last executing test programs: 26m21.290249771s ago: executing program 0 (id=193): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfff}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4040080) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) 26m21.190910274s ago: executing program 0 (id=194): openat$full(0xffffff9c, &(0x7f0000000000), 0x218000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)) r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x5451, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x5450, 0x0) close(r0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x3ed, 0x1, 0x70bd2c, 0x25dfdbfd, "39c67577f73fb1b24a5f934e9ab714660defda03a195666070f96e9d612a9958", [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 26m21.089759467s ago: executing program 0 (id=195): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfff}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x114, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e3d}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 26m19.000945959s ago: executing program 0 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, 0xffffffffffffffff) socket(0x23, 0x805, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x90000008}) mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x400c031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) open(&(0x7f00000004c0)='./bus\x00', 0x9072447bdc0a875f, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x2a1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x144000}], 0x3a, 0x1400, 0x0, 0x3) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 26m18.701828568s ago: executing program 0 (id=197): r0 = openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x212000, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000240)={'veth0_macvtap\x00', @ifru_ivalue=0x4}}) 26m18.472128805s ago: executing program 0 (id=200): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x114, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e3d}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 26m18.471832795s ago: executing program 32 (id=200): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x114, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e3d}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 26m12.600602759s ago: executing program 1 (id=204): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfff}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4040080) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) 26m12.470953644s ago: executing program 1 (id=205): openat$full(0xffffff9c, &(0x7f0000000000), 0x218000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)) r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x5451, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x5450, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x3ed, 0x1, 0x70bd2c, 0x25dfdbfd, "39c67577f73fb1b24a5f934e9ab714660defda03a195666070f96e9d612a9958", [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 26m12.370561107s ago: executing program 1 (id=206): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @private=0xa010101, 0xffffffff}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2004c081}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xe78, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x608, 0x5, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ed5da86}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x375}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1da}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35d}]}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x854, 0x5, 0x0, 0x1, [{0x33c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x57}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}]}]}, {0x4}, {0x214, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf2f5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe5df}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x255}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}]}, 0xe78}, 0x1, 0x0, 0x0, 0x40104}, 0x40000) 26m10.787169374s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, 0xffffffffffffffff) socket(0x23, 0x805, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x90000008}) mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x400c031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) open(&(0x7f00000004c0)='./bus\x00', 0x9072447bdc0a875f, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x2a1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x144000}], 0x3a, 0x1400, 0x0, 0x3) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 26m10.457682184s ago: executing program 2 (id=207): socket(0x18, 0x5, 0x1) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x212000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = userfaultfd(0x801) r5 = dup2(r4, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x4) socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000240)={'veth0_macvtap\x00', @ifru_ivalue=0x4}}) 26m10.220329541s ago: executing program 2 (id=208): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfff}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4040080) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) 26m10.22003504s ago: executing program 33 (id=208): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x10, 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfff}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4040080) sendto$inet_nvme_of_msg(r1, &(0x7f0000000240)={@icreq={{0x0, 0xa, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x9}, @val=&(0x7f0000000000)="77b9af748212e8144c8b2483085e8e389b82a6fae72147756f38dfa2e8eec4dc27000166dcd39124fc05d43f"}, 0x84, 0x0, 0x0, 0x0) 26m9.267417259s ago: executing program 1 (id=210): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x1}, 0x10) ioctl$VT_GETMODE(r2, 0x5601, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = accept$unix(r4, 0x0, 0x0) r6 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000000)={0x0, r6}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000300)) fcntl$F_SET_FILE_RW_HINT(r5, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x2b, @multicast1, 0x4e20, 0x4, 'sh\x00', 0x28, 0x80000001, 0x3a}, {@remote, 0x4e20, 0x2, 0x4, 0xd, 0x59c}}, 0x44) 26m6.57002339s ago: executing program 1 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, 0xffffffffffffffff) socket(0x23, 0x805, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x90000008}) mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x400c031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) open(&(0x7f00000004c0)='./bus\x00', 0x9072447bdc0a875f, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x2a1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x144000}], 0x3a, 0x1400, 0x0, 0x3) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 26m6.050942864s ago: executing program 1 (id=212): socket(0x18, 0x5, 0x1) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x212000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = userfaultfd(0x801) r5 = dup2(r4, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x4) socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000240)={'veth0_macvtap\x00', @ifru_ivalue=0x4}}) 26m5.817859992s ago: executing program 34 (id=212): socket(0x18, 0x5, 0x1) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x212000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = userfaultfd(0x801) r5 = dup2(r4, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x4) socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000240)={'veth0_macvtap\x00', @ifru_ivalue=0x4}}) 10m47.795122218s ago: executing program 4 (id=1435): r0 = socket$rds(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x2141) gettid() timer_create(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000340)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x8, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=""/75, 0x4b) getsockopt$inet_int(r2, 0x0, 0x30, 0x0, &(0x7f00000001c0)=0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x5450, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) accept(r5, &(0x7f0000000600)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x80) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00\x00+\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) write$tcp_mem(r1, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) recvmsg$inet_nvme(r4, &(0x7f00000002c0)={&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x40010020) 10m47.460961317s ago: executing program 4 (id=1436): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup3(r0, r2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x20000801) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) 10m47.327744811s ago: executing program 4 (id=1437): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x100000000, 0x9, 0x9}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e24, @multicast1}}) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x13, 0xa, 0x801, 0x0, 0x0, {0x6147af5eb2d50392}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x68, 0x8, "5770745a371367681966c1813fa824f869f95920f2d9ba15029ccfd2e9a0ea16fbfdb270a42d9f42da46f90f28da6b798bc32d78b63833a39ade18ba294ceda19d0d7e08e43cc9bdc31da9f9673675ad716e4cff43ef000ad19d23c37e6ac0cdf5941781"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) shutdown(r0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x29, 0x2, @tid=r5}, &(0x7f0000000400)) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000440)=0x4, 0x4) r6 = openat$cgroup_type(r2, &(0x7f0000000480), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f00000004c0)={r2, r6, 0x7}) timer_create(0x4, &(0x7f0000000500)={0x0, 0x2a, 0x0, @tid=r5}, &(0x7f0000000540)) r7 = mq_open(&(0x7f0000000580)='syz1\x00', 0x800, 0x20, &(0x7f00000005c0)={0x86c, 0xfffffeff, 0x6}) mq_notify(r7, &(0x7f0000000600)={0x0, 0x7, 0x0, @tid=r5}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000002) rt_sigtimedwait(&(0x7f0000000640)={[0x7, 0xffffffff]}, 0x0, &(0x7f0000000680), 0x8) write$binfmt_script(r2, &(0x7f00000006c0)={'#! ', './file0', [{0x20, 'cgroup.type\x00'}, {0x20, 'syz1\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '^}'}, {0x20, 'cgroup.type\x00'}], 0xa, "75cba3d6f16e44cf86ba663f148a4f874ab2dd4acd60f53aa29848c38507ad93430a55c04376cb3d6f943ff5432537d54b33b973897241de3f6c83286631c7d1780d2efeda854f32cb6433158e305dade346b5604ae6d5bcf0fab6a3e9aa75fd481bb9eedfff6b12bb3d6630b6661e2d41686bb11833a9738d12aa7185eebd6712bbf574650bd726c5cdbf9aa1c9145edc44bab4116537999db72749d0eef3037ab9564652e09f9940bc9b23854a787eddd12bf392a4c3d5c2d2142d10480779ae"}, 0xf3) write$binfmt_misc(r2, &(0x7f00000007c0)="50eb8ae11ccc5af5c53f263cec72b5c685c369d989cad7a074ae47dde3efad4da656e566a89adc55de3e1e0d681af0b6a4b47fde11fa8ef9ba3f81ce054065576479f4f53a64715aba336284ca5b7bdf698f2d17e039428bde519655305d1c4ae9f04d35c65294fd0d968c2f18b59f6bffa3efe5cfeb74b415d1319db84a455e2e9d2052814766e18a8df55083a2f9dd16ef50df7efe56554b80259c8d0e2ab9ec956e6d52e4f67e9bdb60d1a10877dca13f8f35711f5b2a599124aff9c98a33fe14df64", 0xc4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000009c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x814}, 0x40090) timer_getoverrun(0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r8) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xb}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) 10m46.846276025s ago: executing program 4 (id=1438): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, 0x7}, 0x10) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbfd, {0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24044800}, 0x2004c801) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x804) 10m46.801564306s ago: executing program 4 (id=1439): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4f311dd9f3b8", 0x6}], 0x1}, 0x4040080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={0x2040}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400f600", @ANYRES16=r4, @ANYBLOB="000327bd7000fbdbdf250e00000008000600490000000800040004000000"], 0x24}}, 0x4081) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="00102dbd7000fddb5f250600000048000280"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xf8, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xad2f76dd4a38e077}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xb715d64dbc79e05c}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x23}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$HIDIOCGPHYS(r6, 0x80404812, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x170, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x150, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_INNER_NUM={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6996}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1812}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x71}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x92}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_DESC={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4048080) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 10m44.448686176s ago: executing program 4 (id=1440): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup3(r0, r2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x20000801) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) 9m59.438222997s ago: executing program 35 (id=1440): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = dup3(r0, r2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x20000801) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) 8m17.837265301s ago: executing program 5 (id=1688): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 8m17.717781624s ago: executing program 5 (id=1689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x80000001, 0x23c1}, 0xc) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0) 8m14.47018357s ago: executing program 5 (id=1693): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 8m14.356267423s ago: executing program 5 (id=1694): mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 8m14.269592926s ago: executing program 5 (id=1695): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff6a) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) close(r0) 8m14.079175642s ago: executing program 5 (id=1696): r0 = openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000001ac0), 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 8m14.078860701s ago: executing program 36 (id=1696): r0 = openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000001ac0), 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 8m10.591369014s ago: executing program 3 (id=1701): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, 0x1}, 0x10) listen(r1, 0x1) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/120, 0x78, 0x5, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @empty, 0x9}, 0x1c) 8m7.367189139s ago: executing program 3 (id=1702): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x80000001, 0x23c1}, 0xc) 8m4.59910789s ago: executing program 3 (id=1703): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 8m4.430906404s ago: executing program 3 (id=1704): mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 8m4.317873678s ago: executing program 3 (id=1705): r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vhost_msg(r1, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 8m4.172354472s ago: executing program 6 (id=1700): socket$unix(0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) inotify_init1(0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0xc4, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0x5450, 0x0) r1 = inotify_init1(0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000002a00)) epoll_create(0x1f) r2 = mq_open(&(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x40, 0x4, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0x5450, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x5450, 0x0) ioctl$KDDELIO(r4, 0x5450, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0x9, 0x81, 0x0, 0x2, 0x3]}, &(0x7f00000001c0)=0x54) 8m4.089928125s ago: executing program 3 (id=1706): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x80000001, 0x23c1}, 0xc) 8m4.089570645s ago: executing program 37 (id=1706): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x80000001, 0x23c1}, 