last executing test programs: 1m18.147390909s ago: executing program 0 (id=67): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m15.096127763s ago: executing program 0 (id=79): pipe2$watch_queue(&(0x7f0000000040), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c002380055908000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044815}, 0x24000814) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x4500, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0xa031, 0xffffffffffffffff, 0x180000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001800010324bd7082fadbdf2513000000281b4fb2311fcf459aef7b8fa07a7d8954002d1876862a55e7a3e6b4eaba0c48ace62fb3a787af91e9de350f03a9fe61297f19bbfab50b809e97f6ad4ca6a9fb6f8b165ff8a25299bcd25c5cd50e5fa200d99cb25eb494fcd8d1e5c8beb23bfd1eeb8c77a4ca265e6036d3dfb86f4b4b49298a02758e4cc70e3e0460015ca97f45d232c9e878bb66f54a6489f600"/175], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) ioctl$CDROM_GET_MCN(r4, 0x5311, &(0x7f0000000000)) 1m14.998549647s ago: executing program 0 (id=86): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000a14c72e2dbd7000fedbdf25080001"], 0x18}, 0x1, 0x200000000000000, 0x0, 0x20000024}, 0x80) 1m14.928816671s ago: executing program 0 (id=88): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000340)=0xffff0000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30a129c69b5c042b2027a7800"}}}}}, 0x86) (async) write$tun(r3, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30a129c69b5c042b2027a7800"}}}}}, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x8000) 1m14.668835029s ago: executing program 0 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8c001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000140)={0x0, 0x3, 0x3, 0x2, 'syz1\x00', 0x8}) 1m14.299207762s ago: executing program 0 (id=92): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000001100eeff00"/100}}}}}}, 0x0) 1m14.278840564s ago: executing program 32 (id=92): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000001100eeff00"/100}}}}}}, 0x0) 3.268187417s ago: executing program 4 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x805, 0x0) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x561c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x0, 0x4, 0x69, 0x9ee, {0x2, 0x42, 0xfffb, 0xa}, 0x0, 0x0}}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x62666fe4d74687b2, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 2.917875451s ago: executing program 2 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='never', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) setns(r0, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) write(r1, &(0x7f00000001c0)='10', 0x2) 2.858109231s ago: executing program 2 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x4c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x4, 0x6, [0x7, 0x7, 0x10, 0x6, 0x5, 0x3]}, &(0x7f0000000240)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x403) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000240)={&(0x7f0000000380)=[{0x4, 0x800, 0x1, &(0x7f0000000140)='Y'}], 0x1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000300)={r5, 0x7e, "c30f6681f41ea1acfbb4e25c3aa79f74d467611612a0b5e2ef877897331b31050f6a0bd17b91edc8a7eb620e34687cead10395a683567da83bd901cf106cc880f5c9578632cd74d102b697d88acb24ec50f24bf672cb47832c3a3485af32f2f94280c4f535ade971125324f0cd90b463e0aafc370ae27a0c343bf15c4bad"}, &(0x7f00000003c0)=0x86) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000051003bb929bd7000ffdbdf0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x85}, 0xffffffffffffff87) ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000580)={&(0x7f0000000400)=[{0x4, 0x7, 0x59b01ad5, 0x2, 0xd7}, {0xf, 0x8, 0x7, 0x6, 0x9}, {0x0, 0xd1, 0x0, 0x100000001, 0x2}, {0xaae, 0xffffffff00000000, 0xc, 0x1, 0xb0e}, {0x10000, 0x2, 0x6, 0x6, 0x39b}, {0x20, 0x6, 0x9, 0x7ff, 0x81}, {0x0, 0x9, 0x9, 0x1cbc, 0x8}, {0x2, 0x1, 0x5800000000000000, 0x7, 0x6}, {0x6, 0x1, 0x8, 0x9, 0x7}], 0x9, 0x28, 0x5, 0x9}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 2.737886388s ago: executing program 3 (id=779): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616ef0ff00180002"], 0x50}}, 0x0) 2.638295452s ago: executing program 3 (id=780): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12}, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x400000000008002) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028b50500fcdbdf25010000000500040002000000050003003b000000a6578cb830e32d7ebf6268874d7a6eb936e63c61db886cf0ed604885ff907fcb876a01f0810b0a44b7502f7e3faf5aac8b9d7a8925c8e24ee03e8f084ebd28"], 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12}, 0x48) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x400000000008002) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028b50500fcdbdf25010000000500040002000000050003003b000000a6578cb830e32d7ebf6268874d7a6eb936e63c61db886cf0ed604885ff907fcb876a01f0810b0a44b7502f7e3faf5aac8b9d7a8925c8e24ee03e8f084ebd28"], 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) (async) 1.939418635s ago: executing program 3 (id=784): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e4b2b9275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf138f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87acbeb48949b63b045313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65039cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'GPL\x00'}], 0xa, "e697ded6875ab64d81c0d007a4d5f9b47cfc22cf539e8e814f4612c6d8c3bcb49dbe9ea36c14e6da623d4ef7045f67c500f3d69df90213368c14c9b133d3aa6b252b84429c6a2ade713c6388e6e9c112d8a264039bb3a0cd2099704801be385a94e3c9480ae060ef58f3dd7147eadb978b1c32a09398b6c80c8d8961e55311287bae601ad640f1399ca8c4d7e59b02101723da9b"}, 0xa4) 1.939067628s ago: executing program 1 (id=785): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r1, &(0x7f0000000040)=""/50, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) getdents64(r1, 0x0, 0x43) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.855489449s ago: executing program 3 (id=786): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0xaa81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@newpolicy={0xd4, 0x13, 0x5, 0x70bd2a, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffff7ffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@coaddr={0x14, 0xe, @in=@local}, @tfcpad={0x8, 0x16, 0x2}]}, 0xd4}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) sendto$inet6(r2, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x80, 0x100, 0x40, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x1, 0x710}}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@RTM_NEWMDB={0xd8, 0x54, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@empty, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x1, {@ip4=@local, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x1, {@in6_addr=@remote, 0x96dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x880) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000fbff3604feffffffffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="c30407000b14bf261800128008000100736974000c00028008000200ac14141708001f000b000000"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe2}}], 0x30}}], 0x1, 0x4880) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_procs(r10, 0x0, 0x2, 0x0) write$cgroup_pid(r11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e110b07"], 0xec) 1.799118345s ago: executing program 3 (id=787): setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) chdir(&(0x7f0000000280)='./cgroup\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x24) 1.798047775s ago: executing program 1 (id=788): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616efeff00180002"], 0x50}}, 0x0) 1.797942977s ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x139) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 1.698760298s ago: executing program 1 (id=790): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x9, 0xfa, 0x4, 0x10, 0xc6, 0x2, 0xa, 0x2, 0x40, 0x0, 0x0, 0x80, 0xc9, 0x5}, 0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x4) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x35d3, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x20}, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x81124dc) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x0, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x1}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000024c0)={0x50, 0x7fffffffffffffff, r7, {0x7, 0x2d, 0x8, 0x2000000, 0x100, 0x9, 0x8, 0x3, 0x0, 0x0, 0x100, 0x10}}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRES32=r2, @ANYRES16=0x0, @ANYRES8=r2], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1.548346209s ago: executing program 1 (id=791): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000e9a8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0)="dbc51a6c08a5355a382a1db8506dd7127f7e68f69bfefbfd6e2de8995cd83f85cc4d2bfec96bee151d75cfd0ada2fd1d45934830b372870a98d422dc789bf5ec6b10c6ac497e5afcb66cd162e35ea5b4a5d552a8a2377332a70681efdb9a5addc7c70a277d2390c21a092aa435d6a5c3e8851bb161b34dfb59c0f6c79f348888f7628d", &(0x7f0000000300)=""/86}, 0x20) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ppoll(&(0x7f0000000500)=[{r3, 0x2081}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/28, 0x1c, 0x40000000, 0x0, 0x0) 1.499375153s ago: executing program 1 (id=792): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000018110000006d71d1ca5c957f4db35c8221dc8ce7ce4545d1a42e01997ce1c20788518e442e2c2b4513fc255b1f1879e799b53d5c7218abad48a888da0fde39f7a67c1416d0d11da36a2a07da81dfb50bd883623f755e49bb4975f1983972158cd435b23038f6381ee8c17c93334e30ab813d96c80879fbbe4fb34bcb059c9becd50315b11e5ca9655e300dcae199cb9b7c65d2618564889374d8fd52210ec1cf87d72a55228dd837b67b4de2b058477dbfe7d990665c8a7365915459e480c54c0ecd90bfd952c90f041337bc3ecb3dbc4129a87b57753a3207a7eff0487726ffd65a642c621a2b49c3574c3f1ae100e6ab27171f99ed3dd31ae6d779121732e64f67763d945c5fccb0cb1e9dff11c3a9ff46e7af6cb15260097757550f90600c2117aca7dea60850e5493f0b04816293d2b53d0be275f02d82a5ba77b9628e1ab7ad3a968c3b121acdf7cc635939305add9f1e694768962b5234d654c33d85866d178eb7baa0ab628d5b0d717cb3c8aa5390c055cf8ce02801281deee789468d4331c8c58b033bfdb0afe545d5147b85cdaf", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0910000000000055090100000001569500000000000000180100002020642500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x840000000002, 0x3, 0x100) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) read(r2, &(0x7f0000000540)=""/1000, 0x3e8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000008280)={0x0, 0x989680}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) 1.286887094s ago: executing program 4 (id=793): mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d76697274696f2c7365636c6162656c2c646f6e745f6d6561737572652c6f626a5f757365723d245c5d3a2d5b5de7e90000000000007970653d262825272c00"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x443}], 0x1}}], 0x2, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 1.285164138s ago: executing program 2 (id=794): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200002100000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.283504279s ago: executing program 2 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x7c}}, 0x4000) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x2800) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000280)=""/141) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) (rerun: 32) io_uring_setup(0x7840, &(0x7f0000000800)={0x0, 0x65b1, 0x200, 0x3, 0x38b, 0x0, r6}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x7, @remote, 0x8}, r7, 0x10007}}, 0x48) (async) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000680)={r9, r10, r11, 0x5, 0xa, 0x3, 0x4, 0x9, 0xffff, 0x6, 0x1, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="9e2614"}) (rerun: 64) 1.179742323s ago: executing program 2 (id=796): clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) clock_getres(0x4, &(0x7f0000000000)) 1.178692581s ago: executing program 2 (id=797): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESHEX], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="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"], 0x16c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000100)=0x320120) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) (async) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x4, 0x2002) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x4, 0x2002) ptrace$pokeuser(0x6, r7, 0x358, 0x800000010000) (async) ptrace$pokeuser(0x6, r7, 0x358, 0x800000010000) sendto$inet6(r6, &(0x7f0000000600)="1234567890", 0xfffffffffffffeb5, 0x0, &(0x7f0000000700)={0xa, 0x3234, 0x0, @loopback, 0x80}, 0x1c) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r8 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000380)=0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000380)=0x4) mount$nfs(&(0x7f00000003c0)='@\a', &(0x7f00000000c0)='./file1\x00', 0x0, 0x28840c1, 0x0) (async) mount$nfs(&(0x7f00000003c0)='@\a', &(0x7f00000000c0)='./file1\x00', 0x0, 0x28840c1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 389.66681ms ago: executing program 4 (id=798): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e0000002f0002"], 0x50}}, 0x0) 69.034163ms ago: executing program 4 (id=799): listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x10, 0x42006) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/6) r1 = syz_open_dev$mtd(&(0x7f0000000080), 0x7fff, 0x0) ioctl$MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f00000000c0)=0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/109) write$mtd(0xffffffffffffffff, &(0x7f0000000180)="7547ef0fb0e1cf7e7747b66fd3adb0323697fc410805f028b3248a6d462adddd049bf6a7efe3d50f80ab9af6d65cc70effc724432ee714b6a977bc443eefca69058f39faef9debcc2395d37fc357d7489177a2c3af3b6395aec68949eeededbfc3cbbd85057859756e1596901a49c14cab49391f94403c418ce5fa582635c23110589e50bc6ee0d66ad5833821e5b55858857683f82afefc30609b7b9258ea62f613c15eb1934b55ebf93a2569ede09337a938b4bcb3c7b17dec3706fee4fa7b6121e536d72cb1006f542383a925724d", 0xd0) pread64(r0, &(0x7f0000000280)=""/30, 0x1e, 0x6) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000340)) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, &(0x7f0000000380)="6d99f3a616bb8a343aa537190f5f815a7d129afbbf08e6f25068be8d4f76e756c84fde918db3bb66115ddd6b02338df6b638d569cd59346351e1eee2414e4e01b17a3f0421fcda2f48a4f14afd95a51329ed", 0x52, 0x40080, 0x0, 0x0) ioctl$MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000000400)=0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r5, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000580)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x24) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$OTPLOCK(r6, 0x800c4d10, &(0x7f0000000640)={0x8, 0xac60, 0x8}) ioctl$FIOCLEX(r2, 0x5451) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000680)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x23a8f98b7f214d39}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r8, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4044) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000840)={@any, 0xc}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x3, 0x0, 0x3, 0x4, 0x7, 0x1}, 0x20) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f00000008c0)=0xcd0, 0x4) syz_clone(0x2800, &(0x7f0000000900)="07a98d3a788f8033265b757bc00acbe72331b03bcf3787dc642c75230be6388d4cbbee6791182d1cd1176e84a7fc6bfafc5c0e8f5cd2f93f98e5e42cf514bc24ddefc20a7b15a4900483c644ae362f200b7750c66b518567ea29b895bb4d7d2a733d7d5cd92601c98e5b3582710bc84803a5049e3e4088c5f130b427988e4e54e6c3bf0d367360aefae6b2e5d903196d50f34e9df7a6e9c91b037ad109a4ccd3acbeaeea0674f70886bca169b8ead1070576e3a5abe7d47e989346bfca1a7562b53f7fdb62d7f5526a79bd2606ef95b46abea88334a740acc844081883f672cc979611ad", 