad2ebc128bd321bb01cbfd7852e00102d432567f43fd300c0dadce342f4bed8aa99d9cca5171f4cc4be1442580a12ae28bf39d334c6b6151d86d9e3a39def0a56adecdfdf07548ae8affdfe2722dc7f9263076bd2bd0cbcbcde2f6abdc06793b5aa6b449cf5cb253adbc6b77986c001b7d88e01346df6a11120d007dc3df63205fe95a1c1295f61c2765858b5cdb87051e87d97b4341c33d9a4a59ccab0a4317fa0be1e4a690ee7128c43d16debe5f3765c10ff1bab5a02de052c9bb0983141376ae000000"], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) 1.437531ms ago: executing program 4 (id=541): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(&(0x7f0000001040), &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/misc\x00', 0x0, 0x0) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) read(r1, &(0x7f0000001140)=""/4096, 0x1000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) setns(0xc9, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20080000000000008400000002000000d113ed4902000000020b0019", @ANYRESHEX=r0, @ANYBLOB="810000"], 0x50, 0x40001}, 0x0) 0s ago: executing program 1 (id=542): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0xa, 0x3, 0x87) (async) r2 = socket(0x1d, 0x6, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@local, 0x40, r3}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000001c0)=""/238, &(0x7f00000002c0)=0xee) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x3, 0x8, 0x7}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x8000) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x803, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000001080)) (async) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r5, 0x13637000) 0s ago: executing program 1 (id=543): chroot(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000480)={0x19980330}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='file0', 0x5) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): to HW filter on device batadv0 [ 49.671534][ T5738] Bluetooth: hci1: command tx timeout [ 49.671714][ T5738] Bluetooth: hci2: command tx timeout [ 49.672082][ T5738] Bluetooth: hci3: command tx timeout [ 49.672164][ T5738] Bluetooth: hci0: command tx timeout [ 49.715464][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.733598][ T5735] veth0_vlan: entered promiscuous mode [ 49.743888][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.749431][ T5735] veth1_vlan: entered promiscuous mode [ 49.795359][ T5726] veth0_vlan: entered promiscuous mode [ 49.799107][ T5729] veth0_vlan: entered promiscuous mode [ 49.809018][ T5726] veth1_vlan: entered promiscuous mode [ 49.815057][ T5735] veth0_macvtap: entered promiscuous mode [ 49.816755][ T5729] veth1_vlan: entered promiscuous mode [ 49.824583][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.831376][ T5735] veth1_macvtap: entered promiscuous mode [ 49.862004][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.865690][ T5729] veth0_macvtap: entered promiscuous mode [ 49.880270][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.892361][ T5729] veth1_macvtap: entered promiscuous mode [ 49.909948][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910301][ T5726] veth0_macvtap: entered promiscuous mode [ 49.915250][ T5730] veth0_vlan: entered promiscuous mode [ 49.917722][ T5726] veth1_macvtap: entered promiscuous mode [ 49.940592][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.955380][ T5730] veth1_vlan: entered promiscuous mode [ 49.958623][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.961386][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.964870][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.976318][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.976353][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.020574][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.020594][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.044248][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 50.044263][ T44] audit: type=1400 audit(1790428999.282:168): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.048916][ T44] audit: type=1400 audit(1790428999.282:169): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/syzkaller.DVLoTi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.050459][ T5730] veth0_macvtap: entered promiscuous mode [ 50.050980][ T44] audit: type=1400 audit(1790428999.292:170): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.051885][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.054145][ T44] audit: type=1400 audit(1790428999.292:171): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/syzkaller.DVLoTi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.055498][ T44] audit: type=1400 audit(1790428999.292:172): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/syzkaller.DVLoTi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.062404][ T44] audit: type=1400 audit(1790428999.302:173): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.065298][ T5730] veth1_macvtap: entered promiscuous mode [ 50.072498][ T44] audit: type=1400 audit(1790428999.312:174): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.075028][ T44] audit: type=1400 audit(1790428999.312:175): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="gadgetfs" ino=9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 50.082012][ T44] audit: type=1400 audit(1790428999.322:176): avc: denied { mount } for pid=5735 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.082754][ T44] audit: type=1400 audit(1790428999.322:177): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.095785][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.106775][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.106792][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.115378][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.133752][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.136746][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140283][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.140294][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.187939][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.187952][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.190671][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190693][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190710][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190727][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190744][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190762][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190779][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190796][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190812][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190829][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190845][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190862][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190878][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.222026][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.222039][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.252731][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.252745][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.281026][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.281039][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.426608][ T5086] Bluetooth: unknown link type 128 [ 50.502095][ T5892] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6'. [ 50.504611][ T5891] busy [ 50.508526][ T5892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.512029][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 50.585968][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.636023][ T5901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 50.679273][ T5890] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.718921][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.718941][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.722270][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.722285][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.737817][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.739343][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.744780][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 51.015504][ T5935] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 51.085693][ T5942] tmpfs: Bad value for 'mpol' [ 51.456198][ T5964] program syz.2.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.493647][ T5966] Zero length message leads to an empty skb [ 51.750763][ T5738] Bluetooth: hci3: command tx timeout [ 51.750786][ T5738] Bluetooth: hci2: command tx timeout [ 51.750837][ T5086] Bluetooth: hci0: command tx timeout [ 51.750867][ T5733] Bluetooth: hci1: command tx timeout [ 51.909892][ T5983] Bluetooth: MGMT ver 1.23 [ 52.004905][ T5982] block nbd3: shutting down sockets [ 52.072961][ T5790] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.220683][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 52.221583][ T5790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 52.223294][ T5790] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 52.223318][ T5790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.223330][ T5790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.223343][ T5790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.223355][ T5790] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.223374][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.432859][ T5790] usb 5-1: usb_control_msg returned -32 [ 52.432883][ T5790] usbtmc 5-1:16.0: can't read capabilities [ 52.597281][ T5997] ======================================================= [ 52.597281][ T5997] WARNING: The mand mount option has been deprecated and [ 52.597281][ T5997] and is ignored by this kernel. Remove the mand [ 52.597281][ T5997] option from the mount to silence this warning. [ 52.597281][ T5997] ======================================================= [ 52.597363][ T5997] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 52.600768][ T5997] cramfs: wrong magic [ 53.829748][ T5733] Bluetooth: hci1: command tx timeout [ 53.829781][ T5733] Bluetooth: hci2: command tx timeout [ 53.839834][ T5733] Bluetooth: hci0: command tx timeout [ 53.839867][ T5733] Bluetooth: hci3: command tx timeout [ 55.909972][ T5733] Bluetooth: hci2: command tx timeout [ 55.909996][ T5733] Bluetooth: hci3: command tx timeout [ 55.910008][ T5733] Bluetooth: hci0: command tx timeout [ 55.910020][ T5733] Bluetooth: hci1: command tx timeout [ 57.589953][ T5977] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 57.671062][ T64] usb 5-1: USB disconnect, device number 2 [ 57.989871][ T5086] Bluetooth: hci0: command tx timeout [ 68.260417][ T6013] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 68.261078][ T6013] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 68.305326][ T6018] __nla_validate_parse: 2 callbacks suppressed [ 68.305339][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 68.305348][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 68.309347][ T44] kauditd_printk_skb: 103 callbacks suppressed [ 68.309358][ T44] audit: type=1400 audit(1790429017.542:281): avc: denied { ioctl } for pid=6017 comm="syz.2.38" path="socket:[9106]" dev="sockfs" ino=9106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.423047][ T44] audit: type=1400 audit(1790429017.662:282): avc: denied { read } for pid=6023 comm="syz.2.39" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.423076][ T44] audit: type=1400 audit(1790429017.662:283): avc: denied { open } for pid=6023 comm="syz.2.39" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.423353][ T44] audit: type=1400 audit(1790429017.662:284): avc: denied { ioctl } for pid=6023 comm="syz.2.39" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.489706][ T850] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 68.619673][ T850] usb 5-1: device descriptor read/64, error -71 [ 68.709680][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.859793][ T850] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 68.859797][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 68.862627][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.863447][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.863469][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.863487][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.863500][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.863512][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.863524][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.863537][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.863550][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 68.864278][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.864296][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.864315][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.864328][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.864339][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.864352][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.864364][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.864377][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 68.865109][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.865123][ T25] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 68.865140][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 68.865152][ T25] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.865164][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.865176][ T25] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 68.865189][ T25] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 68.865201][ T25] usb 7-1: config 168 interface 0 has no altsetting 0 [ 68.868311][ T25] usb 7-1: string descriptor 0 read error: -22 [ 68.868366][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.884705][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 69.029674][ T850] usb 5-1: device descriptor read/64, error -71 [ 69.136923][ T25] usb 7-1: USB disconnect, device number 2 [ 69.139997][ T850] usb usb5-port1: attempt power cycle [ 69.173810][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 