0xc) 8m3.928217049s ago: executing program 6 (id=1708): mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 8m3.788107334s ago: executing program 6 (id=1709): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x200041, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x10, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040091) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) write$FUSE_LK(r2, 0x0, 0x0) r7 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r7, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, 0x7}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) 8m3.591179739s ago: executing program 38 (id=1709): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x200041, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x10, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040091) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) write$FUSE_LK(r2, 0x0, 0x0) r7 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r7, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, 0x7}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) 7m50.876920983s ago: executing program 8 (id=1710): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x8000000000000002}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}}, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffff9c, r3, 0x41, 0x1ff) close$binfmt(r4) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x3, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x4) 7m50.647163129s ago: executing program 8 (id=1711): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x100800) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0xf0, 0x2, 0xf, "78dfec74a11c8643f00a9b0d2d13b1ec", "44141da6ece5a64377bc6707eb340820e22c80eb497108d6369407852aaa69f8a31e886d80afacc6960c55f17276b4f16a75dbe56f231ea55d458938a23ca573031e383ba45d94961b756e0279f3a42f564c929c6607550dc8c6fd72271ebcc0b78049fe512db723505f3c8cad6bc04a25b9916e30f8454692e93ef9954633d7612f1fcc308ad92a57fe3b049aa540880e6e950a809c9244820f5f66aae275e8c4ebbadafb24f49eefe07bac7c088d31e34116af14a034fd94a81a534037c6d17762425b301e05a10f351db4edd5ad2636d867c5f471eb9c39353e"}, 0xf0, 0x1) r1 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r2, &(0x7f0000000380)={0xf, 0x1f, 0x2}, 0xf) r3 = openat$uinput(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06055c8, &(0x7f0000000400)={0x2, 0x8, {0x54, 0x200, 0x8, {0x9, 0x6}, {0x5, 0x4}, @ramp={0x6, 0x5, {0x5, 0x4a43, 0xb, 0x8}}}, {0x51, 0x9, 0x6, {0x6, 0x1ff}, {0x9, 0x3}, @rumble={0x6, 0x200}}}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x810, 0xffffffffffffffff, 0x8000000) r6 = syz_io_uring_setup(0x5fb2, &(0x7f0000000480)={0x0, 0x1f33, 0x10, 0x1, 0x375}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000580)=@IORING_OP_POLL_REMOVE={0x7, 0x15, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}) syz_io_uring_submit(r7, r8, &(0x7f0000000640)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000680)={0x0, 'nicvf0\x00', {0x3}, 0x2}) write$input_event(r3, &(0x7f00000006c0)={{}, 0x15, 0x4, 0x8001}, 0x10) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000740)={0x3, [0x0, 0x0, 0x0]}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x11}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000007c0)={0xff, 0x1, 0x3, 0x8, 0x3, 0x5, 0x8, 0x5, 0x0, 0x7, 0x2a, 0x2, 0x5, 0xff}, 0xe) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000800)) r11 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$PIO_UNIMAPCLR(r11, 0x4b68, &(0x7f0000000840)={0x4, 0x0, 0xa}) syz_io_uring_complete(r7) readahead(r2, 0x0, 0x0) 7m50.382323467s ago: executing program 8 (id=1712): mkdir(&(0x7f0000000080)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 7m50.29018526s ago: executing program 8 (id=1714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$getflags(r0, 0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x23, &(0x7f0000000000)={0xe0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = accept$unix(r4, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4040884) r7 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x20a40}, 0x18) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$inet6(r7, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000080)={'batadv_slave_1\x00', 0x3b14}) r8 = dup3(r3, r3, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) openat$null(0xffffff9c, &(0x7f00000000c0), 0x4c02, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r8, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, 0x4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008006) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x24048090) ioctl$TUNATTACHFILTER(r2, 0x400854d5, 0x0) 7m50.018457178s ago: executing program 8 (id=1715): r0 = syz_open_dev$audion(&(0x7f0000004a80), 0xb, 0x11e643ae52200ce8) close(r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf6, 0x10}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x894) 7m50.018270158s ago: executing program 39 (id=1715): r0 = syz_open_dev$audion(&(0x7f0000004a80), 0xb, 0x11e643ae52200ce8) close(r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf6, 0x10}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x894) 3.902445185s ago: executing program 9 (id=2315): r0 = socket$xdp(0x2c, 0x3, 0x0) read(r0, &(0x7f0000001680)=""/246, 0xf6) 3.76097738s ago: executing program 9 (id=2316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x680800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000240)={{0x2, 0x2, 0x80000000, 0x1, 0x10}, 0x1000, 0x7}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000006c75b633ff000000608e09aacacbaac2d0dd14d0d3fb802fca2ac88c50bc595b9133308e763b1c42d25ae4e148868bf5689e800376a7d5d16354fc98e7b91875f0b1faec660ec869d020381c4800a887bbfeb74e96b862539b9e09ce41159ec3e8003c6694e4757c8399a6236f45f5e0fd2366c2ac49709568d5e073fd26d34d7a192fd98e3cff75980d6871582e40140ccc230d8dd51db2906e66b0a4d3adee3b408fc0d050b02f3a6c72da121db99ac68b897c77a684f35b2ce01b6c8c9f60e88d83c1a82bb5015b1a2fa53d8004db8f726d83020bda9ac1213c88cb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008"], 0x15) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r8, r7, 0x0, 0x80000000) 2.949055443s ago: executing program 7 (id=2317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x538d28a0, 0x0, 0x0, 0x0, 0x81}) 2.631564283s ago: executing program 7 (id=2318): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.363860101s ago: executing program 7 (id=2319): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) close(r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.103634388s ago: executing program 7 (id=2320): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff20000000000000007f141416ac", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764320e00000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.7143904s ago: executing program 7 (id=2321): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20, 0x0) 1.580973214s ago: executing program 7 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="99003300800000000802110000010802110000005050"], 0xb8}}, 0x40) 1.01585941s ago: executing program 9 (id=2323): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) 727.204059ms ago: executing program 9 (id=2324): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x9, 0x6, 0x2, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0x33, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}]}, 0x28}}, 0x10) 413.183358ms ago: executing program 9 (id=2325): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000015000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/64, 0x40}], 0x5) 0s ago: executing program 9 (id=2326): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) kernel console output (not intermixed with test programs): _perm+0xcc/0x22c) [ 1349.277249][T11632] r10:83e28000 r9:00000000 r8:00000003 r7:800c5012 r6:00000004 r5:81ad1968 [ 1349.277506][T11632] r4:84b14328 r3:824ba340 [ 1349.277670][T11632] [<8074e338>] (tomoyo_path_number_perm) from [<80752cd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1349.277963][T11632] r9:84b14300 r8:00000003 r7:00000000 r6:00000000 r5:800c5012 r4:84b14300 [ 1349.278177][T11632] [<80752cb4>] (tomoyo_file_ioctl) from [<8070131c>] (security_file_ioctl+0x64/0x1e4) [ 1349.278447][T11632] [<807012b8>] (security_file_ioctl) from [<80530600>] (sys_ioctl+0x50/0xd98) [ 1349.278739][T11632] r7:00000000 r6:84b14301 r5:00000000 r4:800c5012 [ 1349.278930][T11632] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1349.279187][T11632] Exception stack(0xee211fa8 to 0xee211ff0) [ 1349.279373][T11632] 1fa0: 00000000 00000000 00000003 800c5012 00000000 00000000 [ 1349.279756][T11632] 1fc0: 00000000 00000000 00131400 00000036 00000000 00006364 003d0f00 76b600bc [ 1349.280154][T11632] 1fe0: 76b5fec0 76b5feb0 00018af0 00133450 [ 1349.280452][T11632] r10:00000036 r9:83e28000 r8:8020029c r7:00000036 r6:00131400 r5:00000000 [ 1349.280686][T11632] r4:00000000 [ 1349.281885][T11632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1350.969759][T11638] FAULT_INJECTION: forcing a failure. [ 1350.969759][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.970232][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.5.1632 Not tainted 6.12.0-syzkaller #0 [ 1350.970461][T11638] Hardware name: ARM-Versatile Express [ 1350.970589][T11638] Call trace: [ 1350.970688][T11638] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1350.970955][T11638] r7:00000c40 r6:84b14328 r5:60000013 r4:8203df48 [ 1350.971128][T11638] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1350.971339][T11638] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1350.971573][T11638] r5:00000000 r4:8271925c [ 1350.971686][T11638] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1350.971913][T11638] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1350.972138][T11638] r6:84b14328 r5:00001000 r4:82c016c0 [ 1350.972271][T11638] [<804e9074>] (should_failslab) from [<804ce254>] (__kmalloc_noprof+0x9c/0x458) [ 1350.972497][T11638] [<804ce1b8>] (__kmalloc_noprof) from [<807522c0>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1350.972769][T11638] r10:85318c00 r9:82f19000 r8:00000000 r7:83312000 r6:84b14328 r5:00001000 [ 1350.972973][T11638] r4:00000000 [ 1350.973067][T11638] [<80752284>] (tomoyo_realpath_from_path) from [<8074e404>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1350.973375][T11638] r10:85318c00 r9:00000000 r8:00000006 r7:0000125e r6:00000004 r5:81ad1968 [ 1350.973773][T11638] r4:84b14328 r3:824ba340 [ 1350.973891][T11638] [<8074e338>] (tomoyo_path_number_perm) from [<80752cd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1350.974156][T11638] r9:84b14300 r8:00000006 r7:20000140 r6:20000140 r5:0000125e r4:84b14300 [ 1350.974506][T11638] [<80752cb4>] (tomoyo_file_ioctl) from [<8070131c>] (security_file_ioctl+0x64/0x1e4) [ 1350.975010][T11638] [<807012b8>] (security_file_ioctl) from [<80530600>] (sys_ioctl+0x50/0xd98) [ 1350.975433][T11638] r7:20000140 r6:84b14301 r5:00000000 r4:0000125e [ 1350.975635][T11638] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1350.975930][T11638] Exception stack(0xee67dfa8 to 0xee67dff0) [ 1350.976115][T11638] dfa0: 00000000 00000000 00000006 0000125e 20000140 00000000 [ 1350.976363][T11638] dfc0: 00000000 00000000 00131400 00000036 00000000 00006364 003d0f00 76afd0bc [ 1350.976603][T11638] dfe0: 76afcec0 76afceb0 00018af0 00133450 [ 1350.976768][T11638] r10:00000036 r9:85318c00 r8:8020029c r7:00000036 r6:00131400 r5:00000000 [ 1350.976985][T11638] r4:00000000 [ 1350.983115][T11638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1360.590135][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.597420][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.367087][T11718] syz.3.1657[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.367678][T11718] syz.3.1657[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.369357][T11718] syz.3.1657[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1370.275511][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.278766][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.298925][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.301121][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.729484][T11787] FAULT_INJECTION: forcing a failure. [ 1373.729484][T11787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.731368][T11787] CPU: 1 UID: 0 PID: 11787 Comm: syz.5.1679 Not tainted 6.12.0-syzkaller #0 [ 1373.731739][T11787] Hardware name: ARM-Versatile Express [ 1373.732101][T11787] Call trace: [ 1373.732313][T11787] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1373.732767][T11787] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1373.733003][T11787] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1373.733374][T11787] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1373.733802][T11787] r5:00000000 r4:8274e844 [ 1373.733997][T11787] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1373.734357][T11787] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1373.736167][T11787] r6:00000000 r5:dfa55f68 r4:00000002 [ 1373.736636][T11787] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1373.737139][T11787] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1373.737859][T11787] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1373.738509][T11787] r10:00000001 r9:805c43b8 r8:00000002 r7:dfa55f68 r6:0000000f r5:76b5ff30 [ 1373.738889][T11787] r4:845db000 r3:dfa55e9f [ 1373.739295][T11787] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1373.739742][T11787] r8:76b5ff30 r7:dfa55f68 r6:845db000 r5:0000000f r4:850b06c0 [ 1373.740094][T11787] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1373.740408][T11787] r10:00000003 r9:845db000 r8:8020029c r7:00000000 r6:00000000 r5:850b06c0 [ 1373.740727][T11787] r4:850b06c3 [ 1373.740928][T11787] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1373.741317][T11787] r7:00000003 r6:00000004 r5:76b5ff30 r4:0000000f [ 1373.741663][T11787] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1373.742079][T11787] Exception stack(0xdfa55fa8 to 0xdfa55ff0) [ 1373.742400][T11787] 5fa0: 0000000f 76b5ff30 00000004 76b5ff30 0000000f 00000000 [ 1373.742750][T11787] 5fc0: 0000000f 76b5ff30 00000004 00000003 00000000 00006364 003d0f00 76b600bc [ 1373.743079][T11787] 5fe0: 00000158 76b5fed0 000d8998 00131324 [ 1374.314104][ T31] audit: type=1400 audit(1374.220:448): avc: denied { ioctl } for pid=11797 comm="syz.5.1684" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1381.503425][ T1041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.563243][ T1041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.617012][ T1041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.669700][ T1041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.892535][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.908189][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.922301][ T1041] bond0 (unregistering): Released all slaves [ 1382.015312][ T1041] hsr_slave_0: left promiscuous mode [ 1382.019180][ T1041] hsr_slave_1: left promiscuous mode [ 1382.037424][ T1041] veth1_macvtap: left promiscuous mode [ 1382.038536][ T1041] veth0_macvtap: left promiscuous mode [ 1382.039387][ T1041] veth1_vlan: left promiscuous mode [ 1382.039857][ T1041] veth0_vlan: left promiscuous mode [ 1384.268419][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.276031][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.279043][T11842] hsr_slave_0: entered promiscuous mode [ 1385.283779][T11842] hsr_slave_1: entered promiscuous mode [ 1385.293059][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.293973][T11842] Cannot create hsr debugfs directory [ 1385.797007][T11842] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1385.813951][T11842] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1385.831337][T11842] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1385.846391][T11842] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1386.898553][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.041179][T11842] veth0_vlan: entered promiscuous mode [ 1391.071345][T11842] veth1_vlan: entered promiscuous mode [ 1391.153452][T11842] veth0_macvtap: entered promiscuous mode [ 1391.170614][T11842] veth1_macvtap: entered promiscuous mode [ 