last executing test programs: 38.239180573s ago: executing program 0 (id=1328): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x100000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001f00)={'syz_tun\x00', &(0x7f0000001e80)=@ethtool_coalesce={0xe, 0x2, 0x2, 0x4, 0x1, 0x5, 0xd, 0xfff, 0x200, 0xce2, 0x8, 0x3, 0x4, 0x8, 0x80000000, 0x5, 0x8, 0x7, 0x0, 0x401, 0x8, 0x7, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x24}}, 0x0) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x1, 0x4002004c1, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x7ee7) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_pidfd_open(r4, 0x0) getpgid(r4) 38.016220585s ago: executing program 0 (id=1330): r0 = io_uring_setup(0x54d5, &(0x7f0000000000)={0x0, 0x48d0, 0x2000, 0x2, 0x37e}) io_uring_enter(r0, 0x46c5, 0x2238, 0x6a, &(0x7f0000000080)={[0x5]}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') preadv(r1, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) 37.939176587s ago: executing program 0 (id=1331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x20, {{0x9, 0xac8, 0x20000000, 0x3, 0x1996}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 37.739227426s ago: executing program 0 (id=1332): socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000015, 0x80005, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0xffff8100}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 37.678341287s ago: executing program 0 (id=1334): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000440), 0x800) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0x1}}) r2 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/wireless\x00') pread64(r3, &(0x7f0000000040)=""/30, 0x1e, 0x8001) read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000000)=""/101) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/158, 0x9e, 0x0, &(0x7f00000002c0)=""/47, 0x2f}}, 0x10) 37.629101457s ago: executing program 0 (id=1335): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x8}) r3 = socket(0x2, 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r5, 0x1, 0x8, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000180)={0x9000, 0x104000}) r11 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r11, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r11, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x1}) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r12 = accept$alg(r10, 0x0, 0x0) splice(r8, 0x0, r12, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r7, &(0x7f0000001040)=ANY=[], 0xfffffe3e) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 22.637107815s ago: executing program 32 (id=1335): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x8}) r3 = socket(0x2, 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_int(r5, 0x1, 0x8, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000180)={0x9000, 0x104000}) r11 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r11, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r11, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x1}) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r12 = accept$alg(r10, 0x0, 0x0) splice(r8, 0x0, r12, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r7, &(0x7f0000001040)=ANY=[], 0xfffffe3e) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 9.976155685s ago: executing program 2 (id=1695): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], 0x0, 0x46, 0x0, 0x7, 0x2}, 0x28) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001d}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "d9f5b7980da79c4ccb662de4e19184e50c6c080fda65f5bc7a666198a47b1bf38d31ce99c5d6db2d21e739483744f37fd814d704ece9f86adb31029e586ffa05", 0x3d}, 0x48, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x114, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) unshare(0x20000800) 9.8812707s ago: executing program 2 (id=1696): r0 = socket$inet6(0xa, 0x80002, 0x2) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x102}], 0x1}}], 0x1, 0x4001c00) socket$inet6(0xa, 0x80002, 0x2) (async) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xff, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) recvmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x0, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="bc9ad5ba82b2cbac602c1f5445ec16bd6907283472caf491071378a8177ecb02a176a2ad3a813f40ec5feba6e46346fab760d29dc4eeb7ce9f1583a549f756b3ff0464506f3362c966c5fa44fa7d791b0c256336fa548ed3c7e60d1b6dd9b7201e9598cde7175979a98cc32550e3f42164be09e2d46c7910bc111656eb94e129a55daea022e4b4339bbe509897203eaf7f8c15089763b24cf2c0c12c632eee5175dfa1288b9b9ce209d1756edcc62ce9516be044126754d7455defd92e40940b98d5de6fa4739cead44b56502548db2b796848983d644f88fcb8f61774119f938eb9ef0e9a7b8013e171a143d8c7dbb1ba7b1c1dc1ccea7d5d7f61a9c3586c2c6aab", 0x102}], 0x1}}], 0x1, 0x4001c00) (async) 2.378522857s ago: executing program 1 (id=1775): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000009010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.378325447s ago: executing program 1 (id=1776): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xf000000, @loopback}, 0x1c) 1.519312241s ago: executing program 2 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000041100001c00128009000100626f6e64000000000c00028005001d0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.517837225s ago: executing program 1 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x1100) 1.449072482s ago: executing program 2 (id=1781): creat(&(0x7f0000000100)='./file0\x00', 0x7a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x3, 0x20, 0x4b1c, 0xfff7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x109081, 0x34) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 1.037003479s ago: executing program 3 (id=1783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x13, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.036425089s ago: executing program 1 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xac8, 0x20000000, 0x3, 0x1996}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x90}, 0x1, 0x700, 0x0, 0x10}, 0x0) 928.94774ms ago: executing program 3 (id=1785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x1, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x0, 0x80000, r0}) r4 = getpgid(0x0) r5 = getegid() getresuid(&(0x7f0000002cc0)=0x0, &(0x7f0000002d00), &(0x7f0000002d40)) fstat(r0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) stat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x7, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r11, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r11, r12, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002f80)={0x5, 0x40, {}, {0xffffffffffffffff}, 0x1, 0x9}) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r15, r16, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000003300)=[0x0, 0xee01, 0x0]) fstat(r1, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_fuse_handle_req(r3, &(0x7f0000000840)="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", 0x2000, &(0x7f00000036c0)={&(0x7f0000002840)={0x50, 0x0, 0x5d, {0x7, 0x2d, 0xb8d, 0x200000, 0x9, 0xd, 0x7, 0x10000, 0x0, 0x0, 0x4, 0x7}}, &(0x7f00000028c0)={0x18, 0x0, 0x8, {0x588}}, &(0x7f0000002900)={0x18, 0x0, 0x1, {0xfffffffffffffff9}}, &(0x7f0000002940)={0x18, 0x0, 0x2, {0x32d2}}, &(0x7f0000002980)={0x18, 0xffffffffffffffda, 0x8, {0x7}}, &(0x7f00000029c0)={0x28, 0x2f, 0x5a, {{0x3a281203, 0x1, 0x2, r4}}}, &(0x7f0000002a00)={0x60, 0xfffffffffffffff5, 0x2726, {{0x1000, 0x5, 0x5, 0x1, 0x6b4, 0x0, 0x1, 0x7}}}, &(0x7f0000002a80)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000002ac0)={0x11, 0xfffffffffffffffe, 0x0, {'\x00'}}, &(0x7f0000002b00)={0x20, 0xffffffffffffffda, 0xd41}, &(0x7f0000002b40)={0x78, 0x0, 0x0, {0x3, 0x800, 0x0, {0x4, 0x8, 0x3, 0x3, 0x5f50b9b7, 0x7, 0x3, 0xfffffffc, 0x4, 0xa000, 0x7, 0x0, r5, 0x4, 0x10000}}}, &(0x7f0000002bc0)={0x90, 0x26, 0x1, {0x3, 0x1, 0x8, 0x1, 0x97c, 0x1, {0x0, 0x4, 0x400, 0x6, 0x100, 0x7, 0xad, 0xfffffffc, 0x2, 0xc000, 0x0, 0x0, 0xffffffffffffffff, 0x5a4d, 0x8}}}, &(0x7f0000002c80)={0x30, 0x0, 0x5, [{0x4, 0x8, 0x5, 0x7, 'l2tp\x00'}]}, &(0x7f0000002fc0)={0x330, 0x0, 0xfff, [{{0x2, 0x2, 0x8000000000000000, 0xfffffffffffffe1c, 0x13c5, 0x9, {0x1, 0x0, 0x9, 0x869, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x4, 0x4000, 0x0, r6, r7, 0x8, 0x9}}, {0x0, 0x7fff, 0x1, 0x2, '\x00'}}, {{0x0, 0x1, 0xbc7, 0x5, 0x40, 0x8001, {0x4, 0x9, 0x0, 0x3, 0x9, 0x7, 0x1000, 0x5, 0x7, 0x6000, 0xb, 0x0, 0xee00, 0x7e7, 0x9c}}, {0x6, 0x200, 0x0, 0x56}}, {{0x0, 0x0, 0x6, 0x4, 0x200, 0x524, {0x1, 0xfffffffffffffffb, 0xa, 0x96, 0x1, 0x3, 0x7, 0x9, 0xc, 0xc000, 0x80000000, r8, 0xee00, 0x9, 0x8}}, {0x2, 0x5, 0x5, 0xffff2f27, 'l2tp\x00'}}, {{0x2, 0x2, 0x6000, 0x0, 0xbc75, 0x6, {0x0, 0x1, 0xbc, 0x80, 0x10000, 0x4, 0x6, 0x1, 0x401, 0xc000, 0x0, r9, r12, 0x3, 0x8}}, {0x2, 0xf, 0x1, 0xf8, '\x00'}}, {{0x3, 0x0, 0xfa, 0x2, 0x2, 0xa4, {0x4, 0x8001, 0x8, 0x2, 0x6, 0x0, 0xff, 0x10001, 0xaca, 0xc000, 0xff, r13, 0xee00, 0x5, 0x3}}, {0x3, 0xc, 0x9, 0x0, 'net/unix\x00'}}]}, &(0x7f0000003340)={0xa0, 0xffffffffffffffda, 0x1, {{0x3, 0x3, 0x1, 0x40f, 0x3, 0x24, {0x0, 0x9, 0x6, 0x8, 0x400, 0x2, 0x0, 0x100, 0x34, 0x4000, 0xd9, r15, r17, 0x6}}, {0x0, 0x1}}}, &(0x7f0000003400)={0x20, 0xc5ae489b490a2ff5, 0xf, {0x10, 0x0, 0x11, 0x10}}, &(0x7f0000003580)={0x130, 0xffffffffffffffda, 0x8a3, {0x8, 0x10000, 0x0, '\x00', {0x4, 0x2, 0x7, 0x80, r18, r19, 0x6000, '\x00', 0x3, 0x3, 0x1ff, 0x80, {0x1, 