last executing test programs: 6.859867443s ago: executing program 1 (id=691): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 6.85688755s ago: executing program 1 (id=693): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24045804}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x40011) r6 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f00000002c0)=""/197) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x140}}], 0x30, 0x4}, 0x40) 6.760011741s ago: executing program 1 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) 6.689994146s ago: executing program 1 (id=695): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000240), 0x9, 0x100) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6.590335104s ago: executing program 1 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b21008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 6.310085156s ago: executing program 1 (id=697): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/58, 0x3a) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x7f, 0xd, 0x23, "7240a28927d58ede5e98123e337fefc301de3245645f4eca72aa11edd1f9610b6e9f86f89172423352c38e991f561501c7b636ccda1dc46d68d77c8d", 0x35, "3f713e86c51f49a70f557043c3fd2bcdf92bb7bc3ed522bee6be2892e1c3108ccfc71f97e6882baba07dfe2904626716799c03c98f04e5645f9b4f88", 0x50}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000180)=""/94) statx(r0, &(0x7f0000000200)='./file0\x00', 0x800, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000480)={0x64, 0x7d, 0x2, {{0x0, 0x3c, 0x4, 0x81, {0x0, 0x4, 0x2}, 0xc000000, 0x2, 0x8, 0x5, 0x1, ',', 0x5, ':/:\x8c*', 0x3, '%\xac-'}, 0x13, '/dev/ocfs2_control\x00', r2, r3, r4}}, 0x64) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000500)=0x1) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(r0, &(0x7f0000002580)={0xa0, 0x19, 0x2, {0x1, {0x0, 0x4, 0x3}, 0x43, r4, r5, 0x1, 0x5, 0x1000, 0x3, 0x9, 0xfd26, 0x7, 0x81, 0x4, 0x9, 0x8, 0x9, 0x7, 0x8001, 0xf27}}, 0xa0) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000004fc0)={0xfff, 0xd5, {r6}, {r2}}) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000005000)=0x0) (async, rerun: 64) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005040), 0x2, 0x0) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005080)={0x0}, &(0x7f00000050c0)=0xc) sendmsg$netlink(r0, &(0x7f0000005200)={&(0x7f0000002640)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000004f80)=[{&(0x7f0000002680)={0x1458, 0x37, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x17d, 0x116, 0x0, 0x1, [@typed={0x7e, 0x64, 0x0, 0x0, @binary="23cee8a54d87492a3c4363fcfa0b08fbec63772b581322abc27edbbb5e91f770ed4cd43323bd6567d3e42e9a2599033be0b32adc66a33a8d482b2bcaf50ff6a41960221b5a2a10466f1646e979469591cbc1b096c2e315e4592398a7eca1d0b0ad452d66ed3ac064a006fda71f0a90beded2bc3fb2cf4ba5e95e"}, @typed={0x8, 0x122, 0x0, 0x0, @pid=r6}, @generic="fffced694ae1b75dc169362dc9e2f2d7bae3842cd7dba5f9a93c62cb87c6ef3f6062108981b545aa3105e4efbdc63ecfba3938a031d1e3b52f82310b23a8542787fef7de676a6c5fec4ff1b74c9c9e4d827d6836e65fc914518636b6c0ed5a5c24a0c725a44ea3ee7e218de0eb7a5f06b14503bec8d91d3233d84c5ab8f49bee91ab7cf04c9d2af4f786911affa817bfeb20a3ebb46edcbd1e3907370c692931035b2f252281d21212f8f2f9f6c3ace91cda6e6f83a494f9d1d725a8832606fb3f64661978ac4f9e49775fdef458b525f23511bc0dac05f6ae20673ac80a027cbc0e1e4036c8ebf4213215b5095c9f4d3a"]}, @nested={0x2b5, 0x32, 0x0, 0x1, [@typed={0xaf, 0x9, 0x0, 0x0, @binary="afae6dc3fefbff2a17226197f9b6edc8f8b00ab0ea9e62c9e8a42958dbc24940b39e415e3c1a367c85a058806eeecfc6f01f0f7aa128b90bcef7475e191a457cc1c8ea44a95b989b26732d039f36a559c77dec49f5a78c5722bd024f40cbadfd9104e224ef162f017f4a060453d5f6fd1f27184217b2af1988a87dea2c83b9891466129d24e260ff18b13a5e223b11926f79eaac4ce4e83952d72720d87207ac121c95c64c42ffb4321643"}, @nested={0x4, 0x166}, @generic="48766ccc5382888fa25ddca949aa52724b426c830d3914e0d33be9686388a69055879d3e25392275f1256563108d246ef568333806f07599dfb2387d6b0ae5782c4c98253fd9f9229c2cffb202489f70fb", @generic="719182a7581e97d203c33148a7fb1b2ee6eaca148aa45f7107afba16ba94057f656d8c04257853bb18f9329ecf23668b59d670f9f0d6fc76add0ea1a80cb9f6dc0c4", @typed={0x8, 0xa2, 0x0, 0x0, @pid=r6}, @generic="f9651bc8929d3df267f3ad70cc74abb050eaf4119c35cdda6051e2488392ceb82aaff64f2c0eb19b650a7c8c4ccc5f05002b156fd8b0e0f2f652e33344b24ea45e5ed6995f620836bc5decf190a3a3b038d0537078e63de6b389a7e35dc12d9190a6e6093c125a5effff79dc3f88d0a0d03b6c72f3592b6f2ddc00954117a7879d90de9dbfb1ce428068479873f7777609801e64b9141c54e15fe51d8446314e432f8dfc53529465a43f139b497c9efc79a77d6454980d34a6a23fb504238e81232b6c10b1fe97ebf4080b", @generic="54923ac46f20173452ba72051411d7ee4eaaec0c1d13d9081673360387b3b95fff7f8b000b522b7a4edb84c3d3ad1e54725a7fd61a1e3011483b324b0fd8966ad67a23d5286408463c7e51a30de3ed51140331bed9c3d78c54dc5502799c54528a151743c93bccedd69be00e66152773408c08a062bbc99f2ecd3cecf9708a666f51f39f298496f167eb5bab741cf2", @nested={0x4, 0x25}, @nested={0x4, 0x43}]}, @typed={0x8, 0x11f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r4}, @generic="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"]}, 0x1458}, {&(0x7f0000003b00)={0x248, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x161, 0x0, 0x0, @pid=r6}, @typed={0x5, 0x159, 0x0, 0x0, @str=','}, @nested={0x1f3, 0xba, 0x0, 0x1, [@generic="cb21ece0ebd69779c578abedfb74613de879833a0e01ef4892998a5e45f582cf561175da8f86689071b12b2f306077dc20379f6b38502d60a452d6dbe54ed849e4b3bf8cbc00147215646faf9fb585a80e6fb46125626aa37ae26870b79eff7c", @generic="94af83b638cc96c3606f0f6582050c5f47988d3599261d99b9fc4cd465b6390b4361bd76fdb06466241e81cb4a2ea9c85caf1bdc3e173c1e2947a1876bde56f925b97bb11d3d9da1ac41cf53bc28fbbfe2ca2f7add53f4fa6e60fb5a55047cc2764a56b0f217b1e719025137b04bc769ac38edc29131e213b678e2a932df49ec282387693d4c57b5f4951cff1726d315599a22935da810a559b8661df1f591e26f25676387860de2588301120f98baab272e422c05a9dcf966ac0ed8d93d65dad28333f20958b752f9326ad882a50a77ca889cc55d2573f40cb6a2b29dbbdd4226649a4526989f", @typed={0x9f, 0x25, 0x0, 0x0, @binary="a0f7f76c161c2ad0c607790a0316b8bcd9a9636f0b985f2d00388ee817597c8a66e32583c6614fffd787388a13451e01b83a5b4d840af416de8257b0c7747300327abf46f83f1f801ec076da2d4c82eee272ac552376afb69cb08313abcd39a30fdadad0ac87510d13aa454fcdbc047c4eaf8a622f8da463359073157fb6964f8d99bb395de54284f7a4bb894ede2b7e6eacd0db86cf4a72cee860"}, @nested={0x4, 0xec}, @nested={0x4, 0x15b}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x135, 0x0, 0x0, @u32=0x10001}, @typed={0x11, 0x7e, 0x0, 0x0, @str='/dev/video36\x00'}, @typed={0x7, 0x13c, 0x0, 0x0, @str='%\xac-'}, @typed={0x8, 0x9a, 0x0, 0x0, @pid=r6}]}, 0x248}, {&(0x7f0000003d80)={0x11e4, 0x34, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x8, 0xdc, 0x0, 0x1, [@nested={0x4, 0xfd}]}, @generic="c236173d8375877347df2ef698f4a5282c302b3b53aeed915d5515c5db14ae3311b66ba75a51f0dbdc719d301b96b68f19b7a49765493a1675cc231c2bda79c8ebc97e59e0730d4c3efd215e7b670ece264d83e5fdf908bd86e8ef04ce70d1dd", @nested={0x1045, 0x152, 0x0, 0x1, [@nested={0x4, 0x76}, @nested={0x4, 0x58}, @typed={0xc, 0x152, 0x0, 0x0, @u64=0x7}, @generic="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", @typed={0x8, 0x123, 0x0, 0x0, @pid=r6}, @generic="1332429ed6796ef8eae09c7d6e8db1d59eaba85b9bd5e72cb53628c885", @nested={0x4, 0xd2}, @nested={0x4, 0xbb}]}, @typed={0xb, 0x97, 0x0, 0x0, @binary="48e74ddcab0744"}, @nested={0x30, 0x113, 0x0, 0x1, [@generic="8014360e2f0cb0c4ef68910f3c46d2a277e80d7b1bea176fb416e1e7bee9c06397eab3ed153ff40dcd699589", @generic]}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r7}, @nested={0xdf, 0x6d, 0x0, 0x1, [@generic="4aac4b96b3dc0f161a89f7c289a01bf7574debcc71ee18a9f83c7a2741600c7cc937a8932cc2549e335960760df470c8a7c681c83e7c5019c1b733575e26b8e3d670c236c4b42a3e5a4134bacfac578de0adfa02abd8a35dd2e507d3c89075aa684400651a9a15e5b49a363265277639506b82f1b64b4ce77458204fcf7328ecb0fe60af64d54cc1de6e1e004ff284a033f6f452af29a598c4767726b858fd2e4f3748444f71ca41d414c382f900f9b3419e1113480eb68270f5babc664b910276c57a552c37e032a5f002f2422f4d012d7f23", @typed={0x8, 0x154, 0x0, 0x0, @uid=r2}]}]}, 0x11e4}], 0x3, &(0x7f0000005100)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r3}}}, @rights={{0x24, 0x1, 0x1, [r7, r7, r1, r10, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, r4, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd8, 0x16ba364c6300c61e}, 0xc4) ioctl$SNDCTL_DSP_POST(r10, 0x5008, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005280), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x14, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (async, rerun: 64) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000005380)={0x8, 0x0, [{0xb54, 0x0, 0x5}, {0x885, 0x0, 0x7}, {0xb9f, 0x0, 0x10000}, {0x680, 0x0, 0xa053}, {0xa15, 0x0, 0x5}, {0x395, 0x0, 0x7f}, {0x813, 0x0, 0x7}, {0xb92, 0x0, 0x700000000}]}) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000005440)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000054c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000005580)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x1c, r12, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) r14 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000055c0), 0x80500, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000005600)={0x0, 0x0, 0x6}) (rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r14, 0xc0086444, &(0x7f0000005640)={r15}) (async) read$FUSE(r10, &(0x7f0000005680)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000007700)={0x1, &(0x7f00000076c0)=[{0x3, 0x1b, 0x9, 0x1}]}) 6.219895987s ago: executing program 32 (id=697): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/58, 0x3a) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x7f, 0xd, 0x23, "7240a28927d58ede5e98123e337fefc301de3245645f4eca72aa11edd1f9610b6e9f86f89172423352c38e991f561501c7b636ccda1dc46d68d77c8d", 0x35, "3f713e86c51f49a70f557043c3fd2bcdf92bb7bc3ed522bee6be2892e1c3108ccfc71f97e6882baba07dfe2904626716799c03c98f04e5645f9b4f88", 0x50}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000180)=""/94) statx(r0, &(0x7f0000000200)='./file0\x00', 0x800, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000480)={0x64, 0x7d, 0x2, {{0x0, 0x3c, 0x4, 0x81, {0x0, 0x4, 0x2}, 0xc000000, 0x2, 0x8, 0x5, 0x1, ',', 0x5, ':/:\x8c*', 0x3, '%\xac-'}, 0x13, '/dev/ocfs2_control\x00', r2, r3, r4}}, 0x64) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000500)=0x1) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(r0, &(0x7f0000002580)={0xa0, 0x19, 0x2, {0x1, {0x0, 0x4, 0x3}, 0x43, r4, r5, 0x1, 0x5, 0x1000, 0x3, 0x9, 0xfd26, 0x7, 0x81, 0x4, 0x9, 0x8, 0x9, 0x7, 0x8001, 0xf27}}, 0xa0) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000004fc0)={0xfff, 0xd5, {r6}, {r2}}) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000005000)=0x0) (async, rerun: 64) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005040), 0x2, 0x0) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005080)={0x0}, &(0x7f00000050c0)=0xc) sendmsg$netlink(r0, &(0x7f0000005200)={&(0x7f0000002640)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000004f80)=[{&(0x7f0000002680)={0x1458, 0x37, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x17d, 0x116, 0x0, 0x1, [@typed={0x7e, 0x64, 0x0, 0x0, @binary="23cee8a54d87492a3c4363fcfa0b08fbec63772b581322abc27edbbb5e91f770ed4cd43323bd6567d3e42e9a2599033be0b32adc66a33a8d482b2bcaf50ff6a41960221b5a2a10466f1646e979469591cbc1b096c2e315e4592398a7eca1d0b0ad452d66ed3ac064a006fda71f0a90beded2bc3fb2cf4ba5e95e"}, @typed={0x8, 0x122, 0x0, 0x0, @pid=r6}, @generic="fffced694ae1b75dc169362dc9e2f2d7bae3842cd7dba5f9a93c62cb87c6ef3f6062108981b545aa3105e4efbdc63ecfba3938a031d1e3b52f82310b23a8542787fef7de676a6c5fec4ff1b74c9c9e4d827d6836e65fc914518636b6c0ed5a5c24a0c725a44ea3ee7e218de0eb7a5f06b14503bec8d91d3233d84c5ab8f49bee91ab7cf04c9d2af4f786911affa817bfeb20a3ebb46edcbd1e3907370c692931035b2f252281d21212f8f2f9f6c3ace91cda6e6f83a494f9d1d725a8832606fb3f64661978ac4f9e49775fdef458b525f23511bc0dac05f6ae20673ac80a027cbc0e1e4036c8ebf4213215b5095c9f4d3a"]}, @nested={0x2b5, 0x32, 0x0, 0x1, [@typed={0xaf, 0x9, 0x0, 0x0, @binary="afae6dc3fefbff2a17226197f9b6edc8f8b00ab0ea9e62c9e8a42958dbc24940b39e415e3c1a367c85a058806eeecfc6f01f0f7aa128b90bcef7475e191a457cc1c8ea44a95b989b26732d039f36a559c77dec49f5a78c5722bd024f40cbadfd9104e224ef162f017f4a060453d5f6fd1f27184217b2af1988a87dea2c83b9891466129d24e260ff18b13a5e223b11926f79eaac4ce4e83952d72720d87207ac121c95c64c42ffb4321643"}, @nested={0x4, 0x166}, @generic="48766ccc5382888fa25ddca949aa52724b426c830d3914e0d33be9686388a69055879d3e25392275f1256563108d246ef568333806f07599dfb2387d6b0ae5782c4c98253fd9f9229c2cffb202489f70fb", @generic="719182a7581e97d203c33148a7fb1b2ee6eaca148aa45f7107afba16ba94057f656d8c04257853bb18f9329ecf23668b59d670f9f0d6fc76add0ea1a80cb9f6dc0c4", @typed={0x8, 0xa2, 0x0, 0x0, @pid=r6}, @generic="f9651bc8929d3df267f3ad70cc74abb050eaf4119c35cdda6051e2488392ceb82aaff64f2c0eb19b650a7c8c4ccc5f05002b156fd8b0e0f2f652e33344b24ea45e5ed6995f620836bc5decf190a3a3b038d0537078e63de6b389a7e35dc12d9190a6e6093c125a5effff79dc3f88d0a0d03b6c72f3592b6f2ddc00954117a7879d90de9dbfb1ce428068479873f7777609801e64b9141c54e15fe51d8446314e432f8dfc53529465a43f139b497c9efc79a77d6454980d34a6a23fb504238e81232b6c10b1fe97ebf4080b", @generic="54923ac46f20173452ba72051411d7ee4eaaec0c1d13d9081673360387b3b95fff7f8b000b522b7a4edb84c3d3ad1e54725a7fd61a1e3011483b324b0fd8966ad67a23d5286408463c7e51a30de3ed51140331bed9c3d78c54dc5502799c54528a151743c93bccedd69be00e66152773408c08a062bbc99f2ecd3cecf9708a666f51f39f298496f167eb5bab741cf2", @nested={0x4, 0x25}, @nested={0x4, 0x43}]}, @typed={0x8, 0x11f, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r4}, @generic="8e7ea59bee82a23efbe28818e2ff8cda957704681fa617ee34e27077f2c6484eebf2c0d1d8a5474887767a9f6d861727b381f4aeef23d00d6afa30b0b6a0e2b7a8bad7534f3b422f0ce5c649555a588f653969acff48f06d58a0b3b26c61471efcfcee3a6debdf5e2b1cf145f157368cc77d163a5ff8320547d6b33808728534398fbd6987aba90b55c98637a86a0e35cf8efd2a63e62a4d4ff25098caff5b0031c494db39ae9b738e03a365205b1cf039087b54fa228e3eb2b97ca1dc3169b60f67bc21d4e3cedf091c40909dc03f94a99c427f3b726ea70a13bfe9cb9e935a720c56af44ecde7878b12fa63a5d3a3614624f2fe656c96700ad059b1d384d2d7d0e624852088ac2f5be3ceaf056458c3cfef68bd9d4352be5de3f4946748f33c19eb417c37da616681021f948929683bb5ee619fc48d324481db89247f423a7055140a57d31a43954036d28282caa62d60d73ec70a41ca114296a0d7ba39d881d628cbb4064ec2f80f4e9305069daee9c60508647a292829de12014d4727a61f8d82e14d14aec3b119229438c9bac4aa359a6f1bc411eaf1f67a1748552571a53e3670540d71c2ed502acb0974a8b5b0b83ef0e2915325f463b22f7d87bdaf30a58398d9d3554da4e8a4fe77857553ede7370025d523472eced0991a5a1f1fd6e6d73cfd418c87021a6671274e1b5d723aed84486dfccedde8dd8a2e7c765da99d02bef5eb392b56170386b0b6e2cec5702a553af3d63363611b04cd99a0cd032866c8e992ffdff673cdb25b2f1f04c5d623205903179caf842ec7933539189fa3a634aeb11644de531ec4c81169b99aaeb9a1272e13a71e59b501436e41538e07ba9616e12e217849d424c0c077e320022cbac6257532011f16cdcf698b7c6e15c32292b8feb1af818808d9beb992ee3ed861e37a25857354243e0e46e5255047badf62dfe712b94e6b0f6cedee2bd53bc8f674e304474ce89b51911df688758f9bd5dfa09735e7b3781134f0e07a27020929885d03b9bb001c25859fe8b8ecd9bddf7ae075e893c7324b1fcb3d7c18b6b97d7b5ff661763713f3112cfe1e79bb88912f221525bf182f3f9fe04b79fe315252611edf2446fde12149d74243b54142379367e1c6d5276a24e0c182eb66d7405a80107d707122626a6c4464b6259b41276f16fa9f27b27e926d66e89a6ec496a49a0b57964faebcd0985ce4419a80c33ec1afda330302186406a7b715237d7078236a33ec8f6c4e788c19c3a40d1b4398e2a086dbb3133eab46f8c1c7324c8752e71ffb33337b1aac882bf939f7f23920350dcdcac5aa36a6c0c8ed0296277671e9a49a08554fef32c9a6c66001fe078d0cb3a60c469b8b90582ecce04e8a97f05008c8b113f9c4c5585ca70007b9f3464e3720b4c2eda454ff306482fe8748d9939ccb67df1dde7aa0453cd2aa5f371d8aed12d3b190f21d77b9d2bec6b8bc7b22725809996137acb74d9f7c1f81ca2c25b65c740cfbfc58a6bf2b203afc41680cc6af0095a5c0847f0fe159c23e143dac1c978f8ae79389b887a1d6f1131f89856be5d878054cad0ee3c4923771738c8fd336bdbd43257d877b2bb9c1b4e60e32a7e33da42e16e5fdb774ca3d8a365a0b234a3a504d2ea9a79b1e998a303b9c9c0a3d266fd1dad1e07011616ae88136140d54c986523fd2cde1e593e8b1a3605e58b4ec248aab7a15022c6b0a40cd9d6317d612523974b0033189e6722ea8cdb271e5b72b5d594af9e3ab2af611ad2ab94eba78429c02ae8411ef853ed02bd6c073bca408e71ba29bd465c4dab966bba98aaf84b63a2d3b688e71121e7355abf08f246fbc4ce2833b6e42583e629e9c1bb9b83fcd11726c9d97b7b67e28bb528929601774291171f89f781809f8cbbc5872af42c7d7e0e05fbc7c0a108bbb8f8d928e0db6aedab4a6a6962b9279a44ebb9a9194e0a734dc8d4a5dc2c389c3d4ab5ef78dab9e646f44d9cee0fb03fc8966147eb8651e4307b770a2dba18de4c67a8893bb5cc2b78afe0c514424cb57aab3869964e8ee643848c91a8026018d2b416b93a4684332d83fb2337024abe07500289bb7ee4cfeb221dc174fe87ac8e107a6f4557ea0a200c9c6e59701b5b79b6e394da8ca5a08a043cbaaed778d74944aa471fde35d488aca7d4be78777f060e48e4e824e4f9dec7b78e6fbec513b5050438304c4a57ce6d22efe73001600526fa68b7afb47ed4ab1f84e90e2d662ee94e47acc3981d6dab934a7bf60616ef999b9ee32f5287e10a25d2276af52d25f5923ea8e60a64291358c9f26595799367ca0664faea8cc526e89656cd44ee4c6c103a42b061843ec2a1cb67d449db5f99b07c3047997e71b2e700a09dd3c7bf9401515145e35a2c20798da6509b5cb80d302082ea2f04c60029fe342574454dd16996f116a358b632c0d5b41f1a99e0cfe782950f79db0ca435b6bf5350aba232cf3664fd60522ec7996a654da2ed4d41441d154a29d4a49abe8506fc74d524395ab6fbd7a953be920652d15c5f8b38891af6e08502330067ca01124993ad84eb9996a630cf9b9a2fe97e3f14cb9fe9e683655e53e495570186c156091b8e3b2c4556db6d85482d73e6d2344a290011c3d4f5ccd584c206aeca8c9d68f8c483f7d565df71a10cb19e50811fd20160e7bd9f8a890c88dd1bb2fa69ead99aef389b59100228c913bf7b0b0e1a3cf62eb00807933713c8874d183e1d32495fff03f12fb1f472d9b09dfba968803f298f8c47bff67ecec4f25f27e73a2faf0b5354923611fbecd8da4f316a8bb75cc0b930077a83e4fb89f1218bd89d01edbc58e396bf5f5c4ef6bfcf594123c66f9318410379babdb5e290cda6d1c6247d2bee54f5cb80d3e176a284855fd3c853b2ef805da3f10589beedd74b24ae553174323f4f43543d64b82fb7fb8b02035d089bfe877554158affbbbeb8f05e7dc7c05aaf6356c9bd485d04a2f370df31726495451fc11fe3800e104d692e94a9ad217244bb0bf4d302a90d6eae83880514e8fed2cbdbbd8ac36b80d3692cc040e5e5b666ecf6cfd7d463564b3da1e19aec3a9f16320411c0b6a79dbede00f41c47a22517fe50b357cf313533e162b91439604f989e9012e146fababbc3cdd1d3756c4f841e8667dc8833ee05b8f1d99fc4289eba1f989a0be6799d0138c8c059fc4b0d254142bd33467fc8b3c3563f724bc81bf19313efa6f6cd6772b759e1c19a3652ad4355cb00a00f0eb047337817bfd9e4fc85154d6a02e63da3ad8394f93c9800c0eaf39407a8e275209820d8cd70ca550227d1d864b63fc4d4ecb24a565408aacdcdbdd95275dd2e82572256ab1fb40d9bf4816b13e71d029e617976dca64889cea0d5bcf78cd4cda253bcfff009395afc5eb2ec79d635aa7539af96d299c26dea6b6281ee595f06afbde86cd40b84ce9ce9515523bb6abb58d2fff8eab67a76cc5b88df7f45ffd410a5b1343e4547b4e8ecf41c88db9137e4fd6e00220dfde4466d046f848353ab590c45eda3d4d6540c24a8107365664ea0ff22dbb33ab4603a142f9bc3d4f938180c46e2fd4f2bfb152cd579d1fccdcde0f1e08989d14acb0d2144076280a76b621c20da21ea29c29a6d3ad49ac4926f369881632723132e763296113a43dc366e0e393bf0baf5c9073b6ed88f91990300f83522c58ac8aeecc1862e275a760f1e151078bae96d4aae47877b8e3406abd4531e46d3d60d09036674544c8a8aa187fe3541c