1391.243209][T11842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.243548][T11842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.243845][T11842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.244027][T11842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.489500][T10220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.557201][T10220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.649615][T10220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.735515][T10220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.971736][T10220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.977593][T10220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.982239][T10220] bond0 (unregistering): Released all slaves [ 1392.051627][T10220] hsr_slave_0: left promiscuous mode [ 1392.053181][T10220] hsr_slave_1: left promiscuous mode [ 1392.061106][T10220] veth1_macvtap: left promiscuous mode [ 1392.061468][T10220] veth0_macvtap: left promiscuous mode [ 1392.061843][T10220] veth1_vlan: left promiscuous mode [ 1392.062126][T10220] veth0_vlan: left promiscuous mode [ 1392.749610][T10220] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.016137][T10220] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.080208][T10220] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.263073][T10220] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.564232][T10220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.583399][T10220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.598823][T10220] bond0 (unregistering): Released all slaves [ 1393.695490][T10220] hsr_slave_0: left promiscuous mode [ 1393.699250][T10220] hsr_slave_1: left promiscuous mode [ 1393.713090][T10220] veth1_macvtap: left promiscuous mode [ 1393.713730][T10220] veth0_macvtap: left promiscuous mode [ 1393.714223][T10220] veth1_vlan: left promiscuous mode [ 1393.716691][T10220] veth0_vlan: left promiscuous mode [ 1395.823999][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.832485][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.060324][T12265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.079690][T12265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.180060][T12286] hsr_slave_0: entered promiscuous mode [ 1397.192984][T12286] hsr_slave_1: entered promiscuous mode [ 1397.781382][T12265] hsr_slave_0: entered promiscuous mode [ 1397.784108][T12265] hsr_slave_1: entered promiscuous mode [ 1397.787653][T12265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.788170][T12265] Cannot create hsr debugfs directory [ 1397.789035][T12286] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1397.805341][T12286] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1397.817740][T12286] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1397.865292][T12286] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1398.343173][T12265] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1398.362354][T12265] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1398.373008][T12265] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1398.387131][T12265] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1398.968859][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.367486][T12265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.118871][T12286] veth0_vlan: entered promiscuous mode [ 1404.161444][T12286] veth1_vlan: entered promiscuous mode [ 1404.282816][T12286] veth0_macvtap: entered promiscuous mode [ 1404.302900][T12265] veth0_vlan: entered promiscuous mode [ 1404.317719][T12286] veth1_macvtap: entered promiscuous mode [ 1404.377186][T12265] veth1_vlan: entered promiscuous mode [ 1404.438905][T12286] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.439388][T12286] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.439627][T12286] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.439849][T12286] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.598837][T12265] veth0_macvtap: entered promiscuous mode [ 1404.613398][T12265] veth1_macvtap: entered promiscuous mode [ 1404.693860][T12265] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.694179][T12265] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.698733][T12265] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.699034][T12265] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.859267][T13050] sctp: [Deprecated]: syz.8.1710 (pid 13050) Use of int in maxseg socket option. [ 1404.859267][T13050] Use struct sctp_assoc_value instead [ 1405.049474][ T31] audit: type=1400 audit(1404.960:449): avc: denied { write } for pid=13051 comm="syz.8.1711" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1405.562298][ T1041] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.647459][ T1041] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.739419][ T1041] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.798148][ T1041] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.180039][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.190464][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.197423][ T1041] bond0 (unregistering): Released all slaves [ 1406.279321][ T1041] hsr_slave_0: left promiscuous mode [ 1406.289182][ T1041] hsr_slave_1: left promiscuous mode [ 1406.305364][ T1041] veth1_macvtap: left promiscuous mode [ 1406.306127][ T1041] veth0_macvtap: left promiscuous mode [ 1406.306553][ T1041] veth1_vlan: left promiscuous mode [ 1406.307126][ T1041] veth0_vlan: left promiscuous mode [ 1408.275729][T13227] FAULT_INJECTION: forcing a failure. [ 1408.275729][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.276238][T13227] CPU: 0 UID: 0 PID: 13227 Comm: syz.7.1718 Not tainted 6.12.0-syzkaller #0 [ 1408.276506][T13227] Hardware name: ARM-Versatile Express [ 1408.276676][T13227] Call trace: [ 1408.276834][T13227] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1408.277132][T13227] r7:84b4e000 r6:00000cc0 r5:60000013 r4:8203df48 [ 1408.277304][T13227] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1408.277521][T13227] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1408.277781][T13227] r5:00000000 r4:8271925c [ 1408.277916][T13227] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1408.278146][T13227] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1408.278373][T13227] r6:00000cc0 r5:ffffffff r4:82f01180 [ 1408.278525][T13227] [<804e9074>] (should_failslab) from [<804cd864>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1408.278763][T13227] [<804cd814>] (kmem_cache_alloc_node_noprof) from [<81494ac4>] (__alloc_skb+0x138/0x160) [ 1408.279078][T13227] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 1408.279445][T13227] r4:82606000 [ 1408.279555][T13227] [<8149498c>] (__alloc_skb) from [<815aa118>] (netlink_alloc_large_skb+0x88/0xa0) [ 1408.279824][T13227] r8:00000000 r7:848c9800 r6:00000020 r5:84cdbb80 r4:00000140 [ 1408.279996][T13227] [<815aa090>] (netlink_alloc_large_skb) from [<815aa720>] (netlink_sendmsg+0x134/0x43c) [ 1408.280251][T13227] r5:84cdbb80 r4:ead55f38 [ 1408.280407][T13227] [<815aa5ec>] (netlink_sendmsg) from [<81487204>] (__sock_sendmsg+0x44/0x78) [ 1408.280648][T13227] r10:00000000 r9:ead55dd4 r8:ead55dd4 r7:84cdbb80 r6:84cdbb80 r5:ead55f38 [ 1408.280883][T13227] r4:00000000 [ 1408.281031][T13227] [<814871c0>] (__sock_sendmsg) from [<81488204>] (____sys_sendmsg+0x2a4/0x2c4) [ 1408.281342][T13227] r7:84cdbb80 r6:00000000 r5:00000004 r4:ead55f38 [ 1408.281582][T13227] [<81487f60>] (____sys_sendmsg) from [<8148a16c>] (___sys_sendmsg+0x9c/0xd0) [ 1408.281961][T13227] r10:ead55e34 r9:200020c0 r8:00000004 r7:00000000 r6:84cdbb80 r5:ead55f38 [ 1408.282251][T13227] r4:00000000 [ 1408.282417][T13227] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1408.282776][T13227] r10:00000128 r9:84b4e000 r8:8020029c r7:00000004 r6:200020c0 r5:84cdbb80 [ 1408.283094][T13227] r4:00000000 [ 1408.283259][T13227] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1408.283560][T13227] Exception stack(0xead55fa8 to 0xead55ff0) [ 1408.283717][T13227] 5fa0: 00000000 00000000 00000003 200020c0 00000004 00000000 [ 1408.284000][T13227] 5fc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76b700bc [ 1408.284233][T13227] 5fe0: 76b6fec0 76b6feb0 00018af0 00133450 [ 1408.284715][T13227] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1408.371949][T13067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.388728][T13067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.223820][T13067] hsr_slave_0: entered promiscuous mode [ 1409.227131][T13067] hsr_slave_1: entered promiscuous mode [ 1409.576285][T13067] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1409.583297][T13067] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1409.591463][T13067] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1409.600824][T13067] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1410.541508][T13067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.291406][T13067] veth0_vlan: entered promiscuous mode [ 1414.316523][T13067] veth1_vlan: entered promiscuous mode [ 1414.371980][T13067] veth0_macvtap: entered promiscuous mode [ 1414.379908][T13067] veth1_macvtap: entered promiscuous mode [ 1414.462339][T13067] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.462887][T13067] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.463406][T13067] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.463954][T13067] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.931313][T13525] FAULT_INJECTION: forcing a failure. [ 1416.931313][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.932033][T13525] CPU: 0 UID: 0 PID: 13525 Comm: syz.7.1727 Not tainted 6.12.0-syzkaller #0 [ 1416.932493][T13525] Hardware name: ARM-Versatile Express [ 1416.932822][T13525] Call trace: [ 1416.933058][T13525] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1416.933579][T13525] r7:00000dc0 r6:82fb9800 r5:60000013 r4:8203df48 [ 1416.933859][T13525] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1416.934258][T13525] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1416.935076][T13525] r5:00000000 r4:8271925c [ 1416.935515][T13525] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1416.936280][T13525] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1416.937051][T13525] r6:82fb9800 r5:00000021 r4:82c01240 [ 1416.937559][T13525] [<804e9074>] (should_failslab) from [<804ce254>] (__kmalloc_noprof+0x9c/0x458) [ 1416.938059][T13525] [<804ce1b8>] (__kmalloc_noprof) from [<81976f10>] (kobject_get_path+0x74/0x134) [ 1416.938656][T13525] r10:8220d68c r9:00000000 r8:85242700 r7:0000002f r6:82fb9800 r5:00000021 [ 1416.939178][T13525] r4:00000000 [ 1416.939418][T13525] [<81976e9c>] (kobject_get_path) from [<81978778>] (kobject_uevent_env+0xe0/0x870) [ 1416.939898][T13525] r10:8220d68c r9:00000000 r8:84b54000 r7:00000000 r6:82fb9800 r5:00000000 [ 1416.940264][T13525] r4:85242700 [ 1416.940578][T13525] [<81978698>] (kobject_uevent_env) from [<81978f1c>] (kobject_uevent+0x14/0x18) [ 1416.941208][T13525] r10:84324800 r9:849f6540 r8:00000004 r7:84a20004 r6:84a20030 r5:00000000 [ 1416.941910][T13525] r4:84a20030 [ 1416.942112][T13525] [<81978f08>] (kobject_uevent) from [<80aaf844>] (driver_register+0xb4/0x11c) [ 1416.942529][T13525] [<80aaf790>] (driver_register) from [<80f43f5c>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 1416.943283][T13525] r5:00000000 r4:84a2000c [ 1416.943515][T13525] [<80f43f0c>] (usb_gadget_register_driver_owner) from [<80fb24c0>] (raw_ioctl+0xa0c/0x1084) [ 1416.944106][T13525] r7:84a20004 r6:60000013 r5:00000000 r4:84a20000 [ 1416.944847][T13525] [<80fb1ab4>] (raw_ioctl) from [<805306e4>] (sys_ioctl+0x134/0xd98) [ 1416.945486][T13525] r10:84324800 r9:849f6540 r8:00000004 r7:00000000 r6:849f6541 r5:00000000 [ 1416.946008][T13525] r4:00005501 [ 1416.946280][T13525] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1416.946798][T13525] Exception stack(0xeb1b9fa8 to 0xeb1b9ff0) [ 1416.947161][T13525] 9fa0: 00000004 76b6ee70 00000004 00005501 00000000 76b6de00 [ 1416.947900][T13525] 9fc0: 00000004 76b6ee70 76b6de70 00000036 00000003 76b6ee60 003b0034 00000000 [ 1416.948681][T13525] 9fe0: 00000000 76b6dde8 00258000 00132e1c [ 1416.949168][T13525] r10:00000036 r9:84324800 r8:8020029c r7:00000036 r6:76b6de70 r5:76b6ee70 [ 1416.949774][T13525] r4:00000004 [ 1416.971202][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.972060][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.403050][ T31] audit: type=1400 audit(1418.310:450): avc: denied { accept } for pid=13545 comm="syz.9.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1419.970188][ T31] audit: type=1400 audit(1419.880:451): avc: denied { mac_admin } for pid=13556 comm="syz.7.1735" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1419.971698][T13557] SELinux: Context system_u:object_r:sulogin_exec_t:s0 is not valid (left unmapped). [ 1419.972857][ T31] audit: type=1400 audit(1419.880:452): avc: denied { relabelto } for pid=13556 comm="syz.7.1735" name="pcmC1D0c" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sulogin_exec_t:s0" [ 1419.978744][ T31] audit: type=1400 audit(1419.880:453): avc: denied { associate } for pid=13556 comm="syz.7.1735" name="pcmC1D0c" dev="devtmpfs" ino=723 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sulogin_exec_t:s0" [ 1425.547933][T13616] FAULT_INJECTION: forcing a failure. [ 1425.547933][T13616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.548683][T13616] CPU: 0 UID: 0 PID: 13616 Comm: syz.9.1742 Not tainted 6.12.0-syzkaller #0 [ 1425.548991][T13616] Hardware name: ARM-Versatile Express [ 1425.549188][T13616] Call trace: [ 1425.549389][T13616] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1425.549780][T13616] r7:eb465e50 r6:00000008 r5:60000013 r4:8203df48 [ 1425.550028][T13616] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1425.550345][T13616] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1425.550652][T13616] r5:00000000 r4:8274e844 [ 1425.550827][T13616] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1425.551194][T13616] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1425.551500][T13616] r6:00000008 r5:20000778 r4:00000008 [ 1425.551707][T13616] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1425.552036][T13616] [<808e6b5c>] (should_fail_usercopy) from [<81670dd8>] (copy_from_sockptr_offset+0x64/0x114) [ 1425.552379][T13616] [<81670d74>] (copy_from_sockptr_offset) from [<81678790>] (do_tcp_setsockopt+0x8f0/0xc3c) [ 1425.552729][T13616] r8:8443c364 r7:08cbd750 r6:eb465e48 r5:00000000 r4:8443be00 [ 1425.552989][T13616] [<81677ea4>] (do_tcp_setsockopt) from [<81678b2c>] (tcp_setsockopt+0x50/0x58) [ 1425.553321][T13616] r10:00000126 r9:85259800 r8:8020029c r7:00000000 r6:84cb5900 r5:00000000 [ 1425.553734][T13616] r4:81678adc [ 1425.553911][T13616] [<81678ae0>] (tcp_setsockopt) from [<8148b090>] (sock_common_setsockopt+0x38/0x40) [ 1425.554325][T13616] r4:81678adc [ 1425.554579][T13616] [<8148b05c>] (sock_common_setsockopt) from [<814866f0>] (do_sock_setsockopt+0xb0/0x17c) [ 1425.554792][T13616] r4:8148b058 [ 1425.554887][T13616] [<81486640>] (do_sock_setsockopt) from [<81489bb0>] (sys_setsockopt+0x78/0xbc) [ 1425.555258][T13616] r6:84cb5900 r5:00000016 r4:00000006 [ 1425.555515][T13616] [<81489b38>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1425.555837][T13616] Exception stack(0xeb465fa8 to 0xeb465ff0) [ 1425.555996][T13616] 5fa0: 08cbd752 00000000 00000003 00000006 00000016 20000600 [ 1425.556210][T13616] 5fc0: 08cbd752 00000000 00131400 00000126 00000000 00006364 003d0f00 76bf20bc [ 1425.556424][T13616] 5fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1425.556562][T13616] r7:00000126 r6:00131400 r5:00000000 r4:08cbd752 [ 1428.433725][T13637] FAULT_INJECTION: forcing a failure. [ 1428.433725][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.445184][T13637] CPU: 0 UID: 0 PID: 13637 Comm: syz.9.1747 Not tainted 6.12.0-syzkaller #0 [ 1428.445603][T13637] Hardware name: ARM-Versatile Express [ 1428.445782][T13637] Call trace: [ 1428.445894][T13637] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1428.446131][T13637] r7:00000c40 r6:849eb268 r5:60000013 r4:8203df48 [ 1428.446319][T13637] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1428.446547][T13637] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1428.446740][T13637] r5:00000000 