0xe4, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="0e2ddbe45899cf4b24c0d62258c84188447f7430c045880ca0b7824d41ea1896d5a20f4190c006ee24e18685e28d9a12e457640712098cd689ac2e70fd14b33030d8f5ced16fb8bd4cae7dd6ab61d36d5aaf77bd797fb32786eaaeb03559344941473fbc81dd471c18f7c5169960faf52e761714c056") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000b00)=0x3, 0x4) 66.680234ms ago: executing program 4 (id=800): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) setresgid(0xee00, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) r3 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x3) write$binfmt_misc(r0, &(0x7f0000000340)="b3f9ffc5b837844af20225dbef8342401b2a98b343667638d3aaad7af3409a5606e2f91c1764c1fac90a493acea97cf7ba113a41111c73b2a366562cbe7c24b01c0e0757dae338b73a501b93c29ca16c1e4b6fbbcbb136249c76935c396f71f607e528bf9366fff0cb7bcde4cd80cbafcff9c0834adae0cec197", 0x7a) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff8000}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = geteuid() fchown(r1, r6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x22, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) 66.084132ms ago: executing program 1 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0xc800) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'caif0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2b, 0xe7, 0xa, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x64, 0x2e, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0xd}, {0xf, 0x2}, {0xb}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x10001}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r3, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r3, 0x6801, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$CDROM_GET_MCN(r4, 0x5311, &(0x7f0000000080)) read$FUSE(r3, &(0x7f0000000d40)={0x2020}, 0x2020) 0s ago: executing program 4 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x41, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="0478b82027b91407972e3943a458d583", 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x10}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x2, 0xa7, 0x66, @mcast2, @private1, 0x10, 0x1, 0x300e, 0x9}}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0x3}, {0x6, 0x7}, {0xc, 0xe}}, [{0x8}, {0x8, 0xb, 0x87}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc0) kernel console output (not intermixed with test programs): 3.698867][ T6098] __nla_validate_parse: 10 callbacks suppressed [ 63.698881][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 63.881998][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 63.882012][ T42] audit: type=1400 audit(2000000006.049:318): avc: denied { connect } for pid=6101 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.890172][ T42] audit: type=1400 audit(2000000006.049:319): avc: denied { write } for pid=6101 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.366833][ T6117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.76'. [ 64.408294][ T6119] use of bytesused == 0 is deprecated and will be removed in the future, [ 64.412693][ T6119] use the actual size instead. [ 65.616220][ T6070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.665226][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 65.669633][ T42] audit: type=1400 audit(2000000007.839:320): avc: denied { bind } for pid=6122 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.678739][ T6123] mmap: syz.0.79 (6123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.688084][ T42] audit: type=1400 audit(2000000007.839:321): avc: denied { setopt } for pid=6122 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.706622][ T42] audit: type=1400 audit(2000000007.859:322): avc: denied { read } for pid=6124 comm="syz.3.80" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.718495][ T42] audit: type=1400 audit(2000000007.859:323): avc: denied { open } for pid=6124 comm="syz.3.80" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.774829][ T6140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.85'. [ 65.873230][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 65.878987][ T42] audit: type=1400 audit(2000000008.049:324): avc: denied { mount } for pid=6145 comm="syz.0.88" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.888091][ T42] audit: type=1400 audit(2000000008.049:325): avc: denied { mounton } for pid=6145 comm="syz.0.88" path="/18/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 66.379047][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.470969][ T42] audit: type=1400 audit(2000000008.639:326): avc: denied { execute } for pid=6161 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.481901][ T42] audit: type=1400 audit(2000000008.639:327): avc: denied { execute_no_trans } for pid=6161 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.504412][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.550275][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.554042][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.558118][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.562738][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.566039][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.643219][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.744492][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.973666][ T12] bridge_slave_1: left allmulticast mode [ 66.977218][ T12] bridge_slave_1: left promiscuous mode [ 66.979788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.986562][ T12] bridge_slave_0: left allmulticast mode [ 66.989571][ T12] bridge_slave_0: left promiscuous mode [ 66.991504][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.124204][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.130144][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.134861][ T12] bond0 (unregistering): Released all slaves [ 67.158257][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.160955][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.163080][ T6162] bridge_slave_0: entered allmulticast mode [ 67.165557][ T6162] bridge_slave_0: entered promiscuous mode [ 67.169753][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.172081][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.174375][ T6162] bridge_slave_1: entered allmulticast mode [ 67.177072][ T6162] bridge_slave_1: entered promiscuous mode [ 67.196254][ T6162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.201035][ T6162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.216360][ T6162] team0: Port device team_slave_0 added [ 67.219678][ T6162] team0: Port device team_slave_1 added [ 67.232418][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.234595][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.242783][ T6162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.247138][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.249326][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.257498][ T6162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.295088][ T6162] hsr_slave_0: entered promiscuous mode [ 67.300014][ T6162] hsr_slave_1: entered promiscuous mode [ 67.303015][ T6162] debugfs: 'hsr0' already exists in 'hsr' [ 67.305425][ T6162] Cannot create hsr debugfs directory [ 67.516459][ T12] hsr_slave_0: left promiscuous mode [ 67.519882][ T12] hsr_slave_1: left promiscuous mode [ 67.522699][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.525809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.532132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.535286][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.544687][ T12] veth1_macvtap: left promiscuous mode [ 67.547689][ T12] veth0_macvtap: left promiscuous mode [ 67.550188][ T12] veth1_vlan: left promiscuous mode [ 67.552436][ T12] veth0_vlan: left promiscuous mode [ 67.754858][ T12] team0 (unregistering): Port device team_slave_1 removed [ 67.768754][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.617455][ T5098] Bluetooth: hci2: command tx timeout [ 68.784365][ T6142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.795234][ T6162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.815645][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.820417][ T6162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.842161][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.845878][ T6162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.868404][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.876086][ T6162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.890026][ T6162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.893394][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 68.893408][ T42] audit: type=1400 audit(2000000011.059:331): avc: denied { mount } for pid=6182 comm="syz.2.96" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.920140][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 68.927840][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.930981][ T42] audit: type=1400 audit(2000000011.099:332): avc: denied { read } for pid=6197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.931026][ T42] audit: type=1400 audit(2000000011.099:333): avc: denied { read open } for pid=6197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.956557][ T42] audit: type=1400 audit(2000000011.099:334): avc: denied { getattr } for pid=6197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.969172][ T42] audit: type=1400 audit(2000000011.109:335): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.975502][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.978780][ T42] audit: type=1400 audit(2000000011.109:336): avc: denied { add_name } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.987965][ T42] audit: type=1400 audit(2000000011.109:337): avc: denied { create } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.994595][ T42] audit: type=1400 audit(2000000011.109:338): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.003097][ T42] audit: type=1400 audit(2000000011.109:339): avc: denied { append } for pid=6188 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.024799][ T42] audit: type=1400 audit(2000000011.189:340): avc: denied { write } for pid=6203 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.031257][ T6162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.045666][ T6162] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.058040][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.061116][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.082660][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.085460][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.104472][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.340047][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.485039][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 69.486531][ T6162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.487907][ T6235] netlink: 80 bytes leftover after parsing attributes in process `syz.3.103'. [ 69.555039][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 69.610180][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 69.667820][ T6162] veth0_vlan: entered promiscuous mode [ 69.673475][ T6162] veth1_vlan: entered promiscuous mode [ 69.693837][ T6162] veth0_macvtap: entered promiscuous mode [ 69.699061][ T6162] veth1_macvtap: entered promiscuous mode [ 69.709627][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.716386][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.725499][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.728768][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.734916][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.738989][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.306127][ T6200] Set syz1 is full, maxelem 65536 reached [ 70.697339][ T5098] Bluetooth: hci2: command tx timeout [ 70.906768][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 71.245638][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 71.249208][ T6271] netlink: 80 bytes leftover after parsing attributes in process `syz.2.112'. [ 71.263600][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.267281][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.775651][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.116'. [ 71.928561][ T6291] vlan2: entered allmulticast mode [ 71.930904][ T6291] bond0: entered allmulticast mode [ 71.933122][ T6291] bond_slave_0: entered allmulticast mode [ 71.935563][ T6291] bond_slave_1: entered allmulticast mode [ 72.100562][ T6296] FAULT_INJECTION: forcing a failure. [ 72.100562][ T6296] name failslab, interval 1, probability 0, space 0, times 1 [ 72.106470][ T6296] CPU: 2 UID: 0 PID: 6296 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 72.106493][ T6296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.106511][ T6296] Call Trace: [ 72.106521][ T6296] [ 72.106529][ T6296] dump_stack_lvl+0x100/0x190 [ 72.106692][ T6296] should_fail_ex.cold+0x5/0xa [ 72.106744][ T6296] should_failslab+0xc2/0x120 [ 72.106793][ T6296] __kmalloc_noprof+0xfc/0x820 [ 72.106822][ T6296] ? rcu_is_watching+0x12/0xc0 [ 72.106866][ T6296] ? tomoyo_realpath_from_path+0xb6/0x690 [ 72.106922][ T6296] tomoyo_realpath_from_path+0xb6/0x690 [ 72.106948][ T6296] tomoyo_path_number_perm+0x23c/0x580 [ 72.106974][ T6296] ? tomoyo_path_number_perm+0x22e/0x580 [ 72.107002][ T6296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.107075][ T6296] ? find_held_lock+0x2b/0x80 [ 72.107115][ T6296] ? __fget_files+0x215/0x3d0 [ 72.107142][ T6296] ? hook_file_ioctl_common+0x140/0x440 [ 72.107187][ T6296] ? __fget_files+0x215/0x3d0 [ 72.107211][ T6296] ? __fget_files+0x21f/0x3d0 [ 72.107234][ T6296] security_file_ioctl+0xd3/0x230 [ 72.107281][ T6296] __x64_sys_ioctl+0xb7/0x210 [ 72.107319][ T6296] do_syscall_64+0x115/0x870 [ 72.107354][ T6296] ? clear_bhb_loop+0x40/0x90 [ 72.107378][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.107397][ T6296] RIP: 0033:0x7f4a1299de99 [ 72.107414][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.107431][ T6296] RSP: 002b:00007f4a138e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.107458][ T6296] RAX: ffffffffffffffda RBX: 00007f4a12c25fa0 RCX: 00007f4a1299de99 [ 72.107470][ T6296] RDX: 0000000000000000 RSI: 0000000000005326 RDI: 0000000000000003 [ 72.107480][ T6296] RBP: 00007f4a138e8090 R08: 0000000000000000 R09: 0000000000000000 [ 72.107490][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.107505][ T6296] R13: 00007f4a12c26038 R14: 00007f4a12c25fa0 R15: 00007fff669680a8 [ 72.107531][ T6296] [ 72.174510][ T6296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.211230][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 72.539867][ T6240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.610717][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 72.615388][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622353][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.664713][ T6305] vlan3: entered promiscuous mode [ 72.676159][ T6305] hsr0: entered promiscuous mode [ 72.679720][ T6305] vlan3: entered allmulticast mode [ 72.682014][ T6305] hsr0: entered allmulticast mode [ 72.684151][ T6305] hsr_slave_0: entered allmulticast mode [ 72.686552][ T6305] hsr_slave_1: entered allmulticast mode [ 72.715952][ T6325] FAULT_INJECTION: forcing a failure. [ 72.715952][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 72.721478][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.721497][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.725253][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 72.734362][ T6325] CPU: 2 UID: 0 PID: 6325 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 72.734384][ T6325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.734394][ T6325] Call Trace: [ 72.734400][ T6325] [ 72.734408][ T6325] dump_stack_lvl+0x100/0x190 [ 72.734436][ T6325] should_fail_ex.cold+0x5/0xa [ 72.734460][ T6325] should_failslab+0xc2/0x120 [ 72.734492][ T6325] __kmalloc_noprof+0xfc/0x820 [ 72.734513][ T6325] ? tomoyo_encode2+0xfb/0x3c0 [ 72.734536][ T6325] tomoyo_encode2+0xfb/0x3c0 [ 72.734557][ T6325] tomoyo_encode+0x29/0x50 [ 72.734573][ T6325] tomoyo_realpath_from_path+0x18c/0x690 [ 72.734596][ T6325] tomoyo_path_number_perm+0x23c/0x580 [ 72.734620][ T6325] ? tomoyo_path_number_perm+0x22e/0x580 [ 72.734646][ T6325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.734695][ T6325] ? find_held_lock+0x2b/0x80 [ 72.734722][ T6325] ? __fget_files+0x215/0x3d0 [ 72.734739][ T6325] ? hook_file_ioctl_common+0x140/0x440 [ 72.734758][ T6325] ? __fget_files+0x215/0x3d0 [ 72.734781][ T6325] ? __fget_files+0x21f/0x3d0 [ 72.734803][ T6325] security_file_ioctl+0xd3/0x230 [ 72.734832][ T6325] __x64_sys_ioctl+0xb7/0x210 [ 72.734861][ T6325] do_syscall_64+0x115/0x870 [ 72.734880][ T6325] ? clear_bhb_loop+0x40/0x90 [ 72.734903][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.734921][ T6325] RIP: 0033:0x7f9516b9de99 [ 72.734935][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.734951][ T6325] RSP: 002b:00007f9517af8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.734968][ T6325] RAX: ffffffffffffffda RBX: 00007f9516e25fa0 RCX: 00007f9516b9de99 [ 72.734979][ T6325] RDX: 0000000000000000 RSI: 0000000000005326 RDI: 0000000000000003 [ 72.734990][ T6325] RBP: 00007f9517af8090 R08: 0000000000000000 R09: 0000000000000000 [ 72.735000][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.735010][ T6325] R13: 00007f9516e26038 R14: 00007f9516e25fa0 R15: 00007ffc906d2838 [ 72.735033][ T6325] [ 72.735047][ T6325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.740470][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.787212][ T5098] Bluetooth: hci2: command tx timeout [ 73.019468][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 73.029958][ T6361] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 73.050104][ T6366] overlayfs: failed to resolve './file0': -2 [ 73.053107][ T6343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.139001][ T6370] FAULT_INJECTION: forcing a failure. [ 73.139001][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.144661][ T6370] CPU: 2 UID: 0 PID: 6370 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 73.144684][ T6370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.144694][ T6370] Call Trace: [ 73.144699][ T6370] [ 73.144706][ T6370] dump_stack_lvl+0x100/0x190 [ 73.144735][ T6370] should_fail_ex.cold+0x5/0xa [ 73.144759][ T6370] _copy_to_user+0x32/0xd0 [ 73.144807][ T6370] simple_read_from_buffer+0xcb/0x170 [ 73.144830][ T6370] proc_fail_nth_read+0x1af/0x230 [ 73.144884][ T6370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.144913][ T6370] ? rw_verify_area+0xce/0x6d0 [ 73.144937][ T6370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.144963][ T6370] vfs_read+0x1e4/0xb40 [ 73.144993][ T6370] ? __pfx_vfs_read+0x10/0x10 [ 73.145016][ T6370] ? __fget_files+0x215/0x3d0 [ 73.145039][ T6370] ? __fget_files+0x21f/0x3d0 [ 73.145061][ T6370] ksys_read+0x12a/0x250 [ 73.145084][ T6370] ? __pfx_ksys_read+0x10/0x10 [ 73.145114][ T6370] do_syscall_64+0x115/0x870 [ 73.145134][ T6370] ? clear_bhb_loop+0x40/0x90 [ 73.145153][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.145169][ T6370] RIP: 0033:0x7f9516b5e6ce [ 73.145184][ T6370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.145199][ T6370] RSP: 002b:00007f9517af7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.145218][ T6370] RAX: ffffffffffffffda RBX: 00007f9517af86c0 RCX: 00007f9516b5e6ce [ 73.145230][ T6370] RDX: 000000000000000f RSI: 00007f9517af80a0 RDI: 0000000000000004 [ 73.145240][ T6370] RBP: 00007f9517af8090 R08: 0000000000000000 R09: 0000000000000000 [ 73.145250][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.145260][ T6370] R13: 00007f9516e26038 R14: 00007f9516e25fa0 R15: 00007ffc906d2838 [ 73.145285][ T6370] [ 73.243456][ T6375] netlink: 'syz.3.143': attribute type 63 has an invalid length. [ 73.511756][ T6410] gadgetfs: bound to dummy_udc driver [ 73.608607][ T6425] FAULT_INJECTION: forcing a failure. [ 73.608607][ T6425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.612743][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(full) [ 73.612758][ T6425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.612764][ T6425] Call Trace: [ 73.612769][ T6425] [ 73.612774][ T6425] dump_stack_lvl+0x100/0x190 [ 73.612793][ T6425] should_fail_ex.cold+0x5/0xa [ 73.612808][ T6425] _copy_from_user+0x2e/0xd0 [ 73.612829][ T6425] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 73.612873][ T6425] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 73.612908][ T6425] do_sock_getsockopt+0x530/0x6e0 [ 73.612930][ T6425] ? __lock_acquire+0x49f/0x1a40 [ 73.612947][ T6425] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 73.612966][ T6425] ? rcu_read_lock_any_held+0x6a/0xa0 [ 73.612988][ T6425] ? find_held_lock+0x2b/0x80 [ 73.613019][ T6425] ? __fget_files+0x21f/0x3d0 [ 73.613045][ T6425] __sys_getsockopt+0x148/0x260 [ 73.613086][ T6425] ? __x64_sys_getsockopt+0xbd/0x160 [ 73.613107][ T6425] __x64_sys_getsockopt+0xbd/0x160 [ 73.613126][ T6425] ? do_syscall_64+0x90/0x870 [ 73.613144][ T6425] ? lockdep_hardirqs_on+0x78/0x100 [ 73.613170][ T6425] do_syscall_64+0x115/0x870 [ 73.613189][ T6425] ? clear_bhb_loop+0x40/0x90 [ 73.613211][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.613227][ T6425] RIP: 0033:0x7f4a1299de99 [ 73.613240][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.613255][ T6425] RSP: 002b:00007f4a138e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 73.613271][ T6425] RAX: ffffffffffffffda RBX: 00007f4a12c25fa0 RCX: 00007f4a1299de99 [ 73.613281][ T6425] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000003 [ 73.613291][ T6425] RBP: 00007f4a138e8090 R08: 0000200000000040 R09: 0000000000000000 [ 73.613301][ T6425] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.613310][ T6425] R13: 00007f4a12c26038 R14: 00007f4a12c25fa0 R15: 00007fff669680a8 [ 73.613332][ T6425] [ 73.748251][ T848] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.754470][ C2] gadgetfs: connected [ 73.757332][ T848] gadgetfs: disconnected [ 73.837161][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.867285][ T5852] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 73.907310][ C2] gadgetfs: connected [ 73.909796][ T848] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 73.913119][ T848] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 73.916266][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.933275][ C2] gadgetfs: configuration #1 [ 73.977237][ T10] usb 6-1: device descriptor read/64, error -71 [ 74.022717][ T5852] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.026309][ T5852] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 74.029809][ T5852] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 74.033471][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.040263][ T5852] usb 8-1: config 0 descriptor?? [ 74.046734][ T5852] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 74.049905][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 74.066710][ T5852] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 74.071453][ T5852] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 74.074887][ T5852] usb 8-1: media controller created [ 74.079290][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.091999][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 74.094637][ T5852] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 74.101797][ T5852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 74.111736][ T5852] dvb-usb: schedule remote query interval to 150 msecs. [ 74.114656][ T5852] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.219645][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.244329][ T6427] dvb-usb: bulk message failed: -22 (4/0) [ 74.247812][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 74.247825][ T42] audit: type=1400 audit(2000000016.419:396): avc: denied { create } for pid=6426 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 74.248653][ T5852] usb 8-1: USB disconnect, device number 2 [ 74.276985][ T5852] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 74.348013][ T10] usb 6-1: device descriptor read/64, error -71 [ 74.468977][ T10] usb usb6-port1: attempt power cycle [ 74.807271][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.828764][ T10] usb 6-1: device descriptor read/8, error -71 [ 74.867498][ T5098] Bluetooth: hci2: command tx timeout [ 74.988605][ T6448] __nla_validate_parse: 6 callbacks suppressed [ 74.988621][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'. [ 74.994151][ T6448] netlink: 80 bytes leftover after parsing attributes in process `syz.3.173'. [ 75.024791][ T6450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.174'. [ 75.056758][ T42] audit: type=1400 audit(2000000017.219:397): avc: denied { unlink } for pid=6451 comm="syz.3.175" name="#1" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.064172][ T42] audit: type=1400 audit(2000000017.229:398): avc: denied { mount } for pid=6451 comm="syz.3.175" name="/" dev="overlay" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.087625][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.108244][ T10] usb 6-1: device descriptor read/8, error -71 [ 75.196648][ T42] audit: type=1400 audit(2000000017.359:399): avc: denied { bind } for pid=6455 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.199261][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 75.204319][ T42] audit: type=1400 audit(2000000017.369:400): avc: denied { write } for pid=6455 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.212209][ T42] audit: type=1400 audit(2000000017.369:401): avc: denied { read } for pid=6455 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.218391][ T10] usb usb6-port1: unable to enumerate USB device [ 75.274595][ T42] audit: type=1400 audit(2000000017.439:402): avc: denied { read write } for pid=6457 comm="syz.3.178" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.282381][ T42] audit: type=1400 audit(2000000017.439:403): avc: denied { open } for pid=6457 comm="syz.3.178" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.335019][ T42] audit: type=1400 audit(2000000017.499:404): avc: denied { read write } for pid=6457 comm="syz.3.178" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 75.342329][ T42] audit: type=1400 audit(2000000017.509:405): avc: denied { open } for pid=6457 comm="syz.3.178" path="/46/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 76.395799][ T6394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.503546][ T6410] gadgetfs: suspended from state 3 [ 76.506806][ T5852] usb 5-1: USB disconnect, device number 3 [ 76.509458][ T6410] gadgetfs: disconnected [ 76.541964][ T6470] evm: overlay not supported [ 76.583078][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.184'. [ 76.722639][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.732052][ T6483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.858310][ T6496] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.876032][ T6496] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 77.014610][ T6503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.024388][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 77.137139][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.137188][ T6510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 77.189291][ T6514] binder: 6512:6514 ioctl c0306201 0 returned -14 [ 77.320186][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 77.322616][ T34] usb 8-1: can't read configurations, error -61 [ 77.333196][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 77.350883][ T6521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.457170][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.494542][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 77.619690][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 77.623334][ T34] usb 8-1: can't read configurations, error -61 [ 77.631499][ T34] usb usb8-port1: attempt power cycle [ 77.967174][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.990527][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 77.993918][ T34] usb 8-1: can't read configurations, error -61 [ 78.127192][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.149584][ T34] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 78.153048][ T34] usb 8-1: can't read configurations, error -61 [ 78.156103][ T34] usb usb8-port1: unable to enumerate USB device [ 78.306712][ T6547] trusted_key: syz.4.207 sent an empty control message without MSG_MORE. [ 78.503808][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 78.937918][ T55] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.110383][ T55] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 79.117212][ T55] usb 8-1: can't read configurations, error -61 [ 79.247652][ T55] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.399454][ T55] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 79.402122][ T55] usb 8-1: can't read configurations, error -61 [ 79.404936][ T55] usb usb8-port1: attempt power cycle [ 79.767157][ T55] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 79.791312][ T55] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 79.794244][ T55] usb 8-1: can't read configurations, error -61 [ 79.927943][ T55] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 79.933858][ T6590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 80.130214][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 80.130279][ T42] audit: type=1400 audit(2000000022.299:430): avc: denied { bind } for pid=6593 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.155856][ T55] usb 8-1: device not accepting address 10, error -71 [ 80.160421][ T55] usb usb8-port1: unable to enumerate USB device [ 80.293068][ T42] audit: type=1400 audit(2000000022.459:431): avc: denied { accept } for pid=6605 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 80.304347][ T6606] netlink: 112 bytes leftover after parsing attributes in process `syz.4.225'. [ 80.495344][ T42] audit: type=1400 audit(2000000022.659:432): avc: denied { create } for pid=6610 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.507166][ T42] audit: type=1400 audit(2000000022.669:433): avc: denied { getopt } for pid=6610 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.787297][ T6616] netlink: 36 bytes leftover after parsing attributes in process `syz.4.229'. [ 81.392003][ T6555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.523255][ T58] cfg80211: failed to load regulatory.db [ 81.534937][ T6633] vlan2: entered allmulticast mode [ 81.713602][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 81.719004][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 81.820914][ T42] audit: type=1400 audit(2000000023.989:434): avc: denied { shutdown } for pid=6644 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.944700][ T5098] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 81.944743][ T5098] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 81.985533][ T42] audit: type=1400 audit(2000000024.149:435): avc: denied { create } for pid=6654 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.023677][ T6655] e1000e 0000:00:02.0 eth1: removed PHC [ 82.081899][ T6660] anx7411 0-002c: fail to probe typec property. [ 82.088163][ T6660] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 82.119937][ T42] audit: type=1400 audit(2000000024.289:436): avc: denied { ioctl } for pid=6654 comm="syz.2.243" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14731 