0x1c00000}, {0x4}, {0x7fffffffffffffff}, {0xeac1, 0x6}, 0xa3f, 0x9, 0xfff, 0x6}}}}) r20 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r20, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) bind$tipc(r1, 0x0, 0x0) r21 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r21, &(0x7f0000000780)=""/185, 0xb9, 0x3c) 928.644595ms ago: executing program 1 (id=1786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9]}, &(0x7f0000000180)=0x54) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x1}, 0x0, 0xf8, 0x0, 0x4, 0x3, 'syz0\x00', "40ebe6bf150ed54c2cabee46381af4bd94c39db34c71105301d01d8a4e18965c", "4baf7479d627f28b36c4753bb6d5a75a9f865f910f543228af2e81cab736e419", [{0x7ad2, 0x8, {0x2, 0xffff}}, {0x5, 0x3, {0x6, 0x8}}, {0x5, 0x4, {0x1, 0xe}}, {0x1, 0x7, {0x0, 0x3}}, {0x101, 0x7, {0x0, 0x8}}, {0x1ff, 0x2, {0x1, 0x4}}, {0x3, 0x5, {0x2, 0x7}}, {0x7, 0x7f, {0x2, 0xc2}}, {0x7f, 0x8, {0x2, 0x72c2}}, {0x7, 0x1f5, {0x5, 0x3800000}}, {0x1000, 0xff00, {0x1, 0x10000f}}, {0x12fa, 0x4}, {0xfff7, 0x2, {0x0, 0xffffff01}}, {0x1, 0x1, {0x0, 0x4}}, {0x6, 0x33, {0x3, 0x2}}, {0x1000, 0x5481, {0x1, 0x800}}, {0x4, 0xe8, {0x0, 0x5}}, {0x3ff, 0x81, {0x1, 0x2}}, {0x0, 0x1, {0x3, 0xff}}, {0x35bd, 0x7ff, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x3ff}}, {0xcad, 0x1000, {0x1, 0x4}}, {0x2, 0xee1, {0x0, 0x7ff}}, {0x81, 0x3, {0x3, 0xfff}}, {0x3, 0x4bc, {0x1, 0x85}}, {0x4, 0x8001, {0x3, 0x4}}, {0x4, 0x9, {0x3, 0x2}}, {0x7ff, 0x3, {0x0, 0xffff}}, {0x7, 0x2, {0x1, 0xffffffff}}, {0x1, 0x4, {0x2, 0x7}}, {0x7962, 0xfe00, {0x2, 0x9}}, {0x0, 0x6c6, {0x0, 0x7}}, {0x3, 0xa, {0x2, 0x10000}}, {0x8, 0x2, {0x0, 0xffff}}, {0x2, 0x2, {0x2, 0x8}}, {0xe68e, 0x909, {0x2, 0x7fffffff}}, {0x62, 0x7, {0x2, 0x7}}, {0x5, 0x5, {0x2, 0x8}}, {0x7, 0x80, {0x2, 0x3}}, {0x5, 0x3, {0x2, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, r5, 0x10, 0x6, 0x8, 0x8, {0x9, 0x2, 0x5, 0x49a5, 0x8001, 0x6d6e, 0x5, 0xff81, 0x0, 0x4, 0x101, 0x81, 0x2, 0x0, "841ba70deb5a469e5515309d376615f079585bb928bb77969c21a54e0d4316fe"}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) 927.040141ms ago: executing program 3 (id=1787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "a6cbe1aaf6a7a4cc263fbfa1781b59333b0c3d057eb18b099c2532413b7f2154176c8820c5e9ae4aecd2fe554e3a64beba6f23fb80a24a10efce01ced229af32", 0x20}, 0x48, 0xfffffffffffffffa) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60f9edff17183a00fe8000000000000000000000000000bbff0200000000000000000000000000018a0090781000ffff000000000000000000000000000000012cad7441aa948195f2977917b21cbb556f076f2d6d062e6b817f2047972c1e9ea1cb76d29730e3d03a617ed19f408ef01d21039f852d9dc213c54666b879"], 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYBLOB="8e2025ced48847e82c8289177b869f9e3142fad9fcb1f59580fd5fcd089303ab6eac3117781b15d13d442ae15d81555b8f3c54163baabab4e835850dd1341368a11a772a6add3801a5e1f0a4876fe433225158c76eae0517036515cfa3dae6097e0a5d3dc22fdbac46e6ae410c3219701f4341393a0731aa391340371ed1c6e503497c11263ec9714a26fcb7b2c2f434b1bacc99a49792c8c502b266b51b40d3197112ffe761eace1d324ea3845c19b5c3a188500312c68227"], 0x2f, 0xfffffffffffffffe) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000001000010400005400000000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x884) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r9 = syz_open_dev$vcsu(&(0x7f0000000500), 0xfffffffffffffff9, 0x400000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x140e, 0x400, 0x10001, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$I2C_SLAVE(r3, 0x703, 0x60) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000040), 0x702e4fb593b45909, 0xfffffffffffffffe) 829.21092ms ago: executing program 1 (id=1788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x10000000, @loopback}, 0x1c) 828.351257ms ago: executing program 3 (id=1789): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@rand_addr, @remote, 0x0}, &(0x7f00000002c0)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x8, 0x0}, 0x8) r6 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x13, 0x1402) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, 0xffffffffffffffff}, 0x4) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000800)=0xffffffc0, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0x4, 0xb, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x17, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x6}, 0x10, r5, r6, 0x7, &(0x7f00000006c0)=[r0, r1, r1, r7, r1, r2, r8, r10], &(0x7f0000000700)=[{0x5, 0x4, 0x1, 0x8}, {0x3, 0x4, 0xd, 0x8}, {0x1, 0x1, 0xa, 0x6}, {0x5, 0x3, 0x5, 0x4}, {0x4, 0x4, 0xc, 0xd}, {0x5, 0x5, 0x1, 0x9}, {0x3, 0x4, 0x7, 0xb}], 0x10, 0x400}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r13) sendmsg$NLBL_CALIPSO_C_LIST(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) r15 = socket$packet(0x11, 0x2, 0x300) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r6}, 0x94) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000180)=r17, 0x4) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000840)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001600ffffff6f70000000000017"], 0x14}, 0x1, 0x0, 0x0, 0x25238faddd3d601f}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 827.237537ms ago: executing program 3 (id=1790): mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',']) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) syz_clone(0x8002011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=ANY=[], 0x60}}, 0x8000) syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r5) shutdown(r0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000340)=ANY=[], 0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b80), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x50, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50}}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20008c00) 645.867201ms ago: executing program 4 (id=1793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x13, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 578.862033ms ago: executing program 2 (id=1794): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newchain={0x13d8, 0x64, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0x9, 0xa}, {0xb, 0x41c6e8be77fd85e8}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xf}, @filter_kind_options=@f_basic={{0xa}, {0x1378, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0x9, 0x2, 0x6, 0x4, 0x8, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}]}, @TCA_BASIC_EMATCHES={0x1198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0xf}, "3e2b2af038b526af0d11e67d0a5292c1216823bfb2b31b"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffe, 0x8, 0x1}, {0xfff8, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f4dcb4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="574af480e31b0ec9b1", @TCF_META_TYPE_VAR="80441a42e5", @TCF_META_TYPE_VAR="2bec658666ce", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CONTAINER={0x74, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x30c}, "0a06a983ca6bf5ec4389e685941d37b75610cb1a58e68d60883b1b7381f8e7882e7f32cab072f5ff62e3ce410e078a01f58b27462f0832c432f6c84b891effc69d92044fef9e0ba12cb6d678619fcb5fc368759dae457c424c08566c61b340f53f35143753f1cfe9"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0xfff8}, {0x80000000, 0x2, 0x597, 0x0, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x104c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x401}, {0x8, 0xa, 0x2, "174e7698e58aaea2bede"}}}, @TCF_EM_IPT={0x102c, 0x2, 0x0, 0x0, {{0x4, 0x9, 0xd}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "a2f276a166a204eb07b32963988468d7bf584cfe1228c9b6ab291d7eadcb43db6a3ffa62f23575e2810004cf7f969a716eb925c614ba09f1513ee57ecb838f32e8aaf453c91a1d58dc8d7542d7ef0ca6af294314ab723119519e4be94227e76aafa1342a4796ace25fbb73e4e753e7a768309bea941d17f1729362eacf17caef971e6757757a2670361806095ca0a315ec8d9a5b2f8bd10c725d77153acac27b5866e6178bed2114ef2d9dc2d040eb182a954bf59f24c60c6f3690d13c8de40a05a412f8495af922abd6c71d643f1e2cf5b4081e62470ccdaca5e36dc79f25d3cbd7dcf4026c2549681c9779e09734670317dbe120f513c831e27ff8407db4a0280b92f5daf9c3707f8ba1c328acc9a0c4f83a9581ae9cb24352a8a946b3923189f6ab734a936de4f991044ae036f63040f1a5c98ae20a3786caa7e74092cc457b5fc8659c2149951edc371cb8dd4591efd1bb3d438c52a1aa1b5f932882812412054e2ff4137c38c3d468b6df2e6a715134355261feedbcae79145a7248db23c2dbb293d21d4b97243d43d4e0cf79adbdd92d6ee2766fb1977c480f3c21d299de3716b85bf5286310c14d1520dbf77952d0c886e2ebb08a8a8ddce23e128df46f96f6ff359563fb20a68982a125523e3efeb390e86bf4b5b29f92a17f03d86513defd1bbde3aa0bc887e9b42d4e353e3a1b32e2cb8dc8bf00d97e3bf408e61e2abde0462159d2431676503c41389b9d1c93b70da3f26aedeb132afe6702ae0852a854dcf3e18ca515ac8a6f134cdf7648d86c4358d4410fa3d8b4221f4078896dc45f64e8765fa7da5c72a4cc28e3a1ccf9d58e4d4cc8cd5fbd9bf617555ae883657321df47785954d37ef717905a407c5f046157bdca2761e0521682220ad5b04b962888d7e16ebdb34994f00cb94adce8a2c74ddb0f9dd609bb0f576f016158b12cf689ffcf4b3f0dbf20ff48c782c3214cc12a8c0f7a015baa8f3d0846a61a86fb0f1c8fcd1046fe71c33626b9f5250a818b1d4d87d68f829059996b15ea5ca556290b0edb2aceb9a9ee412319c4f2ad392ca78eef1c69409c237ff0ca8da52033bdcfeda1b7ed9e9b4f7cdf2111b476b2806ae8664279a6488cc92643a0422e8b00679c1515c4b3318f3e862fa4bd5bc7b62300ae394bf819510f3820ab4d25cd6faf7e1ea92c3b5194b954a77ca149a67f59fb3e908a5a54b22181c90cad5fefaf8710bd47590080c4a2e0f51ee0befbf4d07cfabbabfc7dc4abaac2e33627d24ef4c4a2c3b8662b324c79534bc65615200a920e6738649a8926bd5235a9a54e3ee996712d790d2574ed9d01f03313ee7083dba079679ea0e7a2806cda87115140d5a6c4d24e6a128abea77997db50d95c0e094b7c895b58e30b11497cd1d79d54a969e5ab14d35770281319d2c48a14389f7bc073a716c8e51014bdf7fc08659421d0f200ddb655bdff766a1d5e6da615a880782c44c980da6109d390a8ab76e816cee487e90328e9b21c65819ef6bf746b5c52c7b45654b09316eb4282ba76849ace0c77c035ac47a044775ac7800799fc773d1f83aa76459ca073d239818fc8d92c3e5406da9696ebbc1fe5a0646d92a1f1fea85a83fee8c751e948c7349aefd55c220f67366c90118b200bbca36a2b2236d4469c6d884b72c403c00f25bafd97693ae9c4ab0867b20a5f1e2e7f339b8bb164d0eb15043cc947858456a735ceb8fb35f44de696b878fcc0e8398b72a8fea0ce26b3a08095adc97c2ae371786134ef77092fd3ef49f0c55c2565739feb30b806bbb5d0e2afe029757184f1809e376fc7ff806636c82ed797801949ca9021304af35c884693c5461c84a3597dc2a47690be2ab68cb6001bfef89a2a3693369da5740a795cc255c707c227f41fcb82468620805e4596d4acdbddefbce61e1389ea75b75c582b386bd21d7bfa3dd6869e2f2bbd1efaf325beb22749ec02fab03f6eb8fb4e6760bd2e5d62142b64d52fb707c25c8b133d6ef6f6a6a38eebbdef84966e0781887bc931376d3089121aaa40df0081ed01429f1a40a40ab5a514f8d6f9c443195d29e87b170c7e1d2ebbac48f9bdd06cd9a71dbf666643519b054ab2b6e1f0cbab42623ae0f70f0cda676da164878cded3cd0e00144381f89282f34257b06dca5c160643fb05cbb3b18982a1e67fc8db44cf4ce21aa88573610479d7e82e9e214ed9499ab11f926a89a037e602985e6e13043a3fddf8d57db68cccf0f21a1a829a98c84998cfd0377ee0fc1b49ba4761ea85d56f9acb4c3b2dbf4642ba2d37494355ab91a4d8e6545008ee058ac82b0d1a58a2a288318b220fe657feca73f43df85bfcf94e5ad3bfd518c895c657bc24381a7d23b0fb58d39fcf31827ebc18b03ca7545a3878601a13858bfbfc56a3b4c828bf418cfeee37220e92e85f62abf7339ee313ec7a269a7d7e41372a009fdab048e60860b770ebb0d0adaaf15441cf54a0f806072d9add4171626dc11e175c5cbccd82469c9b7a38fc9d41e700f41529469211c123683cf529ec2e2c1c5b76310f2166622985ff4f3d3ae672d294cd180e17d267704fba4219ffafcb351435d9c6d50a83ebab04138840050cb539df03c0cdb769c16a4ddeea7c43f922ed0acc8b5d246ffd437022ae9902d6ff8a2911cbaf4ae11ebdcdda642e0d423a946e12722c4212bd21b1e5723838f9e65171a0e09ebe272c8b08e5b45ce7bdf42a81f4f977fbf1e8840a520bb66e09d0d119e68ee285e5d7f0779f2216b7a3fe1a5e4611542f3727344738260f7670b3b3fce00094925e08f82b0ea8adc1131d81a5ea585c953b356728942ebeb0ef264f073a6e77436a74e3d4c0e088b46d4de0550dc297efacabbc859b30f6f8dbc99f9fd725ee05f07625ad94e23d7c4268edf657c961d2b6cbd90e51edffe6f36f35b89f1a8b3872e047b4bafb8534a4423e6e7435cd7d38aac2ebc08cccb590bc00bf773b01b60192f8856c8129a48d98940dac12c0e2faebb9fcd0d22dd3f367ed4a20d2ce592a3bb0f5f9a45080829fdacef95dadc9f266911fd1533b163ce05ce2475b0cde61a428ab521c583bd157546476db1f7cb6fca94195b1a54f01d777c419bc430fcbc22002ea4e2700285032bc9ebbfd7c5131131d37e665d0e5da485eb3f2a3f8081e7c854f262b993f9cc0cd5482a31dc3ea2a081265a77735075a7a01e751abef0ef53c415dc38508ab4a8721b891273ec24882a4f162067085fd1dfc611ccf670dc5cf0b272cf24e7e7e68c897677b03deae48bc26ca9ddfed6020953adc4e4ddc65568d92252ae6934ae5018522ebf0e2cbf88567a67688e612920f6d3cd5aad387035d22fa8dd3a7195d7c45bd47529c0d308109c310a482adbd543e2481056327af26bc0059ef4edd1e5942383083af3aff32338bc252176cf3dd103014394221d338d002074c511635a81d658fca0da93c33922264f10b3758244492893d2049872c11f49e72eee1434f77e1b30c0e3243b18351feffb27a43874d06de9a0efeed8265f4a70b79495ad0e034b5b629d061f8885f257f910e61aef241ca494ef30fbd6e4d656c5f884f7379e2439373184748f8cbcc56d9c43115033d76ff2f3ae8a5baa905058ae4442e509154f79c55fef61a9d9da6017a5f695d2ac683fc0abdf169e8ddba61934b79f2cf1784b405fa854b421451369a855379c88c60d3b78cd80d1c13c4683b1f55a65ce88167592234531ad5577347f1826a4aaebe784aa212bf86057992790586b511da4ddf71789d26a2f4c925077c38e57bab10ca64f4fbb76830059085e129aa8e69befc2ee160048692c44d118e71aad36722c29215bd5d37affd8519e36be5268d74f71d195a59e5e8055f3902161ed00ceebd032be80104d39eda8173a13516f9452c2dcf41be7c3088675c91b5dcbf965adfd4227e50c3317cd4f5843ccd6ff8c6f39088c162be4e3ce324a20cb788ad05b376029570f8f31d889663ed13808ea8134d72ce0a8b8fe04de99736d14999737322a42422b4dd3966cfcee10c7aedb0ae051c2399e11de515db9432ca9dbf2679f1465748d14ac09cbdbb3de4a1074fa9565b7e3b138c99c18538817276c3f64636644960466953d6db1089eae54e8c6cc007c8dd5c65f3d9b30f3f62035fb6b236fe0bc2518987130a09025ad16b8ddcc3e95ca12ef0161723954e6580393c46ff8c045a925a3addaa8dd32ff126042ff2141e816ddc32ab426d228f662cf19ca644d65bb3d537e27e92444f4e53bc28bd355f73c456ea0acd5e84d149503c660066a044c5c8829e9d04ae1b6c89a3031b08b5a0b5b53db32d1ac9cf56ac19107bbc99b501313d1e277419ed6a95bc38f72886e66ef8a697cb1db0f3f11a9ca601cfd7c2b197092aa8b9786b87ffc344d51a2c8447336e47c87dc123d6c43ca3bdc28b70fe4d7d6d644f0d150e31323ec03a3e2215272484cdd3bf7b5ba0378a91fb16274118177d06b48912c76d604b452c7fe7fdec6bce35446db3b0694a962ab270b1ba17c786242c010f7a8814bbacbb4a4ed6a3bf21995e83cbe7313e45689cf678b4f2595237793baa4e01a0966833e01e2feacd82cf2df81eddb09e4fd105d3a587e66eabb0c9233469b30b6215446b794f7dfa3e5fb678c0fb5f1e201db8edc7a4c9e770ecf709123b084d6a48606b26d78916932c0eaf82828e4c3618d965ec50b23b569798ffef5ccba4372ad5167f9d069076213e92eaf95852bf63df2a8aba0cd2270b6d52c7ec3647ca76428d53f339fe65bb5d963701e1de9767536bf0b6c40864cc044b301c9db7cd2c7f2449be3b31a110700696c213e4a94156ab361633afbae7bae63f0903b485fc6005a2b7216600153d85d2ab3be082f0694f33c537533b9d1751e8a061174fb34d4b52cf9f2ca31b57f79fcea001060103041c98973f7dddd64324d336da95a0e7d709044db4df8bb9ebb26e4448d6fbb294268883c0a9925818dd6d691d5f569ae2300b7ac021bbf02c27931f6641612006bc02d79105486211492b883be20979591bb8bbe10a053a5c8a4b774e4cf64cbbfd811167c120003da1a887be3f4a375ad3c9835d7ec4ba27661c4d674a7b0030ca54d4e90e09668ee03eb5810ff5c352eee1a417a086903f9c18289d47301786531c75d79b6a6a7902c1a5e4faa01cf420a6f378357e95d3a2dd35ad328ac634257bfc5959162a5d712b7e4bdbd1c73d192ebccb7bd898aed85aa6aab555d422b739c04b0eba8da90cd26e7fb69c1dee9666337f1bb85e3a28acdd05d4113ebd499f4d0d90f2296c05d001dec14040261a43bd1b0c519c519ec50bc16c90b70e18221ccbbb9314cbb31fcf908d037a9a9113f351f5ee000bc846b7004711c74c9d47d200e44ebcffa6afa7da13fcac6edd5fc2f82a63cc2ef87a6acea47efff10e0d110e198341e5aa8bec0eb780d76bebe84f9436ee181f1b5147d68f441edce1ba372f0e47e7ee901927b07d8ee67980474f1349c58126893f5dd59ec8e28bf7b7c81403978fa37aa46593e5a89b3d5edd330804aa19ecfc910ddbfdd3060945d3e14a0fcd7d85306d816cd708a045d22c0b727b97a81457c97e3eafbbfb52f72601e3d7e92b609a0fa17020f7e32816f03726076c50c5abedb006e70a070ea45a6f974b20048f56c563aa315336887c84d0ee1d00f9bf2f19b5ab2018ec773c4df37703c738db5ba27990bdcc9659c63a891ce0f819e777ee005180f752ad5fc8662eee0d3fe8ac2a5d07b3945d191b3d73751c3b455bce46b0aedc"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_EMATCHES={0x1a0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xe}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7ff, 0x2, 0x5}, {0x400, 0x4, 0x1, "186f509c"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x6bfc}, {0x8000, 0x8, 0x3, 0x4, 0x5, 0x3d01c3c4961c6752, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf96b, 0x1, 0x4}, {0x3, 0x4, 0x7, 0x7, 0xc, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x2}, "810e047be24223030cdc59df91441210930af73fa6f6b884fdca2e525acf51b9b3e8ba5fe0fd07aec8b1e3e85616fd05a1fcb14139f90ba26cde5792913c75dc147894cd7eaa5de1e4942bcf7fad0d"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x2, 0xc}, {0x7, 0xa, 0x3, "20d7726d26c9ba053fca"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9d1, 0x2, 0x83}, {0x2, 0x4, 0x1, "9373c94d"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x65}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x872a, 0x3, 0x6}, {0x101, 0x3, 0x0, 0x10}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1e00, 0x7, 0x200}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x4}, {0x7, 0x8000, 0xfff5, 0x4, 0x4, 0x1}}}]}]}, @TCA_BASIC_POLICE={0x14, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6f}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x13d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 419.040696ms ago: executing program 4 (id=1795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xac8, 0x20000000, 0x3, 0x1996}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x90}, 0x1, 0x900, 0x0, 0x10}, 0x0) 298.763686ms ago: executing program 4 (id=1796): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c102, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x10001, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_aout(r2, 0x0, 0xffffffdb) 298.530755ms ago: executing program 4 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r2, &(0x7f0000000040)="02", 0xfffffda3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv4_getnetconf={0x1c, 0x52, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xfa2b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40802}, 0x8040) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) (async) write$dsp(r2, &(0x7f0000000040)="02", 0xfffffda3) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async) close(r2) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv4_getnetconf={0x1c, 0x52, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xfa2b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40802}, 0x8040) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) 159.027691ms ago: executing program 4 (id=1798): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, r0, 0xc4f32000) 158.598622ms ago: executing program 4 (id=1799): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vlan0\x00', @broadcast}) clock_gettime(0x0, &(0x7f0000005480)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000053c0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/170, 0xaa}], 0x3, &(0x7f0000001700)=""/143, 0x8f}, 0x40}, {{&(0x7f00000017c0)=@un=@abs, 0x80, &(0x7f0000004180)=[{&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/87, 