r4:8271925c [ 1428.446847][T13637] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1428.447083][T13637] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1428.447345][T13637] r6:849eb268 r5:00001000 r4:82c016c0 [ 1428.447480][T13637] [<804e9074>] (should_failslab) from [<804ce254>] (__kmalloc_noprof+0x9c/0x458) [ 1428.447698][T13637] [<804ce1b8>] (__kmalloc_noprof) from [<807522c0>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1428.448003][T13637] r10:8595ec00 r9:82c9e800 r8:00000000 r7:830db990 r6:849eb268 r5:00001000 [ 1428.448177][T13637] r4:00000000 [ 1428.448322][T13637] [<80752284>] (tomoyo_realpath_from_path) from [<8074e404>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1428.448614][T13637] r10:8595ec00 r9:00000000 r8:00000003 r7:00004c02 r6:00000004 r5:81ad1968 [ 1428.448795][T13637] r4:849eb268 r3:824ba340 [ 1428.448888][T13637] [<8074e338>] (tomoyo_path_number_perm) from [<80752cd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1428.449155][T13637] r9:849eb240 r8:00000003 r7:20000440 r6:20000440 r5:00004c02 r4:849eb240 [ 1428.449375][T13637] [<80752cb4>] (tomoyo_file_ioctl) from [<8070131c>] (security_file_ioctl+0x64/0x1e4) [ 1428.449681][T13637] [<807012b8>] (security_file_ioctl) from [<80530600>] (sys_ioctl+0x50/0xd98) [ 1428.449927][T13637] r7:20000440 r6:849eb241 r5:00000000 r4:00004c02 [ 1428.450151][T13637] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1428.450347][T13637] Exception stack(0xeb4d5fa8 to 0xeb4d5ff0) [ 1428.450486][T13637] 5fa0: 00000000 00000000 00000003 00004c02 20000440 00000000 [ 1428.450710][T13637] 5fc0: 00000000 00000000 00131400 00000036 00000000 00006364 003d0f00 76bf20bc [ 1428.450896][T13637] 5fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1428.451046][T13637] r10:00000036 r9:8595ec00 r8:8020029c r7:00000036 r6:00131400 r5:00000000 [ 1428.451452][T13637] r4:00000000 [ 1428.451678][T13637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1441.113131][T13718] FAULT_INJECTION: forcing a failure. [ 1441.113131][T13718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.113943][T13718] CPU: 1 UID: 0 PID: 13718 Comm: syz.9.1763 Not tainted 6.12.0-syzkaller #0 [ 1441.114324][T13718] Hardware name: ARM-Versatile Express [ 1441.114691][T13718] Call trace: [ 1441.114949][T13718] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1441.115412][T13718] r7:81b3677c r6:82ca4000 r5:60000013 r4:8203df48 [ 1441.115708][T13718] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1441.116118][T13718] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1441.116597][T13718] r5:00000000 r4:8274e844 [ 1441.116890][T13718] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1441.117381][T13718] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1441.119134][T13718] r6:82ca4000 r5:00000000 r4:eb69de64 [ 1441.119398][T13718] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1441.119836][T13718] [<808e6b5c>] (should_fail_usercopy) from [<80a39fec>] (drm_ioctl+0x290/0x598) [ 1441.120262][T13718] [<80a39d5c>] (drm_ioctl) from [<805306e4>] (sys_ioctl+0x134/0xd98) [ 1441.120671][T13718] r10:8525b000 r9:853fd6c0 r8:00000003 r7:200000c0 r6:853fd6c1 r5:00000000 [ 1441.121148][T13718] r4:c04064aa [ 1441.121347][T13718] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1441.121901][T13718] Exception stack(0xeb69dfa8 to 0xeb69dff0) [ 1441.122289][T13718] dfa0: 00000000 00000000 00000003 c04064aa 200000c0 00000000 [ 1441.122696][T13718] dfc0: 00000000 00000000 00131400 00000036 00000000 00006364 003d0f00 76bf20bc [ 1441.123105][T13718] dfe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1441.123408][T13718] r10:00000036 r9:8525b000 r8:8020029c r7:00000036 r6:00131400 r5:00000000 [ 1441.123738][T13718] r4:00000000 [ 1448.301706][T13767] FAULT_INJECTION: forcing a failure. [ 1448.301706][T13767] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.302435][T13767] CPU: 0 UID: 0 PID: 13767 Comm: syz.7.1776 Not tainted 6.12.0-syzkaller #0 [ 1448.302823][T13767] Hardware name: ARM-Versatile Express [ 1448.303084][T13767] Call trace: [ 1448.303294][T13767] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1448.303744][T13767] r7:84328c00 r6:00000dc0 r5:60000013 r4:8203df48 [ 1448.304016][T13767] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1448.304835][T13767] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1448.305263][T13767] r5:00000000 r4:8271925c [ 1448.305490][T13767] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1448.306151][T13767] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1448.307236][T13767] r6:00000dc0 r5:828cbc68 r4:82f01000 [ 1448.307918][T13767] [<804e9074>] (should_failslab) from [<804cded0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1448.308495][T13767] [<804cde84>] (kmem_cache_alloc_noprof) from [<806c0d68>] (fuse_request_alloc+0x24/0x74) [ 1448.309020][T13767] r10:84328c00 r9:00000001 r8:8271f478 r7:850c2b00 r6:850c2b00 r5:828cbc68 [ 1448.309391][T13767] r4:8487ca00 [ 1448.309628][T13767] [<806c0d44>] (fuse_request_alloc) from [<806c15ac>] (fuse_get_req+0x164/0x264) [ 1448.309989][T13767] r7:850c2b00 r6:eba51e18 r5:00000000 r4:8487ca00 [ 1448.310297][T13767] [<806c1448>] (fuse_get_req) from [<806c510c>] (__fuse_simple_request+0x54/0x4ec) [ 1448.310750][T13767] r10:83195b20 r9:00000000 r8:8271f478 r7:84328c00 r6:eba51e18 r5:8487ca00 [ 1448.311121][T13767] r4:850c2b00 [ 1448.311314][T13767] [<806c50b8>] (__fuse_simple_request) from [<806d5690>] (fuse_readdir_uncached+0x10c/0x34c) [ 1448.311779][T13767] r9:00000000 r8:00000001 r7:850c2b00 r6:83195900 r5:852ef6c0 r4:eba51f60 [ 1448.312136][T13767] [<806d5584>] (fuse_readdir_uncached) from [<806d5a30>] (fuse_readdir+0x160/0x764) [ 1448.312586][T13767] r9:eba51f60 r8:83195980 r7:83195900 r6:eba51f60 r5:83195900 r4:8483e180 [ 1448.312931][T13767] [<806d58d0>] (fuse_readdir) from [<80531728>] (iterate_dir+0x118/0x230) [ 1448.313612][T13767] r10:0000008d r9:84328c00 r8:83195980 r7:83195900 r6:eba51f60 r5:852ef6c0 [ 1448.313990][T13767] r4:00000000 [ 1448.314180][T13767] [<80531610>] (iterate_dir) from [<80531ab0>] (sys_getdents+0x6c/0x128) [ 1448.315107][T13767] r8:8020029c r7:852ef6c0 r6:00000000 r5:00000000 r4:852ef6c3 [ 1448.315726][T13767] [<80531a44>] (sys_getdents) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1448.316132][T13767] Exception stack(0xeba51fa8 to 0xeba51ff0) [ 1448.316399][T13767] 1fa0: 00000000 00000000 00000004 00000000 00000000 00000000 [ 1448.316766][T13767] 1fc0: 00000000 00000000 00131400 0000008d 00000000 00006364 003d0f00 76b700bc [ 1448.317130][T13767] 1fe0: 76b6fec0 76b6feb0 00018af0 00133450 [ 1448.317391][T13767] r7:0000008d r6:00131400 r5:00000000 r4:00000000 [ 1451.466632][ T31] audit: type=1400 audit(1451.380:454): avc: denied { setattr } for pid=13781 comm="syz.9.1780" name="SCTPv6" dev="sockfs" ino=25715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1455.873632][T13800] FAULT_INJECTION: forcing a failure. [ 1455.873632][T13800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.876002][T13800] CPU: 0 UID: 0 PID: 13800 Comm: syz.7.1784 Not tainted 6.12.0-syzkaller #0 [ 1455.876491][T13800] Hardware name: ARM-Versatile Express [ 1455.876664][T13800] Call trace: [ 1455.876793][T13800] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1455.877212][T13800] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1455.877451][T13800] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1455.877794][T13800] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1455.878050][T13800] r5:00000000 r4:8274e844 [ 1455.878272][T13800] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1455.878724][T13800] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1455.879126][T13800] r6:00000000 r5:eb7edf68 r4:00000002 [ 1455.879293][T13800] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1455.879945][T13800] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1455.880512][T13800] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1455.880997][T13800] r10:00000001 r9:805c43b8 r8:00000002 r7:eb7edf68 r6:0000000f r5:76b6ff30 [ 1455.881332][T13800] r4:84786000 r3:eb7ede9f [ 1455.881466][T13800] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1455.881821][T13800] r8:76b6ff30 r7:eb7edf68 r6:84786000 r5:0000000f r4:852ef6c0 [ 1455.882116][T13800] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1455.882442][T13800] r10:00000003 r9:84786000 r8:8020029c r7:00000000 r6:00000000 r5:852ef6c0 [ 1455.882783][T13800] r4:852ef6c3 [ 1455.882933][T13800] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1455.883845][T13800] r7:00000003 r6:00000004 r5:76b6ff30 r4:0000000f [ 1455.884194][T13800] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1455.885054][T13800] Exception stack(0xeb7edfa8 to 0xeb7edff0) [ 1455.885444][T13800] dfa0: 0000000f 76b6ff30 00000004 76b6ff30 0000000f 00000000 [ 1455.885993][T13800] dfc0: 0000000f 76b6ff30 00000004 00000003 00000000 00006364 003d0f00 76b700bc [ 1455.886668][T13800] dfe0: 00000158 76b6fed0 000d8998 00131324 [ 1460.809442][ T31] audit: type=1400 audit(1460.720:455): avc: denied { connect } for pid=13843 comm="syz.7.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1461.327555][ T31] audit: type=1400 audit(1461.240:456): avc: denied { nlmsg_write } for pid=13851 comm="syz.7.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1462.836244][T13859] FAULT_INJECTION: forcing a failure. [ 1462.836244][T13859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.837004][T13859] CPU: 0 UID: 0 PID: 13859 Comm: syz.9.1800 Not tainted 6.12.0-syzkaller #0 [ 1462.837397][T13859] Hardware name: ARM-Versatile Express [ 1462.837693][T13859] Call trace: [ 1462.837921][T13859] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1462.838367][T13859] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1462.838644][T13859] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1462.839195][T13859] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1462.839600][T13859] r5:00000000 r4:8274e844 [ 1462.839828][T13859] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1462.840258][T13859] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1462.840669][T13859] r6:00000000 r5:ec695f68 r4:00000002 [ 1462.840976][T13859] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1462.841393][T13859] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1462.841913][T13859] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1462.842390][T13859] r10:00000001 r9:805c43b8 r8:00000002 r7:ec695f68 r6:0000000f r5:76bf1f30 [ 1462.842775][T13859] r4:8595bc00 r3:ec695e9f [ 1462.843001][T13859] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1462.843422][T13859] r8:76bf1f30 r7:ec695f68 r6:8595bc00 r5:0000000f r4:853f5300 [ 1462.843767][T13859] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1462.844153][T13859] r10:00000003 r9:8595bc00 r8:8020029c r7:00000000 r6:00000000 r5:853f5300 [ 1462.844958][T13859] r4:853f5303 [ 1462.845146][T13859] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1462.845643][T13859] r7:00000003 r6:00000004 r5:76bf1f30 r4:0000000f [ 1462.846098][T13859] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1462.846692][T13859] Exception stack(0xec695fa8 to 0xec695ff0) [ 1462.847068][T13859] 5fa0: 0000000f 76bf1f30 00000004 76bf1f30 0000000f 00000000 [ 1462.847460][T13859] 5fc0: 0000000f 76bf1f30 00000004 00000003 00000000 00006364 003d0f00 76bf20bc [ 1462.847857][T13859] 5fe0: 00000158 76bf1ed0 000d8998 00131324 [ 1464.649293][ T31] audit: type=1400 audit(1464.560:457): avc: denied { setopt } for pid=13867 comm="syz.7.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1466.568176][T13878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13878 comm=syz.9.1806 [ 1472.871522][T13896] FAULT_INJECTION: forcing a failure. [ 1472.871522][T13896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.872342][T13896] CPU: 0 UID: 0 PID: 13896 Comm: syz.9.1811 Not tainted 6.12.0-syzkaller #0 [ 1472.872749][T13896] Hardware name: ARM-Versatile Express [ 1472.872993][T13896] Call trace: [ 1472.873219][T13896] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1472.873750][T13896] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1472.874088][T13896] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1472.874764][T13896] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1472.875399][T13896] r5:00000000 r4:8274e844 [ 1472.875645][T13896] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1472.876134][T13896] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1472.876535][T13896] r6:00000000 r5:ec899f68 r4:00000002 [ 1472.876785][T13896] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1472.877289][T13896] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1472.877877][T13896] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1472.878373][T13896] r10:00000001 r9:805c43b8 r8:00000002 r7:ec899f68 r6:0000000f r5:76bf1f30 [ 1472.878753][T13896] r4:8525bc00 r3:ec899e9f [ 1472.878976][T13896] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1472.879418][T13896] r8:76bf1f30 r7:ec899f68 r6:8525bc00 r5:0000000f r4:853f5c00 [ 1472.879756][T13896] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1472.880543][T13896] r10:00000003 r9:8525bc00 r8:8020029c r7:00000000 r6:00000000 r5:853f5c00 [ 1472.880911][T13896] r4:853f5c03 [ 1472.881217][T13896] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1472.881706][T13896] r7:00000003 r6:00000004 r5:76bf1f30 r4:0000000f [ 1472.882489][T13896] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1472.883786][T13896] Exception stack(0xec899fa8 to 0xec899ff0) [ 1472.884167][T13896] 9fa0: 0000000f 76bf1f30 00000004 76bf1f30 0000000f 00000000 [ 1472.884946][T13896] 9fc0: 0000000f 76bf1f30 00000004 00000003 00000000 00006364 003d0f00 76bf20bc [ 1472.885483][T13896] 9fe0: 00000158 76bf1ed0 000d8998 00131324 [ 1476.429101][ T31] audit: type=1400 audit(1476.330:458): avc: denied { connect } for pid=13929 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1476.435678][ T31] audit: type=1400 audit(1476.340:459): avc: denied { bind } for pid=13929 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1476.575509][ T31] audit: type=1400 audit(1476.480:460): avc: denied { write } for pid=13929 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1476.584404][ T31] audit: type=1400 audit(1476.490:461): avc: denied { ioctl } for pid=13929 comm="syz.7.1822" path="socket:[25176]" dev="sockfs" ino=25176 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1476.700376][T13935] FAULT_INJECTION: forcing a failure. [ 1476.700376][T13935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1476.701451][T13935] CPU: 1 UID: 0 PID: 13935 Comm: syz.9.1823 Not tainted 6.12.0-syzkaller #0 [ 1476.702059][T13935] Hardware name: ARM-Versatile Express [ 1476.702503][T13935] Call trace: [ 1476.702763][T13935] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1476.703468][T13935] r7:ec7d9dc4 r6:00000000 r5:60000013 r4:8203df48 [ 1476.703807][T13935] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1476.704246][T13935] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1476.704801][T13935] r5:00000000 r4:827192b0 [ 1476.705024][T13935] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1476.705718][T13935] [<808e6968>] (should_fail_ex) from [<804e9170>] (should_fail_alloc_page+0x68/0x74) [ 1476.706554][T13935] r6:00000000 r5:00000cc0 r4:ec7d9dd0 [ 1476.706902][T13935] [<804e9108>] (should_fail_alloc_page) from [<804b9670>] (prepare_alloc_pages.constprop.0+0x88/0x198) [ 1476.707919][T13935] [<804b95e8>] (prepare_alloc_pages.constprop.0) from [<804c0248>] (__alloc_pages_noprof+0xb4/0x1128) [ 1476.708923][T13935] r10:00000000 r9:809c7970 r8:00000000 r7:84322400 r6:00000cc0 r5:ec7d9f68 [ 1476.709509][T13935] r4:00000000 r3:ec7d9dd0 [ 1476.709702][T13935] [<804c0194>] (__alloc_pages_noprof) from [<804c187c>] (get_free_pages_noprof+0x1c/0x34) [ 1476.710258][T13935] r10:00000001 r9:809c7970 r8:00000000 r7:82f63658 r6:84322400 r5:ec7d9f68 [ 1476.710557][T13935] r4:8477fb40 [ 1476.710691][T13935] [<804c1860>] (get_free_pages_noprof) from [<809c79bc>] (vcs_read+0x4c/0x680) [ 1476.710994][T13935] [<809c7970>] (vcs_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1476.711593][T13935] r10:00000001 r9:809c7970 r8:00000000 