98e95c9e67291da45b57aab18c6011231653b79a940b3ef503105eca5003bb2f4db34c0f45fc0780cee151dbea01b653394653332f3b20f9e80c00daec8b2316b4f4bc0958d7b6b608d564c3e3f395ae25fb88c6ff3e0c81f32e800e5688673150b0cd0b0222b8e33f003271485cc85d2888a3c4002f47fe4d7bbb28b42e1bcc8eedacb933f26ef526a72b8171900622aa07442fa66df2c48023201af43abf5c2ea21e36a9d34264e5c3a622e30edf3508d39aee120d5175ccdb29827277121284fc2ce4d0fcca2f7b3e0dd6e37cf93383bc71a0a4af8a21e0f594dc65638a76d8da5ba41ffb12d24f4c1e8c678f7d112f03c1a8e0412871b9e43b6f308cb3605adbb0a8f19b4df5733c72e4f0a922f7e628f55b3da069883272a9b44399fcf82fcbb3ea07b1817a690f6d9d9584a9107fc86018db23812eeea1d9775e0f6c684e8a20127b45ec6f6bb825f6e283f8ed7b3d81a606b4a73f8355bf8a0fb3e2a631bbab4ea22e0599e54dd5d3995fe580cd778f63b12a31ae892f7b2e4fcf2a091565727269257173a4e9214848b3acc734265a6261c1fa535513f835dc84e3ea872545d2fee836807da3a17fe1d43ce02c0ce68516e0db9a9a208936f731d90c726e246d28931497cc31b52974902255cdcaffce37dab8f77f0ecf9e9b419cce26337dd47dfc4c99eecdd3a3ea7dfc279b859b2dc860714adcb5f2405e75218bc3cb3d688c9d8ac4cae0d794e756bf25919dc323c262aef223369353c894683e9732b969022b396291c2b2a93795c65594baaa70026aa40711da014eee9d1047b74473448152ec746f495f1eb9427ca9d91f1a5679c09ab51815d095da46a081d6c7cbf8cf1468f2873e073bfa10d70909f9463f59d12308ba341825d7548f23440976d56fb8bb008fdb0b552ff612535f78a8a1ad9a1f598fb5b41dc36bca61bbe03fa34a2887f338b9e7dc29723309e61fec45110b7a29bf0da1f7f849158d90e907f8a7cfc40a9adc91c193bf9ef1952622249c60815203875a7957906cb1436a7433c096cfdfae9a90412ea17446c57a63143270c0cccd1ed8c7dea9ca1ac9b9bc35011ad5671e72e8e54f2daa2a6f5ea94f75de0357aff4635a0c09693421be72a4109c822a20211d76c0b1c7ebeb08e36e189c4d1a6836af281cb21caf3ff05eca7b253ce343306678ce6bbe3f5b78fd5385a9d4a668aab88fab7ca2d77599c81be1c7c60de18afad14f0d3e86aacc23099938ac9b7530e24ad5e718f6c4bdd34df0db5b8c1817c1bdba8074fefba4225208f0e799a2595269649c6e60dd7f8b23f799f98b11b5aca6a1cc59359f4d963667e1581b48e833e7901c1874b5816e9e6316a55f7784e14b57edd9e2f5205cc922e96e5d3a15fad190bdc8a46717a88b5a0de4364b34cfa32cf46790e79dcce5f5bafa14e396c06cc6029c0b7c0b5d620c69013e706e8eca9c1b89e627b03ec325eca56f8797b9d017283a2c8883bbd1e29a65df89552de7fa3e6f270f118caa7ec9940128ffcfb8c86d7ffe2f58dd515a55363be83bda999608d9a824cb2e273aec6019a94570b4edfff7720a98e179f1107eaf87403fafd66aa2346548bd8a7e80b9e94484eeb375b73bd5b964353524d29b3e6e37ea29e09c4cbdb17f3dd5b894e26d562966b05acad82c337ee8a3a4e57556e2f1781bbbe136477ff7c604e4825f11a0f25b86ed424e200d6b36555ad0d3ef4950243e086715226dfbc0b87f862f5f938fbac89fd7111dec7bf5cc81dde9fe28457b2ad7b301181d0fb94615796763fbff42930ee76623811741071e7dbe22decb62f9eef90c721b58506e6d7682b04c12667713a1a92adf2fa8d692f9f7404c19594d9fb629df52bab8484263ec7956e3de758856efb29183554d414e99329bc930ee6a4cb44578927d1fd22b21f34ac0f3a9335023a351e1002f3200537e8c822acfe2981a56d0a3d86747f4681e93fa9a3bb94faec3e2e7ecce2700aada1a620bbf753da326deacc25dc171fcf3751d5006dbfd3b7cae0"]}, 0x1458}, {&(0x7f0000003b00)={0x248, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x161, 0x0, 0x0, @pid=r6}, @typed={0x5, 0x159, 0x0, 0x0, @str=','}, @nested={0x1f3, 0xba, 0x0, 0x1, [@generic="cb21ece0ebd69779c578abedfb74613de879833a0e01ef4892998a5e45f582cf561175da8f86689071b12b2f306077dc20379f6b38502d60a452d6dbe54ed849e4b3bf8cbc00147215646faf9fb585a80e6fb46125626aa37ae26870b79eff7c", @generic="94af83b638cc96c3606f0f6582050c5f47988d3599261d99b9fc4cd465b6390b4361bd76fdb06466241e81cb4a2ea9c85caf1bdc3e173c1e2947a1876bde56f925b97bb11d3d9da1ac41cf53bc28fbbfe2ca2f7add53f4fa6e60fb5a55047cc2764a56b0f217b1e719025137b04bc769ac38edc29131e213b678e2a932df49ec282387693d4c57b5f4951cff1726d315599a22935da810a559b8661df1f591e26f25676387860de2588301120f98baab272e422c05a9dcf966ac0ed8d93d65dad28333f20958b752f9326ad882a50a77ca889cc55d2573f40cb6a2b29dbbdd4226649a4526989f", @typed={0x9f, 0x25, 0x0, 0x0, @binary="a0f7f76c161c2ad0c607790a0316b8bcd9a9636f0b985f2d00388ee817597c8a66e32583c6614fffd787388a13451e01b83a5b4d840af416de8257b0c7747300327abf46f83f1f801ec076da2d4c82eee272ac552376afb69cb08313abcd39a30fdadad0ac87510d13aa454fcdbc047c4eaf8a622f8da463359073157fb6964f8d99bb395de54284f7a4bb894ede2b7e6eacd0db86cf4a72cee860"}, @nested={0x4, 0xec}, @nested={0x4, 0x15b}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x135, 0x0, 0x0, @u32=0x10001}, @typed={0x11, 0x7e, 0x0, 0x0, @str='/dev/video36\x00'}, @typed={0x7, 0x13c, 0x0, 0x0, @str='%\xac-'}, @typed={0x8, 0x9a, 0x0, 0x0, @pid=r6}]}, 0x248}, {&(0x7f0000003d80)={0x11e4, 0x34, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x8, 0xdc, 0x0, 0x1, [@nested={0x4, 0xfd}]}, @generic="c236173d8375877347df2ef698f4a5282c302b3b53aeed915d5515c5db14ae3311b66ba75a51f0dbdc719d301b96b68f19b7a49765493a1675cc231c2bda79c8ebc97e59e0730d4c3efd215e7b670ece264d83e5fdf908bd86e8ef04ce70d1dd", @nested={0x1045, 0x152, 0x0, 0x1, [@nested={0x4, 0x76}, @nested={0x4, 0x58}, @typed={0xc, 0x152, 0x0, 0x0, @u64=0x7}, @generic="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", @typed={0x8, 0x123, 0x0, 0x0, @pid=r6}, @generic="1332429ed6796ef8eae09c7d6e8db1d59eaba85b9bd5e72cb53628c885", @nested={0x4, 0xd2}, @nested={0x4, 0xbb}]}, @typed={0xb, 0x97, 0x0, 0x0, @binary="48e74ddcab0744"}, @nested={0x30, 0x113, 0x0, 0x1, [@generic="8014360e2f0cb0c4ef68910f3c46d2a277e80d7b1bea176fb416e1e7bee9c06397eab3ed153ff40dcd699589", @generic]}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r7}, @nested={0xdf, 0x6d, 0x0, 0x1, [@generic="4aac4b96b3dc0f161a89f7c289a01bf7574debcc71ee18a9f83c7a2741600c7cc937a8932cc2549e335960760df470c8a7c681c83e7c5019c1b733575e26b8e3d670c236c4b42a3e5a4134bacfac578de0adfa02abd8a35dd2e507d3c89075aa684400651a9a15e5b49a363265277639506b82f1b64b4ce77458204fcf7328ecb0fe60af64d54cc1de6e1e004ff284a033f6f452af29a598c4767726b858fd2e4f3748444f71ca41d414c382f900f9b3419e1113480eb68270f5babc664b910276c57a552c37e032a5f002f2422f4d012d7f23", @typed={0x8, 0x154, 0x0, 0x0, @uid=r2}]}]}, 0x11e4}], 0x3, &(0x7f0000005100)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, r3}}}, @rights={{0x24, 0x1, 0x1, [r7, r7, r1, r10, r7]}}, @cred={{0x1c, 0x1, 0x2, {r11, r4, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd8, 0x16ba364c6300c61e}, 0xc4) ioctl$SNDCTL_DSP_POST(r10, 0x5008, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005280), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x14, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (async, rerun: 64) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000005380)={0x8, 0x0, [{0xb54, 0x0, 0x5}, {0x885, 0x0, 0x7}, {0xb9f, 0x0, 0x10000}, {0x680, 0x0, 0xa053}, {0xa15, 0x0, 0x5}, {0x395, 0x0, 0x7f}, {0x813, 0x0, 0x7}, {0xb92, 0x0, 0x700000000}]}) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000005440)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000054c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000005580)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x1c, r12, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) r14 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000055c0), 0x80500, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000005600)={0x0, 0x0, 0x6}) (rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r14, 0xc0086444, &(0x7f0000005640)={r15}) (async) read$FUSE(r10, &(0x7f0000005680)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000007700)={0x1, &(0x7f00000076c0)=[{0x3, 0x1b, 0x9, 0x1}]}) 1.944897395s ago: executing program 0 (id=731): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x10032, 0x0, 0x0) 1.384199427s ago: executing program 3 (id=745): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000240)=0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0", 0x39}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x22048090) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r7, 0x7, 0x4) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='jfs\x00', 0x0, 0x0) 1.258432513s ago: executing program 4 (id=749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x0, '\x00', r2, r3, 0x3, 0x2, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0xa2, &(0x7f00000006c0)=""/162, 0x40e00, 0x8, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x1ff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r1, r1, r6, r7, r1], &(0x7f0000000880), 0x10, 0x10001}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r2, r3, 0x5, 0x4, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="9dbaac999f69835fbc2825cd64f1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.170474491s ago: executing program 4 (id=750): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c05, r2) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c00000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 1.170125103s ago: executing program 3 (id=751): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) 1.087161437s ago: executing program 0 (id=752): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x60, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x240008dd) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000280)=0x84, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x4000, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000004c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r8, 0x513, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x40004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x4000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.086997081s ago: executing program 4 (id=753): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (fail_nth: 5) 1.019387297s ago: executing program 3 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async, rerun: 64) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) (async, rerun: 64) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x705302bd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c8}}, 0x24) (async, rerun: 64) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x44010) 939.527169ms ago: executing program 3 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00118f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 938.929964ms ago: executing program 0 (id=757): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6d54372a9e6f4a1b7d3c92c30a8d877a191d62d854466111cfdf75bda8e16921c4f5bdf18e8fa46161dc579987ca7c5a569d9dbfb85bee1d69fd781666cb43652c9cd50de129f87b878dffd6e66636741ffcae9afc12fdc3cf2a9782c5a0c453f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x3, 0x0, 0x2, 0xbc61}, {0x0, 0x6, 0x6, 0x3ff}, {0x4, 0x10, 0x1, 0x2}, {0x8, 0x8, 0x80, 0x43}, {0x400, 0x80, 0xed, 0xb8a}, {0x7e42, 0x6, 0xff, 0x9}, {0x0, 0xe, 0x9, 0x1}, {0x7ff, 0x0, 0x0, 0xb6d}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz0\x00', 0x8}) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1064400, 0x0, 0x0, 0x0, 0x0, 0x0) 938.514417ms ago: executing program 4 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000000000001c8f00800b0001006d616373656300000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r1) socket$nl_route(0x10, 0x3, 0x0) 860.375902ms ago: executing program 4 (id=760): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x10032, 0x0, 0x0) 789.298664ms ago: executing program 3 (id=762): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) capset(&(0x7f00000024c0)={0x20071026}, &(0x7f0000000040)={0x3ff, 0x200003, 0x0, 0x8, 0xfffc, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) getdents(r1, &(0x7f0000000340)=""/145, 0x91) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1001001fcae074937b45c51605e72edb001700000000000000ff000000850000006d0c000018110000", @ANYRES32, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x7c4a099fdb80a86e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000001c0)=0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0xfffffffffffffffe, r7, {{0x1, 0x2, 0x0, 0x3, 0x3, 0x1, {0x4, 0x8000000000000004, 0x5, 0x7fffffd, 0xfff, 0x6, 0x6, 0xb, 0x3, 0xa000, 0x0, r8, r5, 0x100000}}, {0x0, 0x8}}}, 0xa0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002480), 0x40800, 0x0) sendfile(r9, r9, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 688.959615ms ago: executing program 3 (id=764): r0 = syz_io_uring_setup(0x5286, &(0x7f0000000100)={0x0, 0xc363, 0x1, 0x1, 0x1eb}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x6ca5, &(0x7f0000000300)={0x0, 0xfb4f, 0x80, 0x1, 0xcd30000}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0xfd9c, 0x8, 0x1, 0x114}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a58, 0x80, 0x3, 0x194}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a1f, 0x8, 0x3, 0x3c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1459, 0x80, 0x2, 0x358}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ebd, 0x1, 0x2, 0xa}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001740)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x3f, 0x0, &(0x7f0000000740)=@buf_512="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"}}, &(0x7f00000017c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001800)=@new_dev={0x2, 0x1ea, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1d}}}, &(0x7f00000018c0)) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1, {0x0, r8}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001900)=0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) read$char_usb(r10, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r10) eventfd2(0xb, 0x1) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000001980)={0x2e, 0x18, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, r8, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001940)=@new_dev={0x3, 0xfb3, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x10}}}, &(0x7f0000001a00)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 546.493724ms ago: executing program 0 (id=767): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (fail_nth: 6) 380.162787ms ago: executing program 2 (id=768): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="240000001a005f0400f9f407000904018010200000000009000000000800010000000000", 0x24) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7, 0xff}, 0x0, 0x0, 0x100000000000000, 0x8, 0xffffffff, 0x3, 0x8, 0x400}}], 0x58, 0x40840}, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='adfs\x00', 0x22804c, 0x0) 379.905352ms ago: executing program 0 (id=769): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x1f00, 0x2) 320.14192ms ago: executing program 2 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00218f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 240.107752ms ago: executing program 2 (id=771): dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x3, 0xb4}, @l2cap_cid_signaling={{0xb0}, [@l2cap_move_chan_cfm={{0x10, 0x4b, 0x4}, {0x7ff}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0xe}}, @l2cap_conf_req={{0x4, 0x7, 0x45}, {0x5, 0x40, [@l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x7, 0x0, 0xd6c, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x5, 0x401, 0x73b, 0xf1ee}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x4, 0x68, 0x8, 0x2, 0x560d}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x0, 0x300, 0x0, 0x3}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x23, 0x7, 0x8, 0x6, 0x2}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conf_req={{0x4, 0x5, 0x16}, {0x4, 0x400, [@l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x8, 0x7f, 0x3, 0xe, 0xffff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conf_req={{0x4, 0x4, 0x2d}, {0x5, 0x8, [@l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_ews={0x7, 0x2, 0x10}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0x1ff, 0x7, 0x1ff, 0x8}}, @l2cap_conf_flushto={0x2, 0x2, 0xada}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xe2, 0x97, 0x8, 0x2, 0x6}}]}}, @l2cap_info_req={{0xa, 0x10, 0x2}, {0x6}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x839}}]}}, 0xb9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) 239.844994ms ago: executing program 2 (id=772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000580)={r2, 0xfc00}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r1, 0x6b, "ab7c97d952012ba3c5fc81891d877e4b20b48837abab0ac267cb57979d6c956d5847bc7fd7c58081f0f7bc7120622bc6c82620549dd25acc55c0e8ba65e97ec4b4ab48f0b2d4fbd4ea05a0fd82046440d6145e9391b77b4f3c241d5da2e307b9c2553d00b2527a04e7df0f"}, &(0x7f0000000440)=0x73) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x3}}, 0x1, 0x89a3, 0x66b8, 0x3, 0x80, 0x9, 0xa}, 0x9c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x80, @mcast2, 0xd}}, 0x9, 0x2}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x0, 0x4, 0x3, 0xfffffffe, 0x3, 0x7, 0x6, r4}, 0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x0, 0x14, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x5}, 0x8) 139.510755ms ago: executing program 2 (id=773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f000000b240)=ANY=[@ANYBLOB="000086dd00000100000000000000600000000f982c00fe8000000000000000000000000000aaff02000000600000000000000000000129"], 0xfce) 139.242476ms ago: executing program 0 (id=774): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r4, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) (async) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f260f01f50f30660fc775022e0fba600c984f4d0f3566b857000f20c035000000800f22c0", 0x53}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x1d8, 0x3e0, 0xf8, 0x0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0xffffff7f, 0xffffff00], 'wg1\x00', 'macsec0\x00', {0xff}, {0xef731e3f8b2eb602}, 0x8, 0x9, 0x5, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$inet6_sctp(0xa, 0x1, 0x84) 170.363µs ago: executing program 2 (id=775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = getpid() ioprio_set$pid(0x1, r4, 0x4004) r5 = fsmount(0xffffffffffffffff, 0x1, 0x80) sched_setparam(r4, &(0x7f0000000040)=0x7) fcntl$setown(r5, 0x8, r4) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) 0s ago: executing program 4 (id=776): madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) r0 = socket$unix(0x1, 0x2, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100fefffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a430300000000000800b1003dd10000140003006261746164765f736c6176655f300000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): 9] sctp_connect_new_asoc+0x1c9/0x770 [ 80.291151][ T6689] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 80.291185][ T6689] sctp_sendmsg+0x1743/0x22e0 [ 80.291214][ T6689] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.291242][ T6689] ? __pfx_sock_has_perm+0x10/0x10 [ 80.291278][ T6689] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.291298][ T6689] inet_sendmsg+0x11c/0x140 [ 80.291325][ T6689] __sys_sendto+0x446/0x4b0 [ 80.291350][ T6689] ? __pfx_inet_sendmsg+0x10/0x10 [ 80.291375][ T6689] ? __pfx___sys_sendto+0x10/0x10 [ 80.291422][ T6689] ? ksys_write+0x1ac/0x250 [ 80.291444][ T6689] ? __pfx_ksys_write+0x10/0x10 [ 80.291468][ T6689] __x64_sys_sendto+0xe0/0x1c0 [ 80.291492][ T6689] ? do_syscall_64+0x90/0x870 [ 80.291514][ T6689] ? lockdep_hardirqs_on+0x78/0x100 [ 80.291536][ T6689] do_syscall_64+0x115/0x870 [ 