0x57}, {&(0x7f0000001980)=""/53, 0x35}, {&(0x7f00000019c0)=""/179, 0xb3}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/140, 0x8c}, {&(0x7f0000002fc0)=""/251, 0xfb}, {&(0x7f00000030c0)=""/137, 0x89}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x9, &(0x7f0000004240)=""/128, 0x80}, 0x7}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/60, 0x3c}], 0x2, &(0x7f00000043c0)=""/4096, 0x1000}, 0x1}], 0x3, 0x120, &(0x7f00000054c0)={r3, r4+60000000}) write$tun(r1, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e1e, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}}}}}, 0x32) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vlan0\x00', @broadcast}) (async) clock_gettime(0x0, &(0x7f0000005480)) (async) recvmmsg(r2, &(0x7f00000053c0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/170, 0xaa}], 0x3, &(0x7f0000001700)=""/143, 0x8f}, 0x40}, {{&(0x7f00000017c0)=@un=@abs, 0x80, &(0x7f0000004180)=[{&(0x7f0000001840)=""/175, 0xaf}, {&(0x7f0000001900)=""/87, 0x57}, {&(0x7f0000001980)=""/53, 0x35}, {&(0x7f00000019c0)=""/179, 0xb3}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/140, 0x8c}, {&(0x7f0000002fc0)=""/251, 0xfb}, {&(0x7f00000030c0)=""/137, 0x89}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x9, &(0x7f0000004240)=""/128, 0x80}, 0x7}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/60, 0x3c}], 0x2, &(0x7f00000043c0)=""/4096, 0x1000}, 0x1}], 0x3, 0x120, &(0x7f00000054c0)={r3, r4+60000000}) (async) write$tun(r1, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e1e, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}}}}}, 0x32) (async) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) (async) 78.302637ms ago: executing program 3 (id=1800): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) r3 = socket(0x3, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a00010027bd7000fddbdb250a00000004af1f9e87af9fccfc000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000090104000000000072218ed7f00e34e375000900010073717a31000000"], 0x28}, 0x1, 0x0, 0x0, 0x2001c000}, 0xc000000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x2}, 0x0) 78.079286ms ago: executing program 2 (id=1801): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x1, 0x3, 0x35303553, 0x8, 0x0, [{0x7f, 0x5}, {0x2, 0x200}, {0x3, 0x7}, {0xcb5, 0x8c}, {0x5, 0x80000000}, {0x8000, 0x4c1}, {0x1, 0x4}, {0x3, 0x3}], 0x5, 0x4f, 0x8, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 33 (id=1801): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x1, 0x3, 0x35303553, 0x8, 0x0, [{0x7f, 0x5}, {0x2, 0x200}, {0x3, 0x7}, {0xcb5, 0x8c}, {0x5, 0x80000000}, {0x8000, 0x4c1}, {0x1, 0x4}, {0x3, 0x3}], 0x5, 0x4f, 0x8, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ndard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.094797][ T8579] Call Trace: [ 128.094804][ T8579] [ 128.094811][ T8579] dump_stack_lvl+0x100/0x190 [ 128.094852][ T8579] should_fail_ex.cold+0x5/0xa [ 128.094873][ T8579] ? prepare_alloc_pages+0x16d/0x5f0 [ 128.094897][ T8579] should_fail_alloc_page+0xeb/0x140 [ 128.094919][ T8579] prepare_alloc_pages+0x1f0/0x5f0 [ 128.094945][ T8579] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 128.094973][ T8579] ? rcu_is_watching+0x12/0xc0 [ 128.095001][ T8579] ? __lock_acquire+0x4a5/0x2630 [ 128.095027][ T8579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.095058][ T8579] ? do_raw_spin_lock+0x128/0x260 [ 128.095078][ T8579] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.095100][ T8579] ? find_held_lock+0x2b/0x80 [ 128.095132][ T8579] ? __lock_acquire+0x4a5/0x2630 [ 128.095150][ T8579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.095180][ T8579] ? policy_nodemask+0xed/0x4f0 [ 128.095201][ T8579] alloc_pages_mpol+0x1fb/0x550 [ 128.095222][ T8579] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 128.095241][ T8579] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 128.095278][ T8579] folio_alloc_mpol_noprof+0x36/0x340 [ 128.095302][ T8579] shmem_alloc_folio+0x135/0x160 [ 128.095327][ T8579] shmem_alloc_and_add_folio+0x371/0xd40 [ 128.095361][ T8579] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 128.095391][ T8579] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 128.095424][ T8579] shmem_get_folio_gfp+0x6ab/0x1900 [ 128.095457][ T8579] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 128.095483][ T8579] ? filemap_map_pages+0xe69/0x2020 [ 128.095510][ T8579] shmem_fault+0x1f9/0xa20 [ 128.095533][ T8579] ? __lock_acquire+0x4a5/0x2630 [ 128.095549][ T8579] ? __pfx_shmem_fault+0x10/0x10 [ 128.095579][ T8579] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.095613][ T8579] __do_fault+0x10d/0x550 [ 128.095635][ T8579] do_fault+0xabb/0x18e0 [ 128.095660][ T8579] __handle_mm_fault+0x1815/0x2b60 [ 128.095706][ T8579] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.095734][ T8579] ? pte_offset_map_lock+0x174/0x320 [ 128.095754][ T8579] ? find_held_lock+0x2b/0x80 [ 128.095786][ T8579] ? follow_page_pte+0x5b3/0x1400 [ 128.095818][ T8579] handle_mm_fault+0x36d/0xa20 [ 128.095848][ T8579] __get_user_pages+0xf9c/0x34d0 [ 128.095879][ T8579] ? __pfx___get_user_pages+0x10/0x10 [ 128.095908][ T8579] populate_vma_page_range+0x267/0x3f0 [ 128.095931][ T8579] ? __pfx_populate_vma_page_range+0x10/0x10 [ 128.095953][ T8579] ? __pfx_find_vma_intersection+0x10/0x10 [ 128.095974][ T8579] ? do_mmap+0x93f/0x12f0 [ 128.095997][ T8579] __mm_populate+0x107/0x3a0 [ 128.096020][ T8579] ? __pfx___mm_populate+0x10/0x10 [ 128.096043][ T8579] ? up_write+0x290/0x4f0 [ 128.096066][ T8579] vm_mmap_pgoff+0x37f/0x470 [ 128.096089][ T8579] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.096114][ T8579] ? __fget_files+0x215/0x3d0 [ 128.096135][ T8579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.096161][ T8579] ksys_mmap_pgoff+0xe1/0x650 [ 128.096183][ T8579] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 128.096198][ T8579] ? fput+0x79/0x100 [ 128.096220][ T8579] ? ksys_write+0x1ac/0x250 [ 128.096237][ T8579] ? __pfx_ksys_write+0x10/0x10 [ 128.096257][ T8579] __x64_sys_mmap+0x125/0x190 [ 128.096281][ T8579] do_syscall_64+0x106/0xf80 [ 128.096298][ T8579] ? clear_bhb_loop+0x40/0x90 [ 128.096321][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.096340][ T8579] RIP: 0033:0x7f0f1b59c819 [ 128.096357][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.096374][ T8579] RSP: 002b:00007f0f1c51a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.096392][ T8579] RAX: ffffffffffffffda RBX: 00007f0f1b815fa0 RCX: 00007f0f1b59c819 [ 128.096402][ T8579] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 128.096412][ T8579] RBP: 00007f0f1c51a090 R08: ffffffffffffffff R09: 000000006a855000 [ 128.096422][ T8579] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 128.096432][ T8579] R13: 00007f0f1b816038 R14: 00007f0f1b815fa0 R15: 00007ffd7d1608a8 [ 128.096458][ T8579] [ 128.299696][ T2343] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 128.320046][ T2343] usb 6-1: device descriptor read/8, error -71 [ 128.364846][ T40] audit: type=1400 audit(1775425877.045:6947): avc: denied { read } for pid=8570 comm="syz.2.831" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.373448][ T40] audit: type=1400 audit(1775425877.045:6948): avc: denied { open } for pid=8570 comm="syz.2.831" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.381578][ T40] audit: type=1400 audit(1775425877.055:6949): avc: denied { ioctl } for pid=8570 comm="syz.2.831" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.435623][ T8581] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 128.439879][ T2343] usb usb6-port1: unable to enumerate USB device [ 128.493065][ T8583] netlink: 'syz.0.836': attribute type 62 has an invalid length. [ 128.627829][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880575c1c00: rx timeout, send abort [ 128.632545][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880575c1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.640413][ T40] audit: type=1400 audit(1775425877.325:6950): avc: denied { read } for pid=5317 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 128.648934][ T40] audit: type=1400 audit(1775425877.325:6951): avc: denied { search } for pid=5317 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.657473][ T40] audit: type=1400 audit(1775425877.325:6952): avc: denied { search } for pid=5317 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.666759][ T40] audit: type=1400 audit(1775425877.325:6953): avc: denied { add_name } for pid=5317 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.674914][ T40] audit: type=1400 audit(1775425877.325:6954): avc: denied { create } for pid=5317 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.682586][ T40] audit: type=1400 audit(1775425877.325:6955): avc: denied { append open } for pid=5317 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.739694][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.889819][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 128.893488][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.898416][ T24] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 128.901486][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.903993][ T24] usb 5-1: Product: çœæ†Ÿäšè“ì¥ï§“昗몜îµàª‰çš²ã¨ã–¨ç§˜è‡€è†â¯¼äŸ“à¼áž£ë…ä¼¶î©ê«²ï½€ç¼¾î¡¬ç…€ä‡§â‘£ì“‚깽侔⌹⬬ꢦ﫭ㅡྜꆵ⻡⤨銲蹓⪯翰ãŠé«²à­žç‚·ë¹“슆é⦚撩﷡匤ំᯫ [ 128.910147][ T24] usb 5-1: Manufacturer: à   [ 128.911619][ T24] usb 5-1: SerialNumber: syz [ 129.143622][ T39] usb 7-1: USB