r7:ec7d9f68 r6:84322400 r5:00000000 [ 1476.711900][T13935] r4:8477fb40 [ 1476.712128][T13935] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1476.712530][T13935] r10:00000003 r9:84322400 r8:8020029c r7:00000000 r6:00000000 r5:8477fb40 [ 1476.712907][T13935] r4:8477fb41 [ 1476.713132][T13935] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1476.713686][T13935] r7:00000003 r6:00131400 r5:00000000 r4:00000000 [ 1476.713926][T13935] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1476.714378][T13935] Exception stack(0xec7d9fa8 to 0xec7d9ff0) [ 1476.714570][T13935] 9fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 1476.714954][T13935] 9fc0: 00000000 00000000 00131400 00000003 00000000 00006364 003d0f00 76bf20bc [ 1476.715414][T13935] 9fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1480.681654][T13963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13963 comm=syz.9.1833 [ 1482.392041][T13980] FAULT_INJECTION: forcing a failure. [ 1482.392041][T13980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.392592][T13980] CPU: 0 UID: 0 PID: 13980 Comm: syz.9.1834 Not tainted 6.12.0-syzkaller #0 [ 1482.392958][T13980] Hardware name: ARM-Versatile Express [ 1482.393125][T13980] Call trace: [ 1482.393280][T13980] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1482.393806][T13980] r7:20000000 r6:0000000c r5:60000013 r4:8203df48 [ 1482.394064][T13980] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1482.394516][T13980] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1482.395335][T13980] r5:00000000 r4:8274e844 [ 1482.395596][T13980] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1482.395917][T13980] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1482.396536][T13980] r6:0000000c r5:0000000c r4:ecbe9e74 [ 1482.396808][T13980] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1482.397220][T13980] [<808e6b5c>] (should_fail_usercopy) from [<81488260>] (move_addr_to_kernel+0x3c/0xe4) [ 1482.397997][T13980] [<81488224>] (move_addr_to_kernel) from [<81489f74>] (__copy_msghdr+0xe4/0x110) [ 1482.398434][T13980] r9:200000c0 r8:b5403587 r7:ecbe9e30 r6:200000c0 r5:ecbe9de0 r4:ecbe9f38 [ 1482.398812][T13980] [<81489e90>] (__copy_msghdr) from [<8148a04c>] (copy_msghdr_from_user+0xac/0x130) [ 1482.399243][T13980] r5:00000000 r4:ecbe9f38 [ 1482.399474][T13980] [<81489fa0>] (copy_msghdr_from_user) from [<8148a148>] (___sys_sendmsg+0x78/0xd0) [ 1482.399928][T13980] r8:00014000 r7:00000000 r6:84c27680 r5:ecbe9f38 r4:ecbe9e74 [ 1482.400252][T13980] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1482.402026][T13980] r10:00000128 r9:83546000 r8:8020029c r7:00014000 r6:200000c0 r5:84c27680 [ 1482.402322][T13980] r4:00000000 [ 1482.403048][T13980] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1482.404639][T13980] Exception stack(0xecbe9fa8 to 0xecbe9ff0) [ 1482.404915][T13980] 9fa0: 00000000 00000000 00000005 200000c0 00014000 00000000 [ 1482.405233][T13980] 9fc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76b8f0bc [ 1482.405479][T13980] 9fe0: 76b8eec0 76b8eeb0 00018af0 00133450 [ 1482.405767][T13980] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1483.638887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1484.553426][T13984] FAULT_INJECTION: forcing a failure. [ 1484.553426][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.560531][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.9.1838 Not tainted 6.12.0-syzkaller #0 [ 1484.561635][T13984] Hardware name: ARM-Versatile Express [ 1484.562148][T13984] Call trace: [ 1484.562534][T13984] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1484.563499][T13984] r7:854a23a3 r6:00000000 r5:60000013 r4:8203df48 [ 1484.564064][T13984] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1484.564713][T13984] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1484.565359][T13984] r5:00000000 r4:8274e844 [ 1484.565928][T13984] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1484.566807][T13984] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1484.567458][T13984] r6:00000000 r5:ecb09f48 r4:00000010 [ 1484.568200][T13984] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1484.569426][T13984] [<808e6b5c>] (should_fail_usercopy) from [<80838be0>] (_copy_from_iter+0x68/0x7c8) [ 1484.570314][T13984] [<80838b78>] (_copy_from_iter) from [<81830b64>] (isotp_sendmsg+0x25c/0x7fc) [ 1484.571134][T13984] r10:ecb09f38 r9:854a23a3 r8:ecb09f48 r7:00000010 r6:854a0000 r5:854a2000 [ 1484.572082][T13984] r4:00000000 [ 1484.572697][T13984] [<81830908>] (isotp_sendmsg) from [<81487204>] (__sock_sendmsg+0x44/0x78) [ 1484.573707][T13984] r10:00000000 r9:ecb09dd4 r8:ecb09dd4 r7:84c27180 r6:84c27180 r5:ecb09f38 [ 1484.574426][T13984] r4:00000000 [ 1484.574641][T13984] [<814871c0>] (__sock_sendmsg) from [<81488204>] (____sys_sendmsg+0x2a4/0x2c4) [ 1484.575227][T13984] r7:84c27180 r6:00000000 r5:00040804 r4:ecb09f38 [ 1484.576052][T13984] [<81487f60>] (____sys_sendmsg) from [<8148a16c>] (___sys_sendmsg+0x9c/0xd0) [ 1484.576981][T13984] r10:ecb09e34 r9:200001c0 r8:00040804 r7:00000000 r6:84c27180 r5:ecb09f38 [ 1484.577554][T13984] r4:00000000 [ 1484.578060][T13984] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1484.578928][T13984] r10:00000128 r9:8525bc00 r8:8020029c r7:00040804 r6:200001c0 r5:84c27180 [ 1484.580148][T13984] r4:00000000 [ 1484.580585][T13984] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1484.581395][T13984] Exception stack(0xecb09fa8 to 0xecb09ff0) [ 1484.582042][T13984] 9fa0: 00000000 00000000 00000003 200001c0 00040804 00000000 [ 1484.582720][T13984] 9fc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76bf20bc [ 1484.583779][T13984] 9fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1484.584501][T13984] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1484.585379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.300345][T14000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=14000 comm=syz.9.1844 [ 1485.611519][ T31] audit: type=1400 audit(1485.520:462): avc: denied { shutdown } for pid=14001 comm="syz.9.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1485.759539][T14007] FAULT_INJECTION: forcing a failure. [ 1485.759539][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.760414][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.9.1846 Not tainted 6.12.0-syzkaller #0 [ 1485.761231][T14007] Hardware name: ARM-Versatile Express [ 1485.761775][T14007] Call trace: [ 1485.762034][T14007] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1485.762479][T14007] r7:eccc5e30 r6:20000140 r5:60000013 r4:8203df48 [ 1485.762754][T14007] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1485.763140][T14007] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1485.763503][T14007] r5:00000000 r4:8274e844 [ 1485.763712][T14007] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1485.764531][T14007] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1485.765093][T14007] r6:20000140 r5:00000000 r4:eccc5f38 [ 1485.765417][T14007] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1485.766065][T14007] [<808e6b5c>] (should_fail_usercopy) from [<81489ff0>] (copy_msghdr_from_user+0x50/0x130) [ 1485.766584][T14007] [<81489fa0>] (copy_msghdr_from_user) from [<8148a148>] (___sys_sendmsg+0x78/0xd0) [ 1485.767123][T14007] r8:00000000 r7:00000000 r6:84d4a280 r5:eccc5f38 r4:eccc5e74 [ 1485.767672][T14007] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1485.768425][T14007] r10:00000128 r9:8525e000 r8:8020029c r7:00000000 r6:20000140 r5:84d4a280 [ 1485.768811][T14007] r4:00000000 [ 1485.769027][T14007] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1485.769449][T14007] Exception stack(0xeccc5fa8 to 0xeccc5ff0) [ 1485.769804][T14007] 5fa0: 00000000 00000000 00000004 20000140 00000000 00000000 [ 1485.770223][T14007] 5fc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76bf20bc [ 1485.770628][T14007] 5fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1485.770931][T14007] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1495.288403][ T31] audit: type=1400 audit(1495.190:463): avc: denied { mount } for pid=14056 comm="syz.9.1856" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1496.192884][ T31] audit: type=1400 audit(1496.100:464): avc: denied { listen } for pid=14061 comm="syz.7.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1497.790803][ T31] audit: type=1400 audit(1497.700:465): avc: denied { unmount } for pid=13067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1497.896524][ T31] audit: type=1400 audit(1497.810:466): avc: denied { setopt } for pid=14066 comm="syz.9.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1498.536539][T14073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14073 comm=syz.9.1859 [ 1502.289692][T14114] FAULT_INJECTION: forcing a failure. [ 1502.289692][T14114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.292251][T14114] CPU: 0 UID: 0 PID: 14114 Comm: syz.7.1864 Not tainted 6.12.0-syzkaller #0 [ 1502.293126][T14114] Hardware name: ARM-Versatile Express [ 1502.293449][T14114] Call trace: [ 1502.293743][T14114] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1502.294179][T14114] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1502.294641][T14114] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1502.295289][T14114] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1502.295762][T14114] r5:00000000 r4:8274e844 [ 1502.296053][T14114] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1502.296749][T14114] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1502.297406][T14114] r6:00000000 r5:ed209f68 r4:00000002 [ 1502.297722][T14114] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1502.298302][T14114] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1502.299123][T14114] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1502.300116][T14114] r10:00000001 r9:805c43b8 r8:00000002 r7:ed209f68 r6:0000000f r5:76b6ff30 [ 1502.300563][T14114] r4:8525c800 r3:ed209e9f [ 1502.300801][T14114] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1502.301435][T14114] r8:76b6ff30 r7:ed209f68 r6:8525c800 r5:0000000f r4:855d4b40 [ 1502.301943][T14114] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1502.302565][T14114] r10:00000003 r9:8525c800 r8:8020029c r7:00000000 r6:00000000 r5:855d4b40 [ 1502.303084][T14114] r4:855d4b43 [ 1502.303272][T14114] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1502.303635][T14114] r7:00000003 r6:00000003 r5:76b6ff30 r4:0000000f [ 1502.304061][T14114] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1502.304973][T14114] Exception stack(0xed209fa8 to 0xed209ff0) [ 1502.305567][T14114] 9fa0: 0000000f 76b6ff30 00000003 76b6ff30 0000000f 00000000 [ 1502.306007][T14114] 9fc0: 0000000f 76b6ff30 00000003 00000003 00000000 00006364 003d0f00 76b700bc [ 1502.306596][T14114] 9fe0: 00000158 76b6fed0 000d8998 00131324 [ 1503.020218][T14130] FAULT_INJECTION: forcing a failure. [ 1503.020218][T14130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.020992][T14130] CPU: 0 UID: 0 PID: 14130 Comm: syz.9.1870 Not tainted 6.12.0-syzkaller #0 [ 1503.021349][T14130] Hardware name: ARM-Versatile Express [ 1503.021624][T14130] Call trace: [ 1503.021836][T14130] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1503.022279][T14130] r7:200000c0 r6:00000020 r5:60000013 r4:8203df48 [ 1503.022548][T14130] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1503.022935][T14130] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1503.023303][T14130] r5:00000000 r4:8274e844 [ 1503.023495][T14130] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1503.023915][T14130] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1503.024288][T14130] r6:00000020 r5:00000020 r4:ed2e1ef4 [ 1503.024975][T14130] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1503.025770][T14130] [<808e6b5c>] (should_fail_usercopy) from [<81488260>] (move_addr_to_kernel+0x3c/0xe4) [ 1503.026225][T14130] [<81488224>] (move_addr_to_kernel) from [<814894c4>] (__sys_connect+0x58/0xc4) [ 1503.027286][T14130] r9:84324800 r8:8020029c r7:0000011b r6:00000020 r5:855d4cc1 r4:200000c0 [ 1503.027669][T14130] [<8148946c>] (__sys_connect) from [<81489540>] (sys_connect+0x10/0x14) [ 1503.028106][T14130] r6:00131400 r5:00000000 r4:00000000 [ 1503.028384][T14130] [<81489530>] (sys_connect) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1503.028790][T14130] Exception stack(0xed2e1fa8 to 0xed2e1ff0) [ 1503.029118][T14130] 1fa0: 00000000 00000000 00000005 200000c0 00000020 00000000 [ 1503.030545][T14130] 1fc0: 00000000 00000000 00131400 0000011b 00000000 00006364 003d0f00 76bf20bc [ 1503.031508][T14130] 1fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1505.973838][T14152] fuse: Bad value for 'user_id' [ 1505.976974][T14152] fuse: Bad value for 'user_id' [ 1517.810369][ T31] audit: type=1400 audit(1517.720:467): avc: denied { setattr } for pid=14253 comm="syz.9.1894" name="LLC" dev="sockfs" ino=26472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1517.838375][ T31] audit: type=1400 audit(1517.750:468): avc: denied { write } for pid=14253 comm="syz.9.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1518.016439][ T31] audit: type=1400 audit(1517.920:469): avc: denied { lock } for pid=14259 comm="syz.7.1896" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1522.799301][T14290] FAULT_INJECTION: forcing a failure. [ 1522.799301][T14290] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.800051][T14290] CPU: 1 UID: 0 PID: 14290 Comm: syz.9.1904 Not tainted 6.12.0-syzkaller #0 [ 1522.800463][T14290] Hardware name: ARM-Versatile Express [ 1522.800725][T14290] Call trace: [ 1522.800950][T14290] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1522.801411][T14290] r7:00000c40 r6:8544c328 r5:60000013 r4:8203df48 [ 1522.801744][T14290] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1522.802126][T14290] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1522.802494][T14290] r5:00000000 r4:8271925c [ 1522.802698][T14290] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1522.803062][T14290] [<808e6968>] (should_fail_ex) from [<804e90e0>] (should_failslab+0x6c/0x94) [ 1522.803465][T14290] r6:8544c328 r5:00001000 r4:82c016c0 [ 1522.803711][T14290] [<804e9074>] (should_failslab) from [<804ce254>] (__kmalloc_noprof+0x9c/0x458) [ 1522.804111][T14290] [<804ce1b8>] (__kmalloc_noprof) from [<807522c0>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1522.805161][T14290] r10:82ed1800 r9:82f19000 r8:00000000 r7:84c7a2a8 r6:8544c328 r5:00001000 [ 1522.805863][T14290] r4:00000000 [ 1522.806063][T14290] [<80752284>] (tomoyo_realpath_from_path) from [<8074e404>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1522.806554][T14290] r10:82ed1800 r9:00000000 r8:00000005 r7:80049367 r6:00000004 r5:81ad1968 [ 1522.806937][T14290] r4:8544c328 r3:824ba340 [ 1522.807163][T14290] [<8074e338>] (tomoyo_path_number_perm) from [<80752cd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1522.807563][T14290] r9:8544c300 r8:00000005 r7:00000000 r6:00000000 r5:80049367 r4:8544c300 [ 1522.807949][T14290] [<80752cb4>] (tomoyo_file_ioctl) from [<8070131c>] (security_file_ioctl+0x64/0x1e4) [ 1522.808898][T14290] [<807012b8>] (security_file_ioctl) from [<80530600>] (sys_ioctl+0x50/0xd98) [ 1522.809943][T14290] r7:00000000 r6:8544c301 r5:00000000 r4:80049367 [ 1522.810450][T14290] [<805305b0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1522.811031][T14290] Exception stack(0xeddc5fa8 to 0xeddc5ff0) [ 1522.811328][T14290] 5fa0: 00000000 00000000 00000005 80049367 00000000 00000000 [ 1522.811742][T14290] 5fc0: 00000000 00000000 00131400 00000036 00000000 00006364 003d0f00 76bb00bc [ 1522.812127][T14290] 5fe0: 76bafec0 76bafeb0 00018af0 00133450 [ 1522.812427][T14290] r10:00000036 r9:82ed1800 r8:8020029c r7:00000036 r6:00131400 r5:00000000 [ 1522.812798][T14290] r4:00000000 [ 1522.816501][T14290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1534.665997][T14342] FAULT_INJECTION: forcing a failure. [ 1534.665997][T14342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.666853][T14342] CPU: 0 UID: 0 PID: 14342 Comm: syz.9.1919 Not tainted 6.12.0-syzkaller #0 [ 1534.667186][T14342] Hardware name: ARM-Versatile Express [ 1534.667403][T14342] Call trace: [ 1534.667593][T14342] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1534.667989][T14342] r7:859723a3 r6:00000000 r5:60000013 r4:8203df48 [ 1534.668217][T14342] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1534.668526][T14342] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1534.668930][T14342] r5:00000000 r4:8274e844 [ 1534.669169][T14342] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1534.669897][T14342] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1534.670443][T14342] r6:00000000 r5:ed595f48 r4:00001130 [ 1534.670805][T14342] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1534.671255][T14342] [<808e6b5c>] (should_fail_usercopy) from [<80838be0>] (_copy_from_iter+0x68/0x7c8) [ 1534.671861][T14342] [<80838b78>] (_copy_from_iter) from [<81830b64>] (isotp_sendmsg+0x25c/0x7fc) [ 1534.672238][T14342] r10:ed595f38 r9:859723a3 r8:ed595f48 r7:00001130 r6:85970000 r5:85972000 [ 1534.672750][T14342] r4:00000000 [ 1534.672919][T14342] [<81830908>] (isotp_sendmsg) from [<81487204>] (__sock_sendmsg+0x44/0x78) [ 1534.673296][T14342] r10:00000000 r9:ed595dd4 r8:ed595dd4 r7:8319d180 r6:8319d180 r5:ed595f38 [ 1534.673662][T14342] r4:00000000 [ 1534.673830][T14342] [<814871c0>] (__sock_sendmsg) from [<81488204>] (____sys_sendmsg+0x2a4/0x2c4) [ 1534.674287][T14342] r7:8319d180 r6:00000000 r5:20000010 r4:ed595f38 [ 1534.674614][T14342] [<81487f60>] (____sys_sendmsg) from [<8148a16c>] (___sys_sendmsg+0x9c/0xd0) [ 1534.675028][T14342] r10:ed595e34 r9:200000c0 r8:20000010 r7:00000000 r6:8319d180 r5:ed595f38 [ 1534.675569][T14342] r4:00000000 [ 1534.675759][T14342] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1534.676342][T14342] r10:00000128 r9:85258c00 r8:8020029c r7:20000010 r6:200000c0 r5:8319d180 [ 1534.677101][T14342] r4:00000000 [ 1534.677341][T14342] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1534.678046][T14342] Exception stack(0xed595fa8 to 0xed595ff0) [ 1534.678384][T14342] 5fa0: 00000000 00000000 00000003 200000c0 20000010 00000000 [ 1534.679550][T14342] 5fc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76bf20bc [ 1534.679982][T14342] 5fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1534.680308][T14342] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1539.393835][ T31] audit: type=1400 audit(1539.300:470): avc: denied { setopt } for pid=14376 comm="syz.7.