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.159148][ T42] audit: type=1400 audit(2000000024.329:437): avc: denied { write } for pid=6658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.196917][ T42] audit: type=1400 audit(2000000024.359:438): avc: denied { bind } for pid=6654 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.215694][ T42] audit: type=1400 audit(2000000024.379:439): avc: denied { write } for pid=6667 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.219466][ T6655] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 82.291329][ T6673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 82.294752][ T6673] UDF-fs: Scanning with blocksize 2048 failed [ 82.301485][ T6673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 82.304537][ T6673] UDF-fs: Scanning with blocksize 4096 failed [ 82.473243][ T6688] netlink: 'syz.3.248': attribute type 34 has an invalid length. [ 82.502713][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 82.598566][ T6688] bond1: option lacp_strict: invalid value (156) [ 82.626837][ T6688] bond1 (unregistering): Released all slaves [ 82.663690][ T6701] usb 2-1: USB disconnect, device number 2 [ 82.712140][ T6703] openvswitch: netlink: IP tunnel dst address not specified [ 82.735560][ T6661] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 82.805900][ T6661] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 82.876608][ T6661] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 82.895645][ T6661] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 82.901362][ T6661] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x52540012 [ 83.183056][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 83.201072][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 83.208662][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 83.212130][ T6728] netlink: 'syz.4.259': attribute type 6 has an invalid length. [ 83.241675][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.245734][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.256642][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.259996][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.528040][ T6754] nbd0: detected capacity change from 0 to 63 [ 83.535720][ T65] block nbd0: Receive control failed (result -32) [ 83.551612][ T1308] block nbd0: Dead connection, failed to find a fallback [ 83.555271][ T1308] block nbd0: shutting down sockets [ 83.557688][ T1308] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.561323][ T1308] Buffer I/O error on dev nbd0, logical block 0, async page read [ 83.563905][ T1308] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 83.566760][ T1308] Buffer I/O error on dev nbd0, logical block 1, async page read [ 83.575335][ T1308] Buffer I/O error on dev nbd0, logical block 2, async page read [ 83.578308][ T1308] Buffer I/O error on dev nbd0, logical block 3, async page read [ 83.582491][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.585555][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 83.591874][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 83.594909][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 83.597648][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 83.600310][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 83.604267][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.609644][ T5109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 83.612545][ T5109] Buffer I/O error on dev nbd0, logical block 1, async page read [ 83.618610][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.622581][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.627771][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.633224][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.637720][ T5109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 83.641669][ T5743] ldm_validate_partition_table(): Disk read failed. [ 83.646788][ T5743] Dev nbd0: unable to read RDB block 0 [ 83.654168][ T5743] nbd0: unable to read partition table [ 83.669003][ T5743] ldm_validate_partition_table(): Disk read failed. [ 83.674993][ T5743] Dev nbd0: unable to read RDB block 0 [ 83.680209][ T5743] nbd0: unable to read partition table [ 83.721585][ T6793] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 83.723658][ T6793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.736833][ T6793] vhci_hcd vhci_hcd.0: Device attached [ 83.776628][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 83.780455][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 83.861860][ T6797] vhci_hcd: connection closed [ 83.863930][ T12] vhci_hcd vhci_hcd.4: stop threads [ 83.877461][ T12] vhci_hcd vhci_hcd.4: release socket [ 83.884015][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 83.917561][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 84.302302][ T6858] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.305151][ T6858] warning: `syz.2.288' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.309548][ T6858] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.312694][ T6861] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.353568][ T6867] 9pnet_virtio: no channels available for device syz [ 84.367248][ T6867] comedi comedi2: board detection failed [ 84.440838][ T6875] process 'syz.1.295' launched './file0' with NULL argv: empty string added [ 84.514501][ T6878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.520975][ T6882] Bluetooth: MGMT ver 1.23 [ 84.526665][ T6878] block device autoloading is deprecated and will be removed. [ 84.624317][ T6891] syzkaller1: entered promiscuous mode [ 84.626072][ T6891] syzkaller1: entered allmulticast mode [ 84.638905][ T6894] overlayfs: missing 'workdir' [ 85.007364][ T5852] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.078840][ T6932] netlink: 'syz.3.313': attribute type 11 has an invalid length. [ 85.116093][ T6934] binder: BINDER_SET_CONTEXT_MGR already set [ 85.118896][ T6934] binder: 6933:6934 ioctl 4018620d 200000000100 returned -16 [ 85.122168][ T6934] binder: 6933:6934 ioctl c0306201 2000000003c0 returned -14 [ 85.157141][ T5852] usb 6-1: Using ep0 maxpacket: 16 [ 85.168888][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.174512][ T5852] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.177450][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.179936][ T5852] usb 6-1: Product: syz [ 85.181244][ T5852] usb 6-1: Manufacturer: syz [ 85.182693][ T5852] usb 6-1: SerialNumber: syz [ 85.190004][ T5852] usb 6-1: config 0 descriptor?? [ 85.198691][ T5852] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.202970][ T5852] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 85.214151][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 85.214163][ T42] audit: type=1400 audit(2000000027.379:496): avc: denied { accept } for pid=6944 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.282454][ T42] audit: type=1400 audit(2000000027.449:497): avc: denied { write } for pid=6942 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.309628][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 85.309670][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 85.419986][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.803071][ T5852] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 85.925042][ T6975] __nla_validate_parse: 6 callbacks suppressed [ 85.925055][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 86.026805][ T6982] FAULT_INJECTION: forcing a failure. [ 86.026805][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.033030][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.2.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.033055][ T6982] Tainted: [L]=SOFTLOCKUP [ 86.033061][ T6982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.033070][ T6982] Call Trace: [ 86.033076][ T6982] [ 86.033083][ T6982] dump_stack_lvl+0x100/0x190 [ 86.033157][ T6982] should_fail_ex.cold+0x5/0xa [ 86.033179][ T6982] _copy_to_user+0x32/0xd0 [ 86.033212][ T6982] simple_read_from_buffer+0xcb/0x170 [ 86.033241][ T6982] full_proxy_read+0x135/0x1a0 [ 86.033281][ T6982] ? __pfx_full_proxy_read+0x10/0x10 [ 86.033301][ T6982] vfs_readv+0x5d8/0x8d0 [ 86.033337][ T6982] ? __pfx_vfs_readv+0x10/0x10 [ 86.033361][ T6982] ? rcu_read_lock_any_held+0x6a/0xa0 [ 86.033397][ T6982] ? __fget_files+0x21f/0x3d0 [ 86.033420][ T6982] ? do_readv+0x13e/0x340 [ 86.033448][ T6982] do_readv+0x13e/0x340 [ 86.033470][ T6982] ? __pfx_do_readv+0x10/0x10 [ 86.033499][ T6982] do_syscall_64+0x115/0x870 [ 86.033540][ T6982] ? clear_bhb_loop+0x40/0x90 [ 86.033560][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.033577][ T6982] RIP: 0033:0x7f4a1299de99 [ 86.033591][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.033606][ T6982] RSP: 002b:00007f4a138e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 86.033623][ T6982] RAX: ffffffffffffffda RBX: 00007f4a12c25fa0 RCX: 00007f4a1299de99 [ 86.033632][ T6982] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000000 [ 86.033642][ T6982] RBP: 00007f4a138e8090 R08: 0000000000000000 R09: 0000000000000000 [ 86.033651][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.033660][ T6982] R13: 00007f4a12c26038 R14: 00007f4a12c25fa0 R15: 00007fff669680a8 [ 86.033680][ T6982] [ 86.216031][ T5852] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.221522][ T5852] em28xx 6-1:0.0: board has no eeprom [ 86.252765][ T42] audit: type=1400 audit(2000000028.419:498): avc: denied { write } for pid=6995 comm="syz.3.334" name="functions" dev="configfs" ino=8419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.287287][ T6909] em28xx 6-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 86.296895][ T42] audit: type=1400 audit(2000000028.459:499): avc: denied { write } for pid=6995 comm="syz.3.334" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.348248][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 86.394204][ T7002] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '/dev/swradio#' [ 86.519679][ T42] audit: type=1400 audit(2000000028.689:500): avc: denied { ioctl } for pid=7006 comm="syz.3.337" path="socket:[15060]" dev="sockfs" ino=15060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.520960][ T7007] netlink: 14 bytes leftover after parsing attributes in process `syz.3.337'. [ 86.529731][ T42] audit: type=1400 audit(2000000028.689:501): avc: denied { bind } for pid=7006 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.537239][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.538106][ T5098] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.676572][ T7011] FAULT_INJECTION: forcing a failure. [ 86.676572][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.682254][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.3.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.682290][ T7011] Tainted: [L]=SOFTLOCKUP [ 86.682294][ T7011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.682301][ T7011] Call Trace: [ 86.682305][ T7011] [ 86.682310][ T7011] dump_stack_lvl+0x100/0x190 [ 86.682331][ T7011] should_fail_ex.cold+0x5/0xa [ 86.682346][ T7011] _copy_to_user+0x32/0xd0 [ 86.682370][ T7011] simple_read_from_buffer+0xcb/0x170 [ 86.682384][ T7011] proc_fail_nth_read+0x1af/0x230 [ 86.682403][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.682422][ T7011] ? rw_verify_area+0xce/0x6d0 [ 86.682437][ T7011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.682455][ T7011] vfs_read+0x1e4/0xb40 [ 86.682474][ T7011] ? __pfx_vfs_read+0x10/0x10 [ 86.682491][ T7011] ? __fget_files+0x215/0x3d0 [ 86.682506][ T7011] ? __fget_files+0x21f/0x3d0 [ 86.682521][ T7011] ksys_read+0x12a/0x250 [ 86.682538][ T7011] ? __pfx_ksys_read+0x10/0x10 [ 86.682559][ T7011] do_syscall_64+0x115/0x870 [ 86.682573][ T7011] ? clear_bhb_loop+0x40/0x90 [ 86.682587][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.682598][ T7011] RIP: 0033:0x7f423fb5e6ce [ 86.682609][ T7011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.682620][ T7011] RSP: 002b:00007f4240a58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.682631][ T7011] RAX: ffffffffffffffda RBX: 00007f4240a596c0 RCX: 00007f423fb5e6ce [ 86.682639][ T7011] RDX: 000000000000000f RSI: 00007f4240a590a0 RDI: 0000000000000001 [ 86.682645][ T7011] RBP: 00007f4240a59090 R08: 0000000000000000 R09: 0000000000000000 [ 86.682651][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.682658][ T7011] R13: 00007f423fe26038 R14: 00007f423fe25fa0 R15: 00007ffea9660fa8 [ 86.682672][ T7011] [ 86.759227][ T5852] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.761804][ T5852] em28xx 6-1:0.0: dvb set to bulk mode. [ 86.765329][ T848] em28xx 6-1:0.0: Binding DVB extension [ 86.771202][ T7014] tmpfs: Bad value for 'mpol' [ 86.778003][ T7014] loop4: detected capacity change from 0 to 2640 [ 86.779565][ T5852] usb 6-1: USB disconnect, device number 7 [ 86.784662][ T7014] ldm_validate_partition_table(): Disk read failed. [ 86.787612][ T7014] Dev loop4: unable to read RDB block 0 [ 86.790151][ T7014] loop4: unable to read partition table [ 86.793526][ T7014] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 86.798711][ T42] audit: type=1400 audit(2000000028.969:502): avc: denied { map } for pid=7013 comm="syz.3.339" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.801688][ T848] em28xx 6-1:0.0: Registering input extension [ 86.810488][ T42] audit: type=1400 audit(2000000028.969:503): avc: denied { execute } for pid=7013 comm="syz.3.339" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.811761][ T5852] em28xx 6-1:0.0: Disconnecting em28xx [ 86.823069][ T5852] em28xx 6-1:0.0: Closing input extension [ 86.837688][ T5852] em28xx 6-1:0.0: Freeing device [ 88.356713][ T6953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.490115][ T7032] netlink: 4660 bytes leftover after parsing attributes in process `syz.2.347'. [ 88.495415][ T42] audit: type=1400 audit(2000000030.659:504): avc: denied { read } for pid=7033 comm="syz.1.346" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.508070][ T7032] netlink: 1804 bytes leftover after parsing attributes in process `syz.2.347'. [ 88.516424][ T42] audit: type=1400 audit(2000000030.659:505): avc: denied { open } for pid=7033 comm="syz.1.346" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.588241][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 88.698524][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 90.468570][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 90.767223][ T5890] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 90.927175][ T5890] usb 7-1: Invalid ep0 maxpacket: 64 [ 91.057142][ T5890] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 91.217139][ T5890] usb 7-1: Invalid ep0 maxpacket: 64 [ 91.220041][ T5890] usb usb7-port1: attempt power cycle [ 91.557186][ T5890] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 91.577713][ T5890] usb 7-1: Invalid ep0 maxpacket: 64 [ 91.620922][ T7054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.684304][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 91.684321][ T42] audit: type=1400 audit(2000000033.849:513): avc: denied { ioctl } for pid=7097 comm="syz.3.368" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=724 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.717255][ T5890] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 91.737946][ T5890] usb 7-1: Invalid ep0 maxpacket: 64 [ 91.743300][ T5890] usb usb7-port1: unable to enumerate USB device [ 91.773280][ T7108] ªªªªª): renamed from hsr0 (while UP) [ 91.802804][ T42] audit: type=1400 audit(2000000033.969:514): avc: denied { create } for pid=7109 comm="syz.3.372" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.810632][ T42] audit: type=1400 audit(2000000033.969:515): avc: denied { unlink } for pid=7109 