last executing test programs: 14.277901583s ago: executing program 2 (id=163): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @tick=0x7f, {}, {}, @note={0x4, 0x0, 0x17, 0x9a, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x7}, {}, @connect={{0x0, 0x4}}}], 0xc4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000100)={0x49, 0x3272, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000001c0)={0x6, 0x0, 0xb}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 14.051645163s ago: executing program 2 (id=164): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) semget$private(0x0, 0x4, 0x1a) (async) r4 = semget$private(0x0, 0x4, 0x1a) semop(r4, &(0x7f0000000140)=[{0x3, 0x8, 0x1800}, {0x0, 0x1fa, 0x1000}, {0x1, 0x5, 0x1800}, {0x4, 0x56, 0x800}, {0x2, 0x7ceb, 0x1800}], 0x5) 14.017643896s ago: executing program 2 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2002}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="114353012008ba000000375186dd", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r4, 0x1, 0x7}, 0x14) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="000000001700000426bd7000fedbdf2500000000000000000000ffffac1414aa000004d233000000ac14140e00000000000000000000000000000000000000000000ffff64010102ac1414bb0000000000000000000000004e2200031100"/104, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="fe880000000000000000000000000001ac14141d0000000000000000000000004e2130374e2200070200202032000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ffffffffffffffff0300000000000000070000000000000005000000000000000000000000000000040000000000000006000000000000000000000000000000ffffffffffffff7f0900000000000000040000000000000000feffffffffffff3f0a0000b16b6e0002010200000000000500000000100000d60000002dbd7000000010000000000000000000"], 0x184}}, 0x0) 14.017030014s ago: executing program 2 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000e7c400000000000000000400000000000000000000000000000000080000000000000000000000000000000a00000000000000000000004c001400686d616328736861312b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ff"], 0x13c}}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x2, 0x58, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$rxrpc(0x21, 0x2, 0x2) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd6, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x8, 0xfe}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x2, 0xee, 0x98, 0xff, 0x5}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "9b99c74fb1e13376f22d65f8386c81e0"}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "5d45a2aa7125f23a6d023fa5a1e39121763fd4e985a7509c03d59d9c81a9794f65742547269629265baa75b558be50a73d6ab7e1fc641983754abe0583dc5785feb6603040967fed01080e47a9341f3b185020f415e2997c5383df1ae8da58972be5840e972126aaa72821ab918413f6db46b52ed81a09d84e4cee02ed6443342f5a181c97b05e453bf375cdc78cfd63b85e849d0e6c29ce9d9575657fb311370cf32bfb00098896c31ca8321c93cc1eefb1b0437158a91da6dc51625b558d44a307c176a83eb3cf280296d521998715491dfb562d540e6d02e2fb63a482b96075ada28e3222e13a418953ce1619a6fedc365877e666ef"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40d}}]}) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) (async) listen(r2, 0x1) (async, rerun: 32) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x90, 0x118, 0x8, "cfbba26184ece8f98032f9a56ef26f68ef4f55530ed6f19f0710ad8166b79159ff7e83f10478ad600c8a1033d406e7d86db416de4b7c764b884c2c5df7fa40439870b580f92635f060ffffd6706a0b815f7360cc024f5636656c2d1da6a7ed32b9537eb45d59cf2d2b5f502e2db10314e061561af40fa95a5d9696"}], 0x90}, 0x4080) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)=""/7, 0xffffff4d}], 0x1}, 0x40) (async) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) syz_usb_connect(0x1, 0x523, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xa, 0xcf, 0x19, 0x20, 0x4f1, 0x3012, 0xb4ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x511, 0x2, 0x0, 0x0, 0xe0, 0x58, "", [{{0x9, 0x4, 0x99, 0x6, 0x7, 0xda, 0x79, 0x4b, 0x5, [], [{{0x9, 0x5, 0x14, 0x10, 0x200, 0x4, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0xc9, 0x8a, [@generic={0x4b, 0x21, "c457b52f9e55f8e14e7b4a666ed24a239c7bd0ea49197af09bc5e9ec7da28312a024177890b1de4ab74b0aae9fda47b4a2fcfbaf632972378d04e31f44447e80b8212971a3e59aadc6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0xd, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xf}]}}, {{0x9, 0x5, 0x9, 0x18, 0x10, 0x1, 0x8, 0x3, [@generic={0x5a, 0x5, "5a8382936e7b1111f5d12af899a2ce8ba39c15115af046096975c5d6466d68b6b60bd0fd3078d1b1d307f6d276a1e4487b5dd465f4ecc2b8a119390d52d9c9c166ef8df9538801387131839e0aae320a7fc077cc1e769d0f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xff, 0x6, 0x10}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xa, 0x8, 0x2, [@generic={0xab, 0x2, "14d3a863c0b90fbd6c2fa78f843c19bffb42598be791e84d7bbaf06afe751577804db89ee03b2400b30a8f9952aa9f2d32472294e1e0e4cc939c1799720dc53e42783bef4af2c260bd4bcb7744c25c4da16b8cf9e27e32927bdca847a7084f084b621e60d501db908644383bf46b2ef498eb918adcf28211454c82db28a2faecdc0abb210571e48599c604b82389d897f5055bb86f88fab704190bf41930dfc0dbdc8fba15b9a9cae2"}]}}]}}, {{0x9, 0x4, 0x84, 0x5, 0x9, 0xf, 0xb2, 0xe5, 0x8, [@generic={0x5f, 0x0, "70ce5d7b101e67b3d0895ed7860132f3cfa5661c30b36b8c5093366632ce75c41939c39ef372aa60e33413b4bf057ed7d90465bbe869dbfdea74da609c00e6eb42025b1ee72e4fdedc2a8261c5b9db4885d8b0b4f8c0dc516bee08237a"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "60739d3f55"}, {0x5, 0x24, 0x0, 0xdc}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x7f, 0x7, 0x94}, {0x6, 0x24, 0x1a, 0xe, 0x6}, [@call_mgmt={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x9, 0x2, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xff}, @generic={0x2c, 0x2, "42be8e4ae7561ae6e833aabac7632e9366cabea3857a932d8917f7c68d3c0d02f0001e37ce03bb625ec7"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x4, 0x92, [@generic={0xc7, 0x5, "5eb86179f82e4d83f98b3c8e7dabe8c34059c5a2e6a8854edad9b90005517863f4d7a2d77eb8edc26df2bc905903f1967372b025abe4ce768b7e32e064fa91942c50a0e6ccf4c51955f4f07fcb9fc0d3df53deed93680415311443e7266fcd655d5fca71dd0b5e3aca962d818c0c8e2919c43f85e0fb0f33c1454280866652ed9c125dd86ea314cfabfd672976a2214dc14adcd791f273553fc9569899d38bc2e7fe9ad91badafcc664c84a60a218f1fba1c1cb27a1865b63e53db3f4fe64722cb92dba920"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0xe9, 0x6, [@generic={0x67, 0x22, "af4ff369f792d5451f0902edb0af4a35668830e39fe770312c15dc891695005483ea14147fdddb93e6bfe1d29a14119f6e0f2033d4c63d7c2e9b41caf0634da6a106704f5f81c86f78d76b0d15c0cb600058927c65e07cd62eacbfcefa44a4f67f76524484"}, @generic={0x71, 0x9, "445580201d6662d7adf17cbdd367b03246a9f4261b36406096d1e2adbc78f3c20a945380f3bc95abda6b0c1681ed08c44877f92af8181e662dd618db34e01bed14c92bf84837e1c2172b9116821a50c58ff97f2de82635be25dbddf24579e172b5aa45b44aa84092e32c4d5cdee9dc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xc, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x4, 0x81, 0x8, [@generic={0x8f, 0xe, "6103aac38a6c7ab1a1508ce0cc9304f6afd655766f66a32acfe10010688a5421985e7c47badcafe3e776548d999d053e5f67b01e68552365fd97273e3537a8a4ed1b7e3e30330df4fd2d47ba621e5aea3b6ba11f2e392122b7db3ba2c91e9551209df5b39cb1b6753a32f60a4393d3685dc1399612856158b7263f07bbacfc4de2cddd9d6beaa9c3b7de3a0d29"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0xa0, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x6, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb7, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x1a, 0x400, 0x1, 0x20, 0x9}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x5, 0x7f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0xfd, 0x4, 0x1, 0x40, 0x6}, 0xe5, &(0x7f0000000fc0)={0x5, 0xf, 0xe5, 0x1, [@generic={0xe0, 0x10, 0x0, "a31635676cca472671d41de23cee4832e793c42d8aaf1b8d758366fbd5424654a0a3325dc338936c58f480ace3efd5c994caec5c956be87f85f9f7e344ca7ce8fd8c96c0983c10d569d973e99c71330626d22e7a5d7b544d3a5d7a04123fdb69da4f07e3757c0ad87b13b82c405c44833454273e45ef538c8a6796cc25b0a7c5bb8fbba2dc8addc6a1a992e39816aa6ae4ed80d162cf40bfe073e7f72c6f7239b4d6c5a24d6a460be4f88b0b0f123bb4756f68822def7605344ee2bc05163a6eaa639d5af78a36b9a5e54d95337e4ed360e056550376356646a63f3dcb"}]}, 0x3, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x416}}, {0xb, &(0x7f0000001100)=@string={0xb, 0x3, "eba730682936f78f81"}}, {0x102, &(0x7f0000001140)=@string={0x102, 0x3, "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"}}]}) (async, rerun: 64) write(r5, &(0x7f0000000100)='+b', 0x2) (rerun: 64) 13.371676595s ago: executing program 2 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./tracing/uprobe_events\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x5, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0xfffbfffa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './cgroup\x00'}) write(r7, &(0x7f0000000300)='p:_est/_vent1 ./file0:0', 0x17) 13.262172031s ago: executing program 2 (id=171): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000014c0)=ANY=[], 0x168) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000280)={r6, 0xffff}, &(0x7f00000002c0)=0x8) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x8, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x40, 0x0) r7 = openat(r4, &(0x7f0000000240)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x18e) write(r7, 0x0, 0x0) close_range(r0, r4, 0x0) 10.696644477s ago: executing program 0 (id=199): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) 10.620095217s ago: executing program 0 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/202, 0xca, 0x0, &(0x7f00000003c0)=""/202, 0xca}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x8000) close_range(r2, 0xffffffffffffffff, 0x200000000000000) open(&(0x7f0000000100)='./file0\x00', 0x82c00, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x401, 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e00000000005441f56d1ea7eadbb59d8ca3da6047f5e45f32b743c01785fe8524b78953a3bf1cab3145e8d8f52314c93f4320612153911b410802f9155b0ef4f95f2d0a13361e22bd41c83d08adb9d14e0b4ab54f0d4e708861adfbfc61054d9c75b9ecafe64c96b93844da3b4e19ebcf558c0f31251c9c694be10a6481eba26c6a59abb7426f78efab658dda03fa51bb2a813327d1f0"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 10.521543398s ago: executing program 0 (id=201): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x2, 0x0, 0x200000}, 0x0, [0x9, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x661, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x703a, 0x6, 0xae4f, 0x8000000, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0xd5e4, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffb, 0x4, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x6, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x7fffffff]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x4, 0xffffffff, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) r3 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001100)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @local}], 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.401666889s ago: executing program 0 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4004, 0xfffffffd}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000003400)=0xe8) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000028c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_clone(0x8008200, &(0x7f0000002a80)="26211859f89772474d61aed353d70db400445301d7a33ef03c7759b99123256084f6922c4d7b216f348dc79f9cb36d", 0x2f, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="e14c0049bf") (async) syz_clone(0x8008200, &(0x7f0000002a80)="26211859f89772474d61aed353d70db400445301d7a33ef03c7759b99123256084f6922c4d7b216f348dc79f9cb36d", 0x2f, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="e14c0049bf") bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x828d6eca80b854a8, 0x16, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x1}]}, &(0x7f0000002c40)='GPL\x00', 0x7, 0x5b, &(0x7f0000002c80)=""/91, 0x41100, 0x4f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000002d00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002d40)={0x2, 0xc, 0x1, 0x7bcb0d84}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002d80)=[{0x3, 0x1, 0xd, 0x9}, {0x0, 0x1, 0xe, 0x5}, {0x4, 0x2, 0xc, 0x4}, {0x0, 0x3, 0x7, 0x7}, {0x3, 0x7fff, 0x6, 0x4}, {0x2, 0x2, 0x7, 0x1}], 0x10, 0x2}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000ffdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0600b4004706000000000000000000009fbe84b649602401c378a0f030e2e30e54f77531d12d18ebc4e23d4d02ab6a91281e26af4c7087fe3033e98282ac7eac69289565fa314b3b308f2c4067af4eae83e06f180f4418376bd907bbb12f7215ae489afae995ef372698db37e768"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socket$kcm(0x10, 0x400000002, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x5, 0x80000) (async) r6 = socket(0x400000000010, 0x5, 0x80000) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 9.450201524s ago: executing program 0 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) write(r0, &(0x7f0000000500)='file ne*/sctp/* +', 0x11) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r3, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac141402", 0x18) statx(r0, &(0x7f0000000240)='./debug/split_huge_pages\x00', 0x800, 0x7db, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)=@file={0x1, './debug\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="4b1d650b21c7ffa2913ba66244562e1a3ca10e6e03605276090cdc5e7c4f99c05c389d910d337ec355404206ac74e9c80fdbefb754d95c8aa39aa70279c39b86ef9f82fc90bf265753999d0f4741ae013adfb271996ed17318add06b90241977a1283c0873dcc77bd1949231c3e4a015787fb6", 0x73}, {&(0x7f0000000140)="256813d8f2e8e86bbe13b10f62f6b26d0d9b95661162724586baca3bcbbdbb6878d38695beaaf7cb49d6f052a1c585108404", 0x32}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r6, r7}}}], 0x20, 0x20000000}}], 0x1, 0x4064) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1,0x7f0000800000,0x7f0000a00000,0,-1', 0x24) 9.261580559s ago: executing program 0 (id=215): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 3.561770917s ago: executing program 3 (id=254): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84043, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000001280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x84, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000015c0)={r1, &(0x7f00000014c0)='/dev/nullb0\x00', 0x0, &(0x7f0000001500)={@align=0x1, {0x8, 0x0, 0x5, 0x3}}, 0x1ff, &(0x7f0000001540)={@_ha_fsid}, &(0x7f0000001580)=0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001640)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1b, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6264, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x0, '\x00', r4, @fallback=0x1e, r5, 0x8, &(0x7f0000001140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0xa, 0x7, 0x6}, 0x10, r6, r0, 0x4, &(0x7f0000001680)=[r7, r8, r9], &(0x7f00000016c0)=[{0x5, 0x2, 0x3, 0xc}, {0x4, 0x3, 0x8, 0x3}, {0x4, 0x2, 0x8, 0x9}, {0x3, 0x3, 0x3, 0x5}], 0x10, 0x5}, 0x94) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) r10 = dup(r1) read$FUSE(r10, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 3.381526645s ago: executing program 3 (id=255): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000001800)={&(0x7f00000013c0)={{@hyper, 0x1}, {@my=0x0, 0x10000}, 0x400, "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"}, 0x418, 0x2}) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000f0a000/0x1000)=nil, 0x1000, 0x11) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480054445348ef82e1ff24dd00000000690000100037240000800000ee16860000000000000090ef437d5ca48221bdb6cc175e934993b53f74ee03b22b0376a611d467449e154f629bc674382998a51dbf62902a3a5f1c44a967e4140c3d18ffc4f3bd649def41609fa8b90798e6d64e74d93b6123d3aba8fdeb74d9a932cfa94e05e7048b80f5881b", @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0200020000400000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20004011) 3.31879974s ago: executing program 3 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="040100000101010200000000000000000a0000043e001980"], 0x104}}, 0x44000880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)) (async) ioctl(r4, 0xc048aeca, &(0x7f0000000200)) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 3.202123896s ago: executing program 3 (id=257): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) close(0x3) write$dsp(r1, &(0x7f0000000280)='5', 