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1547.432750][T14415] FAULT_INJECTION: forcing a failure. [ 1547.432750][T14415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.433519][T14415] CPU: 1 UID: 0 PID: 14415 Comm: syz.9.1940 Not tainted 6.12.0-syzkaller #0 [ 1547.433945][T14415] Hardware name: ARM-Versatile Express [ 1547.434225][T14415] Call trace: [ 1547.434697][T14415] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1547.435291][T14415] r7:00000000 r6:00000000 r5:60000013 r4:8203df48 [ 1547.435591][T14415] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1547.435953][T14415] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1547.436298][T14415] r5:00000000 r4:8274e844 [ 1547.436492][T14415] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1547.436865][T14415] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1547.437213][T14415] r6:00000000 r5:ee36df68 r4:00000002 [ 1547.437434][T14415] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1547.437823][T14415] [<808e6b5c>] (should_fail_usercopy) from [<8054f898>] (simple_read_from_buffer+0x8c/0x134) [ 1547.438246][T14415] [<8054f80c>] (simple_read_from_buffer) from [<805c4470>] (proc_fail_nth_read+0xb8/0x100) [ 1547.438640][T14415] r10:00000001 r9:805c43b8 r8:00000002 r7:ee36df68 r6:0000000f r5:76bf1f30 [ 1547.438958][T14415] r4:84326c00 r3:ee36de9f [ 1547.439154][T14415] [<805c43b8>] (proc_fail_nth_read) from [<80516e4c>] (vfs_read+0x98/0x324) [ 1547.439509][T14415] r8:76bf1f30 r7:ee36df68 r6:84326c00 r5:0000000f r4:8544c600 [ 1547.439809][T14415] [<80516db4>] (vfs_read) from [<80517afc>] (ksys_read+0x78/0xf8) [ 1547.440141][T14415] r10:00000003 r9:84326c00 r8:8020029c r7:00000000 r6:00000000 r5:8544c600 [ 1547.440439][T14415] r4:8544c603 [ 1547.440605][T14415] [<80517a84>] (ksys_read) from [<80517b8c>] (sys_read+0x10/0x14) [ 1547.440946][T14415] r7:00000003 r6:00000004 r5:76bf1f30 r4:0000000f [ 1547.441196][T14415] [<80517b7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1547.441576][T14415] Exception stack(0xee36dfa8 to 0xee36dff0) [ 1547.441837][T14415] dfa0: 0000000f 76bf1f30 00000004 76bf1f30 0000000f 00000000 [ 1547.442159][T14415] dfc0: 0000000f 76bf1f30 00000004 00000003 00000000 00006364 003d0f00 76bf20bc [ 1547.442469][T14415] dfe0: 00000158 76bf1ed0 000d8998 00131324 [ 1556.770601][T14488] block device autoloading is deprecated and will be removed. [ 1557.432996][ T31] audit: type=1400 audit(1557.340:471): avc: denied { ioctl } for pid=14494 comm="syz.7.1964" path="socket:[27388]" dev="sockfs" ino=27388 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1558.294275][ T31] audit: type=1400 audit(1558.200:472): avc: denied { ioctl } for pid=14499 comm="syz.9.1966" path="socket:[27400]" dev="sockfs" ino=27400 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1558.317750][ T31] audit: type=1400 audit(1558.230:473): avc: denied { connect } for pid=14499 comm="syz.9.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1558.334019][ T31] audit: type=1400 audit(1558.240:474): avc: denied { listen } for pid=14499 comm="syz.9.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1562.105997][ T31] audit: type=1400 audit(1562.020:475): avc: granted { setsecparam } for pid=14522 comm="syz.9.1973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1565.371172][T14537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14537 comm=syz.9.1977 [ 1575.813369][T14592] serio: Serial port pts0 [ 1580.412274][ T31] audit: type=1400 audit(1580.320:476): avc: denied { setattr } for pid=14599 comm="syz.9.1995" name="PACKET" dev="sockfs" ino=27995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1582.792806][ T31] audit: type=1400 audit(1582.700:477): avc: denied { map } for pid=14614 comm="syz.9.1998" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1582.794026][ T31] audit: type=1400 audit(1582.700:478): avc: denied { execute } for pid=14614 comm="syz.9.1998" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1582.821883][ T31] audit: type=1400 audit(1582.730:479): avc: denied { setattr } for pid=14614 comm="syz.9.1998" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1583.665749][ T31] audit: type=1400 audit(1583.570:480): avc: denied { read } for pid=14621 comm="syz.9.2001" path="socket:[28031]" dev="sockfs" ino=28031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1584.677767][T14627] FAULT_INJECTION: forcing a failure. [ 1584.677767][T14627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.678437][T14627] CPU: 1 UID: 0 PID: 14627 Comm: syz.9.2001 Not tainted 6.12.0-syzkaller #0 [ 1584.678790][T14627] Hardware name: ARM-Versatile Express [ 1584.679003][T14627] Call trace: [ 1584.679164][T14627] [<8199d478>] (dump_backtrace) from [<8199d574>] (show_stack+0x18/0x1c) [ 1584.679481][T14627] r7:eedbde30 r6:20000100 r5:60000013 r4:8203df48 [ 1584.679714][T14627] [<8199d55c>] (show_stack) from [<819bba5c>] (dump_stack_lvl+0x70/0x7c) [ 1584.680100][T14627] [<819bb9ec>] (dump_stack_lvl) from [<819bba80>] (dump_stack+0x18/0x1c) [ 1584.680450][T14627] r5:00000000 r4:8274e844 [ 1584.680654][T14627] [<819bba68>] (dump_stack) from [<808e6af4>] (should_fail_ex+0x18c/0x1dc) [ 1584.681112][T14627] [<808e6968>] (should_fail_ex) from [<808e6b58>] (should_fail+0x14/0x18) [ 1584.681630][T14627] r6:20000100 r5:00000000 r4:eedbdf38 [ 1584.681884][T14627] [<808e6b44>] (should_fail) from [<808e6b78>] (should_fail_usercopy+0x1c/0x20) [ 1584.682265][T14627] [<808e6b5c>] (should_fail_usercopy) from [<81489ff0>] (copy_msghdr_from_user+0x50/0x130) [ 1584.682687][T14627] [<81489fa0>] (copy_msghdr_from_user) from [<8148a148>] (___sys_sendmsg+0x78/0xd0) [ 1584.683085][T14627] r8:00000000 r7:00000000 r6:84d49400 r5:eedbdf38 r4:eedbde74 [ 1584.683372][T14627] [<8148a0d0>] (___sys_sendmsg) from [<8148a684>] (sys_sendmsg+0x78/0xbc) [ 1584.683784][T14627] r10:00000128 r9:8525c800 r8:8020029c r7:00000000 r6:20000100 r5:84d49400 [ 1584.684121][T14627] r4:00000000 [ 1584.684290][T14627] [<8148a60c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1584.684921][T14627] Exception stack(0xeedbdfa8 to 0xeedbdff0) [ 1584.685557][T14627] dfa0: 00000000 00000000 00000005 20000100 00000000 00000000 [ 1584.686014][T14627] dfc0: 00000000 00000000 00131400 00000128 00000000 00006364 003d0f00 76b8f0bc [ 1584.686384][T14627] dfe0: 76b8eec0 76b8eeb0 00018af0 00133450 [ 1584.686691][T14627] r7:00000128 r6:00131400 r5:00000000 r4:00000000 [ 1585.756244][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.757373][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.803763][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.809278][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.018968][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.019695][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.557281][T14691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14691 comm=syz.7.2023 [ 1603.441711][ T31] audit: type=1400 audit(1603.350:481): avc: denied { mounton } for pid=14702 comm="syz.9.2026" path="/dev/snapshot" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1603.771570][ T31] audit: type=1400 audit(1603.680:482): avc: denied { read } for pid=14707 comm="syz.9.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1603.882130][T14712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14712 comm=syz.9.2029 [ 1603.885032][T14712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14712 comm=syz.9.2029 [ 1616.770385][ T31] audit: type=1400 audit(1616.680:483): avc: granted { setsecparam } for pid=14781 comm="syz.7.2048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1620.341438][ T31] audit: type=1400 audit(1620.250:484): avc: denied { set_context_mgr } for pid=14800 comm="syz.9.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1626.512277][T14820] pim6reg1: entered promiscuous mode [ 1626.514390][T14820] pim6reg1: entered allmulticast mode [ 1627.493873][T14830] netlink: 'syz.7.2061': attribute type 1 has an invalid length. [ 1644.696406][ T31] audit: type=1400 audit(1644.610:485): avc: denied { name_bind } for pid=14840 comm="syz.9.2064" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1644.698546][ T31] audit: type=1400 audit(1644.610:486): avc: denied { node_bind } for pid=14840 comm="syz.9.2064" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1646.693264][ T31] audit: type=1400 audit(1646.600:487): avc: denied { bind } for pid=14845 comm="syz.9.2066" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1646.693883][ T31] audit: type=1400 audit(1646.600:488): avc: denied { node_bind } for pid=14845 comm="syz.9.2066" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1647.212983][ T31] audit: type=1326 audit(1647.120:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1647.225655][ T31] audit: type=1326 audit(1647.130:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1647.226469][ T31] audit: type=1326 audit(1647.130:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1647.227264][ T31] audit: type=1326 audit(1647.130:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1647.228146][ T31] audit: type=1326 audit(1647.130:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1647.229343][ T31] audit: type=1326 audit(1647.130:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14849 comm="syz.9.2068" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1664.999635][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1664.999724][ T31] audit: type=1326 audit(1664.910:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.005140][ T31] audit: type=1326 audit(1664.910:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.016118][ T31] audit: type=1326 audit(1664.920:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.016961][ T31] audit: type=1326 audit(1664.920:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.022467][ T31] audit: type=1326 audit(1664.930:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.022987][ T31] audit: type=1326 audit(1664.930:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.023416][ T31] audit: type=1326 audit(1664.930:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.043781][ T31] audit: type=1326 audit(1664.950:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.044397][ T31] audit: type=1326 audit(1664.950:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1665.045462][ T31] audit: type=1326 audit(1664.950:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14909 comm="syz.9.2078" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x131248 code=0x7ffc0000 [ 1665.624227][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2080'. [ 1687.270754][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.272230][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.018087][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1688.018196][ T31] audit: type=1326 audit(1687.890:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.019200][ T31] audit: type=1326 audit(1687.930:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.021682][ T31] audit: type=1326 audit(1687.930:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.022327][ T31] audit: type=1326 audit(1687.930:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.022882][ T31] audit: type=1326 audit(1687.930:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.023639][ T31] audit: type=1326 audit(1687.930:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.036641][ T31] audit: type=1326 audit(1687.930:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.060806][ T31] audit: type=1326 audit(1687.970:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.069477][ T31] audit: type=1326 audit(1687.980:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1688.070929][ T31] audit: type=1326 audit(1687.980:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.9.2091" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1693.365524][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.372087][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.628628][T14995] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2101' sets config #0 [ 1696.959671][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 1696.959778][ T31] audit: type=1400 audit(1696.870:541): avc: denied { write } for pid=14998 comm="syz.9.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1699.703317][ T31] audit: type=1326 audit(1699.610:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.720610][ T31] audit: type=1326 audit(1699.630:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.721629][ T31] audit: type=1326 audit(1699.630:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.726868][ T31] audit: type=1326 audit(1699.630:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.744161][ T31] audit: type=1326 audit(1699.650:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.752806][ T31] audit: type=1326 audit(1699.660:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.768126][ T31] audit: type=1326 audit(1699.670:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.769164][ T31] audit: type=1326 audit(1699.680:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1699.770064][ T31] audit: type=1326 audit(1699.680:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.9.2124" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1700.024782][T15025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.038721][T15025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.221499][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.222850][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.243187][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.255493][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.945798][T15039] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2127' sets config #0 [ 1713.723884][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1713.723999][ T31] audit: type=1400 audit(1713.630:554): avc: denied { bind } for pid=15053 comm="syz.7.