69.173825][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 69.484196][ T44] audit: type=1400 audit(1790429018.722:285): avc: denied { bind } for pid=6003 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.490017][ T850] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 69.521524][ T850] usb 5-1: device descriptor read/8, error -71 [ 69.571091][ T6042] jffs2: notice: (6042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.577362][ T44] audit: type=1400 audit(1790429018.812:286): avc: denied { write } for pid=6041 comm="syz.1.43" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.577615][ T44] audit: type=1400 audit(1790429018.812:287): avc: denied { add_name } for pid=6041 comm="syz.1.43" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.577826][ T44] audit: type=1400 audit(1790429018.812:288): avc: denied { create } for pid=6041 comm="syz.1.43" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.583620][ T44] audit: type=1400 audit(1790429018.822:289): avc: denied { read write open } for pid=6041 comm="syz.1.43" path="/10/file0/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.595884][ T44] audit: type=1400 audit(1790429018.832:290): avc: denied { write } for pid=6041 comm="syz.1.43" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.769869][ T850] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 69.792473][ T850] usb 5-1: device descriptor read/8, error -71 [ 69.828625][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 69.901302][ T850] usb usb5-port1: unable to enumerate USB device [ 70.031464][ T6060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6060 comm=syz.3.48 [ 70.050845][ T6062] kAFS: bad VL server IP address [ 70.061619][ T6062] kAFS: No cell specified [ 70.379135][ T6074] fuse: Bad value for 'user_id' [ 70.379148][ T6074] fuse: Bad value for 'user_id' [ 70.379329][ T6075] fuse: Bad value for 'user_id' [ 70.379336][ T6075] fuse: Bad value for 'user_id' [ 70.380697][ T5086] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 71.244079][ T6092] exFAT-fs (nbd1): unable to read boot sector [ 71.244091][ T6092] exFAT-fs (nbd1): failed to read boot sector [ 71.244096][ T6092] exFAT-fs (nbd1): failed to recognize exfat type [ 71.251267][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 71.324573][ T6106] busy [ 71.352584][ T1481] cfg80211: failed to load regulatory.db [ 71.360261][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360346][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455375][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 71.548933][ T6136] 9pnet_virtio: no channels available for device syz [ 71.655721][ T6144] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 71.658382][ T6144] veth1_vlan: Device is already in use. [ 71.685066][ T6148] FAULT_INJECTION: forcing a failure. [ 71.685066][ T6148] name failslab, interval 1, probability 0, space 0, times 1 [ 71.685101][ T6148] CPU: 2 UID: 0 PID: 6148 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 71.685124][ T6148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.685137][ T6148] Call Trace: [ 71.685144][ T6148] [ 71.685152][ T6148] dump_stack_lvl+0x100/0x190 [ 71.685188][ T6148] should_fail_ex.cold+0x5/0xa [ 71.685218][ T6148] should_failslab+0xc2/0x120 [ 71.685247][ T6148] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.685270][ T6148] ? __kernfs_new_node+0xd2/0xa10 [ 71.685302][ T6148] __kernfs_new_node+0xd2/0xa10 [ 71.685336][ T6148] ? __pfx___kernfs_new_node+0x10/0x10 [ 71.685367][ T6148] ? lock_acquire+0x1d1/0x380 [ 71.685388][ T6148] ? kernfs_root+0x23/0x2a0 [ 71.685415][ T6148] ? find_held_lock+0x2b/0x80 [ 71.685443][ T6148] ? kernfs_root+0xee/0x2a0 [ 71.685468][ T6148] ? kernfs_root+0xee/0x2a0 [ 71.685501][ T6148] kernfs_new_node+0x117/0x150 [ 71.685524][ T6148] kernfs_create_link+0xcc/0x240 [ 71.685550][ T6148] sysfs_do_create_link_sd+0x90/0x140 [ 71.685579][ T6148] sysfs_create_link+0x61/0xc0 [ 71.685606][ T6148] driver_sysfs_add+0x112/0x2d0 [ 71.685632][ T6148] really_probe+0x146/0xa60 [ 71.685663][ T6148] __driver_probe_device+0x210/0x460 [ 71.685688][ T6148] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.685722][ T6148] driver_probe_device+0x4a/0x140 [ 71.685747][ T6148] __driver_attach+0x21f/0x5b0 [ 71.685781][ T6148] ? __pfx___driver_attach+0x10/0x10 [ 71.685807][ T6148] bus_for_each_dev+0x13e/0x1d0 [ 71.685828][ T6148] ? __pfx_bus_for_each_dev+0x10/0x10 [ 71.685848][ T6148] ? bus_add_driver+0x2b5/0x5b0 [ 71.685878][ T6148] bus_add_driver+0x305/0x5b0 [ 71.685903][ T6148] driver_register+0x1e2/0x360 [ 71.685927][ T6148] ? rcu_is_watching+0x13/0xc0 [ 71.685955][ T6148] usb_gadget_register_driver_owner+0x132/0x210 [ 71.685981][ T6148] raw_ioctl+0x1a85/0x2b80 [ 71.686008][ T6148] ? __pfx_raw_ioctl+0x10/0x10 [ 71.686030][ T6148] ? selinux_file_ioctl+0x13b/0x290 [ 71.686053][ T6148] ? selinux_file_ioctl+0xb6/0x290 [ 71.686077][ T6148] ? __pfx_raw_ioctl+0x10/0x10 [ 71.686099][ T6148] __x64_sys_ioctl+0x18e/0x210 [ 71.686123][ T6148] do_syscall_64+0x123/0x790 [ 71.686145][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.686165][ T6148] RIP: 0033:0x7f8ef579ddeb [ 71.686182][ T6148] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 71.686200][ T6148] RSP: 002b:00007f8ef65c6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.686220][ T6148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8ef579ddeb [ 71.686233][ T6148] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 71.686247][ T6148] RBP: 00007f8ef65c7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 71.686258][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.686270][ T6148] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000000 [ 71.686295][ T6148] [ 71.686348][ T6148] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 71.686875][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.687284][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.805945][ T6151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.903990][ T6157] /dev/nullb0: Can't open blockdev [ 71.904969][ T6157] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 71.907425][ T6157] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 71.907769][ T6158] /dev/nullb0: Can't open blockdev [ 71.907783][ T6156] vcan0: entered allmulticast mode [ 71.911695][ T6156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.984760][ T6167] syzkaller1: entered promiscuous mode [ 71.984781][ T6167] syzkaller1: entered allmulticast mode [ 72.134296][ T6173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6173 comm=syz.2.82 [ 72.138303][ T6171] busy [ 72.211937][ T5086] Bluetooth: unknown link type 128 [ 72.458276][ T6192] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 72.466076][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 72.574741][ T6201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.739444][ T6208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 72.850567][ T6212] busy [ 72.955061][ T6216] ip6t_srh: unknown srh match flags 7700 [ 73.046570][ T6224] smpboot: CPU 1 is now offline [ 73.092470][ T6224] smpboot: CPU 3 is now offline [ 73.107299][ T6225] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 73.143653][ T6225] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 73.197587][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 73.278457][ T6233] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 73.278570][ T6233] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 73.348688][ T44] kauditd_printk_skb: 61 callbacks suppressed [ 73.348700][ T44] audit: type=1400 audit(1790429022.582:352): avc: denied { read } for pid=6235 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.400145][ T44] audit: type=1400 audit(1790429022.642:353): avc: denied { mounton } for pid=6237 comm="syz.3.102" path="/22/proc" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.405857][ T6238] busy [ 73.460737][ T6243] busy [ 73.536702][ T44] audit: type=1400 audit(1790429022.772:354): avc: denied { execute } for pid=6247 comm="syz.0.106" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.608609][ T6248] netlink: 280 bytes leftover after parsing attributes in process `syz.0.106'. [ 73.608927][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 73.609137][ T44] audit: type=1400 audit(1790429022.842:355): avc: denied { bind } for pid=6247 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.609279][ T44] audit: type=1400 audit(1790429022.842:356): avc: denied { node_bind } for pid=6247 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.787601][ T44] audit: type=1400 audit(1790429023.022:357): avc: denied { create } for pid=6250 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.787965][ T44] audit: type=1400 audit(1790429023.022:358): avc: denied { bind } for pid=6250 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.789480][ T44] audit: type=1400 audit(1790429023.022:359): avc: denied { write } for pid=6250 comm="syz.0.107" path="socket:[12505]" dev="sockfs" ino=12505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.864817][ T44] audit: type=1400 audit(1790429023.102:360): avc: denied { create } for pid=6260 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.865207][ T44] audit: type=1400 audit(1790429023.102:361): avc: denied { setopt } for pid=6260 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.910007][ T6264] mmap: syz.0.109 (6264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.923751][ T1481] Process accounting resumed [ 73.992525][ T6268] tap0: tun_chr_ioctl cmd 1074025675 [ 73.992539][ T6268] tap0: persist disabled [ 73.993764][ T6266] ip_tables: iptables: counters copy to user failed while replacing table [ 74.241691][ T5733] Bluetooth: hci2: command tx timeout [ 74.283142][ T6273] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 74.688018][ T6278] busy [ 74.706400][ T6277] syzkaller0: entered promiscuous mode [ 74.706422][ T6277] syzkaller0: entered allmulticast mode [ 74.723862][ T6277] loop2: detected capacity change from 0 to 7 [ 74.731839][ T6277] Dev loop2: unable to read RDB block 7 [ 74.731861][ T6277] loop2: unable to read partition table [ 74.731947][ T6277] loop2: partition table beyond EOD, truncated [ 74.731958][ T6277] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.784653][ T6281] busy [ 74.818422][ T6285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6285 comm=syz.3.115 [ 74.852958][ T6290] netlink: 'syz.3.117': attribute type 21 has an invalid length. [ 74.964742][ T6302] busy [ 75.063946][ T6307] busy [ 75.250185][ T6313] netlink: 80 bytes leftover after parsing attributes in process `syz.0.125'. [ 75.387448][ T6324] tmpfs: Unknown parameter 'í' [ 75.413837][ T6324] xt_hashlimit: max too large, truncated to 1048576 [ 75.459672][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.501590][ T6329] ip6tnl1: entered allmulticast mode [ 75.505790][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.505905][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.539791][ T850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.562646][ T6332] busy [ 75.579800][ T850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.609811][ T850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.620106][ T64] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 75.620929][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.620949][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.620960][ T64] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 75.620971][ T64] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.623155][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.623167][ T64] usb 7-1: Product: syz [ 75.623174][ T64] usb 7-1: Manufacturer: syz [ 75.623181][ T64] usb 7-1: SerialNumber: syz [ 75.630987][ T64] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 75.630999][ T64] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 75.631018][ T64] usbserial_generic 7-1:1.0: generic converter detected [ 75.638753][ T64] usb 7-1: generic converter now attached to ttyUSB0 [ 75.835818][ T64] usb 7-1: USB disconnect, device number 3 [ 75.855498][ T64] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 75.858894][ T64] usbserial_generic 7-1:1.0: device disconnected [ 76.014502][ T6349] busy [ 76.215551][ T6351] netlink: 184 bytes leftover after parsing attributes in process `syz.1.137'. [ 76.216561][ T6351] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 76.310546][ T5733] Bluetooth: hci3: command 0x0405 tx timeout [ 76.489818][ T6370] busy [ 76.669675][ T5819] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.684499][ T6379] busy [ 