last executing test programs: 1m22.336494697s ago: executing program 1 (id=2): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtclass={0x24, 0x28, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0xfff3, 0xf}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x81c1}, 0x9080) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000500)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x480, 0xfffffffffffffffe, 0x9ed7, 0x64000000, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1m20.809682281s ago: executing program 1 (id=8): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x40, 0x7, 0x81, 0x6, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000547000/0x2000)=nil, &(0x7f0000b97000/0x2000)=nil, 0x0, 0x0, 0x0, 0xe, 0x10, 0x48, 0x29, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1m20.646428868s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000019080)='minix\x00', 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000019240)={0xfff, 0x9, &(0x7f0000019140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000191c0)=[0x0, 0x0], &(0x7f0000019200)=[0x0]}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000190)={0x1, r2}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000019100)='devtmpfs\x00', 0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) pwrite64(r4, &(0x7f0000000000)="ff", 0x1, 0x1000000) 1m20.58085142s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/anon_fault_alloc\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) syz_emit_ethernet(0x143, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000010d06fffe80000000000000000000000000001ffe80000000000000000000000000003400004e1e4ca6c4e1916ba12bd36eca2b953cd2688950e17278c3ba7cc6e1150126138bc4ce8daba5806b5ce6ae706266de4e9cd0e7956427fb01385d7b1da12c2af9c9f059f238e6005144df04c4785c75b8349c13571ef9e12f8d4e77c62ffe120f1ccdd50c967afbe30aeaefcd5c67981de1efb17f910c11dafb3bb590b38013d27f390d7d2219a1d88af3e8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 1m20.479500363s ago: executing program 1 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf25010003000800030008000000080004000400000005000500030000000500060001000000ac04a715ac83d00a7ad6e837a74f6b8e18a5c80cabc715685e3dc9fbd53fe051e9f37da2a2fe3d8291c80f3d452757367c3d804a01ee0c9cba6181d60c71007e372f3f608383e9a38447dbf0e0474fde46350eede7d013f91dd6b4562701d58472c9d4ad9f73cc3cc0b2827b168ca949a63b6805f1d7387ebfe171d63c646e5de815706c85627cccf51cc66ddfe4f71e94b1bfef4eed2480ccb3a92724601a96cee4e99d73"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf00, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m4.528186254s ago: executing program 32 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf25010003000800030008000000080004000400000005000500030000000500060001000000ac04a715ac83d00a7ad6e837a74f6b8e18a5c80cabc715685e3dc9fbd53fe051e9f37da2a2fe3d8291c80f3d452757367c3d804a01ee0c9cba6181d60c71007e372f3f608383e9a38447dbf0e0474fde46350eede7d013f91dd6b4562701d58472c9d4ad9f73cc3cc0b2827b168ca949a63b6805f1d7387ebfe171d63c646e5de815706c85627cccf51cc66ddfe4f71e94b1bfef4eed2480ccb3a92724601a96cee4e99d73"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf00, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26.916270873s ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ppoll(&(0x7f0000000140)=[{r1, 0x60c}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173"], 0x5c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000080), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r4 = timerfd_create(0x7, 0x800) close_range(0xffffffffffffffff, r4, 0x2) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x14, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000001000)="0400000032000000") ioctl(r3, 0x3, &(0x7f0000001100)="a1e2f20887c8ff98ca3a6356aced5d7bf1d80459eb1fa16248e4cc7bdc9b7574b0372bc0fb6f0c6703ba6316c58bc4848d6c40c3969162b242d03116acb9ed9d3a894245a537acc62db9b396625cbb5f87490807f70019101ba125ed9223a669aec9176916ef62ee4588796dca5d54ba262cecf9adc9e03530d0d06505ee50932d078b0d6199ae12d0d9e346305accfe72a21405eff7606cfe766d2e689df62b044157763e9dfdf0") ioctl(r5, 0xc138fd01, &(0x7f0000002000)="040000003200000000000e006c01") 26.789269943s ago: executing program 4 (id=327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2d00b4f47aa80ac9cc59118cffff010000ba57867958789045eb47bedb4884182400f80dc0bb6bd35e2bdc183b"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000002, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40806685, &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) statx(r3, 0x0, 0x400, 0x100, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000092c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x7, {0x1, 0x4, 0x7, 0xe0aa}}, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x3, 0xe77cd3f4f35110d0, 0x41000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x654680) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x9, 0x3, 0x6, 0xffffffffffffc26d, 0x5, 0xc2, 0x8, 0x7fffffff, 0xb1, 0xb, 0x8, 0x7fff, 0x8, 0xc6d, 0x4], 0x54000, 0x40000}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/43, 0x2b, 0x1, 0x1d}}, &(0x7f00000006c0)={0x0, 0x18, 0x38}}}, @register_looper, @register_looper, @request_death, @increfs_done], 0xae, 0x0, &(0x7f0000000780)="5f3d1321c32201e823752a5a928b5ea2ef48a9aea92be509d9b93b4b8fb51dce91385089805f435204d77d33526830dff779fff79f8ac2d976630e9e33ffc993b2b409e2687f35db87b0a09a7f727b0615f681625d98bb1df61ad698710bb128267f026662c70e601f04718a670717205be115d318cbf5ee4d0e49a6517269130df3410bbd802cb697a1f18b13587a9f1ffef8f4161c5fc8a2cf7bb94a56c65f47e4981a2cd8cfdcec7ca214ce16"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r9 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x1000, 0x1, {0x2, 0xfdfdffff}, 0x5, 0x7}}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0}) 26.72983145s ago: executing program 4 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f00000001c0)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/2\x00', 0x1ff) 25.846634139s ago: executing program 4 (id=340): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setresuid(0xee01, 0xee00, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x10c, 0x19, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@generic="1da6a4dd3321d9262a8bba061d9e6d2796711d90570f98f1c823463966926b21098405ab1e6053ebca5f5d690ad386c4ac934df932832294861821385bf164aac32774c15f28d1500706", @generic="7b59c1b48874609c4d41b7002a8b399de1930060aea2d3312ebb10ac8180dbe6987b0bd2e8cabdf509501665ff80928cfc22d5d427d194c72a83ca7c7023b6df3a0945eb7caf10edea16689f", @typed={0x8, 0x9c, 0x0, 0x0, @fd=r2}, @generic="ff9143b11a068c10e1b8b238250fa1712ee948b4e56e1817eb7c26c732b0617ece38e95ce2a5ca4d4c61c11cd031edeef48f8c6f090467337f8f057c7ef383a35b7a8e70f17927937e07e7212ffe7b51b2f0dcf4a65d6b668afbd1a875"]}, 0x10c}], 0x1}, 0x0) 25.7293527s ago: executing program 4 (id=341): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460303164e010400000000000002000000ff010000b2020000000000004000000000000000e7030000000000000000000001003800020000000700040051e574640100000004000000000000000800000000000000030000000000000001000000000000000000000000000000020000000000000000000070ff7f0000080000000000000002000000000000000800000000002af9925fea669661ffffff00000000000000d800"/2736], 0xab0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)="6d6561737572652066756e633d46c94c455f434845434b20", 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x22, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0xc0) unshare(0x0) ptrace(0x10, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 24.57931975s ago: executing program 4 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (fail_nth: 10) 21.659395268s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/83, 0x53}], 0x2}, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 21.658336918s ago: executing program 0 (id=380): r0 = socket(0x11, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r3 = dup(r2) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000340)={0x0, 0xe9a6, 0x4000, 0x0, 0x2cd}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226c, 0x40, 0x0, 0x2e3, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b05e, 0x2, 0x0, 0x310, 0x0, r4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffe5, 0x804a0, 0x2, 0x12b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee75, 0x400, 0x2, 0xe3, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r3, r8, &(0x7f00000001c0)={0x0, 0xb626, 0x200, 0x10000001, 0x28b, 0x0, r3}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa209, 0x8, 0x0, 0x79, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19f5, 0x800, 0x0, 0x3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26b6, 0x0, 0x1, 0x36}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3213, 0x100, 0x1, 0x3e4, 0x0, r9}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r11, &(0x7f0000000240)='1', 0x1) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 21.55959624s ago: executing program 0 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7ad99138}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x728, 0x80, 0x7fffffff, 0xc, {{0x26, 0x4, 0x0, 0x6, 0x98, 0x65, 0x0, 0x91, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x8, [{@rand_addr=0x51, 0x8002}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@dev={0xac, 0x14, 0x14, 0xf}}, {@loopback, 0x9}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x1c, 0x1d, 0x0, 0x8, [0x780, 0xf, 0xa2d, 0x2, 0x9, 0x6]}, @lsrr={0x83, 0x23, 0xfb, [@multicast1, @local, @empty, @rand_addr=0x64010101, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, 'u'}]}, @cipso={0x86, 0x13, 0x2, [{0x5, 0xd, "85098696ddcdbd60ea1c34"}]}]}}}}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {0x0, 0x0, 0x3}, 0x1}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x81, 0x1, {{0x31, 0x4, 0x3, 0x8, 0xc4, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1d, 0x3, [{0x5, 0x10, "aa3b4c2e7a1e3fa5b6b5000cd429"}, {0x6, 0x7, "b13ef3fedc"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x7, [{@remote, 0x4}, {@local, 0x8}, {@broadcast, 0xfffffeff}]}, @end, @timestamp_prespec={0x44, 0x44, 0x6b, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x80008}, {@empty, 0x5}, {@local, 0x7}, {@multicast1, 0x100}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010102, 0x100}, {@private=0xa010101, 0x3}, {@remote, 0xc2b}]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x3, [{@multicast2, 0x5}, {@private=0xa010101, 0x20000000}, {@multicast2, 0x625}, {@private=0xa010101, 0x751ad650}, {@empty, 0x1082}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x19}, 0x1c) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r12, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffb, 0x0, &(0x7f0000000080)="ff300016fa41d4dc19f3b4e4fd4a42d4394d864e34fac4fc648bb21baad42481ae57a8a843b37d55b98e8765605bfb3a029fa18d386bf42c676aec451b606d6db4d2bb964b18251999f58cb524c204b86fb0f929b3bf05949ff53f4f89640642a1b2a9a81bb4ee0164971ed2c732e56c96b2c0c7814d68dfacb0d779fdf4af73c66b5c74b8c002fe69fae213d0ae9076"}) 21.35699686s ago: executing program 0 (id=382): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000004c0), &(0x7f0000000540)=0x4) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000180)=""/248, 0xf8}], 0x1, 0x8000, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mq_notify(r3, &(0x7f0000001800)={0x0, 0x12}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"f7f47fed29d6a924cac1edb46e485a5f", 0x0, 0x0, {0x4, 0x4}, {0x5, 0x1a7}, 0x5, [0x9, 0x307c, 0x0, 0xc, 0x4, 0x4, 0x80, 0x89e5, 0x0, 0x8, 0x9, 0x0, 0x7, 0x2, 0x0, 0xe4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000600)={{r4}, r5, 0x4, @unused=[0x9, 0x5, 0x5, 0x7fff], @name="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"}) r6 = fsmount(r2, 0x0, 0x2) fchdir(r6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write(r7, &(0x7f0000000700)='tr', 0x2) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) 21.247337526s ago: executing program 0 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="47ad3d32240000006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85890084665ea561e52d97fbe9e829a0", 0x34}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./sys\x00', 0x2e341, 0xa2) write(r2, &(0x7f0000000200)='atkbd', 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="a0d4cd6661766532", 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)="74637563692030f832c8ea87cbdb93e18280983253258055d332f581ae895193839eba815e4cb76b6f06dc5f039789e43c2de57ab1efaa4f579d3fd0cf0daf0aa65c6b950de1474f7db11133b5400ac635e0e4abeaa0a65241f73b9c82bb486167b9f1cedbddd4cdc26ac50e2c379a9e44e8e29c25df5ccff7cd", 0xffffffffffffffd1) 20.999263659s ago: executing program 0 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x18, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x5}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (fail_nth: 14) 20.887724947s ago: executing program 33 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x18, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x5}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (fail_nth: 14) 9.086079291s ago: executing program 34 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (fail_nth: 10) 5.968346686s ago: executing program 2 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=local,m']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, r4}, 0x14) close(0x3) sync_file_range(r2, 0x40, 0x800, 0x5) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000001040)=ANY=[@ANYBLOB="70727d72df0004080044"]) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2009) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000380)="66baf80cb806c35f84ef66bafc0c66b80a0066ef450f9fef66baf80cb8f2479989ef66bafc0c66b8286c66ef36470f0051da0f07b9120400000f32b805000000b9b8b300000f01c10f01d1c421fc1044e52c66baf80cb843ef4e8aef66bafc0cec", 0x61}], 0x1, 0x4, &(0x7f0000000180)=[@cstype3={0x5, 0xc}], 0x1) 5.810796549s ago: executing program 2 (id=494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000680080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0xfffffffffffffc96, &(0x7f0000000040)={0x40, 0x22, 0x85, {0x85, 0xd, "464563e840795f963e3ec9fbc781a136a6bfd9b8bfa0f1fa9eab0df4ac15a64157a769139c405596c2c3cb18c8261b94cf4c8a7c82cde343caed9048bb9bee44d5a6a48d6437b13fa81820acbdc0c7663d346246118db5544c8527ae2645ee208c73d2b086bb9dee8013dfab0c3d32371bfcd98668f36b30efd0180eefa688799dbab3"}}, &(0x7f0000000140)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "aca77aa15e18a2716384add85b07e73ef442e4ab81f8cefbc14174a442a440a0bdf4bc930a6b56aad97b7081e8f95d6535cd08ea8a4dd945e75e5ae09737fc8110eaabb7e46e92330d94ea908aa9db9b2a1ef3c8f44b9792a32563f0f40eb422707c19f8e35fde28e118ec50c9dbf8fbe3254272e8f3148fce30b2"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x20, 0x6, 0x2e, "47f7f8e1046286e7e1ecfa737bf9a413b2628183c841c735dc71ef38558296e5251b06c21e6a4e14cf3e61fe5112"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xf}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "18edada6ae0f00807406006eb4e7852bd40b21a649cfb77fc8faee9cab99ff8f6f1400"}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.429171382s ago: executing program 6 (id=512): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127}) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) sendmmsg$inet6(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0x12) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x10002) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000180)={0x2, 0x8, 0xf, 0x2, 0x0, 0x0, @msf={0x84, 0x3, 0x37}, @lba=0x10001}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005eff07a85ff3807dc02728f96cbc045ea5087d8478a0c47f53803b0f1e8644832128b7d7"], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x7, @loopback, 0x20000001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f00000029c0)={{@local, 0xe}, 0xb, 0x1}) 4.297505554s ago: executing program 6 (id=514): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000400)='net/netlink\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001b80)={&(0x7f0000001b00)=[{0xc6, 0x1010, 0x6e, &(0x7f00000017c0)="4800316b0eebf9d6c91db4aa5941175730d4af4b5ff2901c978e67529928c464cd0975c0f78ce4a6c097b19be6962643f173029e3dd5770d643d7b26a974a8c46d58b495731406fa07ed8cb46dfe1e9c17b2e9fbb0253852dd014edbf3c8aab1dd1309040b6c8441df3a4371512a"}, {0x1, 0x0, 0xf9, &(0x7f0000001840)="f39c5b7a08d29a1e5a784b47e173c4d0336aa2d7310a628dc3025684ccc67e3835e99e5c1431da5f946e2cb9a647d3dd4c63446d234d9613c93124180dcb0320919940c6e6f8cab3d6fc1b943e75d00cb706b035daf5ea0675cbe313e4d709f3d8e63378e39963a141054a8e678c9cf7ef0af3ff2184a532ebacc22904fa7763e9deb3f6a76113ada4a5e545acb4cd9bc7821e3db1c5f9c8c57294a48bcfdced92d8c1dfc010edcadac3c3a65a6d938e1e50544e3d36bdfc5a559bf255b7afa3c93b30a4da73b6d2b989dbc1f6f2537067402684b18aa70290be6e5143f1636d92ebe1045b102e5e59479df2f254f5d173423c9739937da51c"}, {0x98c, 0xa010, 0x36, &(0x7f0000001940)="455c9ad05fa30e50e3df4cd2e0af39c7c79bfabe32684d5786ad4bb723a6ed72864770f0a711067158b06369d2e4eec8605d4d8386ea"}, {0x1, 0x4010, 0x3d, &(0x7f0000001980)="3a409b75cc80bfde4579c54bef321a8dd61139f79dd09d95d12e1d6be368b37f1c0dad670140bb4cb9830d8054951d5652012b082531190a8c796ff7a5"}, {0xd650, 0x201, 0x5d, &(0x7f00000019c0)="0b08e60733fc29a3847cad269e7182dc940d041b78f729ffc1f9ff23c9ee245114a242b3e0781bc0044b15423141eabb60a301b40a2cd0901df7f8f003c1297c3c3cc72d8b47953b4572675f330993fde582718c60db95d6bffdf74bae"}, {0x2, 0x1, 0xc0, &(0x7f0000001a40)="79d34bd2bd3c94e246f5b633cfb527ae2c3087e96f3996466849de405087964be470bcb74f6cba68743e692fa79ba1bed5b1de51e1ea58689c78e59ce674e2c51e26969cef1d074b1fad046ba8372296104fdc530ef2889e5a9d8f712c876ffaaa03097c0051956d2563e18bb4658529700719204986ba36631e054b99bf72dff0844422cda22be2b5fc032e229efefd9798bf5950e6c559d53415fcbfee66740c3de81eee2be9ffe9683004f3266cf74a83662cead08c17284b8b062c91946e"}], 0x6}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000800)=0x5) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getdents64(r1, &(0x7f0000001ec0)=""/142, 