comm="syz.3.372" name="file0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.947579][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 92.105972][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 92.106003][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 92.107470][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 92.116640][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 92.120776][ T9] usb 6-1: config 0 has no interface number 0 [ 92.123690][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.128882][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 92.133987][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.139140][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.144734][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.150164][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.153864][ T42] audit: type=1400 audit(2000000034.319:516): avc: denied { create } for pid=7130 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.158028][ T9] usb 6-1: config 0 descriptor?? [ 92.160290][ T42] audit: type=1400 audit(2000000034.319:517): avc: denied { write } for pid=7130 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.164925][ T7131] x_tables: duplicate underflow at hook 3 [ 92.176670][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 92.276312][ T42] audit: type=1326 audit(2000000034.439:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.381" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f423fb9de99 code=0xffff0000 [ 92.282451][ T7137] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:16384 [ 92.282640][ T5831] IPVS: starting estimator thread 0... [ 92.387457][ T7140] IPVS: using max 44 ests per chain, 105600 per kthread [ 92.678638][ T7142] Bluetooth: MGMT ver 1.23 [ 92.750104][ T7144] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.753098][ T7144] overlayfs: failed to set xattr on upper [ 92.755487][ T7144] overlayfs: ...falling back to redirect_dir=nofollow. [ 92.759486][ T7144] overlayfs: ...falling back to index=off. [ 92.762710][ T7144] overlayfs: ...falling back to uuid=null. [ 93.648571][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 93.648722][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 93.823981][ T42] audit: type=1400 audit(2000000035.989:519): avc: denied { bind } for pid=7172 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.846424][ T42] audit: type=1400 audit(2000000035.989:520): avc: denied { read } for pid=7172 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.854687][ T42] audit: type=1400 audit(2000000035.989:521): avc: denied { listen } for pid=7172 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.966156][ T7183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.969298][ T7183] overlayfs: failed to set xattr on upper [ 93.971691][ T7183] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.974443][ T7183] overlayfs: ...falling back to index=off. [ 93.976793][ T7183] overlayfs: ...falling back to uuid=null. [ 94.281827][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 94.281846][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 94.388680][ T42] audit: type=1400 audit(2000000036.559:522): avc: denied { bind } for pid=7205 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.698371][ T9] usb 6-1: USB disconnect, device number 8 [ 94.724624][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 94.811270][ T7216] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 94.859626][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 94.991446][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'. [ 95.071265][ T7235] netlink: 45 bytes leftover after parsing attributes in process `syz.1.412'. [ 95.214353][ T7246] ehci-pci 0000:00:1d.7: remove, state 1 [ 95.217426][ T7246] usb usb2: USB disconnect, device number 1 [ 95.237631][ T7246] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 95.279843][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 95.279883][ T7248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.288516][ T7248] overlayfs: failed to set xattr on upper [ 95.290392][ T7248] overlayfs: ...falling back to redirect_dir=nofollow. [ 95.292521][ T7248] overlayfs: ...falling back to index=off. [ 95.294393][ T7248] overlayfs: ...falling back to uuid=null. [ 95.507175][ T5890] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 95.666107][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 95.691323][ T5890] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 95.695018][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 95.698782][ T5890] usb 1-1: Product: QEMU USB Tablet [ 95.702023][ T5890] usb 1-1: Manufacturer: QEMU [ 95.703991][ T5890] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 95.736937][ T5890] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input7 [ 95.880320][ T5890] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 96.118492][ T7263] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 96.134411][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 96.302977][ T7277] loop5: detected capacity change from 0 to 14 [ 96.317770][ T7277] loop5: p1 < > p3 p4 [ 96.326345][ T7277] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 96.583965][ T7322] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 96.621765][ T7322] program syz.4.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.633504][ T7322] file system registered [ 96.642431][ T7323] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.659479][ T7323] overlayfs: failed to set xattr on upper [ 96.671161][ T7323] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.676044][ T7323] overlayfs: ...falling back to index=off. [ 96.678014][ T7323] overlayfs: ...falling back to uuid=null. [ 97.165970][ T7277] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.169810][ T7277] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.436245][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 97.523192][ T7338] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 97.543747][ T7338] bond1: entered promiscuous mode [ 97.547804][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.587194][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.591737][ T7338] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 97.603839][ T7338] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 97.616534][ T7338] bond1: (slave ip6gre1): making interface the new active one [ 97.623755][ T7338] ip6gre1: entered promiscuous mode [ 97.631006][ T7338] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 97.793598][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 97.987683][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 98.025718][ T7356] ata1.00: invalid multi_count 128 ignored [ 98.097691][ T7358] syz.3.444: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.118137][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.3.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.118189][ T7358] Tainted: [L]=SOFTLOCKUP [ 98.118196][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.118209][ T7358] Call Trace: [ 98.118217][ T7358] [ 98.118227][ T7358] dump_stack_lvl+0x100/0x190 [ 98.118261][ T7358] warn_alloc.cold+0x94/0xa8 [ 98.118284][ T7358] ? __pfx_warn_alloc+0x10/0x10 [ 98.118320][ T7358] ? do_syscall_64+0x115/0x870 [ 98.118353][ T7358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.118380][ T7358] ? __lock_acquire+0x49f/0x1a40 [ 98.118406][ T7358] ? find_held_lock+0x2b/0x80 [ 98.118435][ T7358] ? avc_has_extended_perms+0x33a/0x1080 [ 98.118474][ T7358] ? avc_has_extended_perms+0x33a/0x1080 [ 98.118499][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.118549][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.118577][ T7358] __vmalloc_node_range_noprof+0x136c/0x1630 [ 98.118610][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.118635][ T7358] ? trace_contention_end+0x126/0x160 [ 98.118660][ T7358] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 98.118718][ T7358] ? dvb_demux_do_ioctl+0x929/0x1200 [ 98.118753][ T7358] ? find_held_lock+0x2b/0x80 [ 98.118784][ T7358] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.118808][ T7358] ? __pfx___mutex_lock+0x10/0x10 [ 98.118835][ T7358] ? tomoyo_path_number_perm+0x188/0x580 [ 98.118865][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.118892][ T7358] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 98.118920][ T7358] __vmalloc_node_noprof+0xad/0xf0 [ 98.118948][ T7358] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 98.118977][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119003][ T7358] dvb_demux_do_ioctl+0x9e0/0x1200 [ 98.119033][ T7358] ? do_vfs_ioctl+0x226/0x13e0 [ 98.119095][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119120][ T7358] dvb_usercopy+0x167/0x340 [ 98.119147][ T7358] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 98.119174][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119200][ T7358] ? __pfx_dvb_usercopy+0x10/0x10 [ 98.119235][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119259][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119284][ T7358] ? selinux_file_ioctl+0x13b/0x290 [ 98.119314][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119344][ T7358] ? selinux_file_ioctl+0xb6/0x290 [ 98.119377][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119404][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119432][ T7358] dvb_demux_ioctl+0x29/0x40 [ 98.119458][ T7358] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 98.119485][ T7358] __x64_sys_ioctl+0x18e/0x210 [ 98.119516][ T7358] do_syscall_64+0x115/0x870 [ 98.119539][ T7358] ? clear_bhb_loop+0x40/0x90 [ 98.119563][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.119585][ T7358] RIP: 0033:0x7f423fb9de99 [ 98.119604][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.119623][ T7358] RSP: 002b:00007f4240a38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.119646][ T7358] RAX: ffffffffffffffda RBX: 00007f423fe26090 RCX: 00007f423fb9de99 [ 98.119660][ T7358] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 98.119674][ T7358] RBP: 00007f423fc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 98.119687][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.119699][ T7358] R13: 00007f423fe26128 R14: 00007f423fe26090 R15: 00007ffea9660fa8 [ 98.119722][ T7358] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 98.119753][ T7358] [ 98.250568][ T7358] Mem-Info: [ 98.251657][ T7358] active_anon:2948 inactive_anon:4620 isolated_anon:31 [ 98.251657][ T7358] active_file:1917 inactive_file:14928 isolated_file:62 [ 98.251657][ T7358] unevictable:1768 dirty:71 writeback:0 [ 98.251657][ T7358] slab_reclaimable:8368 slab_unreclaimable:70234 [ 98.251657][ T7358] mapped:22569 shmem:1806 pagetables:6130 [ 98.251657][ T7358] sec_pagetables:303 bounce:0 [ 98.251657][ T7358] kernel_misc_reclaimable:0 [ 98.251657][ T7358] free:264402 free_pcp:18652 free_cma:0 [ 98.265869][ T7358] Node 0 active_anon:9724kB inactive_anon:17768kB active_file:7420kB inactive_file:28528kB unevictable:3536kB isolated(anon):620kB isolated(file):992kB mapped:85516kB dirty:260kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:20452kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.276845][ T7358] Node 1 active_anon:2068kB inactive_anon:92kB active_file:0kB inactive_file:30812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4760kB dirty:24kB writeback:0kB shmem:3560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:480kB pagetables:4068kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 98.287571][ T7358] Node 0 DMA free:12448kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 98.297267][ T7358] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 98.299246][ T7358] Node 0 DMA32 free:311408kB boost:20480kB min:47876kB low:54724kB high:61572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10344kB inactive_anon:17768kB active_file:7544kB inactive_file:28900kB unevictable:3536kB writepending:260kB zspages:0kB present:2080628kB managed:1255244kB mlocked:0kB bounce:0kB free_pcp:2148kB local_pcp:792kB free_cma:0kB [ 98.310250][ T7358] lowmem_reserve[]: 0 0 0 0 0 [ 98.311831][ T7358] Node 1 Normal free:714460kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2068kB inactive_anon:92kB active_file:0kB inactive_file:30812kB unevictable:3536kB writepending:24kB zspages:5956kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:74064kB local_pcp:41912kB free_cma:0kB [ 98.322308][ T7358] lowmem_reserve[]: 0 0 0 0 0 [ 98.323926][ T7358] Node 0 DMA: 22*4kB (UM) 25*8kB (UM) 26*16kB (UM) 25*32kB (UM) 23*64kB (UM) 24*128kB (UM) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 12448kB [ 98.328907][ T7358] Node 0 DMA32: 2436*4kB (UME) 1950*8kB (UME) 1301*16kB (UME) 1042*32kB (UME) 603*64kB (UME) 333*128kB (UME) 189*256kB (UM) 154*512kB (UM) 9*1024kB (UM) 5*2048kB (M) 1*4096kB (M) = 311504kB [ 98.334513][ T7358] Node 1 Normal: 4*4kB (UME) 6*8kB (UME) 0*16kB 5*32kB (E) 11*64kB (E) 8*128kB (UME) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 1*2048kB (M) 173*4096kB (M) = 714400kB [ 98.339552][ T7358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.342440][ T7358] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.345241][ T7358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.348146][ T7358] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.350921][ T7358] 19380 total pagecache pages [ 98.352426][ T7358] 700 pages in swap cache [ 98.353883][ T7358] Free swap = 102748kB [ 98.355210][ T7358] Total swap = 124996kB [ 98.356542][ T7358] 1048443 pages RAM [ 98.357896][ T7358] 0 pages HighMem/MovableOnly [ 98.359422][ T7358] 285321 pages reserved [ 98.360736][ T7358] 0 pages cma reserved [ 98.438027][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 98.438040][ T42] audit: type=1400 audit(2000000040.609:535): avc: denied { write } for pid=7357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.511773][ T42] audit: type=1400 audit(2000000040.679:536): avc: denied { append } for pid=7365 comm="syz.3.446" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.537113][ T42] audit: type=1400 audit(2000000040.689:537): avc: denied { write } for pid=7364 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.634964][ T42] audit: type=1400 audit(2000000040.799:538): avc: denied { write } for pid=7369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.652267][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'. [ 98.694820][ T7368] ocfs2: block size(16384) > page size(4096) not supported by filesystem [ 98.694991][ T42] audit: type=1400 audit(2000000040.859:539): avc: denied { write } for pid=7375 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.717408][ T7380] netlink: 80 bytes leftover after parsing attributes in process `syz.2.448'. [ 98.717954][ T7368] (syz.3.446,7368,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 98.731454][ T7368] (syz.3.446,7368,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 98.790671][ T42] audit: type=1400 audit(2000000040.959:540): avc: denied { write } for pid=7383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.839251][ T42] audit: type=1400 audit(2000000041.009:541): avc: denied { write } for pid=7386 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.198393][ T7394] loop5: detected capacity change from 0 to 7 [ 99.206453][ T7394] Dev loop5: unable to read RDB block 7 [ 99.208662][ T7394] loop5: unable to read partition table [ 99.210624][ T7394] loop5: partition table beyond EOD, truncated [ 99.212656][ T7394] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.220245][ T42] audit: type=1400 audit(2000000041.389:542): avc: denied { write } for pid=7393 comm="syz.4.450" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.704133][ T7344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.815269][ T42] audit: type=1400 