80.291558][ T6689] ? clear_bhb_loop+0x40/0x90 [ 80.291580][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.291596][ T6689] RIP: 0033:0x7f860759ce59 [ 80.291613][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.291629][ T6689] RSP: 002b:00007f860840a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.291647][ T6689] RAX: ffffffffffffffda RBX: 00007f8607815fa0 RCX: 00007f860759ce59 [ 80.291657][ T6689] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 80.291668][ T6689] RBP: 00007f860840a090 R08: 0000200000000140 R09: 000000000000001c [ 80.291678][ T6689] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 80.291689][ T6689] R13: 00007f8607816038 R14: 00007f8607815fa0 R15: 00007ffcf86f11e8 [ 80.291714][ T6689] [ 80.400011][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.420494][ T104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.432272][ T104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.443534][ T104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.446178][ T6697] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 80.456130][ T104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.456417][ T6697] SELinux: failed to load policy [ 80.532994][ T6705] xt_cluster: node mask cannot exceed total number of nodes [ 80.545521][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.551134][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.582253][ T6708] FAULT_INJECTION: forcing a failure. [ 80.582253][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 80.591601][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.595956][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.596899][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT(full) [ 80.596914][ T6708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.596920][ T6708] Call Trace: [ 80.596924][ T6708] [ 80.596928][ T6708] dump_stack_lvl+0x100/0x190 [ 80.596944][ T6708] should_fail_ex.cold+0x5/0xa [ 80.596959][ T6708] should_failslab+0xc2/0x120 [ 80.596972][ T6708] __kmalloc_cache_noprof+0x7a/0x6f0 [ 80.596986][ T6708] ? sctp_add_bind_addr+0xae/0x3e0 [ 80.597001][ T6708] ? __sctp_v6_cmp_addr+0x206/0x530 [ 80.597014][ T6708] sctp_add_bind_addr+0xae/0x3e0 [ 80.597031][ T6708] sctp_copy_local_addr_list+0x349/0x550 [ 80.597050][ T6708] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 80.597068][ T6708] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 80.597086][ T6708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.597100][ T6708] sctp_bind_addr_copy+0xe0/0x530 [ 80.597118][ T6708] sctp_connect_new_asoc+0x1c9/0x770 [ 80.597132][ T6708] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 80.597150][ T6708] sctp_sendmsg+0x1743/0x22e0 [ 80.597165][ T6708] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.597180][ T6708] ? __pfx_sock_has_perm+0x10/0x10 [ 80.597202][ T6708] ? __pfx_sctp_sendmsg+0x10/0x10 [ 80.597215][ T6708] inet_sendmsg+0x11c/0x140 [ 80.597232][ T6708] __sys_sendto+0x446/0x4b0 [ 80.597246][ T6708] ? __pfx_inet_sendmsg+0x10/0x10 [ 80.597262][ T6708] ? __pfx___sys_sendto+0x10/0x10 [ 80.597288][ T6708] ? ksys_write+0x1ac/0x250 [ 80.597299][ T6708] ? __pfx_ksys_write+0x10/0x10 [ 80.597312][ T6708] __x64_sys_sendto+0xe0/0x1c0 [ 80.597326][ T6708] ? do_syscall_64+0x90/0x870 [ 80.597340][ T6708] ? lockdep_hardirqs_on+0x78/0x100 [ 80.597353][ T6708] do_syscall_64+0x115/0x870 [ 80.597366][ T6708] ? clear_bhb_loop+0x40/0x90 [ 80.597379][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.597389][ T6708] RIP: 0033:0x7fa2f259ce59 [ 80.597399][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.597410][ T6708] RSP: 002b:00007fa2f3415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.597420][ T6708] RAX: ffffffffffffffda RBX: 00007fa2f2815fa0 RCX: 00007fa2f259ce59 [ 80.597427][ T6708] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 80.597433][ T6708] RBP: 00007fa2f3415090 R08: 0000200000000140 R09: 000000000000001c [ 80.597439][ T6708] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 80.597445][ T6708] R13: 00007fa2f2816038 R14: 00007fa2f2815fa0 R15: 00007ffc7a775f78 [ 80.597482][ T6708] [ 80.649523][ T6710] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 80.675841][ T6716] loop5: detected capacity change from 0 to 2640 [ 80.709728][ T6716] ldm_validate_partition_table(): Disk read failed. [ 80.713119][ T6716] Dev loop5: unable to read RDB block 0 [ 80.716198][ T6716] loop5: unable to read partition table [ 80.719576][ T6716] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 81.004984][ T6731] 9pnet_virtio: no channels available for device syz [ 81.347847][ T5973] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 81.506943][ T5094] Bluetooth: hci1: command tx timeout [ 81.507413][ T5973] usb 7-1: Using ep0 maxpacket: 32 [ 81.515555][ T5973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 81.519634][ T5973] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 81.523151][ T5973] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 81.526635][ T5973] usb 7-1: config 14 has no interface number 0 [ 81.529958][ T5973] usb 7-1: config 14 has no interface number 1 [ 81.532005][ T5973] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 81.536319][ T5973] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 81.541172][ T5973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 81.545832][ T5973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 81.550442][ T5973] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 81.555193][ T5973] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.560590][ T5973] usb 7-1: config 14 interface 57 has no altsetting 0 [ 81.563289][ T5973] usb 7-1: config 14 interface 228 has no altsetting 0 [ 81.570137][ T5973] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 81.573928][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.577519][ T5973] usb 7-1: Product: syz [ 81.579354][ T5973] usb 7-1: Manufacturer: syz [ 81.581204][ T5973] usb 7-1: SerialNumber: syz [ 81.600757][ T6748] FAULT_INJECTION: forcing a failure. [ 81.600757][ T6748] name failslab, interval 1, probability 0, space 0, times 0 [ 81.605998][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) [ 81.606021][ T6748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.606031][ T6748] Call Trace: [ 81.606038][ T6748] [ 81.606046][ T6748] dump_stack_lvl+0x100/0x190 [ 81.606072][ T6748] should_fail_ex.cold+0x5/0xa [ 81.606095][ T6748] should_failslab+0xc2/0x120 [ 81.606116][ T6748] __kmalloc_cache_noprof+0x7a/0x6f0 [ 81.606140][ T6748] ? sctp_add_bind_addr+0xae/0x3e0 [ 81.606164][ T6748] ? __sctp_v6_cmp_addr+0x206/0x530 [ 81.606185][ T6748] sctp_add_bind_addr+0xae/0x3e0 [ 81.606211][ T6748] sctp_copy_local_addr_list+0x349/0x550 [ 81.606242][ T6748] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 81.606272][ T6748] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 81.606298][ T6748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.606321][ T6748] sctp_bind_addr_copy+0xe0/0x530 [ 81.606352][ T6748] sctp_connect_new_asoc+0x1c9/0x770 [ 81.606373][ T6748] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 81.606401][ T6748] sctp_sendmsg+0x1743/0x22e0 [ 81.606427][ T6748] ? __pfx_sctp_sendmsg+0x10/0x10 [ 81.606451][ T6748] ? __pfx_sock_has_perm+0x10/0x10 [ 81.606485][ T6748] ? __pfx_sctp_sendmsg+0x10/0x10 [ 81.606503][ T6748] inet_sendmsg+0x11c/0x140 [ 81.606529][ T6748] __sys_sendto+0x446/0x4b0 [ 81.606552][ T6748] ? __pfx_inet_sendmsg+0x10/0x10 [ 81.606575][ T6748] ? __pfx___sys_sendto+0x10/0x10 [ 81.606617][ T6748] ? ksys_write+0x1ac/0x250 [ 81.606636][ T6748] ? __pfx_ksys_write+0x10/0x10 [ 81.606674][ T6748] __x64_sys_sendto+0xe0/0x1c0 [ 81.606696][ T6748] ? do_syscall_64+0x90/0x870 [ 81.606717][ T6748] ? lockdep_hardirqs_on+0x78/0x100 [ 81.606737][ T6748] do_syscall_64+0x115/0x870 [ 81.606757][ T6748] ? clear_bhb_loop+0x40/0x90 [ 81.606792][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.606812][ T6748] RIP: 0033:0x7fe9fad9ce59 [ 81.606828][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.606846][ T6748] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.606863][ T6748] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 81.606874][ T6748] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 81.606884][ T6748] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 81.606894][ T6748] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 81.606905][ T6748] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 81.606929][ T6748] [ 81.992553][ T5973] legousbtower 7-1:14.57: interrupt endpoints not found [ 82.159668][ T6777] FAULT_INJECTION: forcing a failure. [ 82.159668][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 82.164645][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 82.164669][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.164680][ T6777] Call Trace: [ 82.164687][ T6777] [ 82.164695][ T6777] dump_stack_lvl+0x100/0x190 [ 82.164721][ T6777] should_fail_ex.cold+0x5/0xa [ 82.164748][ T6777] should_failslab+0xc2/0x120 [ 82.164772][ T6777] __kmalloc_cache_noprof+0x7a/0x6f0 [ 82.164798][ T6777] ? sctp_add_bind_addr+0xae/0x3e0 [ 82.164823][ T6777] ? __sctp_v6_cmp_addr+0x206/0x530 [ 82.164846][ T6777] sctp_add_bind_addr+0xae/0x3e0 [ 82.164874][ T6777] sctp_copy_local_addr_list+0x349/0x550 [ 82.164906][ T6777] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 82.164943][ T6777] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 82.164973][ T6777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.164997][ T6777] sctp_bind_addr_copy+0xe0/0x530 [ 82.165028][ T6777] sctp_connect_new_asoc+0x1c9/0x770 [ 82.165052][ T6777] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.165082][ T6777] sctp_sendmsg+0x1743/0x22e0 [ 82.165110][ T6777] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.165137][ T6777] ? __pfx_sock_has_perm+0x10/0x10 [ 82.165174][ T6777] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.165197][ T6777] inet_sendmsg+0x11c/0x140 [ 82.165224][ T6777] __sys_sendto+0x446/0x4b0 [ 82.165248][ T6777] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.165274][ T6777] ? __pfx___sys_sendto+0x10/0x10 [ 82.165320][ T6777] ? ksys_write+0x1ac/0x250 [ 82.165340][ T6777] ? __pfx_ksys_write+0x10/0x10 [ 82.165364][ T6777] __x64_sys_sendto+0xe0/0x1c0 [ 82.165389][ T6777] ? do_syscall_64+0x90/0x870 [ 82.165412][ T6777] ? lockdep_hardirqs_on+0x78/0x100 [ 82.165455][ T6777] do_syscall_64+0x115/0x870 [ 82.165478][ T6777] ? clear_bhb_loop+0x40/0x90 [ 82.165500][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.165519][ T6777] RIP: 0033:0x7f860759ce59 [ 82.165535][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.165551][ T6777] RSP: 002b:00007f860840a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.165570][ T6777] RAX: ffffffffffffffda RBX: 00007f8607815fa0 RCX: 00007f860759ce59 [ 82.165581][ T6777] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 82.165593][ T6777] RBP: 00007f860840a090 R08: 0000200000000140 R09: 000000000000001c [ 82.165603][ T6777] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 82.165613][ T6777] R13: 00007f8607816038 R14: 00007f8607815fa0 R15: 00007ffcf86f11e8 [ 82.165639][ T6777] [ 82.192628][ T5973] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 82.259436][ T5973] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 82.639625][ T5973] usb 7-1: USB disconnect, device number 11 [ 82.642110][ T6786] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 82.667472][ T5973] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 82.670341][ T6786] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 82.682510][ T6798] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 82.763780][ T6810] netlink: 'syz.2.296': attribute type 2 has an invalid length. [ 82.781179][ T6813] xfrm1: entered promiscuous mode [ 82.783468][ T6813] xfrm1: entered allmulticast mode [ 82.792686][ T6815] FAULT_INJECTION: forcing a failure. [ 82.792686][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 82.798157][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(full) [ 82.798181][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.798193][ T6815] Call Trace: [ 82.798199][ T6815] [ 82.798206][ T6815] dump_stack_lvl+0x100/0x190 [ 82.798231][ T6815] should_fail_ex.cold+0x5/0xa [ 82.798254][ T6815] should_failslab+0xc2/0x120 [ 82.798273][ T6815] __kmalloc_cache_noprof+0x7a/0x6f0 [ 82.798312][ T6815] ? sctp_add_bind_addr+0xae/0x3e0 [ 82.798336][ T6815] ? __sctp_v6_cmp_addr+0x206/0x530 [ 82.798354][ T6815] sctp_add_bind_addr+0xae/0x3e0 [ 82.798382][ T6815] sctp_copy_local_addr_list+0x349/0x550 [ 82.798404][ T6815] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 82.798422][ T6815] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 82.798441][ T6815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.798455][ T6815] sctp_bind_addr_copy+0xe0/0x530 [ 82.798474][ T6815] sctp_connect_new_asoc+0x1c9/0x770 [ 82.798492][ T6815] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 82.798510][ T6815] sctp_sendmsg+0x1743/0x22e0 [ 82.798526][ T6815] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.798541][ T6815] ? __pfx_sock_has_perm+0x10/0x10 [ 82.798563][ T6815] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.798577][ T6815] inet_sendmsg+0x11c/0x140 [ 82.798593][ T6815] __sys_sendto+0x446/0x4b0 [ 82.798607][ T6815] ? __pfx_inet_sendmsg+0x10/0x10 [ 82.798622][ T6815] ? __pfx___sys_sendto+0x10/0x10 [ 82.798649][ T6815] ? ksys_write+0x1ac/0x250 [ 82.798661][ T6815] ? __pfx_ksys_write+0x10/0x10 [ 82.798674][ T6815] __x64_sys_sendto+0xe0/0x1c0 [ 82.798688][ T6815] ? do_syscall_64+0x90/0x870 [ 82.798702][ T6815] ? lockdep_hardirqs_on+0x78/0x100 [ 82.798716][ T6815] do_syscall_64+0x115/0x870 [ 82.798731][ T6815] ? clear_bhb_loop+0x40/0x90 [ 82.798744][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.798754][ T6815] RIP: 0033:0x7fe9fad9ce59 [ 82.798764][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.798775][ T6815] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.798785][ T6815] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 82.798792][ T6815] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 82.798798][ T6815] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 82.798804][ T6815] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 82.798810][ T6815] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 82.798825][ T6815] [ 82.973348][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 82.973365][ T40] audit: type=1400 audit(1780403709.304:464): avc: denied { listen } for pid=6823 comm="syz.1.302" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.017447][ T40] audit: type=1400 audit(1780403709.354:465): avc: denied { read write } for pid=6823 comm="syz.1.302" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.028760][ T40] audit: type=1400 audit(1780403709.354:466): avc: denied { open } for pid=6823 comm="syz.1.302" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.038874][ T40] audit: type=1400 audit(1780403709.354:467): avc: denied { ioctl } for pid=6823 comm="syz.1.302" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.125071][ T40] audit: type=1400 audit(1780403709.454:468): avc: denied { accept } for pid=6828 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.133752][ T40] audit: type=1400 audit(1780403709.454:469): avc: denied { write } for pid=6828 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.197520][ T6829] hub 2-0:1.0: USB hub found [ 83.200696][ T6829] hub 2-0:1.0: 2 ports detected [ 83.208861][ T40] audit: type=1400 audit(1780403709.544:470): avc: denied { read } for pid=6843 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.210112][ T6846] ªªªªªª: renamed from vlan0 (while UP) [ 83.217538][ T6829] trusted_key: syz.2.303 sent an empty control message without MSG_MORE. [ 83.228021][ T40] audit: type=1400 audit(1780403709.554:471): avc: denied { create } for pid=6828 comm="syz.2.303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.235939][ T40] audit: type=1400 audit(1780403709.554:472): avc: denied { unlink } for pid=6828 comm="syz.2.303" name="file0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.246639][ T40] audit: type=1400 audit(1780403709.564:473): avc: denied { write } for pid=6844 comm="syz.3.309" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.283310][ T6854] FAULT_INJECTION: forcing a failure. [ 83.283310][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 83.288155][ T6854] CPU: 2 UID: 0 PID: 6854 Comm: syz.3.311 Not tainted syzkaller #0 PREEMPT(full) [ 83.288171][ T6854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.288178][ T6854] Call Trace: [ 83.288185][ T6854] [ 83.288191][ T6854] dump_stack_lvl+0x100/0x190 [ 83.288211][ T6854] should_fail_ex.cold+0x5/0xa [ 83.288227][ T6854] should_failslab+0xc2/0x120 [ 83.288241][ T6854] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.288257][ T6854] ? sctp_add_bind_addr+0xae/0x3e0 [ 83.288274][ T6854] ? __sctp_v6_cmp_addr+0x206/0x530 [ 83.288286][ T6854] sctp_add_bind_addr+0xae/0x3e0 [ 83.288303][ T6854] sctp_copy_local_addr_list+0x349/0x550 [ 83.288325][ T6854] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 83.288343][ T6854] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 83.288362][ T6854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.288376][ T6854] sctp_bind_addr_copy+0xe0/0x530 [ 83.288394][ T6854] sctp_connect_new_asoc+0x1c9/0x770 [ 83.288408][ T6854] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 83.288426][ T6854] sctp_sendmsg+0x1743/0x22e0 [ 83.288442][ T6854] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.288457][ T6854] ? __pfx_sock_has_perm+0x10/0x10 [ 83.288479][ T6854] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.288492][ T6854] inet_sendmsg+0x11c/0x140 [ 83.288510][ T6854] __sys_sendto+0x446/0x4b0 [ 83.288526][ T6854] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.288541][ T6854] ? __pfx___sys_sendto+0x10/0x10 [ 83.288567][ T6854] ? ksys_write+0x1ac/0x250 [ 83.288633][ T6854] ? __pfx_ksys_write+0x10/0x10 [ 83.288652][ T6854] __x64_sys_sendto+0xe0/0x1c0 [ 83.288703][ T6854] ? do_syscall_64+0x90/0x870 [ 83.288721][ T6854] ? lockdep_hardirqs_on+0x78/0x100 [ 83.288736][ T6854] do_syscall_64+0x115/0x870 [ 83.288749][ T6854] ? clear_bhb_loop+0x40/0x90 [ 83.288764][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.288776][ T6854] RIP: 0033:0x7fe9fad9ce59 [ 83.288786][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.288797][ T6854] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.288810][ T6854] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 83.288816][ T6854] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 83.288823][ T6854] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 83.288830][ T6854] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 83.288836][ T6854] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 83.288850][ T6854] [ 83.309825][ T6856] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.351525][ T6860] input: syz0 as /devices/virtual/input/input9 [ 83.379992][ T6863] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.429462][ T6863] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.433610][ T6863] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 83.438177][ T6863] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 83.586592][ T6868] __nla_validate_parse: 9 callbacks suppressed [ 83.586608][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 83.587493][ T5094] Bluetooth: hci1: command tx timeout [ 83.676798][ T5834] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 83.686956][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 83.720432][ T6885] FAULT_INJECTION: forcing a failure. [ 83.720432][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 83.725466][ T6885] CPU: 2 UID: 0 PID: 6885 Comm: syz.3.323 Not tainted syzkaller #0 PREEMPT(full) [ 83.725487][ T6885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.725496][ T6885] Call Trace: [ 83.725502][ T6885] [ 83.725508][ T6885] dump_stack_lvl+0x100/0x190 [ 83.725531][ T6885] should_fail_ex.cold+0x5/0xa [ 83.725554][ T6885] should_failslab+0xc2/0x120 [ 83.725574][ T6885] __kmalloc_cache_noprof+0x7a/0x6f0 [ 83.725595][ T6885] ? sctp_add_bind_addr+0xae/0x3e0 [ 83.725631][ T6885] ? __sctp_v6_cmp_addr+0x206/0x530 [ 83.725652][ T6885] sctp_add_bind_addr+0xae/0x3e0 [ 83.725676][ T6885] sctp_copy_local_addr_list+0x349/0x550 [ 83.725704][ T6885] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 83.725731][ T6885] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 83.725756][ T6885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.725777][ T6885] sctp_bind_addr_copy+0xe0/0x530 [ 83.725803][ T6885] sctp_connect_new_asoc+0x1c9/0x770 [ 83.725824][ T6885] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 83.725851][ T6885] sctp_sendmsg+0x1743/0x22e0 [ 83.725874][ T6885] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.725897][ T6885] ? __pfx_sock_has_perm+0x10/0x10 [ 83.725929][ T6885] ? __pfx_sctp_sendmsg+0x10/0x10 [ 83.725948][ T6885] inet_sendmsg+0x11c/0x140 [ 83.725978][ T6885] __sys_sendto+0x446/0x4b0 [ 83.725999][ T6885] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.726022][ T6885] ? __pfx___sys_sendto+0x10/0x10 [ 83.726061][ T6885] ? ksys_write+0x1ac/0x250 [ 83.726078][ T6885] ? __pfx_ksys_write+0x10/0x10 [ 83.726097][ T6885] __x64_sys_sendto+0xe0/0x1c0 [ 83.726118][ T6885] ? do_syscall_64+0x90/0x870 [ 83.726138][ T6885] ? lockdep_hardirqs_on+0x78/0x100 [ 83.726157][ T6885] do_syscall_64+0x115/0x870 [ 83.726176][ T6885] ? clear_bhb_loop+0x40/0x90 [ 83.726195][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.726211][ T6885] RIP: 0033:0x7fe9fad9ce59 [ 83.726225][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.726239][ T6885] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.726254][ T6885] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 83.726264][ T6885] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 83.726274][ T6885] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 83.726283][ T6885] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 83.726292][ T6885] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 83.726315][ T6885] [ 83.909885][ T5834] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 83.912919][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 83.916259][ T5834] usb 5-1: Product: syz [ 83.917900][ T5834] usb 5-1: Manufacturer: syz [ 83.919592][ T5834] usb 5-1: SerialNumber: syz [ 83.923699][ T5834] usb 5-1: config 0 descriptor?? [ 84.094416][ T6893] FAULT_INJECTION: forcing a failure. [ 84.094416][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.100414][ T6893] CPU: 3 UID: 0 PID: 6893 Comm: syz.3.327 Not tainted syzkaller #0 PREEMPT(full) [ 84.100440][ T6893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.100451][ T6893] Call Trace: [ 84.100458][ T6893] [ 84.100466][ T6893] dump_stack_lvl+0x100/0x190 [ 84.100493][ T6893] should_fail_ex.cold+0x5/0xa [ 84.100519][ T6893] _copy_from_user+0x2e/0xd0 [ 84.100545][ T6893] __sys_bpf+0x243/0x4b90 [ 84.100576][ T6893] ? __pfx___sys_bpf+0x10/0x10 [ 84.100602][ T6893] ? proc_fail_nth_write+0x9f/0x220 [ 84.100624][ T6893] ? find_held_lock+0x2b/0x80 [ 84.100647][ T6893] ? find_held_lock+0x2b/0x80 [ 84.100665][ T6893] ? ksys_write+0x190/0x250 [ 84.100686][ T6893] ? ksys_write+0x190/0x250 [ 84.100711][ T6893] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 84.100736][ T6893] ? kernel_write+0x673/0x6c0 [ 84.100757][ T6893] ? __fget_files+0x215/0x3d0 [ 84.100792][ T6893] ? fput+0x79/0x100 [ 84.100818][ T6893] ? ksys_write+0x1ac/0x250 [ 84.100836][ T6893] ? __pfx_ksys_write+0x10/0x10 [ 84.100863][ T6893] __x64_sys_bpf+0x7b/0xc0 [ 84.100881][ T6893] ? lockdep_hardirqs_on+0x78/0x100 [ 84.100903][ T6893] do_syscall_64+0x115/0x870 [ 84.100927][ T6893] ? clear_bhb_loop+0x40/0x90 [ 84.100949][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.100969][ T6893] RIP: 0033:0x7fe9fad9ce59 [ 84.100985][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.101002][ T6893] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.101020][ T6893] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 84.101040][ T6893] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 84.101051][ T6893] RBP: 00007fe9fbbda090 R08: 0000000000000000 R09: 0000000000000000 [ 84.101063][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.101074][ T6893] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 84.101098][ T6893] [ 84.130750][ T6860] xt_cgroup: path and classid specified [ 84.131475][ T6861] xt_cgroup: path and classid specified [ 84.193536][ T5829] usb 5-1: USB disconnect, device number 3 [ 84.319476][ T6907] FAULT_INJECTION: forcing a failure. [ 84.319476][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 84.324790][ T6907] CPU: 3 UID: 0 PID: 6907 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) [ 84.324814][ T6907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.324839][ T6907] Call Trace: [ 84.324847][ T6907] [ 84.324854][ T6907] dump_stack_lvl+0x100/0x190 [ 84.324882][ T6907] should_fail_ex.cold+0x5/0xa [ 84.324910][ T6907] should_failslab+0xc2/0x120 [ 84.324934][ T6907] __kmalloc_cache_noprof+0x7a/0x6f0 [ 84.324959][ T6907] ? sctp_add_bind_addr+0xae/0x3e0 [ 84.324986][ T6907] ? __sctp_v6_cmp_addr+0x206/0x530 [ 84.325010][ T6907] sctp_add_bind_addr+0xae/0x3e0 [ 84.325046][ T6907] sctp_copy_local_addr_list+0x349/0x550 [ 84.325078][ T6907] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 84.325112][ T6907] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 84.325142][ T6907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.325167][ T6907] sctp_bind_addr_copy+0xe0/0x530 [ 84.325201][ T6907] sctp_connect_new_asoc+0x1c9/0x770 [ 84.325226][ T6907] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 84.325259][ T6907] sctp_sendmsg+0x1743/0x22e0 [ 84.325287][ T6907] ? __pfx_sctp_sendmsg+0x10/0x10 [ 84.325315][ T6907] ? __pfx_sock_has_perm+0x10/0x10 [ 84.325354][ T6907] ? __pfx_sctp_sendmsg+0x10/0x10 [ 84.325378][ T6907] inet_sendmsg+0x11c/0x140 [ 84.325429][ T6907] __sys_sendto+0x446/0x4b0 [ 84.325456][ T6907] ? __pfx_inet_sendmsg+0x10/0x10 [ 84.325482][ T6907] ? __pfx___sys_sendto+0x10/0x10 [ 84.325529][ T6907] ? ksys_write+0x1ac/0x250 [ 84.325552][ T6907] ? __pfx_ksys_write+0x10/0x10 [ 84.325576][ T6907] __x64_sys_sendto+0xe0/0x1c0 [ 84.325601][ T6907] ? do_syscall_64+0x90/0x870 [ 84.325625][ T6907] ? lockdep_hardirqs_on+0x78/0x100 [ 84.325650][ T6907] do_syscall_64+0x115/0x870 [ 84.325672][ T6907] ? clear_bhb_loop+0x40/0x90 [ 84.325696][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.325716][ T6907] RIP: 0033:0x7fe9fad9ce59 [ 84.325733][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.325751][ T6907] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 84.325770][ T6907] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 84.325782][ T6907] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 84.325793][ T6907] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 84.325804][ T6907] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 84.325815][ T6907] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 84.325841][ T6907] [ 84.539775][ T6914] netlink: 'syz.2.334': attribute type 12 has an invalid length. [ 84.545665][ T6919] FAULT_INJECTION: forcing a failure. [ 84.545665][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 84.547408][ T6914] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 84.550798][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(full) [ 84.550818][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.550827][ T6919] Call Trace: [ 84.550833][ T6919] [ 84.550840][ T6919] dump_stack_lvl+0x100/0x190 [ 84.550863][ T6919] should_fail_ex.cold+0x5/0xa [ 84.550883][ T6919] ? bpf_test_init.isra.0+0x88/0x100 [ 84.550898][ T6919] should_failslab+0xc2/0x120 [ 84.550915][ T6919] __kmalloc_noprof+0xe0/0x850 [ 84.550937][ T6919] ? __lock_acquire+0x4a5/0x2630 [ 84.550958][ T6919] bpf_test_init.isra.0+0x88/0x100 [ 84.550976][ T6919] bpf_prog_test_run_xdp+0x57e/0x1670 [ 84.550999][ T6919] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.551028][ T6919] ? fput+0x79/0x100 [ 84.551049][ T6919] ? __bpf_prog_get+0x97/0x2a0 [ 84.551066][ T6919] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.551083][ T6919] __sys_bpf+0x1725/0x4b90 [ 84.551108][ T6919] ? __pfx___sys_bpf+0x10/0x10 [ 84.551128][ T6919] ? proc_fail_nth_write+0x9f/0x220 [ 84.551145][ T6919] ? find_held_lock+0x2b/0x80 [ 84.551162][ T6919] ? find_held_lock+0x2b/0x80 [ 84.551175][ T6919] ? ksys_write+0x190/0x250 [ 84.551191][ T6919] ? ksys_write+0x190/0x250 [ 84.551210][ T6919] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 84.551230][ T6919] ? kernel_write+0x673/0x6c0 [ 84.551245][ T6919] ? __fget_files+0x215/0x3d0 [ 84.551274][ T6919] ? fput+0x79/0x100 [ 84.551293][ T6919] ? ksys_write+0x1ac/0x250 [ 84.551309][ T6919] ? __pfx_ksys_write+0x10/0x10 [ 84.551328][ T6919] __x64_sys_bpf+0x7b/0xc0 [ 84.551341][ T6919] ? lockdep_hardirqs_on+0x78/0x100 [ 84.551360][ T6919] do_syscall_64+0x115/0x870 [ 84.551378][ T6919] ? clear_bhb_loop+0x40/0x90 [ 84.551397][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.551413][ T6919] RIP: 0033:0x7fe9fad9ce59 [ 84.551425][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.551439][ T6919] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.551455][ T6919] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 84.551464][ T6919] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 84.551473][ T6919] RBP: 00007fe9fbbda090 R08: 0000000000000000 R09: 0000000000000000 [ 84.551482][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.551490][ T6919] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 84.551511][ T6919] [ 84.713108][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 84.721662][ T6925] xfrm1: entered promiscuous mode [ 84.723533][ T6925] xfrm1: entered allmulticast mode [ 84.863113][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 84.867601][ T6940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56821 sclass=netlink_route_socket pid=6940 comm=syz.3.341 [ 84.987591][ T6949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.348'. [ 84.999756][ T6954] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 85.000022][ T5834] bridge0: entered promiscuous mode [ 85.004499][ T6954] ref_ctr increment failed for inode: 0x6f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888031cb8000 [ 85.012286][ T6954] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 85.016401][ T6954] ref_ctr decrement failed for inode: 0x6f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888031cb8000 [ 85.020454][ T6954] uprobe: syz.1.350:6954 failed to unregister, leaking uprobe [ 85.282053][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 85.293686][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 85.297983][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 85.302220][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 85.306373][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 85.667559][ T5094] Bluetooth: hci1: command tx timeout [ 85.671551][ T7012] FAULT_INJECTION: forcing a failure. [ 85.671551][ T7012] name failslab, interval 1, probability 0, space 0, times 0 [ 85.677191][ T7012] CPU: 3 UID: 0 PID: 7012 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 85.677212][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.677221][ T7012] Call Trace: [ 85.677228][ T7012] [ 85.677233][ T7012] dump_stack_lvl+0x100/0x190 [ 85.677258][ T7012] should_fail_ex.cold+0x5/0xa [ 85.677300][ T7012] should_failslab+0xc2/0x120 [ 85.677319][ T7012] __kmalloc_cache_noprof+0x7a/0x6f0 [ 85.677340][ T7012] ? sctp_add_bind_addr+0xae/0x3e0 [ 85.677363][ T7012] ? __sctp_v6_cmp_addr+0x206/0x530 [ 85.677405][ T7012] sctp_add_bind_addr+0xae/0x3e0 [ 85.677430][ T7012] sctp_copy_local_addr_list+0x349/0x550 [ 85.677458][ T7012] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 85.677483][ T7012] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 85.677510][ T7012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.677530][ T7012] sctp_bind_addr_copy+0xe0/0x530 [ 85.677557][ T7012] sctp_connect_new_asoc+0x1c9/0x770 [ 85.677575][ T7012] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 85.677601][ T7012] sctp_sendmsg+0x1743/0x22e0 [ 85.677641][ T7012] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.677664][ T7012] ? __pfx_sock_has_perm+0x10/0x10 [ 85.677696][ T7012] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.677715][ T7012] inet_sendmsg+0x11c/0x140 [ 85.677738][ T7012] __sys_sendto+0x446/0x4b0 [ 85.677757][ T7012] ? __pfx_inet_sendmsg+0x10/0x10 [ 85.677780][ T7012] ? __pfx___sys_sendto+0x10/0x10 [ 85.677819][ T7012] ? ksys_write+0x1ac/0x250 [ 85.677836][ T7012] ? __pfx_ksys_write+0x10/0x10 [ 85.677855][ T7012] __x64_sys_sendto+0xe0/0x1c0 [ 85.677876][ T7012] ? do_syscall_64+0x90/0x870 [ 85.677901][ T7012] ? lockdep_hardirqs_on+0x78/0x100 [ 85.677921][ T7012] do_syscall_64+0x115/0x870 [ 85.677940][ T7012] ? clear_bhb_loop+0x40/0x90 [ 85.677959][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.677975][ T7012] RIP: 0033:0x7fa2f259ce59 [ 85.677989][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.678003][ T7012] RSP: 002b:00007fa2f3415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 85.678019][ T7012] RAX: ffffffffffffffda RBX: 00007fa2f2815fa0 RCX: 00007fa2f259ce59 [ 85.678028][ T7012] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 85.678037][ T7012] RBP: 00007fa2f3415090 R08: 0000200000000140 R09: 000000000000001c [ 85.678047][ T7012] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 85.678056][ T7012] R13: 00007fa2f2816038 R14: 00007fa2f2815fa0 R15: 00007ffc7a775f78 [ 85.678078][ T7012] [ 85.926457][ T7018] ip6t_rpfilter: unknown options [ 85.928617][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.077281][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 86.081929][ T29] usb 8-1: config index 0 descriptor too short (expected 11698, got 36) [ 86.085694][ T29] usb 8-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 86.090826][ T29] usb 8-1: config 0 has no interfaces? [ 86.098686][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 86.103265][ T29] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 86.106176][ T29] usb 8-1: Product: syz [ 86.107949][ T29] usb 8-1: Manufacturer: syz [ 86.109984][ T29] usb 8-1: SerialNumber: syz [ 86.115880][ T29] usb 8-1: config 0 descriptor?? [ 86.366635][ T7010] netlink: 'syz.3.370': attribute type 8 has an invalid length. [ 86.381866][ T29] usb 8-1: USB disconnect, device number 6 [ 86.456800][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.474193][ T3265] cfg80211: failed to load regulatory.db [ 86.528843][ T5738] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.616818][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 86.620667][ T58] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 86.624116][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 86.629602][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.633504][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 86.638127][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.642227][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.647533][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.651143][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.656855][ T5738] usb 6-1: device descriptor read/64, error -71 [ 86.864959][ T58] usb 5-1: usb_control_msg returned -32 [ 86.868782][ T58] usbtmc 5-1:16.0: can't read capabilities [ 86.896881][ T5738] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.029401][ T5738] usb 6-1: device descriptor read/64, error -71 [ 87.137061][ T5738] usb usb6-port1: attempt power cycle [ 87.219625][ T7050] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 87.223116][ T7050] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 87.234745][ T10] usb 5-1: USB disconnect, device number 4 [ 87.476785][ T5738] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.498656][ T5738] usb 6-1: device descriptor read/8, error -71 [ 87.746900][ T5738] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 87.767672][ T5738] usb 6-1: device descriptor read/8, error -71 [ 87.795848][ T7052] FAULT_INJECTION: forcing a failure. [ 87.795848][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.801217][ T7052] CPU: 2 UID: 0 PID: 7052 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT(full) [ 87.801240][ T7052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.801249][ T7052] Call Trace: [ 87.801255][ T7052] [ 87.801262][ T7052] dump_stack_lvl+0x100/0x190 [ 87.801286][ T7052] should_fail_ex.cold+0x5/0xa [ 87.801309][ T7052] _copy_to_user+0x32/0xd0 [ 87.801337][ T7052] bpf_test_finish.isra.0+0x4df/0x660 [ 87.801380][ T7052] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 87.801399][ T7052] ? 