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1722.909657][T15083] syzkaller0: entered promiscuous mode [ 1722.910280][T15083] syzkaller0: entered allmulticast mode [ 1726.495083][ T31] audit: type=1400 audit(1726.400:555): avc: denied { create } for pid=15112 comm="syz.9.2149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1726.496091][ T31] audit: type=1400 audit(1726.400:556): avc: denied { write } for pid=15112 comm="syz.9.2149" name="file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1726.496864][ T31] audit: type=1400 audit(1726.400:557): avc: denied { open } for pid=15112 comm="syz.9.2149" path="/246/file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1726.526945][ T31] audit: type=1400 audit(1726.440:558): avc: denied { unlink } for pid=13067 comm="syz-executor" name="file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1726.708510][ T31] audit: type=1400 audit(1726.620:559): avc: denied { write } for pid=15114 comm="syz.9.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1726.728972][ T31] audit: type=1400 audit(1726.620:560): avc: denied { bind } for pid=15114 comm="syz.9.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1726.733927][ T31] audit: type=1400 audit(1726.640:561): avc: denied { node_bind } for pid=15114 comm="syz.9.2150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1727.505080][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.505852][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.762468][T15143] syz.9.2157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1751.850172][ T31] audit: type=1326 audit(1751.750:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15159 comm="syz.7.2162" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1751.852842][ T31] audit: type=1326 audit(1751.750:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15159 comm="syz.7.2162" exe="/syz-executor" sig=0 arch=40000028 syscall=220 compat=0 ip=0x133450 code=0x7ffc0000 [ 1751.865293][ T31] audit: type=1326 audit(1751.760:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15159 comm="syz.7.2162" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1751.866309][ T31] audit: type=1326 audit(1751.760:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15159 comm="syz.7.2162" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1752.119971][ T31] audit: type=1400 audit(1752.030:566): avc: denied { map } for pid=15161 comm="syz.7.2163" path="/proc/590/net/fib_trie" dev="proc" ino=4026532771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1756.720789][ T31] audit: type=1400 audit(1756.630:567): avc: denied { read } for pid=15193 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.750830][ T31] audit: type=1400 audit(1756.660:568): avc: denied { read } for pid=2897 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1756.755807][ T31] audit: type=1400 audit(1756.670:569): avc: denied { search } for pid=2897 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.759350][ T31] audit: type=1400 audit(1756.670:570): avc: denied { append } for pid=2897 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1756.760301][ T31] audit: type=1400 audit(1756.670:571): avc: denied { open } for pid=2897 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1756.971153][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1756.971253][ T31] audit: type=1326 audit(1756.880:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1756.973357][ T31] audit: type=1326 audit(1756.880:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.007178][ T31] audit: type=1326 audit(1756.920:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.008734][ T31] audit: type=1400 audit(1756.920:581): avc: denied { map_create } for pid=15195 comm="syz.9.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1757.010591][ T31] audit: type=1400 audit(1756.920:582): avc: denied { map_read map_write } for pid=15195 comm="syz.9.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1757.012493][ T31] audit: type=1326 audit(1756.920:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.013371][ T31] audit: type=1326 audit(1756.920:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.027627][ T31] audit: type=1326 audit(1756.940:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.031618][ T31] audit: type=1326 audit(1756.940:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.049566][ T31] audit: type=1326 audit(1756.960:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.9.2168" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1757.537492][T15200] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1762.858259][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1762.858324][ T31] audit: type=1400 audit(1762.770:605): avc: denied { append } for pid=15216 comm="syz.9.2177" name="ptmx" dev="devtmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1764.031044][T15217] pim6reg1: entered promiscuous mode [ 1764.045353][T15217] pim6reg1: entered allmulticast mode [ 1766.395139][ T31] audit: type=1400 audit(1766.300:606): avc: denied { create } for pid=15230 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1766.416305][ T31] audit: type=1400 audit(1766.320:607): avc: denied { write } for pid=15230 comm="syz.9.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1766.646717][ T31] audit: type=1400 audit(1766.560:608): avc: denied { create } for pid=15232 comm="syz.9.2180" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1766.659113][ T31] audit: type=1400 audit(1766.570:609): avc: denied { create } for pid=15232 comm="syz.9.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1766.660664][ T31] audit: type=1400 audit(1766.570:610): avc: denied { write } for pid=15232 comm="syz.9.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1766.663716][ T31] audit: type=1400 audit(1766.570:611): avc: denied { read } for pid=15232 comm="syz.9.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1769.631694][ T31] audit: type=1400 audit(1769.530:612): avc: denied { create } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1769.640243][ T31] audit: type=1400 audit(1769.550:613): avc: denied { bind } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1769.640924][ T31] audit: type=1400 audit(1769.550:614): avc: denied { listen } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1769.644032][ T31] audit: type=1400 audit(1769.550:615): avc: denied { connect } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1769.646318][ T31] audit: type=1400 audit(1769.560:616): avc: denied { accept } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1769.650381][ T31] audit: type=1400 audit(1769.560:617): avc: denied { create } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1769.652756][ T31] audit: type=1400 audit(1769.560:618): avc: denied { write } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1769.653412][ T31] audit: type=1400 audit(1769.560:619): avc: denied { nlmsg_read } for pid=15237 comm="syz.9.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1775.027487][ T31] audit: type=1326 audit(1774.940:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.028684][ T31] audit: type=1326 audit(1774.940:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.033742][ T31] audit: type=1326 audit(1774.940:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.038257][ T31] audit: type=1326 audit(1774.940:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.047334][ T31] audit: type=1326 audit(1774.940:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.074980][ T31] audit: type=1326 audit(1774.950:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.075897][ T31] audit: type=1326 audit(1774.970:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.076632][ T31] audit: type=1326 audit(1774.970:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.077346][ T31] audit: type=1326 audit(1774.980:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.078983][ T31] audit: type=1326 audit(1774.980:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.7.2188" exe="/syz-executor" sig=0 arch=40000028 syscall=430 compat=0 ip=0x133450 code=0x7ffc0000 [ 1775.325097][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2189'. [ 1775.326214][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2189'. [ 1780.102361][T15268] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2194' sets config #0 [ 1787.605327][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1787.605388][ T31] audit: type=1326 audit(1787.500:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.606370][ T31] audit: type=1326 audit(1787.510:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.606935][ T31] audit: type=1326 audit(1787.510:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.607380][ T31] audit: type=1326 audit(1787.510:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.607857][ T31] audit: type=1326 audit(1787.510:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.608303][ T31] audit: type=1326 audit(1787.510:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=260 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.608743][ T31] audit: type=1326 audit(1787.510:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1787.611390][ T31] audit: type=1326 audit(1787.520:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.9.2195" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1788.570233][ T31] audit: type=1326 audit(1788.480:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.9.2197" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1788.571530][ T31] audit: type=1326 audit(1788.480:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.9.2197" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1796.259418][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1796.259520][ T31] audit: type=1400 audit(1796.170:678): avc: denied { read } for pid=15318 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1796.270043][ T31] audit: type=1400 audit(1796.180:679): avc: denied { read } for pid=2897 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1796.296097][ T31] audit: type=1400 audit(1796.200:680): avc: denied { search } for pid=2897 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1796.297806][ T31] audit: type=1400 audit(1796.200:681): avc: denied { append } for pid=2897 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1796.301897][ T31] audit: type=1400 audit(1796.200:682): avc: denied { open } for pid=2897 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1796.345211][ T31] audit: type=1400 audit(1796.200:683): avc: denied { getattr } for pid=2897 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1796.595209][ T31] audit: type=1400 audit(1796.490:684): avc: denied { prog_load } for pid=15320 comm="syz.9.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1796.596273][ T31] audit: type=1400 audit(1796.490:685): avc: denied { bpf } for pid=15320 comm="syz.9.2209" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1796.597086][ T31] audit: type=1400 audit(1796.490:686): avc: denied { perfmon } for pid=15320 comm="syz.9.2209" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1796.598102][ T31] audit: type=1400 audit(1796.510:687): avc: denied { prog_run } for pid=15320 comm="syz.9.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1797.056440][T15325] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2210'. [ 1797.423493][T15328] Invalid ELF header magic: != ELF [ 1800.476101][T15350] netem: unknown loss type 5 [ 1800.602826][T15352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.605265][T15352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.625872][T15352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.626941][T15352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.407557][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1801.407658][ T31] audit: type=1400 audit(1801.320:721): avc: denied { create } for pid=15366 comm="syz.7.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1801.410851][ T31] audit: type=1400 audit(1801.320:722): avc: denied { ioctl } for pid=15366 comm="syz.7.2228" path="socket:[29365]" dev="sockfs" ino=29365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1801.866392][ T31] audit: type=1326 audit(1801.780:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.869026][ T31] audit: type=1326 audit(1801.780:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.869651][ T31] audit: type=1326 audit(1801.780:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.870474][ T31] audit: type=1326 audit(1801.780:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.871107][ T31] audit: type=1326 audit(1801.780:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.915285][ T31] audit: type=1326 audit(1801.790:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.919380][ T31] audit: type=1326 audit(1801.830:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1801.922514][ T31] audit: type=1326 audit(1801.830:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15368 comm="syz.7.2229" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1803.090826][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2232'. [ 1806.296835][T15415] batadv_slave_0: entered promiscuous mode [ 1806.424996][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 1806.425103][ T31] audit: type=1326 audit(1806.330:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x1291cc code=0x7ffc0000 [ 1806.426303][ T31] audit: type=1326 audit(1806.330:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=173 compat=0 ip=0xefda8 code=0x7ffc0000 [ 1806.434346][ T31] audit: type=1326 audit(1806.340:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x1291cc code=0x7ffc0000 [ 1806.435843][ T31] audit: type=1326 audit(1806.340:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=173 compat=0 ip=0xefda8 code=0x7ffc0000 [ 1806.439861][ T31] audit: type=1326 audit(1806.340:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=343 compat=0 ip=0x133450 code=0x7ffc0000 [ 1806.448257][ T31] audit: type=1326 audit(1806.360:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x1291cc code=0x7ffc0000 [ 1806.449504][ T31] audit: type=1326 audit(1806.360:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=173 compat=0 ip=0xefda8 code=0x7ffc0000 [ 1806.450743][ T31] audit: type=1326 audit(1806.360:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=20 compat=0 ip=0x1291cc code=0x7ffc0000 [ 1806.451432][ T31] audit: type=1326 audit(1806.360:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=173 compat=0 ip=0xefda8 code=0x7ffc0000 [ 1806.452050][ T31] audit: type=1326 audit(1806.360:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.9.2245" exe="/syz-executor" sig=0 arch=40000028 syscall=343 compat=0 ip=0x133450 code=0x7ffc0000 [ 1810.037755][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2253'. [ 1810.387075][T15439] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2256'. [ 1813.130809][ T31] kauditd_printk_skb: 598 callbacks suppressed [ 1813.130938][ T31] audit: type=1326 audit(1813.040:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.146241][ T31] audit: type=1326 audit(1813.060:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.156954][ T31] audit: type=1326 audit(1813.070:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.157810][ T31] audit: type=1326 audit(1813.070:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.161757][ T31] audit: type=1326 audit(1813.070:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.163675][ T31] audit: type=1326 audit(1813.070:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.185448][ T31] audit: type=1326 audit(1813.070:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.186601][ T31] audit: type=1326 audit(1813.090:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=174 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.195700][ T31] audit: type=1326 audit(1813.090:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1813.196649][ T31] audit: type=1326 audit(1813.110:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.9.2259" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1817.196963][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.197898][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.379756][T15478] wireguard0: entered promiscuous mode [ 1817.380322][T15478] wireguard0: entered allmulticast mode [ 1820.217444][T15534] syz.9.2280[15534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1820.217847][T15534] syz.9.2280[15534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1820.218747][T15534] syz.9.2280[15534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1820.390038][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.415476][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.588704][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1820.588796][ T31] audit: type=1400 audit(1820.500:1455): avc: denied { setopt } for pid=15545 comm="syz.9.