audit(2000000044.979:543): avc: denied { write } for pid=7397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.869961][ T42] audit: type=1400 audit(2000000045.039:544): avc: denied { write } for pid=7400 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.278425][ T42] audit: type=1400 audit(2000000047.449:545): avc: denied { setopt } for pid=7405 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.288401][ T42] audit: type=1400 audit(2000000047.459:546): avc: denied { write } for pid=7403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.298681][ T42] audit: type=1400 audit(2000000047.469:547): avc: denied { search } for pid=7409 comm="syz.2.453" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.307309][ T42] audit: type=1400 audit(2000000047.469:548): avc: denied { search } for pid=7409 comm="syz.2.453" name="per_cpu" dev="tracefs" ino=5267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.315483][ T42] audit: type=1400 audit(2000000047.469:549): avc: denied { search } for pid=7409 comm="syz.2.453" name="cpu0" dev="tracefs" ino=5268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.348267][ T42] audit: type=1400 audit(2000000047.519:550): avc: denied { write } for pid=7414 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.367092][ T42] audit: type=1400 audit(2000000047.529:551): avc: denied { connect } for pid=7417 comm="syz.2.455" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.375376][ T42] audit: type=1400 audit(2000000047.529:552): avc: denied { write } for pid=7417 comm="syz.2.455" path="socket:[18459]" dev="sockfs" ino=18459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.398765][ T42] audit: type=1400 audit(2000000047.529:553): avc: denied { wake_alarm } for pid=7417 comm="syz.2.455" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.503679][ T42] audit: type=1400 audit(2000000047.669:554): avc: denied { write } for pid=7425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.233822][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 106.442987][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 106.552218][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7468 comm=syz.1.462 [ 106.565384][ T7462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.833198][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 106.833231][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 107.118896][ T7485] syzkaller0: entered promiscuous mode [ 107.127169][ T7485] syzkaller0: entered allmulticast mode [ 107.137173][ T7485] tipc: Started in network mode [ 107.138759][ T7485] tipc: Node identity 7ac47c14c714, cluster identity 4711 [ 107.148456][ T7485] tipc: Enabled bearer , priority 0 [ 107.161301][ T7484] tipc: Resetting bearer [ 107.182736][ T7484] tipc: Disabling bearer [ 107.314139][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 107.324843][ T7492] netlink: 'syz.3.472': attribute type 11 has an invalid length. [ 107.331977][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 107.354559][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.358603][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 107.366038][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.372568][ T7492] netlink: 'syz.3.472': attribute type 11 has an invalid length. [ 107.378197][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.383821][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.390409][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 107.440342][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 107.910493][ T7504] netlink: 76 bytes leftover after parsing attributes in process `syz.2.476'. [ 107.994441][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 107.994473][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 109.571684][ T7529] syzkaller0: entered promiscuous mode [ 109.575887][ T7529] syzkaller0: entered allmulticast mode [ 109.709960][ T7531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.286348][ T7499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.576638][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 110.576652][ T42] audit: type=1400 audit(2000000052.739:569): avc: denied { read } for pid=7543 comm="syz.4.484" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 110.631375][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.487'. [ 110.808690][ T42] audit: type=1400 audit(2000000052.979:570): avc: denied { create } for pid=7554 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.819439][ T42] audit: type=1400 audit(2000000052.979:571): avc: denied { listen } for pid=7554 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.837290][ T42] audit: type=1400 audit(2000000052.989:572): avc: denied { accept } for pid=7554 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.893452][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.492'. [ 110.899705][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x79 [ 110.899729][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 110.965959][ T42] audit: type=1400 audit(2000000053.129:573): avc: denied { call } for pid=7561 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 111.137717][ T7573] netlink: 11396 bytes leftover after parsing attributes in process `syz.3.496'. [ 111.374655][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 112.227519][ T7581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.338790][ T7596] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 113.343076][ T7596] qnx6: wrong signature (magic) in superblock #1. [ 113.345158][ T7596] qnx6: unable to read the first superblock [ 113.370529][ T42] audit: type=1400 audit(2000000055.539:574): avc: denied { map } for pid=7599 comm="syz.1.504" path="socket:[16373]" dev="sockfs" ino=16373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.998112][ T7564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.060018][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 114.060047][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 114.065215][ T42] audit: type=1400 audit(2000000056.229:575): avc: denied { getopt } for pid=7605 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.117219][ T42] audit: type=1400 audit(2000000056.279:576): avc: denied { mount } for pid=7609 comm="syz.3.507" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.124387][ T7610] overlayfs: failed to resolve './bus': -2 [ 114.130216][ T42] audit: type=1400 audit(2000000056.289:577): avc: denied { mounton } for pid=7609 comm="syz.3.507" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 114.300292][ T42] audit: type=1400 audit(2000000056.469:578): avc: denied { ioctl } for pid=7629 comm="syz.1.513" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 114.427131][ T5852] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 114.587153][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 114.590820][ T5852] usb 9-1: unable to get BOS descriptor or descriptor too short [ 114.594023][ T5852] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.599581][ T5852] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 114.602408][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.604931][ T5852] usb 9-1: Product: syz [ 114.606273][ T5852] usb 9-1: Manufacturer: syz [ 114.608137][ T5852] usb 9-1: SerialNumber: syz [ 114.828836][ T5852] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.831593][ T5852] usb 9-1: MIDIStreaming interface descriptor not found [ 114.835674][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 114.881769][ T7643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.889870][ T5852] usb 9-1: USB disconnect, device number 2 [ 114.996168][ T7649] udevd[7649]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.033734][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 115.033755][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 115.334255][ T7670] overlayfs: failed to resolve './file0': -2 [ 115.480812][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.496042][ T7677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.558927][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 115.562714][ T7683] syz_tun: refused to change device tx_queue_len [ 115.597153][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.632865][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 115.632877][ T42] audit: type=1400 audit(2000000057.799:583): avc: denied { getopt } for pid=7689 comm="syz.4.531" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.702361][ T42] audit: type=1400 audit(2000000057.869:584): avc: denied { mount } for pid=7696 comm="syz.4.533" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 115.702608][ T7697] max out of range [ 115.714732][ T42] audit: type=1400 audit(2000000057.869:585): avc: denied { remount } for pid=7696 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 115.721418][ T42] audit: type=1400 audit(2000000057.879:586): avc: denied { getopt } for pid=7696 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.733801][ T7699] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.738336][ T42] audit: type=1400 audit(2000000057.909:587): avc: denied { unmount } for pid=6162 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 115.744731][ T7699] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 115.747210][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 115.752759][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 115.756237][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.759145][ T9] usb 6-1: Product: syz [ 115.760542][ T9] usb 6-1: Manufacturer: syz [ 115.762939][ T9] usb 6-1: SerialNumber: syz [ 115.772323][ T9] usb 6-1: config 0 descriptor?? [ 115.804827][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.536'. [ 115.980463][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.983934][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 115.991145][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.995367][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 116.001062][ T9] usb 6-1: media controller created [ 116.012723][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. (×[ 116.059853][ T42] audit: type=1400 audit(2000000058.229:588): avc: denied { ioctl } for pid=7714 comm="syz.2.539" path="/150/file0/file0" dev="fuse" ino=2 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 116.193718][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 116.199961][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 116.219548][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 116.219568][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 116.395759][ T5823] usb 6-1: USB disconnect, device number 9 [ 116.452263][ T5823] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 116.869249][ T5823] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 117.018491][ T5823] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.021628][ T5823] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.025652][ T5823] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.028945][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.234692][ T5823] usb 6-1: GET_CAPABILITIES returned 0 [ 117.236420][ T5823] usbtmc 6-1:16.0: can't read capabilities [ 118.912194][ T7715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.941091][ T5823] usb 6-1: USB disconnect, device number 10 [ 118.984107][ T7737] netlink: 348 bytes leftover after parsing attributes in process `syz.3.544'. [ 119.062398][ T7748] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 119.065614][ T7748] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 119.069648][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.548'. [ 119.171740][ T7762] netlink: 'syz.4.550': attribute type 11 has an invalid length. [ 119.224800][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 119.224821][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 119.305164][ T42] audit: type=1400 audit(2000000061.469:589): avc: denied { bind } for pid=7772 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.313208][ T7770] can0: slcan on ttyS3. [ 119.413739][ T7773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.419629][ T7770] can0 (unregistered): slcan off ttyS3. [ 119.442572][ T42] audit: type=1400 audit(2000000061.609:590): avc: denied { listen } for pid=7778 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.458009][ T42] audit: type=1400 audit(2000000061.609:591): avc: denied { ioctl } for pid=7778 comm="syz.4.556" path="/dev/input/event2" dev="devtmpfs" ino=948 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.467377][ T42] audit: type=1400 audit(2000000061.629:592): avc: denied { write } for pid=7778 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.567961][ T7773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.682923][ T7773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.784503][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 119.786234][ T7793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 119.821011][ T7773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.889256][ T7809] overlayfs: overlapping lowerdir path [ 119.892536][ T7809] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 119.946778][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.960916][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.980646][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.005101][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.027247][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 120.027278][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 120.091645][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 120.180778][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.570'. [ 120.282680][ T7846] overlayfs: cannot append lower layer [ 120.440680][ T7859] coredump: 504(syz.3.575): Core dump to core aborted: cannot preserve file permissions [ 120.598848][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 120.640592][ T42] kauditd_printk_skb: 798 callbacks suppressed [ 120.640608][ T42] audit: type=1326 audit(2000000062.809:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f423fb97c17 code=0x7ffc0000 [ 120.659108][ T42] audit: type=1326 audit(2000000062.809:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f423fb3f219 code=0x7ffc0000 [ 120.672652][ T42] audit: type=1326 audit(2000000062.809:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f423fb97c17 code=0x7ffc0000 [ 120.681528][ T42] audit: type=1326 audit(2000000062.809:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f423fb3f219 code=0x7ffc0000 [ 120.690799][ T42] audit: type=1326 audit(2000000062.809:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f423fb97c17 code=0x7ffc0000 [ 120.702374][ T42] audit: type=1326 audit(2000000062.809:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f423fb3f219 code=0x7ffc0000 [ 120.712323][ T42] audit: type=1326 audit(2000000062.809:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f423fb97c17 code=0x7ffc0000 [ 120.720571][ T42] audit: type=1326 audit(2000000062.809:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f423fb3f219 code=0x7ffc0000 [ 120.728010][ T42] audit: type=1326 audit(2000000062.809:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f423fb97c17 code=0x7ffc0000 [ 120.735057][ T42] audit: type=1326 audit(2000000062.809:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f423fb3f219 code=0x7ffc0000 [ 120.814069][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 120.846827][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 121.006403][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 121.006422][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 121.116646][ T7882] netlink: 88 bytes leftover after parsing attributes in process `syz.4.583'. [ 121.178634][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 121.384431][ T7918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.064951][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 122.064972][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 122.893457][ T7980] ceph: No mds server is up or the cluster is laggy [ 123.230286][ T8003] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.310688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fdc8400: rx timeout, send abort [ 123.315508][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803fdc8400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.446449][ T8017] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 123.474451][ T8017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.753702][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 123.753723][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 125.181837][ T8063] __nla_validate_parse: 7 callbacks suppressed [ 125.181856][ T8063] netlink: 52 bytes leftover after parsing attributes in process `syz.3.641'. [ 125.202227][ T8065] fuse: Bad value for 'rootmode' [ 125.215749][ T8066] input: syz0 as /devices/virtual/input/input8 [ 125.222772][ T8067] syz.1.640 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.352283][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 125.352303][ T5749] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 125.471223][ T8079] binder: 8077:8079 ioctl c0306201 200000000080 returned -22 [ 125.744300][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.653'. [ 125.752973][ T42] kauditd_printk_skb: 4163 callbacks suppressed [ 125.752989][ T42] audit: type=1400 audit(2000000067.919:5564): avc: denied { mounton } for pid=8094 comm="syz.2.654" path="/165/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 125.932222][ T42] audit: type=1400 audit(2000000068.099:5565): avc: denied { bpf } for pid=8099 comm="syz.3.655" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.943024][ T42] audit: type=1400 audit(2000000068.099:5566): avc: denied { perfmon } for pid=8099 comm="syz.3.655" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.268313][ T8106] zram0: detected capacity change from 0 to 8 [ 126.554315][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 126.579133][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 128.846871][ T8100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.936049][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 128.944215][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 128.958284][ T8130] netlink: 348 bytes leftover after parsing attributes in process `syz.1.663'. [ 128.979698][ T8129] input: syz0 as /devices/virtual/input/input9 [ 129.000744][ T8135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.667'. [ 129.031721][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 129.031792][ T5749] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 129.100766][ T42] audit: type=1400 audit(2000000071.269:5567): avc: denied { write } for pid=8139 comm="syz.1.669" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.183693][ T42] audit: type=1400 audit(2000000071.349:5568): avc: denied { set_context_mgr } for pid=8139 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.190530][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 129.192792][ T8145] netlink: 68 bytes leftover after parsing attributes in process `syz.2.671'. [ 129.193513][ T8140] binder: 8139:8140 ioctl c0306201 200000000080 returned -14 [ 129.200267][ T8140] binder: 8139:8140 ioctl c0306201 2000000003c0 returned -14 [ 129.205488][ T42] audit: type=1400 audit(2000000071.369:5569): avc: denied { call } for pid=8139 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.264405][ T8148] overlayfs: upper fs does not support file handles, falling back to index=off. [ 129.491322][ T8162] nfs4: Bad value for 'source' [ 129.567139][ T34] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 129.722332][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.726386][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.730514][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 129.735190][ T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.739483][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.748521][ T8151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.755094][ T34] hub 7-1:1.0: bad descriptor, ignoring hub [ 129.762926][ T34] hub 7-1:1.0: probe with driver hub failed with error -5 [ 129.770265][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 129.775030][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 129.788342][ T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 129.797409][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 129.883831][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 129.899233][ T8186] loop5: detected capacity change from 0 to 2640 [ 129.902447][ T8186] buffer_io_error: 166 callbacks suppressed [ 129.902464][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.907310][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.909784][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.912370][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.915122][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.917971][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.920747][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.923805][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.926498][ T8186] ldm_validate_partition_table(): Disk read failed. [ 129.928972][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.931749][ T8186] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.934556][ T8186] Dev loop5: unable to read RDB block 0 [ 129.936546][ T8186] loop5: unable to read partition table [ 129.938639][ T8186] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 129.945592][ T8186] ldm_validate_partition_table(): Disk read failed. [ 129.948593][ T8186] Dev loop5: unable to read RDB block 0 [ 129.951411][ T8186] loop5: unable to read partition table [ 129.959903][ T42] audit: type=1326 audit(2000000072.129:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.1.683" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9516b9de99 code=0x7fc00000 [ 129.982236][ T42] audit: type=1326 audit(2000000072.129:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.1.683" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9516b9de99 code=0x7fc00000 [ 129.991583][ T42] audit: type=1326 audit(2000000072.129:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.1.683" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9516b9de99 code=0x7fc00000 [ 130.001823][ T42] audit: type=1326 audit(2000000072.129:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.1.683" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9516b9de99 code=0x7fc00000 [ 130.480787][ T8208] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.485349][ T8208] Error validating options; rc = [-22] [ 130.516500][ T8151] usb 7-1: reset low-speed USB device number 7 using dummy_hcd [ 130.800833][ T8151] usb 7-1: device descriptor read/64, error -71 [ 130.917472][ T848] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.068027][ T848] usb 9-1: Using ep0 maxpacket: 8 [ 131.073033][ T848] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.075742][ T848] usb 9-1: config 179 has no interface number 0 [ 131.078091][ T848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 131.081563][ T848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 131.085147][ T848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.088935][ T848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 131.089624][ T8226] exFAT-fs (nullb0): invalid boot record signature [ 131.092703][ T848] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.092732][ T848] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.092745][ T848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.094643][ T8215] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.096119][ T8226] exFAT-fs (nullb0): failed to read boot sector [ 131.115007][ T8226] exFAT-fs (nullb0): failed to recognize exfat type [ 131.177551][ T8151] usb 7-1: reset low-speed USB device number 7 using dummy_hcd [ 131.312259][ T848] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input10 [ 131.315898][ T1045] usb 9-1: USB disconnect, device number 3 [ 131.316001][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 131.320360][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 131.401634][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 131.401646][ T42] audit: type=1400 audit(2000000073.569:5585): avc: denied { ioctl } for pid=8239 comm="syz.4.703" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x5658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 131.447301][ T8151] usb 7-1: device descriptor read/64, error -71 [ 131.611053][ T42] audit: type=1400 audit(2000000073.779:5586): avc: denied { getopt } for pid=8245 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.726350][ T42] audit: type=1400 audit(2000000073.889:5587): avc: denied { mount } for pid=8253 comm="syz.4.707" name="/" dev="autofs" ino=23716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.827253][ T8151] usb 7-1: reset low-speed USB device number 7 using dummy_hcd [ 131.847995][ T8151] usb 7-1: device descriptor read/8, error -71 [ 131.967246][ T1045] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 132.128917][ T1045] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.133278][ T1045] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.137460][ T1045] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.141589][ T1045] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.144742][ T1045] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.149854][ T1045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.159509][ T1045] hub 9-1:1.0: bad descriptor, ignoring hub [ 132.161407][ T1045] hub 9-1:1.0: probe with driver hub failed with error -5 [ 132.164590][ T1045] cdc_wdm 9-1:1.0: skipping garbage [ 132.166288][ T1045] cdc_wdm 9-1:1.0: skipping garbage [ 132.227384][ T8151] usb 7-1: reset low-speed USB device number 7 using dummy_hcd [ 132.700258][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.703614][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807840][ T8181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.852112][ T8257] __nla_validate_parse: 6 callbacks suppressed [ 132.852125][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'. [ 132.933441][ T8264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63504 sclass=netlink_route_socket pid=8264 comm=syz.1.711 [ 132.939696][ T42] audit: type=1400 audit(2000000075.109:5588): avc: denied { connect } for pid=8262 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.949193][ T42] audit: type=1400 audit(2000000075.119:5589): avc: denied { accept } for pid=8262 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.968064][ T8259] nbd3: detected capacity change from 0 to 63 [ 132.972728][ T8263] block nbd3: NBD_DISCONNECT [ 132.975356][ T8263] block nbd3: Disconnected due to user request. [ 132.978388][ T8263] block nbd3: shutting down sockets [ 132.978983][ T7446] blk_print_req_error: 77 callbacks suppressed [ 132.978997][ T7446] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.986457][ T7446] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 133.009979][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 133.013734][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.018316][ T35] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 133.021508][ T35] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.024660][ T35] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 133.027961][ T7446] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 133.032818][ T7446] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.036771][ T7446] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 133.041072][ T7415] ldm_validate_partition_table(): Disk read failed. [ 133.044458][ T7415] Dev nbd3: unable to read RDB block 0 [ 133.047930][ T7415] nbd3: unable to read partition table [ 133.055284][ T7415] ldm_validate_partition_table(): Disk read failed. [ 133.059389][ T7415] Dev nbd3: unable to read RDB block 0 [ 133.062685][ T7415] nbd3: unable to read partition table [ 133.073161][ T8259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.107225][ T42] audit: type=1400 audit(2000000075.269:5590): avc: denied { write } for pid=8270 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.142381][ T42] audit: type=1400 audit(2000000075.309:5591): avc: denied { map } for pid=8270 comm="syz.1.712" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.154110][ T42] audit: type=1400 audit(2000000075.309:5592): avc: denied { execute } for pid=8270 comm="syz.1.712" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.193153][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 133.255904][ T8281] netlink: 64 bytes leftover after parsing attributes in process `syz.3.713'. [ 133.263311][ T42] audit: type=1400 audit(2000000075.429:5593): avc: denied { write } for pid=8279 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.299087][ T5749] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 133.519572][ T8291] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 133.620016][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 133.631923][ T8296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.677327][ T8307] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 133.703307][ T8311] syzkaller0: entered promiscuous mode [ 133.705044][ T8311] syzkaller0: entered allmulticast mode [ 133.722000][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 133.725435][ T8311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.721'. [ 133.900617][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 133.956057][ T8326] [U]  [ 133.965088][ T8326] vlan3: entered allmulticast mode [ 133.966786][ T8326] bond0: entered allmulticast mode [ 133.968547][ T8326] bond_slave_0: entered allmulticast mode [ 133.970401][ T8326] bond_slave_1: entered allmulticast mode [ 133.972233][ T8326] syz_tun: entered allmulticast mode [ 133.975929][ T42] audit: type=1400 audit(2000000076.139:5594): avc: denied { read } for pid=8325 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.214922][ T8343] netlink: 'syz.1.732': attribute type 29 has an invalid length. [ 134.219253][ T8343] netlink: 'syz.1.732': attribute type 29 has an invalid length. [ 134.225609][ T8343] SELinux: truncated policydb string identifier [ 134.227742][ T8343] SELinux: failed to load policy [ 134.229646][ T8343] netlink: 'syz.1.732': attribute type 29 has an invalid length. [ 134.657213][ T848] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 134.808754][ T848] usb 6-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 134.812341][ T848] usb 6-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 134.816584][ T848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.819169][ T848] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 134.822062][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.829858][ T848] usb 6-1: config 0 descriptor?? [ 134.835357][ T848] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 135.192696][ T848] usbhid 6-1:0.0: can't add hid device: -71 [ 135.196124][ T848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 135.202271][ T848] usb 6-1: USB disconnect, device number 11 [ 135.811681][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 136.063344][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 136.076473][ T8386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.176281][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 136.176309][ T5749] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 136.364053][ T8396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 136.377737][ T8396] CIFS mount error: No usable UNC path