0xffffffffa0206480 [ 87.801409][ T7052] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 87.801428][ T7052] bpf_prog_test_run_xdp+0xa70/0x1670 [ 87.801452][ T7052] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.801473][ T7052] ? fput+0x79/0x100 [ 87.801492][ T7052] ? __bpf_prog_get+0x97/0x2a0 [ 87.801509][ T7052] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.801524][ T7052] __sys_bpf+0x1725/0x4b90 [ 87.801547][ T7052] ? __pfx___sys_bpf+0x10/0x10 [ 87.801566][ T7052] ? proc_fail_nth_write+0x9f/0x220 [ 87.801580][ T7052] ? find_held_lock+0x2b/0x80 [ 87.801596][ T7052] ? find_held_lock+0x2b/0x80 [ 87.801607][ T7052] ? ksys_write+0x190/0x250 [ 87.801621][ T7052] ? ksys_write+0x190/0x250 [ 87.801638][ T7052] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 87.801657][ T7052] ? kernel_write+0x673/0x6c0 [ 87.801671][ T7052] ? __fget_files+0x215/0x3d0 [ 87.801696][ T7052] ? fput+0x79/0x100 [ 87.801714][ T7052] ? ksys_write+0x1ac/0x250 [ 87.801728][ T7052] ? __pfx_ksys_write+0x10/0x10 [ 87.801746][ T7052] __x64_sys_bpf+0x7b/0xc0 [ 87.801757][ T7052] ? lockdep_hardirqs_on+0x78/0x100 [ 87.801775][ T7052] do_syscall_64+0x115/0x870 [ 87.801792][ T7052] ? clear_bhb_loop+0x40/0x90 [ 87.801808][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.801822][ T7052] RIP: 0033:0x7f860759ce59 [ 87.801834][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.801847][ T7052] RSP: 002b:00007f860840a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.801861][ T7052] RAX: ffffffffffffffda RBX: 00007f8607815fa0 RCX: 00007f860759ce59 [ 87.801870][ T7052] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 87.801878][ T7052] RBP: 00007f860840a090 R08: 0000000000000000 R09: 0000000000000000 [ 87.801886][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.801893][ T7052] R13: 00007f8607816038 R14: 00007f8607815fa0 R15: 00007ffcf86f11e8 [ 87.801911][ T7052] [ 87.878679][ T5738] usb usb6-port1: unable to enumerate USB device [ 87.926427][ T7054] blktrace: Concurrent blktraces are not allowed on loop4 [ 87.932009][ T7054] capability: warning: `syz.0.385' uses deprecated v2 capabilities in a way that may be insecure [ 87.998418][ T7059] kernel profiling enabled (shift: 63) [ 88.001535][ T7059] profiling shift: 63 too large [ 88.003418][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 88.003431][ T40] audit: type=1400 audit(1780403714.334:507): avc: denied { read } for pid=7058 comm="syz.0.386" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.015861][ T40] audit: type=1400 audit(1780403714.334:508): avc: denied { open } for pid=7058 comm="syz.0.386" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.022541][ T7061] kernel profiling enabled (shift: 63) [ 88.026762][ T40] audit: type=1400 audit(1780403714.354:509): avc: denied { ioctl } for pid=7058 comm="syz.0.386" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.028970][ T7061] profiling shift: 63 too large [ 88.226876][ T5094] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.374565][ T40] audit: type=1326 audit(1780403714.704:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.385266][ T40] audit: type=1326 audit(1780403714.704:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.395068][ T40] audit: type=1326 audit(1780403714.704:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.404183][ T40] audit: type=1326 audit(1780403714.704:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.413071][ T40] audit: type=1326 audit(1780403714.704:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.425368][ T40] audit: type=1326 audit(1780403714.754:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.434754][ T40] audit: type=1326 audit(1780403714.754:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f259ce59 code=0x7ffc0000 [ 88.581084][ T7080] FAULT_INJECTION: forcing a failure. [ 88.581084][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.585558][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(full) [ 88.585573][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.585580][ T7080] Call Trace: [ 88.585584][ T7080] [ 88.585589][ T7080] dump_stack_lvl+0x100/0x190 [ 88.585605][ T7080] should_fail_ex.cold+0x5/0xa [ 88.585638][ T7080] _copy_to_user+0x32/0xd0 [ 88.585660][ T7080] bpf_test_finish.isra.0+0x510/0x660 [ 88.585681][ T7080] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 88.585705][ T7080] ? 0xffffffffa0206480 [ 88.585720][ T7080] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 88.585747][ T7080] bpf_prog_test_run_xdp+0xa70/0x1670 [ 88.585776][ T7080] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.585798][ T7080] ? fput+0x79/0x100 [ 88.585812][ T7080] ? __bpf_prog_get+0x97/0x2a0 [ 88.585825][ T7080] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.585837][ T7080] __sys_bpf+0x1725/0x4b90 [ 88.585855][ T7080] ? __pfx___sys_bpf+0x10/0x10 [ 88.585870][ T7080] ? proc_fail_nth_write+0x9f/0x220 [ 88.585882][ T7080] ? find_held_lock+0x2b/0x80 [ 88.585895][ T7080] ? find_held_lock+0x2b/0x80 [ 88.585903][ T7080] ? ksys_write+0x190/0x250 [ 88.585914][ T7080] ? ksys_write+0x190/0x250 [ 88.585928][ T7080] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 88.585943][ T7080] ? kernel_write+0x673/0x6c0 [ 88.585955][ T7080] ? __fget_files+0x215/0x3d0 [ 88.585975][ T7080] ? fput+0x79/0x100 [ 88.585989][ T7080] ? ksys_write+0x1ac/0x250 [ 88.586000][ T7080] ? __pfx_ksys_write+0x10/0x10 [ 88.586013][ T7080] __x64_sys_bpf+0x7b/0xc0 [ 88.586023][ T7080] ? lockdep_hardirqs_on+0x78/0x100 [ 88.586036][ T7080] do_syscall_64+0x115/0x870 [ 88.586049][ T7080] ? clear_bhb_loop+0x40/0x90 [ 88.586062][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.586073][ T7080] RIP: 0033:0x7fe9fad9ce59 [ 88.586082][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.586092][ T7080] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.586103][ T7080] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 88.586110][ T7080] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 88.586116][ T7080] RBP: 00007fe9fbbda090 R08: 0000000000000000 R09: 0000000000000000 [ 88.586122][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.586128][ T7080] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 88.586141][ T7080] [ 88.648210][ T7083] __nla_validate_parse: 61 callbacks suppressed [ 88.648221][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 88.744973][ T7087] netlink: 'syz.2.397': attribute type 29 has an invalid length. [ 88.749164][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 88.756328][ T7089] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 88.797837][ T7091] IPVS: length: 18 != 8 [ 88.799902][ T7091] netlink: 'syz.2.398': attribute type 39 has an invalid length. [ 88.906125][ T7093] kAFS: unable to lookup cell '(,c¾ûL' [ 88.909831][ T7093] kAFS: unable to lookup cell '(,c¾ûL' [ 88.964568][ T7098] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 88.967459][ T7098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.972196][ T7098] vhci_hcd vhci_hcd.0: Device attached [ 88.977083][ T7100] vhci_hcd: unknown pdu 2 [ 88.989553][ T104] vhci_hcd vhci_hcd.2: stop threads [ 88.991625][ T104] vhci_hcd vhci_hcd.2: release socket [ 88.993418][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 89.336266][ T7108] FAULT_INJECTION: forcing a failure. [ 89.336266][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.340559][ T7108] CPU: 1 UID: 0 PID: 7108 Comm: syz.1.404 Not tainted syzkaller #0 PREEMPT(full) [ 89.340580][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.340605][ T7108] Call Trace: [ 89.340613][ T7108] [ 89.340618][ T7108] dump_stack_lvl+0x100/0x190 [ 89.340635][ T7108] should_fail_ex.cold+0x5/0xa [ 89.340650][ T7108] _copy_to_user+0x32/0xd0 [ 89.340665][ T7108] simple_read_from_buffer+0xcb/0x170 [ 89.340680][ T7108] proc_fail_nth_read+0x1af/0x230 [ 89.340693][ T7108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.340705][ T7108] ? rw_verify_area+0xce/0x6d0 [ 89.340716][ T7108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.340727][ T7108] vfs_read+0x1e4/0xb30 [ 89.340741][ T7108] ? __pfx_vfs_read+0x10/0x10 [ 89.340752][ T7108] ? __fget_files+0x215/0x3d0 [ 89.340768][ T7108] ? __fget_files+0x21f/0x3d0 [ 89.340793][ T7108] ksys_read+0x12a/0x250 [ 89.340816][ T7108] ? __pfx_ksys_read+0x10/0x10 [ 89.340833][ T7108] ? rcu_is_watching+0x12/0xc0 [ 89.340864][ T7108] do_syscall_64+0x115/0x870 [ 89.340878][ T7108] ? clear_bhb_loop+0x40/0x90 [ 89.340891][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.340902][ T7108] RIP: 0033:0x7f40e0f5d68e [ 89.340912][ T7108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.340923][ T7108] RSP: 002b:00007f40e1f43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.340934][ T7108] RAX: ffffffffffffffda RBX: 00007f40e1f446c0 RCX: 00007f40e0f5d68e [ 89.340940][ T7108] RDX: 000000000000000f RSI: 00007f40e1f440a0 RDI: 0000000000000005 [ 89.340946][ T7108] RBP: 00007f40e1f44090 R08: 0000000000000000 R09: 0000000000000000 [ 89.340952][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.340958][ T7108] R13: 00007f40e1216038 R14: 00007f40e1215fa0 R15: 00007ffe0fd43588 [ 89.340972][ T7108] [ 89.434140][ T7110] program syz.1.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.598180][ T7117] binder: BINDER_SET_CONTEXT_MGR already set [ 89.600772][ T7117] binder: 7116:7117 ioctl 4018620d 200000004a80 returned -16 [ 90.031571][ T7122] befs: (loop3): No write support. Marking filesystem read-only [ 90.045569][ T7122] befs: (loop3): unable to read superblock [ 90.393262][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400038][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400058][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400070][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400082][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400094][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400108][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400120][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400132][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.400146][ T5886] hid-generic 0000:0001:0000.0004: unknown main item tag 0x0 [ 90.407790][ T5886] hid-generic 0000:0001:0000.0004: hidraw1: HID v0.55 Device [syz1] on syz1 [ 90.535781][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 90.539333][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 90.595562][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10512 sclass=netlink_route_socket pid=7136 comm=syz.1.413 [ 90.894922][ T7149] /dev/sr0: Can't open blockdev [ 91.020446][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 91.082551][ T1337] libceph: connect (1)[c::]:6789 error -101 [ 91.087409][ T1337] libceph: mon0 (1)[c::]:6789 connect error [ 91.100846][ T1337] libceph: connect (1)[c::]:6789 error -101 [ 91.107925][ T1337] libceph: mon0 (1)[c::]:6789 connect error [ 91.129011][ T7175] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 91.161379][ T7170] ceph: No mds server is up or the cluster is laggy [ 91.234170][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.242207][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.253357][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.257647][ T7182] bond2: (slave bond0): making interface the new active one [ 91.260705][ T7182] bond2: (slave bond0): Enslaving as an active interface with an up link [ 91.276541][ T7182] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 91.283604][ T7182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.289717][ T7182] .`: renamed from bond0 (while UP) [ 91.301929][ T7189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7189 comm=syz.0.427 [ 91.375628][ T7199] program syz.2.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.418973][ T7202] geneve2: entered promiscuous mode [ 91.423627][ T7202] geneve2: entered allmulticast mode [ 91.429885][ T1259] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.434906][ T1259] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.443780][ T1259] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.451996][ T1259] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.461147][ T7206] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 91.477060][ T7208] program syz.0.435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.481356][ T5094] Bluetooth: hci0: unexpected event for opcode 0x3531 [ 91.511111][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 91.622494][ T7219] kAFS: unparsable volume name [ 91.666391][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 91.676126][ T7222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.723716][ T7234] nfs4: Unknown parameter 'rdma0' [ 91.763860][ T7240] SELinux: policydb magic number 0xf8d408bd does not match expected magic number 0xf97cff8c [ 91.768817][ T7240] SELinux: failed to load policy [ 91.977726][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880565adc00: rx timeout, send abort [ 92.478296][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880565ac800: rx timeout, send abort [ 92.483455][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880565adc00: abort rx timeout. Force session deactivation [ 92.776926][ T7260] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.830799][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.862513][ T7267] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 92.870875][ T7267] bond0 (unregistering): Released all slaves [ 92.966820][ T5886] usb 5-1: device descriptor read/64, error -71 [ 92.981640][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880565ac800: abort rx timeout. Force session deactivation [ 93.131861][ T40] kauditd_printk_skb: 283 callbacks suppressed [ 93.131878][ T40] audit: type=1400 audit(1780403719.464:800): avc: denied { append } for pid=7286 comm="syz.1.462" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.159284][ T40] audit: type=1400 audit(1780403719.494:801): avc: denied { bind } for pid=7286 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.167825][ T40] audit: type=1400 audit(1780403719.494:802): avc: denied { setopt } for pid=7286 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.246749][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.372142][ T40] audit: type=1400 audit(1780403719.704:803): avc: denied { read write } for pid=7297 comm="syz.3.466" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 93.386786][ T5886] usb 5-1: device descriptor read/64, error -71 [ 93.406822][ T40] audit: type=1400 audit(1780403719.704:804): avc: denied { open } for pid=7297 comm="syz.3.466" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 93.417521][ T40] audit: type=1400 audit(1780403719.724:805): avc: denied { setopt } for pid=7297 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.488095][ T40] audit: type=1400 audit(1780403719.814:806): avc: denied { mount } for pid=7302 comm="syz.1.467" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 93.508953][ T5886] usb usb5-port1: attempt power cycle [ 93.511590][ T40] audit: type=1400 audit(1780403719.824:807): avc: denied { shutdown } for pid=7302 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.529201][ T40] audit: type=1400 audit(1780403719.824:808): avc: denied { getopt } for pid=7302 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.537987][ T40] audit: type=1400 audit(1780403719.824:809): avc: denied { connect } for pid=7302 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.543472][ T7303] 9p: Could not find request transport: v [ 93.544130][ T7306] netlink: 'syz.3.468': attribute type 11 has an invalid length. [ 93.546317][ T7306] No buffer was provided with the request [ 93.703048][ T7316] __nla_validate_parse: 4 callbacks suppressed [ 93.703067][ T7316] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.471'. [ 93.868118][ T5886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.897159][ T5886] usb 5-1: device descriptor read/8, error -71 [ 93.946631][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 94.047549][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 94.157836][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.177663][ T5886] usb 5-1: device descriptor read/8, error -71 [ 94.299829][ T5886] usb usb5-port1: unable to enumerate USB device [ 94.476953][ T844] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.648419][ T844] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 94.651872][ T844] usb 8-1: config 1 has no interface number 0 [ 94.654480][ T844] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 94.658639][ T844] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.666010][ T844] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 94.669963][ T844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.673368][ T844] usb 8-1: Product: syz [ 94.675215][ T844] usb 8-1: Manufacturer: syz [ 94.677283][ T844] usb 8-1: SerialNumber: syz [ 94.686371][ T7352] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.692060][ T844] usb 8-1: Error in usbnet_get_endpoints (-22) [ 95.176526][ T7358] veth0_to_team: entered promiscuous mode [ 95.180614][ T7358] erspan0: entered promiscuous mode [ 95.194281][ C2] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 95.198641][ C2] sr 2:0:0:0: [sr0] tag#5 CDB: Rebuild(16) 81 9b b2 45 b3 f7 6c c3 20 c7 07 16 [ 95.209358][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 95.752192][ T7375] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 95.856213][ T7379] team0 (unregistering): Port device team_slave_0 removed [ 95.863215][ T7379] team0 (unregistering): Port device team_slave_1 removed [ 95.901262][ T7380] geneve2: entered promiscuous mode [ 95.962675][ T7383] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 96.001200][ T7383] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 96.037436][ T5738] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 96.170790][ T7390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.208442][ T5738] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.212060][ T5738] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 96.215433][ T5738] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.219500][ T5738] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.222934][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.225417][ T5738] usb 5-1: Product: syz [ 96.226905][ T5738] usb 5-1: Manufacturer: syz [ 96.228511][ T5738] usb 5-1: SerialNumber: syz [ 96.235705][ T5738] usb 5-1: config 0 descriptor?? [ 96.238631][ T7377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.244218][ T5738] usb 5-1: selecting invalid altsetting 0 [ 96.459378][ T1337] usb 5-1: USB disconnect, device number 9 [ 96.887087][ T5738] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 97.036774][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 97.039695][ T5738] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.042892][ T5738] usb 6-1: config 0 has no interface number 0 [ 97.045377][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.049742][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.053341][ T5738] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.057410][ T5738] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.062240][ T5738] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.065070][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 97.069959][ T5738] usb 6-1: config 0 descriptor?? [ 97.087109][ T5738] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 97.244817][ T844] usb 8-1: USB disconnect, device number 7 [ 97.283356][ T7424] netlink: 136 bytes leftover after parsing attributes in process `syz.3.503'. [ 97.340839][ T34] usb 6-1: USB disconnect, device number 10 [ 97.353644][ T34] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 97.454682][ T7447] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 97.465179][ T7447] netlink: 'syz.0.509': attribute type 8 has an invalid length. [ 97.467618][ T7447] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 97.469879][ T7447] netlink: 208784 bytes leftover after parsing attributes