0x1) close(r1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801") open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) 2.570796188s ago: executing program 3 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x149b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919b0000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000000), 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0x3}, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) 1.951586201s ago: executing program 3 (id=261): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00!E', 0x3}], 0x1, 0x7, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7f7ffffd}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="670000004a008102e00f3620a08a5bdb80ecdb4cb9020a", 0x17}, {&(0x7f0000000540)="0c74fe1863473bbce6798a95f1", 0xfee0}], 0x2, 0x0, 0x0, 0x10}, 0x11) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00', 0x800}}, 0x406, 0xd, 0x2, 0x8005, 0x0, 0xa, 0x6d}, &(0x7f0000000340)=0x9c) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000500)={0x0, 0x0, 0x1000}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x8, 0x2}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r3, 0xee, "36cb5a8264dbdf405807fdd8b1bc97bc8b1c8429d1d94c234b9c67f0bbb273c2bded268b613059a871aecd902414c8cf12af83cbdc213c4c7a6edd1b0f84ee0500f071901d961f1b19fa45a64188a6ab6dbb085b4ff632aeee5909e29354550c9f0742395384f05d50a2a1ad2822e6b237eee5f849dc1fb85522d6f3b00b2d9bccfac750a815b966549268b59caf655aafaed13d6d1913521df12d404adfd9d46a0e2ecff5de74d56522482694fece35d7bd9086e0acd376dbeb858fb9b680f5ae0261f905f4bf09af4155d6dcd2760805becb740e22026b822b14a63e6ce6b9c5760533e2190230d05b9eb45ad1"}, &(0x7f00000006c0)=0xf6) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="31032abd7000fbc8df210b00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010000a0000900002100000001220000090581030000000b158a6a722d350000084c74875a285f1631e4a9997a8e9b26d70867ac779b3a07e8f13020f59404986d15e63bc3f53372c229a21d4b83a4f1e5c6550699796afa6a309cd4a6a54ad54d79fc17a290ca8b34991b9273128e587f17c2479ecf1535a8bcf63c102b68192674ef18ed82a5cd29c95e08f2d2360ce20ef7f4e240a5ad435f21ad425f941c1d719b54"], 0x0) unshare(0x68040200) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbff251b42a0900324ef113a000000380019009405c5c48dd97cc0f117db06219ba657a2f66ceca81d19a8fb895ca74fde1776939d1a5333eaf0325b1cb790c04f402265f31be505001908000100b55ff526feb2ebd3c7b8dbbf5f44a934a990553fe52372ae009252c9fc72ab23c185ce8c7f7ed9f8c2fdd5eac6a498dd05644474f1a65795", @ANYRES32=r12, @ANYBLOB="1cdeec1bf8d5520cdbc9daa503841d46be1926e9d7e2a4a075a2d789cfb06cb4ddde9636d59a6fb80c97d67d683265f1d83187d5799e29f7faa2ab2b3d6f9dfd9dc06ab69f2dcc39a4907b55b40d62ad418663235a337decde51566613a5ef26240f59772e2642ed2b60a440ebb9f989f5b593f02376a72bb82f631318406e3568838ab023692996b5e9f39f80fd2dea3cb024ee"], 0x64}, 0x1, 0x0, 0x0, 0x240400dc}, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') 471.651774ms ago: executing program 1 (id=266): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 471.261825ms ago: executing program 1 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xd6) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000280)={0x1a0001, 0x0, {[0x0, 0x4, 0x5, 0x4, 0x10001, 0x3c9, 0x9, 0x1f98]}}) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000040)={[0x4000, 0xa000, 0x26000, 0xc000], 0x5, 0x54, 0xfffff7ffffffff80}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}]}}]}, 0x44}}, 0x4000010) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x47, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{}, {@dyn}]}) chdir(&(0x7f0000000040)='./cgroup\x00') 199.327981ms ago: executing program 1 (id=268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x5776ef5bd15c8f53, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x401, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x6, 0xb, 0x5, 0x4005, 0x8, 0x0, 0x5, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) 71.552997ms ago: executing program 1 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 344.178µs ago: executing program 1 (id=270): read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000006100)='./file0\x00', &(0x7f0000006140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000061c0)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008280)={0x0, 0x0, 0x0}, &(0x7f00000082c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000008300)='./file0\x00', &(0x7f0000008340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000083c0)={0x0, 0x0, 0x0}, &(0x7f0000008400)=0xc) (rerun: 32) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000008440)={{}, {0x1, 0x5}, [{0x2, 0x4, r0}, {0x2, 0x2, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x4, 0xee00}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x5, r6}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r11}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x6, r13}], {0x10, 0x6}, {0x20, 0x1}}, 0x8c, 0x1) (async, rerun: 32) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008500), 0x2, 0x0) (rerun: 32) lstat(&(0x7f000000a8c0)='./file0\x00', &(0x7f000000a900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f000000ab40)='./file0\x00', &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) lstat(&(0x7f000000ac00)='./file0/file0\x00', &(0x7f000000ac40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f000000aec0)=0x0) r19 = getuid() syz_fuse_handle_req(r14, &(0x7f0000008540)="cf20812d278b3cb3e9842877a1b6fecdd52d9fece68ed70bc7ab5cff7078621996f29e65ffc35f4e13c9fef00f392162e37994fb2b9f9631811f37f944b7266570a30f388fcd944210b00da9fdd6c5e63be2622739e875c65eb1478f1984245352dada8b70804faaa1a6d79eed8862ce5a6fd891d409d778d0e4345da7cbfaa1023370020fc19828288727866088429c5770d2df5c05213a88f0fa049170008f754d19db7b77815cd201c052f4420b2b759af6cdc924f61c0898cb7028f1b49c88bbace931b903bc018b64b2e2a774581da59aca12868ffaeee60022758e80f92be9c7069a8c88692e0b4bec931b6e3e673a0663c0104354ac61e0c0fab4bd9cf4c1e0591accb78f35f39fec34930e267d29c789e1dc803cd5a8d6ee1f4f036313f0448ae2f893ed6e68269179b8d5f05ebda903efd0924d7bc8bc64bdaec0d6d055c24e456d7caee8118ae7ce57686c7463c741ac1c7b765ba7322f9d7b9e09d3d74e764f81bf2a678d9cf6af2345ba46aba849270e069cda30766937dc6b9ae395cc2988cee544f32784d126ca6a89fc37f3f9a409887c257cf7ead1d34ce8d25c8f0ec06ac54845f15cffb4cfe6c1ce09893f1a0b7059602acc6087e22e27b5c8bb9850e3ed7070415515100254d8318892500b6b0a6e3a3fb11a5ded29308698b4a2fdbaf21865cd1cdc23345e40b7c8939105bd1d545178b24751c8dde8a8f759d3921197205dfbd629de4f6cfa540fd4c201136396aeec46bbd52868c1570971594c44135eee2e3cf3c1f7a44612f30583b654211791387fae6d2417332711054c2d518e30002edbe51bd165288902acc73cccd93d243b70f8674205378df591eecde9cf65fa831ed4e59b49733673c43504268c86d5c48d0d6f123cdcade510a80d865d1965d82085a2593f4f137790f7c81eff66632a20c9894d2fda2c0b7083c6384c992c3225f5c097b988cb3483c9f6353023f98c817683d922399ca995f9c069b612ff37c9b9e9e9b089968d5a90a1285bbd55a49efce00ba4560ba28aa212a49332f561c511a29f8a81a1587810a81ef47a095fd2ae4c24c4d48ed0a30e098719f05512caa6895cf353829fc523f7882ea0b9296bfe1a92ebf5b601f9057b04cf6521129f286349808667f1d483e0dc3f0145ee51b18142f0d030dafaa0103ebe5022dd2512c9db637e6e2e75c65d70a63b91e0efd699d86d59ea695bc693f35b0f31c328a58b76688261557f72ca4e25a50dd0723d24e9ff5d637bfda62e9814faeefc5507c645039a9956e800799fd4d8e2213cdd34622f0fa5d6c5d66544cde877ee12ef20f1baa33ef44d1d9f42aea8405f62c2705ea08d601aaad34ab66098b196833099c99469e445f2bd08c605904275a001955483931f63b7e25e866d4fe4d976c5c74b94a08eff9b2eac9a20b9aeed4c97e4ef885cdd3167387a6d663a6b665f877d32e592dd170fbd1979e07a1b22725188b884a81c3e371606e4f99fe20f3e7c016f6a1d7d4952047085730aa4d22dfc168c7a071f1b93d13ed2f4a4cf61cb74e6e082a798c36c005d2e9310c9d52476daa6c30b76c70107d8f5910336670acd2506d3c269be2c5cd9f7890afc777ffdcdf438c08cd2afcbb7deac14d44ac33434c930125069ffb3fb50afa6336eaac22bdd782aab9fa3155107cfd507be0658ae998bb812519d02a33f82f123e8e77a3126294899cfe21a066fa8a92c5e33485ebad1d700244faffad73c365c3fa3f242d5a5414ef4edff4465e06a6962fb425ad5a4970aaf5b80015eecd07a04a2ff13f725c1acfe826267f9334decd4e20c2e9e77549160fa5e6eab9060c7ecdce260a06c813c7311cf27d08ce0b1e4db5b3b38411b3676ced83e62a24f44810b1f87a5c576bf07eb64a904b8686c6ae4cf9ba00d1c60972c3bef324cfd04a1101798aab410773cd17587771ee822947badd3cefa45aa3bebf99007954b2ca166246011fb89c362c4a761a95cab1d9ba0e2474e7b9fb160568fa7f6e0f20325fc4576259960ed4a090ff2b9a0d2835880749d8e5ce75821650086f74261b6f694a0311cf275226d1831f5fe4fb4b54c8d73f09aa88a9e1942ad682b15b5799e9c57325e173552fdca7d480ed12b32b146693746703f9836f4679f183dc28ca53f2fa58ae4496dd086c0c5ce4664bf8cf3c3f0cd9b64b5f91c21a416a173ac4e97536bcf2bd76e3c344514ce4341f64a1d76acf40950c72e3019962c60cf5651e571b0becb607eed592c5fabb18629ba46d36a1c4554755b3698fecabd6756b801c8bf24fdeb4dc7cfa7a8566db86363298d4a7e3d922887faebef68f1390a95e5046658771684e252f1de8aa6775a6b1e6794ca2f79d21566352dd4b4017d4a97b76fc2569aba453294629c9baf54ce99e325f8cc3224594a673d85ca6aa7a7cf5b1b619ad2af59293df517fb79c8c0c3baa604de5b344ecaf2297f084b2c34495b68285b355d4de5fa8b153fe9003dd2d1206270679f51b1c6cdf8b40599dd747247b0701cdf3c4c466f6fee448193feeec83142f69b0bd2290047c06a4da70625e91a153434981422914dbfcdd2e096f50d3da62bfbbeeb2e1c5004a0819a3d604c52365744b52e747f7697c932519440465456d610da6d5a8a4c7c2b8bccb959ca90ddf253f7bd9d923217a93b39c5306736788e4b48263d5239b734a540468a2eb6007905395721bb7b48a21de6f1213da873ad8c52bb905380d9eaf8668aa50d5a41ef81be7a103ae53d206b611a33587ddeb731e78122c7af999f5164e5328eda09436ef5ced2de5b6eecfe2355a32915a7450e9a52b9448b62281b2fe524cca28da1bdf9f62c9b862a25e7cc1791aae3c70c96b3dd8cf06c08420efd8349f6bac35eb2a861a37f6eca385e19511101a398c83d443dd33db2d0a43b15332f0abba66564b33cc82850fc75b6db1af7c092a4b34e76457c4da603396c6e37c8542473f928c63c343ded7b3752c70375a6bc92cf8e391ccd8dbc39236f71803aca2b9ec3a6979b3229d1b13cb87f8faa2765f493eb6f1962b433a5c3f8d28c31ff920de7ca7f8d3a0c967bad7ec3b6f27e3706c7a83653ed4e1c4b9ef40357a1e00809f29ae67f1a3c040702a43f39f5c152aeb64ab75779daf74d94d96d2ad95756682c7f018e2a783468fc037bf230b0cb6c31ca69e1be3acf957981e427bcfba02b2b27618b3044eb03bc93399679effb1b60b7242e23014f87a8707e848653017e8252c8483f298c1b5d10a7e0a842c2ece7b7fd0f9e294ad972e02d746c739b764721668233ea382b9965ffd0d934e917dbb32ea66648319b28aa0037821f1bc701013371d1928c8f03763f40582bc58c124bda8c0a2cf2f31414c6394a2616d8710bdb7f8c3c7c01bab66e60496b0d213ace79c19b7ae93bfee3bea479c43d9a292b0091aaaf730178a48ec89a6ea5be08a5b6aea98a1037fc47bc230245b58f4b7cd7abd264e5e67def89439ef636df1acc08400a66b93092ce5e9904859f4501ae0855e9abf1a188cd9e9d910fd0e5b475a53fe1642f680e3c490520e6b145726b218a9c3a8372b360720564646e4db87de3f1deb01dd5fb221ddea3d330eb9d1e323569093e70f3098ab1dd0431b8b069d4ea0fefc22b6dc1f6da6e834b065add86d0eefa9836d79535d09d821ae185e17420c7be4d6046c84b239d7cc18ad5d5aa5b42ec735683f4c191e166e7285eb5dfc0623d9acf9d00f9883613ee233fbbac7d0c78f72a512e66d83beebedf16b649aebd3e0d213dd0e99d6b04127286ed0b41eaeb765ef1d9fdb6650b69f1e8a0707cde51b2ac6de7dc571cbfe29ee7cee2eaeb97064789c44b31cabfd7841d8599a4388f9d0956ef70c30ec995f986b2673a6adb17f5e8115e08c0697a323071c86a091c51b59a5b5ad09c241db8b03402df4b78dfdde7d1f33c8458ed78eea9be0fd8b8852167b6b714e66d6e60e89efcfd2ee3b720793b5c13a0f682e6355475ab0f6156d34960346409336c5e38b1f8ff634457bf2fe8b4268b3af07dd1c4be440abe8f11b8bcbdf1cc3ead4509e66ca464b2c10af4805ec41299982142fa03cd5c92731bc7017948e4e3e46a7a26fd1fe9ee59f7df45e0a2cbf9ffd6da3dcb4ba75652690a7fa3d24bd66405007c397c99f669a6863ca1c3d1541ced26b594718a1b879e09f11080d580d36bf21c11420f6be0b623ad273482e14cf4e9c15bec17de8b1b5b4ffd9657e1984990f90525e1b49058c0c44fba2e1bebcfc7ff7302b4531616d8a7b6d7cdfe04a35d300272197d1ec9592924f43f42e3255e66e2ac6a5cafdb25a3f5f68239e739f5c5549073be9f0211f0fa560b1c4c882df0df0664e7144aeed8d460983f3b84953da95e560102dfa1e8fdc673da1820d3ddf1d96392ad65fc78eed50c3c8062e8f34e5b7e8d3043712bc122563a8b66c2ecd84b558188bd2c125f029842843540742f6cd79b02672551b3564d169c94d44f110d0eab1ac6b9d5204f2516005ab3610db9453f8c29ff404f405565b8e9e6759c003be656b06ed15f3e4093dff1c3d010d65efd720a93ca82f2e6bda83220d2dc737fa93a7eb61d365e4770058bb0963f67650e08dc49c227388416c0aeffd9a7c263eed5cd28aa62bbbf418d71bdd3415dee2bb207f0d65d1be337efed43ceade1c3cc2a8cb1358040b421e0caf44051ce4471a3389f70d5bfb559bd05be8e6a8c1f11c7f5f282b3081fa015d23a942a4ae17cdcfd5b4ce095c912726cf55da7b37ba8b79d3afbb89aea9093c854d6bd3c5142709436efb5722df9b56e0ca603271404af97f9293fa78fc49b7405bfe9062f0da102f98925fff91a29b989b51f3ece2e6e4bc75ab5bd89b974d445cc4e7451666b49af6efbab891594d11e72a51877d55145e5bd311b7f02aac1d0531a00b3fdf04b30cd9672d7d8b521ebc79e6c68d219390c0c1367d6ca2723581ef1c561d8a11ac397c001584746dfc87be1e6bdb778135bec94730fe91bc12b385541b8cd955c0ac96d340fdb2fb4275145cb7976c9bbf90056339bb7a2e2095410bc4da4824e39d96a02220016ca8b502c69accf8cff889d072da04ea34effc3b44c41b06988b9423ce2240a70ddd2ae97df9df792b5a41224ae93ceb6cf9df8d0c130997211c65ef0f7dccdb6f12f37822798001e95382ce537ab1532aa33603776e6b306c188f4804bc4dc4dc864e5c64eee435890dacee9bd3f349fbff733147640d00d0f33c5202997a2da47b236a5b107fecb67c29d4308e709787cc56dcd24a6a818c270a7df88560b696dada89e70823cba1d5d8fcf2eb55b0df5961a3476076a393e8abf63607d725efb72692b00717b9f5bf0e3e7e61858a1fa41d63527254ae07853ab2de9d8c7d20236c73990270f7d032d6a07adc7efccf2843728a3c8eb815d867bf33df044e9c3b4e5c78f668822396b7037b273278bc660cbb79277b5abd6c1afd68b4361fca227a685183a177e91321bfdfc23b27c2eb1130c850a50ff828c022d08e583bbf99d4bd9948e5a252347469fa418bc98ab318105c7993c39be060eec9b91691af1399eed5787aea8f9433bfd9fecdaaf885c8f2fa7caca40b4ddba63b3d0b1a1941c9fe78f1ff76e480bec5f0aba2b6b2e1d6f73f7f477930256770f70029d778423c894e228554012ecb04f6f4df17f6e2d97aecd7d243eb4a6828fc849df1597aab65902a476b60098407ded1af147a4c8c1de7d66dcc54ec9eb8f70fcac2abf6de7eeadfd768fc63585c7adec8389a25550c8ed8d185aaed0c4dcdf867d11b7b923a49075e1248d6a9ae3c908186742e2a6ab296808a3e6d12c7190faba07544142b17549f0c807c35623e6745f2228db7de83ee5d073895b9f500dd75266a37ff6de85fcd40bf883e236c9bf8765c44dae08273810a85ffcb249c2a42e8724fb5eeab296253bc15c0d3b8dea34b719b4edea2e08f036613b801e22a95cb78136f36ecc9f5d80e5c60169f78186813e8cec611728910834a7fbe33bd8701c9a66a0970cf8120dcc2e3cafbb853547abe55b3f7b952f16c8076cfb134c9abae454f3e69c11d6b418829040cffde99e0ccbbf2d99d3b285eac5b96a158ff439f9db6e72e57b314487ec0cf4777a7528f02c3b0b94551639006e150d1db856f1374bf4c04b2a4836b73ea0f3923b9472a7d2ed99acfbaf20af4dcdfa603c6714daac0ea61da5076393cab81389e99bb5492a7769d6bf2a681cb2f140fbae476158ef150e104d63d3a1f3634d17fca444ebdaa799a6707d3191747720270da94b1aaa153e6eb05b4a14cf3464bdea30f4e8efb2f0626742fbfc7132997feee7d7dfc03a0525468682687d387c41d4268a68944379791c9fe00ce7f40a4e7a3c7f1f896680ef724eb4507b479ffbf8701c4e1c6b67304831d014da1ad84024a026814ad2b2c7293e285a04050ce8edfb221773839bb067518a91d3e64310809e7dbaacb24e4c9141fb90d625c42440fa2356684f65665d0f349afffc7df614f1fa4cb8c11d34ea962826b0be845b0f37c51ecefac13e6f68fddd3acd683d71502b1d5e2bef3e22b2afb9efcaba1552830bdc9b8a8b0cfa6a562c7f59290f35135b22301924664d4ff19da17a9e2c7f37eab6a9b8039b28a811a466d042d4950d5bfd0e7f380f88950b9b2b5740283f75ec2dc0553fa67753411b4140c45e77f284362aa0273a52304abf5394190ede100fb25ca879ebf5ba0fdd08cd4554943ac90a5e73c9764e289864ef1ebdc9d6e001cdcd928eb9ff1badb002c509442a809417ad061efe5583f32c2216a7c275dcbada6f3401bab860a063db2227b644a57d590be2503b0ee83650933ddec59701dd0aa70dca77dd9a76a28cb9609c955c9589f7ff5b5d796adb62d7aeb7022b5c9ddfa7f83db364015f3093acd2d0f5ca1b1912b496d21424817f6d7a9c66260f5df7dc8bc5c2f0a89c757259e04a098b7ce74a0e70073d3ef1433973d0a3845e04875d3bae7a7c864f5fb3af985683716e35aa6a042de45e60504459627d6807b42eeaa82b34bea844596926b87c8f5450983b6672e4aedae60bd354caadfa2c3bafae9477e764bb4cfdb09390c8554069ffc86ab8c74ec95b034056e541f8d826a4b2f81939f480ba0cdb1045cb7321faabe30b013e14492f7ce56682f3741f6884ca9e6985415180645fbb9696a94cbb7a15755947413ac81d9c5864fbdccf0e119d855c6cdaeff41e449d8b59021620677128fc3dc591eaf1e92bb5590db1abb1f55f30a48f497eb67dafefdba351dde7b25abf66f18c5c63359f94c0cc18e18f9cad65fe249eb65566b18b1d04a3ca09aa2ad75703eb39739b367e20452de1e537b075cd1671d9f03fb66ae5957fabbd497a709810a5adff1d370aa78e488f3d2f6ca87396e13c9a1dad96d3ce94251359d9e74de66e623324243b0a009b30ec23c6726d4e04076565fc6400c1554f6bc9d2fac4365658ed774ec010ff40f713b7cb06e16f606dc2d3832a7a4f54d63423eb07a2cf001ce6641c3884405f4ebb0122b17891556570bda9c5fae6f8569324f2d8bbb58b10d3f979c975a7b9ff18238e604e025118d1ebe1adf836a5da6d8566fbaa957253e43d0267613903e4eef9ffe1fc587342ecb7f270dfd9a2c958b8135d85278376a0cc257264b75d2c4c1cb31477c791f037865d55d9654972ec71ece874e65bef4a924476221fe1ae721675a2b5f2798ec52dfcd3137ddab6d9e5920eee38f2d4b09ff6b89541325e52b5862dd4996fd640abef080072aa61a1f2c63fbd981761a915ba13bce32c8b019e1f9cd8f683e4d48d046e45957c837bfa93ceb0ab404840d9369fe85fc5ddaca7774c774b85b50b9d0fa543816e75a27dbcf9eb40d0b0b11b350092820482c1dd4e1fc64a1359850c1d99c8d991f78a2174066052786139c58857c02721a804279cd93d760188c16689411fb510b8c782dc55af185e545827d123a5d15c498d669ea0f02a4f7f2ef482cddb8234afc7f9fa3ef54688ef285339e6e4ff422694f621999fd7a8e7d65c62bb1cb073d842c175fb56b290ae8c90ea5932a9745b0f71cd59c263db7a34e81e9d78394048209a13b26747dc6b77f1e255e0c4288cac3815369e38b6a852608ed25be71e1a10ac74ed1f61f5d30ce03fafd4185339fe4f57c5635c4f6dc85aa0d81860ae35362c76779fc42ff67f0b0b25b3727762ba2c7061e421843187f6431c34680a822727170f5d1df884d343a7b7348b11aca50e262f8fcd7c6ace5fb208cf27a817dc9bc49c0534ad477ea948279963097d1b5194e1556559ddc73529881815768c71d622601093cfef000f2799415fac24709389bec50f852027dc524c73faa8916c786d416ff04735e44b2d060e3ad1efb0eaab72cf4babf9add11934ccdc55d54b86cfdd4f2be87ce14f25d862d5af8bfcd022c4fda7ca619a6e3de38fd783e2e0756d78ee35b6c0b7374f7fd77c1d2e42207b0f0ada8ac9226a61c22f838e8044bf969a5e21af577477d2f28ab9146b36c4c1ecb5b0512d59693618151d8a40abea37ccacbe4b99000cd0c3f7f90f204cabcf2b691852f5237bde1fa28e2950474d3a5f99d6f635d07eafd95d67c65d38ae55eba9cdf33930c34ba729deedb39e6c4ee3c8a72f258089726eecfbb3aab6fc379c92881881d483188ebc16e78578ae1f448c96ad9ab7fed512e7def32333e8239aac9549db8c0fb56a1bb0d54ea22c8c75fe95c0373b5cdce5cf777c696ebb98348c824acc4101e4f5df9f325c1124f00bc547ade4be3529d95bee8559fde7600d5451b3a9e36b91458d738d760ed826d1dc5bfb23896c92e2b5eb2111487f165da33db4e5b439042b020b2be5273c5e715593cab21d5b5145c171a9227765593572070985b3d733efa2fd91562cacbf189e455fdebd44c268c18a7999b27944fa2f883980811eaa49fc37422fba5f5e36734683cae606d1bfe4ca1ad5895c83d9974f7f48955f500bc07c82d70aac9b744c9fa0ff196f7320c07d18eb02f631b2401714f78021618bcf9a31e9d72c73d760c27f988ce0a8cb003478a1b2e810046611c73490fb1a0a7af2601a4a4af880b7a51a1d1f34c6e9f62c5c7b5dc85c1b427b008f96ed65ac0c778e590533579d6839c9c8768a297d59e91c4dada50646701f25741ae7be41efd27af630204870a02340b4b90a04d3a43a98fe099897ebe1627b22ffdbb805dd5d7c8e8ab6c0854dea729930e1401365d4fbdccfd3af2ebc018c788337901e221747f4a94743a8605b84ead5d9b096c452888d274f71bdbf69a6f94dfa28513f456c590f1ff1322fe548f0b7d19d81c51a65844f366f6911fd10a63448c80042724b5e951ff7e2fa47a7f4c06851dbc4d4e7b99bcb9951249eccfa684f88893e4abdc4d639c2de718cb0140451e45884debb7d95a658ddefb3b7a2146bff4b5a2984bfeeec47a9db5c4698b33fd47772414f98c89f36a14eaade4ae16bdcf0c8e3dffbe7acac24c271a18018095c52a7bf2145553dd0ea2681ba9e4c8e18e693406f95fccdea92dc1eb9dd73f0faa620e2f5aedf54baf406eaffcdc36f741f8379893a2a950d9681a299b77fdcc0877d59c7eb4922ea4c0898b7b49b15d620b398300c00c0df747669e54aaead10eb0ca77144dc0a5497f914046755671e3d0a52c897664d204e18bb8d2f66e0dddd3d6156b5d8257d9570e4cbfc29bcfca08df1ff8dc1ada7c4fcdcaf2d01868e8a72ec95c3c4ee5569ea03cc5acbf457f4d8562b14665be43896837d8a3f2bb74a13b7e4703d1b34f166aa0c3232ae9ae090c70e75ddf4dccb23737d9ea8e62ae31574ff0e1b72c5dff85aa5dcf7044a95f3f418594564138240eeaaf7ba548b9c6de0cfe1f1195eec3cd76921a27a942becd9a9f871c81431aca51a477ff45a191a0be2217d0cd250a4a35249d88dfa749881fd3ff9d7d5729920071f028a586a4bdff5e70386b14f1181312fa5e488cdff0cb2cc1fa1bf5385d1612d3fc493300ad0e6deb2060650939bde00326def00be879ea264247af4bb3ac8be725a3ac378a250d22ffe3902b094de8c0b1ee6ba3abaefe06b98abcb7fe27efcde69d0617488cdcf6070db63c58854336591a4b0a2b9e13e0a0796b5c46eeea2337b8a1b4661e45263d718a3a13c7dca85677df78f8010f4902f4d63d7ae9ac403d02f60fbf54c5dab4c5deec83419b2e771e66d5661d3942d1255c026a04e664449df0f69dbaeb425dfb538210de9134742decae72ba4a61bb4f7cf78edeb6d7286d3190aa7573f9ecaa604e464472eb27e3fb4429fcbd00ec5b5adadeb3c0689ad056db5e819c5df2f79231d776be88ade7a204e2bdbdc93afab73c1b2024a380136308c2051080aef8ce6d44070adbb57aa27707965e2ac9c99e26e4d7952f02c130fe3b3357ef61f1881dfba088c2de77abd3d01dd7a683c94baa4494c5d69cba6631402a6390255e5b36337971911b58983faa594ce8f40e451cdabd303e0767db15813fdbd485e9e90cac9d6440952b9956e0ff84aa08426315f2e6ce3ab6244ba59e635e91a0dc4bd48a3abc380ff70bd51fa820d0b521159ca78621b3875fb5859eb259882827c3fc4f3fa1a5a9c3db86595ef140f09174bbb9e97283eff8cf281cc9be2c14fa65e79851f1e1b0d6763e1191d34337b96c9786103f015dd62552941ade642d4a4ae0853c7330ad342f962ce415f2af3b2ba12c76f253d167be8011e0cccf6f19ce74a2ad4a4c4cd2d230a3619c3d11e20388bee87efa21670c433529be3ef7eed3e86c09651e0eba0ac90e0f32e56cb91b1a2e6d90a168652c69d32e8e001198ca53cd679f142f198a670c7cfc5dbc2a86a85c464d6dda5e59354e08347d5969078edacab0570cf763b38f7b562e1c3535aca9388489e44153137bee12849da86d6c63dbb7702911d7f7548c6a081c6d844a0c69f892d5161e5451fcae37ee7b6d7e21fabc7addd269e123a2a2f9f183841adb2952e96e4b8831949e852ec28adb98839691c8fbcf71c7292c12b110fb37e0c144922ef4b6d62582d77c98190695ffd9213ea61fb4ab9b7fcd5daf99894cb4e56b90c7ce9e2acd41082673ee02bd3c7fbdab7681be06214a6c42881eec115d43697472b97e638cb6175b78d7722049dd31d3a6ee2cab363fe23aaa8a52b9a29c2c720fee5585694aaa6d35ecfefae290dcf64e991a7a0f1780e7c90ad8d4e583e20b2f3792225c6c1cfd9b567a87daaf572202e87cc560db9c32fe36f79fec667fe9c3183de59ef6e76ac81f9443215d21fb62f1901523315394964dd952a20129b2443a9f532811b82c9f666793c7b38dfb13eb7d45c8adaed592363398482b5228c3d2b8e7fb10ff7738e3ea9030b83f69f804f792692129488d6125a0ce8f51c157fd4775002a87bdb39d6ccfb21b7d7ca226008bf5ddb3b821b93ea34d75fad4c5f5d54a4a5dd94585d76d759be497113a8baa14741c3259271562ce7725e2419b6f50e622faf888677274c3b9af455b35492fac751e996a83323409a66a0c33218d138f3f511e4667f4d", 0x2000, &(0x7f000000b140)={&(0x7f000000a540)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x5d, 0x2000000, 0x4, 0x5, 0x3, 0x8, 0x0, 0x0, 0x4, 0x3}}, &(0x7f000000a5c0)={0x18, 0x216f3332c945a8eb, 0x0, {0xd}}, &(0x7f000000a600)={0x18, 0x0, 0x100000001, {0x9}}, &(0x7f000000a640)={0x18, 0x0, 0x7, {0x7}}, &(0x7f000000a680)={0x18, 0x0, 0x4, {0xfff}}, &(0x7f000000a6c0)={0x28, 0x0, 0x80000000, {{0x5, 0x2, 0x1, r12}}}, &(0x7f000000a700)={0x60, 0x0, 0xace1, {{0x5, 0x9, 0x5, 0xc, 0x9, 0x49d, 0x2, 0x956}}}, &(0x7f000000a780)={0x18, 0x0, 0x9, {0x1}}, &(0x7f000000a7c0)={0x28, 0x0, 0x3, {'system.posix_acl_access\x00'}}, &(0x7f000000a800)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x14}}, &(0x7f000000a840)={0x78, 0x0, 0x9, {0x4, 0xe, 0x0, {0x2, 0x5, 0x1d6ddd17, 0x6, 0x4, 0x8000000000000000, 0x8, 0x503, 0xfffffffb, 0x4000, 0xb04, r3, r10, 0xfffffc01, 0x2}}}, &(0x7f000000a980)={0x90, 0x0, 0x8, {0x0, 0x2, 0x8000, 0x1, 0x9, 0x7, {0x2, 0x80000001, 0x80, 0x0, 0x1800000000000, 0x206, 0x2, 0x5, 0x9, 0x6000, 0x5b, r0, r15, 0x2, 0xd80a13ef}}}, &(0x7f000000aa40)={0xe0, 0x0, 0x6, [{0x6, 0x8, 0x18, 0x9, 'system.posix_acl_access\x00'}, {0x5, 0x2, 0x18, 0xe, 'system.posix_acl_access\x00'}, {0x4, 0x1, 0x18, 0xfffffff8, 'system.posix_acl_access\x00'}, {0x5, 0x6, 0x1, 0x200, '\xaf'}, {0x2, 0x7, 0x2, 0x8, '#}'}]}, &(0x7f000000acc0)={0x1f8, 0x0, 0x3, [{{0x3, 0x3, 0x3, 0x23, 0x0, 0x4, {0x0, 0x54f7, 0x502d, 0x2a800000000000, 0x3, 0x1, 0x34, 0x7ff, 0xffff, 0xc000, 0x40, r4, r16, 0x600d, 0x2}}, {0x0, 0xffc6, 0x18, 0x1, 'system.posix_acl_access\x00'}}, {{0x3, 0x2, 0x856, 0x4, 0x2000000, 0x8001, {0x1, 0x5, 0x806, 0x7, 0x2, 0x1000, 0x1ff, 0x7, 0x6, 0x2000, 0x1, r17, r10, 0x10c1581c}}, {0x1, 0x6e, 0x1, 0x9, '@'}}, {{0x5, 0x1, 0x9, 0x4, 0x8, 0x101, {0x1, 0x80000000, 0x6, 0xffff, 0xf0, 0xb6, 0x401, 0x5, 0x7f, 0xa000, 0x7, r0, r11, 0xfffffffe, 0x8}}, {0x2, 0xfffffffffffffffb}}]}, &(0x7f000000af00)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x6, 0x7, 0x6, 0x800, {0x0, 0x9, 0x8, 0x1cd5, 0x7, 0x4, 0x1, 0x9, 0x8000, 0xa000, 0x200, r18, r1, 0x8, 0x5}}, {0x0, 0x14}}}, &(0x7f000000afc0)={0x20, 0xfffffffffffffffe, 0x2, {0x200, 0x4, 0x5, 0x200}}, &(0x7f000000b000)={0x130, 0x0, 0xffffffffffffffff, {0x3, 0x3, 0x0, '\x00', {0x10000, 0x0, 0x81, 0x80000000, r19, r1, 0x2000, '\x00', 0x0, 0x5, 0x4, 0x2, {0xffffffffffffffff, 0x9}, {0x9a, 0x401}, {0x2, 0xfffffff9}, {0x2, 0x1}, 0x2, 0x193, 0xc, 0x40}}}}) (async) write$binfmt_elf64(r7, &(0x7f000000b200)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x2, 0x7f, 0x80000001, 0x2, 0x3e, 0x1, 0x357, 0x40, 0x2c5, 0x6, 0xf4, 0x38, 0x1, 0x4, 0x6, 0xd19}, [{0x6, 0x1, 0x7, 0xfff, 0xf, 0x9, 0xe, 0x2}], "33dfce332a80513cdecaf1c38a824131e806c7d1e9251f26a6e7a8b251a1d133eeb76d711bb09282aa314a2e9a7e16cee900723032b740dac9665b6fb314a29969cd6e12956f5677a8ad54aedb48e38590ef36e1e5c7ea26360716b406a9d0385cdf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8da) (async) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f000000bb00)={0xfffffffffffffff9, 0x5, 0x1000, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f000000bb40)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x4b54, &(0x7f000000bb80)={0x0, 0xc5cb, 0x8000, 0x2, 0x3b3, 0x0, r20}, &(0x7f000000bc00), &(0x7f000000bc40), &(0x7f000000bc80)) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r20, 0x12, 0x2, &(0x7f000000bcc0)=""/47, &(0x7f000000bd00)=0x2f) (async) openat$ppp(0xffffffffffffff9c, &(0x7f000000bd40), 0x20000, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f000000bd80)='./file0/file0\x00', &(0x7f000000bdc0), 0x20a022, &(0x7f000000be00)={{'fd', 0x3d, r20}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$6'}}, {@measure}, {@seclabel}]}}) (async, rerun: 64) mq_open(&(0x7f000000bf00)='@', 0x40, 0x12, &(0x7f000000bf40)={0xfffffffffffffffa, 0x8001, 0x4, 0xc24d}) setxattr$security_ima(&(0x7f000000bf80)='./file0/file0\x00', &(0x7f000000bfc0), &(0x7f000000c000)=@ng={0x4, 0x1, "5832fa491fde68a7"}, 0xa, 0x3) (async, rerun: 32) r21 = syz_open_dev$char_usb(0xc, 0xb4, 0xb) (rerun: 32) statx(r7, &(0x7f000000c040)='./file0\x00', 0x400, 0x404, &(0x7f000000c080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r21, 0xffffffff00001200, r22, &(0x7f000000c180)) 0s ago: executing program 1 (id=271): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x56a, 0x3f, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000a17"], 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e729648dca16105984d005e6310e0d3e010000a5cb51f5fc63add50200000600000008000100fbf540688ee2400b8669837e2dd9f292e1dddfbd06b8c633fa7f2c17cec0411e0c67c6650c79e6b34ad9ab8f3e88198ad569da5661149d5ab13adb39", @ANYRES32=0x0, @ANYBLOB="080003000100000008000e0020000000"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): [ 71.239850][ T3266] cfg80211: failed to load regulatory.db [ 374.592613][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 374.592628][ T43] audit: type=1400 audit(1790359834.947:138): avc: denied { write } for pid=5764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.630367][ T43] audit: type=1400 audit(1790359834.987:139): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:17520' (ED25519) to the list of known hosts. [ 397.610017][ T43] audit: type=1400 audit(1790359857.967:140): avc: denied { name_bind } for pid=5775 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 397.654268][ T43] audit: type=1400 audit(1790359858.007:141): avc: denied { execute } for pid=5776 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 397.655083][ T43] audit: type=1400 audit(1790359858.007:142): avc: denied { execute_no_trans } for pid=5776 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 400.224928][ T43] audit: type=1400 audit(1790359860.577:143): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 400.226606][ T43] audit: type=1400 audit(1790359860.577:144): avc: denied { mount } for pid=5776 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.230144][ T5776] cgroup: Unknown subsys name 'net' [ 400.231513][ T43] audit: type=1400 audit(1790359860.587:145): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.382346][ T5776] cgroup: Unknown subsys name 'cpuset' [ 400.386729][ T5776] cgroup: Unknown subsys name 'rlimit' [ 400.518969][ T43] audit: type=1400 audit(1790359860.877:146): avc: denied { setattr } for pid=5776 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.519663][ T43] audit: type=1400 audit(1790359860.877:147): avc: denied { create } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.520050][ T43] audit: type=1400 audit(1790359860.877:148): avc: denied { write } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.520321][ T43] audit: type=1400 audit(1790359860.877:149): avc: denied { read } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.586499][ T5780] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 401.453398][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 405.445488][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 405.445501][ T43] audit: type=1400 audit(1790359865.797:160): avc: denied { execmem } for pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 405.668941][ T43] audit: type=1400 audit(1790359866.027:161): avc: denied { create } for pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.669066][ T43] audit: type=1400 audit(1790359866.027:162): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.669512][ T43] audit: type=1400 audit(1790359866.027:163): avc: denied { read write } for pid=5792 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 405.669551][ T43] audit: type=1400 audit(1790359866.027:164): avc: denied { read write } for pid=5791 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 405.670123][ T43] audit: type=1400 audit(1790359866.027:165): avc: denied { open } for pid=5792 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 405.670158][ T43] audit: type=1400 audit(1790359866.027:166): avc: denied { open } for pid=5791 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 405.683077][ T43] audit: type=1400 audit(1790359866.037:167): avc: denied { ioctl } for pid=5793 comm="syz-executor" path="socket:[1943]" dev="sockfs" ino=1943 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.710910][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.713004][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.715535][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.716630][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.718701][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.719332][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.719911][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.720907][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.721965][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.723908][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.724441][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.725593][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.728652][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.728827][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.731917][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.731959][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.733240][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.734079][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.734170][ T43] audit: type=1400 audit(1790359866.087:168): avc: denied { read } for pid=5793 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 405.734214][ T43] audit: type=1400 audit(1790359866.087:169): avc: denied { open } for pid=5793 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 405.735836][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.737270][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.580088][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.581083][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.581198][ T5792] bridge_slave_0: entered allmulticast mode [ 406.582875][ T5792] bridge_slave_0: entered promiscuous mode [ 406.620852][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.620931][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.621243][ T5792] bridge_slave_1: entered allmulticast mode [ 406.622665][ T5792] bridge_slave_1: entered promiscuous mode [ 406.649106][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.649391][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.649499][ T5791] bridge_slave_0: entered allmulticast mode [ 406.651096][ T5791] bridge_slave_0: entered promiscuous mode [ 406.674743][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.674821][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.674923][ T5791] bridge_slave_1: entered allmulticast mode [ 406.675977][ T5791] bridge_slave_1: entered promiscuous mode [ 406.689664][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.729520][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.796303][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.796389][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.796475][ T5794] bridge_slave_0: entered allmulticast mode [ 406.798178][ T5794] bridge_slave_0: entered promiscuous mode [ 406.805147][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.808609][ T5792] team0: Port device