76.726684][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726693][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726733][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726737][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726776][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726780][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726833][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726837][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726875][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726879][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726916][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726920][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.726957][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.726961][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727008][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727012][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727049][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727053][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727091][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727095][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727131][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727135][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727186][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727190][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727228][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727232][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727269][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727273][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727315][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727319][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727367][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727371][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727408][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727412][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727488][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727492][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727530][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727534][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727581][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727586][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727622][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727626][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727663][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727669][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727706][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727709][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727757][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727761][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727798][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727802][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727839][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727843][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727880][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727884][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727933][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727937][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.727974][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.727978][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.728015][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.728019][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.728055][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.728059][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.728107][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.728111][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.728148][ T6384] binder: BINDER_SET_CONTEXT_MGR already set [ 76.728151][ T6384] binder: 6381:6384 ioctl 4018620d 200000004a80 returned -16 [ 76.730955][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.731092][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.731209][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.731289][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.731370][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.740303][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.741291][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.741384][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.741461][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.741537][ T6382] binder_alloc: binder_alloc_mmap_handler: 6381 200000ffd000-200001000000 already mapped failed -16 [ 76.840156][ T5819] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 76.841819][ T5819] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.841856][ T5819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 76.841875][ T5819] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.841904][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.215423][ T6401] hfs: can't find a HFS filesystem on dev loop1 [ 77.248755][ T5819] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 77.248768][ T5819] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 77.257553][ T5819] cxacru 7-1:1.0: probe with driver cxacru failed with error -5 [ 77.263935][ T5086] Bluetooth: unknown link type 128 [ 77.787126][ T6437] busy [ 77.976010][ T6455] busy [ 78.047179][ T6458] could not allocate digest TFM handle blake2b-512 [ 78.053021][ T6458] netlink: 256 bytes leftover after parsing attributes in process `syz.3.152'. [ 78.104688][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 78.104718][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.152'. [ 78.127258][ T6471] ip6t_ah: unknown flags 7 [ 78.244165][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 78.284017][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.284614][ T6484] bridge0: port 1(ªªªªª») entered disabled state [ 78.417809][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 78.417827][ T44] audit: type=1400 audit(1790429027.652:396): avc: denied { unlink } for pid=5735 comm="syz-executor" name="file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.427418][ T6452] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 78.467374][ T6492] FAULT_INJECTION: forcing a failure. [ 78.467374][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 78.467395][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 78.467410][ T6492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.467417][ T6492] Call Trace: [ 78.467421][ T6492] [ 78.467426][ T6492] dump_stack_lvl+0x100/0x190 [ 78.467446][ T6492] should_fail_ex.cold+0x5/0xa [ 78.467463][ T6492] should_failslab+0xc2/0x120 [ 78.467482][ T6492] __kmalloc_noprof+0xfc/0x840 [ 78.467496][ T6492] ? lsm_blob_alloc+0x68/0x90 [ 78.467516][ T6492] lsm_blob_alloc+0x68/0x90 [ 78.467532][ T6492] security_bpf_map_create+0x31/0x2d0 [ 78.467547][ T6492] map_create+0x143a/0x30d0 [ 78.467563][ T6492] ? find_held_lock+0x2b/0x80 [ 78.467580][ T6492] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.467598][ T6492] ? avc_has_perm_noaudit+0x11e/0x470 [ 78.467618][ T6492] ? __pfx_map_create+0x10/0x10 [ 78.467634][ T6492] ? avc_has_perm+0x135/0x1e0 [ 78.467651][ T6492] ? __pfx_avc_has_perm+0x10/0x10 [ 78.467666][ T6492] ? __might_fault+0xc5/0x140 [ 78.467685][ T6492] ? __might_fault+0xc5/0x140 [ 78.467704][ T6492] ? selinux_bpf+0xfb/0x150 [ 78.467716][ T6492] __sys_bpf+0x12a0/0x4a30 [ 78.467730][ T6492] ? __pfx___sys_bpf+0x10/0x10 [ 78.467740][ T6492] ? find_held_lock+0x2b/0x80 [ 78.467764][ T6492] ? futex_wake+0x4ea/0x5e0 [ 78.467785][ T6492] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.467802][ T6492] ? find_held_lock+0x2b/0x80 [ 78.467818][ T6492] ? ksys_write+0x190/0x250 [ 78.467831][ T6492] ? ksys_write+0x190/0x250 [ 78.467851][ T6492] ? __x64_sys_futex+0x34f/0x4d0 [ 78.467867][ T6492] ? __x64_sys_futex+0x358/0x4d0 [ 78.467885][ T6492] ? xfd_validate_state+0x129/0x190 [ 78.467900][ T6492] ? __x64_sys_bpf+0xce/0x140 [ 78.467911][ T6492] __x64_sys_bpf+0xce/0x140 [ 78.467925][ T6492] ? do_syscall_64+0xae/0x790 [ 78.467936][ T6492] do_syscall_64+0x123/0x790 [ 78.467947][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.467959][ T6492] RIP: 0033:0x7fead5b9e159 [ 78.467969][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.467980][ T6492] RSP: 002b:00007fead6a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.467991][ T6492] RAX: ffffffffffffffda RBX: 00007fead5e25fa0 RCX: 00007fead5b9e159 [ 78.467998][ T6492] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 78.468005][ T6492] RBP: 00007fead5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 78.468012][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.468019][ T6492] R13: 00007fead5e26038 R14: 00007fead5e25fa0 R15: 00007ffd35f9ef58 [ 78.468033][ T6492] [ 78.488082][ T44] audit: type=1400 audit(1790429027.722:397): avc: denied { execute } for pid=6495 comm="syz.0.162" path="/29/bus" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.528295][ T6503] bridge_slave_0: left allmulticast mode [ 78.528309][ T6503] bridge_slave_0: left promiscuous mode [ 78.528996][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.537181][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 78.541113][ T6503] bridge_slave_1: left allmulticast mode [ 78.541128][ T6503] bridge_slave_1: left promiscuous mode [ 78.541251][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.573426][ T6503] bond0: (slave bond_slave_0): Releasing backup interface [ 78.577069][ T44] audit: type=1400 audit(1790429027.812:398): avc: denied { setopt } for pid=6507 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.592743][ T6510] [U] ¥ [ 78.592753][ T6510] [U] [ 78.592762][ T6510] [U] [ 78.592776][ T6510] [U] [ 78.592785][ T6510] [U] H [ 78.592795][ T6510] [U] [ 78.592803][ T6510] [U] [ 78.592818][ T6510] [U] >ÿÿ [ 78.592845][ T6510] [U] [ 78.592851][ T6510] [U] [ 78.592865][ T6510] [U] ! [ 78.592871][ T6510] [U] [ 78.592876][ T6510] [U] [ 78.592898][ T6510] [U] [ 78.592903][ T6510] [U] [ 78.592929][ T6510] [U] [ 78.592940][ T6510] [U] € [ 78.592967][ T6510] [U] [ 78.592976][ T6510] [U] [ 78.592985][ T6510] [U] [ 78.592999][ T6510] [U] [ 78.593014][ T6510] [U] [ 78.593035][ T6510] [U] [ 78.593060][ T6510] [U] [ 78.593138][ T6510] [U] [ 78.593165][ T6510] [U] [ 78.593194][ T6510] [U] [ 78.593218][ T6510] [U] [ 78.593242][ T6510] [U] [ 78.593288][ T6510] [U] [ 78.593314][ T6510] [U] [ 78.593339][ T6510] [U] [ 78.593766][ T6510] [U] [ 78.593795][ T6510] [U] [ 78.593822][ T6510] [U] [ 78.593848][ T6510] [U] [ 78.593875][ T6510] [U] [ 78.593899][ T6510] [U] [ 78.593918][ T6510] [U] [ 78.593933][ T6510] [U] [ 78.593959][ T6510] [U] [ 78.593982][ T6510] [U] [ 78.594006][ T6510] [U] [ 78.594029][ T6510] [U] [ 78.594045][ T6510] [U] [ 78.594059][ T6510] [U] [ 78.594074][ T6510] [U] [ 78.594089][ T6510] [U] [ 78.594110][ T6510] [U] [ 78.594125][ T6510] [U] [ 78.594139][ T6510] [U] [ 78.594154][ T6510] [U] [ 78.594169][ T6510] [U] [ 78.594184][ T6510] [U] [ 78.594198][ T6510] [U] [ 78.594213][ T6510] [U] [ 78.594240][ T6510] [U] [ 78.594262][ T6510] [U] [ 78.594283][ T6510] [U] [ 78.594328][ T6510] [U] [ 78.594702][ T6510] [U] [ 78.594731][ T6510] [U] [ 78.594772][ T6510] [U] [ 78.594811][ T6510] [U] [ 78.594903][ T6510] [U] [ 78.594930][ T6510] [U] [ 78.594957][ T6510] [U] [ 78.594983][ T6510] [U] [ 78.595012][ T6510] [U] [ 78.595040][ T6510] [U] [ 78.595059][ T6510] [U] [ 78.595078][ T6510] [U] [ 78.595112][ T6510] [U] [ 78.595135][ T6510] [U] [ 78.595159][ T6510] [U] [ 78.595183][ T6510] [U] [ 78.595208][ T6510] [U] [ 78.595233][ T6510] [U] [ 78.595256][ T6510] [U] [ 78.595279][ T6510] [U] [ 78.595311][ T6510] [U] [ 78.595335][ T6510] [U] [ 78.595358][ T6510] [U] [ 78.595389][ T6510] [U] [ 78.595416][ T6510] [U] [ 78.595443][ T6510] [U] [ 78.595469][ T6510] [U] [ 78.595496][ T6510] [U] [ 78.595531][ T6510] [U] [ 78.595556][ T6510] [U] [ 78.595578][ T6510] [U] [ 78.595601][ T6510] [U] [ 78.595627][ T6510] [U] [ 78.595650][ T6510] [U] [ 78.595673][ T6510] [U] [ 78.595697][ T6510] [U] [ 78.595728][ T6510] [U] [ 78.595751][ T6510] [U] [ 78.595774][ T6510] [U] [ 78.595797][ T6510] [U] [ 78.595823][ T6510] [U] [ 78.595847][ T6510] [U] [ 78.595870][ T6510] [U] [ 78.595893][ T6510] [U] [ 78.595925][ T6510] [U] [ 78.595949][ T6510] [U] [ 78.595974][ T6510] [U] [ 78.595996][ T6510] [U] [ 78.596021][ T6510] [U] [ 78.596043][ T6510] [U] [ 78.596067][ T6510] [U] [ 78.596091][ T6510] [U] [ 78.596123][ T6510] [U] [ 78.596148][ T6510] [U] [ 78.596170][ T6510] [U] [ 78.596185][ T6510] [U] [ 78.596225][ T6510] [U] [ 78.596243][ T6510] [U] [ 78.596260][ T6510] [U] [ 78.596276][ T6510] [U] [ 78.596300][ T6510] [U] [ 78.596317][ T6510] [U] [ 78.596335][ T6510] [U] [ 78.596357][ T6510] [U] [ 78.596389][ T6510] [U] [ 78.596412][ T6510] [U] [ 78.596439][ T6510] [U] [ 78.596463][ T6510] [U] [ 78.596486][ T6510] [U] [ 78.596502][ T6510] [U] [ 78.596519][ T6510] [U] [ 78.596536][ T6510] [U] [ 78.596552][ T6510] [U] [ 78.596574][ T6510] [U] [ 78.596599][ T6510] [U] [ 78.596621][ T6510] [U] [ 78.596647][ T6510] [U] [ 78.596670][ T6510] [U] [ 78.596694][ T6510] [U] [ 78.604149][ T6503] bond0: (slave bond_slave_1): Releasing backup interface [ 78.613315][ T6503] team0: Port device team_slave_0 removed [ 78.615875][ T6503] team0: Port device team_slave_1 removed [ 78.616271][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.616345][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.617906][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.617916][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.620023][ T6503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.624377][ T6500] [U] [ 78.625581][ T44] audit: type=1400 audit(1790429027.862:399): avc: denied { map } for pid=6507 comm="syz.1.165" path="socket:[14630]" dev="sockfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.625609][ T44] audit: type=1400 audit(1790429027.862:400): avc: denied { read } for pid=6507 comm="syz.1.165" path="socket:[14630]" dev="sockfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.651018][ T44] audit: type=1400 audit(1790429027.892:401): avc: denied { connect } for pid=6513 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.651981][ T44] audit: type=1400 audit(1790429027.892:402): avc: denied { write } for pid=6513 comm="syz.0.166" laddr=172.20.20.10 lport=43741 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.656387][ T44] audit: type=1400 audit(1790429027.892:403): avc: denied { create } for pid=6513 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.681117][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 78.686852][ T6520] netlink: 'syz.0.168': attribute type 4 has an invalid length. [ 78.686869][ T6520] netlink: 152 bytes leftover after parsing attributes in process `syz.0.168'. [ 78.692436][ T6520] .