in process `syz.0.509'. [ 97.494749][ T7452] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.510'. [ 97.501417][ T7452] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 97.505563][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 97.510854][ T7452] kernel read not supported for file /policy (pid: 7452 comm: syz.3.510) [ 97.564242][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 97.816741][ T7472] FAULT_INJECTION: forcing a failure. [ 97.816741][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 97.821145][ T7472] CPU: 2 UID: 0 PID: 7472 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(full) [ 97.821166][ T7472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.821175][ T7472] Call Trace: [ 97.821180][ T7472] [ 97.821185][ T7472] dump_stack_lvl+0x100/0x190 [ 97.821240][ T7472] should_fail_ex.cold+0x5/0xa [ 97.821263][ T7472] should_failslab+0xc2/0x120 [ 97.821282][ T7472] __kmalloc_cache_noprof+0x7a/0x6f0 [ 97.821303][ T7472] ? sctp_add_bind_addr+0xae/0x3e0 [ 97.821342][ T7472] sctp_add_bind_addr+0xae/0x3e0 [ 97.821366][ T7472] sctp_copy_local_addr_list+0x349/0x550 [ 97.821391][ T7472] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 97.821419][ T7472] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 97.821446][ T7472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.821463][ T7472] sctp_bind_addr_copy+0xe0/0x530 [ 97.821491][ T7472] sctp_connect_new_asoc+0x1c9/0x770 [ 97.821511][ T7472] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 97.821537][ T7472] sctp_sendmsg+0x1743/0x22e0 [ 97.821558][ T7472] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.821581][ T7472] ? __pfx_sock_has_perm+0x10/0x10 [ 97.821620][ T7472] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.821639][ T7472] inet_sendmsg+0x11c/0x140 [ 97.821660][ T7472] __sys_sendto+0x446/0x4b0 [ 97.821681][ T7472] ? __pfx_inet_sendmsg+0x10/0x10 [ 97.821705][ T7472] ? __pfx___sys_sendto+0x10/0x10 [ 97.821740][ T7472] ? ksys_write+0x1ac/0x250 [ 97.821757][ T7472] ? __pfx_ksys_write+0x10/0x10 [ 97.821783][ T7472] __x64_sys_sendto+0xe0/0x1c0 [ 97.821804][ T7472] ? do_syscall_64+0x90/0x870 [ 97.821825][ T7472] ? lockdep_hardirqs_on+0x78/0x100 [ 97.821843][ T7472] do_syscall_64+0x115/0x870 [ 97.821863][ T7472] ? clear_bhb_loop+0x40/0x90 [ 97.821883][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.821899][ T7472] RIP: 0033:0x7fe9fad9ce59 [ 97.821912][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.821927][ T7472] RSP: 002b:00007fe9fbbda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.821939][ T7472] RAX: ffffffffffffffda RBX: 00007fe9fb015fa0 RCX: 00007fe9fad9ce59 [ 97.821949][ T7472] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 97.821958][ T7472] RBP: 00007fe9fbbda090 R08: 0000200000000140 R09: 000000000000001c [ 97.821968][ T7472] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000003 [ 97.821977][ T7472] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 97.822000][ T7472] [ 97.843369][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 98.156549][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 98.156560][ T40] audit: type=1400 audit(1780403724.484:865): avc: denied { unmount } for pid=6475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.184361][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.396146][ T7496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.483944][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 98.701648][ T40] audit: type=1400 audit(1780403725.034:866): avc: denied { append } for pid=7514 comm="syz.0.533" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.726763][ T40] audit: type=1400 audit(1780403725.034:867): avc: denied { ioctl } for pid=7514 comm="syz.0.533" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.775293][ T40] audit: type=1400 audit(1780403725.104:868): avc: denied { checkpoint_restore } for pid=7516 comm="syz.3.534" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.865439][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 98.873660][ T7527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 98.876499][ T7527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.880553][ T7527] vhci_hcd vhci_hcd.0: Device attached [ 99.007048][ T3265] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 99.116803][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 99.157405][ T3265] usb 5-1: Using ep0 maxpacket: 8 [ 99.161105][ T3265] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 99.164418][ T3265] usb 5-1: config 179 has no interface number 0 [ 99.167436][ T3265] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 99.171759][ T3265] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 99.177351][ T3265] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.181772][ T3265] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 99.185390][ T3265] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 99.190561][ T3265] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 99.194420][ T3265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.201307][ T7523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.416508][ T3265] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input10 [ 99.423963][ T40] audit: type=1400 audit(1780403725.754:869): avc: denied { read } for pid=5130 comm="acpid" name="js0" dev="devtmpfs" ino=2964 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.433497][ T40] audit: type=1400 audit(1780403725.754:870): avc: denied { open } for pid=5130 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2964 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.442903][ T40] audit: type=1400 audit(1780403725.754:871): avc: denied { ioctl } for pid=5130 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2964 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.623511][ T40] audit: type=1400 audit(1780403725.954:872): avc: denied { getopt } for pid=7522 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.624116][ T5834] usb 5-1: USB disconnect, device number 10 [ 99.624147][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.624323][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.641533][ T7528] vhci_hcd: connection reset by peer [ 99.645876][ T46] vhci_hcd vhci_hcd.1: stop threads [ 99.648553][ T46] vhci_hcd vhci_hcd.1: release socket [ 99.649498][ T40] audit: type=1400 audit(1780403725.984:873): avc: denied { bind } for pid=7535 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.655192][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 99.657683][ T40] audit: type=1400 audit(1780403725.984:874): avc: denied { name_bind } for pid=7535 comm="syz.3.541" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 99.764091][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 99.904719][ T7544] binder: BINDER_SET_CONTEXT_MGR already set [ 99.906927][ T7544] binder: 7543:7544 ioctl 4018620d 200000004a80 returned -16 [ 99.911533][ T7545] binder: 7543:7545 ioctl c018620c 2000000002c0 returned -22 [ 100.263842][ T7555] x_tables: duplicate underflow at hook 3 [ 100.268156][ T7558] overlayfs: overlapping lowerdir path [ 100.312912][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 100.452400][ T7570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 100.505949][ T7578] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.556'. [ 100.584879][ T7588] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 100.588401][ T7588] netlink: 228 bytes leftover after parsing attributes in process `syz.2.559'. [ 100.604994][ T7578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.609308][ T7578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.668711][ T7592] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 100.671379][ T7592] /dev/nullb0: Can't open blockdev [ 100.686835][ T7578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.690233][ T7578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.703035][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 100.742390][ T7599] kAFS: No cell specified [ 100.785029][ T7578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.789991][ T7578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.920676][ T7578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.924076][ T7578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.944289][ T7617] tmpfs: Bad value for 'mpol' [ 100.944335][ T7618] tmpfs: Bad value for 'mpol' [ 101.011083][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 101.082789][ T1259] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.085442][ T1259] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090874][ T7628] batman_adv: batadv0: Adding interface: dummy0 [ 101.093779][ T7628] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.102166][ T7628] batman_adv: batadv0: Interface activated: dummy0 [ 101.107320][ T1259] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.109970][ T1259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.125986][ T7628] batadv0: mtu less than device minimum [ 101.129818][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.135651][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.140807][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.147311][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.152320][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.157425][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.162690][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.167848][ T7628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.180831][ T1259] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.183594][ T1259] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.193087][ T46] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.196088][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.322946][ T7643] CIFS mount error: No usable UNC path provided in device string! [ 101.322946][ T7643] [ 101.327338][ T7643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.335115][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 101.348608][ T7645] loop3: detected capacity change from 0 to 7 [ 101.354444][ T7645] Dev loop3: unable to read RDB block 7 [ 101.356309][ T7645] loop3: unable to read partition table [ 101.358177][ T7645] loop3: partition table beyond EOD, truncated [ 101.360105][ T7645] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.504155][ T7655] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 101.529518][ T7655] bond1: entered promiscuous mode [ 101.531989][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.552315][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.555332][ T7655] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 101.559421][ T7655] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 101.566236][ T7655] bond1: (slave vti0): making interface the new active one [ 101.568846][ T7655] vti0: entered promiscuous mode [ 101.572954][ T7655] bond1: (slave vti0): Enslaving as an active interface with an up link [ 101.584428][ T7659] pim6reg1: entered promiscuous mode [ 101.586989][ T7659] pim6reg1: entered allmulticast mode [ 101.588122][ T7661] tmpfs: User quota inode hardlimit too large. [ 101.591837][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 101.715997][ T7665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.589'. [ 102.220151][ T7693] warning: `syz.2.599' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.290070][ T7698] Invalid option length (329) for dns_resolver key [ 102.304780][ T7702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.313773][ T7702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.334686][ T7702] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 102.338511][ T7702] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 102.342716][ T7702] overlayfs: d_ino too big (167, ino=9223372036854776690, xinobits=3) [ 102.348111][ T7702] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 102.351964][ T7702] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 102.355819][ T7702] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 102.363079][ T7702] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 102.367081][ T7702] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 102.370860][ T7702] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 102.375200][ T7702] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 102.813097][ T7751] capability: warning: `syz.3.622' uses 32-bit capabilities (legacy support in use) [ 103.176301][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 103.176317][ T40] audit: type=1400 audit(1780403729.504:904): avc: denied { remount } for pid=7776 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.219410][ T5094] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 103.233360][ T7779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.255974][ T7781] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 103.261307][ T40] audit: type=1400 audit(1780403729.594:905): avc: denied { mounton } for pid=7780 comm="syz.3.634" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.275793][ T7779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.285836][ T40] audit: type=1400 audit(1780403729.614:906): avc: denied { connect } for pid=7778 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.286483][ T7782] netlink: 'syz.2.633': attribute type 9 has an invalid length. [ 103.325980][ T40] audit: type=1400 audit(1780403729.654:907): avc: denied { unlink } for pid=5736 comm="syz-executor" name="file0" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.362576][ T7786] overlay: Unknown parameter ':' [ 103.363924][ T7779] syz.2.633 (7779) used obsolete PPPIOCDETACH ioctl [ 103.449340][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=7784 comm=syz.3.635 [ 103.582322][ T40] audit: type=1400 audit(1780403729.914:908): avc: denied { bind } for pid=7805 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.712357][ T1337] hid_parser_main: 183 callbacks suppressed [ 103.712377][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.721839][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.729152][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.732123][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.735315][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.738681][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.741915][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.747041][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.750337][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.753454][ T1337] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 103.764999][ T1337] hid-generic 00A0:0006:0003.0005: hidraw1: HID v0.05 Device [syz0] on syz0 [ 103.788966][ T40] audit: type=1400 audit(1780403730.124:909): avc: denied { bind } for pid=7828 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.798706][ T40] audit: type=1400 audit(1780403730.124:910): avc: denied { name_bind } for pid=7828 comm="syz.1.649" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.806769][ T40] audit: type=1400 audit(1780403730.124:911): avc: denied { node_bind } for pid=7828 comm="syz.1.649" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.856349][ T7827] fido_id[7827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.913093][ T7836] blkio.reset_stats is deprecated [ 103.916275][ T7836] __nla_validate_parse: 3 callbacks suppressed [ 103.916284][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 104.082104][ T7829] usb usb9: usbfs: process 7829 (syz.1.649) did not claim interface 10 before use [ 104.172786][ T7854] netlink: 'syz.0.659': attribute type 12 has an invalid length. [ 104.181874][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 104.216866][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 104.258222][ T7854] netlink: 'syz.0.659': attribute type 12 has an invalid length. [ 104.261621][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 104.501760][ T7868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.511859][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 104.528444][ T7868] comedi comedi1: pcmmio: I/O port conflict (0x100,32) [ 104.573745][ T40] audit: type=1400 audit(1780403730.904:912): avc: denied { connect } for pid=7878 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.655074][ T7884] befs: (sr0): invalid magic header [ 104.660507][ T7884] befs: (sr0): invalid magic header [ 104.683777][ T40] audit: type=1400 audit(1780403731.014:913): avc: denied { read } for pid=7878 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.114317][ T5822] IPVS: starting estimator thread 0... [ 105.137435][ T7907] atomic_op ffff888033d18998 conn xmit_atomic 0000000000000000 [ 105.156427][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 105.156463][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 105.227336][ T7905] IPVS: using max 21 ests per chain, 50400 per kthread [ 105.329994][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.336548][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.339780][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.342725][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.346262][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.349945][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.353509][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.356744][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.360102][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.363410][ T7916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.391039][ T7917] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.485383][ T7923] netlink: 52 bytes leftover after parsing attributes in process `syz.0.680'. [ 105.806046][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 106.071037][ T7960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 106.077021][ T7959] geneve1: entered allmulticast mode [ 106.117573][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.288329][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 106.291281][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.293923][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.296570][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.299829][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.303917][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.309629][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.314984][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.319156][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.325194][ T34] usb 7-1: config 0 descriptor?? [ 106.539849][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.552629][ T34] usb 7-1: USB disconnect, device number 12 [ 106.575104][ T34] usblp0: removed [ 106.608828][ T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.699617][ T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.729339][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.732380][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.737954][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.741195][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.747543][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.788692][ T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.849685][ T7981] wg1: entered allmulticast mode [ 106.880065][ T7988] misc userio: No port type given on /dev/userio [ 106.911589][ T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.035069][ T7998] binder: 7997:7998 ioctl c00c6211 0 returned -14 [ 107.040112][ T7998] xt_cluster: node mask cannot exceed total number of nodes [ 107.076886][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.135900][ T165] bridge_slave_1: left allmulticast mode [ 107.138110][ T165] bridge_slave_1: left promiscuous mode [ 107.139980][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.147272][ T165] bridge_slave_0: left allmulticast mode [ 107.149007][ T165] bridge_slave_0: left promiscuous mode [ 107.152144][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.220285][ T165] erspan0 (unregistering): left promiscuous mode [ 107.240931][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 107.244519][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.249495][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.252282][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.255797][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.260556][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.263971][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.269152][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.271986][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.276111][ T34] usb 7-1: config 0 descriptor?? [ 107.320273][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.324376][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.328507][ T165] bond0 (unregistering): Released all slaves [ 107.457894][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.460426][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.462732][ T7973] bridge_slave_0: entered allmulticast mode [ 107.465755][ T7973] bridge_slave_0: entered promiscuous mode [ 107.471715][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.474210][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.476772][ T7973] bridge_slave_1: entered allmulticast mode [ 107.479897][ T7973] bridge_slave_1: entered promiscuous mode [ 107.488596][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.532330][ T7973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.536346][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.543969][ T7973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.563357][ T7973] team0: Port device team_slave_0 added [ 107.566330][ T7973] team0: Port device team_slave_1 added [ 107.579214][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.581371][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.591545][ T7973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.597005][ T7973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.599217][ T7973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.606962][ T7973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.639449][ T7973] hsr_slave_0: entered promiscuous mode [ 107.641697][ T7973] hsr_slave_1: entered promiscuous mode [ 107.643772][ T7973] debugfs: 'hsr0' already exists in 'hsr' [ 107.645661][ T7973] Cannot create hsr debugfs directory [ 107.693188][ T165] veth0_to_team: left promiscuous mode [ 108.667592][ T8027] FAULT_INJECTION: forcing a failure. [ 108.667592][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.671698][ T8027] CPU: 2 UID: 0 PID: 8027 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(full) [ 108.671713][ T8027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.671720][ T8027] Call Trace: [ 108.671725][ T8027] [ 108.671730][ T8027] dump_stack_lvl+0x100/0x190 [ 108.671755][ T8027] should_fail_ex.cold+0x5/0xa [ 108.671771][ T8027] copy_fpstate_to_sigframe+0x842/0xb00 [ 108.671783][ T8027] ? find_held_lock+0x2b/0x80 [ 108.671795][ T8027] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 108.671807][ T8027] ? do_raw_spin_unlock+0x145/0x1e0 [ 108.671823][ T8027] ? irqentry_exit+0x24d/0x970 [ 108.671845][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 108.671857][ T8027] ? x86_task_fpu+0x5f/0x90 [ 108.671874][ T8027] get_sigframe+0x3fb/0x940 [ 108.671893][ T8027] ? __pfx_get_sigframe+0x10/0x10 [ 108.671910][ T8027] ? siginfo_layout+0x156/0x290 [ 108.671926][ T8027] x64_setup_rt_frame+0x12f/0xce0 [ 108.671945][ T8027] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 108.671962][ T8027] ? find_held_lock+0x2b/0x80 [ 108.671971][ T8027] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 108.671985][ T8027] arch_do_signal_or_restart+0x5ee/0x7e0 [ 108.672006][ T8027] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 108.672027][ T8027] ? rcu_is_watching+0x12/0xc0 [ 108.672044][ T8027] irqentry_exit+0x39e/0x970 [ 108.672060][ T8027] asm_exc_page_fault+0x26/0x30 [ 108.672070][ T8027] RIP: 0033:0x7fe9fad86480 [ 108.672080][ T8027] Code: cf 44 89 c2 8d 4a 01 48 89 f8 f3 a4 c3 48 89 d1 31 c0 49 89 f8 f3 aa 4c 89 c7 e9 9b 48 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <48> ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 [ 108.672091][ T8027] RSP: 002b:00007fe9fbbd9bd8 EFLAGS: 00010212 [ 108.672100][ T8027] RAX: 0000200000000080 RBX: 0000000000000000 RCX: 0000000000000000 [ 108.672107][ T8027] RDX: 00000000000003ff RSI: 0000200000000080 RDI: 00007fe9fbbd9c00 [ 108.672113][ T8027] RBP: 00007fe9fbbd9c00 R08: 0000000000000000 R09: 0000000000000000 [ 108.672119][ T8027] R10: 0000200000000080 R11: 0000000000000002 R12: cccccccccccccccd [ 108.672125][ T8027] R13: 00007fe9fb016038 R14: 00007fe9fb015fa0 R15: 00007ffdff3965c8 [ 108.672138][ T8027] [ 108.786727][ T5752] Bluetooth: hci1: command tx timeout [ 109.005482][ T165] hsr_slave_0: left promiscuous mode [ 109.018270][ T844] usb 7-1: USB disconnect, device number 13 [ 109.020931][ T165] hsr_slave_1: left promiscuous mode [ 109.023933][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.026206][ T844] usblp0: removed [ 109.027170][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.035704][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.039249][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.054611][ T165] veth1_macvtap: left promiscuous mode [ 109.057113][ T165] veth0_macvtap: left promiscuous mode [ 109.059630][ T165] veth1_vlan: left promiscuous mode [ 109.062097][ T165] veth0_vlan: left promiscuous mode [ 109.356142][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.401763][ T8039] bad cache= option: none 70 [ 109.401763][ T8039] nr_mlock 0 [ 109.401763][ T8039] nr_zspages 0 [ 109.401763][ T8039] nr_free_cma 0 [ 109.401763][ T8039] numa_hit 715630 [ 109.401763][ T8039] numa_miss 24452 [ 109.401763][ T8039] numa_foreign 24452 [ 109.401763][ T8039] numa_interleave 7826 [ 109.401763][ T8039] numa_local 711097 [ 109.401763][ T8039] numa_other 28985 [ 109.401763][ T8039] nr_inactive_anon 16520 [ 109.401763][ T8039] nr_active_anon 10072 [ 109.401763][ T8039] nr_inactive_file 56298 [ 109.401763][ T8039] nr_active_file 8899 [ 109.401763][ T8039] nr_unevictable 1768 [ 109.401763][ T8039] nr_slab_reclaimable 10474 [ 109.401763][ T8039] nr_slab_unreclaimable 70822 [ 109.401763][ T8039] nr_isolated_anon 0 [ 109.401763][ T8039] nr_isolated_file 0 [ 109.401763][ T8039] workingset_nodes 34 [ 109.401763][ T8039] workingset_refault_anon 1 [ 109.401763][ T8039] workingset_refault_file 1233 [ 109.401763][ T8039] workingset_activate_anon 0 [ 109.401763][ T8039] workingset_activate_file 1233 [ 109.401763][ T8039] workingset_restore_anon 0 [ 109.401763][ T8039] workingset_restore_file 0 [ 109.401763][ T8039] workingset_nodereclaim 0 [ 109.401763][ T8039] nr_anon_pages 9581 [ 109.401763][ T8039] nr_mapped 26205 [ 109.401763][ T8039] nr_file_pages 83944 [ 109.401763][ T8039] nr_dirty 70 [ 109.401763][ T8039] nr_writeback 0 [ 109.401763][ T8039] nr_shmem 18751 [ 109.401763][ T8039] nr_shmem_hugepages 0 [ 109.401763][ T8039] nr_shmem_pmdmapped 0 [ 109.401763][ T8039] nr_file_hugepages 0 [ 109.401763][ T8039] nr_file_pmdmapped 0 [ 109.401763][ T8039] nr_anon_transparent_hugepages 0 [ 109.401763][ T8039] nr_vmscan_write 912 [ 109.401763][ T8039] nr_vmscan_immediate_reclaim 0 [ 109.401763][ T8039] nr_dirtied 4659 [ 109.401763][ T8039] nr_written 4589 [ 109.401763][ T8039] nr_throttled_written 0 [ 109.401763][ T8039] nr_kernel_misc_reclaimable 0 [ 109.401763][ T8039] nr_foll_pin_acquired 3782 [ 109.401763][ T8039] nr_foll_pin_released 3782 [ 109.402122][ T8039] CIFS: VFS: bad cache= option: none 70 [ 109.402122][ T8039] nr_mlock 0 [ 109.402122][ T8039] nr_zspages 0 [ 109.402122][ T8039] nr_free_cma 0 [ 109.402122][ T8039] numa_hit 715630 [ 109.402122][ T8039] numa_miss 24452 [ 109.402122][ T8039] numa_foreign 24452 [ 109.402122][ T8039] numa_interleave 7826 [ 109.402122][ T8039] numa_local 711097 [ 109.402122][ T8039] numa_other 28985 [ 109.402122][ T8039] nr_inactive_anon 16520 [ 109.402122][ T8039] nr_active_anon 10072 [ 109.402122][ T8039] nr_inactive_file 56298 [ 109.402122][ T8039] nr_active_file 8899 [ 109.402122][ T8039] nr_unevictable 1768 [ 109.402122][ T8039] nr_slab_reclaimable 10474 [ 109.402122][ T8039] nr_slab_unreclaimable 70822 [ 109.402122][ T8039] nr_isolated_anon 0 [ 109.402122][ T8039] nr_isolated_file 0 [ 109.402122][ T8039] workingset_nodes 34 [ 109.402122][ T8039] workingset_refault_anon 1 [ 109.402122][ T8039] workingset_refault_file 1233 [ 109.402122][ T8039] workingset_activate_anon 0 [ 109.402122][ T8039] workingset_activate_file 1233 [ 109.402122][ T8039] workingset_restore_anon 0 [ 109.402122][ T8039] workingset_restore_file 0 [ 109.402122][ T8039] workingset_nodereclaim 0 [ 109.402122][ T8039] nr_anon_pages 9581 [ 109.402122][ T8039] nr_mapped 26205 [ 109.402122][ T8039] nr_file_pages 83944 [ 109.402122][ T8039] nr_dirty 70 [ 109.402122][ T8039] nr_writeback 0 [ 109.402122][ T8039] nr_shmem 18751 [ 109.402122][ T8039] nr_shmem_hugepages 0 [ 109.402122][ T8039] nr_shmem_pmdmapped 0 [ 109.402122][ T8039] nr_file_hugepages 0 [ 109.402122][ T8039] nr_file_pmdmapped 0 [ 109.402122][ T8039] nr_anon_transparent_hugepages 0 [ 109.402122][ T8039] nr_vmscan_write 912 [ 109.402122][ T8039] nr_vmscan_immediate_reclaim 0 [ 109.402122][ T8039] nr_dirtied 4659 [ 109.402122][ T8039] nr_written 4589 [ 109.402122][ T8039] nr_throttled_written 0 [ 109.402122][ T8039] nr_kernel_misc_reclaimable 0 [ 109.402122][ T8039] nr_foll_pin_acquired 3782 [ 109.402122][ T8039] nr_foll_pin_released 3782 [ 109.469729][ T7973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.482946][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 109.482963][ T40] audit: type=1400 audit(1780403735.814:955): avc: denied { create } for pid=8037 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.528197][ T8039] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.546496][ T40] audit: type=1400 audit(1780403735.864:956): avc: denied { write } for pid=8037 comm="syz.3.714" path="socket:[22574]" dev="sockfs" ino=22574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.558117][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.561828][ T7973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.583072][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.586434][ T7973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.594918][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.620901][ T7973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.629255][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.666219][ T40] audit: type=1400 audit(1780403735.994:957): avc: denied { write } for pid=8048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.706352][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.728041][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.735783][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.738642][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.767054][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.770098][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.785606][ T40] audit: type=1400 audit(1780403736.114:958): avc: denied { write } for pid=8058 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.854597][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 109.868521][ T40] audit: type=1400 audit(1780403736.204:959): avc: denied { mount } for pid=8062 comm="syz.0.717" name="/" dev="pstore" ino=5760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 109.876191][ T8063] netlink: 177296 bytes leftover after parsing attributes in process `syz.0.717'. [ 109.881510][ T40] audit: type=1400 audit(1780403736.214:960): avc: denied { read } for pid=8062 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.928204][ T165] IPVS: stop unused estimator thread 0... [ 109.998599][ T40] audit: type=1400 audit(1780403736.334:961): avc: denied { write } for pid=8073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.066553][ T40] audit: type=1400 audit(1780403736.394:962): avc: denied { write } for pid=8079 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.114788][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 110.129576][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.168717][ T8088] FAULT_INJECTION: forcing a failure. [ 110.168717][ T8088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 110.174239][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.2.720 Not tainted syzkaller #0 PREEMPT(full) [ 110.174254][ T8088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.174261][ T8088] Call Trace: [ 110.174265][ T8088] [ 110.174270][ T8088] dump_stack_lvl+0x100/0x190 [ 110.174287][ T8088] should_fail_ex.cold+0x5/0xa [ 110.174302][ T8088] ? prepare_alloc_pages+0x16d/0x5f0 [ 110.174322][ T8088] should_fail_alloc_page+0xeb/0x140 [ 110.174341][ T8088] prepare_alloc_pages+0x1f0/0x5f0 [ 110.174363][ T8088] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 110.174397][ T8088] ? __pfx___might_resched+0x10/0x10 [ 110.174420][ T8088] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 110.174438][ T8088] ? process_measurement+0x4c8/0x2350 [ 110.174466][ T8088] ? up_write+0x28c/0x4f0 [ 110.174482][ T8088] ? process_measurement+0x1f4/0x2350 [ 110.174500][ T8088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.174513][ T8088] ? policy_nodemask+0xed/0x4f0 [ 110.174526][ T8088] alloc_pages_mpol+0x1fb/0x540 [ 110.174539][ T8088] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 110.174552][ T8088] ? __lock_acquire+0x4a5/0x2630 [ 110.174566][ T8088] folio_alloc_mpol_noprof+0x36/0x260 [ 110.174580][ T8088] vma_alloc_folio_noprof+0xed/0x1d0 [ 110.174594][ T8088] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 110.174611][ T8088] do_anonymous_page+0xb46/0x2050 [ 110.174627][ T8088] ? rcu_read_unlock+0x2d/0xb0 [ 110.174645][ T8088] __handle_mm_fault+0x1d2c/0x2a00 [ 110.174666][ T8088] ? mt_find+0x45e/0x8e0 [ 110.174682][ T8088] ? __pfx___handle_mm_fault+0x10/0x10 [ 110.174695][ T8088] ? __pfx_mt_find+0x10/0x10 [ 110.174716][ T8088] ? find_vma+0xbf/0x140 [ 110.174728][ T8088] ? __pfx_find_vma+0x10/0x10 [ 110.174745][ T8088] handle_mm_fault+0x37b/0xa30 [ 110.174769][ T8088] do_user_addr_fault+0x74c/0x12f0 [ 110.174786][ T8088] ? trace_page_fault_kernel+0x7a/0x200 [ 110.174800][ T8088] exc_page_fault+0x6f/0xd0 [ 110.174814][ T8088] asm_exc_page_fault+0x26/0x30 [ 110.174824][ T8088] RIP: 0010:x64_setup_rt_frame+0x1fb/0xce0 [ 110.174849][ T8088] Code: 44 24 10 e8 c7 87 5e 00 48 8b 44 24 10 48 39 e8 0f 82 31 08 00 00 e8 94 8d 5e 00 0f 01 cb 0f ae e8 48 8d 45 08 48 89 44 24 10 <4c> 89 75 08 e8 7c 8d 5e 00 48 c7 45 10 00 00 00 00 e8 6f 8d 5e 00 [ 110.174864][ T8088] RSP: 0000:ffffc90003b37d10 EFLAGS: 00050293 [ 110.174873][ T8088] RAX: 00007fa2f3413f00 RBX: ffffc90003b37f48 RCX: ffffffff81aa22b9 [ 110.174880][ T8088] RDX: ffff88802b0d2540 RSI: ffffffff81aa22cc RDI: ffff88802b0d2540 [ 110.174887][ T8088] RBP: 00007fa2f3413ef8 R08: 0000000000000006 R09: 00007ffffffff000 [ 110.174893][ T8088] R10: 00007fa2f3413ef8 R11: 0000000000000000 R12: ffff88802b0d2540 [ 110.174899][ T8088] R13: ffffc90003b37e28 R14: 0000000000000007 R15: ffff88802b0d2ed0 [ 110.174910][ T8088] ? x64_setup_rt_frame+0x1d9/0xce0 [ 110.174925][ T8088] ? x64_setup_rt_frame+0x1ec/0xce0 [ 110.174946][ T8088] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 110.174963][ T8088] ? find_held_lock+0x2b/0x80 [ 110.174972][ T8088] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 110.174985][ T8088] arch_do_signal_or_restart+0x5ee/0x7e0 [ 110.175002][ T8088] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 110.175023][ T8088] ? rcu_is_watching+0x12/0xc0 [ 110.175041][ T8088] irqentry_exit+0x39e/0x970 [ 110.175056][ T8088] asm_exc_page_fault+0x26/0x30 [ 110.175065][ T8088] RIP: 0033:0x7fa2f2586480 [ 110.175074][ T8088] Code: cf 44 89 c2 8d 4a 01 48 89 f8 f3 a4 c3 48 89 d1 31 c0 49 89 f8 f3 aa 4c 89 c7 e9 9b 48 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <48> ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 [ 110.175084][ T8088] RSP: 002b:00007fa2f3414bd8 EFLAGS: 00010212 [ 110.175091][ T8088] RAX: 0000200000000080 RBX: 0000000000000000 RCX: 0000000000000000 [ 110.175097][ T8088] RDX: 00000000000003ff RSI: 0000200000000080 RDI: 00007fa2f3414c00 [ 110.175104][ T8088] RBP: 00007fa2f3414c00 R08: 0000000000000000 R09: 0000000000000000 [ 110.175109][ T8088] R10: 0000200000000080 R11: 0000000000000002 R12: cccccccccccccccd [ 110.175115][ T8088] R13: 00007fa2f2816038 R14: 00007fa2f2815fa0 R15: 00007ffc7a775f78 [ 110.175129][ T8088] [ 110.343281][ T8097] netlink: 'syz.2.721': attribute type 13 has an invalid length. [ 110.356482][ T8097] gretap0: refused to change device tx_queue_len [ 110.366735][ T8097] net_ratelimit: 32 callbacks suppressed [ 110.366751][ T8097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.428788][ T7973] veth0_vlan: entered promiscuous mode [ 110.433675][ T7973] veth1_vlan: entered promiscuous mode [ 110.453942][ T7973] veth0_macvtap: entered promiscuous mode [ 110.463702][ T7973] veth1_macvtap: entered promiscuous mode [ 110.472538][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.522794][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.540400][ T165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.555118][ T165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.562254][ T8103] syzkaller1: entered promiscuous mode [ 110.564060][ T8103] syzkaller1: entered allmulticast mode [ 110.567638][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.571251][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.645001][ T8113] netlink: 144 bytes leftover after parsing attributes in process `syz.3.727'. [ 110.665617][ T40] audit: type=1400 audit(1780403736.994:963): avc: denied { setattr } for pid=8112 comm="syz.3.727" name="[userfaultfd]" dev="anon_inodefs" ino=20286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.670096][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.673886][ T40] audit: type=1400 audit(1780403737.014:964): avc: denied { execute_no_trans } for pid=8116 comm="syz.0.726" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=20349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 110.676974][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 110.683749][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.742346][ T8123] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 110.755208][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.765543][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.813396][ T8126] FAULT_INJECTION: forcing a failure. [ 110.813396][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 110.818503][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.2.729 Not tainted syzkaller #0 PREEMPT(full) [ 110.818528][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.818539][ T8126] Call Trace: [ 110.818546][ T8126] [ 110.818554][ T8126] dump_stack_lvl+0x100/0x190 [ 110.818579][ T8126] should_fail_ex.cold+0x5/0xa [ 110.818605][ T8126] should_failslab+0xc2/0x120 [ 110.818627][ T8126] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 110.818654][ T8126] ? alloc_empty_file+0x5b/0x1c0 [ 110.818689][ T8126] ? __pfx_stack_trace_save+0x10/0x10 [ 110.818709][ T8126] alloc_empty_file+0x5b/0x1c0 [ 110.818734][ T8126] path_openat+0xe8/0x31a0 [ 110.818755][ T8126] ? kasan_save_stack+0x3f/0x50 [ 110.818773][ T8126] ? kasan_save_stack+0x30/0x50 [ 110.818788][ T8126] ? kasan_save_track+0x14/0x30 [ 110.818803][ T8126] ? __kasan_slab_alloc+0x89/0x90 [ 110.818819][ T8126] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 110.818844][ T8126] ? do_getname+0x35/0x390 [ 110.818866][ T8126] ? do_sys_openat2+0xc5/0x1e0 [ 110.818890][ T8126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.818911][ T8126] ? __pfx_path_openat+0x10/0x10 [ 110.818941][ T8126] do_file_open+0x20e/0x430 [ 110.818963][ T8126] ? __pfx_do_file_open+0x10/0x10 [ 110.819001][ T8126] ? alloc_fd+0x476/0x790 [ 110.819024][ T8126] ? do_getname+0x191/0x390 [ 110.819049][ T8126] do_sys_openat2+0x10d/0x1e0 [ 110.819074][ T8126] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.819103][ T8126] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 110.819135][ T8126] __x64_sys_openat+0x12d/0x210 [ 110.819160][ T8126] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.819187][ T8126] ? rcu_is_watching+0x12/0xc0 [ 110.819214][ T8126] do_syscall_64+0x115/0x870 [ 110.819234][ T8126] ? clear_bhb_loop+0x40/0x90 [ 110.819253][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.819270][ T8126] RIP: 0033:0x7fa2f255d68e [ 110.819284][ T8126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.819300][ T8126] RSP: 002b:00007fa2f3414b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.819317][ T8126] RAX: ffffffffffffffda RBX: 00007fa2f34156c0 RCX: 00007fa2f255d68e [ 110.819328][ T8126] RDX: 0000000000000002 RSI: 00007fa2f3414c00 RDI: ffffffffffffff9c [ 110.819338][ T8126] RBP: 00007fa2f3414c00 R08: 0000000000000000 R09: 0000000000000000 [ 110.819347][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 110.819357][ T8126] R13: 00007fa2f2816038 R14: 00007fa2f2815fa0 R15: 00007ffc7a775f78 [ 110.819381][ T8126] [ 110.906398][ T5752] Bluetooth: hci1: command tx timeout [ 111.282308][ T8161] SELinux: unknown common [ 111.283835][ T8161] SELinux: failed to load policy [ 111.302528][ T8163] FAULT_INJECTION: forcing a failure. [ 111.302528][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.316798][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.2.741 Not tainted syzkaller #0 PREEMPT(full) [ 111.316822][ T8163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.316832][ T8163] Call Trace: [ 111.316839][ T8163] [ 111.316848][ T8163] dump_stack_lvl+0x100/0x190 [ 111.316883][ T8163] should_fail_ex.cold+0x5/0xa [ 111.316907][ T8163] _copy_from_user+0x2e/0xd0 [ 111.316938][ T8163] restore_altstack+0x98/0x170 [ 111.316956][ T8163] ? __pfx_restore_altstack+0x10/0x10 [ 111.316978][ T8163] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.317031][ T8163] ? lockdep_hardirqs_on+0x78/0x100 [ 111.317057][ T8163] ? _raw_spin_unlock_irq+0x2e/0x50 [ 111.317081][ T8163] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 111.317109][ T8163] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 111.317141][ T8163] ? rcu_is_watching+0x12/0xc0 [ 111.317170][ T8163] do_syscall_64+0x115/0x870 [ 111.317194][ T8163] ? clear_bhb_loop+0x40/0x90 [ 111.317217][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.317236][ T8163] RIP: 0033:0x7fa2f253e1d9 [ 111.317251][ T8163] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 111.317268][ T8163] RSP: 002b:00007fa2f3413f00 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 111.317286][ T8163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2f253e1d9 [ 111.317298][ T8163] RDX: 00007fa2f3413f00 RSI: 00007fa2f3414030 RDI: 0000000000000021 [ 111.317309][ T8163] RBP: 00007fa2f3414c00 R08: 0000000000000000 R09: 0000000000000000 [ 111.317320][ T8163] R10: 0000200000000080 R11: 0000000000000206 R12: cccccccccccccccd [ 111.317332][ T8163] R13: 00007fa2f2816038 R14: 00007fa2f2815fa0 R15: 00007ffc7a775f78 [ 111.317356][ T8163] [ 111.423883][ T8167] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 111.554511][ T8172] /dev/sg0: Can't lookup blockdev [ 111.761598][ T8191] FAULT_INJECTION: forcing a failure. [ 111.761598][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 111.765414][ T8191] CPU: 3 UID: 0 PID: 8191 Comm: syz.4.753 Not tainted syzkaller #0 PREEMPT(full) [ 111.765429][ T8191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.765439][ T8191] Call Trace: [ 111.765444][ T8191] [ 111.765448][ T8191] dump_stack_lvl+0x100/0x190 [ 111.765470][ T8191] should_fail_ex.cold+0x5/0xa [ 111.765488][ T8191] ? tomoyo_realpath_from_path+0xb6/0x690 [ 111.765509][ T8191] should_failslab+0xc2/0x120 [ 111.765522][ T8191] __kmalloc_noprof+0xe0/0x850 [ 111.765538][ T8191] ? kfree+0x1dd/0x6c0 [ 111.765553][ T8191] tomoyo_realpath_from_path+0xb6/0x690 [ 111.765573][ T8191] tomoyo_check_open_permission+0x2af/0x3c0 [ 111.765588][ T8191] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 111.765608][ T8191] ? hook_file_open+0x24e/0x7a0 [ 111.765628][ T8191] ? path_get+0x61/0x80 [ 111.765645][ T8191] tomoyo_file_open+0x6b/0x90 [ 111.765657][ T8191] security_file_open+0xb5/0x1e0 [ 111.765667][ T8191] do_dentry_open+0x588/0x14d0 [ 111.765684][ T8191] vfs_open+0x82/0x3f0 [ 111.765700][ T8191] path_openat+0x208c/0x31a0 [ 111.765718][ T8191] ? __pfx_path_openat+0x10/0x10 [ 111.765737][ T8191] do_file_open+0x20e/0x430 [ 111.765751][ T8191] ? __pfx_do_file_open+0x10/0x10 [ 111.765775][ T8191] ? alloc_fd+0x476/0x790 [ 111.765790][ T8191] ? do_getname+0x191/0x390 [ 111.765807][ T8191] do_sys_openat2+0x10d/0x1e0 [ 111.765822][ T8191] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.765839][ T8191] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 111.765859][ T8191] __x64_sys_openat+0x12d/0x210 [ 111.765875][ T8191] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.765893][ T8191] ? rcu_is_watching+0x12/0xc0 [ 111.765910][ T8191] do_syscall_64+0x115/0x870 [ 111.765932][ T8191] ? clear_bhb_loop+0x40/0x90 [ 111.765945][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.765956][ T8191] RIP: 0033:0x7f0c5335d68e [ 111.765965][ T8191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.765976][ T8191] RSP: 002b:00007f0c54184b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.765986][ T8191] RAX: ffffffffffffffda RBX: 00007f0c541856c0 RCX: 00007f0c5335d68e [ 111.765993][ T8191] RDX: 0000000000000002 RSI: 00007f0c54184c00 RDI: ffffffffffffff9c [ 111.765999][ T8191] RBP: 00007f0c54184c00 R08: 0000000000000000 R09: 0000000000000000 [ 111.766005][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 111.766011][ T8191] R13: 00007f0c53616038 R14: 00007f0c53615fa0 R15: 00007fff5a5b2928 [ 111.766025][ T8191] [ 111.766029][ T8191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.816375][ T8189] tipc: Enabling of bearer rejected, failed to enable media [ 111.865529][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8189 comm=syz.0.752 [ 111.872411][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8189 comm=syz.0.752 [ 111.945976][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'. [ 112.093476][ T8216] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.226459][ T8220] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 112.408410][ T8226] FAULT_INJECTION: forcing a failure. [ 112.408410][ T8226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.427443][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.0.767 Not tainted syzkaller #0 PREEMPT(full) [ 112.427460][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.427466][ T8226] Call Trace: [ 112.427470][ T8226] [ 112.427474][ T8226] dump_stack_lvl+0x100/0x190 [ 112.427491][ T8226] should_fail_ex.cold+0x5/0xa [ 112.427507][ T8226] __fpu_restore_sig+0x100/0x13c0 [ 112.427520][ T8226] ? __lock_acquire+0x4a5/0x2630 [ 112.427534][ T8226] ? __pfx___fpu_restore_sig+0x10/0x10 [ 112.427551][ T8226] ? __might_fault+0xc5/0x140 [ 112.427570][ T8226] fpu__restore_sig+0x151/0x190 [ 112.427583][ T8226] restore_sigcontext+0x4cb/0x6a0 [ 112.427607][ T8226] ? __pfx_restore_sigcontext+0x10/0x10 [ 112.427632][ T8226] ? __pfx_restore_altstack+0x10/0x10 [ 112.427645][ T8226] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.427657][ T8226] ? lockdep_hardirqs_on+0x78/0x100 [ 112.427673][ T8226] __do_sys_rt_sigreturn+0x229/0x2c0 [ 112.427690][ T8226] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 112.427708][ T8226] ? rcu_is_watching+0x12/0xc0 [ 112.427725][ T8226] do_syscall_64+0x115/0x870 [ 112.427738][ T8226] ? clear_bhb_loop+0x40/0x90 [ 112.427767][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.427779][ T8226] RIP: 0033:0x7f8607586480 [ 112.427788][ T8226] Code: cf 44 89 c2 8d 4a 01 48 89 f8 f3 a4 c3 48 89 d1 31 c0 49 89 f8 f3 aa 4c 89 c7 e9 9b 48 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <48> ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 [ 112.427798][ T8226] RSP: 002b:00007f8608409bd8 EFLAGS: 00010212 [ 112.427808][ T8226] RAX: 0000200000000080 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.427814][ T8226] RDX: 00000000000003ff RSI: 0000200000000080 RDI: 00007f8608409c00 [ 112.427821][ T8226] RBP: 00007f8608409c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.427826][ T8226] R10: 0000200000000080 R11: 0000000000000002 R12: cccccccccccccccd [ 112.427833][ T8226] R13: 00007f8607816038 R14: 00007f8607815fa0 R15: 00007ffcf86f11e8 [ 112.427846][ T8226] [ 112.436836][ T5834] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 112.594510][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 112.645227][ T8239] sctp: [Deprecated]: syz.2.772 (pid 8239) Use of int in max_burst socket option. [ 112.645227][ T8239] Use struct sctp_assoc_value instead [ 112.656738][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 112.659660][ T5834] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.664510][ T5834] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.667820][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.670433][ T5834] usb 8-1: Product: syz [ 112.671783][ T5834] usb 8-1: Manufacturer: syz [ 112.673480][ T5834] usb 8-1: SerialNumber: syz [ 112.678461][ T5834] usb 8-1: config 0 descriptor?? [ 112.680873][ T8218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.801616][ T8243] kvm: kvm [8242]: vcpu0, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 112.841870][ T8245] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.845757][ T8245] SET target dimension over the limit! [ 112.891530][ T8252] binder: 8247:8252 unknown command 0 [ 112.893308][ T8252] binder: 8247:8252 ioctl c0306201 200000000480 returned -22 [ 112.897424][ T8250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.900617][ T8250] batadv_slave_0: entered promiscuous mode [ 112.903158][ T8250] batadv_slave_0: entered allmulticast mode [ 112.939683][ T8255] Oops: general protection fault, probably for non-canonical address 0xe000080fc4c21615: 0000 [#1] SMP KASAN NOPTI [ 112.943288][ T8255] KASAN: probably user-memory-access in range [0x0000607e2610b0a8-0x0000607e2610b0af] [ 112.946247][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.3.764 Not tainted syzkaller #0 PREEMPT(full) [ 112.948980][ T8255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.951992][ T8255] RIP: 0010:try_module_get+0x23/0xd0 [ 112.953610][ T8255] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 112.953998][ T8257] FAULT_INJECTION: forcing a failure. [ 112.953998][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.959982][ T8255] RSP: 0018:ffffc900063d78c0 EFLAGS: 00010202 [ 112.960005][ T8255] RAX: dffffc0000000000 RBX: 0000607e2610b0a8 RCX: ffffc9000c7c1000 [ 112.960016][ T8255] RDX: 00000c0fc4c21615 RSI: ffffffff87f03270 RDI: 0000607e2610b0a8 [ 112.960028][ T8255] RBP: ffff88802d4fa400 R08: 0000000000000001 R09: fffffbfff1fdb245 [ 112.960040][ T8255] R10: ffffffff8fed922f R11: 0000000000000000 R12: ffff8880284a8e00 [ 112.960052][ T8255] R13: ffff88803716a900 R14: ffff88802e759940 R15: ffff8880284a8e48 [ 112.960065][ T8255] FS: 00007fe9f89b46c0(0000) GS:ffff8880d6483000(0000) knlGS:0000000000000000 [ 112.960096][ T8255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.960098][ T5752] Bluetooth: hci1: command tx timeout [ 112.960112][ T8255] CR2: 0000000000000000 CR3: 000000005aa48000 CR4: 0000000000352ef0 [ 112.960123][ T8255] Call Trace: [ 112.960129][ T8255] [ 112.960137][ T8255] dvb_device_open+0x124/0x3b0 [ 112.960174][ T8255] ? __pfx_dvb_device_open+0x10/0x10 [ 112.960195][ T8255] chrdev_open+0x234/0x6a0 [ 112.960219][ T8255] ? __pfx_chrdev_open+0x10/0x10 [ 112.964915][ T8257] CPU: 2 UID: 0 PID: 8257 Comm: syz.4.778 Not tainted syzkaller #0 PREEMPT(full) [ 112.964930][ T8257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.964936][ T8257] Call Trace: [ 112.964940][ T8257] [ 112.964944][ T8257] dump_stack_lvl+0x100/0x190 [ 112.964960][ T8257] should_fail_ex.cold+0x5/0xa [ 112.964975][ T8257] copy_fpstate_to_sigframe+0x842/0xb00 [ 112.965012][ T8257] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 112.965038][ T8257] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 112.965054][ T8257] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.965071][ T8257] ? trace_irq_enable.constprop.0+0x11e/0x160 [ 112.965086][ T8257] ? x86_task_fpu+0x5f/0x90 [ 112.965100][ T8257] get_sigframe+0x3fb/0x940 [ 112.965130][ T8257] ? __pfx_get_sigframe+0x10/0x10 [ 112.965145][ T8257] ? trace_irq_enable.constprop.0+0x31/0x160 [ 112.965159][ T8257] ? siginfo_layout+0x156/0x290 [ 112.965173][ T8257] x64_setup_rt_frame+0x12f/0xce0 [ 112.965190][ T8257] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 112.965207][ T8257] arch_do_signal_or_restart+0x5ee/0x7e0 [ 112.965222][ T8257] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.965240][ T8257] ? rcu_is_watching+0x12/0xc0 [ 112.965256][ T8257] exit_to_user_mode_loop+0x98/0x670 [ 112.965268][ T8257] ? rcu_is_watching+0x12/0xc0 [ 112.965286][ T8257] do_syscall_64+0x666/0x870 [ 112.965307][ T8257] ? clear_bhb_loop+0x40/0x90 [ 112.965319][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.965329][ T8257] RIP: 0033:0x7f0c53386480 [ 112.965338][ T8257] Code: cf 44 89 c2 8d 4a 01 48 89 f8 f3 a4 c3 48 89 d1 31 c0 49 89 f8 f3 aa 4c 89 c7 e9 9b 48 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <48> ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 [ 112.965349][ T8257] RSP: 002b:00007f0c54184bd8 EFLAGS: 00010212 [ 112.965358][ T8257] RAX: 0000200000000080 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.965364][ T8257] RDX: 00000000000003ff RSI: 0000200000000080 RDI: 00007f0c54184c00 [ 112.965370][ T8257] RBP: 00007f0c54184c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.965376][ T8257] R10: 0000200000000080 R11: 0000000000000002 R12: cccccccccccccccd [ 112.965382][ T8257] R13: 00007f0c53616038 R14: 00007f0c53615fa0 R15: 00007fff5a5b2928 [ 112.965391][ T8257] [ 113.062367][ T8255] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 113.064275][ T8255] do_dentry_open+0x6ab/0x14d0 [ 113.065759][ T8255] ? __pfx_chrdev_open+0x10/0x10 [ 113.067259][ T8255] vfs_open+0x82/0x3f0 [ 113.068501][ T8255] path_openat+0x208c/0x31a0 [ 113.069931][ T8255] ? __pfx_path_openat+0x10/0x10 [ 113.071584][ T8255] do_file_open+0x20e/0x430 [ 113.073098][ T8255] ? __pfx_do_file_open+0x10/0x10 [ 113.075037][ T8255] ? alloc_fd+0x476/0x790 [ 113.076649][ T8255] ? do_getname+0x191/0x390 [ 113.078066][ T8255] do_sys_openat2+0x10d/0x1e0 [ 113.079560][ T8255] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.081201][ T8255] __x64_sys_openat+0x12d/0x210 [ 113.082718][ T8255] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.084336][ T8255] ? rcu_is_watching+0x12/0xc0 [ 113.085811][ T8255] do_syscall_64+0x115/0x870 [ 113.087358][ T8255] ? clear_bhb_loop+0x40/0x90 [ 113.088806][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.090733][ T8255] RIP: 0033:0x7fe9fad5d68e [ 113.092290][ T8255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.098569][ T8255] RSP: 002b:00007fe9f89b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.101118][ T8255] RAX: ffffffffffffffda RBX: 00007fe9f89b46c0 RCX: 00007fe9fad5d68e [ 113.103494][ T8255] RDX: 0000000000000002 RSI: 00007fe9f89b3c00 RDI: ffffffffffffff9c [ 113.105893][ T8255] RBP: 00007fe9f89b3c00 R08: 0000000000000000 R09: 0000000000000000 [ 113.108297][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 113.110729][ T8255] R13: 00007fe9fb016128 R14: 00007fe9fb016090 R15: 00007ffdff3965c8 [ 113.113154][ T8255] [ 113.114218][ T8255] Modules linked in: [ 113.116192][ T8255] ---[ end trace 0000000000000000 ]--- [ 113.119302][ T8255] RIP: 0010:try_module_get+0x23/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.121039][ T8255] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 113.127738][ T8255] RSP: 0018:ffffc900063d78c0 EFLAGS: 00010202 [ 113.144285][ T8255] RAX: dffffc0000000000 RBX: 0000607e2610b0a8 RCX: ffffc9000c7c1000 [ 113.147222][ T8255] RDX: 00000c0fc4c21615 RSI: ffffffff87f03270 RDI: 0000607e2610b0a8 [ 113.149814][ T8255] RBP: ffff88802d4fa400 R08: 0000000000000001 R09: fffffbfff1fdb245 [ 113.152374][ T8255] R10: ffffffff8fed922f R11: 0000000000000000 R12: ffff8880284a8e00 [ 113.156879][ T8255] R13: ffff88803716a900 R14: ffff88802e759940 R15: ffff8880284a8e48 [ 113.159417][ T8255] FS: 00007fe9f89b46c0(0000) GS:ffff8880d6383000(0000) knlGS:0000000000000000 [ 113.162337][ T8255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.164437][ T8255] CR2: 00007fa2f33b1ff8 CR3: 000000005aa48000 CR4: 0000000000352ef0 [ 113.167083][ T8255] Kernel panic - not syncing: Fatal exception [ 113.169688][ T8255] Kernel Offset: disabled [ 113.171105][ T8255] Rebooting in 86400 seconds..