provided in device string! [ 136.377737][ T8396] [ 136.382069][ T8396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.445113][ T5749] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 136.446245][ T8399] ceph: Path missing in source [ 136.491614][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 136.491628][ T42] audit: type=1400 audit(2000000078.659:5597): avc: denied { setattr } for pid=8401 comm="syz.1.749" name="/" dev="9p" ino=78395331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.851997][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.754'. [ 136.913498][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 136.928102][ T8414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.033056][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.071574][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 137.127112][ T42] audit: type=1400 audit(2000000079.289:5598): avc: denied { connect } for pid=8434 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.258583][ T8151] usb 7-1: device descriptor read/8, error -110 [ 137.380144][ T8151] cdc_wdm 7-1:1.0: Error autopm - -16 [ 137.380298][ T55] usb 7-1: USB disconnect, device number 7 [ 137.404289][ T1045] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 137.405247][ T8254] cdc_wdm 7-1:1.0: Error autopm - -16 [ 137.406819][ T1045] cdc_wdm 9-1:1.0: Unknown control protocol [ 137.439819][ T42] audit: type=1400 audit(2000000079.609:5599): avc: denied { unmount } for pid=6162 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 137.560730][ T42] audit: type=1400 audit(2000000079.729:5600): avc: denied { ioctl } for pid=8450 comm="syz.2.766" path="socket:[23939]" dev="sockfs" ino=23939 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.579621][ T42] audit: type=1400 audit(2000000079.739:5601): avc: denied { setopt } for pid=8450 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.624443][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 137.631859][ T42] audit: type=1400 audit(2000000079.799:5602): avc: denied { remount } for pid=8461 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.684112][ T42] audit: type=1400 audit(2000000079.849:5603): avc: denied { mounton } for pid=8457 comm="syz.1.768" path="/210/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.693122][ T42] audit: type=1400 audit(2000000079.849:5604): avc: denied { read } for pid=8457 comm="syz.1.768" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.700805][ T42] audit: type=1400 audit(2000000079.849:5605): avc: denied { read } for pid=8457 comm="syz.1.768" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.708195][ T42] audit: type=1400 audit(2000000079.849:5606): avc: denied { open } for pid=8457 comm="syz.1.768" path="/210/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.868038][ T8482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.874026][ T1045] usb 9-1: USB disconnect, device number 4 [ 137.878978][ T8482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.197585][ T1045] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 138.258009][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 138.317236][ T5831] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 138.347453][ T1045] usb 9-1: Using ep0 maxpacket: 8 [ 138.351330][ T1045] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.354931][ T1045] usb 9-1: config 179 has no interface number 0 [ 138.357719][ T1045] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 138.362191][ T1045] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 138.366663][ T1045] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.371468][ T1045] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 138.376264][ T1045] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.384298][ T1045] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.389769][ T1045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.396476][ T8447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.427157][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 138.431418][ T55] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.435594][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.450767][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.453935][ T55] pvrusb2: ********** [ 138.455739][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.460465][ T55] pvrusb2: Important functionality might not be entirely working. [ 138.464137][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.469093][ T55] pvrusb2: ********** [ 138.487229][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 138.493148][ T5831] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.496727][ T5831] usb 8-1: config 0 has no interface number 0 [ 138.499560][ T5831] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.504333][ T5831] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.509461][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.516348][ T5831] usb 8-1: config 0 descriptor?? [ 138.528565][ T5831] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 138.608759][ T1045] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input11 [ 138.613498][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'. [ 138.651848][ T2521] pvrusb2: Invalid write control endpoint [ 138.711007][ T2521] pvrusb2: Invalid write control endpoint [ 138.713704][ T2521] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 138.722857][ T2521] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 138.726774][ T2521] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 138.731217][ T2521] pvrusb2: Device being rendered inoperable [ 138.737498][ T2521] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 138.742031][ T2521] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 138.755951][ T2521] pvrusb2: Attached sub-driver cx25840 [ 138.759438][ T2521] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 138.759457][ T34] usb 8-1: USB disconnect, device number 11 [ 138.766422][ T2521] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 138.798032][ T8509] netlink: 'syz.3.784': attribute type 21 has an invalid length. [ 138.800502][ T8509] netlink: 'syz.3.784': attribute type 7 has an invalid length. [ 138.813820][ T55] usb 9-1: USB disconnect, device number 5 [ 138.813841][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 138.819139][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.833451][ T8447] xt_recent: Unsupported userspace flags (000000b2) [ 138.850582][ T8482] pvrusb2: Attempted to execute control transfer when device not ok [ 138.869645][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 138.877251][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 138.877279][ T5749] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 138.877394][ T8511] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 138.898834][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 138.919899][ T5823] usb 7-1: USB disconnect, device number 8 [ 139.837221][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 139.988552][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 139.991793][ T10] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 139.994691][ T10] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 139.998058][ T10] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 140.001082][ T10] usb 7-1: config 250 has no interface number 0 [ 140.003305][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 140.007173][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 140.010639][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 140.014603][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 140.018223][ T10] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 140.022606][ T10] usb 7-1: config 250 interface 228 has no altsetting 0 [ 140.026347][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 140.029603][ T10] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 140.032912][ T10] usb 7-1: Product: syz [ 140.034724][ T10] usb 7-1: SerialNumber: syz [ 140.045913][ T10] hub 7-1:250.228: bad descriptor, ignoring hub [ 140.048806][ T10] hub 7-1:250.228: probe with driver hub failed with error -5 [ 140.249228][ T10] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 140.624063][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 140.728142][ T8556] openvswitch: netlink: ct_state flags 0001010a unsupported [ 140.752597][ T8558] ------------[ cut here ]------------ [ 140.754406][ T8558] do not call blocking ops when !TASK_RUNNING; state=1 set at [] hpet_read+0x21b/0x6a0 [ 140.759005][ T8558] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#2: syz.1.801/8558 [ 140.762312][ T8558] Modules linked in: [ 140.763698][ T8558] CPU: 2 UID: 0 PID: 8558 Comm: syz.1.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.767288][ T8558] Tainted: [L]=SOFTLOCKUP [ 140.769013][ T8558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.772423][ T8558] RIP: 0010:__might_sleep+0x97/0xc0 [ 140.774085][ T8558] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 1a 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 9d 34 a5 00 eb 9f 89 74 24 04 e8 c2 34 a5 [ 140.780478][ T8558] RSP: 0018:ffffc90004597bc0 EFLAGS: 00010282 [ 140.782448][ T8558] RAX: dffffc0000000000 RBX: ffffffff8c5307a0 RCX: ffffffff85a8f43b SYZFAIL: failed to recv rpc [ 140.784910][ T8558] RDX: ffffffff85a8f43b RSI: 0000000000000001 RDI: ffffffff9125ce30 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.788086][ T8558] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 140.791411][ T8558] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802a984a80 [ 140.794761][ T8558] R13: 0000000000000000 R14: ffff88802d6bb880 R15: ffffed1005530c5e [ 140.798394][ T8558] FS: 00007f9517ad76c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 140.802342][ T8558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.805338][ T8558] CR2: 00007f9517ad6ff8 CR3: 0000000041f16000 CR4: 0000000000352ef0 [ 140.809158][ T8558] DR0: 0000000000000005 DR1: 0000000000000005 DR2: 0000000000040004 [ 140.812460][ T8558] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 140.815557][ T8558] Call Trace: [ 140.816934][ T8558] [ 140.818312][ T8558] __might_fault+0x8b/0x140 [ 140.820265][ T8558] hpet_read+0x56f/0x6a0 [ 140.822053][ T8558] ? __pfx_hpet_read+0x10/0x10 [ 140.824720][ T8558] ? avc_policy_seqno+0x9/0x20 [ 140.826762][ T8558] ? selinux_file_permission+0x8f/0x6d0 [ 140.829139][ T8558] ? __pfx_default_wake_function+0x10/0x10 [ 140.832349][ T8558] ? bpf_lsm_file_permission+0x9/0x10 [ 140.834800][ T8558] ? security_file_permission+0x76/0x210 [ 140.837601][ T8558] ? rw_verify_area+0xce/0x6d0 [ 140.839500][ T8558] ? __pfx_hpet_read+0x10/0x10 [ 140.841039][ T8558] vfs_read+0x1e4/0xb40 [ 140.842364][ T8558] ? __pfx_vfs_read+0x10/0x10 [ 140.844015][ T8558] ? find_held_lock+0x2b/0x80 [ 140.845870][ T8558] ? __fget_files+0x215/0x3d0 [ 140.847948][ T8558] ? __fget_files+0x215/0x3d0 [ 140.849905][ T8558] ? __fget_files+0x21f/0x3d0 [ 140.851838][ T8558] ksys_read+0x12a/0x250 [ 140.853548][ T8558] ? __pfx_ksys_read+0x10/0x10 [ 140.855416][ T8558] ? kcov_ioctl+0x17a/0x750 [ 140.856923][ T8558] do_syscall_64+0x115/0x870 [ 140.858473][ T8558] ? clear_bhb_loop+0x40/0x90 [ 140.859968][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.861866][ T8558] RIP: 0033:0x7f9516b9de99 [ 140.863392][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.870415][ T8558] RSP: 002b:00007f9517ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.873845][ T8558] RAX: ffffffffffffffda RBX: 00007f9516e26090 RCX: 00007f9516b9de99 [ 140.877532][ T8558] RDX: 0000000000002020 RSI: 0000200000000d40 RDI: 0000000000000005 [ 140.881111][ T8558] RBP: 00007f9516c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.884919][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.888375][ T8558] R13: 00007f9516e26128 R14: 00007f9516e26090 R15: 00007ffc906d2838 [ 140.891701][ T8558] [ 140.893042][ T8558] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.895946][ T8558] CPU: 2 UID: 0 PID: 8558 Comm: syz.1.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.900421][ T8558] Tainted: [L]=SOFTLOCKUP [ 140.902273][ T8558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.906511][ T8558] Call Trace: [ 140.907954][ T8558] [ 140.909212][ T8558] dump_stack_lvl+0x100/0x190 [ 140.911186][ T8558] vpanic+0x552/0x970 [ 140.912899][ T8558] ? __pfx_vpanic+0x10/0x10 [ 140.914877][ T8558] panic+0xd1/0xe0 [ 140.916515][ T8558] ? __pfx_panic+0x10/0x10 [ 140.918638][ T8558] check_panic_on_warn.cold+0x19/0x34 [ 140.920937][ T8558] ? __might_sleep+0x94/0xc0 [ 140.922928][ T8558] __warn.cold+0x191/0x318 [ 140.924839][ T8558] __report_bug+0x30f/0x440 [ 140.926820][ T8558] ? __might_sleep+0x94/0xc0 [ 140.928842][ T8558] ? __pfx___report_bug+0x10/0x10 [ 140.931041][ T8558] ? hpet_read+0x21b/0x6a0 [ 140.932948][ T8558] ? hpet_read+0x21b/0x6a0 [ 140.934875][ T8558] ? __lock_acquire+0x49f/0x1a40 [ 140.937016][ T8558] report_bug_entry+0xe1/0x290 [ 140.939055][ T8558] ? __might_sleep+0x97/0xc0 [ 140.941026][ T8558] handle_bug+0x1cd/0x2a0 [ 140.942909][ T8558] exc_invalid_op+0x17/0x50 [ 140.944847][ T8558] asm_exc_invalid_op+0x1a/0x20 [ 140.946938][ T8558] RIP: 0010:__might_sleep+0x97/0xc0 [ 140.949182][ T8558] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 1a 50 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 9d 34 a5 00 eb 9f 89 74 24 04 e8 c2 34 a5 [ 140.956910][ T8558] RSP: 0018:ffffc90004597bc0 EFLAGS: 00010282 [ 140.959395][ T8558] RAX: dffffc0000000000 RBX: ffffffff8c5307a0 RCX: ffffffff85a8f43b [ 140.962569][ T8558] RDX: ffffffff85a8f43b RSI: 0000000000000001 RDI: ffffffff9125ce30 [ 140.965658][ T8558] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 140.968821][ T8558] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802a984a80 [ 140.972044][ T8558] R13: 0000000000000000 R14: ffff88802d6bb880 R15: ffffed1005530c5e [ 140.975328][ T8558] ? hpet_read+0x21b/0x6a0 [ 140.977203][ T8558] ? hpet_read+0x21b/0x6a0 [ 140.979087][ T8558] __might_fault+0x8b/0x140 [ 140.981004][ T8558] hpet_read+0x56f/0x6a0 [ 140.982773][ T8558] ? __pfx_hpet_read+0x10/0x10 [ 140.984776][ T8558] ? avc_policy_seqno+0x9/0x20 [ 140.986759][ T8558] ? selinux_file_permission+0x8f/0x6d0 [ 140.989065][ T8558] ? __pfx_default_wake_function+0x10/0x10 [ 140.991277][ T8558] ? bpf_lsm_file_permission+0x9/0x10 [ 140.992814][ T8558] ? security_file_permission+0x76/0x210 [ 140.994510][ T8558] ? rw_verify_area+0xce/0x6d0 [ 140.996336][ T8558] ? __pfx_hpet_read+0x10/0x10 [ 140.998321][ T8558] vfs_read+0x1e4/0xb40 [ 141.000121][ T8558] ? __pfx_vfs_read+0x10/0x10 [ 141.002086][ T8558] ? find_held_lock+0x2b/0x80 [ 141.004140][ T8558] ? __fget_files+0x215/0x3d0 [ 141.006170][ T8558] ? __fget_files+0x215/0x3d0 [ 141.008185][ T8558] ? __fget_files+0x21f/0x3d0 [ 141.010196][ T8558] ksys_read+0x12a/0x250 [ 141.012052][ T8558] ? __pfx_ksys_read+0x10/0x10 [ 141.014140][ T8558] ? kcov_ioctl+0x17a/0x750 [ 141.016137][ T8558] do_syscall_64+0x115/0x870 [ 141.018149][ T8558] ? clear_bhb_loop+0x40/0x90 [ 141.020236][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.022792][ T8558] RIP: 0033:0x7f9516b9de99 [ 141.024735][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.032489][ T8558] RSP: 002b:00007f9517ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.036013][ T8558] RAX: ffffffffffffffda RBX: 00007f9516e26090 RCX: 00007f9516b9de99 [ 141.039398][ T8558] RDX: 0000000000002020 RSI: 0000200000000d40 RDI: 0000000000000005 [ 141.042751][ T8558] RBP: 00007f9516c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 141.046075][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.049302][ T8558] R13: 00007f9516e26128 R14: 00007f9516e26090 R15: 00007ffc906d2838 [ 141.052677][ T8558] [ 141.054724][ T8558] Kernel Offset: disabled [ 141.056568][ T8558] Rebooting in 86400 seconds..