`: renamed from bond0 (while UP) [ 78.733802][ T44] audit: type=1400 audit(1790429027.972:404): avc: denied { create } for pid=6525 comm="syz.0.169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.735586][ T44] audit: type=1400 audit(1790429027.972:405): avc: denied { mounton } for pid=6525 comm="syz.0.169" path="/33/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.839011][ T6536] IPv6: NLM_F_REPLACE set, but no existing node found! [ 79.269851][ T5086] Bluetooth: hci2: command tx timeout [ 79.370560][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.376146][ T5790] usb 7-1: USB disconnect, device number 4 [ 79.569173][ T6575] evm: overlay not supported [ 79.635096][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 79.749775][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 80.129677][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.137563][ T6602] tmpfs: Bad value for 'mpol' [ 80.255421][ T5086] Bluetooth: unknown link type 128 [ 80.290144][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.291017][ T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.291032][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.292094][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.292108][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.292130][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.293339][ T30] usb 7-1: config 0 descriptor?? [ 80.703423][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703460][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703479][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703498][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703516][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703534][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703553][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703571][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703589][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.703607][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.741817][ T30] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 80.897821][ T6611] busy [ 80.931549][ T6613] netlink: 112 bytes leftover after parsing attributes in process `syz.1.195'. [ 80.932589][ T5086] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 81.125559][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 81.125575][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 81.137776][ T6627] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.475404][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 81.595517][ T6640] x_tables: duplicate underflow at hook 1 [ 81.596306][ T6640] netlink: 'syz.1.203': attribute type 15 has an invalid length. [ 81.596318][ T6640] netlink: 348 bytes leftover after parsing attributes in process `syz.1.203'. [ 81.896765][ T6646] busy [ 82.130287][ T5790] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 82.309749][ T5733] Bluetooth: hci3: command 0x0405 tx timeout [ 82.600650][ T6657] busy [ 82.818532][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 82.904731][ T6674] loop5: detected capacity change from 0 to 7 [ 82.906859][ T6674] Dev loop5: unable to read RDB block 7 [ 82.906875][ T6674] loop5: AHDI p1 p2 [ 82.906886][ T6674] loop5: partition table partially beyond EOD, truncated [ 82.907164][ T6674] loop5: p1 start 1818582900 is beyond EOD, truncated [ 82.966614][ T6678] ip_tables: iptables: counters copy to user failed while replacing table [ 82.975043][ T6677] busy [ 83.094883][ T5733] Bluetooth: unknown link type 128 [ 83.190533][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 83.191513][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 83.306982][ T6687] syz.3.218 (6687) used obsolete PPPIOCDETACH ioctl [ 83.446230][ T44] kauditd_printk_skb: 67 callbacks suppressed [ 83.446250][ T44] audit: type=1400 audit(1790429032.682:473): avc: denied { write } for pid=6693 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.446294][ T44] audit: type=1400 audit(1790429032.682:474): avc: denied { remove_name } for pid=6693 comm="rm" name="resolv.conf.ppp0.link" dev="tmpfs" ino=2925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.505620][ T44] audit: type=1400 audit(1790429032.742:475): avc: denied { write } for pid=6695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.558158][ T44] audit: type=1400 audit(1790429032.792:476): avc: denied { write } for pid=6698 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.625061][ T5806] usb 7-1: USB disconnect, device number 5 [ 83.629783][ T44] audit: type=1400 audit(1790429032.862:477): avc: denied { write } for pid=6700 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.634611][ T44] audit: type=1400 audit(1790429032.872:478): avc: denied { bind } for pid=6700 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.653138][ T44] audit: type=1400 audit(1790429032.892:479): avc: denied { create } for pid=6700 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.725137][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.796393][ T44] audit: type=1400 audit(1790429033.032:480): avc: denied { execute } for pid=6711 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.796774][ T44] audit: type=1400 audit(1790429033.032:481): avc: denied { execute_no_trans } for pid=6711 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.824391][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.870405][ T44] audit: type=1400 audit(1790429033.112:482): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.888349][ T6723] bond0: entered allmulticast mode [ 83.907266][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.909396][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.909917][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.910268][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.910549][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.910766][ T6724] busy [ 83.912787][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.918457][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 84.011436][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.016547][ T6744] Bluetooth: MGMT ver 1.23 [ 84.023722][ T6746] tmpfs: Bad value for 'mpol' [ 84.031507][ T6746] FAULT_INJECTION: forcing a failure. [ 84.031507][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 84.031538][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.2.226 Not tainted syzkaller #0 PREEMPT(full) [ 84.031560][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.031571][ T6746] Call Trace: [ 84.031578][ T6746] [ 84.031585][ T6746] dump_stack_lvl+0x100/0x190 [ 84.031635][ T6746] should_fail_ex.cold+0x5/0xa [ 84.031664][ T6746] should_failslab+0xc2/0x120 [ 84.031708][ T6746] __kmalloc_noprof+0xfc/0x840 [ 84.031732][ T6746] ? tomoyo_encode2+0xfb/0x3c0 [ 84.031762][ T6746] tomoyo_encode2+0xfb/0x3c0 [ 84.031793][ T6746] tomoyo_encode+0x29/0x50 [ 84.031817][ T6746] tomoyo_realpath_from_path+0x18c/0x690 [ 84.031849][ T6746] tomoyo_check_open_permission+0x2af/0x3c0 [ 84.031878][ T6746] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 84.031909][ T6746] ? hook_file_open+0x248/0x8e0 [ 84.031959][ T6746] ? path_get+0x61/0x80 [ 84.031989][ T6746] tomoyo_file_open+0x6b/0x90 [ 84.032018][ T6746] security_file_open+0xb5/0x1e0 [ 84.032044][ T6746] do_dentry_open+0x588/0x14d0 [ 84.032072][ T6746] vfs_open+0x82/0x3f0 [ 84.032100][ T6746] path_openat+0x19fa/0x2440 [ 84.032127][ T6746] ? __pfx_path_openat+0x10/0x10 [ 84.032158][ T6746] do_file_open+0x20e/0x430 [ 84.032225][ T6746] ? __pfx_do_file_open+0x10/0x10 [ 84.032271][ T6746] ? _raw_spin_unlock+0x28/0x50 [ 84.032307][ T6746] ? alloc_fd+0x471/0x7a0 [ 84.032341][ T6746] do_sys_openat2+0x10f/0x1e0 [ 84.032369][ T6746] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.032394][ T6746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.032415][ T6746] __x64_sys_openat+0x12d/0x210 [ 84.032443][ T6746] ? __pfx___x64_sys_openat+0x10/0x10 [ 84.032479][ T6746] do_syscall_64+0x123/0x790 [ 84.032500][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.032520][ T6746] RIP: 0033:0x7f7047f9e159 [ 84.032536][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.032555][ T6746] RSP: 002b:00007f7048de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.032575][ T6746] RAX: ffffffffffffffda RBX: 00007f7048225fa0 RCX: 00007f7047f9e159 [ 84.032588][ T6746] RDX: 0000000000000002 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 84.032601][ T6746] RBP: 00007f704803506b R08: 0000000000000000 R09: 0000000000000000 [ 84.032614][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.032625][ T6746] R13: 00007f7048226038 R14: 00007f7048225fa0 R15: 00007ffdf848ef28 [ 84.032650][ T6746] [ 84.032715][ T6746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.252942][ T13] bridge_slave_1: left allmulticast mode [ 84.252978][ T13] bridge_slave_1: left promiscuous mode [ 84.254446][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.276631][ T13] bridge_slave_0: left allmulticast mode [ 84.276648][ T13] bridge_slave_0: left promiscuous mode [ 84.276776][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.456748][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.458728][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.462018][ T13] bond0 (unregistering): Released all slaves [ 84.473790][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.639511][ T13] rxrpc: Leaked peer b2 {2} 127.0.0.1:7003 [ 84.735105][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 84.802261][ T6779] process 'syz.2.231' launched './file0' with NULL argv: empty string added [ 84.865384][ T6784] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 84.885735][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.886061][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.886123][ T6726] bridge_slave_0: entered allmulticast mode [ 84.886875][ T6726] bridge_slave_0: entered promiscuous mode [ 84.888983][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.889023][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.889083][ T6726] bridge_slave_1: entered allmulticast mode [ 84.889931][ T6726] bridge_slave_1: entered promiscuous mode [ 84.896012][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.901141][ T6788] IPVS: Error joining to the multicast group [ 84.923042][ T13] hsr_slave_0: left promiscuous mode [ 84.923612][ T13] hsr_slave_1: left promiscuous mode [ 84.924280][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.924308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.925038][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.925053][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.934916][ T13] veth1_macvtap: left promiscuous mode [ 84.934948][ T13] veth0_macvtap: left promiscuous mode [ 84.934996][ T13] veth1_vlan: left promiscuous mode [ 84.935035][ T13] veth0_vlan: left promiscuous mode [ 85.097540][ T13] team0 (unregistering): Port device team_slave_1 removed [ 85.107128][ T13] team0 (unregistering): Port device team_slave_0 removed [ 85.109874][ T5086] Bluetooth: hci3: command 0x0405 tx timeout [ 85.175625][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.178412][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.201344][ T6726] team0: Port device team_slave_0 added [ 85.202577][ T6726] team0: Port device team_slave_1 added [ 85.216960][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.216971][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.216984][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.217886][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.217894][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.217906][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.250750][ T6726] hsr_slave_0: entered promiscuous mode [ 85.251575][ T6726] hsr_slave_1: entered promiscuous mode [ 85.252151][ T6726] debugfs: 'hsr0' already exists in 'hsr' [ 85.252188][ T6726] Cannot create hsr debugfs directory [ 85.356225][ T6793] busy [ 85.990640][ T5086] Bluetooth: hci0: command tx timeout [ 87.790493][ T6778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.802087][ T6726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.832617][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.833146][ T6726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.848085][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.849553][ T6726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.866986][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.867397][ T6726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.874370][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.946104][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.956352][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.962877][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.962965][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.970814][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.970899][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.036680][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 88.072178][ T5086] Bluetooth: hci0: command tx timeout [ 88.111223][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.165081][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.165169][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.165212][ T6855] busy [ 88.165278][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.165348][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.170230][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.170307][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.170376][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.170448][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 88.250762][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.308625][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.351226][ T6870] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 88.378018][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6875 comm=syz.0.247 [ 88.469486][ T6726] veth0_vlan: entered promiscuous mode [ 88.476218][ T6726] veth1_vlan: entered promiscuous mode [ 88.490050][ T6726] veth0_macvtap: entered promiscuous mode [ 88.492095][ T6726] veth1_macvtap: entered promiscuous mode [ 88.499463][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.501384][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.539864][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539892][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539910][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539927][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.573468][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.573482][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.602750][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.602769][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.615735][ T44] kauditd_printk_skb: 27 callbacks suppressed [ 88.615750][ T44] audit: type=1400 audit(1790429037.852:510): avc: denied { create } for pid=6889 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 88.626781][ T44] audit: type=1400 audit(1790429037.852:511): avc: denied { mounton } for pid=6726 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 88.636171][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.662863][ T6894] PM: Enabling pm_trace changes system date and time during resume. [ 88.662863][ T6894] PM: Correct system time has to be restored manually after resume. [ 89.035049][ T44] audit: type=1400 audit(1790429038.272:512): avc: denied { bind } for pid=6897 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.221947][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222040][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222143][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222226][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222309][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222398][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222644][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222730][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222813][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222894][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.222979][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223060][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223141][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223225][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223310][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223388][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223457][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223527][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223596][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223666][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223735][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223804][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223874][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.223986][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224211][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224282][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224348][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224418][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224482][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224546][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224612][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224802][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224882][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.224952][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225034][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225109][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225187][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225264][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225346][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225430][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225511][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225598][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225681][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.225769][ T6906] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 89.326722][ T6908] cgroup: fork rejected by pids controller in /syz4 [ 89.372376][ T6653] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 89.481112][ T6946] xt_IDLETIMER: timeout value is zero [ 89.484577][ T44] audit: type=1400 audit(1790429038.722:513): avc: denied { ioctl } for pid=6945 comm="syz.0.254" path="socket:[15345]" dev="sockfs" ino=15345 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.509719][ T6653] usb 6-1: device descriptor read/64, error -71 [ 89.588459][ T44] audit: type=1400 audit(1790429038.822:514): avc: denied { mounton } for pid=6951 comm="syz.0.257" path="/file0" dev="ramfs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 89.593849][ T6952] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.593873][ T6952] overlayfs: failed to set xattr on upper [ 89.593880][ T6952] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.593887][ T6952] overlayfs: ...falling back to index=off. [ 89.593893][ T6952] overlayfs: ...falling back to uuid=null. [ 89.769678][ T6653] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 89.910041][ T6653] usb 6-1: device descriptor read/64, error -71 [ 90.029941][ T6653] usb usb6-port1: attempt power cycle [ 90.039367][ T6909] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 90.110829][ T44] audit: type=1400 audit(1790429039.352:515): avc: denied { create } for pid=6963 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.111120][ T44] audit: type=1400 audit(1790429039.352:516): avc: denied { bind } for pid=6963 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.111979][ T6964] __nla_validate_parse: 11 callbacks suppressed [ 90.111989][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.259'. [ 90.149727][ T5086] Bluetooth: hci0: command tx timeout [ 90.177197][ T44] audit: type=1400 audit(1790429039.412:517): avc: denied { read } for pid=6965 comm="syz.4.260" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.177450][ T44] audit: type=1400 audit(1790429039.412:518): avc: denied { open } for pid=6965 comm="syz.4.260" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.183981][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 90.185818][ T44] audit: type=1400 audit(1790429039.422:519): avc: denied { write } for pid=6965 comm="(\" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.330564][ T6975] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 90.369758][ T6653] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 90.375630][ T6975] syz.0.264 (6975) used greatest stack depth: 19288 bytes left [ 90.391198][ T6653] usb 6-1: device descriptor read/8, error -71 [ 90.454108][ T6981] geneve2: entered allmulticast mode [ 90.504060][ T6982] netlink: 17 bytes leftover after parsing attributes in process `syz.0.266'. [ 90.639852][ T6653] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 90.660540][ T6653] usb 6-1: device descriptor read/8, error -71 [ 90.772517][ T6653] usb usb6-port1: unable to enumerate USB device [ 91.049748][ T35] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.182873][ T6986] netlink: zone id is out of range [ 91.182929][ T6986] netlink: zone id is out of range [ 91.182936][ T6986] netlink: zone id is out of range [ 91.182941][ T6986] netlink: zone id is out of range [ 91.182947][ T6986] netlink: zone id is out of range [ 91.182952][ T6986] netlink: zone id is out of range [ 91.199804][ T35] usb 9-1: Using ep0 maxpacket: 8 [ 91.200603][ T35] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 91.202420][ T35] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 91.202440][ T35] usb 9-1: config 0 has no interface number 0 [ 91.202469][ T35] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.202486][ T35] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 91.202507][ T35] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 91.202526][ T35] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.202546][ T35] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.204790][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.204809][ T35] usb 9-1: Product: syz [ 91.204821][ T35] usb 9-1: Manufacturer: syz [ 91.204833][ T35] usb 9-1: SerialNumber: syz [ 91.207380][ T35] usb 9-1: config 0 descriptor?? [ 91.371378][ T6996] trusted_key: encrypted_key: master key parameter 'þSPKï&¤¼' is invalid [ 91.404348][ T6998] program syz.2.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.421800][ T35] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 91.454627][ T7002] 0: reclassify loop, rule prio 0, protocol 03 [ 91.552361][ T7004] netlink: 'syz.2.275': attribute type 39 has an invalid length. [ 91.629161][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.267'. [ 91.679837][ T5812] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.705293][ T7009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.834132][ T5812] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 91.836456][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.836476][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.836489][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.836503][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.847063][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.847081][ T5812] usb 5-1: Product: syz [ 91.847090][ T5812] usb 5-1: Manufacturer: syz [ 91.847098][ T5812] usb 5-1: SerialNumber: syz [ 91.849540][ T5812] usb 5-1: config 0 descriptor?? [ 92.055623][ T5812] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 92.085481][ T7020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.160980][ T7029] VFS: Mount too revealing [ 92.231788][ T5086] Bluetooth: hci0: command 0x0419 tx timeout [ 92.275591][ C2] iowarrior 9-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 92.276078][ T5812] usb 5-1: USB disconnect, device number 7 [ 92.394236][ T7045] busy [ 92.431780][ T7049] loop0: detected capacity change from 0 to 32768 [ 92.449863][ T7044] FAULT_INJECTION: forcing a failure. [ 92.449863][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 92.449884][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.2.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.449900][ T7044] Tainted: [L]=SOFTLOCKUP [ 92.449903][ T7044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.449910][ T7044] Call Trace: [ 92.449915][ T7044] [ 92.449919][ T7044] dump_stack_lvl+0x100/0x190 [ 92.449939][ T7044] should_fail_ex.cold+0x5/0xa [ 92.449968][ T7044] should_failslab+0xc2/0x120 [ 92.449986][ T7044] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.449999][ T7044] ? fuse_request_alloc+0x22/0x200 [ 92.450019][ T7044] fuse_request_alloc+0x22/0x200 [ 92.450036][ T7044] fuse_get_req+0x20a/0x400 [ 92.450053][ T7044] ? __pfx_fuse_get_req+0x10/0x10 [ 92.450071][ T7044] ? from_kgid+0x8f/0xd0 [ 92.450084][ T7044] ? __pfx_from_kgid+0x10/0x10 [ 92.450097][ T7044] ? lock_acquire+0x1d1/0x380 [ 92.450109][ T7044] ? unwind_next_frame+0xbd/0x2090 [ 92.450129][ T7044] fuse_chan_send+0x259/0x9c0 [ 92.450144][ T7044] __fuse_simple_request+0x18e/0x1e0 [ 92.450157][ T7044] fuse_getxattr+0x24e/0x420 [ 92.450175][ T7044] ? __pfx_fuse_getxattr+0x10/0x10 [ 92.450192][ T7044] ? is_bpf_text_address+0x94/0x1a0 [ 92.450207][ T7044] ? kernel_text_address+0x8d/0x100 [ 92.450225][ T7044] ? __kernel_text_address+0xd/0x30 [ 92.450242][ T7044] ? unwind_get_return_address+0x59/0xa0 [ 92.450264][ T7044] ? __lock_acquire+0x5c0/0x1f40 [ 92.450275][ T7044] ? _parse_integer_limit+0x1ac/0x220 [ 92.450295][ T7044] ? __pfx_fuse_xattr_get+0x10/0x10 [ 92.450311][ T7044] fuse_xattr_get+0x77/0xb0 [ 92.450329][ T7044] __vfs_getxattr+0x13d/0x1a0 [ 92.450345][ T7044] ? __pfx___vfs_getxattr+0x10/0x10 [ 92.450365][ T7044] cap_inode_need_killpriv+0x40/0x60 [ 92.450377][ T7044] security_inode_need_killpriv+0x87/0x1e0 [ 92.450391][ T7044] file_remove_privs_flags+0x2b8/0x590 [ 92.450411][ T7044] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 92.450428][ T7044] ? generic_write_check_limits+0x1ef/0x280 [ 92.450448][ T7044] ? generic_write_checks+0x321/0x490 [ 92.450459][ T7044] ? __pfx_generic_write_checks+0x10/0x10 [ 92.450470][ T7044] ? __pfx_down_write+0x10/0x10 [ 92.450482][ T7044] ? lock_acquire+0x1d1/0x380 [ 92.450495][ T7044] kiocb_modified+0x5a/0xa0 [ 92.450512][ T7044] fuse_file_write_iter+0x349/0x960 [ 92.450527][ T7044] vfs_write+0x6af/0x1050 [ 92.450540][ T7044] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 92.450554][ T7044] ? __pfx_vfs_write+0x10/0x10 [ 92.450565][ T7044] ? find_held_lock+0x2b/0x80 [ 92.450590][ T7044] ksys_write+0x12a/0x250 [ 92.450602][ T7044] ? __pfx_ksys_write+0x10/0x10 [ 92.450618][ T7044] do_syscall_64+0x123/0x790 [ 92.450630][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.450641][ T7044] RIP: 0033:0x7f7047f9e159 [ 92.450651][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.450662][ T7044] RSP: 002b:00007f7048de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.450674][ T7044] RAX: ffffffffffffffda RBX: 00007f7048225fa0 RCX: 00007f7047f9e159 [ 92.450681][ T7044] RDX: 0000000000001001 RSI: 0000200000000000 RDI: 0000000000000005 [ 92.450687][ T7044] RBP: 00007f7048de3090 R08: 0000000000000000 R09: 0000000000000000 [ 92.450694][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.450700][ T7044] R13: 00007f7048226038 R14: 00007f7048225fa0 R15: 00007ffdf848ef28 [ 92.450715][ T7044] [ 92.622867][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 92.697641][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 93.820738][ T35] usb 9-1: USB disconnect, device number 2 [ 93.852365][ T7074] kAFS: No cell specified [ 93.913149][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 93.913163][ T44] audit: type=1400 audit(1790429043.152:528): avc: denied { getopt } for pid=7076 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.995936][ T7085] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.995950][ T7085] UDF-fs: Scanning with blocksize 2048 failed [ 93.997612][ T7085] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 93.997623][ T7085] UDF-fs: Scanning with blocksize 4096 failed [ 94.005319][ T7084] binder: 7083:7084 ioctl c0285840 200000000180 returned -22 [ 94.005966][ T7085] program syz.4.