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1821.023802][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.027799][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.139288][ T31] audit: type=1400 audit(1821.050:1456): avc: denied { mounton } for pid=15554 comm="syz.7.2285" path="/237/file0" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1821.145080][ T31] audit: type=1400 audit(1821.050:1457): avc: denied { mount } for pid=15554 comm="syz.7.2285" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1821.253136][ T31] audit: type=1400 audit(1821.160:1458): avc: denied { map } for pid=15557 comm="syz.9.2286" path="socket:[29574]" dev="sockfs" ino=29574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1821.254064][ T31] audit: type=1400 audit(1821.160:1459): avc: denied { read } for pid=15557 comm="syz.9.2286" path="socket:[29574]" dev="sockfs" ino=29574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1822.656601][ T31] audit: type=1400 audit(1822.570:1460): avc: denied { name_bind } for pid=15562 comm="syz.9.2287" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1822.657696][ T31] audit: type=1400 audit(1822.570:1461): avc: denied { node_bind } for pid=15562 comm="syz.9.2287" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1823.689059][ T31] audit: type=1400 audit(1823.600:1462): avc: denied { block_suspend } for pid=15566 comm="syz.9.2289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1823.755618][ T31] audit: type=1400 audit(1823.650:1463): avc: denied { unmount } for pid=12265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1824.318815][T15579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.321133][T15579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.607823][ T31] audit: type=1400 audit(1824.510:1464): avc: denied { audit_write } for pid=15583 comm="syz.7.2293" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1839.879008][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1839.879103][ T31] audit: type=1326 audit(1839.790:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.892137][ T31] audit: type=1326 audit(1839.800:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.897974][ T31] audit: type=1326 audit(1839.810:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.898953][ T31] audit: type=1326 audit(1839.810:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.916503][ T31] audit: type=1326 audit(1839.810:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.917465][ T31] audit: type=1326 audit(1839.820:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.918301][ T31] audit: type=1326 audit(1839.820:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.924238][ T31] audit: type=1326 audit(1839.830:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=224 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.928244][ T31] audit: type=1326 audit(1839.830:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1839.929119][ T31] audit: type=1326 audit(1839.830:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.7.2297" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1840.101011][T15619] batadv_slave_0: entered promiscuous mode [ 1851.832242][T15654] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 1863.923297][ T31] kauditd_printk_skb: 665 callbacks suppressed [ 1863.923401][ T31] audit: type=1326 audit(1863.830:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.9.2304" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1863.939135][ T31] audit: type=1326 audit(1863.850:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.9.2304" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1863.940140][ T31] audit: type=1326 audit(1863.850:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.9.2304" exe="/syz-executor" sig=0 arch=40000028 syscall=185 compat=0 ip=0x133450 code=0x7ffc0000 [ 1863.940897][ T31] audit: type=1326 audit(1863.850:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.9.2304" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1863.941692][ T31] audit: type=1326 audit(1863.850:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.9.2304" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1866.542831][ T31] audit: type=1400 audit(1866.450:2146): avc: denied { connect } for pid=15663 comm="syz.9.2305" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1869.745299][ T31] audit: type=1400 audit(1869.660:2147): avc: denied { write } for pid=15693 comm="syz.9.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1870.598679][ T31] audit: type=1400 audit(1870.490:2148): avc: denied { mount } for pid=15697 comm="syz.9.2311" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1870.854913][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.855643][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.856030][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.856631][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.857445][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.858439][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.858645][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.858850][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.859039][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.859234][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.859514][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.859722][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.859925][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.860125][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.860323][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.860515][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.860864][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.861221][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.861599][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.861956][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.862378][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.862712][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.863031][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.863341][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.863666][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.863994][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.864362][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.871736][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.896237][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.896616][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.896980][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.897323][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.897702][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.897935][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.898171][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.898382][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.898577][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.898787][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.898984][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.899187][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.899486][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.899697][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.899904][T15561] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1870.923795][T15561] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1871.745691][ T31] audit: type=1400 audit(1871.650:2149): avc: denied { create } for pid=15711 comm="syz.9.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1871.762177][ T31] audit: type=1400 audit(1871.670:2150): avc: denied { read } for pid=15711 comm="syz.9.2315" path="socket:[30728]" dev="sockfs" ino=30728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1872.822060][ T31] audit: type=1326 audit(1872.730:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15715 comm="syz.7.2317" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1872.842403][ T31] audit: type=1326 audit(1872.750:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15715 comm="syz.7.2317" exe="/syz-executor" sig=0 arch=40000028 syscall=372 compat=0 ip=0x133450 code=0x7ffc0000 [ 1872.872679][ T31] audit: type=1326 audit(1872.782:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15715 comm="syz.7.2317" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x133450 code=0x7ffc0000 [ 1874.842430][T15730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.844861][T15730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.451952][ T31] audit: type=1400 audit(1875.422:2154): avc: denied { ioctl } for pid=15735 comm="syz.9.2325" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30771 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1875.513635][ T31] audit: type=1400 audit(1875.483:2155): avc: denied { read } for pid=15735 comm="syz.9.2325" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1875.903300][T15738] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 116)! [ 1875.923005][T15738] ------------[ cut here ]------------ [ 1875.923354][T15738] kernel BUG at mm/usercopy.c:102! [ 1875.923533][T15738] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 1875.924067][T15738] Modules linked in: [ 1875.924372][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.9.2326 Not tainted 6.12.0-syzkaller #0 [ 1875.924544][T15738] Hardware name: ARM-Versatile Express [ 1875.924668][T15738] PC is at usercopy_abort+0x98/0x9c [ 1875.924939][T15738] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 1875.925093][T15738] pc : [<819a3a08>] lr : [<802bcaa4>] psr: 60000113 [ 1875.925692][T15738] sp : dfdb1d90 ip : dfdb1cd0 fp : dfdb1db4 [ 1875.925934][T15738] r10: 81a00568 r9 : 00000078 r8 : 854f3050 [ 1875.926107][T15738] r7 : ddeb81c0 r6 : 00000000 r5 : 00000074 r4 : 00000050 [ 1875.926271][T15738] r3 : 854f0c00 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 1875.926473][T15738] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1875.926649][T15738] Control: 30c5387d Table: 858444c0 DAC: 00000000 [ 1875.927247][T15738] Register r0 information: non-paged memory [ 1875.928228][T15738] Register r1 information: NULL pointer [ 1875.928620][T15738] Register r2 information: NULL pointer [ 1875.928782][T15738] Register r3 information: slab task_struct start 854f0c00 pointer offset 0 size 3072 [ 1875.929428][T15738] Register r4 information: non-paged memory [ 1875.929681][T15738] Register r5 information: non-paged memory [ 1875.929832][T15738] Register r6 information: NULL pointer [ 1875.929970][T15738] Register r7 information: non-slab/vmalloc memory [ 1875.930197][T15738] Register r8 information: slab task_struct start 854f3000 pointer offset 80 size 3072 [ 1875.930430][T15738] Register r9 information: non-paged memory [ 1875.930559][T15738] Register r10 information: non-slab/vmalloc memory [ 1875.930701][T15738] Register r11 information: 2-page vmalloc region starting at 0xdfdb0000 allocated at kernel_clone+0xac/0x3e4 [ 1875.931002][T15738] Register r12 information: 2-page vmalloc region starting at 0xdfdb0000 allocated at kernel_clone+0xac/0x3e4 [ 1875.931402][T15738] Process syz.9.2326 (pid: 15738, stack limit = 0xdfdb0000) [ 1875.931805][T15738] Stack: (0xdfdb1d90 to 0xdfdb2000) [ 1875.931993][T15738] 1d80: 8205bffc 8202d9f4 82043040 00000050 [ 1875.932172][T15738] 1da0: 00000074 00000078 dfdb1de4 dfdb1db8 804cf8f8 819a397c 00000074 dfdb1dc8 [ 1875.932516][T15738] 1dc0: 802147e0 854f3050 00000074 00000000 854f30c4 ddeb81c0 dfdb1e1c dfdb1de8 [ 1875.932768][T15738] 1de0: 8050e7bc 804cf82c 00000074 20000084 dfdb1e0c 854f3050 00000074 20000084 [ 1875.933001][T15738] 1e00: 00000074 81a005a0 00000078 81a00568 dfdb1e4c dfdb1e20 80209d94 8050e540 [ 1875.933349][T15738] 1e20: 00000000 82eb0f00 00000064 dfdb1e2c dfdb1e2c 80209d04 854f3000 20000084 [ 1875.933636][T15738] 1e40: dfdb1ef4 dfdb1e50 80252ed0 80209d10 00000000 20000000 20000000 81a0057c [ 1875.933826][T15738] 1e60: 819c893c 00000000 dfdb1eb4 dfdb1e78 8020d0ac 8020c014 dfdb1e94 00000000 [ 1875.933998][T15738] 1e80: 8027eba4 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1875.934168][T15738] 1ea0: 00000000 854f0c00 dfdb1edc dfdb1eb8 8027d3d4 802ae5dc 00000000 00000000 [ 1875.934342][T15738] 1ec0: dfdb1eec d835ad2d 854f3000 20000080 00004202 00000002 00000000 20000080 [ 1875.934582][T15738] 1ee0: 854f0c00 0000001a dfdb1f6c dfdb1ef8 8020a1c4 80252bc8 854f3000 854f3884 [ 1875.934833][T15738] 1f00: dfdb1f1c dfdb1f10 819c8de8 8027b950 dfdb1f6c dfdb1f20 80280564 819c8dc4 [ 1875.935045][T15738] 1f20: dfdb1f54 00000000 8027d3d4 60000013 819758d0 8198cb54 dfdb1f54 d835ad2d [ 1875.935267][T15738] 1f40: 854f3000 00004205 854f3000 d835ad2d 00004205 854f3000 00000002 00000000 [ 1875.935621][T15738] 1f60: dfdb1fa4 dfdb1f70 80252874 8020a120 80202cc0 d835ad2d dfdb1fac 00000000 [ 1875.935805][T15738] 1f80: 00000000 002862f4 0000001a 8020029c 854f0c00 0000001a 00000000 dfdb1fa8 [ 1875.936083][T15738] 1fa0: 80200060 80252648 00000000 00000000 00004205 000003bc 00000002 20000080 [ 1875.936405][T15738] 1fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76bf20bc [ 1875.936743][T15738] 1fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 60000010 00004205 00000000 00000000 [ 1875.937112][T15738] Call trace: [ 1875.937251][T15738] [<819a3970>] (usercopy_abort) from [<804cf8f8>] (__check_heap_object+0xd8/0xf4) [ 1875.937474][T15738] [<804cf820>] (__check_heap_object) from [<8050e7bc>] (__check_object_size+0x288/0x304) [ 1875.937751][T15738] r8:ddeb81c0 r7:854f30c4 r6:00000000 r5:00000074 r4:854f3050 [ 1875.937900][T15738] [<8050e534>] (__check_object_size) from [<80209d94>] (fpa_set+0x90/0x118) [ 1875.938091][T15738] r10:81a00568 r9:00000078 r8:81a005a0 r7:00000074 r6:20000084 r5:00000074 [ 1875.938252][T15738] r4:854f3050 [ 1875.938333][T15738] [<80209d04>] (fpa_set) from [<80252ed0>] (ptrace_request+0x314/0xa78) [ 1875.938510][T15738] r6:20000084 r5:854f3000 r4:80209d04 [ 1875.938628][T15738] [<80252bbc>] (ptrace_request) from [<8020a1c4>] (arch_ptrace+0xb0/0x424) [ 1875.938871][T15738] r10:0000001a r9:854f0c00 r8:20000080 r7:00000000 r6:00000002 r5:00004202 [ 1875.939038][T15738] r4:20000080 [ 1875.939125][T15738] [<8020a114>] (arch_ptrace) from [<80252874>] (sys_ptrace+0x238/0x4e0) [ 1875.939304][T15738] r7:00000000 r6:00000002 r5:854f3000 r4:00004205 [ 1875.939465][T15738] [<8025263c>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1875.939651][T15738] Exception stack(0xdfdb1fa8 to 0xdfdb1ff0) [ 1875.939790][T15738] 1fa0: 00000000 00000000 00004205 000003bc 00000002 20000080 [ 1875.939965][T15738] 1fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76bf20bc [ 1875.940135][T15738] 1fe0: 76bf1ec0 76bf1eb0 00018af0 00133450 [ 1875.940259][T15738] r10:0000001a r9:854f0c00 r8:8020029c r7:0000001a r6:002862f4 r5:00000000 [ 1875.940419][T15738] r4:00000000 [ 1875.940647][T15738] Code: e30c0000 e3480205 e58dc000 ebfff273 (e7f001f2) [ 1875.941048][T15738] ---[ end trace 0000000000000000 ]--- [ 1875.941479][T15738] Kernel panic - not syncing: Fatal exception [ 1875.943914][T15738] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:08:49 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8203df48 R02=004411d9 R03=80219ae0 R04=8261b4c0 R05=8260c5d0 R06=00000000 R07=8260c5fc R08=00000000 R09=00000000 R10=00000000 R11=82601f34 R12=82601f38 R13=82601f28 R14=8020898c R15=80219ae8 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=3ffff00c R01=bffff00c R02=3ffff00c R03=20000193 R04=dfdb1bb4 R05=0000000d R06=dddd93d5 R07=00000000 R08=00000000 R09=00000000 R10=8262a1a8 R11=dfdb1b5c R12=00000000 R13=dfdb1b48 R14=0000000c R15=802c367c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000