0x8e) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x25, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x2, 0xf73}}}, &(0x7f0000000200)=0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x20800, 0x0) r7 = syz_io_uring_setup(0x2526, &(0x7f0000000300)={0x0, 0x9310, 0x80000, 0x3, 0x143, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r1, r5, &(0x7f0000000240)={0x0, 0x4e91, 0x400, 0x2, 0x33, 0x0, r1}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7233, 0x100, 0x0, 0x301, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6dd, 0x10, 0x0, 0x108, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c74, 0x10, 0x3, 0x28b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x69bc, 0x4, 0x3, 0x1b9, 0x0, r7}}], 0x4, &(0x7f0000001700)={0x2e, 0x9, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, r8, '\x00', {0x2, 0x929, 0x0, &(0x7f0000000700)=@buf_max_buf="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"}}, &(0x7f0000001780)) 4.213924504s ago: executing program 6 (id=517): write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) r1 = open$dir(&(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x151000, 0x0) r2 = openat(r1, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 4.047905383s ago: executing program 6 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async, rerun: 32) r1 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 32) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) (async, rerun: 32) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40) (async, rerun: 64) r2 = io_uring_setup(0x47b5, &(0x7f0000000640)={0x0, 0xcd01, 0x2, 0x0, 0x1c2}) (rerun: 64) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000001d40)={0x1, 0x0, 0x0, &(0x7f0000001c80)=[{0x0}], &(0x7f00000000c0)=[0x1]}, 0x20) (async) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="600100"]) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1b, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000080)='0\x00', 0x2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async, rerun: 32) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, 0x0, 0x0) (async) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0xfffa, 0x1, 0x4, 0x185d, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x81}, &(0x7f0000000200)=0x8) 3.819720066s ago: executing program 2 (id=519): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffe0}, {0x6, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) 2.309833346s ago: executing program 2 (id=525): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x160341) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) close(0x3) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) setns(0xc9, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.308654405s ago: executing program 6 (id=526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0xf0ff, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x18, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x1, 0x5}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2.230045177s ago: executing program 6 (id=527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000680080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0xfffffffffffffc96, &(0x7f0000000040)={0x40, 0x22, 0x85, {0x85, 0xd, "464563e840795f963e3ec9fbc781a136a6bfd9b8bfa0f1fa9eab0df4ac15a64157a769139c405596c2c3cb18c8261b94cf4c8a7c82cde343caed9048bb9bee44d5a6a48d6437b13fa81820acbdc0c7663d346246118db5544c8527ae2645ee208c73d2b086bb9dee8013dfab0c3d32371bfcd98668f36b30efd0180eefa688799dbab3"}}, &(0x7f0000000140)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "aca77aa15e18a2716384add85b07e73ef442e4ab81f8cefbc14174a442a440a0bdf4bc930a6b56aad97b7081e8f95d6535cd08ea8a4dd945e75e5ae09737fc8110eaabb7e46e92330d94ea908aa9db9b2a1ef3c8f44b9792a32563f0f40eb422707c19f8e35fde28e118ec50c9dbf8fbe3254272e8f3148fce30b2"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x20, 0x6, 0x2e, "47f7f8e1046286e7e1ecfa737bf9a413b2628183c841c735dc71ef38558296e5251b06c21e6a4e14cf3e61fe5112"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xf}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "18edada6ae0f00807406006eb4e7852bd40b21a649cfb77fc8faee9cab99ff8f6f1400"}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.086773866s ago: executing program 2 (id=529): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4000000}) 2.017120862s ago: executing program 2 (id=531): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000680080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) 1.653635141s ago: executing program 5 (id=537): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3803000022826c3b", @ANYRES16=r3, @ANYBLOB="040027bd7000fddbdf256500000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x801}, 0x8005) r6 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x5, @mcast2, 0x40}, {0xa, 0x4e21, 0x8, @local, 0x1}, 0x1, {[0xfffffff7, 0x782, 0x4, 0x100, 0x19, 0x1, 0x4, 0x2]}}, 0x5c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101200, 0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.39880978s ago: executing program 3 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000300)) (async) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='./file0\x00', &(0x7f0000000700)='ocfs2\x00', 0x0, &(0x7f0000000800)='heartbeat=none\x00') (async) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500000000000000037f00040000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.309216337s ago: executing program 3 (id=540): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x8000, @loopback}], 0x1c) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)=""/38, &(0x7f0000000040)=0x26) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='syzkaller0\x00') (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x50) listen(0xffffffffffffffff, 0xfffffff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800ff53410a772e9f1805000000000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf090000000000005509010000000000950000000000000037090000ffffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000000)) 1.219935914s ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0xf0003, 0x0, {[0x8, 0x8, 0x6, 0x71a5, 0xfffffffffffffffe, 0x1, 0x4000000000000004, 0xe7]}}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="0f019f0700ba6100b80088eff30f8b440066b8790000000f23c80f21f86635080030000f23f8660fc773f9c6c1002e2e0f01d10f07baf80c66b8606ef98866efbafc0cecf30fc7704b", 0x49}], 0x1, 0x1, &(0x7f0000000340)=[@cstype3={0x5, 0xa}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], 0x2) 1.119616558s ago: executing program 3 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 1.119258298s ago: executing program 3 (id=543): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) statfs(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x5}, {0x16, 0x3}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@index_off}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xa8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000340)={'trans=virtio,', {[{@mmap}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_measure}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)) ioctl(r2, 0xc138fd0e, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000400), 0xffffffff, 0xf8b549b7e29d95a2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r3, 0x5b6, {0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, "dc223f10b22e52cc2ad592774208f7377d7731a8fa94209d4e0ad3a360609b1a12b6bde35d842c31fd7ee63a96e5017a0de952e3d154eed09c5ffb544faf0257", "7ad08575f48a934c69539111f0a5109e8162b5cb7b48a33f66f95b41730f873fc409c606f9e5108aeb4b47234e90e847d5256ab31437d3a6792918c41e118a39", "c2a3108bd1b8facb3acd9e892e932b53f4deaf6eb61c2b31fe9cb5c8f99b6718", [0x2, 0x100000001]}}) mknod$loop(&(0x7f00000002c0)='./file2\x00', 0x100, 0x0) 1.049773652s ago: executing program 3 (id=544): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80800) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x4000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64], 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20048805) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x61}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a65bf3b60369c1893d094f9f8b82035f65df0e4d54724201"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x51) 317.002564ms ago: executing program 5 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x48}}, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000180), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x1a, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x5, 0x8, 0x8}, &(0x7f0000000240)=0x10) r5 = open(&(0x7f0000000040)='./file0\x00', 0x70000, 0x10) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000200)) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x20000044) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = accept4$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) bind$vsock_stream(r8, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r10, &(0x7f0000000440)='add syz0 127.0.0.1+700[', 0x17) sendmsg$nl_xfrm(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xc0, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x6, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x3, 0x9, 0x449f}, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4004) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet_sctp(r7, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0xc040}], 0x1, 0x0) 316.524555ms ago: executing program 5 (id=546): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="340000001900150030bd7000fddbdf250a0000000202000000000000180009800c00", @ANYRES32], 0x34}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 129.4754ms ago: executing program 5 (id=547): ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80", 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r2 = dup(r1) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000340)={0x0, 0xe9a6, 0x4000, 0x0, 0x2cd}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226c, 0x40, 0x0, 0x2e3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b05e, 0x2, 0x0, 0x310, 0x0, r3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffe5, 0x804a0, 0x2, 0x12b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee75, 0x400, 0x2, 0xe3, 0x0, r3}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f00000001c0)={0x0, 0xb626, 0x200, 0x10000001, 0x28b, 0x0, r2}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa209, 0x8, 0x0, 0x79, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19f5, 0x800, 0x0, 0x3, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26b6, 0x0, 0x1, 0x36}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3213, 0x100, 0x1, 0x3e4, 0x0, r8}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r10, &(0x7f0000000240)='1', 0x1) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 68.039163ms ago: executing program 5 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_loaded', 0x80, 0x3) read$msr(r2, &(0x7f0000000280)=""/210, 0xd2) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000004) 0s ago: executing program 5 (id=549): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000002d80)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r2, &(0x7f0000000200)="cdf1c4780155", 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f00000008c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): tomoyo_realpath_from_path+0xb6/0x690 [ 93.248794][ T6763] tomoyo_realpath_from_path+0xb6/0x690 [ 93.248808][ T6763] tomoyo_path_number_perm+0x23c/0x580 [ 93.248824][ T6763] ? tomoyo_path_number_perm+0x22e/0x580 [ 93.248840][ T6763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.248861][ T6763] ? __lock_acquire+0x4c5/0x1ec0 [ 93.248878][ T6763] ? __fget_files+0x34/0x3d0 [ 93.248891][ T6763] ? find_held_lock+0x2b/0x80 [ 93.248906][ T6763] ? hook_file_ioctl_common+0x140/0x440 [ 93.248935][ T6763] ? __fget_files+0x21f/0x3d0 [ 93.248949][ T6763] security_file_ioctl+0xd3/0x230 [ 93.248967][ T6763] __x64_sys_ioctl+0xb7/0x210 [ 93.248985][ T6763] do_syscall_64+0x123/0x790 [ 93.249000][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.249012][ T6763] RIP: 0033:0x7f3ce799e159 [ 93.249021][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.249032][ T6763] RSP: 002b:00007f3ce8906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.249044][ T6763] RAX: ffffffffffffffda RBX: 00007f3ce7c25fa0 RCX: 00007f3ce799e159 [ 93.249050][ T6763] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 93.249057][ T6763] RBP: 00007f3ce8906090 R08: 0000000000000000 R09: 0000000000000000 [ 93.249064][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.249071][ T6763] R13: 00007f3ce7c26038 R14: 00007f3ce7c25fa0 R15: 00007ffec1fdce88 [ 93.249085][ T6763] [ 93.249137][ T6763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.249223][ T6763] hub 4-0:1.0: USB hub found [ 93.249352][ T6763] hub 4-0:1.0: 2 ports detected [ 93.295606][ T10] usb usb8-port1: unable to enumerate USB device [ 93.297223][ T6765] dummy0: entered allmulticast mode [ 93.320901][ T6764] dummy0: left allmulticast mode [ 95.023996][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 95.194642][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 95.199618][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.209216][ T10] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 016 [ 95.517850][ T6753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.613652][ T6778] openvswitch: netlink: IP tunnel dst address not specified [ 95.622338][ T10] (null): failure reading functionality [ 95.625293][ T6789] dummy0: entered allmulticast mode [ 95.629490][ T10] i2c i2c-2: failure reading functionality [ 95.633660][ T10] i2c i2c-2: connected i2c-tiny-usb device [ 95.647855][ T6791] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 95.653844][ T6791] capability: warning: `syz.0.254' uses 32-bit capabilities (legacy support in use) [ 95.712002][ T6787] dummy0: left allmulticast mode [ 95.818318][ T6799] hub 4-0:1.0: USB hub found [ 95.818593][ T6799] hub 4-0:1.0: 2 ports detected [ 95.865025][ T6688] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 95.888432][ T6801] FAULT_INJECTION: forcing a failure. [ 95.888432][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 95.891496][ T6801] CPU: 2 UID: 0 PID: 6801 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT(full) [ 95.891513][ T6801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.891523][ T6801] Call Trace: [ 95.891528][ T6801] [ 95.891533][ T6801] dump_stack_lvl+0x100/0x190 [ 95.891553][ T6801] should_fail_ex.cold+0x5/0xa [ 95.891572][ T6801] should_failslab+0xc2/0x120 [ 95.891586][ T6801] __kmalloc_noprof+0xfc/0x840 [ 95.891598][ T6801] ? tomoyo_encode2+0xfb/0x3c0 [ 95.891618][ T6801] tomoyo_encode2+0xfb/0x3c0 [ 95.891631][ T6801] tomoyo_encode+0x29/0x50 [ 95.891641][ T6801] tomoyo_realpath_from_path+0x18c/0x690 [ 95.891656][ T6801] tomoyo_path_number_perm+0x23c/0x580 [ 95.891672][ T6801] ? tomoyo_path_number_perm+0x22e/0x580 [ 95.891689][ T6801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.891711][ T6801] ? __lock_acquire+0x4c5/0x1ec0 [ 95.891730][ T6801] ? __fget_files+0x34/0x3d0 [ 95.891744][ T6801] ? find_held_lock+0x2b/0x80 [ 95.891759][ T6801] ? hook_file_ioctl_common+0x140/0x440 [ 95.891789][ T6801] ? __fget_files+0x21f/0x3d0 [ 95.891804][ T6801] security_file_ioctl+0xd3/0x230 [ 95.891823][ T6801] __x64_sys_ioctl+0xb7/0x210 [ 95.891842][ T6801] do_syscall_64+0x123/0x790 [ 95.891857][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.891869][ T6801] RIP: 0033:0x7f96ab79e159 [ 95.891879][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.891891][ T6801] RSP: 002b:00007f96ac57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.891904][ T6801] RAX: ffffffffffffffda RBX: 00007f96aba25fa0 RCX: 00007f96ab79e159 [ 95.891911][ T6801] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 95.891918][ T6801] RBP: 00007f96ac57f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.891925][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.891932][ T6801] R13: 00007f96aba26038 R14: 00007f96aba25fa0 R15: 00007ffc93824718 [ 95.891946][ T6801] [ 95.892039][ T6801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.892137][ T6801] hub 4-0:1.0: USB hub found [ 95.892318][ T6801] hub 4-0:1.0: 2 ports detected [ 95.893397][ T6778] i2c i2c-2: failure reading status [ 95.893423][ T6778] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 95.893536][ T6778] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 95.893653][ T6778] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 95.895801][ T5879] usb 8-1: USB disconnect, device number 16 [ 95.984489][ T851] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 96.004832][ T44] audit: type=1400 audit(1788076917.796:441): avc: denied { write } for pid=6804 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.014999][ T44] audit: type=1400 audit(1788076917.806:442): avc: denied { mount } for pid=6804 comm="syz.2.259" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 96.022265][ T44] audit: type=1400 audit(1788076917.806:443): avc: denied { create } for pid=6804 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.035677][ T6688] usb 5-1: not running at top speed; connect to a high speed hub [ 96.035731][ T6688] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.036564][ T6688] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.036583][ T6688] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.038180][ T6688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.038194][ T6688] usb 5-1: Product: syz [ 96.038202][ T6688] usb 5-1: Manufacturer: 䚬끦鲋䬝!