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.127255][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 94.309701][ T5086] Bluetooth: hci0: command 0x0419 tx timeout [ 94.419170][ T5086] Bluetooth: unknown link type 128 [ 94.659002][ T5790] hsr0: entered promiscuous mode [ 94.802482][ T7103] xt_hashlimit: size too large, truncated to 1048576 [ 94.898483][ T7107] kAFS: No cell specified [ 95.302179][ T7130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.309'. [ 95.313372][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 95.412157][ T5086] Bluetooth: unknown link type 128 [ 95.458274][ T7133] syzkaller0: entered promiscuous mode [ 95.458289][ T7133] syzkaller0: entered allmulticast mode [ 95.554663][ T7154] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 95.592818][ T7152] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 95.678894][ T7156] kvm [7155]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 95.680786][ T7156] kvm [7155]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 95.955661][ T44] audit: type=1400 audit(1790429045.192:529): avc: denied { mounton } for pid=7166 comm="syz.4.320" path="/proc/117/task" dev="proc" ino=19842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.957900][ T44] audit: type=1400 audit(1790429045.192:530): avc: denied { connect } for pid=7166 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.053570][ T7177] kAFS: No cell specified [ 96.208806][ T7187] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 96.209362][ T7187] syz_tun: entered promiscuous mode [ 96.223245][ T7187] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.272635][ T5086] Bluetooth: unknown link type 128 [ 96.283250][ T7193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7193 comm=syz.1.328 [ 96.283782][ T7193] netlink: 'syz.1.328': attribute type 2 has an invalid length. [ 96.283799][ T7193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.328'. [ 96.302037][ T7193] : entered promiscuous mode [ 96.469944][ T5086] Bluetooth: hci2: command tx timeout [ 96.549795][ T44] audit: type=1400 audit(1790429045.782:531): avc: denied { ioctl } for pid=7213 comm="syz.2.333" path="socket:[17827]" dev="sockfs" ino=17827 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.577270][ T7181] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 96.721882][ T7229] busy [ 96.731676][ T7232] program syz.4.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.733515][ T7232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.338'. [ 96.989662][ T25] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 97.143228][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 97.143269][ T25] usb 9-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=f1.74 [ 97.144265][ T25] usb 9-1: config 12 has an invalid interface number: 29 but max is 0 [ 97.144284][ T25] usb 9-1: config 12 has no interface number 0 [ 97.144305][ T25] usb 9-1: config 12 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.146744][ T25] usb 9-1: string descriptor 0 read error: -22 [ 97.146895][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.189717][ T5086] Bluetooth: hci0: command 0x0419 tx timeout [ 97.277716][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.277914][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.360511][ T5876] usb 9-1: USB disconnect, device number 3 [ 97.416339][ T44] audit: type=1400 audit(1790429046.652:532): avc: denied { search } for pid=7262 comm="syz.2.346" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.416391][ T44] audit: type=1400 audit(1790429046.652:533): avc: denied { read } for pid=7262 comm="syz.2.346" name="uprobe_events" dev="tracefs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.461897][ T5086] Bluetooth: unknown link type 128 [ 97.529879][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.669777][ T25] usb 5-1: device descriptor read/64, error -71 [ 97.909721][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 97.992429][ T7275] btrfs: Unknown parameter 'ó˜h½5óÍ¡„'l) €ÍZR:' [ 98.018926][ T7277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.351'. [ 98.028953][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.351'. [ 98.040279][ T25] usb 5-1: device descriptor read/64, error -71 [ 98.067491][ T44] audit: type=1400 audit(1790429047.302:534): avc: denied { setopt } for pid=7281 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.150031][ T25] usb usb5-port1: attempt power cycle [ 98.191642][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 98.309676][ T5086] Bluetooth: hci3: command 0x0405 tx timeout [ 98.499735][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.530407][ T25] usb 5-1: device descriptor read/8, error -71 [ 98.559721][ T5086] Bluetooth: hci2: command tx timeout [ 98.597889][ T44] audit: type=1400 audit(1790429047.832:535): avc: denied { write } for pid=7295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.657268][ T44] audit: type=1400 audit(1790429047.892:536): avc: denied { write } for pid=7298 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.765891][ T44] audit: type=1400 audit(1790429048.002:537): avc: denied { write } for pid=7301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.769891][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.807187][ T25] usb 5-1: device descriptor read/8, error -71 [ 98.920473][ T25] usb usb5-port1: unable to enumerate USB device [ 98.965372][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 98.965392][ T44] audit: type=1400 audit(1790429048.202:539): avc: denied { connect } for pid=7307 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.022588][ T7314] busy [ 99.082426][ T5086] Bluetooth: unknown link type 128 [ 99.084760][ T7320] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 99.085261][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 99.107018][ T44] audit: type=1400 audit(1790429048.342:540): avc: denied { write } for pid=7316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.135916][ T7324] nbd: must specify a device to reconfigure [ 99.184050][ T7327] netlink: 256 bytes leftover after parsing attributes in process `syz.4.361'. [ 99.185245][ T44] audit: type=1400 audit(1790429048.422:541): avc: denied { append } for pid=7326 comm="syz.4.361" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.188545][ T7327] loop9: detected capacity change from 0 to 7 [ 99.192166][ T7327] Dev loop9: unable to read RDB block 7 [ 99.192197][ T7327] loop9: unable to read partition table [ 99.192398][ T7327] loop9: partition table beyond EOD, truncated [ 99.192427][ T7327] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.193658][ T44] audit: type=1400 audit(1790429048.432:542): avc: denied { write } for pid=7325 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.354340][ T44] audit: type=1400 audit(1790429048.592:543): avc: denied { create } for pid=7336 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.358599][ T44] audit: type=1400 audit(1790429048.592:544): avc: denied { bind } for pid=7336 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.519866][ T5086] Bluetooth: hci1: command tx timeout [ 99.609729][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.692226][ T44] audit: type=1400 audit(1790429048.932:545): avc: denied { write } for pid=7342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.749748][ T57] usb 6-1: device descriptor read/64, error -71 [ 99.756233][ T44] audit: type=1400 audit(1790429048.992:546): avc: denied { write } for pid=7346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.900701][ T44] audit: type=1400 audit(1790429049.142:547): avc: denied { mmap_zero } for pid=7340 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 99.989882][ T57] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.113304][ T44] audit: type=1400 audit(1790429049.352:548): avc: denied { append } for pid=7350 comm="syz.4.366" name="demux0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.129637][ T57] usb 6-1: device descriptor read/64, error -71 [ 100.240007][ T57] usb usb6-port1: attempt power cycle [ 100.542363][ T7373] usbip-vudc usbip-vudc.0: gadget not bound [ 100.545646][ T7370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7370 comm=syz.0.370 [ 100.599793][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.630602][ T57] usb 6-1: device descriptor read/8, error -71 [ 100.653141][ T5086] Bluetooth: unknown link type 128 [ 100.899735][ T57] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 100.921450][ T57] usb 6-1: device descriptor read/8, error -71 [ 101.032770][ T57] usb usb6-port1: unable to enumerate USB device [ 101.419674][ T6653] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 101.551099][ T6653] usb 9-1: device descriptor read/64, error -71 [ 101.589798][ T5086] Bluetooth: hci1: command tx timeout [ 101.799829][ T6653] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.904210][ T7409] cgroup: fork rejected by pids controller in /syz0 [ 101.929701][ T6653] usb 9-1: device descriptor read/64, error -71 [ 102.040049][ T6653] usb usb9-port1: attempt power cycle [ 102.086624][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 102.172266][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.0.383'. [ 102.183417][ T7461] FAULT_INJECTION: forcing a failure. [ 102.183417][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 102.183439][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.0.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.183455][ T7461] Tainted: [L]=SOFTLOCKUP [ 102.183459][ T7461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.183466][ T7461] Call Trace: [ 102.183470][ T7461] [ 102.183475][ T7461] dump_stack_lvl+0x100/0x190 [ 102.183496][ T7461] should_fail_ex.cold+0x5/0xa [ 102.183512][ T7461] should_failslab+0xc2/0x120 [ 102.183538][ T7461] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 102.183553][ T7461] ? sock_alloc_inode+0x26/0x2c0 [ 102.183575][ T7461] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.183593][ T7461] sock_alloc_inode+0x26/0x2c0 [ 102.183609][ T7461] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.183625][ T7461] alloc_inode+0x68/0x250 [ 102.183637][ T7461] sock_alloc+0x44/0x280 [ 102.183651][ T7461] ? security_socket_create+0x7f/0x250 [ 102.183665][ T7461] __sock_create+0xc2/0x860 [ 102.183678][ T7461] __sys_socket+0x14d/0x260 [ 102.183690][ T7461] ? __pfx___sys_socket+0x10/0x10 [ 102.183705][ T7461] __x64_sys_socket+0x72/0xb0 [ 102.183717][ T7461] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.183735][ T7461] do_syscall_64+0x123/0x790 [ 102.183747][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.183759][ T7461] RIP: 0033:0x7f8ef579e159 [ 102.183768][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.183780][ T7461] RSP: 002b:00007f8ef65c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.183792][ T7461] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e159 [ 102.183800][ T7461] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 102.183808][ T7461] RBP: 00007f8ef583506b R08: 0000000000000000 R09: 0000000000000000 [ 102.183818][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.183825][ T7461] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffc4f928418 [ 102.183839][ T7461] [ 102.183845][ T7461] net_ratelimit: 33 callbacks suppressed [ 102.183852][ T7461] socket: no more sockets [ 102.379647][ T6653] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 102.400164][ T6653] usb 9-1: device descriptor read/8, error -71 [ 102.639811][ T6653] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 102.660507][ T6653] usb 9-1: device descriptor read/8, error -71 [ 102.769976][ T6653] usb usb9-port1: unable to enumerate USB device [ 103.826476][ T7484] input: syz1 as /devices/virtual/input/input10 [ 103.878616][ T7489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7489 comm=syz.2.394 [ 103.889343][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 103.905239][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 103.906405][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 103.970695][ T7492] Cannot find add_set index 65532 as target [ 104.024768][ T44] kauditd_printk_skb: 32986 callbacks suppressed [ 104.024781][ T44] audit: type=1400 audit(1790429053.262:33535): avc: denied { append } for pid=7491 comm="syz.0.395" name="uprobe_events" dev="tracefs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 104.030039][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 104.040267][ T7493] Line length is too long: Should be less than 4094 [ 104.040324][ T7493] Line length is too long: Should be less than 4094 [ 104.061080][ T43] ip_vti0 speed is unknown, defaulting to 1000 [ 104.062496][ T7489] infiniband syz0: set active [ 104.062515][ T7489] infiniband syz0: added ip_vti0 [ 104.079048][ T7489] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 104.079071][ T7489] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 104.079095][ T7489] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 104.099536][ T7489] RDS/IB: syz0: added [ 104.108129][ T7489] smc: adding ib device syz0 with port count 1 [ 104.108231][ T7489] smc: ib device syz0 port 1 has no pnetid [ 104.110766][ T43] ip_vti0 speed is unknown, defaulting to 1000 [ 104.113184][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 104.188385][ T7499] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 104.188407][ T7499] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 104.190569][ T44] audit: type=1400 audit(1790429053.432:33536): avc: denied { firmware_load } for pid=7498 comm="syz.0.397" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 104.190655][ T7499] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 104.284548][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 104.376898][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 104.464509][ T7489] ip_vti0 speed is unknown, defaulting to 1000 [ 104.894487][ T7517] fuse: Bad value for 'fd' [ 104.894969][ T44] audit: type=1400 audit(1790429054.132:33537): avc: denied { read write } for pid=7516 comm="syz.1.402" name="file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.895170][ T44] audit: type=1400 audit(1790429054.132:33538): avc: denied { open } for pid=7516 comm="syz.1.402" path="/109/file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.969512][ T44] audit: type=1400 audit(1790429054.202:33539): avc: denied { shutdown } for pid=7518 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.113565][ T5086] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 105.117385][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.405'. [ 105.190020][ T44] audit: type=1400 audit(1790429054.432:33540): avc: denied { setopt } for pid=7526 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.193567][ T7527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.406'. [ 105.202814][ T7527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.406'. [ 105.440148][ T44] audit: type=1400 audit(1790429054.682:33541): avc: denied { cmd } for pid=7531 comm="iou-wrk-7532" path="socket:[20059]" dev="sockfs" ino=20059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.491446][ T44] audit: type=1400 audit(1790429054.732:33542): avc: denied { ioctl } for pid=7531 comm="syz.4.407" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.501887][ T44] audit: type=1400 audit(1790429054.742:33543): avc: denied { mount } for pid=7531 comm="syz.4.407" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.519622][ T44] audit: type=1807 audit(1790429054.752:33544): action=measure res=1 [ 105.588421][ T7531] ima: policy update completed [ 105.659039][ T7504] syz.2.399 (7504): drop_caches: 2 [ 105.803068][ T7548] fuse: Bad value for 'rootmode' [ 106.028339][ T7562] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 106.059064][ T7562] bond1: entered promiscuous mode [ 106.059313][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.319762][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.320890][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 106.332948][ T7572] jffs2: notice: (7572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 106.481932][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.483267][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.483285][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.483303][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.490155][ T5812] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 106.491062][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.491083][ T5812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 106.491113][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.496781][ T7565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.512435][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.512689][ T5812] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 106.549853][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.565380][ T5812] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 106.702671][ T7565] xt_hashlimit: invalid interval [ 106.718919][ T64] usb 7-1: USB disconnect, device number 6 [ 106.819698][ T35] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 106.869998][ T7562] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 106.872388][ T7562] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 106.873363][ T7562] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 106.963542][ T7562] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 106.972254][ T7562] ipvlan2: entered allmulticast mode [ 106.972268][ T7562] bond1: entered allmulticast mode [ 106.984221][ T7562] bond1: (slave bridge1): making interface the new active one [ 106.984236][ T7562] bridge1: entered promiscuous mode [ 106.984541][ T7562] bridge1: entered allmulticast mode [ 106.986333][ T7562] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 106.991893][ T35] usb 9-1: not running at top speed; connect to a high speed hub [ 106.991913][ T35] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 106.993155][ T35] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 52867, setting to 64 [ 106.994865][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.994926][ T35] usb 9-1: Product: syz [ 106.994934][ T35] usb 9-1: Manufacturer: syz [ 106.994941][ T35] usb 9-1: SerialNumber: syz [ 106.999741][ T7584] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.004684][ T35] oti6858 9-1:1.0: oti6858 converter detected [ 107.011748][ T35] usb 9-1: oti6858 converter now attached to ttyUSB1 [ 107.100688][ T7561] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 107.104709][ T35] usb 5-1: USB disconnect, device number 12 [ 107.116778][ T35] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 107.117067][ T35] spcp8x5 5-1:1.0: device disconnected [ 107.586523][ T7585] overlay: Unknown parameter 'smackfsfloor' [ 107.758248][ T7599] ip_tables: iptables: counters copy to user failed while replacing table [ 108.069717][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 108.230096][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 108.230903][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.233997][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 108.234010][ T35] usb 7-1: Product: syz [ 108.234017][ T35] usb 7-1: Manufacturer: syz [ 108.234025][ T35] usb 7-1: SerialNumber: syz [ 108.442815][ T35] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.654451][ T57] usb 7-1: USB disconnect, device number 7 [ 108.678849][ T7611] fuse: Bad value for 'fd' [ 108.680042][ T7611] ip6t_srh: unknown srh match flags 45F8 [ 108.907452][ T7624] option changes via remount are deprecated (pid=7623 comm=syz.0.435) [ 108.907467][ T7624] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 109.164853][ T7600] usblp0: removed [ 109.174894][ T44] kauditd_printk_skb: 112 callbacks suppressed [ 109.174913][ T44] audit: type=1800 audit(1790429058.412:33657): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 109.259736][ T44] audit: type=1800 audit(1790429058.492:33658): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 109.309394][ T44] audit: type=1800 audit(1790429058.542:33659): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 109.414999][ T44] audit: type=1800 audit(1790429058.652:33660): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 109.456990][ T44] audit: type=1400 audit(1790429058.692:33661): avc: denied { write } for pid=7647 comm="syz.1.442" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.458830][ T44] audit: type=1400 audit(1790429058.692:33662): avc: denied { call } for pid=7647 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.460068][ T44] audit: type=1400 audit(1790429058.702:33663): avc: denied { transfer } for pid=7647 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.472190][ T44] audit: type=1800 audit(1790429058.712:33664): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15754 res=0 errno=0 [ 109.525988][ T44] audit: type=1800 audit(1790429058.762:33665): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 109.580805][ T5876] usb 9-1: USB disconnect, device number 8 [ 109.582998][ T6718] IPVS: starting estimator thread 0... [ 109.603829][ T5876] oti6858 ttyUSB1: oti6858 converter now disconnected from ttyUSB1 [ 109.605466][ T5876] oti6858 9-1:1.0: device disconnected [ 109.620835][ T44] audit: type=1800 audit(1790429058.862:33666): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 109.650965][ T7657] binder: BINDER_SET_CONTEXT_MGR already set [ 109.650975][ T7657] binder: 7655:7657 ioctl 4018620d 200000003280 returned -16 [ 109.653470][ T7656] binder: 7655:7656 ioctl c0306201 200000000080 returned -14 [ 109.653537][ T7656] binder: 7655:7656 ioctl c0306201 200000000080 returned -14 [ 109.680156][ T7654] IPVS: using max 44 ests per chain, 105600 per kthread [ 109.724747][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.726944][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.728796][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.741138][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.750603][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.754826][ T7667] binder_alloc_mmap_handler: 22 callbacks suppressed [ 109.754836][ T7667] binder_alloc: binder_alloc_mmap_handler: 7655 200000ffc000-200000fff000 already mapped failed -16 [ 109.755142][ T7663] binder: BINDER_SET_CONTEXT_MGR already set [ 109.755148][ T7663] binder: 7655:7663 ioctl 4018620d 200000004a80 returned -16 [ 109.755204][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.757359][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.759383][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.788154][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.794648][ T7656] kvm_intel: kvm [7655]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 109.819979][ T7667] binder: 7655:7667 ioctl c0306201 2000000003c0 returned -14 [ 110.028586][ T7680] ip_vti0 speed is unknown, defaulting to 1000 [ 110.595706][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.456'. [ 110.839083][ T7714] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 110.961824][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.109649][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 111.117557][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 111.117582][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 111.118242][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 111.118259][ T9] usb 6-1: can't read configurations, error -71 [ 111.949727][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 112.099731][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 112.100187][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 112.100998][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 112.101012][ T9] usb 6-1: config 0 has no interface number 0 [ 112.102529][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.102540][ T9] usb 6-1: Product: syz [ 112.102548][ T9] usb 6-1: Manufacturer: syz [ 112.102555][ T9] usb 6-1: SerialNumber: syz [ 112.103948][ T9] usb 6-1: config 0 descriptor?? [ 112.383173][ T7767] jffs2: notice: (7767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 112.509493][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.509938][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.536985][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 112.537006][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.736341][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 112.736591][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 112.741362][ T9] usb 6-1: USB disconnect, device number 12 [ 112.962661][ T5086] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 113.008196][ T7784] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 113.019144][ T7784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.032139][ T7784] bond2: (slave dummy0): making interface the new active one [ 113.034822][ T7784] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 113.173282][ T7791] kAFS: No cell specified [ 113.215035][ T7794] syzkaller1: entered promiscuous mode [ 113.215056][ T7794] syzkaller1: entered allmulticast mode [ 113.354126][ T7803] openvswitch: netlink: IPv4 tun info is not correct [ 113.397863][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 113.400522][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 113.401269][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 113.453431][ T7812] CIFS: Witness protocol support is experimental [ 113.453452][ T7812] CIFS mount error: No usable UNC path provided in device string! [ 113.453452][ T7812] [ 113.453460][ T7812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.472965][ T7812] bond1 (unregistering): Released all slaves [ 113.792847][ T7847] fuse: Bad value for 'fd' [ 113.870609][ T7857] FAULT_INJECTION: forcing a failure. [ 113.870609][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 113.870632][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.2.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.870649][ T7857] Tainted: [L]=SOFTLOCKUP [ 113.870653][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.870659][ T7857] Call Trace: [ 113.870664][ T7857] [ 113.870668][ T7857] dump_stack_lvl+0x100/0x190 [ 113.870689][ T7857] should_fail_ex.cold+0x5/0xa [ 113.870708][ T7857] should_failslab+0xc2/0x120 [ 113.870724][ T7857] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.870744][ T7857] ? x509_cert_parse+0x9a/0x910 [ 113.870760][ T7857] x509_cert_parse+0x9a/0x910 [ 113.870774][ T7857] x509_key_preparse+0x65/0x9c0 [ 113.870790][ T7857] asymmetric_key_preparse+0xce/0x1d0 [ 113.870816][ T7857] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 113.870836][ T7857] __key_create_or_update+0x463/0xe30 [ 113.870856][ T7857] ? __pfx___key_create_or_update+0x10/0x10 [ 113.870873][ T7857] ? lookup_user_key+0x3f3/0x1300 [ 113.870894][ T7857] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 113.870912][ T7857] key_create_or_update+0x42/0x60 [ 113.870935][ T7857] __do_sys_add_key+0x2e8/0x460 [ 113.870961][ T7857] ? __pfx___do_sys_add_key+0x10/0x10 [ 113.870995][ T7857] do_syscall_64+0x123/0x790 [ 113.871015][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.871038][ T7857] RIP: 0033:0x7f7047f9e159 [ 113.871054][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.871068][ T7857] RSP: 002b:00007f7048dc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 113.871081][ T7857] RAX: ffffffffffffffda RBX: 00007f7048226090 RCX: 00007f7047f9e159 [ 113.871089][ T7857] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 113.871096][ T7857] RBP: 00007f704803506b R08: ffffffffffffffff R09: 0000000000000000 [ 113.871103][ T7857] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 113.871110][ T7857] R13: 00007f7048226128 R14: 00007f7048226090 R15: 00007ffdf848ef28 [ 113.871125][ T7857] [ 113.995016][ T5086] Bluetooth: hci2: connection err: -111 [ 114.435993][ T44] kauditd_printk_skb: 90 callbacks suppressed [ 114.436006][ T44] audit: type=1800 audit(1790429063.672:33757): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 114.544605][ T44] audit: type=1800 audit(1790429063.782:33758): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 114.581099][ T44] audit: type=1800 audit(1790429063.822:33759): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 114.599295][ T44] audit: type=1800 audit(1790429063.832:33760): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 114.617169][ T44] audit: type=1800 audit(1790429063.852:33761): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 114.640938][ T44] audit: type=1800 audit(1790429063.882:33762): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 114.648225][ T44] audit: type=1800 audit(1790429063.882:33763): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 114.659004][ T44] audit: type=1800 audit(1790429063.892:33764): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146152 res=0 errno=0 [ 114.669430][ T44] audit: type=1400 audit(1790429063.902:33765): avc: denied { getopt } for pid=7885 comm="syz.2.506" laddr=fe80::13 faddr=fe80::3b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.692229][ T44] audit: type=1800 audit(1790429063.932:33766): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 114.765509][ T5086] Bluetooth: hci3: connection err: -111 [ 114.830048][ T7904] IPv6: syztnl0: Disabled Multicast RS [ 115.195609][ T7911] netlink: Unknown NAT attribute (type=1025, max=9) [ 115.195639][ T7911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.199351][ T7911] FAULT_INJECTION: forcing a failure. [ 115.199351][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 115.199374][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.2.