team_slave_0 added [ 406.810308][ T5792] team0: Port device team_slave_1 added [ 406.810512][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.810587][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.811167][ T5793] bridge_slave_0: entered allmulticast mode [ 406.812442][ T5793] bridge_slave_0: entered promiscuous mode [ 406.813827][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.813868][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.813933][ T5793] bridge_slave_1: entered allmulticast mode [ 406.814665][ T5793] bridge_slave_1: entered promiscuous mode [ 406.816362][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.816442][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.816534][ T5794] bridge_slave_1: entered allmulticast mode [ 406.818017][ T5794] bridge_slave_1: entered promiscuous mode [ 406.831246][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.875969][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.898124][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.898142][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.898166][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.915221][ T5791] team0: Port device team_slave_0 added [ 406.919313][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.921536][ T5791] team0: Port device team_slave_1 added [ 406.922190][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.922202][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.922284][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.935995][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.972232][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.985128][ T5794] team0: Port device team_slave_0 added [ 406.985876][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.985891][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.985913][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.988772][ T5794] team0: Port device team_slave_1 added [ 407.011728][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.011743][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.011763][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.013207][ T5793] team0: Port device team_slave_0 added [ 407.052714][ T5793] team0: Port device team_slave_1 added [ 407.059916][ T5792] hsr_slave_0: entered promiscuous mode [ 407.060727][ T5792] hsr_slave_1: entered promiscuous mode [ 407.074603][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.074619][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.074640][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.100185][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.100202][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.100223][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.131619][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.131635][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.131656][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.139280][ T5791] hsr_slave_0: entered promiscuous mode [ 407.140103][ T5791] hsr_slave_1: entered promiscuous mode [ 407.140695][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 407.140777][ T5791] Cannot create hsr debugfs directory [ 407.155045][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.155062][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.155082][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.224412][ T5794] hsr_slave_0: entered promiscuous mode [ 407.225237][ T5794] hsr_slave_1: entered promiscuous mode [ 407.225856][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 407.225874][ T5794] Cannot create hsr debugfs directory [ 407.277698][ T5793] hsr_slave_0: entered promiscuous mode [ 407.278481][ T5793] hsr_slave_1: entered promiscuous mode [ 407.279030][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 407.279048][ T5793] Cannot create hsr debugfs directory [ 407.605632][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.617335][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.618128][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.622477][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.625412][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.631443][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.632218][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.638095][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.682095][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.684791][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.690488][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.694875][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.695380][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.698873][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.711481][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.714612][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.777989][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.781215][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.783309][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.786344][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.799070][ T5808] Bluetooth: hci3: command tx timeout [ 407.799077][ T5798] Bluetooth: hci0: command tx timeout [ 407.799196][ T5082] Bluetooth: hci1: command tx timeout [ 407.799938][ T5808] Bluetooth: hci2: command tx timeout [ 407.801359][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.805554][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.808021][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.814363][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.848078][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.894858][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.898782][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.899438][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.904257][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.905740][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.909351][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.923312][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.923504][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.925875][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.954761][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.954917][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.973697][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.974297][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.997070][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.041731][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.058059][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.058147][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.064443][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.072942][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.073015][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.093038][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.110221][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.112576][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.112657][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.134025][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.134133][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.154151][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.178744][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.178833][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.192498][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.192582][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.241263][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.421010][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.461834][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.462870][ T5792] veth0_vlan: entered promiscuous mode [ 408.472095][ T5792] veth1_vlan: entered promiscuous mode [ 408.506409][ T5792] veth0_macvtap: entered promiscuous mode [ 408.519518][ T5791] veth0_vlan: entered promiscuous mode [ 408.521009][ T5792] veth1_macvtap: entered promiscuous mode [ 408.534842][ T5791] veth1_vlan: entered promiscuous mode [ 408.546643][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.565108][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.566737][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.585284][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.627675][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.628432][ T5791] veth0_macvtap: entered promiscuous mode [ 408.632687][ T5791] veth1_macvtap: entered promiscuous mode [ 408.714052][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.714072][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.717976][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.720120][ T5793] veth0_vlan: entered promiscuous mode [ 408.733725][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.735684][ T5794] veth0_vlan: entered promiscuous mode [ 408.751814][ T5793] veth1_vlan: entered promiscuous mode [ 408.762603][ T5794] veth1_vlan: entered promiscuous mode [ 408.766441][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.766454][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.843887][ T5793] veth0_macvtap: entered promiscuous mode [ 408.858444][ T5792] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 408.859322][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.859340][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.864298][ T5793] veth1_macvtap: entered promiscuous mode [ 408.890108][ T5794] veth0_macvtap: entered promiscuous mode [ 408.901081][ T5794] veth1_macvtap: entered promiscuous mode [ 408.909856][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.909875][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.923204][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.927271][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.936143][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.944264][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.944328][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.944367][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.944398][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.949007][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.057224][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.057515][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.057585][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.057853][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.058067][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.059007][ T5819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.059023][ T5819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.071680][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.071698][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.120396][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.120413][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.136024][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.136038][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.157580][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.157898][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.158102][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.158287][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.158384][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.178856][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.319721][ T5969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.327117][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 409.349925][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.467967][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 409.477765][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 409.479115][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.479152][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 409.479165][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 409.479183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.563980][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13'. [ 409.563996][ T5988] openvswitch: netlink: Flow key attr not present in new flow. [ 409.583932][ T5989] Zero length message leads to an empty skb [ 409.877623][ T5808] Bluetooth: hci2: command tx timeout [ 409.877646][ T5808] Bluetooth: hci1: command tx timeout [ 409.877659][ T5808] Bluetooth: hci3: command tx timeout [ 409.877671][ T5808] Bluetooth: hci0: command tx timeout [ 409.906294][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 409.906313][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 409.909572][ T9] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 409.917987][ T9] usb 5-1: USB disconnect, device number 2 [ 410.176643][ T5994] overlay: filesystem on ./file0 not supported as upperdir qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 410.363022][ T6014] tmpfs: Bad value for 'mpol' [ 410.426443][ T6021] overlay: filesystem on ./file0 not supported as upperdir [ 410.469630][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 410.485679][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.558321][ T43] kauditd_printk_skb: 85 callbacks suppressed [ 410.558334][ T43] audit: type=1400 audit(1790359870.917:254): avc: denied { write } for pid=6029 comm="syz.3.20" name="tcp6" dev="proc" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 410.561696][ T43] audit: type=1400 audit(1790359870.917:255): avc: denied { create } for pid=6029 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.561917][ T43] audit: type=1400 audit(1790359870.917:256): avc: denied { write } for pid=6029 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.672637][ T6042] netlink: Unknown conntrack attr (0) [ 410.673275][ T43] audit: type=1400 audit(1790359871.027:257): avc: denied { create } for pid=6041 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.673728][ T43] audit: type=1400 audit(1790359871.027:258): avc: denied { setopt } for pid=6041 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.684781][ T6042] ISOFS: Unable to identify CD-ROM format. [ 410.726157][ T43] audit: type=1400 audit(1790359871.077:259): avc: denied { create } for pid=6045 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 410.727526][ T43] audit: type=1400 audit(1790359871.087:260): avc: denied { setopt } for pid=6045 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 410.730836][ T43] audit: type=1400 audit(1790359871.087:261): avc: denied { read write } for pid=6048 comm="syz.0.31" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.730862][ T43] audit: type=1400 audit(1790359871.087:262): avc: denied { open } for pid=6048 comm="syz.0.31" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.732943][ T43] audit: type=1400 audit(1790359871.087:263): avc: denied { watch watch_reads } for pid=6048 comm="syz.0.31" path="/4" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 410.934621][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.934844][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.935355][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.935638][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.936076][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.946125][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.951164][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.951442][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.952172][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.955003][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.977829][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 411.026835][ T6047] trusted_key: encrypted_key: insufficient parameters specified [ 411.067430][ T6061] overlay: filesystem on ./file0 not supported as upperdir [ 411.107130][ T5905] usb 7-1: device descriptor read/64, error -71 [ 411.116146][ T6064] loop5: detected capacity change from 0 to 7 [ 411.120300][ T6058] netlink: 80 bytes leftover after parsing attributes in process `syz.1.32'. [ 411.131240][ T6064] Dev loop5: unable to read RDB block 7 [ 411.131265][ T6064] loop5: unable to read partition table [ 411.131365][ T6064] loop5: partition table beyond EOD, truncated [ 411.131387][ T6064] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 411.131853][ T6064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34'. [ 411.357337][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 411.487454][ T5905] usb 7-1: device descriptor read/64, error -71 [ 411.494183][ T6088] overlay: filesystem on ./file0 not supported as upperdir [ 411.597836][ T5905] usb usb7-port1: attempt power cycle [ 411.913678][ T6092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6092 comm=syz.3.44 [ 411.937164][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 411.958512][ T5905] usb 7-1: device descriptor read/8, error -71 [ 411.967156][ T5798] Bluetooth: hci0: command tx timeout [ 411.967190][ T5798] Bluetooth: hci3: command tx timeout [ 411.967209][ T5798] Bluetooth: hci1: command tx timeout [ 411.967230][ T5798] Bluetooth: hci2: command tx timeout [ 412.197358][ T5905] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 412.219194][ T5905] usb 7-1: device descriptor read/8, error -71 [ 412.277777][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 412.277903][ T6100] netlink: 'syz.0.47': attribute type 7 has an invalid length. [ 412.277911][ T6100] netlink: 'syz.0.47': attribute type 8 has an invalid length. [ 412.277917][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 412.281400][ T6100] syz_tun: entered promiscuous mode [ 412.282696][ T6100] syz_tun: left promiscuous mode [ 412.329142][ T5905] usb usb7-port1: unable to enumerate USB device [ 412.427244][ T5762] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 412.524252][ T6113] netlink: 84 bytes leftover after parsing attributes in process `syz.0.52'. [ 412.588054][ T5762] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.589207][ T5762] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.589223][ T5762] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.589242][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.743551][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.53'. [ 412.798152][ T5762] usb 6-1: usb_control_msg returned -32 [ 412.798176][ T5762] usbtmc 6-1:16.0: can't read capabilities [ 412.814694][ T5762] usb 6-1: USB disconnect, device number 2 [ 412.820830][ T6128] netlink: 260 bytes leftover after parsing attributes in process `syz.0.56'. [ 412.820842][ T6128] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 412.914779][ T6139] xt_MASQUERADE: bad rangesize 10242 [ 413.619155][ T6156] dlm: no locking on control device [ 413.719174][ T6158] lo: entered promiscuous mode [ 413.724003][ T6158] tunl0: entered promiscuous mode [ 413.725595][ T6158] gre0: entered promiscuous mode [ 413.730159][ T6158] gretap0: entered promiscuous mode [ 413.733525][ T6158] erspan0: entered promiscuous mode [ 413.738785][ T6158] ip_vti0: entered promiscuous mode [ 413.740407][ T6158] ip6_vti0: entered promiscuous mode [ 413.742016][ T6158] sit0: entered promiscuous mode [ 413.744130][ T6158] ip6tnl0: entered promiscuous mode [ 413.745209][ T6158] ip6gre0: entered promiscuous mode [ 413.746560][ T6158] syz_tun: entered promiscuous mode [ 413.752570][ T6158] ip6gretap0: entered promiscuous mode [ 413.754055][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.754293][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.755056][ T6158] bridge0: entered promiscuous mode [ 413.756698][ T6158] vcan0: entered promiscuous mode [ 413.776191][ T6158] bond0: entered promiscuous mode [ 413.776206][ T6158] bond_slave_0: entered promiscuous mode [ 413.776420][ T6158] bond_slave_1: entered promiscuous mode [ 413.779318][ T6158] team0: entered promiscuous mode [ 413.779330][ T6158] team_slave_0: entered promiscuous mode [ 413.779418][ T6158] team_slave_1: entered promiscuous mode [ 413.781239][ T6158] dummy0: entered promiscuous mode [ 413.784309][ T6158] nlmon0: entered promiscuous mode [ 413.785432][ T6158] batadv0: entered promiscuous mode [ 413.786780][ T6158] vxcan0: entered promiscuous mode [ 413.788026][ T6158] vxcan1: entered promiscuous mode [ 413.788446][ T6158] veth0: entered promiscuous mode [ 413.790170][ T6158] veth1: entered promiscuous mode [ 413.796788][ T6158] wg0: entered promiscuous mode [ 413.803256][ T6158] wg1: entered promiscuous mode [ 413.813385][ T6158] wg2: entered promiscuous mode [ 413.814482][ T6158] veth0_to_bridge: entered promiscuous mode [ 413.816744][ T6158] veth1_to_bridge: entered promiscuous mode [ 413.819825][ T6158] veth0_to_bond: entered promiscuous mode [ 413.821438][ T6158] veth1_to_bond: entered promiscuous mode [ 413.823195][ T6158] veth0_to_team: entered promiscuous mode [ 413.825626][ T6158] veth1_to_team: entered promiscuous mode [ 413.828336][ T6158] veth0_to_batadv: entered promiscuous mode [ 413.829454][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.829479][ T6158] batadv_slave_0: entered promiscuous mode [ 413.831129][ T6158] veth1_to_batadv: entered promiscuous mode [ 413.832857][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.832881][ T6158] batadv_slave_1: entered promiscuous mode [ 413.834270][ T6158] xfrm0: entered promiscuous mode [ 413.835330][ T6158] veth0_to_hsr: entered promiscuous mode [ 413.838212][ T6158] veth1_to_hsr: entered promiscuous mode [ 413.840836][ T6158] hsr0: entered promiscuous mode [ 413.844376][ T6158] veth1_virt_wifi: entered promiscuous mode [ 413.845650][ T6158] veth0_virt_wifi: entered promiscuous mode [ 413.846708][ T6158] virt_wifi0: entered promiscuous mode [ 413.851594][ T6158] vlan0: entered promiscuous mode [ 413.852924][ T6158] vlan1: entered promiscuous mode [ 413.863700][ T6158] macvlan0: entered promiscuous mode [ 413.867091][ T6158] macvlan1: entered promiscuous mode [ 413.868785][ T6158] ipvlan0: entered promiscuous mode [ 413.868921][ T6158] ipvlan1: entered promiscuous mode [ 413.890911][ T6158] macvtap0: entered promiscuous mode [ 413.892353][ T6158] macsec0: entered promiscuous mode [ 413.894641][ T6158] geneve0: entered promiscuous mode [ 413.899439][ T6158] geneve1: entered promiscuous mode [ 413.904521][ T6158] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 413.911835][ T6158] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 413.914961][ T6158] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 413.920696][ T6158] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 413.931995][ T6158] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 413.940161][ T6158] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 413.941062][ T6158] ip6erspan0: entered promiscuous mode [ 413.967252][ T5846] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.967293][ T5846] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.967323][ T5846] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.967352][ T5846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.992516][ T6175] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 413.994544][ T6175] Bluetooth: ISO socket layer initialized [ 414.036749][ T6188] ======================================================= [ 414.036749][ T6188] WARNING: The mand mount option has been deprecated and [ 414.036749][ T6188] and is ignored by this kernel. Remove the mand [ 414.036749][ T6188] option from the mount to silence this warning. [ 414.036749][ T6188] ======================================================= [ 414.039082][ T5808] Bluetooth: hci2: command tx timeout [ 414.039103][ T5808] Bluetooth: hci1: command tx timeout [ 414.039115][ T5808] Bluetooth: hci3: command tx timeout [ 414.039127][ T5808] Bluetooth: hci0: command tx timeout [ 414.039498][ T6188] jffs2: notice: (6188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 414.137164][ T6192] FAULT_INJECTION: forcing a failure. [ 414.137164][ T6192] name failslab, interval 1, probability 0, space 0, times 1 [ 414.137186][ T6192] CPU: 2 UID: 0 PID: 6192 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(full) [ 414.137198][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.137205][ T6192] Call Trace: [ 414.137208][ T6192] [ 414.137213][ T6192] dump_stack_lvl+0x100/0x190 [ 414.137233][ T6192] should_fail_ex.cold+0x5/0xa [ 414.137249][ T6192] should_failslab+0xc2/0x120 [ 414.137277][ T6192] kmem_cache_alloc_noprof+0x92/0x6a0 [ 414.137289][ T6192] ? __pfx_map_id_range_down+0x10/0x10 [ 414.137301][ T6192] ? rcu_is_watching+0x13/0xc0 [ 414.137316][ T6192] ? security_inode_alloc+0x3b/0x2c0 [ 414.137330][ T6192] security_inode_alloc+0x3b/0x2c0 [ 414.137330][ T5739] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 414.137342][ T6192] inode_init_always_gfp+0xc6f/0xfb0 [ 414.137359][ T6192] alloc_inode+0x8e/0x250 [ 414.137370][ T6192] sock_alloc+0x44/0x280 [ 414.137388][ T6192] ? security_socket_create+0x7f/0x250 [ 414.137400][ T6192] __sock_create+0xc2/0x860 [ 414.137413][ T6192] __sys_socket+0x14d/0x260 [ 414.137424][ T6192] ? __pfx___sys_socket+0x10/0x10 [ 414.137439][ T6192] __x64_sys_socket+0x72/0xb0 [ 414.137450][ T6192] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.137470][ T6192] do_syscall_64+0x123/0x790 [ 414.137484][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.137496][ T6192] RIP: 0033:0x7f6517d9e159 [ 414.137505][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.137515][ T6192] RSP: 002b:00007f6515ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 414.137526][ T6192] RAX: ffffffffffffffda RBX: 00007f6518026090 RCX: 00007f6517d9e159 [ 414.137533][ T6192] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 414.137539][ T6192] RBP: 00007f6517e3506b R08: 0000000000000000 R09: 0000000000000000 [ 414.137545][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.137551][ T6192] R13: 00007f6518026128 R14: 00007f6518026090 R15: 00007fffd3677e68 [ 414.137564][ T6192] [ 414.137580][ T6192] socket: no more sockets [ 414.287691][ T5739] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.288467][ T5739] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.288482][ T5739] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.288501][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.500206][ T5739] usb 5-1: usb_control_msg returned -71 [ 414.500231][ T5739] usbtmc 5-1:16.0: can't read capabilities [ 414.512740][ T5739] usb 5-1: USB disconnect, device number 3 [ 414.809142][ T6206] __nla_validate_parse: 2 callbacks suppressed [ 414.809155][ T6206] netlink: 64 bytes leftover after parsing attributes in process `syz.3.79'. [ 414.978233][ T6218] warning: `syz.3.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 415.045216][ T6222] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 415.045318][ T6224] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 415.199333][ T5798] Bluetooth: hci0: ACL packet for unknown connection handle 2816 [ 415.203682][ T6238] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 415.213824][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 415.266195][ T5099] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:4225611f-5ffc-4a4f-b6e6-caeb08028145. [ 415.300587][ T6238] nvme nvme0: creating 4 I/O queues. [ 415.322640][ T6238] nvme nvme0: mapped 4/0/0 default/read/poll queues. [ 415.346877][ T6238] nvme nvme0: new ctrl: NQN "testsubsys", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:4225611f-5ffc-4a4f-b6e6-caeb08028145 [ 415.350422][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 415.497110][ T5905] usb 8-1: Using ep0 maxpacket: 32 [ 415.498512][ T5905] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.500526][ T5905] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.503485][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.503498][ T5905] usb 8-1: Product: syz [ 415.503506][ T5905] usb 8-1: Manufacturer: syz [ 415.503513][ T5905] usb 8-1: SerialNumber: syz [ 415.506925][ T5905] usb 8-1: config 0 descriptor?? [ 415.508517][ T6235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.509808][ T5905] hub 8-1:0.0: bad descriptor, ignoring hub [ 415.509820][ T5905] hub 8-1:0.0: probe with driver hub failed with error -5 [ 415.858978][ T5762] usb 8-1: USB disconnect, device number 2 [ 415.990184][ T43] kauditd_printk_skb: 91 callbacks suppressed [ 415.990218][ T43] audit: type=1400 audit(1790359876.347:355): avc: denied { setopt } for pid=6246 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.996522][ T6248] Bluetooth: MGMT ver 1.23 [ 416.116192][ T6249] netlink: 84 bytes leftover after parsing attributes in process `syz.0.91'. [ 416.119095][ T6248] kvm [6246]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 416.119968][ T6248] kvm [6246]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 416.297371][ T5762] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 416.436827][ T43] audit: type=1400 audit(1790359876.787:356): avc: denied { write } for pid=6266 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 416.449985][ T5762] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.452284][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 416.454779][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.454789][ T5762] usb 8-1: Product: syz [ 416.454796][ T5762] usb 8-1: Manufacturer: syz [ 416.454803][ T5762] usb 8-1: SerialNumber: syz [ 416.456345][ T5762] usb 8-1: config 0 descriptor?? [ 416.456901][ T6235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.457743][ T5762] hub 8-1:0.0: bad descriptor, ignoring hub [ 416.457753][ T5762] hub 8-1:0.0: probe with driver hub failed with error -5 [ 416.505328][ T6268] FAULT_INJECTION: forcing a failure. [ 416.505328][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 416.505350][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) [ 416.505364][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.505371][ T6268] Call Trace: [ 416.505375][ T6268] [ 416.505380][ T6268] dump_stack_lvl+0x100/0x190 [ 416.505408][ T6268] should_fail_ex.cold+0x5/0xa [ 416.505428][ T6268] should_failslab+0xc2/0x120 [ 416.505446][ T6268] __kmalloc_cache_noprof+0x91/0x6d0 [ 416.505466][ T6268] ? sctp_add_bind_addr+0xae/0x3e0 [ 416.505488][ T6268] sctp_add_bind_addr+0xae/0x3e0 [ 416.505508][ T6268] sctp_do_bind+0x36c/0x760 [ 416.505525][ T6268] sctp_connect_new_asoc+0x5e7/0x770 [ 416.505541][ T6268] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 416.505558][ T6268] ? __ipv6_addr_type+0xe8/0x2e0 [ 416.505574][ T6268] ? __ipv6_addr_type+0xe8/0x2e0 [ 416.505591][ T6268] __sctp_connect+0x3e7/0xc70 [ 416.505612][ T6268] ? lock_acquire+0x1d1/0x380 [ 416.505632][ T6268] ? __pfx___sctp_connect+0x10/0x10 [ 416.505654][ T6268] ? selinux_sctp_bind_connect+0xe0/0x230 [ 416.505684][ T6268] __sctp_setsockopt_connectx+0x100/0x190 [ 416.505739][ T6268] sctp_getsockopt+0x3f06/0x7110 [ 416.505766][ T6268] ? avc_has_perm_noaudit+0x56/0x470 [ 416.505786][ T6268] ? find_held_lock+0x2b/0x80 [ 416.505802][ T6268] ? avc_has_perm_noaudit+0x11e/0x470 [ 416.505818][ T6268] ? avc_has_perm_noaudit+0x11e/0x470 [ 416.505835][ T6268] ? __pfx_sctp_getsockopt+0x10/0x10 [ 416.505852][ T6268] ? __lock_acquire+0x5c0/0x1f40 [ 416.505864][ T6268] ? avc_has_perm+0x135/0x1e0 [ 416.505881][ T6268] ? __pfx_avc_has_perm+0x10/0x10 [ 416.505902][ T6268] ? lock_acquire+0x1d1/0x380 [ 416.505914][ T6268] ? __might_fault+0xc5/0x140 [ 416.505933][ T6268] ? find_held_lock+0x2b/0x80 [ 416.505948][ T6268] ? __might_fault+0xc5/0x140 [ 416.505964][ T6268] ? __might_fault+0xc5/0x140 [ 416.505985][ T6268] ? _copy_from_user+0x59/0xd0 [ 416.505998][ T6268] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 416.506018][ T6268] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 416.506039][ T6268] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 416.506057][ T6268] do_sock_getsockopt+0x50a/0x6e0 [ 416.506077][ T6268] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 416.506097][ T6268] ? __fget_files+0x34/0x3d0 [ 416.506113][ T6268] ? find_held_lock+0x2b/0x80 [ 416.506134][ T6268] ? __fget_files+0x21f/0x3d0 [ 416.506152][ T6268] __sys_getsockopt+0x148/0x260 [ 416.506171][ T6268] ? __x64_sys_getsockopt+0xbd/0x160 [ 416.506186][ T6268] __x64_sys_getsockopt+0xbd/0x160 [ 416.506200][ T6268] ? do_syscall_64+0xae/0x790 [ 416.506210][ T6268] ? lockdep_hardirqs_on+0x7d/0x110 [ 416.506227][ T6268] do_syscall_64+0x123/0x790 [ 416.506239][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.506251][ T6268] RIP: 0033:0x7f6517d9e159 [ 416.506262][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.506274][ T6268] RSP: 002b:00007f6515ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 416.506285][ T6268] RAX: ffffffffffffffda RBX: 00007f6518026090 RCX: 00007f6517d9e159 [ 416.506295][ T6268] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 [ 416.506302][ T6268] RBP: 00007f6517e3506b R08: 0000200000000180 R09: 0000000000000000 [ 416.506310][ T6268] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.506318][ T6268] R13: 00007f6518026128 R14: 00007f6518026090 R15: 00007fffd3677e68 [ 416.506333][ T6268] [ 416.659293][ T43] audit: type=1400 audit(1790359877.017:357): avc: denied { connect } for pid=6234 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.661095][ T43] audit: type=1400 audit(1790359877.017:358): avc: denied { write } for pid=6234 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.661143][ T43] audit: type=1400 audit(1790359877.017:359): avc: denied { read } for pid=6234 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.700914][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 416.814024][ T43] audit: type=1400 audit(1790359877.167:360): avc: denied { create } for pid=6280 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 416.979597][ T43] audit: type=1400 audit(1790359877.337:361): avc: denied { create } for pid=6292 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 417.000834][ T6298] binder: 6297:6298 unknown command 0 [ 417.000845][ T6298] binder: 6297:6298 ioctl c0306201 200000000180 returned -22 [ 417.072225][ T43] audit: type=1400 audit(1790359877.427:362): avc: denied { mount } for pid=6301 comm="syz.0.108" name="/" dev="ramfs" ino=11096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 417.075741][ T43] audit: type=1400 audit(1790359877.427:363): avc: denied { mounton } for pid=6301 comm="syz.0.108" path="/file0" dev="ramfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 417.082261][ T6302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 417.082305][ T6302] overlayfs: failed to set xattr on upper [ 417.082311][ T6302] overlayfs: ...falling back to redirect_dir=nofollow. [ 417.082318][ T6302] overlayfs: ...falling back to metacopy=off. [ 417.082325][ T6302] overlayfs: ...falling back to index=off. [ 417.082331][ T6302] overlayfs: ...falling back to uuid=null. [ 417.158498][ T6304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.109'. [ 417.221353][ T43] audit: type=1400 audit(1790359877.577:364): avc: denied { mount } for pid=6305 comm="syz.0.110" name="/" dev="hugetlbfs" ino=12417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 417.299547][ T5739] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 417.479551][ T5739] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.480739][ T5739] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.480775][ T5739] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.480853][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.708726][ T5739] usb 6-1: usb_control_msg returned -32 [ 417.708746][ T5739] usbtmc 6-1:16.0: can't read capabilities [ 417.727582][ T5739] usb 6-1: USB disconnect, device number 3 [ 417.760545][ T6307] loop5: detected capacity change from 0 to 456 [ 417.773252][ T6307] loop5: AHDI p1 p2 p3 [ 417.775136][ T6307] loop5: p1 start 1818582900 is beyond EOD, [ 417.775146][ T6307] truncated [ 417.775150][ T6307] loop5: p3 start 335544320 is beyond EOD, [ 417.775157][ T6307] truncated [ 418.174225][ T6312] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 418.231361][ T6314] sctp: [Deprecated]: syz.2.112 (pid 6314) Use of int in max_burst socket option. [ 418.231361][ T6314] Use struct sctp_assoc_value instead [ 418.237921][ T5947] usb 8-1: USB disconnect, device number 3 [ 418.326926][ T6324] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 418.326960][ T6324] overlayfs: failed to set xattr on upper [ 418.326965][ T6324] overlayfs: ...falling back to redirect_dir=nofollow. [ 418.326969][ T6324] overlayfs: ...falling back to metacopy=off. [ 418.326973][ T6324] overlayfs: ...falling back to index=off. [ 418.328457][ T6324] overlayfs: ...falling back to uuid=null. [ 418.440582][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 418.464988][ T6346] FAULT_INJECTION: forcing a failure. [ 418.464988][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 418.465006][ T6346] CPU: 3 UID: 0 PID: 6346 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 418.465019][ T6346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.465026][ T6346] Call Trace: [ 418.465031][ T6346] [ 418.465036][ T6346] dump_stack_lvl+0x100/0x190 [ 418.465057][ T6346] should_fail_ex.cold+0x5/0xa [ 418.465077][ T6346] _copy_from_user+0x2e/0xd0 [ 418.465092][ T6346] __sys_bpf+0x2f5/0x4a30 [ 418.465108][ T6346] ? __pfx___sys_bpf+0x10/0x10 [ 418.465119][ T6346] ? find_held_lock+0x2b/0x80 [ 418.465142][ T6346] ? futex_wake+0x4ea/0x5e0 [ 418.465175][ T6346] ? percpu_counter_add_batch+0xb9/0x230 [ 418.465222][ T6346] ? __x64_sys_futex+0x34f/0x4d0 [ 418.465249][ T6346] ? __x64_sys_futex+0x358/0x4d0 [ 418.465278][ T6346] ? xfd_validate_state+0x129/0x190 [ 418.465305][ T6346] ? __x64_sys_bpf+0xce/0x140 [ 418.465325][ T6346] __x64_sys_bpf+0xce/0x140 [ 418.465347][ T6346] ? do_syscall_64+0xae/0x790 [ 418.465367][ T6346] do_syscall_64+0x123/0x790 [ 418.465380][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.465394][ T6346] RIP: 0033:0x7fa8a159e159 [ 418.465405][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.465417][ T6346] RSP: 002b:00007fa8a239d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.465430][ T6346] RAX: ffffffffffffffda RBX: 00007fa8a1825fa0 RCX: 00007fa8a159e159 [ 418.465438][ T6346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 418.465445][ T6346] RBP: 00007fa8a163506b R08: 0000000000000000 R09: 0000000000000000 [ 418.465452][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.465459][ T6346] R13: 00007fa8a1826038 R14: 00007fa8a1825fa0 R15: 00007ffc0cf7b2e8 [ 418.465474][ T6346] [ 418.508859][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 418.508869][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.120'. [ 418.565439][ T6351] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 418.665611][ T6359] xt_l2tp: missing protocol rule (udp|l2tpip) [ 419.189752][ T6367] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.189798][ T6367] overlayfs: failed to set xattr on upper [ 419.189806][ T6367] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.189813][ T6367] overlayfs: ...falling back to metacopy=off. [ 419.189821][ T6367] overlayfs: ...falling back to index=off. [ 419.189838][ T6367] overlayfs: ...falling back to uuid=null. [ 419.227919][ T6370] binder: BINDER_SET_CONTEXT_MGR already set [ 419.227929][ T6370] binder: 6369:6370 ioctl 4018620d 200000000300 returned -16 [ 419.232496][ T6370] binder_alloc: 6369: binder_alloc_buf, no vma [ 419.259341][ T6373] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 421.087097][ C1] net_ratelimit: 53 callbacks suppressed [ 421.385361][ T6339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.446091][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 421.446108][ T43] audit: type=1400 audit(1790359881.797:397): avc: denied { unmount } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 421.462529][ T43] audit: type=1400 audit(1790359881.817:398): avc: denied { ioctl } for pid=6378 comm="syz.3.131" path="socket:[13455]" dev="sockfs" ino=13455 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.462976][ T43] audit: type=1400 audit(1790359881.817:399): avc: denied { create } for pid=6378 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 421.468767][ T43] audit: type=1400 audit(1790359881.827:400): avc: denied { create } for pid=6378 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.469364][ T43] audit: type=1400 audit(1790359881.827:401): avc: denied { write } for pid=6378 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 421.544016][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 421.544944][ T43] audit: type=1400 audit(1790359881.897:402): avc: denied { write } for pid=6391 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.545232][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.545249][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.553846][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.553862][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.574226][ T43] audit: type=1400 audit(1790359881.927:403): avc: denied { firmware_load } for pid=6388 comm="syz.1.133" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 421.575274][ T43] audit: type=1400 audit(1790359881.927:404): avc: denied { ioctl } for pid=6388 comm="syz.1.133" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 421.590417][ T6394] FAULT_INJECTION: forcing a failure. [ 421.590417][ T6394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.590445][ T6394] CPU: 3 UID: 0 PID: 6394 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 421.590462][ T6394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.590472][ T6394] Call Trace: [ 421.590481][ T6394] [ 421.590489][ T6394] dump_stack_lvl+0x100/0x190 [ 421.590523][ T6394] should_fail_ex.cold+0x5/0xa [ 421.590549][ T6394] ? prepare_alloc_pages+0x16d/0x5b0 [ 421.590578][ T6394] should_fail_alloc_page+0xeb/0x140 [ 421.590607][ T6394] prepare_alloc_pages+0x1f0/0x5b0 [ 421.590639][ T6394] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 421.590661][ T6394] ? __pfx_get_page_from_freelist+0x10/0x10 [ 421.590682][ T6394] ? prepare_alloc_pages+0x1f0/0x5b0 [ 421.590708][ T6394] ? is_bpf_text_address+0x94/0x1a0 [ 421.590746][ T6394] ? rcu_is_watching+0x13/0xc0 [ 421.590775][ T6394] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 421.590802][ T6394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 421.590831][ T6394] ? stack_trace_save+0x8e/0xc0 [ 421.590851][ T6394] ? __pfx_stack_trace_save+0x10/0x10 [ 421.590871][ T6394] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.590892][ T6394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 421.590913][ T6394] ? is_bpf_text_address+0x94/0x1a0 [ 421.590944][ T6394] ? kasan_save_track+0x14/0x30 [ 421.590967][ T6394] ? __kasan_slab_alloc+0x89/0x90 [ 421.590990][ T6394] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 421.591012][ T6394] ? alloc_vmap_area+0x640/0x2bb0 [ 421.591034][ T6394] ? __get_vm_area_node+0x1ed/0x350 [ 421.591057][ T6394] ? get_vm_area_caller+0x71/0xa0 [ 421.591081][ T6394] ? vmap+0x132/0x2e0 [ 421.591103][ T6394] ? ringbuf_map_alloc+0x363/0x860 [ 421.591126][ T6394] ? map_create+0x874/0x30d0 [ 421.591153][ T6394] ? __sys_bpf+0x12a0/0x4a30 [ 421.591171][ T6394] ? __x64_sys_bpf+0xce/0x140 [ 421.591191][ T6394] ? do_syscall_64+0x123/0x790 [ 421.591209][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.591236][ T6394] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 421.591263][ T6394] ? policy_nodemask+0xed/0x4f0 [ 421.591292][ T6394] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 421.591328][ T6394] __kasan_populate_vmalloc+0xf0/0x210 [ 421.591357][ T6394] alloc_vmap_area+0x95d/0x2bb0 [ 421.591388][ T6394] ? kasan_save_track+0x14/0x30 [ 421.591412][ T6394] ? __kasan_kmalloc+0xaa/0xb0 [ 421.591434][ T6394] ? __pfx_alloc_vmap_area+0x10/0x10 [ 421.591460][ T6394] ? __get_vm_area_node+0x124/0x350 [ 421.591490][ T6394] __get_vm_area_node+0x1ed/0x350 [ 421.591516][ T6394] ? ringbuf_map_alloc+0x363/0x860 [ 421.591538][ T6394] get_vm_area_caller+0x71/0xa0 [ 421.591565][ T6394] ? ringbuf_map_alloc+0x363/0x860 [ 421.591589][ T6394] vmap+0x132/0x2e0 [ 421.591613][ T6394] ? __pfx_vmap+0x10/0x10 [ 421.591635][ T6394] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 421.591659][ T6394] ? __bpf_map_area_alloc+0x13a/0x200 [ 421.591683][ T6394] ringbuf_map_alloc+0x363/0x860 [ 421.591713][ T6394] map_create+0x874/0x30d0 [ 421.591825][ T6394] ? find_held_lock+0x2b/0x80 [ 421.591857][ T6394] ? avc_has_perm_noaudit+0x11e/0x470 [ 421.591890][ T6394] ? avc_has_perm_noaudit+0x11e/0x470 [ 421.591927][ T6394] ? __pfx_map_create+0x10/0x10 [ 421.591954][ T6394] ? avc_has_perm+0x135/0x1e0 [ 421.591983][ T6394] ? __pfx_avc_has_perm+0x10/0x10 [ 421.592010][ T6394] ? __might_fault+0xc5/0x140 [ 421.592041][ T6394] ? __might_fault+0xc5/0x140 [ 421.592076][ T6394] ? selinux_bpf+0xfb/0x150 [ 421.592099][ T6394] __sys_bpf+0x12a0/0x4a30 [ 421.592119][ T6394] ? plist_check_list+0x1b8/0x280 [ 421.592148][ T6394] ? plist_check_list+0x190/0x280 [ 421.592176][ T6394] ? __pfx___sys_bpf+0x10/0x10 [ 421.592195][ T6394] ? find_held_lock+0x2b/0x80 [ 421.592223][ T6394] ? futex_wake+0x4ea/0x5e0 [ 421.592241][ T6394] ? futex_private_hash_put.part.0+0xdc/0x180 [ 421.592267][ T6394] ? futex_private_hash_put+0x24/0x30 [ 421.592298][ T6394] ? __pfx_futex_wake+0x10/0x10 [ 421.592320][ T6394] ? rcu_read_lock_any_held+0x6a/0x90 [ 421.592354][ T6394] ? find_held_lock+0x2b/0x80 [ 421.592382][ T6394] ? ksys_write+0x190/0x250 [ 421.592404][ T6394] ? ksys_write+0x190/0x250 [ 421.592443][ T6394] ? __x64_sys_futex+0x34f/0x4d0 [ 421.592469][ T6394] ? __x64_sys_futex+0x358/0x4d0 [ 421.592500][ T6394] ? xfd_validate_state+0x129/0x190 [ 421.592526][ T6394] ? __x64_sys_bpf+0xce/0x140 [ 421.592545][ T6394] __x64_sys_bpf+0xce/0x140 [ 421.592568][ T6394] ? do_syscall_64+0xae/0x790 [ 421.592589][ T6394] do_syscall_64+0x123/0x790 [ 421.592610][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.592632][ T6394] RIP: 0033:0x7f6517d9e159 [ 421.592650][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.592670][ T6394] RSP: 002b:00007f6515ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.592690][ T6394] RAX: ffffffffffffffda RBX: 00007f6518026090 RCX: 00007f6517d9e159 [ 421.592705][ T6394] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 421.592732][ T6394] RBP: 00007f6517e3506b R08: 0000000000000000 R09: 0000000000000000 [ 421.592746][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.592759][ T6394] R13: 00007f6518026128 R14: 00007f6518026090 R15: 00007fffd3677e68 [ 421.592789][ T6394] [ 421.603320][ T43] audit: type=1400 audit(1790359881.957:405): avc: denied { mount } for pid=6391 comm="syz.0.135" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 421.649616][ T6389] syz.1.133 (6389) used greatest stack depth: 19288 bytes left [ 421.713059][ T43] audit: type=1400 audit(1790359882.067:406): avc: denied { write } for pid=6395 comm="syz.3.137" name="/" dev="9p" ino=71827827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.726438][ T6400] loop2: detected capacity change from 0 to 4096 [ 421.792872][ T6400] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 421.792887][ T6400] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 421.792915][ T6400] loop2: [ 421.839784][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 421.864209][ T6410] bond1: Invalid ad_actor_system MAC address. [ 421.864221][ T6410] bond1: option ad_actor_system: invalid value (65541) [ 421.865387][ T6410] bond1 (unregistering): Released all slaves [ 421.901052][ T6416] Bluetooth: MGMT ver 1.23 [ 421.901075][ T6416] Bluetooth: hci0: unsupported parameter 74 [ 421.901085][ T6416] Bluetooth: hci0: unsupported parameter 74 [ 421.999315][ T6427] FAULT_INJECTION: forcing a failure. [ 421.999315][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 421.999334][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 421.999347][ T6427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.999354][ T6427] Call Trace: [ 421.999358][ T6427] [ 421.999363][ T6427] dump_stack_lvl+0x100/0x190 [ 421.999383][ T6427] should_fail_ex.cold+0x5/0xa [ 421.999400][ T6427] should_failslab+0xc2/0x120 [ 421.999415][ T6427] __kmalloc_cache_noprof+0x91/0x6d0 [ 421.999434][ T6427] ? alloc_pipe_info+0x10e/0x590 [ 421.999452][ T6427] alloc_pipe_info+0x10e/0x590 [ 421.999468][ T6427] create_pipe_files+0x8c/0x970 [ 421.999485][ T6427] do_pipe2+0xbd/0x1e0 [ 421.999499][ T6427] ? __pfx_do_pipe2+0x10/0x10 [ 421.999514][ T6427] ? xfd_validate_state+0x129/0x190 [ 421.999530][ T6427] __x64_sys_pipe2+0x54/0x80 [ 421.999545][ T6427] do_syscall_64+0x123/0x790 [ 421.999558][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.999569][ T6427] RIP: 0033:0x7f6517d9e159 [ 421.999580][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.999591][ T6427] RSP: 002b:00007f6518b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 421.999602][ T6427] RAX: ffffffffffffffda RBX: 00007f6518025fa0 RCX: 00007f6517d9e159 [ 421.999609][ T6427] RDX: 0000000000000000 RSI: 0000000000080080 RDI: 0000000000000000 [ 421.999617][ T6427] RBP: 00007f6517e3506b R08: 0000000000000000 R09: 0000000000000000 [ 421.999624][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.999631][ T6427] R13: 00007f6518026038 R14: 00007f6518025fa0 R15: 00007fffd3677e68 [ 421.999645][ T6427] [ 422.013977][ T6430] x_tables: duplicate underflow at hook 1 [ 422.047922][ T6436] SELinux: syz.0.149 (6436) wrote to user. This is no longer supported. [ 422.317511][ T5762] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 422.342950][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 422.367105][ T1034] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 422.470051][ T5762] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.471065][ T5762] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.471078][ T5762] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.471108][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.678674][ T5762] usb 5-1: usb_control_msg returned -32 [ 422.678696][ T5762] usbtmc 5-1:16.0: can't read capabilities [ 422.896753][ T6461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6461 comm=syz.2.156 [ 423.009913][ T6459] SELinux: ebitmap: empty map [ 423.010047][ T6459] SELinux: failed to load policy [ 423.032914][ T6466] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 423.096598][ T6123] IPVS: starting estimator thread 0... [ 423.103066][ T6472] comedi comedi1: pcm3724: a I/O base address must be specified [ 423.123276][ T6477] tipc: Started in network mode [ 423.123289][ T6477] tipc: Node identity ac1414aa, cluster identity 4711 [ 423.123858][ T6477] tipc: New replicast peer: 172.20.20.187 [ 423.124423][ T6477] tipc: Enabled bearer , priority 10 [ 423.125436][ T6477] tipc: Can't bind to reserved service type 0 [ 423.187121][ T6475] IPVS: using max 44 ests per chain, 105600 per kthread [ 423.269241][ T6482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.269317][ T6482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 423.274216][ T6482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 423.276394][ T6482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.276485][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 423.282053][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 423.289277][ T6482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.289385][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 423.291696][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 423.299383][ T6482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.299442][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 423.305716][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 423.361372][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 423.361391][ T6487] bridge: RTM_NEWNEIGH with invalid ether address [ 423.361622][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 423.361634][ T6487] bridge: RTM_NEWNEIGH with invalid ether address [ 423.446302][ T6493] bonding: b is being created... [ 423.473306][ T6493] bonding: b is being created... [ 423.475516][ T6493] bonding: b already exists [ 423.475561][ T6493] bonding: b is being created... [ 423.475997][ T6493] bonding: b already exists [ 423.476031][ T6493] bonding: b is being created... [ 423.476753][ T6493] bonding: b already exists [ 423.476790][ T6493] bonding: b is being created... [ 423.477332][ T6493] bonding: b already exists [ 423.477363][ T6493] bonding: b is being created... [ 423.478313][ T6493] bonding: b already exists [ 423.478342][ T6493] bonding: b is being created... [ 423.478554][ T6493] bonding: b already exists [ 423.478574][ T6493] bonding: b is being created... [ 423.479316][ T6493] bonding: b already exists [ 423.479342][ T6493] bonding: b is being created... [ 423.479914][ T6493] bonding: b already exists [ 423.479941][ T6493] bonding: b is being created... [ 423.480127][ T6493] bonding: b already exists [ 423.480146][ T6493] bonding: b is being created... [ 423.480855][ T6493] bonding: b already exists [ 423.480877][ T6493] bonding: b is being created... [ 423.481128][ T6493] bonding: b already exists [ 423.481147][ T6493] bonding: b is being created... [ 423.481396][ T6493] bonding: b already exists [ 423.481415][ T6493] bonding: b is being created... [ 423.482022][ T6493] bonding: b already exists [ 423.482045][ T6493] bonding: b is being created... [ 423.482309][ T6493] bonding: b already exists [ 423.482468][ T6493] bonding: b is being created... [ 423.482723][ T6493] bonding: b already exists [ 423.482742][ T6493] bonding: b is being created... [ 423.482995][ T6493] bonding: b already exists [ 423.483014][ T6493] bonding: b is being created... [ 423.483241][ T6493] bonding: b already exists [ 423.483260][ T6493] bonding: b is being created... [ 423.483516][ T6493] bonding: b already exists [ 423.483535][ T6493] bonding: b is being created... [ 423.483830][ T6493] bonding: b already exists [ 423.483850][ T6493] bonding: b is being created... [ 423.484154][ T6493] bonding: b already exists [ 423.484174][ T6493] bonding: b is being created... [ 423.484452][ T6493] bonding: b already exists [ 423.484473][ T6493] bonding: b is being created... [ 423.484762][ T6493] bonding: b already exists [ 423.484782][ T6493] bonding: b is being created... [ 423.485033][ T6493] bonding: b already exists [ 423.485053][ T6493] bonding: b is being created... [ 423.485309][ T6493] bonding: b already exists [ 423.485328][ T6493] bonding: b is being created... [ 423.485509][ T6493] bonding: b already exists [ 423.485527][ T6493] bonding: b is being created... [ 423.485772][ T6493] bonding: b already exists [ 423.486357][ T6493] bonding: b is being created... [ 423.486682][ T6493] bonding: b already exists [ 423.486702][ T6493] bonding: b is being created... [ 423.486910][ T6493] bonding: b already exists [ 423.486928][ T6493] bonding: b is being created... [ 423.487354][ T6493] bonding: b already exists [ 423.487373][ T6493] bonding: b is being created... [ 423.487580][ T6493] bonding: b already exists [ 423.487598][ T6493] bonding: b is being created... [ 423.487771][ T6493] bonding: b already exists [ 423.487789][ T6493] bonding: b is being created... [ 423.487971][ T6493] bonding: b already exists [ 423.487988][ T6493] bonding: b is being created... [ 423.488152][ T6493] bonding: b already exists [ 423.488170][ T6493] bonding: b is being created... [ 423.488352][ T6493] bonding: b already exists [ 423.488949][ T6493] bonding: b is being created... [ 423.489206][ T6493] bonding: b already exists [ 423.489227][ T6493] bonding: b is being created... [ 423.489491][ T6493] bonding: b already exists [ 423.489510][ T6493] bonding: b is being created... [ 423.489778][ T6493] bonding: b already exists [ 423.489797][ T6493] bonding: b is being created... [ 423.490050][ T6493] bonding: b already exists [ 423.490068][ T6493] bonding: b is being created... [ 423.490305][ T6493] bonding: b already exists [ 423.490324][ T6493] bonding: b is being created... [ 423.490595][ T6493] bonding: b already exists [ 423.490614][ T6493] bonding: b is being created... [ 423.491493][ T6493] bonding: b already exists [ 423.491515][ T6493] bonding: b is being created... [ 423.491775][ T6493] bonding: b already exists [ 423.491794][ T6493] bonding: b is being created... [ 423.492035][ T6493] bonding: b already exists [ 423.492053][ T6493] bonding: b is being created... [ 423.492301][ T6493] bonding: b already exists [ 423.492320][ T6493] bonding: b is being created... [ 423.492595][ T6493] bonding: b already exists [ 423.492615][ T6493] bonding: b is being created... [ 423.492890][ T6493] bonding: b already exists [ 423.492908][ T6493] bonding: b is being created... [ 423.493214][ T6493] bonding: b already exists [ 423.493234][ T6493] bonding: b is being created... [ 423.493502][ T6493] bonding: b already exists [ 423.493521][ T6493] bonding: b is being created... [ 423.493775][ T6493] bonding: b already exists [ 423.493794][ T6493] bonding: b is being created... [ 423.494052][ T6493] bonding: b already exists [ 423.494071][ T6493] bonding: b is being created... [ 423.494310][ T6493] bonding: b already exists [ 423.494329][ T6493] bonding: b is being created... [ 423.494608][ T6493] bonding: b already exists [ 423.494627][ T6493] bonding: b is being created... [ 423.494845][ T6493] bonding: b already exists [ 423.495472][ T6493] bonding: b is being created... [ 423.495758][ T6493] bonding: b already exists [ 423.495779][ T6493] bonding: b is being created... [ 423.496023][ T6493] bonding: b already exists [ 423.496293][ T6493] bonding: b is being created... [ 423.496555][ T6493] bonding: b already exists [ 423.496574][ T6493] bonding: b is being created... [ 423.496826][ T6493] bonding: b already exists [ 423.496845][ T6493] bonding: b is being created... [ 423.497740][ T6493] bonding: b already exists [ 423.497763][ T6493] bonding: b is being created... [ 423.497959][ T6493] bonding: b already exists [ 423.497977][ T6493] bonding: b is being created... [ 423.498163][ T6493] bonding: b already exists [ 423.498330][ T6493] bonding: b is being created... [ 423.498568][ T6493] bonding: b already exists [ 423.498608][ T6493] bonding: b is being created... [ 423.498853][ T6493] bonding: b already exists [ 423.498872][ T6493] bonding: b is being created... [ 423.499110][ T6493] bonding: b already exists [ 423.499129][ T6493] bonding: b is being created... [ 423.499379][ T6493] bonding: b already exists [ 423.813121][ T6502] syz.3.168 (6502) used obsolete PPPIOCDETACH ioctl [ 424.223060][ T6511] capability: warning: `syz.3.169' uses deprecated v2 capabilities in a way that may be insecure [ 424.238911][ T5762] tipc: Node number set to 2886997162 [ 425.096265][ T9] usb 5-1: USB disconnect, device number 4 [ 425.142773][ T6527] binder: 6526:6527 unknown command 0 [ 425.142785][ T6527] binder: 6526:6527 ioctl c0306201 2000000001c0 returned -22 [ 425.234873][ T6543] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 425.234899][ T6543] overlayfs: failed to set xattr on upper [ 425.234904][ T6543] overlayfs: ...falling back to redirect_dir=nofollow. [ 425.234908][ T6543] overlayfs: ...falling back to index=off. [ 425.234912][ T6543] overlayfs: ...falling back to uuid=null. [ 425.250599][ T6543] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 425.250625][ T6543] overlayfs: failed to set xattr on upper [ 425.250629][ T6543] overlayfs: ...falling back to redirect_dir=nofollow. [ 425.250633][ T6543] overlayfs: ...falling back to metacopy=off. [ 425.250637][ T6543] overlayfs: ...falling back to index=off. [ 425.250641][ T6543] overlayfs: ...falling back to uuid=null. [ 425.329304][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.329348][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.329362][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.329484][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.399290][ T6558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.423537][ T6558] evm: overlay not supported [ 425.455171][ T6564] netlink: 4924 bytes leftover after parsing attributes in process `syz.3.188'. [ 425.483700][ T6567] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 425.483731][ T6567] overlayfs: failed to set xattr on upper [ 425.483736][ T6567] overlayfs: ...falling back to redirect_dir=nofollow. [ 425.483740][ T6567] overlayfs: ...falling back to index=off. [ 425.483745][ T6567] overlayfs: ...falling back to uuid=null. [ 425.486206][ T6567] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 425.486230][ T6567] overlayfs: failed to set xattr on upper [ 425.486234][ T6567] overlayfs: ...falling back to redirect_dir=nofollow. [ 425.486244][ T6567] overlayfs: ...falling back to metacopy=off. [ 425.486249][ T6567] overlayfs: ...falling back to index=off. [ 425.486253][ T6567] overlayfs: ...falling back to uuid=null. [ 425.529836][ T6569] xt_socket: unknown flags 0x58 [ 425.627749][ T6578] netlink: 'syz.3.193': attribute type 21 has an invalid length. [ 425.627838][ T6578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.193'. [ 425.877103][ T1034] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 426.027907][ T1034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.029270][ T1034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.029283][ T1034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.029312][ T1034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.117044][ C0] net_ratelimit: 311 callbacks suppressed [ 426.238237][ T1034] usb 6-1: usb_control_msg returned -32 [ 426.238257][ T1034] usbtmc 6-1:16.0: can't read capabilities [ 426.544575][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 426.544594][ T43] audit: type=1400 audit(1790359886.897:495): avc: denied { bind } for pid=6585 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 426.656926][ T43] audit: type=1400 audit(1790359887.007:496): avc: denied { append } for pid=6588 comm="syz.0.197" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 426.671150][ T43] audit: type=1400 audit(1790359887.027:497): avc: denied { accept } for pid=6590 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 426.726183][ T6598] overlayfs: missing 'workdir' [ 426.732828][ T6598] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 426.732871][ T6598] overlayfs: failed to set xattr on upper [ 426.732879][ T6598] overlayfs: ...falling back to redirect_dir=nofollow. [ 426.732886][ T6598] overlayfs: ...falling back to metacopy=off. [ 426.732893][ T6598] overlayfs: ...falling back to index=off. [ 426.732899][ T6598] overlayfs: ...falling back to uuid=null. [ 426.808237][ T5739] usb 6-1: USB disconnect, device number 5 [ 427.029503][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 427.082802][ T43] audit: type=1400 audit(1790359887.437:498): avc: denied { nlmsg_read } for pid=6609 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.145513][ T43] audit: type=1400 audit(1790359887.497:499): avc: denied { create } for pid=6609 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 427.151041][ T43] audit: type=1400 audit(1790359887.507:500): avc: denied { mount } for pid=6616 comm="syz.3.205" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 427.190121][ T43] audit: type=1400 audit(1790359887.547:501): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 427.374165][ T43] audit: type=1400 audit(1790359887.727:502): avc: denied { write } for pid=6625 comm="syz.1.207" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 427.392968][ T43] audit: type=1400 audit(1790359887.747:503): avc: denied { map } for pid=6625 comm="syz.1.207" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 427.397408][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.397450][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.397483][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.397514][ T5808] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.480709][ T43] audit: type=1400 audit(1790359887.837:504): avc: denied { ioctl } for pid=6625 comm="syz.1.207" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.750296][ T6632] jffs2: notice: (6632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.961528][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 428.247148][ T5763] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 428.401229][ T5763] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.402225][ T5763] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 428.402238][ T5763] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 428.403976][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.403993][ T5763] usb 8-1: Product: ఈ [ 428.404007][ T5763] usb 8-1: Manufacturer: ⓯蹯퉾㗡쐧抆䲓爓䂘츫鳺ꀍͮṁ㣉⪹⥝飈鲤译탦ꇆƔ첦⎖瑠徢㲤剡᷺踍㋭榏恀즬⩻獼鈡韪餾膉⩯紒蹦鑬㍱쟖캺⨌坚׽㧳⩦紷龺ṩ⹦䞒寉化凷Ꝯ皨낐䮁豖䨷痍뮏ು틸捗ﵳ얜쏆⤰쵰ݭᲉ뵚ﵘ浚탞醂⥔첆஀賳塌℉ [ 428.592023][ T6650] ipvlan1: left promiscuous mode [ 428.619679][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.214'. [ 428.645726][ T6654] overlayfs: missing 'lowerdir' [ 428.652261][ T6654] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 428.652294][ T6654] overlayfs: failed to set xattr on upper [ 428.652298][ T6654] overlayfs: ...falling back to redirect_dir=nofollow. [ 428.652303][ T6654] overlayfs: ...falling back to metacopy=off. [ 428.652307][ T6654] overlayfs: ...falling back to index=off. [ 428.652312][ T6654] overlayfs: ...falling back to uuid=null. [ 428.678444][ T6656] xt_time: unknown flags 0x78 [ 428.700626][ T5763] cdc_ncm 8-1:1.0: bind() failure [ 428.711984][ T5763] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 428.712002][ T5763] cdc_ncm 8-1:1.1: bind() failure [ 428.718598][ T5763] usb 8-1: USB disconnect, device number 4 [ 428.874426][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 428.874437][ T6660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.219'. [ 428.874446][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 428.925021][ T6667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 429.034345][ T6669] netlink: 'syz.1.220': attribute type 8 has an invalid length. [ 429.285435][ T6675] futex_wake_op: syz.3.222 tries to shift op by 32; fix this program [ 429.334059][ T6674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=6674 comm=syz.3.222 [ 429.487587][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 429.487630][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 429.487707][ T5808] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.490016][ T5082] Bluetooth: hci0: command 0x0c1a tx timeout [ 429.633954][ T6690] overlayfs: missing 'lowerdir' [ 429.635211][ T6690] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 429.635237][ T6690] overlayfs: failed to set xattr on upper [ 429.635242][ T6690] overlayfs: ...falling back to redirect_dir=nofollow. [ 429.635246][ T6690] overlayfs: ...falling back to metacopy=off. [ 429.635250][ T6690] overlayfs: ...falling back to index=off. [ 429.635254][ T6690] overlayfs: ...falling back to uuid=null. [ 430.100391][ T6706] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 430.509195][ T6714] netlink: 'syz.3.234': attribute type 32 has an invalid length. [ 430.532472][ T6714] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 430.532706][ T6714] syz.3.234 uses obsolete (PF_INET,SOCK_PACKET) [ 431.100984][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.3.235'. [ 431.188907][ T6722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.235'. [ 431.272110][ T6719] net_ratelimit: 571 callbacks suppressed [ 431.861294][ T6735] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 431.861305][ T6735] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 431.861413][ T6735] overlayfs: failed to set uuid (82/file2, err=-13); falling back to uuid=null. [ 432.030494][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 432.030508][ T43] audit: type=1400 audit(1790359892.387:522): avc: denied { write } for pid=6738 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 432.031637][ T43] audit: type=1400 audit(1790359892.387:523): avc: denied { setopt } for pid=6738 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 432.032315][ T6742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 432.032897][ T6742] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 432.106180][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 432.320674][ T6751] binder: BINDER_SET_CONTEXT_MGR already set [ 432.320684][ T6751] binder: 6750:6751 ioctl 4018620d 200000000040 returned -16 [ 432.380444][ T6752] binder: 6750:6752 unknown command 0 [ 432.380455][ T6752] binder: 6750:6752 ioctl c0306201 200000000300 returned -22 [ 433.063047][ T6754] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 433.187184][ T6756] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 433.187205][ T6756] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 433.187226][ T6756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.189896][ T6756] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.189924][ T6756] overlayfs: failed to set xattr on upper [ 433.189928][ T6756] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.189934][ T6756] overlayfs: ...falling back to metacopy=off. [ 433.189938][ T6756] overlayfs: ...falling back to index=off. [ 433.189943][ T6756] overlayfs: ...falling back to uuid=null. [ 433.261819][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 433.261841][ T6760] netlink: 'syz.1.244': attribute type 7 has an invalid length. [ 433.261849][ T6760] netlink: 'syz.1.244': attribute type 8 has an invalid length. [ 433.261856][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 433.263392][ T43] audit: type=1400 audit(1790359893.617:524): avc: denied { create } for pid=6759 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 433.263717][ T43] audit: type=1400 audit(1790359893.617:525): avc: denied { write } for pid=6759 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 433.310852][ T6762] /dev/sr0: Can't open blockdev [ 433.357955][ T6764] bond1: Unable to set up delay as MII monitoring is disabled [ 433.362746][ T6764] bond1 (unregistering): Released all slaves [ 433.697663][ T6779] netlink: 72 bytes leftover after parsing attributes in process `syz.1.250'. [ 433.697685][ T6779] netlink: 336 bytes leftover after parsing attributes in process `syz.1.250'. [ 433.697693][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 433.748743][ T6782] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 433.748759][ T6782] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 433.748775][ T6782] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.755419][ T6782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.755446][ T6782] overlayfs: failed to set xattr on upper [ 433.755451][ T6782] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.755455][ T6782] overlayfs: ...falling back to metacopy=off. [ 433.755460][ T6782] overlayfs: ...falling back to index=off. [ 433.755464][ T6782] overlayfs: ...falling back to uuid=null. [ 433.816377][ T43] audit: type=1400 audit(1790359894.167:526): avc: denied { bind } for pid=6783 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.816763][ T43] audit: type=1400 audit(1790359894.167:527): avc: denied { listen } for pid=6783 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.818253][ T43] audit: type=1400 audit(1790359894.177:528): avc: denied { connect } for pid=6783 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.860874][ T43] audit: type=1400 audit(1790359894.217:529): avc: denied { ioctl } for pid=6789 comm="syz.3.254" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 433.862429][ T43] audit: type=1400 audit(1790359894.217:530): avc: denied { append } for pid=6789 comm="syz.3.254" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.902912][ T6790] loop5: detected capacity change from 0 to 4095 [ 433.958910][ T6790] Buffer I/O error on dev loop5, logical block 511, async page read [ 433.960657][ T5801] Buffer I/O error on dev loop5, logical block 511, async page read [ 434.093353][ T6799] netlink: 176 bytes leftover after parsing attributes in process `syz.3.256'. [ 434.093949][ T6799] netlink: 58 bytes leftover after parsing attributes in process `syz.3.256'. [ 434.330134][ T6809] device-mapper: ioctl: name not supplied when creating device [ 434.330258][ T43] audit: type=1400 audit(1790359894.687:531): avc: denied { ioctl } for pid=6804 comm="syz.3.257" path="/94/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 435.505441][ T6822] lo speed is unknown, defaulting to 1000 [ 435.508483][ T6822] lo speed is unknown, defaulting to 1000 [ 435.513259][ T6822] lo speed is unknown, defaulting to 1000 [ 435.587155][ T5762] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 435.658595][ T6822] infiniband sz1: set active [ 435.658609][ T6822] infiniband sz1: added lo [ 435.659128][ T1034] lo speed is unknown, defaulting to 1000 [ 435.672275][ T6822] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 435.672313][ T6822] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 435.672349][ T6822] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 435.712657][ T6822] RDS/IB: sz1: added [ 435.713023][ T6822] smc: adding ib device sz1 with port count 1 [ 435.713112][ T6822] smc: ib device sz1 port 1 has no pnetid [ 435.715763][ T5907] lo speed is unknown, defaulting to 1000 [ 435.722227][ T6822] lo speed is unknown, defaulting to 1000 [ 435.770369][ T5762] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 435.771181][ T5762] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 435.771194][ T5762] usb 6-1: config 1 has no interface number 0 [ 435.780300][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.780315][ T5762] usb 6-1: Product: syz [ 435.780328][ T5762] usb 6-1: Manufacturer: syz [ 435.780341][ T5762] usb 6-1: SerialNumber: syz [ 435.787116][ T1034] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 435.793759][ T5762] usb 6-1: 3:0 : does not exist [ 435.793773][ T5762] usb 6-1: 3:0 : does not exist [ 435.939504][ T1034] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 435.944545][ T1034] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.944562][ T1034] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.944602][ T1034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.952786][ T1034] usb 8-1: config 0 descriptor?? [ 436.029939][ T6822] lo speed is unknown, defaulting to 1000 [ 436.044973][ T852] usb 6-1: USB disconnect, device number 6 [ 436.195434][ T6820] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.211006][ T6829] netlink: 80 bytes leftover after parsing attributes in process `syz.3.261'. [ 436.212246][ T6829] FAT-fs (nullb0): bogus number of reserved sectors [ 436.212258][ T6829] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 436.347814][ T6822] lo speed is unknown, defaulting to 1000 [ 436.517090][ C2] net_ratelimit: 98 callbacks suppressed [ 436.536155][ T6826] lo speed is unknown, defaulting to 1000 [ 436.703471][ T6822] lo speed is unknown, defaulting to 1000 [ 436.756619][ T6831] binder: 6830:6831 ioctl c0306201 200000000000 returned -22 [ 436.848296][ T6835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.949318][ T6841] netlink: 52 bytes leftover after parsing attributes in process `syz.1.266'. [ 437.005109][ T6843] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 437.005130][ T6843] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 437.136627][ T5947] usb 8-1: USB disconnect, device number 5 [ 437.456466][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 437.456475][ T43] audit: type=1400 audit(1790359897.807:534): avc: denied { read write } for pid=6859 comm="syz.1.271" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 437.456665][ T43] audit: type=1400 audit(1790359897.807:535): avc: denied { open } for pid=6859 comm="syz.1.271" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 437.486504][ T1034] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 437.516785][ T6862] kcov: kcov_start: t = ffff888058e4cb00, size = 524288, area = ffffc9002540a000 [ 437.516865][ T6862] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000065: 0000 [#1] SMP KASAN NOPTI [ 437.525231][ T6862] KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f] [ 437.528688][ T6862] CPU: 3 UID: 0 PID: 6862 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(full) [ 437.532322][ T6862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.536351][ T6862] RIP: 0010:wacom_intuos_irq+0x62b/0x3430 [ 437.538724][ T6862] Code: c3 cc cc cc cc e8 c5 4c f1 f8 48 8b 04 24 44 0f b6 c5 48 8d b8 28 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d4 27 00 00 48 8b 04 24 48 c7 c7 f8 e8 3e 91 48 [ 437.546249][ T6862] RSP: 0018:ffffc900036df9e8 EFLAGS: 00010206 [ 437.548727][ T6862] RAX: dffffc0000000000 RBX: ffff88803f0a40ae RCX: ffffc9002540a000 [ 437.552104][ T6862] RDX: 0000000000000065 RSI: ffffffff891ad5eb RDI: 0000000000000328 [ 437.555481][ T6862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000011 [ 437.559140][ T6862] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 437.562443][ T6862] R13: ffff888059a0f048 R14: 0000000000000000 R15: 0000000000000021 [ 437.565752][ T6862] FS: 00007f6515ff66c0(0000) GS:ffff8880d5e52000(0000) knlGS:0000000000000000 [ 437.569582][ T6862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.572326][ T6860] __nla_validate_parse: 1 callbacks suppressed [ 437.572338][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 437.578777][ T43] audit: type=1400 audit(1790359897.937:536): avc: denied { read } for pid=5118 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 437.578810][ T43] audit: type=1400 audit(1790359897.937:537): avc: denied { search } for pid=5118 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.578828][ T43] audit: type=1400 audit(1790359897.937:538): avc: denied { write search } for pid=5118 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.578846][ T43] audit: type=1400 audit(1790359897.937:539): avc: denied { add_name } for pid=5118 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.578864][ T43] audit: type=1400 audit(1790359897.937:540): avc: denied { create } for pid=5118 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 437.578881][ T43] audit: type=1400 audit(1790359897.937:541): avc: denied { append open } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 437.578899][ T43] audit: type=1400 audit(1790359897.937:542): avc: denied { getattr } for pid=5118 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 437.637140][ C2] nf_nat: Already setup manip DST for ct ffff88803d41a600 (status bits 0x188) [ 437.637197][ C2] nf_nat: Already setup manip SRC for ct ffff88803d41a600 (status bits 0x188) [ 437.637367][ C2] nf_nat: Already setup manip DST for ct ffff88803d41a600 (status bits 0x188) [ 437.637391][ C2] nf_nat: Already setup manip SRC for ct ffff88803d41a600 (status bits 0x188) [ 437.653422][ T6862] CR2: 00007f6515ff5ff8 CR3: 000000002c32a000 CR4: 0000000000352ef0 [ 437.656649][ T6862] Call Trace: [ 437.658149][ T6862] [ 437.659417][ T6862] wacom_wac_irq+0x196b/0xab80 [ 437.661434][ T6862] ? lock_acquire+0x1d1/0x380 [ 437.663423][ T6862] ? __lock_acquire+0xe8b/0x1f40 [ 437.665493][ T6862] ? __pfx_wacom_wac_irq+0x10/0x10 [ 437.667714][ T6862] ? __lock_acquire+0x5c0/0x1f40 [ 437.669722][ T6862] wacom_raw_event+0x6bb/0xba0 [ 437.671625][ T6862] ? mark_held_locks+0x40/0x70 [ 437.673543][ T6862] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 437.675895][ T6862] ? lockdep_hardirqs_on+0x7d/0x110 [ 437.677992][ T6862] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 437.680344][ T6862] __hid_input_report.constprop.0+0x319/0x470 [ 437.682788][ T6862] ? __pfx_wacom_raw_event+0x10/0x10 [ 437.684988][ T6862] uhid_char_write+0xb6b/0x10e0 [ 437.687067][ T6862] vfs_write+0x2aa/0x1050 [ 437.688812][ T6862] ? __pfx_uhid_char_write+0x10/0x10 [ 437.690945][ T6862] ? lock_acquire+0x1d1/0x380 [ 437.692841][ T6862] ? __fget_files+0x34/0x3d0 [ 437.694698][ T6862] ? __pfx_vfs_write+0x10/0x10 [ 437.696577][ T6862] ? find_held_lock+0x2b/0x80 [ 437.698527][ T6862] ? __fget_files+0x215/0x3d0 [ 437.700440][ T6862] ? __fget_files+0x215/0x3d0 [ 437.702372][ T6862] ? __fget_files+0x21f/0x3d0 [ 437.704368][ T6862] ksys_write+0x1f8/0x250 [ 437.706218][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 437.708283][ T6862] ? kcov_ioctl+0x17a/0x760 [ 437.710205][ T6862] do_syscall_64+0x123/0x790 [ 437.712159][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.714628][ T6862] RIP: 0033:0x7f6517d9e159 [ 437.716502][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.724547][ T6862] RSP: 002b:00007f6515ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.727981][ T6862] RAX: ffffffffffffffda RBX: 00007f6518026090 RCX: 00007f6517d9e159 [ 437.731027][ T6862] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 437.734059][ T6826] kcov: kcov_task_exit: t = ffff88802bd18000, kcov->t = ffff88802bd18000 [ 437.734327][ T5846] kernfs bonding_masters: removing [ 437.734422][ T6829] kcov: kcov_task_exit: t = ffff88802d9c2580, kcov->t = ffff88802d9c2580 [ 437.743456][ T6862] RBP: 00007f6517e3506b R08: 0000000000000000 R09: 0000000000000000 [ 437.746883][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.750049][ T6862] R13: 00007f6518026128 R14: 00007f6518026090 R15: 00007fffd3677e68 [ 437.753165][ T6862] [ 437.754429][ T6862] Modules linked in: [ 437.756539][ T6862] ---[ end trace 0000000000000000 ]--- [ 437.757171][ T6822] kcov: kcov_task_exit: t = ffff8880367dcb00, kcov->t = ffff8880367dcb00 [ 437.762793][ T6862] RIP: 0010:wacom_intuos_irq+0x62b/0x3430 [ 437.762829][ T6862] Code: c3 cc cc cc cc e8 c5 4c f1 f8 48 8b 04 24 44 0f b6 c5 48 8d b8 28 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d4 27 00 00 48 8b 04 24 48 c7 c7 f8 e8 3e 91 48 [ 437.762847][ T6862] RSP: 0018:ffffc900036df9e8 EFLAGS: 00010206 [ 437.762863][ T6862] RAX: dffffc0000000000 RBX: ffff88803f0a40ae RCX: ffffc9002540a000 [ 437.762874][ T6862] RDX: 0000000000000065 RSI: ffffffff891ad5eb RDI: 0000000000000328 [ 437.762884][ T6862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000011 [ 437.762894][ T6862] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 437.762904][ T6862] R13: ffff888059a0f048 R14: 0000000000000000 R15: 0000000000000021 [ 437.762914][ T6862] FS: 00007f6515ff66c0(0000) GS:ffff8880d5e52000(0000) knlGS:0000000000000000 [ 437.762946][ T6862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.762962][ T6862] CR2: 00007f6515ff5ff8 CR3: 000000002c32a000 CR4: 0000000000352ef0 [ 437.762979][ T6862] Kernel panic - not syncing: Fatal exception [ 437.804504][ T6862] Kernel Offset: disabled [ 437.805912][ T6862] Rebooting in 86400 seconds..