傭ꧻ큎䑸뺎ᶺ᳊킀ᆁ馴ⱀ暔漌珮⠗῭㤂輼ﱧ歈嚚䩕㋑㦽퓾梗챌뱮棁扰㑪ମᰃ⛞ꉬௐ䏢᳼ǽ驦䔯ᮛ鉲翜鄸岕綋展킒拁恝맺᤮⧏ㅘ申⮡媵殸恪፬쑑켢䚐䨲솴ꎑ꽰큕垩␜ꛮ [ 96.038220][ T6688] usb 5-1: SerialNumber: syz [ 96.040719][ T6688] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 96.040732][ T6688] usb 5-1: no configuration chosen from 1 choice [ 96.124502][ T851] usb 9-1: device descriptor read/64, error -71 [ 96.188628][ T6813] hub 4-0:1.0: USB hub found [ 96.191974][ T6813] hub 4-0:1.0: 2 ports detected [ 96.285234][ T12] nci: nci_rsp_packet: unknown rsp opcode 0xe00 [ 96.288209][ T6819] overlayfs: failed to resolve 'lower1': -2 [ 96.364053][ T851] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 96.432837][ T6822] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 96.439253][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 96.439413][ T44] audit: type=1400 audit(1788076918.226:446): avc: denied { unlink } for pid=6820 comm="syz.3.263" name="#5" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.494272][ T851] usb 9-1: device descriptor read/64, error -71 [ 96.511376][ T6826] netlink: 108 bytes leftover after parsing attributes in process `syz.3.264'. [ 96.571588][ T6830] dummy0: entered allmulticast mode [ 96.596723][ T6829] dummy0: left allmulticast mode [ 96.606109][ T851] usb usb9-port1: attempt power cycle [ 96.696441][ T6836] netlink: 'syz.3.267': attribute type 34 has an invalid length. [ 96.696490][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 96.839819][ T6841] hub 4-0:1.0: USB hub found [ 96.839976][ T6841] hub 4-0:1.0: 2 ports detected [ 96.908739][ T6843] FAULT_INJECTION: forcing a failure. [ 96.908739][ T6843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.908797][ T6843] CPU: 2 UID: 0 PID: 6843 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 96.908821][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.908829][ T6843] Call Trace: [ 96.908833][ T6843] [ 96.908838][ T6843] dump_stack_lvl+0x100/0x190 [ 96.908857][ T6843] should_fail_ex.cold+0x5/0xa [ 96.908873][ T6843] _copy_from_user+0x2e/0xd0 [ 96.908890][ T6843] usbdev_ioctl+0xff6/0x3a90 [ 96.908909][ T6843] ? __pfx_usbdev_ioctl+0x10/0x10 [ 96.908928][ T6843] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.908942][ T6843] ? do_vfs_ioctl+0x226/0x13e0 [ 96.908960][ T6843] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.908975][ T6843] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 96.909001][ T6843] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.909027][ T6843] ? __fget_files+0x34/0x3d0 [ 96.909046][ T6843] ? selinux_file_ioctl+0x13b/0x290 [ 96.909064][ T6843] ? selinux_file_ioctl+0xb6/0x290 [ 96.909083][ T6843] ? __pfx_usbdev_ioctl+0x10/0x10 [ 96.909109][ T6843] __x64_sys_ioctl+0x18e/0x210 [ 96.909136][ T6843] do_syscall_64+0x123/0x790 [ 96.909152][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.909164][ T6843] RIP: 0033:0x7f050279e159 [ 96.909173][ T6843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.909184][ T6843] RSP: 002b:00007f050367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.909199][ T6843] RAX: ffffffffffffffda RBX: 00007f0502a25fa0 RCX: 00007f050279e159 [ 96.909211][ T6843] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 96.909222][ T6843] RBP: 00007f050367f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.909232][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.909240][ T6843] R13: 00007f0502a26038 R14: 00007f0502a25fa0 R15: 00007ffe2ef39ab8 [ 96.909254][ T6843] [ 96.944728][ T851] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 96.966090][ T851] usb 9-1: device descriptor read/8, error -71 [ 97.204094][ T851] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 97.224146][ T5879] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 97.225692][ T851] usb 9-1: device descriptor read/8, error -71 [ 97.334563][ T851] usb usb9-port1: unable to enumerate USB device [ 97.375844][ T5879] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 97.379607][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.388307][ T5879] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 017 [ 97.787985][ T6845] openvswitch: netlink: IP tunnel dst address not specified [ 97.790785][ T5879] (null): failure reading functionality [ 97.793375][ T5879] i2c i2c-2: failure reading functionality [ 97.797885][ T5879] i2c i2c-2: connected i2c-tiny-usb device [ 98.048605][ T6845] i2c i2c-2: failure reading status [ 98.048692][ T6845] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 98.048919][ T6845] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 98.049115][ T6845] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 98.053486][ T10] usb 8-1: USB disconnect, device number 17 [ 98.607217][ T851] usb 5-1: USB disconnect, device number 13 [ 98.635171][ T6848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.636306][ T44] audit: type=1400 audit(1788076920.426:447): avc: denied { mounton } for pid=6847 comm="syz.3.272" path="/84/debug/tracing/trace_pipe" dev="tracefs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.693016][ T6853] dummy0: entered allmulticast mode [ 98.697526][ T6850] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4294934322.255), cmd(1) [ 98.721869][ T6852] dummy0: left allmulticast mode [ 98.809664][ T44] audit: type=1400 audit(1788076920.596:448): avc: denied { write } for pid=6859 comm="syz.3.277" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.827228][ T44] audit: type=1400 audit(1788076920.616:449): avc: denied { nlmsg_read } for pid=6857 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.829669][ T6862] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 98.843577][ T6860] netlink: 308 bytes leftover after parsing attributes in process `syz.3.277'. [ 98.897510][ T44] audit: type=1400 audit(1788076920.686:450): avc: denied { create } for pid=6855 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.899176][ T44] audit: type=1400 audit(1788076920.686:451): avc: denied { bind } for pid=6855 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.902660][ T44] audit: type=1400 audit(1788076920.686:452): avc: denied { listen } for pid=6855 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.905205][ T6864] hub 4-0:1.0: USB hub found [ 98.905579][ T6864] hub 4-0:1.0: 2 ports detected [ 99.001153][ T44] audit: type=1400 audit(1788076920.786:453): avc: denied { mount } for pid=6867 comm="syz.3.279" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.013472][ T6868] FAULT_INJECTION: forcing a failure. [ 99.013472][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.013538][ T6868] CPU: 2 UID: 0 PID: 6868 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(full) [ 99.013559][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.013570][ T6868] Call Trace: [ 99.013575][ T6868] [ 99.013582][ T6868] dump_stack_lvl+0x100/0x190 [ 99.013611][ T6868] should_fail_ex.cold+0x5/0xa [ 99.013636][ T6868] _copy_to_user+0x32/0xd0 [ 99.013663][ T6868] ctl_ioctl+0x5c2/0xcc0 [ 99.013685][ T6868] ? __pfx_remove_all+0x10/0x10 [ 99.013706][ T6868] ? __pfx_ctl_ioctl+0x10/0x10 [ 99.013751][ T6868] ? selinux_file_ioctl+0x13b/0x290 [ 99.013776][ T6868] ? selinux_file_ioctl+0xb6/0x290 [ 99.013803][ T6868] dm_ctl_ioctl+0x22/0x30 [ 99.013822][ T6868] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 99.013843][ T6868] __x64_sys_ioctl+0x18e/0x210 [ 99.013886][ T6868] do_syscall_64+0x123/0x790 [ 99.013925][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.013942][ T6868] RIP: 0033:0x7f050279e159 [ 99.013955][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.013969][ T6868] RSP: 002b:00007f050367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.013984][ T6868] RAX: ffffffffffffffda RBX: 00007f0502a25fa0 RCX: 00007f050279e159 [ 99.013993][ T6868] RDX: 0000200000002000 RSI: 00000000c138fd01 RDI: 0000000000000006 [ 99.014002][ T6868] RBP: 00007f050367f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.014010][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.014019][ T6868] R13: 00007f0502a26038 R14: 00007f0502a25fa0 R15: 00007ffe2ef39ab8 [ 99.014038][ T6868] [ 99.048535][ T44] audit: type=1400 audit(1788076920.836:454): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.229423][ T6815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.292004][ T44] audit: type=1400 audit(1788076921.076:455): avc: denied { setopt } for pid=6873 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.324093][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 99.353562][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.353783][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.426967][ T6883] FAULT_INJECTION: forcing a failure. [ 99.426967][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 99.431220][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 99.431249][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.431258][ T6883] Call Trace: [ 99.431263][ T6883] [ 99.431268][ T6883] dump_stack_lvl+0x100/0x190 [ 99.431288][ T6883] should_fail_ex.cold+0x5/0xa [ 99.431304][ T6883] should_failslab+0xc2/0x120 [ 99.431318][ T6883] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 99.431331][ T6883] ? kstrdup_const+0x63/0x80 [ 99.431350][ T6883] kstrdup+0x51/0xe0 [ 99.431366][ T6883] kstrdup_const+0x63/0x80 [ 99.431382][ T6883] __kernfs_new_node+0x9b/0xa10 [ 99.431400][ T6883] ? __pfx___kernfs_new_node+0x10/0x10 [ 99.431417][ T6883] ? lock_acquire+0x1d1/0x380 [ 99.431429][ T6883] ? kernfs_root+0x23/0x2a0 [ 99.431442][ T6883] ? find_held_lock+0x2b/0x80 [ 99.431457][ T6883] ? kernfs_root+0xee/0x2a0 [ 99.431470][ T6883] ? kernfs_root+0xee/0x2a0 [ 99.431486][ T6883] kernfs_new_node+0x117/0x150 [ 99.431508][ T6883] kernfs_create_link+0xcc/0x240 [ 99.431525][ T6883] sysfs_do_create_link_sd+0x90/0x140 [ 99.431541][ T6883] sysfs_create_link+0x61/0xc0 [ 99.431554][ T6883] driver_sysfs_add+0x91/0x2d0 [ 99.431573][ T6883] really_probe+0x146/0xa60 [ 99.431591][ T6883] __driver_probe_device+0x210/0x460 [ 99.431608][ T6883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.431627][ T6883] driver_probe_device+0x4a/0x140 [ 99.431645][ T6883] __device_attach_driver+0x1df/0x320 [ 99.431663][ T6883] ? __pfx___device_attach_driver+0x10/0x10 [ 99.431680][ T6883] bus_for_each_drv+0x159/0x1e0 [ 99.431696][ T6883] ? __pfx_bus_for_each_drv+0x10/0x10 [ 99.431711][ T6883] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.431722][ T6883] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.431742][ T6883] __device_attach+0x1e4/0x4d0 [ 99.431752][ T6883] ? __pfx___device_attach+0x10/0x10 [ 99.431762][ T6883] ? __might_fault+0xc5/0x140 [ 99.431779][ T6883] ? usb_ifnum_to_if+0x16f/0x1d0 [ 99.431794][ T6883] proc_ioctl+0x3f6/0x680 [ 99.431811][ T6883] usbdev_ioctl+0x1023/0x3a90 [ 99.431829][ T6883] ? __pfx_usbdev_ioctl+0x10/0x10 [ 99.431849][ T6883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.431862][ T6883] ? do_vfs_ioctl+0x226/0x13e0 [ 99.431879][ T6883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.431895][ T6883] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 99.431915][ T6883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.431935][ T6883] ? __fget_files+0x34/0x3d0 [ 99.431953][ T6883] ? selinux_file_ioctl+0x13b/0x290 [ 99.431969][ T6883] ? selinux_file_ioctl+0xb6/0x290 [ 99.431987][ T6883] ? __pfx_usbdev_ioctl+0x10/0x10 [ 99.432004][ T6883] __x64_sys_ioctl+0x18e/0x210 [ 99.432024][ T6883] do_syscall_64+0x123/0x790 [ 99.432038][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.432049][ T6883] RIP: 0033:0x7fa78419e159 [ 99.432060][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.432070][ T6883] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.432082][ T6883] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 99.432089][ T6883] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 99.432096][ T6883] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 99.432103][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.432110][ T6883] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 99.432124][ T6883] [ 99.474981][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 99.475799][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.491499][ T25] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 018 [ 99.554984][ T6883] hub 4-0:1.0: really_probe: driver_sysfs_add failed [ 99.581197][ T851] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 99.608263][ T6892] dummy0: entered allmulticast mode [ 99.633839][ T6891] dummy0: left allmulticast mode [ 99.705683][ T6688] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 99.724093][ T851] usb 7-1: Using ep0 maxpacket: 32 [ 99.727154][ T851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 99.727273][ T851] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 99.732607][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.732621][ T851] usb 7-1: Product: syz [ 99.732629][ T851] usb 7-1: Manufacturer: syz [ 99.732636][ T851] usb 7-1: SerialNumber: syz [ 99.836735][ T6688] usb 9-1: device descriptor read/64, error -71 [ 99.893381][ T6872] openvswitch: netlink: IP tunnel dst address not specified [ 99.894341][ T25] (null): failure reading functionality [ 99.896202][ T25] i2c i2c-2: failure reading functionality [ 99.902540][ T25] i2c i2c-2: connected i2c-tiny-usb device [ 99.903774][ T6906] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.234881074.0), cmd(1) [ 99.966692][ T851] usb 7-1: Fast Track Pro switching to config #2 [ 99.971018][ T851] usb 7-1: USB disconnect, device number 17 [ 100.076470][ T6688] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 100.087421][ T12] nci: nci_rsp_packet: unknown rsp opcode 0xe00 [ 100.091452][ T6923] overlayfs: failed to resolve 'lower1': -2 [ 100.204033][ T6688] usb 9-1: device descriptor read/64, error -71 [ 100.326378][ T6688] usb usb9-port1: attempt power cycle [ 100.510430][ T6926] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 100.510516][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.658971][ T6934] FAULT_INJECTION: forcing a failure. [ 100.658971][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.659019][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 100.659045][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.659054][ T6934] Call Trace: [ 100.659058][ T6934] [ 100.659063][ T6934] dump_stack_lvl+0x100/0x190 [ 100.659083][ T6934] should_fail_ex.cold+0x5/0xa [ 100.659100][ T6934] _copy_to_user+0x32/0xd0 [ 100.659120][ T6934] simple_read_from_buffer+0xcb/0x170 [ 100.659134][ T6934] proc_fail_nth_read+0x1af/0x230 [ 100.659148][ T6934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.659162][ T6934] ? rw_verify_area+0xce/0x6d0 [ 100.659178][ T6934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.659191][ T6934] vfs_read+0x1e4/0xb40 [ 100.659212][ T6934] ? lock_acquire+0x1d1/0x380 [ 100.659224][ T6934] ? __fget_files+0x34/0x3d0 [ 100.659237][ T6934] ? __pfx_vfs_read+0x10/0x10 [ 100.659253][ T6934] ? find_held_lock+0x2b/0x80 [ 100.659269][ T6934] ? __fget_files+0x215/0x3d0 [ 100.659284][ T6934] ? __fget_files+0x21f/0x3d0 [ 100.659301][ T6934] ksys_read+0x12a/0x250 [ 100.659318][ T6934] ? __pfx_ksys_read+0x10/0x10 [ 100.659340][ T6934] do_syscall_64+0x123/0x790 [ 100.659355][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.659367][ T6934] RIP: 0033:0x7f96ab75e98e [ 100.659377][ T6934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.659389][ T6934] RSP: 002b:00007f96ac57efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.659401][ T6934] RAX: ffffffffffffffda RBX: 00007f96ac57f6c0 RCX: 00007f96ab75e98e [ 100.659408][ T6934] RDX: 000000000000000f RSI: 00007f96ac57f0a0 RDI: 0000000000000008 [ 100.659415][ T6934] RBP: 00007f96ac57f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.659422][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.659429][ T6934] R13: 00007f96aba26038 R14: 00007f96aba25fa0 R15: 00007ffc93824718 [ 100.659443][ T6934] [ 100.685443][ T6688] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 100.716079][ T6688] usb 9-1: device descriptor read/8, error -71 [ 100.786251][ T6939] hub 4-0:1.0: USB hub found [ 100.786420][ T6939] hub 4-0:1.0: 2 ports detected [ 100.944217][ T6688] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 100.964869][ T6688] usb 9-1: device descriptor read/8, error -71 [ 101.074777][ T6688] usb usb9-port1: unable to enumerate USB device [ 102.099906][ T10] usb 8-1: USB disconnect, device number 18 [ 102.128279][ T6941] dummy0: entered allmulticast mode [ 102.153272][ T6940] dummy0: left allmulticast mode [ 102.250510][ T44] kauditd_printk_skb: 12 callbacks suppressed [ 102.252346][ T44] audit: type=1400 audit(1788076924.036:468): avc: denied { write } for pid=6942 comm="syz.3.295" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.595375][ T6948] FAULT_INJECTION: forcing a failure. [ 102.595375][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 102.601503][ T6948] CPU: 2 UID: 0 PID: 6948 Comm: syz.4.297 Not tainted syzkaller #0 PREEMPT(full) [ 102.601537][ T6948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.601548][ T6948] Call Trace: [ 102.601556][ T6948] [ 102.601563][ T6948] dump_stack_lvl+0x100/0x190 [ 102.601593][ T6948] should_fail_ex.cold+0x5/0xa [ 102.601617][ T6948] should_failslab+0xc2/0x120 [ 102.601638][ T6948] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.601651][ T6948] ? __asan_memcpy+0x3c/0x60 [ 102.601675][ T6948] ? __kernfs_new_node+0xd2/0xa10 [ 102.601702][ T6948] __kernfs_new_node+0xd2/0xa10 [ 102.601729][ T6948] ? __pfx___kernfs_new_node+0x10/0x10 [ 102.601754][ T6948] ? lock_acquire+0x1d1/0x380 [ 102.601772][ T6948] ? kernfs_root+0x23/0x2a0 [ 102.601788][ T6948] ? find_held_lock+0x2b/0x80 [ 102.601810][ T6948] ? kernfs_root+0xee/0x2a0 [ 102.601829][ T6948] ? kernfs_root+0xee/0x2a0 [ 102.601855][ T6948] kernfs_new_node+0x117/0x150 [ 102.601883][ T6948] kernfs_create_link+0xcc/0x240 [ 102.601920][ T6948] sysfs_do_create_link_sd+0x90/0x140 [ 102.601950][ T6948] sysfs_create_link+0x61/0xc0 [ 102.601971][ T6948] driver_sysfs_add+0x91/0x2d0 [ 102.601998][ T6948] really_probe+0x146/0xa60 [ 102.602023][ T6948] __driver_probe_device+0x210/0x460 [ 102.602046][ T6948] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.602077][ T6948] driver_probe_device+0x4a/0x140 [ 102.602103][ T6948] __device_attach_driver+0x1df/0x320 [ 102.602131][ T6948] ? __pfx___device_attach_driver+0x10/0x10 [ 102.602156][ T6948] bus_for_each_drv+0x159/0x1e0 [ 102.602175][ T6948] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.602198][ T6948] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.602216][ T6948] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.602245][ T6948] __device_attach+0x1e4/0x4d0 [ 102.602261][ T6948] ? __pfx___device_attach+0x10/0x10 [ 102.602275][ T6948] ? __might_fault+0xc5/0x140 [ 102.602299][ T6948] ? usb_ifnum_to_if+0x16f/0x1d0 [ 102.602319][ T6948] proc_ioctl+0x3f6/0x680 [ 102.602345][ T6948] usbdev_ioctl+0x1023/0x3a90 [ 102.602372][ T6948] ? __pfx_usbdev_ioctl+0x10/0x10 [ 102.602402][ T6948] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.602423][ T6948] ? do_vfs_ioctl+0x226/0x13e0 [ 102.602447][ T6948] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.602485][ T6948] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 102.602515][ T6948] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.602545][ T6948] ? __fget_files+0x34/0x3d0 [ 102.602572][ T6948] ? selinux_file_ioctl+0x13b/0x290 [ 102.602594][ T6948] ? selinux_file_ioctl+0xb6/0x290 [ 102.602620][ T6948] ? __pfx_usbdev_ioctl+0x10/0x10 [ 102.602645][ T6948] __x64_sys_ioctl+0x18e/0x210 [ 102.602673][ T6948] do_syscall_64+0x123/0x790 [ 102.602694][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.602710][ T6948] RIP: 0033:0x7f3ce799e159 [ 102.602722][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.602738][ T6948] RSP: 002b:00007f3ce8906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.602756][ T6948] RAX: ffffffffffffffda RBX: 00007f3ce7c25fa0 RCX: 00007f3ce799e159 [ 102.602766][ T6948] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 102.602777][ T6948] RBP: 00007f3ce8906090 R08: 0000000000000000 R09: 0000000000000000 [ 102.602786][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.602796][ T6948] R13: 00007f3ce7c26038 R14: 00007f3ce7c25fa0 R15: 00007ffec1fdce88 [ 102.602821][ T6948] [ 102.615329][ T6948] hub 4-0:1.0: really_probe: driver_sysfs_add failed [ 102.661927][ T6950] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 102.811080][ T6954] FAULT_INJECTION: forcing a failure. [ 102.811080][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 102.811158][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.4.300 Not tainted syzkaller #0 PREEMPT(full) [ 102.811195][ T6954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.811207][ T6954] Call Trace: [ 102.811214][ T6954] [ 102.811221][ T6954] dump_stack_lvl+0x100/0x190 [ 102.811254][ T6954] should_fail_ex.cold+0x5/0xa [ 102.811281][ T6954] should_failslab+0xc2/0x120 [ 102.811303][ T6954] __kmalloc_noprof+0xfc/0x840 [ 102.811482][ T6954] ? rcu_is_watching+0x13/0xc0 [ 102.811515][ T6954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 102.811545][ T6954] tomoyo_realpath_from_path+0xb6/0x690 [ 102.811567][ T6954] tomoyo_path_number_perm+0x23c/0x580 [ 102.811590][ T6954] ? tomoyo_path_number_perm+0x22e/0x580 [ 102.811615][ T6954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.811647][ T6954] ? __lock_acquire+0x4c5/0x1ec0 [ 102.811673][ T6954] ? __fget_files+0x34/0x3d0 [ 102.811693][ T6954] ? find_held_lock+0x2b/0x80 [ 102.811714][ T6954] ? hook_file_ioctl_common+0x140/0x440 [ 102.811738][ T6954] ? __fget_files+0x21f/0x3d0 [ 102.811758][ T6954] security_file_ioctl+0xd3/0x230 [ 102.811785][ T6954] __x64_sys_ioctl+0xb7/0x210 [ 102.811811][ T6954] do_syscall_64+0x123/0x790 [ 102.811841][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.811859][ T6954] RIP: 0033:0x7f3ce799e159 [ 102.811875][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.811892][ T6954] RSP: 002b:00007f3ce8906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.811910][ T6954] RAX: ffffffffffffffda RBX: 00007f3ce7c25fa0 RCX: 00007f3ce799e159 [ 102.811920][ T6954] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 102.811931][ T6954] RBP: 00007f3ce8906090 R08: 0000000000000000 R09: 0000000000000000 [ 102.811941][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.811951][ T6954] R13: 00007f3ce7c26038 R14: 00007f3ce7c25fa0 R15: 00007ffec1fdce88 [ 102.811973][ T6954] [ 102.816528][ T6954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.867526][ T44] audit: type=1400 audit(1788076924.656:469): avc: denied { read write } for pid=6955 comm="syz.4.301" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.867556][ T44] audit: type=1400 audit(1788076924.656:470): avc: denied { open } for pid=6955 comm="syz.4.301" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.988832][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.083259][ T6963] dummy0: entered allmulticast mode [ 103.103310][ T6960] dummy0: left allmulticast mode [ 103.148397][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.306'. [ 103.155578][ T5811] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 103.165908][ T6967] FAULT_INJECTION: forcing a failure. [ 103.165908][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 103.173488][ T6967] CPU: 2 UID: 0 PID: 6967 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 103.173519][ T6967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.173528][ T6967] Call Trace: [ 103.173536][ T6967] [ 103.173541][ T6967] dump_stack_lvl+0x100/0x190 [ 103.173563][ T6967] should_fail_ex.cold+0x5/0xa [ 103.173580][ T6967] should_failslab+0xc2/0x120 [ 103.173594][ T6967] kmem_cache_alloc_noprof+0x92/0x6a0 [ 103.173607][ T6967] ? __kernfs_new_node+0xd2/0xa10 [ 103.173638][ T6967] __kernfs_new_node+0xd2/0xa10 [ 103.173657][ T6967] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.173675][ T6967] ? lock_acquire+0x1d1/0x380 [ 103.173687][ T6967] ? kernfs_root+0x23/0x2a0 [ 103.173701][ T6967] ? find_held_lock+0x2b/0x80 [ 103.173716][ T6967] ? kernfs_root+0xee/0x2a0 [ 103.173729][ T6967] ? kernfs_root+0xee/0x2a0 [ 103.173746][ T6967] kernfs_new_node+0x117/0x150 [ 103.173765][ T6967] kernfs_create_link+0xcc/0x240 [ 103.173778][ T6967] sysfs_do_create_link_sd+0x90/0x140 [ 103.173794][ T6967] sysfs_create_link+0x61/0xc0 [ 103.173808][ T6967] driver_sysfs_add+0x112/0x2d0 [ 103.173826][ T6967] really_probe+0x146/0xa60 [ 103.173846][ T6967] __driver_probe_device+0x210/0x460 [ 103.173863][ T6967] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.173883][ T6967] driver_probe_device+0x4a/0x140 [ 103.173927][ T6967] __device_attach_driver+0x1df/0x320 [ 103.173946][ T6967] ? __pfx___device_attach_driver+0x10/0x10 [ 103.173968][ T6967] bus_for_each_drv+0x159/0x1e0 [ 103.173984][ T6967] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.173999][ T6967] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.174012][ T6967] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.174045][ T6967] __device_attach+0x1e4/0x4d0 [ 103.174057][ T6967] ? __pfx___device_attach+0x10/0x10 [ 103.174067][ T6967] ? __might_fault+0xc5/0x140 [ 103.174084][ T6967] ? usb_ifnum_to_if+0x16f/0x1d0 [ 103.174101][ T6967] proc_ioctl+0x3f6/0x680 [ 103.174118][ T6967] usbdev_ioctl+0x1023/0x3a90 [ 103.174138][ T6967] ? __pfx_usbdev_ioctl+0x10/0x10 [ 103.174158][ T6967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.174176][ T6967] ? do_vfs_ioctl+0x226/0x13e0 [ 103.174202][ T6967] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.174225][ T6967] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 103.174248][ T6967] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.174269][ T6967] ? __fget_files+0x34/0x3d0 [ 103.174288][ T6967] ? selinux_file_ioctl+0x13b/0x290 [ 103.174305][ T6967] ? selinux_file_ioctl+0xb6/0x290 [ 103.174323][ T6967] ? __pfx_usbdev_ioctl+0x10/0x10 [ 103.174340][ T6967] __x64_sys_ioctl+0x18e/0x210 [ 103.174359][ T6967] do_syscall_64+0x123/0x790 [ 103.174373][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.174386][ T6967] RIP: 0033:0x7fa78419e159 [ 103.174397][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.174408][ T6967] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.174420][ T6967] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 103.174428][ T6967] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 103.174435][ T6967] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 103.174442][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.174448][ T6967] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 103.174465][ T6967] [ 103.236053][ T6967] hub 4-0:1.0: really_probe: driver_sysfs_add failed [ 103.248534][ T6969] loop4: detected capacity change from 0 to 10832 [ 103.251795][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251826][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251842][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251857][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251872][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251895][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251915][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251929][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251938][ T6969] ldm_validate_partition_table(): Disk read failed. [ 103.251952][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251968][ T6969] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.251990][ T6969] Dev loop4: unable to read RDB block 0 [ 103.252071][ T6969] loop4: unable to read partition table [ 103.252170][ T6969] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 103.256947][ T44] audit: type=1400 audit(1788076925.046:471): avc: denied { map } for pid=6968 comm="syz.2.306" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.256975][ T44] audit: type=1400 audit(1788076925.046:472): avc: denied { execute } for pid=6968 comm="syz.2.306" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.311080][ T5811] usb 9-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 103.315708][ T5811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.345934][ T5811] i2c-tiny-usb 9-1:1.0: version 1.00 found at bus 009 address 016 [ 103.389278][ T5138] ldm_validate_partition_table(): Disk read failed. [ 103.392658][ T5138] Dev loop4: unable to read RDB block 0 [ 103.394812][ T5138] loop4: unable to read partition table [ 103.414077][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 103.473483][ T44] audit: type=1400 audit(1788076925.256:473): avc: denied { sqpoll } for pid=6974 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.500279][ T6979] FAULT_INJECTION: forcing a failure. [ 103.500279][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 103.500381][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.0.311 Not tainted syzkaller #0 PREEMPT(full) [ 103.500405][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.500414][ T6979] Call Trace: [ 103.500418][ T6979] [ 103.500423][ T6979] dump_stack_lvl+0x100/0x190 [ 103.500467][ T6979] should_fail_ex.cold+0x5/0xa [ 103.500486][ T6979] should_failslab+0xc2/0x120 [ 103.500503][ T6979] __kmalloc_noprof+0xfc/0x840 [ 103.500515][ T6979] ? tomoyo_encode2+0xfb/0x3c0 [ 103.500529][ T6979] tomoyo_encode2+0xfb/0x3c0 [ 103.500542][ T6979] tomoyo_encode+0x29/0x50 [ 103.500552][ T6979] tomoyo_realpath_from_path+0x18c/0x690 [ 103.500567][ T6979] tomoyo_path_number_perm+0x23c/0x580 [ 103.500582][ T6979] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.500599][ T6979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.500621][ T6979] ? __lock_acquire+0x4c5/0x1ec0 [ 103.500638][ T6979] ? __fget_files+0x34/0x3d0 [ 103.500651][ T6979] ? find_held_lock+0x2b/0x80 [ 103.500666][ T6979] ? hook_file_ioctl_common+0x140/0x440 [ 103.500682][ T6979] ? __fget_files+0x21f/0x3d0 [ 103.500697][ T6979] security_file_ioctl+0xd3/0x230 [ 103.500715][ T6979] __x64_sys_ioctl+0xb7/0x210 [ 103.500734][ T6979] do_syscall_64+0x123/0x790 [ 103.500751][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.500763][ T6979] RIP: 0033:0x7fa78419e159 [ 103.500773][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.500783][ T6979] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.500795][ T6979] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 103.500802][ T6979] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 103.500809][ T6979] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 103.500815][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.500822][ T6979] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 103.500836][ T6979] [ 103.503301][ T6979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.569721][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 103.569747][ T25] usb 8-1: no configurations [ 103.569753][ T25] usb 8-1: can't read configurations, error -22 [ 103.622699][ T44] audit: type=1400 audit(1788076925.406:474): avc: denied { read } for pid=6974 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.631760][ T44] audit: type=1400 audit(1788076925.416:475): avc: denied { mount } for pid=6974 comm="syz.2.309" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.644514][ T44] audit: type=1400 audit(1788076925.426:476): avc: denied { ioctl } for pid=6974 comm="syz.2.309" path="socket:[14642]" dev="sockfs" ino=14642 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.714033][ T25] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 103.762612][ T6959] openvswitch: netlink: IP tunnel dst address not specified [ 103.763658][ T5811] (null): failure reading functionality [ 103.771800][ T5811] i2c i2c-2: failure reading functionality [ 103.774775][ T5811] i2c i2c-2: connected i2c-tiny-usb device [ 103.838675][ T6987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.841214][ T6987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.843240][ T6987] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 103.864466][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 103.864511][ T25] usb 8-1: no configurations [ 103.864862][ T25] usb 8-1: can't read configurations, error -22 [ 103.873128][ T25] usb usb8-port1: attempt power cycle [ 103.918530][ T6994] dummy0: entered allmulticast mode [ 103.923128][ T12] nci: nci_rsp_packet: unknown rsp opcode 0xe00 [ 103.930922][ T6995] overlayfs: failed to resolve 'lower1': -2 [ 103.952883][ T6993] dummy0: left allmulticast mode [ 104.156285][ T44] audit: type=1400 audit(1788076925.946:477): avc: denied { mount } for pid=6998 comm="syz.2.317" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 104.224427][ T25] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 104.255310][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 104.255366][ T25] usb 8-1: no configurations [ 104.255390][ T25] usb 8-1: can't read configurations, error -22 [ 104.404021][ T25] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 104.434843][ T25] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 104.434899][ T25] usb 8-1: no configurations [ 104.434950][ T25] usb 8-1: can't read configurations, error -22 [ 104.435180][ T25] usb usb8-port1: unable to enumerate USB device [ 105.934791][ T851] usb 9-1: USB disconnect, device number 16 [ 106.016004][ T7012] hub 4-0:1.0: USB hub found [ 106.016068][ T7012] FAULT_INJECTION: forcing a failure. [ 106.016068][ T7012] name failslab, interval 1, probability 0, space 0, times 0 [ 106.016148][ T7012] CPU: 2 UID: 0 PID: 7012 Comm: syz.4.318 Not tainted syzkaller #0 PREEMPT(full) [ 106.016169][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.016179][ T7012] Call Trace: [ 106.016186][ T7012] [ 106.016193][ T7012] dump_stack_lvl+0x100/0x190 [ 106.016224][ T7012] should_fail_ex.cold+0x5/0xa [ 106.016249][ T7012] should_failslab+0xc2/0x120 [ 106.016271][ T7012] __kmalloc_noprof+0xfc/0x840 [ 106.016289][ T7012] ? hub_probe.cold+0x269/0x2ed9 [ 106.016320][ T7012] hub_probe.cold+0x269/0x2ed9 [ 106.016349][ T7012] ? do_raw_spin_lock+0x128/0x260 [ 106.016373][ T7012] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.016394][ T7012] ? __pfx_hub_probe+0x10/0x10 [ 106.016422][ T7012] ? rcu_is_watching+0x13/0xc0 [ 106.016445][ T7012] ? _raw_spin_lock_irqsave+0x52/0x60 [ 106.016472][ T7012] ? find_held_lock+0x2b/0x80 [ 106.016496][ T7012] ? usb_probe_interface+0x793/0x9b0 [ 106.016522][ T7012] ? rcu_is_watching+0x13/0xc0 [ 106.016544][ T7012] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.016575][ T7012] usb_probe_interface+0x386/0x9b0 [ 106.016603][ T7012] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.016624][ T7012] ? kernfs_put+0x3f/0x60 [ 106.016651][ T7012] ? sysfs_create_link+0x68/0xc0 [ 106.016674][ T7012] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.016699][ T7012] really_probe+0x241/0xa60 [ 106.016729][ T7012] __driver_probe_device+0x210/0x460 [ 106.016756][ T7012] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.016785][ T7012] driver_probe_device+0x4a/0x140 [ 106.016813][ T7012] __device_attach_driver+0x1df/0x320 [ 106.016842][ T7012] ? __pfx___device_attach_driver+0x10/0x10 [ 106.016869][ T7012] bus_for_each_drv+0x159/0x1e0 [ 106.016892][ T7012] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.016916][ T7012] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.016936][ T7012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.016984][ T7012] __device_attach+0x1e4/0x4d0 [ 106.017001][ T7012] ? __pfx___device_attach+0x10/0x10 [ 106.017016][ T7012] ? __might_fault+0xc5/0x140 [ 106.017043][ T7012] ? usb_ifnum_to_if+0x16f/0x1d0 [ 106.017073][ T7012] proc_ioctl+0x3f6/0x680 [ 106.017100][ T7012] usbdev_ioctl+0x1023/0x3a90 [ 106.017130][ T7012] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.017160][ T7012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.017183][ T7012] ? do_vfs_ioctl+0x226/0x13e0 [ 106.017210][ T7012] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.017235][ T7012] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 106.017267][ T7012] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.017298][ T7012] ? __fget_files+0x34/0x3d0 [ 106.017331][ T7012] ? selinux_file_ioctl+0x13b/0x290 [ 106.017358][ T7012] ? selinux_file_ioctl+0xb6/0x290 [ 106.017386][ T7012] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.017414][ T7012] __x64_sys_ioctl+0x18e/0x210 [ 106.017443][ T7012] do_syscall_64+0x123/0x790 [ 106.017465][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.017484][ T7012] RIP: 0033:0x7f3ce799e159 [ 106.017499][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.017517][ T7012] RSP: 002b:00007f3ce8906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.017535][ T7012] RAX: ffffffffffffffda RBX: 00007f3ce7c25fa0 RCX: 00007f3ce799e159 [ 106.017547][ T7012] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 106.017558][ T7012] RBP: 00007f3ce8906090 R08: 0000000000000000 R09: 0000000000000000 [ 106.017569][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.017579][ T7012] R13: 00007f3ce7c26038 R14: 00007f3ce7c25fa0 R15: 00007ffec1fdce88 [ 106.017605][ T7012] [ 106.017664][ T7012] hub 4-0:1.0: probe with driver hub failed with error -12 [ 106.332451][ T7027] hub 4-0:1.0: USB hub found [ 106.334812][ T7027] hub 4-0:1.0: 2 ports detected [ 106.418990][ T7030] xt_hashlimit: size too large, truncated to 1048576 [ 106.556858][ T7040] capability: warning: `syz.3.324' uses deprecated v2 capabilities in a way that may be insecure [ 106.624600][ T7043] fuse: Bad value for 'group_id' [ 106.624664][ T7043] fuse: Bad value for 'group_id' [ 106.687147][ T7045] CIFS: Attempting to mount //::1/share [ 106.836387][ T6989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.009958][ T7058] FAULT_INJECTION: forcing a failure. [ 107.009958][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 107.010022][ T7058] CPU: 2 UID: 0 PID: 7058 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 107.010046][ T7058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.010055][ T7058] Call Trace: [ 107.010059][ T7058] [ 107.010063][ T7058] dump_stack_lvl+0x100/0x190 [ 107.010095][ T7058] should_fail_ex.cold+0x5/0xa [ 107.010111][ T7058] should_failslab+0xc2/0x120 [ 107.010128][ T7058] __kmalloc_cache_noprof+0x91/0x6d0 [ 107.010143][ T7058] ? rcu_is_watching+0x13/0xc0 [ 107.010158][ T7058] ? binder_alloc_new_buf+0x1929/0x3050 [ 107.010176][ T7058] binder_alloc_new_buf+0x1929/0x3050 [ 107.010192][ T7058] ? kasan_save_track+0x14/0x30 [ 107.010205][ T7058] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 107.010216][ T7058] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 107.010235][ T7058] binder_transaction+0x1ebc/0x9bb0 [ 107.010259][ T7058] ? __pfx_binder_transaction+0x10/0x10 [ 107.010273][ T7058] ? __lock_acquire+0x4c5/0x1ec0 [ 107.010287][ T7058] ? __lock_acquire+0x4c5/0x1ec0 [ 107.010299][ T7058] ? lock_acquire+0x1d1/0x380 [ 107.010309][ T7058] ? unwind_next_frame+0xbd/0x2090 [ 107.010327][ T7058] ? lock_acquire+0x1d1/0x380 [ 107.010337][ T7058] ? is_bpf_text_address+0x25/0x1a0 [ 107.010352][ T7058] ? find_held_lock+0x2b/0x80 [ 107.010366][ T7058] ? is_bpf_text_address+0x8a/0x1a0 [ 107.010379][ T7058] ? is_bpf_text_address+0x8a/0x1a0 [ 107.010394][ T7058] ? __lock_acquire+0x4c5/0x1ec0 [ 107.010405][ T7058] ? __lock_acquire+0x4c5/0x1ec0 [ 107.010416][ T7058] ? __kernel_text_address+0xd/0x30 [ 107.010433][ T7058] ? unwind_get_return_address+0x59/0xa0 [ 107.010449][ T7058] ? lock_acquire+0x1d1/0x380 [ 107.010460][ T7058] ? __might_fault+0xc5/0x140 [ 107.010475][ T7058] ? find_held_lock+0x2b/0x80 [ 107.010489][ T7058] ? __might_fault+0xc5/0x140 [ 107.010503][ T7058] ? __might_fault+0xc5/0x140 [ 107.010528][ T7058] binder_thread_write+0x12f4/0x4db0 [ 107.010541][ T7058] ? __x64_sys_ioctl+0xb7/0x210 [ 107.010560][ T7058] ? __lock_acquire+0x4c5/0x1ec0 [ 107.010571][ T7058] ? __pfx_binder_thread_write+0x10/0x10 [ 107.010581][ T7058] ? avc_has_extended_perms+0x201/0x1080 [ 107.010595][ T7058] ? binder_debug+0xe0/0x190 [ 107.010611][ T7058] ? __pfx_binder_debug+0x10/0x10 [ 107.010626][ T7058] ? binder_debug+0xe0/0x190 [ 107.010641][ T7058] ? __pfx_binder_debug+0x10/0x10 [ 107.010665][ T7058] binder_ioctl+0x28ca/0x74a0 [ 107.010679][ T7058] ? tomoyo_path_number_perm+0x188/0x580 [ 107.010711][ T7058] ? __pfx_binder_ioctl+0x10/0x10 [ 107.010724][ T7058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.010738][ T7058] ? do_vfs_ioctl+0x226/0x13e0 [ 107.010755][ T7058] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.010770][ T7058] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 107.010791][ T7058] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.010810][ T7058] ? __fget_files+0x34/0x3d0 [ 107.010828][ T7058] ? selinux_file_ioctl+0x13b/0x290 [ 107.010845][ T7058] ? selinux_file_ioctl+0xb6/0x290 [ 107.010862][ T7058] ? __pfx_binder_ioctl+0x10/0x10 [ 107.010873][ T7058] __x64_sys_ioctl+0x18e/0x210 [ 107.010891][ T7058] do_syscall_64+0x123/0x790 [ 107.010909][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.010921][ T7058] RIP: 0033:0x7fa78419e159 [ 107.010930][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.010941][ T7058] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.010952][ T7058] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 107.010959][ T7058] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 107.010965][ T7058] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 107.010972][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.010978][ T7058] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 107.010992][ T7058] [ 107.032271][ T7056] hub 4-0:1.0: USB hub found [ 107.032391][ T7056] hub 4-0:1.0: 2 ports detected [ 107.129388][ T7060] XFS (loop0): SB validate failed with error -5. [ 107.174303][ T5811] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 107.180190][ T7069] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2130706482.16777215), cmd(1) [ 107.324724][ T5811] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 107.329135][ T5811] usb 7-1: no configurations [ 107.329147][ T5811] usb 7-1: can't read configurations, error -22 [ 107.466659][ T5811] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 107.520016][ T7045] CIFS: VFS: cifs_mount failed w/return code = -112 [ 107.577702][ T44] kauditd_printk_skb: 16 callbacks suppressed [ 107.577750][ T44] audit: type=1400 audit(1788076929.366:494): avc: denied { create } for pid=7083 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.587045][ T44] audit: type=1400 audit(1788076929.366:495): avc: denied { append } for pid=7078 comm="syz.0.339" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 107.605339][ T44] audit: type=1400 audit(1788076929.386:496): avc: denied { setopt } for pid=7083 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 107.630861][ T5811] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 107.630904][ T5811] usb 7-1: no configurations [ 107.630931][ T5811] usb 7-1: can't read configurations, error -22 [ 107.637907][ T5811] usb usb7-port1: attempt power cycle [ 107.706702][ T44] audit: type=1807 audit(1788076929.496:497): action=measure func=FLE_CHECK res=0 [ 107.706925][ T44] audit: type=1802 audit(1788076929.496:498): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.341" res=0 errno=0 [ 107.707404][ T44] audit: type=1400 audit(1788076929.496:499): avc: denied { create } for pid=7085 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.965308][ T7095] FAULT_INJECTION: forcing a failure. [ 107.965308][ T7095] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.965353][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 107.965377][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.965402][ T7095] Call Trace: [ 107.965407][ T7095] [ 107.965412][ T7095] dump_stack_lvl+0x100/0x190 [ 107.965432][ T7095] should_fail_ex.cold+0x5/0xa [ 107.965447][ T7095] ? prepare_alloc_pages+0x16d/0x5b0 [ 107.965463][ T7095] should_fail_alloc_page+0xeb/0x140 [ 107.965568][ T7095] prepare_alloc_pages+0x1f0/0x5b0 [ 107.965586][ T7095] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 107.965607][ T7095] ? lock_acquire+0x1d1/0x380 [ 107.965618][ T7095] ? is_bpf_text_address+0x25/0x1a0 [ 107.965635][ T7095] ? find_held_lock+0x2b/0x80 [ 107.965650][ T7095] ? is_bpf_text_address+0x8a/0x1a0 [ 107.965664][ T7095] ? is_bpf_text_address+0x8a/0x1a0 [ 107.965678][ T7095] ? bpf_ksym_find+0x128/0x1c0 [ 107.965695][ T7095] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.965712][ T7095] ? is_bpf_text_address+0x94/0x1a0 [ 107.965726][ T7095] ? kernel_text_address+0x8d/0x100 [ 107.965744][ T7095] ? __kernel_text_address+0xd/0x30 [ 107.965761][ T7095] ? unwind_get_return_address+0x59/0xa0 [ 107.965777][ T7095] ? arch_stack_walk+0xa6/0xf0 [ 107.965795][ T7095] ? look_up_lock_class+0x55/0x120 [ 107.965810][ T7095] ? stack_trace_save+0x8e/0xc0 [ 107.965828][ T7095] ? __pfx_stack_trace_save+0x10/0x10 [ 107.965844][ T7095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 107.965881][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.965897][ T7095] ? policy_nodemask+0xed/0x4f0 [ 107.965912][ T7095] alloc_pages_mpol+0x201/0x550 [ 107.965932][ T7095] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.965948][ T7095] ? lock_vma_under_rcu+0x11d/0x590 [ 107.965966][ T7095] alloc_pages_noprof+0x1a/0x160 [ 107.965982][ T7095] pte_alloc_one+0x1c/0x3d0 [ 107.965999][ T7095] __pte_alloc+0x6d/0x380 [ 107.966010][ T7095] ? __pfx___pte_alloc+0x10/0x10 [ 107.966023][ T7095] ? walk_to_pmd+0x302/0x4c0 [ 107.966037][ T7095] get_locked_pte+0xa1/0xc0 [ 107.966051][ T7095] insert_page+0xcc/0x220 [ 107.966065][ T7095] ? __pfx_insert_page+0x10/0x10 [ 107.966082][ T7095] vm_insert_page+0x2c0/0x400 [ 107.966097][ T7095] binder_alloc_new_buf+0x217c/0x3050 [ 107.966115][ T7095] ? kasan_save_track+0x14/0x30 [ 107.966128][ T7095] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 107.966140][ T7095] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 107.966160][ T7095] binder_transaction+0x1ebc/0x9bb0 [ 107.966185][ T7095] ? __pfx_binder_transaction+0x10/0x10 [ 107.966200][ T7095] ? __lock_acquire+0x4c5/0x1ec0 [ 107.966214][ T7095] ? __lock_acquire+0x4c5/0x1ec0 [ 107.966227][ T7095] ? lock_acquire+0x1d1/0x380 [ 107.966238][ T7095] ? unwind_next_frame+0xbd/0x2090 [ 107.966269][ T7095] ? lock_acquire+0x1d1/0x380 [ 107.966279][ T7095] ? is_bpf_text_address+0x25/0x1a0 [ 107.966294][ T7095] ? find_held_lock+0x2b/0x80 [ 107.966308][ T7095] ? is_bpf_text_address+0x8a/0x1a0 [ 107.966322][ T7095] ? is_bpf_text_address+0x8a/0x1a0 [ 107.966337][ T7095] ? __lock_acquire+0x4c5/0x1ec0 [ 107.966349][ T7095] ? __lock_acquire+0x4c5/0x1ec0 [ 107.966361][ T7095] ? __kernel_text_address+0xd/0x30 [ 107.966377][ T7095] ? unwind_get_return_address+0x59/0xa0 [ 107.966395][ T7095] ? lock_acquire+0x1d1/0x380 [ 107.966405][ T7095] ? __might_fault+0xc5/0x140 [ 107.966421][ T7095] ? find_held_lock+0x2b/0x80 [ 107.966436][ T7095] ? __might_fault+0xc5/0x140 [ 107.966450][ T7095] ? __might_fault+0xc5/0x140 [ 107.966471][ T7095] binder_thread_write+0x12f4/0x4db0 [ 107.966485][ T7095] ? __x64_sys_ioctl+0xb7/0x210 [ 107.966504][ T7095] ? __lock_acquire+0x4c5/0x1ec0 [ 107.966516][ T7095] ? __pfx_binder_thread_write+0x10/0x10 [ 107.966526][ T7095] ? avc_has_extended_perms+0x201/0x1080 [ 107.966541][ T7095] ? binder_debug+0xe0/0x190 [ 107.966556][ T7095] ? __pfx_binder_debug+0x10/0x10 [ 107.966572][ T7095] ? binder_debug+0xe0/0x190 [ 107.966587][ T7095] ? __pfx_binder_debug+0x10/0x10 [ 107.966612][ T7095] binder_ioctl+0x28ca/0x74a0 [ 107.966629][ T7095] ? tomoyo_path_number_perm+0x188/0x580 [ 107.966650][ T7095] ? __pfx_binder_ioctl+0x10/0x10 [ 107.966663][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.966676][ T7095] ? do_vfs_ioctl+0x226/0x13e0 [ 107.966693][ T7095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.966709][ T7095] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 107.966730][ T7095] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.966750][ T7095] ? __fget_files+0x34/0x3d0 [ 107.966769][ T7095] ? selinux_file_ioctl+0x13b/0x290 [ 107.966786][ T7095] ? selinux_file_ioctl+0xb6/0x290 [ 107.966804][ T7095] ? __pfx_binder_ioctl+0x10/0x10 [ 107.966815][ T7095] __x64_sys_ioctl+0x18e/0x210 [ 107.966834][ T7095] do_syscall_64+0x123/0x790 [ 107.966848][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.966860][ T7095] RIP: 0033:0x7fa78419e159 [ 107.966958][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.966969][ T7095] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.966981][ T7095] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 107.966989][ T7095] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 107.966996][ T7095] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 107.967003][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.967009][ T7095] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 107.967024][ T7095] [ 107.974518][ T5811] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 107.984960][ T7095] binder_alloc: 7094: binder_install_single_page failed to insert page at offset 0 with -12 [ 108.003405][ T5811] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 108.003431][ T5811] usb 7-1: no configurations [ 108.003438][ T5811] usb 7-1: can't read configurations, error -22 [ 108.125960][ T5811] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 108.131378][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 108.158354][ T5811] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 108.158388][ T5811] usb 7-1: no configurations [ 108.158396][ T5811] usb 7-1: can't read configurations, error -22 [ 108.158642][ T5811] usb usb7-port1: unable to enumerate USB device [ 108.232921][ T44] audit: type=1400 audit(1788076930.016:500): avc: denied { read write } for pid=7098 comm="syz.0.345" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.241583][ T44] audit: type=1400 audit(1788076930.016:501): avc: denied { open } for pid=7098 comm="syz.0.345" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.313773][ T7100] comedi: No check for data length of config insn id 2 is implemented [ 108.313833][ T7100] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 108.313982][ T7100] comedi: Assuming n=60325 is correct P- H @[ 108.853843][ T44] audit: type=1400 audit(1788076930.636:502): avc: denied { write } for pid=7101 comm="syz.0.346" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 108.854259][ T44] audit: type=1400 audit(1788076930.646:503): avc: denied { open } for pid=7101 comm="syz.0.346" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.437293][ T7108] netlink: 104 bytes leftover after parsing attributes in process `syz.0.350'. [ 109.664709][ T7113] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 109.736086][ T7115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7115 comm=syz.0.353 [ 109.825792][ T7118] bond1: ARP target 9.0.0.0 is already present [ 109.825827][ T7118] bond1: option arp_ip_target: invalid value (9) [ 109.828939][ T7118] bond1 (unregistering): Released all slaves [ 110.135164][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 110.160984][ T7135] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.161045][ T7135] CIFS mount error: No usable UNC path provided in device string! [ 110.161045][ T7135] [ 110.161423][ T7135] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.192778][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193510][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193524][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193533][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193542][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193550][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193560][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193572][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193581][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193590][ T7139] tc action pedit 'at' offset 5 out of bounds [ 110.193607][ T7139] 0: reclassify loop, rule prio 0, protocol 800 [ 110.502325][ T7147] FAULT_INJECTION: forcing a failure. [ 110.502325][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.502383][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(full) [ 110.502411][ T7147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.502421][ T7147] Call Trace: [ 110.502427][ T7147] [ 110.502432][ T7147] dump_stack_lvl+0x100/0x190 [ 110.502455][ T7147] should_fail_ex.cold+0x5/0xa [ 110.502480][ T7147] _copy_from_user+0x2e/0xd0 [ 110.502501][ T7147] binder_alloc_copy_user_to_buffer+0x2e2/0x520 [ 110.502518][ T7147] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 110.502556][ T7147] binder_transaction+0x2332/0x9bb0 [ 110.502585][ T7147] ? __pfx_binder_transaction+0x10/0x10 [ 110.502601][ T7147] ? __lock_acquire+0x4c5/0x1ec0 [ 110.502618][ T7147] ? __lock_acquire+0x4c5/0x1ec0 [ 110.502632][ T7147] ? lock_acquire+0x1d1/0x380 [ 110.502645][ T7147] ? unwind_next_frame+0xbd/0x2090 [ 110.502666][ T7147] ? lock_acquire+0x1d1/0x380 [ 110.502678][ T7147] ? is_bpf_text_address+0x25/0x1a0 [ 110.502696][ T7147] ? find_held_lock+0x2b/0x80 [ 110.502713][ T7147] ? is_bpf_text_address+0x8a/0x1a0 [ 110.502728][ T7147] ? is_bpf_text_address+0x8a/0x1a0 [ 110.502746][ T7147] ? __lock_acquire+0x4c5/0x1ec0 [ 110.502759][ T7147] ? __lock_acquire+0x4c5/0x1ec0 [ 110.502772][ T7147] ? __kernel_text_address+0xd/0x30 [ 110.502792][ T7147] ? unwind_get_return_address+0x59/0xa0 [ 110.502811][ T7147] ? lock_acquire+0x1d1/0x380 [ 110.502824][ T7147] ? __might_fault+0xc5/0x140 [ 110.502842][ T7147] ? find_held_lock+0x2b/0x80 [ 110.502859][ T7147] ? __might_fault+0xc5/0x140 [ 110.502876][ T7147] ? __might_fault+0xc5/0x140 [ 110.502899][ T7147] binder_thread_write+0x12f4/0x4db0 [ 110.502914][ T7147] ? __x64_sys_ioctl+0xb7/0x210 [ 110.502938][ T7147] ? __lock_acquire+0x4c5/0x1ec0 [ 110.502952][ T7147] ? __pfx_binder_thread_write+0x10/0x10 [ 110.502966][ T7147] ? avc_has_extended_perms+0x201/0x1080 [ 110.502987][ T7147] ? binder_debug+0xe0/0x190 [ 110.503007][ T7147] ? __pfx_binder_debug+0x10/0x10 [ 110.503027][ T7147] ? binder_debug+0xe0/0x190 [ 110.503046][ T7147] ? __pfx_binder_debug+0x10/0x10 [ 110.503076][ T7147] binder_ioctl+0x28ca/0x74a0 [ 110.503096][ T7147] ? tomoyo_path_number_perm+0x188/0x580 [ 110.503121][ T7147] ? __pfx_binder_ioctl+0x10/0x10 [ 110.503137][ T7147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.503155][ T7147] ? do_vfs_ioctl+0x226/0x13e0 [ 110.503176][ T7147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.503197][ T7147] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 110.503222][ T7147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 110.503247][ T7147] ? __fget_files+0x34/0x3d0 [ 110.503271][ T7147] ? selinux_file_ioctl+0x13b/0x290 [ 110.503292][ T7147] ? selinux_file_ioctl+0xb6/0x290 [ 110.503315][ T7147] ? __pfx_binder_ioctl+0x10/0x10 [ 110.503329][ T7147] __x64_sys_ioctl+0x18e/0x210 [ 110.503352][ T7147] do_syscall_64+0x123/0x790 [ 110.503370][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.503386][ T7147] RIP: 0033:0x7f96ab79e159 [ 110.503399][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.503413][ T7147] RSP: 002b:00007f96ac57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.503428][ T7147] RAX: ffffffffffffffda RBX: 00007f96aba25fa0 RCX: 00007f96ab79e159 [ 110.503437][ T7147] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 110.503446][ T7147] RBP: 00007f96ac57f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.503454][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.503463][ T7147] R13: 00007f96aba26038 R14: 00007f96aba25fa0 R15: 00007ffc93824718 [ 110.503489][ T7147] [ 110.673141][ T7152] tipc: Enabling of bearer rejected, failed to enable media [ 110.936940][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 111.085102][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 111.085146][ T10] usb 8-1: no configurations [ 111.085187][ T10] usb 8-1: can't read configurations, error -22 [ 111.106842][ T7170] dummy0: entered allmulticast mode [ 111.134344][ T7169] dummy0: left allmulticast mode [ 111.213957][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 111.217131][ T7172] hub 4-0:1.0: USB hub found [ 111.217500][ T7172] hub 4-0:1.0: 2 ports detected [ 111.278806][ T7174] FAULT_INJECTION: forcing a failure. [ 111.278806][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.283124][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 111.283152][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.283161][ T7174] Call Trace: [ 111.283172][ T7174] [ 111.283176][ T7174] dump_stack_lvl+0x100/0x190 [ 111.283205][ T7174] should_fail_ex.cold+0x5/0xa [ 111.283221][ T7174] _copy_from_user+0x2e/0xd0 [ 111.283242][ T7174] binder_alloc_copy_user_to_buffer+0x2e2/0x520 [ 111.283261][ T7174] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 111.283280][ T7174] binder_transaction+0x2332/0x9bb0 [ 111.283305][ T7174] ? __pfx_binder_transaction+0x10/0x10 [ 111.283318][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 111.283333][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 111.283345][ T7174] ? lock_acquire+0x1d1/0x380 [ 111.283355][ T7174] ? unwind_next_frame+0xbd/0x2090 [ 111.283373][ T7174] ? lock_acquire+0x1d1/0x380 [ 111.283383][ T7174] ? is_bpf_text_address+0x25/0x1a0 [ 111.283398][ T7174] ? find_held_lock+0x2b/0x80 [ 111.283412][ T7174] ? is_bpf_text_address+0x8a/0x1a0 [ 111.283426][ T7174] ? is_bpf_text_address+0x8a/0x1a0 [ 111.283440][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 111.283452][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 111.283475][ T7174] ? __kernel_text_address+0xd/0x30 [ 111.283493][ T7174] ? unwind_get_return_address+0x59/0xa0 [ 111.283510][ T7174] ? lock_acquire+0x1d1/0x380 [ 111.283521][ T7174] ? __might_fault+0xc5/0x140 [ 111.283536][ T7174] ? find_held_lock+0x2b/0x80 [ 111.283551][ T7174] ? __might_fault+0xc5/0x140 [ 111.283565][ T7174] ? __might_fault+0xc5/0x140 [ 111.283588][ T7174] binder_thread_write+0x12f4/0x4db0 [ 111.283602][ T7174] ? __x64_sys_ioctl+0xb7/0x210 [ 111.283620][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 111.283631][ T7174] ? __pfx_binder_thread_write+0x10/0x10 [ 111.283641][ T7174] ? avc_has_extended_perms+0x201/0x1080 [ 111.283656][ T7174] ? binder_debug+0xe0/0x190 [ 111.283670][ T7174] ? __pfx_binder_debug+0x10/0x10 [ 111.283686][ T7174] ? binder_debug+0xe0/0x190 [ 111.283700][ T7174] ? __pfx_binder_debug+0x10/0x10 [ 111.283724][ T7174] binder_ioctl+0x28ca/0x74a0 [ 111.283739][ T7174] ? tomoyo_path_number_perm+0x188/0x580 [ 111.283759][ T7174] ? __pfx_binder_ioctl+0x10/0x10 [ 111.283771][ T7174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.283783][ T7174] ? do_vfs_ioctl+0x226/0x13e0 [ 111.283800][ T7174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.283815][ T7174] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 111.283834][ T7174] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 111.283854][ T7174] ? __fget_files+0x34/0x3d0 [ 111.283872][ T7174] ? selinux_file_ioctl+0x13b/0x290 [ 111.283888][ T7174] ? selinux_file_ioctl+0xb6/0x290 [ 111.283905][ T7174] ? __pfx_binder_ioctl+0x10/0x10 [ 111.283917][ T7174] __x64_sys_ioctl+0x18e/0x210 [ 111.283934][ T7174] do_syscall_64+0x123/0x790 [ 111.283952][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.283964][ T7174] RIP: 0033:0x7fa78419e159 [ 111.283974][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.283984][ T7174] RSP: 002b:00007fa7850b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.283998][ T7174] RAX: ffffffffffffffda RBX: 00007fa784425fa0 RCX: 00007fa78419e159 [ 111.284006][ T7174] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 111.284013][ T7174] RBP: 00007fa7850b4090 R08: 0000000000000000 R09: 0000000000000000 [ 111.284019][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.284026][ T7174] R13: 00007fa784426038 R14: 00007fa784425fa0 R15: 00007fffabd703e8 [ 111.284039][ T7174] [ 111.417559][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 111.417607][ T10] usb 8-1: no configurations [ 111.417634][ T10] usb 8-1: can't read configurations, error -22 [ 111.425310][ T10] usb usb8-port1: attempt power cycle [ 111.533044][ T7179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.375'. [ 111.557370][ T7181] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 111.557415][ T7181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.376'. [ 111.557445][ T7181] NCSI netlink: No device for ifindex 0 [ 111.606645][ T7183] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 111.763985][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 111.768223][ T7194] dummy0: entered allmulticast mode [ 111.784977][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 111.785020][ T10] usb 8-1: no configurations [ 111.785058][ T10] usb 8-1: can't read configurations, error -22 [ 111.797551][ T7193] dummy0: left allmulticast mode [ 111.805690][ T25] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 111.915564][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 111.935088][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 111.935131][ T10] usb 8-1: no configurations [ 111.935158][ T10] usb 8-1: can't read configurations, error -22 [ 111.942093][ T10] usb usb8-port1: unable to enumerate USB device [ 111.955071][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.955972][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 111.955994][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.956007][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.956019][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.956031][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 111.957601][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 111.957621][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.957634][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.957646][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.957659][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 111.962428][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 111.962453][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.962467][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.962480][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.962493][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 111.968214][ T25] usb 7-1: string descriptor 0 read error: -22 [ 111.968274][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.995081][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.180448][ T25] usb 7-1: USB disconnect, device number 22 [ 112.386458][ T7181] adutux: No device or device unplugged -19 [ 112.407955][ T7205] adutux: No device or device unplugged -19 [ 112.418246][ T5777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.520868][ T5777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.599555][ T5777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.623712][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.628346][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.631085][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.634027][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.634035][ T25] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 112.639124][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.679377][ T5777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.787435][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.793471][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.793547][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.793574][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.793588][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.793601][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.795931][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.795952][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.795965][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.795977][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.795989][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.796883][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 112.796903][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.796916][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.796928][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.796940][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.811593][ T25] usb 7-1: string descriptor 0 read error: -22 [ 112.811654][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.827106][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.859810][ T5777] bridge_slave_1: left allmulticast mode [ 112.859858][ T5777] bridge_slave_1: left promiscuous mode [ 112.869701][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.881457][ T5777] bridge_slave_0: left allmulticast mode [ 112.881506][ T5777] bridge_slave_0: left promiscuous mode [ 112.881620][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.003639][ T44] kauditd_printk_skb: 219 callbacks suppressed [ 113.003715][ T44] audit: type=1400 audit(1788076934.786:723): avc: denied { write } for pid=7219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.023443][ T25] usb 7-1: USB disconnect, device number 23 [ 113.126221][ T44] audit: type=1400 audit(1788076934.916:724): avc: denied { write } for pid=7222 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.138617][ T5777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.143387][ T5777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.149340][ T5777] bond0 (unregistering): Released all slaves [ 113.200744][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6 [ 113.306765][ T7209] lo speed is unknown, defaulting to 1000 [ 113.360201][ T44] audit: type=1400 audit(1788076935.146:725): avc: denied { write } for pid=7228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.453495][ T44] audit: type=1400 audit(1788076935.236:726): avc: denied { write } for pid=7232 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.516017][ T5777] hsr_slave_0: left promiscuous mode [ 113.517942][ T5777] hsr_slave_1: left promiscuous mode [ 113.518965][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.518977][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.527171][ T5777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.527229][ T5777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.557683][ T5777] veth1_macvtap: left promiscuous mode [ 113.559140][ T5777] veth0_macvtap: left promiscuous mode [ 113.559188][ T5777] veth1_vlan: left promiscuous mode [ 113.559218][ T5777] veth0_vlan: left promiscuous mode [ 113.789350][ T44] audit: type=1400 audit(1788076935.576:727): avc: denied { ioctl } for pid=7240 comm="syz.3.387" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.789772][ T5777] team0 (unregistering): Port device team_slave_1 removed [ 113.807918][ T5777] team0 (unregistering): Port device team_slave_0 removed [ 113.832637][ T44] audit: type=1400 audit(1788076935.616:728): avc: denied { read write } for pid=7236 comm="syz.2.386" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.835352][ T44] audit: type=1400 audit(1788076935.616:729): avc: denied { open } for pid=7236 comm="syz.2.386" path="/107/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.012025][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7 [ 114.205254][ T44] audit: type=1400 audit(1788076935.986:730): avc: denied { write } for pid=7249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.220821][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.220899][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.220978][ T7209] bridge_slave_0: entered allmulticast mode [ 114.223420][ T7209] bridge_slave_0: entered promiscuous mode [ 114.226840][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.226900][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.226953][ T7209] bridge_slave_1: entered allmulticast mode [ 114.227749][ T7209] bridge_slave_1: entered promiscuous mode [ 114.248120][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.249913][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.308654][ T7209] team0: Port device team_slave_0 added [ 114.313144][ T7209] team0: Port device team_slave_1 added [ 114.321941][ T44] audit: type=1400 audit(1788076936.106:731): avc: denied { write } for pid=7255 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.362315][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8 [ 114.369172][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.369241][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.369288][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.385071][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.389809][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.401564][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.443005][ T7238] orangefs_mount: mount request failed with -4 [ 114.470116][ T7209] hsr_slave_0: entered promiscuous mode [ 114.477274][ T7209] hsr_slave_1: entered promiscuous mode [ 114.561008][ T44] audit: type=1400 audit(1788076936.346:732): avc: denied { write } for pid=7258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.666262][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 114.675723][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9 [ 114.694081][ T5729] Bluetooth: hci0: command tx timeout [ 114.778688][ T7267] dummy0: entered allmulticast mode [ 114.929244][ T7266] dummy0: left allmulticast mode [ 115.048161][ T7209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.051931][ T7209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.052729][ T7209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.060077][ T7209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.060702][ T7209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.065625][ T7209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.066697][ T7209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.070428][ T7209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.122550][ T7277] netlink: Only one type of NAT may be specified [ 115.122602][ T7277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.127956][ T7277] Trying to write to read-only block-device nullb0 [ 115.205051][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.230601][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.241075][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.241155][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.251019][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.252160][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.310315][ T7294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.394'. [ 115.428890][ T7301] netlink: 'syz.2.395': attribute type 39 has an invalid length. [ 115.631372][ T7311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.710567][ T7319] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 115.710757][ T7320] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 115.741239][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.970571][ T7332] dummy0: entered allmulticast mode [ 116.032721][ T7209] veth0_vlan: entered promiscuous mode [ 116.053645][ T7209] veth1_vlan: entered promiscuous mode [ 116.085239][ T7209] veth0_macvtap: entered promiscuous mode [ 116.091608][ T7331] dummy0: left allmulticast mode [ 116.106887][ T7209] veth1_macvtap: entered promiscuous mode [ 116.150218][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.176423][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.262495][ T5777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.265745][ T7335] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 116.351713][ T5777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.351878][ T5777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.351897][ T5777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.377206][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.377282][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.493055][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.493105][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.592267][ T7344] CIFS mount error: No usable UNC path provided in device string! [ 116.592267][ T7344] [ 116.592303][ T7344] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 116.774199][ T5729] Bluetooth: hci0: command tx timeout [ 116.864949][ T7361] ip6gretap1: entered promiscuous mode [ 116.864984][ T7361] ip6gretap1: entered allmulticast mode [ 117.044622][ T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 117.150517][ T7376] netlink: 32 bytes leftover after parsing attributes in process `syz.5.415'. [ 117.161778][ T7375] bonding: bond0 is being created... [ 117.175477][ T7375] bonding: bond0 already exists [ 117.178392][ T7375] binder: BINDER_SET_CONTEXT_MGR already set [ 117.181564][ T7375] binder: 7373:7375 ioctl 4018620d 200000004a80 returned -16 [ 117.204505][ T25] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 117.205370][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.216248][ T25] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 024 [ 117.221500][ T7379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7379 comm=syz.5.417 [ 117.624484][ T7359] openvswitch: netlink: IP tunnel dst address not specified [ 117.625414][ T25] (null): failure reading functionality [ 117.681616][ T25] i2c i2c-2: failure reading functionality [ 117.685601][ T25] i2c i2c-2: connected i2c-tiny-usb device [ 117.885732][ T7359] i2c i2c-2: failure reading status [ 117.885806][ T7359] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 117.887217][ T7359] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 117.887336][ T7359] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 117.890240][ T25] usb 7-1: USB disconnect, device number 24 [ 118.539882][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 118.846221][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.5.429'. [ 118.854059][ T5729] Bluetooth: hci0: command tx timeout [ 118.948510][ T7429] netlink: 'syz.3.431': attribute type 2 has an invalid length. [ 119.101795][ T7437] vlan2: entered promiscuous mode [ 119.105504][ T7437] hsr0: entered promiscuous mode [ 119.107690][ T7437] vlan2: entered allmulticast mode [ 119.107723][ T7437] hsr0: entered allmulticast mode [ 119.107764][ T7437] hsr_slave_0: entered allmulticast mode [ 119.107787][ T7437] hsr_slave_1: entered allmulticast mode [ 119.122388][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 119.122435][ T44] audit: type=1400 audit(1788076940.906:748): avc: denied { ioctl } for pid=7438 comm="syz.5.436" path="socket:[15313]" dev="sockfs" ino=15313 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.160423][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 119.163346][ T7437] hsr_slave_0: left promiscuous mode [ 119.167819][ T7437] hsr_slave_1: left promiscuous mode [ 119.258834][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 119.404542][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 119.410563][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.424387][ T10] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 027 [ 119.832714][ T7433] openvswitch: netlink: IP tunnel dst address not specified [ 119.837401][ T10] (null): failure reading functionality [ 119.840570][ T10] i2c i2c-2: failure reading functionality [ 119.856439][ T10] i2c i2c-2: connected i2c-tiny-usb device [ 119.883753][ T7449] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.896174][ T7448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.063031][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.063077][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.071276][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.071326][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.189240][ T7461] .: Can't lookup blockdev [ 120.314703][ T7470] program syz.2.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.424091][ T5811] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.574796][ T5811] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.578561][ T5811] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.581757][ T5811] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.585289][ T5811] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.590877][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.593470][ T5811] usb 10-1: Product: syz [ 120.595584][ T5811] usb 10-1: Manufacturer: syz [ 120.597201][ T5811] usb 10-1: SerialNumber: syz [ 120.603219][ T5811] hub 10-1:1.0: bad descriptor, ignoring hub [ 120.605198][ T5811] hub 10-1:1.0: probe with driver hub failed with error -5 [ 120.808539][ T5811] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.934432][ T5729] Bluetooth: hci0: command tx timeout [ 121.008105][ T44] audit: type=1400 audit(1788076942.796:749): avc: denied { read write } for pid=7463 comm="syz.5.443" name="lp0" dev="devtmpfs" ino=2980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 121.009708][ T44] audit: type=1400 audit(1788076942.796:750): avc: denied { open } for pid=7463 comm="syz.5.443" path="/dev/usb/lp0" dev="devtmpfs" ino=2980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 121.269607][ T7464] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 121.277292][ T7482] fuse: Unknown parameter 'max_rM0x0000000000000000' [ 121.341982][ T44] audit: type=1400 audit(1788076943.126:751): avc: denied { cmd } for pid=7483 comm="syz.2.448" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 121.351201][ T7485] ublk_ctrl_add_dev: invalid recovery flags 10 [ 121.398366][ T44] audit: type=1400 audit(1788076943.186:752): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.424341][ T7464] usb 10-1: device descriptor read/64, error -71 [ 121.511730][ T44] audit: type=1400 audit(1788076943.296:753): avc: denied { ioctl } for pid=7488 comm="syz.2.450" path="socket:[17926]" dev="sockfs" ino=17926 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.521502][ T44] audit: type=1400 audit(1788076943.306:754): avc: denied { read write } for pid=7488 comm="syz.2.450" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.523427][ T44] audit: type=1400 audit(1788076943.306:755): avc: denied { open } for pid=7488 comm="syz.2.450" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.529380][ T44] audit: type=1400 audit(1788076943.306:756): avc: denied { ioctl } for pid=7488 comm="syz.2.450" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.580426][ T7490] Invalid argument reading file caps for ./file0 [ 121.597443][ T7490] lo speed is unknown, defaulting to 1000 [ 121.600251][ T7490] lo speed is unknown, defaulting to 1000 [ 121.600723][ T7490] lo speed is unknown, defaulting to 1000 [ 121.684525][ T7464] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 121.749240][ T851] lo speed is unknown, defaulting to 1000 [ 121.749419][ T7490] infiniband syz0: set active [ 121.749429][ T7490] infiniband syz0: added lo [ 121.760077][ T7490] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.760163][ T7490] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.760409][ T7490] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.801754][ T7490] RDS/IB: syz0: added [ 121.802889][ T7490] smc: adding ib device syz0 with port count 1 [ 121.802943][ T7490] smc: ib device syz0 port 1 has no pnetid [ 121.808474][ T851] lo speed is unknown, defaulting to 1000 [ 121.812688][ T7490] lo speed is unknown, defaulting to 1000 [ 121.825943][ T7464] usb 10-1: device descriptor read/64, error -71 [ 121.927640][ T7490] lo speed is unknown, defaulting to 1000 [ 122.030024][ T25] usb 8-1: USB disconnect, device number 27 [ 122.065681][ T7464] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 122.093240][ T7464] usb 10-1: device descriptor read/8, error -71 [ 122.101250][ T7490] lo speed is unknown, defaulting to 1000 [ 122.129781][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 122.260918][ T7490] lo speed is unknown, defaulting to 1000 [ 122.276024][ T7499] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 122.276101][ T7499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 122.345484][ T7464] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 122.369400][ T7464] usb 10-1: device descriptor read/8, error -71 [ 122.478856][ T42] usb 10-1: USB disconnect, device number 2 [ 122.505097][ T42] usblp0: removed [ 122.642956][ T7507] blkio.reset_stats is deprecated [ 122.654426][ T42] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 122.721480][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7512 comm=syz.2.456 [ 122.728012][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 122.728065][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 122.735165][ T44] audit: type=1400 audit(1788076944.526:757): avc: denied { setopt } for pid=7511 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.804468][ T42] usb 10-1: device descriptor read/64, error -71 [ 122.919119][ T7520] syz.2.458 uses obsolete (PF_INET,SOCK_PACKET) [ 123.054035][ T42] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 123.070994][ T7522] netlink: 'syz.2.459': attribute type 39 has an invalid length. [ 123.194817][ T42] usb 10-1: device descriptor read/64, error -71 [ 123.308907][ T42] usb usb10-port1: attempt power cycle [ 123.596623][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 123.644971][ T7551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7551 comm=syz.2.468 [ 123.665240][ T7534] i2c i2c-0: new_device: Invalid device name [ 123.740882][ T42] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 123.755671][ T42] usb 10-1: device descriptor read/8, error -71 [ 123.964151][ T6688] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 124.024073][ T5811] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 124.114426][ T6688] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.115250][ T6688] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 124.115272][ T6688] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.115284][ T6688] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.116941][ T6688] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.116953][ T6688] usb 7-1: Product: syz [ 124.116961][ T6688] usb 7-1: Manufacturer: syz [ 124.116968][ T6688] usb 7-1: SerialNumber: syz [ 124.119697][ T6688] usb 7-1: config 0 descriptor?? [ 124.122539][ T6688] hub 7-1:0.0: bad descriptor, ignoring hub [ 124.122553][ T6688] hub 7-1:0.0: probe with driver hub failed with error -5 [ 124.144645][ T6688] usb 7-1: selecting invalid altsetting 0 [ 124.188035][ T5811] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 124.193725][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.193774][ T5811] usb 8-1: config 0 has no interfaces? [ 124.193828][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.212108][ T5811] usb 8-1: config 0 descriptor?? [ 124.410452][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.417668][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.423000][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.427796][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.430394][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.474269][ T6688] usb 7-1: USB disconnect, device number 25 [ 124.499598][ T7573] netlink: 'syz.5.474': attribute type 39 has an invalid length. [ 124.499944][ T7574] netlink: 'syz.5.474': attribute type 39 has an invalid length. [ 124.789227][ T7088] ima: policy update failed [ 124.791790][ T44] audit: type=1802 audit(1788076946.576:758): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.341" res=0 errno=0 [ 124.820942][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.831929][ T7568] lo speed is unknown, defaulting to 1000 [ 124.835108][ T7568] lo speed is unknown, defaulting to 1000 [ 124.844010][ T5875] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 124.897280][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.948848][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.000584][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.008420][ T5875] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.009330][ T5875] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 125.009357][ T5875] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.009375][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0 [ 125.011699][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.011713][ T5875] usb 7-1: Product: syz [ 125.011721][ T5875] usb 7-1: Manufacturer: syz [ 125.011729][ T5875] usb 7-1: SerialNumber: syz [ 125.015137][ T5875] usb 7-1: config 0 descriptor?? [ 125.020987][ T5875] hub 7-1:0.0: bad descriptor, ignoring hub [ 125.021001][ T5875] hub 7-1:0.0: probe with driver hub failed with error -5 [ 125.032389][ T5875] usb 7-1: selecting invalid altsetting 0 [ 125.148328][ T7590] CUSE: info not properly terminated [ 125.218110][ T44] audit: type=1400 audit(1788076947.006:759): avc: denied { write } for pid=7593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.255106][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.257914][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.260540][ T7568] bridge_slave_0: entered allmulticast mode [ 125.263189][ T7568] bridge_slave_0: entered promiscuous mode [ 125.268519][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.268579][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.268668][ T7568] bridge_slave_1: entered allmulticast mode [ 125.276422][ T44] audit: type=1400 audit(1788076947.056:760): avc: denied { write } for pid=7598 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.285385][ T7568] bridge_slave_1: entered promiscuous mode [ 125.323016][ T12] bridge_slave_1: left allmulticast mode [ 125.323074][ T12] bridge_slave_1: left promiscuous mode [ 125.324324][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.332447][ T12] bridge_slave_0: left allmulticast mode [ 125.332497][ T12] bridge_slave_0: left promiscuous mode [ 125.332621][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.337030][ T10] usb 7-1: USB disconnect, device number 26 [ 125.384536][ T851] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 125.482244][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.492722][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.497186][ T12] bond0 (unregistering): Released all slaves [ 125.502204][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.510522][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.541096][ T851] usb 10-1: Using ep0 maxpacket: 8 [ 125.541665][ T851] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.543262][ T7568] team0: Port device team_slave_0 added [ 125.545868][ T851] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 125.545898][ T851] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 125.545915][ T851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.545929][ T851] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 125.545944][ T851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 125.545958][ T851] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.545987][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.553643][ T7568] team0: Port device team_slave_1 added [ 125.591481][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.591595][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.592093][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.595618][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.595698][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.595724][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.761005][ T851] usb 10-1: usb_control_msg returned -32 [ 125.761069][ T851] usbtmc 10-1:16.0: can't read capabilities [ 125.768519][ T44] audit: type=1400 audit(1788076947.556:761): avc: denied { write } for pid=7602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.819753][ T44] audit: type=1400 audit(1788076947.606:762): avc: denied { bind } for pid=7605 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.820584][ T7568] hsr_slave_0: entered promiscuous mode [ 125.821356][ T7568] hsr_slave_1: entered promiscuous mode [ 125.829318][ T7568] debugfs: 'hsr0' already exists in 'hsr' [ 125.829345][ T7568] Cannot create hsr debugfs directory [ 125.848234][ T44] audit: type=1400 audit(1788076947.636:763): avc: denied { write } for pid=7607 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.930544][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10 [ 126.026625][ T44] audit: type=1400 audit(1788076947.816:764): avc: denied { write } for pid=7615 comm="syz.2.479" name="bDeviceClass" dev="configfs" ino=18698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 126.033209][ T44] audit: type=1400 audit(1788076947.816:765): avc: denied { write } for pid=7611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.041716][ T44] audit: type=1400 audit(1788076947.826:766): avc: denied { open } for pid=7615 comm="syz.2.479" path="/145/config/usb_gadget/g1/bDeviceClass" dev="configfs" ino=18698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 126.050937][ T44] audit: type=1400 audit(1788076947.836:767): avc: denied { ioctl } for pid=7615 comm="syz.2.479" path="/145/config/usb_gadget/g1/bDeviceClass" dev="configfs" ino=18698 ioctlcmd=0x644b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 126.125638][ T7620] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 126.140508][ T6688] usb 10-1: USB disconnect, device number 7 [ 126.232851][ T12] hsr_slave_0: left promiscuous mode [ 126.236887][ T12] hsr_slave_1: left promiscuous mode [ 126.237609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.237621][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.246011][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.246046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.252467][ T12] veth1_macvtap: left promiscuous mode [ 126.252536][ T12] veth0_macvtap: left promiscuous mode [ 126.252643][ T12] veth1_vlan: left promiscuous mode [ 126.252674][ T12] veth0_vlan: left promiscuous mode [ 126.400502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.411164][ T12] team0 (unregistering): Port device team_slave_0 removed [ 126.534148][ T5729] Bluetooth: hci3: command tx timeout [ 126.547016][ T7568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.557457][ T7568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.557954][ T7568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.573037][ T7568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.579094][ T7568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.592568][ T7568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.593329][ T7568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.600487][ T7568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.754855][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.765662][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.776038][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.776143][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.783006][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.783079][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.803638][ T5875] usb 8-1: USB disconnect, device number 28 [ 127.102497][ T7659] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 127.102552][ T7659] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 127.458907][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.462000][ T7686] tmpfs: Unknown parameter 'm' [ 127.497134][ T7686] zram0: detected capacity change from 0 to 8 [ 127.519665][ T7686] tmpfs: Unknown parameter 'pr}r' [ 127.534457][ T851] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 127.685840][ T851] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 127.686747][ T851] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.686764][ T851] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 127.686785][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.773993][ T7568] veth0_vlan: entered promiscuous mode [ 127.782132][ T5440] 8021q: adding VLAN 0 to HW filter on device eth11 [ 127.800485][ T7568] veth1_vlan: entered promiscuous mode [ 127.842371][ T7568] veth0_macvtap: entered promiscuous mode [ 127.850969][ T7568] veth1_macvtap: entered promiscuous mode [ 127.864410][ T6688] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 127.867181][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.874906][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.925698][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.925940][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.925961][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.925978][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.015356][ T6688] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 128.017100][ T6688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.029169][ T6688] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 027 [ 128.048024][ T10] Process accounting resumed [ 128.067548][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.069822][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.126950][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.127000][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.182957][ T7715] binder: 7714:7715 unknown command 1078485781 [ 128.185695][ T5440] 8021q: adding VLAN 0 to HW filter on device eth12 [ 128.188544][ T7715] binder: 7714:7715 ioctl c0306201 200000000180 returned -22 [ 128.313361][ T7723] binder: BINDER_SET_CONTEXT_MGR already set [ 128.313394][ T7723] binder: 7722:7723 ioctl 4018620d 200000000040 returned -16 [ 128.474589][ T7696] openvswitch: netlink: IP tunnel dst address not specified [ 128.475402][ T6688] (null): failure reading functionality [ 128.476711][ T6688] i2c i2c-2: failure reading functionality [ 128.486250][ T7728] bridge_slave_1: default FDB implementation only supports local addresses [ 128.486741][ T6688] i2c i2c-2: connected i2c-tiny-usb device [ 128.546783][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13 [ 128.624061][ T5729] Bluetooth: hci3: command tx timeout [ 128.706682][ T7748] qnx4: unable to read the superblock [ 128.993237][ T7763] binder: 7762:7763 ioctl 8008f512 200000000080 returned -22 [ 129.003561][ T7765] Cannot find set identified by id 0 to match [ 129.039534][ T7745] i2c i2c-2: failure reading data [ 129.039642][ T7745] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 129.039759][ T7745] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 129.040776][ T7745] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 129.040926][ T6688] usb 7-1: USB disconnect, device number 27 [ 129.131800][ T7770] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 129.413065][ T7782] afs: Unknown parameter '`' [ 129.417211][ T7783] cgroup: fork rejected by pids controller in /syz6 [ 130.219381][ T7970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 130.219435][ T7970] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.290177][ T10] usb 10-1: USB disconnect, device number 8 [ 130.458687][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 130.458775][ T44] audit: type=1400 audit(1788076952.246:790): avc: denied { bind } for pid=7975 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.477810][ T44] audit: type=1400 audit(1788076952.266:791): avc: denied { setopt } for pid=7975 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.595753][ T44] audit: type=1400 audit(1788076952.386:792): avc: denied { connect } for pid=7975 comm="syz.3.524" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.706073][ T5729] Bluetooth: hci3: command tx timeout [ 131.434710][ T851] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 131.589423][ T851] usb 11-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 131.590508][ T851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.600655][ T851] i2c-tiny-usb 11-1:1.0: version 1.00 found at bus 011 address 002 [ 131.655250][ T5811] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 131.808226][ T8022] netlink: 'syz.5.537': attribute type 11 has an invalid length. [ 131.829239][ T44] audit: type=1400 audit(1788076953.616:793): avc: denied { mount } for pid=8019 comm="syz.3.536" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 131.836931][ T5811] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 131.840646][ T5811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.840696][ T5811] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 131.840730][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.002691][ T7990] openvswitch: netlink: IP tunnel dst address not specified [ 132.006791][ T851] (null): failure reading functionality [ 132.011163][ T851] i2c i2c-2: failure reading functionality [ 132.016402][ T851] i2c i2c-2: connected i2c-tiny-usb device [ 132.036580][ T8029] (syz.3.539,8029,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 132.036660][ T8029] (syz.3.539,8029,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 132.040006][ T8030] netlink: 112 bytes leftover after parsing attributes in process `syz.3.539'. [ 132.042195][ T8029] (syz.3.539,8029,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 132.042209][ T8029] (syz.3.539,8029,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 132.306486][ T8040] overlayfs: missing 'lowerdir' [ 132.654090][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 132.696471][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.696529][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.774259][ T5729] Bluetooth: hci3: command tx timeout [ 132.804093][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 132.804903][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.805859][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 132.805903][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.805920][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.805938][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.805956][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.805986][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.022657][ T10] usb 8-1: usb_control_msg returned -32 [ 133.022707][ T10] usbtmc 8-1:16.0: can't read capabilities [ 133.074995][ T5729] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 133.075037][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 133.075068][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.075077][ T5729] Workqueue: hci0 hci_rx_work [ 133.075116][ T5729] Call Trace: [ 133.075121][ T5729] [ 133.075127][ T5729] dump_stack_lvl+0x100/0x190 [ 133.075156][ T5729] sysfs_warn_dup.cold+0x1c/0x28 [ 133.075179][ T5729] sysfs_create_dir_ns+0x24b/0x2b0 [ 133.075202][ T5729] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 133.075217][ T5729] ? find_held_lock+0x2b/0x80 [ 133.075233][ T5729] ? kobject_add_internal+0x25f/0x930 [ 133.075254][ T5729] ? kobject_add_internal+0x25f/0x930 [ 133.075271][ T5729] ? do_raw_spin_unlock+0x145/0x1e0 [ 133.075287][ T5729] kobject_add_internal+0x2c8/0x930 [ 133.075306][ T5729] kobject_add+0x16a/0x1e0 [ 133.075322][ T5729] ? __pfx_kobject_add+0x10/0x10 [ 133.075337][ T5729] ? class_to_subsys+0x10f/0x150 [ 133.075354][ T5729] ? kobject_put+0xb9/0x640 [ 133.075369][ T5729] ? _raw_spin_unlock+0x28/0x50 [ 133.075395][ T5729] device_add+0x294/0x1970 [ 133.075408][ T5729] ? __pfx_dev_set_name+0x10/0x10 [ 133.075424][ T5729] ? __pfx_device_add+0x10/0x10 [ 133.075437][ T5729] ? mgmt_send_event_skb+0x2fb/0x460 [ 133.075454][ T5729] hci_conn_add_sysfs+0x1a3/0x260 [ 133.075469][ T5729] le_conn_complete_evt+0x122f/0x2130 [ 133.075493][ T5729] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 133.075512][ T5729] ? hci_event_packet+0x186/0xcd0 [ 133.075534][ T5729] hci_le_conn_complete_evt+0x23c/0x3a0 [ 133.075554][ T5729] ? skb_pull_data+0x15f/0x1e0 [ 133.075569][ T5729] hci_le_meta_evt+0x34a/0x5f0 [ 133.075581][ T5729] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 133.075602][ T5729] hci_event_packet+0x51c/0xcd0 [ 133.075620][ T5729] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 133.075632][ T5729] ? __pfx_hci_event_packet+0x10/0x10 [ 133.075653][ T5729] ? lockdep_hardirqs_on+0x7d/0x110 [ 133.075668][ T5729] hci_rx_work+0x451/0xfc0 [ 133.075688][ T5729] process_one_work+0xac7/0x1b10 [ 133.075713][ T5729] ? __pfx_process_one_work+0x10/0x10 [ 133.075731][ T5729] ? lock_acquire+0x1d1/0x380 [ 133.075746][ T5729] ? __pfx_hci_rx_work+0x10/0x10 [ 133.075766][ T5729] worker_thread+0x5ef/0xe50 [ 133.075788][ T5729] ? kthread+0x13a/0x450 [ 133.075803][ T5729] ? __pfx_worker_thread+0x10/0x10 [ 133.075819][ T5729] kthread+0x373/0x450 [ 133.075834][ T5729] ? __pfx_kthread+0x10/0x10 [ 133.075851][ T5729] ret_from_fork+0x730/0xd60 [ 133.075866][ T5729] ? __pfx_ret_from_fork+0x10/0x10 [ 133.075879][ T5729] ? rcu_is_watching+0x13/0xc0 [ 133.075895][ T5729] ? __switch_to+0x800/0x10f0 [ 133.075911][ T5729] ? __pfx_kthread+0x10/0x10 [ 133.075928][ T5729] ret_from_fork_asm+0x1a/0x30 [ 133.075947][ T5729] [ 133.078475][ T5729] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.078498][ T5729] Bluetooth: hci0: failed to register connection device [ 133.083779][ T8048] kAFS: bad VL server IP address [ 133.352868][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.5.548'. [ 133.359512][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.548'. [ 133.413674][ T44] audit: type=1400 audit(1788076955.196:794): avc: denied { read } for pid=8056 comm="syz.5.549" name="event1" dev="devtmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.630313][ T8057] syzkaller1: entered promiscuous mode [ 133.630359][ T8057] syzkaller1: entered allmulticast mode [ 134.216442][ T8046] i2c i2c-2: failure reading status [ 134.217908][ T10] usb 11-1: USB disconnect, device number 2 [ 134.224256][ T8046] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 134.230604][ T8046] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 134.234269][ T8046] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 134.236885][ T8046] CPU: 2 UID: 0 PID: 8046 Comm: syz.2.531 Not tainted syzkaller #0 PREEMPT(full) [ 134.240191][ T8046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.243975][ T8046] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 134.246271][ T8046] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce 71 53 09 66 66 2e 0f 1f 84 00 00 00 [ 134.254056][ T8046] RSP: 0018:ffffc90003877530 EFLAGS: 00010286 [ 134.256473][ T8046] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.259166][ T8046] RDX: 0000000000000000 RSI: ffffffff81e65424 RDI: dffffc0000000028 [ 134.261547][ T8046] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 134.263926][ T8046] R10: ffff8880391a0df3 R11: 0000000000000000 R12: ffffffff81e65424 [ 134.266551][ T8046] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 134.269291][ T8046] FS: 00007f96a99d56c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 134.272277][ T8046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.274252][ T8046] CR2: 00007fa517598708 CR3: 000000003f136000 CR4: 0000000000352ef0 [ 134.276727][ T8046] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: 0000000000000002 [ 134.279524][ T8046] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 134.282446][ T8046] Call Trace: [ 134.283766][ T8046] [ 134.284921][ T8046] __kasan_check_byte+0x13/0x50 [ 134.286654][ T8046] lock_acquire+0x132/0x380 [ 134.288324][ T8046] ? __pfx___might_resched+0x10/0x10 [ 134.290355][ T8046] down_write_nested+0x94/0x200 [ 134.292337][ T8046] ? __simple_recursive_removal+0x7f/0x5c0 [ 134.294576][ T8046] ? __pfx_down_write_nested+0x10/0x10 [ 134.296732][ T8046] ? __simple_recursive_removal+0x3d/0x5c0 [ 134.298959][ T8046] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.300938][ T8046] __simple_recursive_removal+0x7f/0x5c0 [ 134.303018][ T8046] ? __pfx_remove_one+0x10/0x10 [ 134.304817][ T8046] ? mntput+0x70/0xa0 [ 134.306419][ T8046] debugfs_remove+0x5d/0x80 [ 134.308092][ T8046] i2c_device_probe+0x6e2/0xd10 [ 134.309757][ T8046] ? kernfs_put+0x3f/0x60 [ 134.311363][ T8046] ? __pfx_i2c_device_probe+0x10/0x10 [ 134.313360][ T8046] ? sysfs_create_link+0x68/0xc0 [ 134.315384][ T8046] ? __pfx_i2c_device_probe+0x10/0x10 [ 134.317519][ T8046] really_probe+0x241/0xa60 [ 134.319169][ T8046] __driver_probe_device+0x210/0x460 [ 134.321090][ T8046] ? i2c_of_match_device+0x45/0x170 [ 134.323055][ T8046] driver_probe_device+0x4a/0x140 [ 134.324849][ T8046] __device_attach_driver+0x1df/0x320 [ 134.326778][ T8046] ? __pfx___device_attach_driver+0x10/0x10 [ 134.328969][ T8046] bus_for_each_drv+0x159/0x1e0 [ 134.330846][ T8046] ? __pfx_bus_for_each_drv+0x10/0x10 [ 134.333134][ T8046] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.334970][ T8046] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.336950][ T8046] __device_attach+0x1e4/0x4d0 [ 134.338921][ T8046] ? __pfx___device_attach+0x10/0x10 [ 134.340785][ T8046] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.342863][ T8046] device_initial_probe+0xaf/0xd0 [ 134.344796][ T8046] bus_probe_device+0x64/0x160 [ 134.346705][ T8046] device_add+0x121d/0x1970 [ 134.348305][ T8046] ? __pfx_device_add+0x10/0x10 [ 134.350119][ T8046] ? lockdep_init_map_type+0x5c/0x250 [ 134.352050][ T8046] ? __init_waitqueue_head+0xca/0x150 [ 134.354038][ T8046] i2c_new_client_device+0x660/0xd30 [ 134.356015][ T8046] new_device_store+0x20f/0x420 [ 134.357841][ T8046] ? __pfx_new_device_store+0x10/0x10 [ 134.359731][ T8046] ? find_held_lock+0x2b/0x80 [ 134.361420][ T8046] ? sysfs_file_kobj+0xe4/0x290 [ 134.363215][ T8046] ? sysfs_file_kobj+0xe4/0x290 [ 134.364973][ T8046] ? __pfx_new_device_store+0x10/0x10 [ 134.367141][ T8046] dev_attr_store+0x58/0x80 [ 134.369098][ T8046] ? __pfx_dev_attr_store+0x10/0x10 [ 134.371296][ T8046] sysfs_kf_write+0xf2/0x150 [ 134.373195][ T8046] kernfs_fop_write_iter+0x3e0/0x5f0 [ 134.375317][ T8046] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.377181][ T8046] vfs_write+0x6af/0x1050 [ 134.378604][ T8046] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 134.380593][ T8046] ? __pfx_vfs_write+0x10/0x10 [ 134.382448][ T8046] ? find_held_lock+0x2b/0x80 [ 134.384177][ T8046] ksys_write+0x12a/0x250 [ 134.385841][ T8046] ? __pfx_ksys_write+0x10/0x10 [ 134.387693][ T8046] do_syscall_64+0x123/0x790 [ 134.389502][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.392075][ T8046] RIP: 0033:0x7f96ab79e159 [ 134.393991][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.400551][ T8046] RSP: 002b:00007f96a99d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.403148][ T8046] RAX: ffffffffffffffda RBX: 00007f96aba26180 RCX: 00007f96ab79e159 [ 134.405497][ T8046] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000004 [ 134.407878][ T8046] RBP: 00007f96ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 134.410242][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.412585][ T8046] R13: 00007f96aba26218 R14: 00007f96aba26180 R15: 00007ffc93824718 [ 134.415338][ T8046] [ 134.416350][ T8046] Modules linked in: [ 134.418517][ C2] hpet: Lost 11 RTC interrupts [ 134.421091][ T8046] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.428869][ T8046] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 134.431013][ T8046] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce 71 53 09 66 66 2e 0f 1f 84 00 00 00 [ 134.458069][ T8046] RSP: 0018:ffffc90003877530 EFLAGS: 00010286 [ 134.460713][ T8046] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.464403][ T8046] RDX: 0000000000000000 RSI: ffffffff81e65424 RDI: dffffc0000000028 [ 134.468722][ T8046] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 134.471838][ T8046] R10: ffff8880391a0df3 R11: 0000000000000000 R12: ffffffff81e65424 [ 134.476603][ T8046] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 134.479748][ T8046] FS: 00007f96a99d56c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 134.483142][ T8046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.485852][ T8046] CR2: 00007fa517598708 CR3: 000000003f136000 CR4: 0000000000352ef0 [ 134.495210][ T8046] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: 0000000000000002 [ 134.498447][ T8046] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 134.501448][ T8046] Kernel panic - not syncing: Fatal exception [ 134.504457][ T8046] Kernel Offset: disabled [ 134.506238][ T8046] Rebooting in 86400 seconds..