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.199391][ T7911] Tainted: [L]=SOFTLOCKUP [ 115.199395][ T7911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.199402][ T7911] Call Trace: [ 115.199408][ T7911] [ 115.199413][ T7911] dump_stack_lvl+0x100/0x190 [ 115.199433][ T7911] should_fail_ex.cold+0x5/0xa [ 115.199450][ T7911] should_failslab+0xc2/0x120 [ 115.199467][ T7911] kmem_cache_alloc_noprof+0x92/0x6a0 [ 115.199482][ T7911] ? mas_preallocate+0xc22/0xee0 [ 115.199497][ T7911] mas_preallocate+0xc22/0xee0 [ 115.199511][ T7911] ? __pfx_mas_preallocate+0x10/0x10 [ 115.199527][ T7911] ? anon_vma_name+0x5a/0x250 [ 115.199546][ T7911] __split_vma+0x2f8/0x1de0 [ 115.199566][ T7911] ? __pfx___split_vma+0x10/0x10 [ 115.199600][ T7911] ? mas_next_slot+0xc05/0x13a0 [ 115.199620][ T7911] vms_gather_munmap_vmas+0x3a5/0x1720 [ 115.199643][ T7911] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 115.199665][ T7911] ? mmap_region+0x410/0x6d0 [ 115.199679][ T7911] ? __pfx_mmap_region+0x10/0x10 [ 115.199691][ T7911] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 115.199718][ T7911] do_vmi_align_munmap+0x287/0x5f0 [ 115.199731][ T7911] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 115.199747][ T7911] ? __lock_acquire+0x5c0/0x1f40 [ 115.199770][ T7911] ? mas_walk+0x260/0x310 [ 115.199791][ T7911] do_vmi_munmap+0x1f8/0x3e0 [ 115.199805][ T7911] __vm_munmap+0x196/0x390 [ 115.199818][ T7911] ? __pfx___vm_munmap+0x10/0x10 [ 115.199840][ T7911] __x64_sys_munmap+0x59/0x80 [ 115.199856][ T7911] do_syscall_64+0x123/0x790 [ 115.199869][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.199881][ T7911] RIP: 0033:0x7f7047f9df87 [ 115.199891][ T7911] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.199902][ T7911] RSP: 002b:00007f7048dc0d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 115.199914][ T7911] RAX: ffffffffffffffda RBX: 00007f7040000000 RCX: 00007f7047f9df87 [ 115.199922][ T7911] RDX: 0000000000000000 RSI: 0000000002000000 RDI: 00007f703e000000 [ 115.199929][ T7911] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 115.199936][ T7911] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 115.199943][ T7911] R13: 0000000000001000 R14: 00007f7044000000 R15: 0000000002000000 [ 115.199957][ T7911] [ 115.424258][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 115.426010][ T7910] syz.2.515 (7910): drop_caches: 2 [ 115.514883][ T7923] ip_tables: iptables: counters copy to user failed while replacing table [ 116.444168][ T7938] ip6t_rt: unknown flags D [ 116.502662][ T5086] Bluetooth: hci0: connection err: -111 [ 117.031983][ T5086] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.032064][ T5086] Bluetooth: hci1: Injecting HCI hardware error event [ 117.033581][ T5733] Bluetooth: hci1: hardware error 0x00 [ 117.037175][ T7953] ptrace attach of "/syz-executor exec"[5735] was attempted by ""[7953] [ 117.712872][ T7964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7964 comm=syz.1.532 [ 117.787048][ T7972] netlink: 'syz.1.534': attribute type 21 has an invalid length. [ 117.958464][ T5086] Bluetooth: hci3: connection err: -111 [ 118.092270][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 118.092291][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 118.116921][ T7989] can: request_module (can-proto-0) failed. [ 118.186107][ T8000] capability: warning: `syz.1.543' uses 32-bit capabilities (legacy support in use) [ 118.189430][ T8000] LUN: removable file: (no medium) [ 118.195582][ T8000] [ 118.196750][ T8000] ====================================================== [ 118.199767][ T8000] WARNING: possible circular locking dependency detected [ 118.202827][ T8000] syzkaller #0 Tainted: G L [ 118.205638][ T8000] ------------------------------------------------------ [ 118.208711][ T8000] syz.1.543/8000 is trying to acquire lock: [ 118.211272][ T8000] ffff888039afda28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 118.215726][ T8000] [ 118.215726][ T8000] but task is already holding lock: [ 118.218890][ T8000] ffff8880592fc920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 118.222985][ T8000] [ 118.222985][ T8000] which lock already depends on the new lock. [ 118.222985][ T8000] [ 118.227401][ T8000] [ 118.227401][ T8000] the existing dependency chain (in reverse order) is: [ 118.231156][ T8000] [ 118.231156][ T8000] -> #3 (&common->filesem){++++}-{4:4}: [ 118.234471][ T8000] lock_acquire+0x1d1/0x380 [ 118.236712][ T8000] down_read+0x99/0x4c0 [ 118.238800][ T8000] fsg_show_file+0x20/0x180 [ 118.241102][ T8000] configfs_read_iter+0x426/0x6f0 [ 118.243576][ T8000] __kernel_read+0x397/0xad0 [ 118.245850][ T8000] integrity_kernel_read+0x7e/0xb0 [ 118.248334][ T8000] ima_calc_file_hash_tfm+0x25e/0x350 [ 118.250865][ T8000] ima_calc_file_hash+0x1e3/0x380 [ 118.253327][ T8000] ima_collect_measurement+0x94f/0xb30 [ 118.255960][ T8000] process_measurement+0xdfe/0x2350 [ 118.258453][ T8000] ima_file_check+0xc3/0x110 [ 118.260743][ T8000] security_file_post_open+0xc4/0x210 [ 118.263330][ T8000] path_openat+0x5cd/0x2440 [ 118.265563][ T8000] do_file_open+0x20e/0x430 [ 118.267781][ T8000] do_sys_openat2+0x10f/0x1e0 [ 118.270069][ T8000] __x64_sys_openat+0x12d/0x210 [ 118.272482][ T8000] do_syscall_64+0x123/0x790 [ 118.274744][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.277545][ T8000] [ 118.277545][ T8000] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 118.280821][ T8000] lock_acquire+0x1d1/0x380 [ 118.282973][ T8000] down_read+0x99/0x4c0 [ 118.285009][ T8000] configfs_read_iter+0x346/0x6f0 [ 118.287383][ T8000] __kernel_read+0x397/0xad0 [ 118.289538][ T8000] integrity_kernel_read+0x7e/0xb0 [ 118.291944][ T8000] ima_calc_file_hash_tfm+0x25e/0x350 [ 118.294251][ T8000] ima_calc_file_hash+0x1e3/0x380 [ 118.296420][ T8000] ima_collect_measurement+0x94f/0xb30 [ 118.298899][ T8000] process_measurement+0xdfe/0x2350 [ 118.301396][ T8000] ima_file_check+0xc3/0x110 [ 118.303511][ T8000] security_file_post_open+0xc4/0x210 [ 118.306052][ T8000] path_openat+0x5cd/0x2440 [ 118.308280][ T8000] do_file_open+0x20e/0x430 [ 118.310428][ T8000] do_sys_openat2+0x10f/0x1e0 [ 118.312619][ T8000] __x64_sys_openat+0x12d/0x210 [ 118.314832][ T8000] do_syscall_64+0x123/0x790 [ 118.317110][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.319932][ T8000] [ 118.319932][ T8000] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 118.323288][ T8000] lock_acquire+0x1d1/0x380 [ 118.325517][ T8000] __mutex_lock+0x1a4/0x1bd0 [ 118.327774][ T8000] configfs_read_iter+0x79/0x6f0 [ 118.330209][ T8000] __kernel_read+0x397/0xad0 [ 118.332524][ T8000] integrity_kernel_read+0x7e/0xb0 [ 118.334985][ T8000] ima_calc_file_hash_tfm+0x25e/0x350 [ 118.337595][ T8000] ima_calc_file_hash+0x1e3/0x380 [ 118.340053][ T8000] ima_collect_measurement+0x94f/0xb30 [ 118.342723][ T8000] process_measurement+0xdfe/0x2350 [ 118.345242][ T8000] ima_file_check+0xc3/0x110 [ 118.347483][ T8000] security_file_post_open+0xc4/0x210 [ 118.350062][ T8000] path_openat+0x5cd/0x2440 [ 118.352274][ T8000] do_file_open+0x20e/0x430 [ 118.354509][ T8000] do_sys_openat2+0x10f/0x1e0 [ 118.356813][ T8000] __x64_sys_openat+0x12d/0x210 [ 118.359180][ T8000] do_syscall_64+0x123/0x790 [ 118.361404][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.364064][ T8000] [ 118.364064][ T8000] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 118.367541][ T8000] check_prev_add+0xeb/0xe60 [ 118.369700][ T8000] __lock_acquire+0x1528/0x1f40 [ 118.371920][ T8000] lock_acquire+0x1d1/0x380 [ 118.374032][ T8000] __mutex_lock+0x1a4/0x1bd0 [ 118.376177][ T8000] process_measurement+0x5ab/0x2350 [ 118.378512][ T8000] ima_file_check+0xc3/0x110 [ 118.380624][ T8000] security_file_post_open+0xc4/0x210 [ 118.383103][ T8000] path_openat+0x5cd/0x2440 [ 118.385173][ T8000] do_file_open+0x20e/0x430 [ 118.387077][ T8000] file_open_name+0x1c3/0x3e0 [ 118.389299][ T8000] filp_open+0x2e/0x50 [ 118.391230][ T8000] fsg_lun_open+0x6b/0x7b0 [ 118.393368][ T8000] fsg_store_file+0x1e7/0x450 [ 118.395550][ T8000] configfs_write_iter+0x302/0x4e0 [ 118.398577][ T8000] vfs_write+0x6af/0x1050 [ 118.400587][ T8000] ksys_write+0x12a/0x250 [ 118.402642][ T8000] do_syscall_64+0x123/0x790 [ 118.404745][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.407300][ T8000] [ 118.407300][ T8000] other info that might help us debug this: [ 118.407300][ T8000] [ 118.411224][ T8000] Chain exists of: [ 118.411224][ T8000] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 118.411224][ T8000] [ 118.416465][ T8000] Possible unsafe locking scenario: [ 118.416465][ T8000] [ 118.419364][ T8000] CPU0 CPU1 [ 118.421460][ T8000] ---- ---- [ 118.423610][ T8000] lock(&common->filesem); [ 118.425450][ T8000] lock(&p->frag_sem); [ 118.428166][ T8000] lock(&common->filesem); [ 118.430907][ T8000] lock(&ima_iint_mutex_key[depth]); [ 118.433063][ T8000] [ 118.433063][ T8000] *** DEADLOCK *** [ 118.433063][ T8000] [ 118.436240][ T8000] locks held by syz.1.543/8000: 5, last CPU#3: [ 118.438667][ T8000] #0: ffff88802bfe2630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 118.442283][ T8000] #1: ffff88802432a460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 118.445964][ T8000] #2: ffff888023a72c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 118.449924][ T8000] #3: ffff888028d21670 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 118.453922][ T8000] #4: ffff8880592fc920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 118.457824][ T8000] [ 118.457824][ T8000] stack backtrace: [ 118.460255][ T8000] CPU: 3 UID: 0 PID: 8000 Comm: syz.1.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.464611][ T8000] Tainted: [L]=SOFTLOCKUP [ 118.466406][ T8000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.470490][ T8000] Call Trace: [ 118.471912][ T8000] [ 118.473169][ T8000] dump_stack_lvl+0x100/0x190 [ 118.475126][ T8000] print_circular_bug.cold+0x178/0x1be [ 118.477401][ T8000] check_noncircular+0x146/0x160 [ 118.479450][ T8000] ? arch_stack_walk+0xa6/0xf0 [ 118.481443][ T8000] check_prev_add+0xeb/0xe60 [ 118.483376][ T8000] ? stack_trace_save+0x8e/0xc0 [ 118.485406][ T8000] __lock_acquire+0x1528/0x1f40 [ 118.487425][ T8000] lock_acquire+0x1d1/0x380 [ 118.489322][ T8000] ? process_measurement+0x5ab/0x2350 [ 118.491546][ T8000] ? __pfx___might_resched+0x10/0x10 [ 118.493767][ T8000] __mutex_lock+0x1a4/0x1bd0 [ 118.495706][ T8000] ? process_measurement+0x5ab/0x2350 [ 118.497857][ T8000] ? process_measurement+0x5ab/0x2350 [ 118.500065][ T8000] ? __pfx___mutex_lock+0x10/0x10 [ 118.502194][ T8000] ? __pfx___might_resched+0x10/0x10 [ 118.504373][ T8000] ? down_write+0x146/0x1f0 [ 118.506249][ T8000] ? process_measurement+0x5ab/0x2350 [ 118.508460][ T8000] process_measurement+0x5ab/0x2350 [ 118.510595][ T8000] ? avc_has_perm_noaudit+0x56/0x470 [ 118.512818][ T8000] ? find_held_lock+0x2b/0x80 [ 118.514776][ T8000] ? avc_has_perm_noaudit+0x11e/0x470 [ 118.516992][ T8000] ? __pfx_process_measurement+0x10/0x10 [ 118.519305][ T8000] ? avc_has_perm+0x135/0x1e0 [ 118.521258][ T8000] ? __pfx_avc_has_perm+0x10/0x10 [ 118.523375][ T8000] ? hook_file_open+0x248/0x8e0 [ 118.525528][ T8000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 118.528269][ T8000] ima_file_check+0xc3/0x110 [ 118.530192][ T8000] ? __pfx_ima_file_check+0x10/0x10 [ 118.532423][ T8000] security_file_post_open+0xc4/0x210 [ 118.534524][ T8000] path_openat+0x5cd/0x2440 [ 118.536380][ T8000] ? __pfx_path_openat+0x10/0x10 [ 118.537891][ T8000] ? kasan_save_stack+0x3f/0x50 [ 118.539451][ T8000] ? kasan_save_stack+0x30/0x50 [ 118.540969][ T8000] ? kasan_save_track+0x14/0x30 [ 118.542467][ T8000] ? __kasan_slab_alloc+0x89/0x90 [ 118.544039][ T8000] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 118.545728][ T8000] ? do_getname_kernel+0x5d/0x250 [ 118.547297][ T8000] ? filp_open+0x1d/0x50 [ 118.548604][ T8000] do_file_open+0x20e/0x430 [ 118.549967][ T8000] ? __pfx_do_file_open+0x10/0x10 [ 118.551511][ T8000] file_open_name+0x1c3/0x3e0 [ 118.553530][ T8000] ? __pfx_file_open_name+0x10/0x10 [ 118.555106][ T8000] ? do_getname_kernel+0x5d/0x250 [ 118.556701][ T8000] ? __asan_memcpy+0x3c/0x60 [ 118.558162][ T8000] ? do_getname_kernel+0x1be/0x250 [ 118.559856][ T8000] filp_open+0x2e/0x50 [ 118.561165][ T8000] fsg_lun_open+0x6b/0x7b0 [ 118.562634][ T8000] ? __pfx_down_read+0x10/0x10 [ 118.564156][ T8000] fsg_store_file+0x1e7/0x450 [ 118.565683][ T8000] configfs_write_iter+0x302/0x4e0 [ 118.567293][ T8000] vfs_write+0x6af/0x1050 [ 118.568673][ T8000] ? __pfx_configfs_write_iter+0x10/0x10 [ 118.570435][ T8000] ? __pfx_vfs_write+0x10/0x10 [ 118.571995][ T8000] ? find_held_lock+0x2b/0x80 [ 118.573503][ T8000] ksys_write+0x12a/0x250 [ 118.574870][ T8000] ? __pfx_ksys_write+0x10/0x10 [ 118.576406][ T8000] do_syscall_64+0x123/0x790 [ 118.577862][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.579736][ T8000] RIP: 0033:0x7fead5b9e159 [ 118.581147][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.587245][ T8000] RSP: 002b:00007fead6a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.589838][ T8000] RAX: ffffffffffffffda RBX: 00007fead5e25fa0 RCX: 00007fead5b9e159 [ 118.592354][ T8000] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000004 [ 118.594966][ T8000] RBP: 00007fead5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 118.597513][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.600027][ T8000] R13: 00007fead5e26038 R14: 00007fead5e25fa0 R15: 00007ffd35f9ef58 [ 118.602521][ T8000] [ 119.119844][ T5733] Bluetooth: hci1: Opcode 0x0c03 failed: -110