disconnect, device number 25 [ 129.335435][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.340381][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 129.403316][ T24] usb 5-1: USB disconnect, device number 5 [ 129.762914][ T8605] FAULT_INJECTION: forcing a failure. [ 129.762914][ T8605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.767325][ T8605] CPU: 3 UID: 0 PID: 8605 Comm: syz.3.841 Not tainted syzkaller #0 PREEMPT(full) [ 129.767340][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.767346][ T8605] Call Trace: [ 129.767351][ T8605] [ 129.767356][ T8605] dump_stack_lvl+0x100/0x190 [ 129.767378][ T8605] should_fail_ex.cold+0x5/0xa [ 129.767390][ T8605] ? prepare_alloc_pages+0x16d/0x5f0 [ 129.767404][ T8605] should_fail_alloc_page+0xeb/0x140 [ 129.767417][ T8605] prepare_alloc_pages+0x1f0/0x5f0 [ 129.767432][ T8605] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 129.767448][ T8605] ? rcu_is_watching+0x12/0xc0 [ 129.767463][ T8605] ? __lock_acquire+0x4a5/0x2630 [ 129.767478][ T8605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 129.767496][ T8605] ? do_raw_spin_lock+0x128/0x260 [ 129.767509][ T8605] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.767521][ T8605] ? find_held_lock+0x2b/0x80 [ 129.767539][ T8605] ? __lock_acquire+0x4a5/0x2630 [ 129.767550][ T8605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.767567][ T8605] ? policy_nodemask+0xed/0x4f0 [ 129.767579][ T8605] alloc_pages_mpol+0x1fb/0x550 [ 129.767590][ T8605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 129.767602][ T8605] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 129.767622][ T8605] folio_alloc_mpol_noprof+0x36/0x340 [ 129.767636][ T8605] shmem_alloc_folio+0x135/0x160 [ 129.767650][ T8605] shmem_alloc_and_add_folio+0x371/0xd40 [ 129.767673][ T8605] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 129.767697][ T8605] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 129.767728][ T8605] shmem_get_folio_gfp+0x6ab/0x1900 [ 129.767759][ T8605] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 129.767786][ T8605] ? filemap_map_pages+0xe69/0x2020 [ 129.767805][ T8605] shmem_fault+0x1f9/0xa20 [ 129.767820][ T8605] ? __lock_acquire+0x4a5/0x2630 [ 129.767831][ T8605] ? __pfx_shmem_fault+0x10/0x10 [ 129.767855][ T8605] ? __pfx_filemap_map_pages+0x10/0x10 [ 129.767875][ T8605] __do_fault+0x10d/0x550 [ 129.767887][ T8605] do_fault+0xabb/0x18e0 [ 129.767901][ T8605] __handle_mm_fault+0x1815/0x2b60 [ 129.767920][ T8605] ? __pfx___handle_mm_fault+0x10/0x10 [ 129.767935][ T8605] ? pte_offset_map_lock+0x174/0x320 [ 129.767946][ T8605] ? find_held_lock+0x2b/0x80 [ 129.767965][ T8605] ? follow_page_pte+0x5b3/0x1400 [ 129.767979][ T8605] handle_mm_fault+0x36d/0xa20 [ 129.767996][ T8605] __get_user_pages+0xf9c/0x34d0 [ 129.768013][ T8605] ? __pfx___get_user_pages+0x10/0x10 [ 129.768029][ T8605] populate_vma_page_range+0x267/0x3f0 [ 129.768043][ T8605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 129.768055][ T8605] ? __pfx_find_vma_intersection+0x10/0x10 [ 129.768067][ T8605] ? do_mmap+0x93f/0x12f0 [ 129.768080][ T8605] __mm_populate+0x107/0x3a0 [ 129.768093][ T8605] ? __pfx___mm_populate+0x10/0x10 [ 129.768108][ T8605] ? up_write+0x290/0x4f0 [ 129.768121][ T8605] vm_mmap_pgoff+0x37f/0x470 [ 129.768135][ T8605] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 129.768148][ T8605] ? __fget_files+0x215/0x3d0 [ 129.768161][ T8605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.768176][ T8605] ksys_mmap_pgoff+0xe1/0x650 [ 129.768188][ T8605] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 129.768198][ T8605] ? fput+0x79/0x100 [ 129.768211][ T8605] ? ksys_write+0x1ac/0x250 [ 129.768220][ T8605] ? __pfx_ksys_write+0x10/0x10 [ 129.768231][ T8605] __x64_sys_mmap+0x125/0x190 [ 129.768244][ T8605] do_syscall_64+0x106/0xf80 [ 129.768254][ T8605] ? clear_bhb_loop+0x40/0x90 [ 129.768267][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.768278][ T8605] RIP: 0033:0x7f6d74f9c819 [ 129.768289][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.768299][ T8605] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 129.768310][ T8605] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 129.768317][ T8605] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 129.768323][ T8605] RBP: 00007f6d75f08090 R08: ffffffffffffffff R09: 0000000089f9b000 [ 129.768330][ T8605] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 129.768336][ T8605] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 129.768349][ T8605] [ 130.095993][ T8619] syz_tun: entered allmulticast mode [ 130.106361][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 130.129501][ T8619] syz_tun (unregistering): left allmulticast mode [ 130.292682][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 130.297990][ T8627] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 130.494637][ T8644] syzkaller0: entered promiscuous mode [ 130.496344][ T8644] syzkaller0: entered allmulticast mode [ 130.688212][ T8652] kvm: pic: non byte write [ 130.877366][ T8671] loop7: detected capacity change from 0 to 2640 [ 130.884271][ T6383] buffer_io_error: 64 callbacks suppressed [ 130.884282][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.892269][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.894634][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.896936][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.899266][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.902880][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.905158][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.907385][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.909746][ T6383] ldm_validate_partition_table(): Disk read failed. [ 130.911641][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.913858][ T6383] Buffer I/O error on dev loop7, logical block 0, async page read [ 130.916093][ T6383] Dev loop7: unable to read RDB block 0 [ 130.917882][ T6383] loop7: unable to read partition table [ 130.921358][ T8671] ldm_validate_partition_table(): Disk read failed. [ 130.923301][ T8671] Dev loop7: unable to read RDB block 0 [ 130.924983][ T8671] loop7: unable to read partition table [ 130.926769][ T8671] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 130.989165][ T8673] kvm: kvm [8672]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 130.993853][ T8673] kvm: kvm [8672]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 131.029494][ T8677] loop5: detected capacity change from 0 to 7 [ 131.037684][ T8677] Dev loop5: unable to read RDB block 7 [ 131.039437][ T8677] loop5: AHDI p1 [ 131.041291][ T8677] loop5: partition table partially beyond EOD, truncated [ 131.156196][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 131.186940][ T8691] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 131.237168][ T8694] syzkaller0: entered promiscuous mode [ 131.239505][ T8694] syzkaller0: entered allmulticast mode [ 131.283768][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 131.344990][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 131.442127][ T8705] binder: 8704:8705 ioctl 4018620d 0 returned -22 [ 131.444453][ T8705] binder: 8704:8705 ioctl c0306201 200000000240 returned -11 [ 131.573758][ T8718] loop6: detected capacity change from 0 to 7 [ 131.578661][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.585270][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.589179][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.593978][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.599639][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.602752][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.606061][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.609089][ T8718] ldm_validate_partition_table(): Disk read failed. [ 131.620467][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.623855][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.627153][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.631230][ T8718] Dev loop6: unable to read RDB block 0 [ 131.633919][ T8718] loop6: unable to read partition table [ 131.636590][ T8718] loop6: partition table beyond EOD, truncated [ 131.638824][ T8718] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 131.692200][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 131.697798][ T8727] syzkaller0: entered promiscuous mode [ 131.701036][ T8727] syzkaller0: entered allmulticast mode [ 131.881509][ T8744] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.887'. [ 131.889314][ T8744] 9pnet_fd: Insufficient options for proto=fd [ 131.942462][ T8745] kvm: pic: non byte write [ 132.109018][ T8751] tipc: Started in network mode [ 132.111061][ T8751] tipc: Node identity 4004, cluster identity 4711 [ 132.113515][ T8751] tipc: Node number set to 16388 [ 132.123409][ T8751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.889'. [ 132.126939][ T8751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.889'. [ 132.747997][ T8765] loop7: detected capacity change from 0 to 2640 [ 132.752171][ T8765] ldm_validate_partition_table(): Disk read failed. [ 132.754912][ T8765] Dev loop7: unable to read RDB block 0 [ 132.757053][ T8765] loop7: unable to read partition table [ 132.759254][ T8765] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 132.785855][ T5335] ldm_validate_partition_table(): Disk read failed. [ 132.788627][ T5335] Dev loop7: unable to read RDB block 0 [ 132.791450][ T5335] loop7: unable to read partition table [ 132.826109][ T8767] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 132.834124][ T8768] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 132.905248][ T8773] support for cryptoloop has been removed. Use dm-crypt instead. [ 133.362591][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 133.362607][ T40] audit: type=1400 audit(1775425882.045:7334): avc: denied { read } for pid=8800 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.370176][ T8803] lo: entered allmulticast mode [ 133.416968][ T8806] syzkaller0: entered promiscuous mode [ 133.418806][ T8806] syzkaller0: entered allmulticast mode [ 133.421532][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 133.430891][ T8802] lo: left allmulticast mode [ 133.432730][ T40] audit: type=1400 audit(1775425882.115:7335): avc: denied { read } for pid=8800 comm="syz.2.906" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.034814][ T8809] netlink: 596 bytes leftover after parsing attributes in process `syz.0.908'. [ 135.529650][ T8806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.539625][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.348883][ T8806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.460665][ T8823] binder: BINDER_SET_CONTEXT_MGR already set [ 136.463317][ T8823] binder: 8821:8823 ioctl 4018620d 200000001000 returned -16 [ 136.613813][ T8830] Bluetooth: MGMT ver 1.23 [ 136.614086][ T8828] FAULT_INJECTION: forcing a failure. [ 136.614086][ T8828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.619697][ T40] audit: type=1400 audit(1775425885.295:7336): avc: denied { read } for pid=8829 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.620967][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 136.631887][ T8828] CPU: 2 UID: 0 PID: 8828 Comm: syz.2.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.631920][ T8828] Tainted: [L]=SOFTLOCKUP [ 136.631926][ T8828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.631941][ T8828] Call Trace: [ 136.631985][ T8828] [ 136.631992][ T8828] dump_stack_lvl+0x100/0x190 [ 136.632036][ T8828] should_fail_ex.cold+0x5/0xa [ 136.632056][ T8828] ? prepare_alloc_pages+0x16d/0x5f0 [ 136.632080][ T8828] should_fail_alloc_page+0xeb/0x140 [ 136.632102][ T8828] prepare_alloc_pages+0x1f0/0x5f0 [ 136.632126][ T8828] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 136.632153][ T8828] ? rcu_is_watching+0x12/0xc0 [ 136.632179][ T8828] ? __lock_acquire+0x4a5/0x2630 [ 136.632207][ T8828] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.632233][ T8828] ? do_raw_spin_lock+0x128/0x260 [ 136.632252][ T8828] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.632272][ T8828] ? find_held_lock+0x2b/0x80 [ 136.632302][ T8828] ? __lock_acquire+0x4a5/0x2630 [ 136.632319][ T8828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.632346][ T8828] ? policy_nodemask+0xed/0x4f0 [ 136.632367][ T8828] alloc_pages_mpol+0x1fb/0x550 [ 136.632387][ T8828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.632404][ T8828] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 136.632435][ T8828] folio_alloc_mpol_noprof+0x36/0x340 [ 136.632479][ T8828] shmem_alloc_folio+0x135/0x160 [ 136.632505][ T8828] shmem_alloc_and_add_folio+0x371/0xd40 [ 136.632537][ T8828] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 136.632564][ T8828] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 136.632599][ T8828] shmem_get_folio_gfp+0x6ab/0x1900 [ 136.632630][ T8828] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 136.632657][ T8828] ? filemap_map_pages+0xe69/0x2020 [ 136.632689][ T8828] shmem_fault+0x1f9/0xa20 [ 136.632713][ T8828] ? __lock_acquire+0x4a5/0x2630 [ 136.632731][ T8828] ? __pfx_shmem_fault+0x10/0x10 [ 136.632759][ T8828] ? __pfx_filemap_map_pages+0x10/0x10 [ 136.632790][ T8828] __do_fault+0x10d/0x550 [ 136.632817][ T8828] do_fault+0xabb/0x18e0 [ 136.632842][ T8828] __handle_mm_fault+0x1815/0x2b60 [ 136.632873][ T8828] ? __pfx___handle_mm_fault+0x10/0x10 [ 136.632899][ T8828] ? pte_offset_map_lock+0x174/0x320 [ 136.632917][ T8828] ? find_held_lock+0x2b/0x80 [ 136.632947][ T8828] ? follow_page_pte+0x5b3/0x1400 [ 136.632973][ T8828] handle_mm_fault+0x36d/0xa20 [ 136.633002][ T8828] __get_user_pages+0xf9c/0x34d0 [ 136.633033][ T8828] ? __pfx___get_user_pages+0x10/0x10 [ 136.633060][ T8828] populate_vma_page_range+0x267/0x3f0 [ 136.633084][ T8828] ? __pfx_populate_vma_page_range+0x10/0x10 [ 136.633105][ T8828] ? __pfx_find_vma_intersection+0x10/0x10 [ 136.633124][ T8828] ? do_mmap+0x93f/0x12f0 [ 136.633146][ T8828] __mm_populate+0x107/0x3a0 [ 136.633169][ T8828] ? __pfx___mm_populate+0x10/0x10 [ 136.633191][ T8828] ? up_write+0x290/0x4f0 [ 136.633214][ T8828] vm_mmap_pgoff+0x37f/0x470 [ 136.633236][ T8828] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 136.633259][ T8828] ? __fget_files+0x215/0x3d0 [ 136.633280][ T8828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.633354][ T8828] ksys_mmap_pgoff+0xe1/0x650 [ 136.633377][ T8828] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 136.633395][ T8828] ? fput+0x79/0x100 [ 136.633417][ T8828] ? ksys_write+0x1ac/0x250 [ 136.633434][ T8828] ? __pfx_ksys_write+0x10/0x10 [ 136.633456][ T8828] __x64_sys_mmap+0x125/0x190 [ 136.633480][ T8828] do_syscall_64+0x106/0xf80 [ 136.633497][ T8828] ? clear_bhb_loop+0x40/0x90 [ 136.633520][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.633538][ T8828] RIP: 0033:0x7fb45ad9c819 [ 136.633556][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.633572][ T8828] RSP: 002b:00007fb45bd29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 136.633625][ T8828] RAX: ffffffffffffffda RBX: 00007fb45b015fa0 RCX: 00007fb45ad9c819 [ 136.633636][ T8828] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 136.633647][ T8828] RBP: 00007fb45bd29090 R08: ffffffffffffffff R09: 0000000089f9b000 [ 136.633658][ T8828] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 136.633669][ T8828] R13: 00007fb45b016038 R14: 00007fb45b015fa0 R15: 00007ffd6106bd78 [ 136.633695][ T8828] [ 136.665739][ T8833] netlink: 504 bytes leftover after parsing attributes in process `syz.3.917'. [ 136.839627][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 136.842739][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 136.844155][ T8840] netlink: 596 bytes leftover after parsing attributes in process `syz.3.920'. [ 136.845348][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.852075][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.855154][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.858257][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.864366][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.867357][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.888434][ T8847] syzkaller0: entered promiscuous mode [ 136.890507][ T8847] syzkaller0: entered allmulticast mode [ 136.924063][ T40] audit: type=1400 audit(1775425885.605:7337): avc: denied { nlmsg_read } for pid=8855 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.083928][ T24] usb 6-1: usb_control_msg returned -32 [ 137.086002][ T24] usbtmc 6-1:16.0: can't read capabilities [ 137.115015][ T8861] netlink: 'syz.0.926': attribute type 83 has an invalid length. [ 137.188560][ T40] audit: type=1400 audit(1775425885.865:7338): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 137.271850][ T2343] usb 6-1: USB disconnect, device number 12 [ 137.385348][ T8875] kvm: user requested TSC rate below hardware speed [ 137.391610][ T8875] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 137.398005][ T40] audit: type=1400 audit(1775425886.075:7339): avc: denied { setopt } for pid=8874 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.403620][ T8875] i2c i2c-1: dtv_property_process_set: SET cmd 0xf4f7fa85 undefined [ 137.552424][ T8880] FAULT_INJECTION: forcing a failure. [ 137.552424][ T8880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.556586][ T8880] CPU: 2 UID: 0 PID: 8880 Comm: syz.0.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.556603][ T8880] Tainted: [L]=SOFTLOCKUP [ 137.556607][ T8880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.556613][ T8880] Call Trace: [ 137.556670][ T8880] [ 137.556675][ T8880] dump_stack_lvl+0x100/0x190 [ 137.556706][ T8880] should_fail_ex.cold+0x5/0xa [ 137.556721][ T8880] _copy_from_iter+0x1f4/0x1690 [ 137.556788][ T8880] ? __pfx__copy_from_iter+0x10/0x10 [ 137.556804][ T8880] ? find_held_lock+0x2b/0x80 [ 137.556818][ T8880] ? dev_get_by_index+0x180/0x380 [ 137.556919][ T8880] ? dev_get_by_index+0x180/0x380 [ 137.556937][ T8880] packet_sendmsg+0x1dbd/0x53c0 [ 137.557005][ T8880] ? avc_has_perm+0xaa/0x1e0 [ 137.557054][ T8880] ? __pfx_avc_has_perm+0x10/0x10 [ 137.557065][ T8880] ? __lock_acquire+0x4a5/0x2630 [ 137.557079][ T8880] ? sock_has_perm+0x258/0x2f0 [ 137.557093][ T8880] ? __pfx_sock_has_perm+0x10/0x10 [ 137.557107][ T8880] ? __pfx_packet_sendmsg+0x10/0x10 [ 137.557127][ T8880] __sys_sendto+0x468/0x4b0 [ 137.557141][ T8880] ? __pfx_packet_sendmsg+0x10/0x10 [ 137.557154][ T8880] ? __pfx___sys_sendto+0x10/0x10 [ 137.557179][ T8880] ? ksys_write+0x1ac/0x250 [ 137.557189][ T8880] ? __pfx_ksys_write+0x10/0x10 [ 137.557201][ T8880] __x64_sys_sendto+0xe0/0x1c0 [ 137.557214][ T8880] ? do_syscall_64+0x95/0xf80 [ 137.557258][ T8880] ? lockdep_hardirqs_on+0x78/0x100 [ 137.557276][ T8880] do_syscall_64+0x106/0xf80 [ 137.557285][ T8880] ? clear_bhb_loop+0x40/0x90 [ 137.557298][ T8880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.557309][ T8880] RIP: 0033:0x7f0f1b59c819 [ 137.557319][ T8880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.557328][ T8880] RSP: 002b:00007f0f1c51a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.557363][ T8880] RAX: ffffffffffffffda RBX: 00007f0f1b815fa0 RCX: 00007f0f1b59c819 [ 137.557370][ T8880] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 137.557376][ T8880] RBP: 00007f0f1c51a090 R08: 0000200000000140 R09: 0000000000000014 [ 137.557382][ T8880] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 137.557387][ T8880] R13: 00007f0f1b816038 R14: 00007f0f1b815fa0 R15: 00007ffd7d1608a8 [ 137.557401][ T8880] [ 137.609801][ T5287] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.658695][ T8882] loop7: detected capacity change from 0 to 2640 [ 137.661617][ T8882] buffer_io_error: 84 callbacks suppressed [ 137.661627][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.666180][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.668741][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.671642][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.674559][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.677207][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.680163][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.682823][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.685378][ T8882] ldm_validate_partition_table(): Disk read failed. [ 137.687541][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.690156][ T8882] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.692974][ T8882] Dev loop7: unable to read RDB block 0 [ 137.694881][ T8882] loop7: unable to read partition table [ 137.696840][ T8882] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 137.714687][ T5335] ldm_validate_partition_table(): Disk read failed. [ 137.716909][ T5335] Dev loop7: unable to read RDB block 0 [ 137.718812][ T5335] loop7: unable to read partition table [ 137.867379][ T40] audit: type=1400 audit(1775425886.545:7340): avc: denied { shutdown } for pid=8883 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.893781][ T40] audit: type=1400 audit(1775425886.575:7341): avc: denied { connect } for pid=8883 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.914675][ T8893] FAULT_INJECTION: forcing a failure. [ 137.914675][ T8893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.918814][ T8893] CPU: 3 UID: 0 PID: 8893 Comm: syz.1.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.918830][ T8893] Tainted: [L]=SOFTLOCKUP [ 137.918834][ T8893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.918840][ T8893] Call Trace: [ 137.918845][ T8893] [ 137.918850][ T8893] dump_stack_lvl+0x100/0x190 [ 137.918871][ T8893] should_fail_ex.cold+0x5/0xa [ 137.918884][ T8893] ? prepare_alloc_pages+0x16d/0x5f0 [ 137.918898][ T8893] should_fail_alloc_page+0xeb/0x140 [ 137.918911][ T8893] prepare_alloc_pages+0x1f0/0x5f0 [ 137.918925][ T8893] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 137.918942][ T8893] ? rcu_is_watching+0x12/0xc0 [ 137.918957][ T8893] ? __lock_acquire+0x4a5/0x2630 [ 137.918972][ T8893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.918990][ T8893] ? do_raw_spin_lock+0x128/0x260 [ 137.919003][ T8893] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.919015][ T8893] ? find_held_lock+0x2b/0x80 [ 137.919036][ T8893] ? __lock_acquire+0x4a5/0x2630 [ 137.919047][ T8893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.919064][ T8893] ? policy_nodemask+0xed/0x4f0 [ 137.919076][ T8893] alloc_pages_mpol+0x1fb/0x550 [ 137.919088][ T8893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.919099][ T8893] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 137.919119][ T8893] folio_alloc_mpol_noprof+0x36/0x340 [ 137.919133][ T8893] shmem_alloc_folio+0x135/0x160 [ 137.919147][ T8893] shmem_alloc_and_add_folio+0x371/0xd40 [ 137.919166][ T8893] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 137.919184][ T8893] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 137.919203][ T8893] shmem_get_folio_gfp+0x6ab/0x1900 [ 137.919222][ T8893] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 137.919239][ T8893] ? filemap_map_pages+0xe69/0x2020 [ 137.919257][ T8893] shmem_fault+0x1f9/0xa20 [ 137.919272][ T8893] ? __lock_acquire+0x4a5/0x2630 [ 137.919282][ T8893] ? __pfx_shmem_fault+0x10/0x10 [ 137.919301][ T8893] ? __pfx_filemap_map_pages+0x10/0x10 [ 137.919320][ T8893] __do_fault+0x10d/0x550 [ 137.919332][ T8893] do_fault+0xabb/0x18e0 [ 137.919346][ T8893] __handle_mm_fault+0x1815/0x2b60 [ 137.919364][ T8893] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.919379][ T8893] ? pte_offset_map_lock+0x174/0x320 [ 137.919390][ T8893] ? find_held_lock+0x2b/0x80 [ 137.919408][ T8893] ? follow_page_pte+0x5b3/0x1400 [ 137.919422][ T8893] handle_mm_fault+0x36d/0xa20 [ 137.919439][ T8893] __get_user_pages+0xf9c/0x34d0 [ 137.919457][ T8893] ? __pfx___get_user_pages+0x10/0x10 [ 137.919472][ T8893] populate_vma_page_range+0x267/0x3f0 [ 137.919486][ T8893] ? __pfx_populate_vma_page_range+0x10/0x10 [ 137.919498][ T8893] ? __pfx_find_vma_intersection+0x10/0x10 [ 137.919510][ T8893] ? do_mmap+0x93f/0x12f0 [ 137.919523][ T8893] __mm_populate+0x107/0x3a0 [ 137.919536][ T8893] ? __pfx___mm_populate+0x10/0x10 [ 137.919562][ T8893] ? up_write+0x290/0x4f0 [ 137.919575][ T8893] vm_mmap_pgoff+0x37f/0x470 [ 137.919589][ T8893] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 137.919603][ T8893] ? __fget_files+0x215/0x3d0 [ 137.919615][ T8893] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.919629][ T8893] ksys_mmap_pgoff+0xe1/0x650 [ 137.919642][ T8893] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 137.919652][ T8893] ? fput+0x79/0x100 [ 137.919665][ T8893] ? ksys_write+0x1ac/0x250 [ 137.919674][ T8893] ? __pfx_ksys_write+0x10/0x10 [ 137.919685][ T8893] __x64_sys_mmap+0x125/0x190 [ 137.919698][ T8893] do_syscall_64+0x106/0xf80 [ 137.919708][ T8893] ? clear_bhb_loop+0x40/0x90 [ 137.919721][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.919732][ T8893] RIP: 0033:0x7f46e099c819 [ 137.919742][ T8893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.919751][ T8893] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 137.919762][ T8893] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 137.919768][ T8893] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 137.919774][ T8893] RBP: 00007f46e183b090 R08: ffffffffffffffff R09: 000000006a855000 [ 137.919780][ T8893] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 137.919786][ T8893] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 137.919800][ T8893] [ 138.041041][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.059732][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.091020][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 138.151419][ T8898] FAULT_INJECTION: forcing a failure. [ 138.151419][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 138.155425][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.3.939 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.155442][ T8898] Tainted: [L]=SOFTLOCKUP [ 138.155445][ T8898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.155452][ T8898] Call Trace: [ 138.155456][ T8898] [ 138.155461][ T8898] dump_stack_lvl+0x100/0x190 [ 138.155484][ T8898] should_fail_ex.cold+0x5/0xa [ 138.155500][ T8898] should_failslab+0xc2/0x120 [ 138.155511][ T8898] __kmalloc_cache_noprof+0x7a/0x6f0 [ 138.155525][ T8898] ? fuse_lookup_name+0x19f/0x760 [ 138.155588][ T8898] ? rcu_is_watching+0x12/0xc0 [ 138.155603][ T8898] fuse_lookup_name+0x19f/0x760 [ 138.155616][ T8898] ? fuse_lock_inode+0xd2/0x110 [ 138.155631][ T8898] ? __pfx_fuse_lookup_name+0x10/0x10 [ 138.155645][ T8898] ? __pfx___mutex_lock+0x10/0x10 [ 138.155668][ T8898] fuse_lookup+0x209/0x550 [ 138.155682][ T8898] ? __pfx_fuse_lookup+0x10/0x10 [ 138.155694][ T8898] ? d_alloc_parallel+0xb4e/0x14e0 [ 138.155711][ T8898] ? d_alloc_parallel+0xb4e/0x14e0 [ 138.155735][ T8898] ? find_held_lock+0x2b/0x80 [ 138.155749][ T8898] ? __d_lookup+0x25c/0x4a0 [ 138.155759][ T8898] fuse_atomic_open+0x2f8/0x450 [ 138.155775][ T8898] atomic_open+0x179/0x430 [ 138.155788][ T8898] ? __pfx_fuse_atomic_open+0x10/0x10 [ 138.155803][ T8898] lookup_open.isra.0+0x46b/0x11b0 [ 138.155822][ T8898] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 138.155851][ T8898] ? lookup_fast+0x2da/0x600 [ 138.155869][ T8898] path_openat+0xa98/0x31a0 [ 138.155886][ T8898] ? __pfx_path_openat+0x10/0x10 [ 138.155903][ T8898] do_file_open+0x20e/0x430 [ 138.155916][ T8898] ? __pfx_do_file_open+0x10/0x10 [ 138.155938][ T8898] ? alloc_fd+0x476/0x790 [ 138.155951][ T8898] ? do_getname+0x191/0x390 [ 138.155967][ T8898] do_sys_openat2+0x10d/0x1e0 [ 138.155981][ T8898] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.155994][ T8898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.156007][ T8898] ? __fget_files+0x21f/0x3d0 [ 138.156020][ T8898] __x64_sys_openat+0x12d/0x210 [ 138.156035][ T8898] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.156048][ T8898] ? ksys_write+0x1ac/0x250 [ 138.156062][ T8898] do_syscall_64+0x106/0xf80 [ 138.156072][ T8898] ? clear_bhb_loop+0x40/0x90 [ 138.156085][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.156096][ T8898] RIP: 0033:0x7f6d74f9c819 [ 138.156106][ T8898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.156115][ T8898] RSP: 002b:00007f6d75ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.156127][ T8898] RAX: ffffffffffffffda RBX: 00007f6d75216090 RCX: 00007f6d74f9c819 [ 138.156133][ T8898] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 138.156139][ T8898] RBP: 00007f6d75ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.156145][ T8898] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 138.156151][ T8898] R13: 00007f6d75216128 R14: 00007f6d75216090 R15: 00007ffe5372f988 [ 138.156165][ T8898] [ 138.395008][ T8902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8902 comm=syz.2.941 [ 138.400922][ T8902] sit0: entered promiscuous mode [ 138.405125][ T8902] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 138.407523][ T8902] netlink: 1 bytes leftover after parsing attributes in process `syz.2.941'. [ 138.441549][ T8904] netlink: 'syz.2.942': attribute type 5 has an invalid length. [ 138.446262][ T40] audit: type=1400 audit(1775425887.125:7342): avc: denied { map } for pid=8903 comm="syz.2.942" path="socket:[29687]" dev="sockfs" ino=29687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.482043][ T8906] bond0: (slave nr0): Error: Device can not be enslaved while up [ 138.484611][ T40] audit: type=1400 audit(1775425887.165:7343): avc: denied { ioctl } for pid=8905 comm="syz.2.943" path="socket:[31344]" dev="sockfs" ino=31344 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.492264][ T8906] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.693678][ T8915] fuse: Unknown parameter '' [ 138.729363][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 138.914441][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 138.980770][ T8928] netlink: 'syz.0.951': attribute type 12 has an invalid length. [ 138.997347][ T8930] MINIX-fs: blocksize too small for device [ 139.229827][ T6004] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 139.372842][ T8944] overlay: Unknown parameter 'hash' [ 139.410085][ T6004] usb 8-1: Using ep0 maxpacket: 8 [ 139.420679][ T6004] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 139.424160][ T6004] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.427287][ T6004] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.431181][ T6004] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.435277][ T6004] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.438105][ T6004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.549226][ T8947] FAULT_INJECTION: forcing a failure. [ 139.549226][ T8947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.554365][ T8947] CPU: 3 UID: 0 PID: 8947 Comm: syz.1.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.554387][ T8947] Tainted: [L]=SOFTLOCKUP [ 139.554392][ T8947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.554401][ T8947] Call Trace: [ 139.554407][ T8947] [ 139.554413][ T8947] dump_stack_lvl+0x100/0x190 [ 139.554464][ T8947] should_fail_ex.cold+0x5/0xa [ 139.554483][ T8947] ? prepare_alloc_pages+0x16d/0x5f0 [ 139.554501][ T8947] should_fail_alloc_page+0xeb/0x140 [ 139.554520][ T8947] prepare_alloc_pages+0x1f0/0x5f0 [ 139.554539][ T8947] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 139.554556][ T8947] ? rcu_is_watching+0x12/0xc0 [ 139.554572][ T8947] ? __lock_acquire+0x4a5/0x2630 [ 139.554587][ T8947] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.554605][ T8947] ? do_raw_spin_lock+0x128/0x260 [ 139.554617][ T8947] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.554630][ T8947] ? find_held_lock+0x2b/0x80 [ 139.554648][ T8947] ? __lock_acquire+0x4a5/0x2630 [ 139.554658][ T8947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.554674][ T8947] ? policy_nodemask+0xed/0x4f0 [ 139.554687][ T8947] alloc_pages_mpol+0x1fb/0x550 [ 139.554698][ T8947] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.554709][ T8947] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 139.554729][ T8947] folio_alloc_mpol_noprof+0x36/0x340 [ 139.554743][ T8947] shmem_alloc_folio+0x135/0x160 [ 139.554758][ T8947] shmem_alloc_and_add_folio+0x371/0xd40 [ 139.554777][ T8947] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 139.554795][ T8947] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 139.554814][ T8947] shmem_get_folio_gfp+0x6ab/0x1900 [ 139.554834][ T8947] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 139.554855][ T8947] ? filemap_map_pages+0xe69/0x2020 [ 139.554874][ T8947] shmem_fault+0x1f9/0xa20 [ 139.554889][ T8947] ? __lock_acquire+0x4a5/0x2630 [ 139.554899][ T8947] ? __pfx_shmem_fault+0x10/0x10 [ 139.554918][ T8947] ? __pfx_filemap_map_pages+0x10/0x10 [ 139.554937][ T8947] __do_fault+0x10d/0x550 [ 139.554949][ T8947] do_fault+0xabb/0x18e0 [ 139.554963][ T8947] __handle_mm_fault+0x1815/0x2b60 [ 139.554981][ T8947] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.554997][ T8947] ? pte_offset_map_lock+0x174/0x320 [ 139.555007][ T8947] ? find_held_lock+0x2b/0x80 [ 139.555026][ T8947] ? follow_page_pte+0x5b3/0x1400 [ 139.555040][ T8947] handle_mm_fault+0x36d/0xa20 [ 139.555057][ T8947] __get_user_pages+0xf9c/0x34d0 [ 139.555074][ T8947] ? __pfx___get_user_pages+0x10/0x10 [ 139.555090][ T8947] populate_vma_page_range+0x267/0x3f0 [ 139.555104][ T8947] ? __pfx_populate_vma_page_range+0x10/0x10 [ 139.555116][ T8947] ? __pfx_find_vma_intersection+0x10/0x10 [ 139.555128][ T8947] ? do_mmap+0x93f/0x12f0 [ 139.555141][ T8947] __mm_populate+0x107/0x3a0 [ 139.555154][ T8947] ? __pfx___mm_populate+0x10/0x10 [ 139.555167][ T8947] ? up_write+0x290/0x4f0 [ 139.555181][ T8947] vm_mmap_pgoff+0x37f/0x470 [ 139.555194][ T8947] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 139.555208][ T8947] ? __fget_files+0x215/0x3d0 [ 139.555220][ T8947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.555235][ T8947] ksys_mmap_pgoff+0xe1/0x650 [ 139.555247][ T8947] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 139.555258][ T8947] ? fput+0x79/0x100 [ 139.555270][ T8947] ? ksys_write+0x1ac/0x250 [ 139.555280][ T8947] ? __pfx_ksys_write+0x10/0x10 [ 139.555291][ T8947] __x64_sys_mmap+0x125/0x190 [ 139.555304][ T8947] do_syscall_64+0x106/0xf80 [ 139.555314][ T8947] ? clear_bhb_loop+0x40/0x90 [ 139.555327][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.555338][ T8947] RIP: 0033:0x7f46e099c819 [ 139.555349][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.555395][ T8947] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 139.555406][ T8947] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 139.555412][ T8947] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 139.555418][ T8947] RBP: 00007f46e183b090 R08: ffffffffffffffff R09: 0000000089f9b000 [ 139.555424][ T8947] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 139.555430][ T8947] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 139.555444][ T8947] [ 139.690896][ T6004] usb 8-1: GET_CAPABILITIES returned 0 [ 139.692860][ T6004] usbtmc 8-1:16.0: can't read capabilities [ 139.901638][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.907400][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.948210][ T10] usb 8-1: USB disconnect, device number 12 [ 139.964576][ T8953] /dev/nullb0: Can't open blockdev [ 140.012308][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 140.018131][ T40] audit: type=1400 audit(1775425888.695:7344): avc: denied { append } for pid=8954 comm="syz.1.960" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 140.081417][ T40] audit: type=1400 audit(1775425888.765:7345): avc: denied { setopt } for pid=8954 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.212081][ T8958] syzkaller0: entered promiscuous mode [ 140.214397][ T8958] syzkaller0: entered allmulticast mode [ 140.425406][ T8966] xt_HMARK: spi-set and port-set can't be combined [ 140.445585][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'. [ 140.549961][ T8980] fuse: Bad value for 'fd' [ 140.594769][ T8984] FAULT_INJECTION: forcing a failure. [ 140.594769][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 140.599226][ T8984] CPU: 1 UID: 0 PID: 8984 Comm: syz.1.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.599243][ T8984] Tainted: [L]=SOFTLOCKUP [ 140.599247][ T8984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.599253][ T8984] Call Trace: [ 140.599259][ T8984] [ 140.599264][ T8984] dump_stack_lvl+0x100/0x190 [ 140.599287][ T8984] should_fail_ex.cold+0x5/0xa [ 140.599302][ T8984] should_failslab+0xc2/0x120 [ 140.599314][ T8984] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 140.599331][ T8984] ? __alloc_skb+0x140/0x710 [ 140.599349][ T8984] __alloc_skb+0x140/0x710 [ 140.599363][ T8984] ? __alloc_skb+0x5b7/0x710 [ 140.599377][ T8984] ? __pfx___alloc_skb+0x10/0x10 [ 140.599395][ T8984] alloc_skb_with_frags+0xe0/0x810 [ 140.599412][ T8984] ? __might_fault+0xc5/0x140 [ 140.599427][ T8984] ? __might_fault+0xc5/0x140 [ 140.599444][ T8984] sock_alloc_send_pskb+0x801/0x980 [ 140.599458][ T8984] ? _copy_from_iter+0x270/0x1690 [ 140.599475][ T8984] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 140.599489][ T8984] ? find_held_lock+0x2b/0x80 [ 140.599503][ T8984] ? dev_get_by_index+0x180/0x380 [ 140.599517][ T8984] ? dev_get_by_index+0x180/0x380 [ 140.599535][ T8984] packet_sendmsg+0x20e0/0x53c0 [ 140.599566][ T8984] ? avc_has_perm+0xaa/0x1e0 [ 140.599580][ T8984] ? __lock_acquire+0x4a5/0x2630 [ 140.599594][ T8984] ? sock_has_perm+0x258/0x2f0 [ 140.599608][ T8984] ? __pfx_sock_has_perm+0x10/0x10 [ 140.599623][ T8984] ? __pfx_packet_sendmsg+0x10/0x10 [ 140.599643][ T8984] __sys_sendto+0x468/0x4b0 [ 140.599657][ T8984] ? __pfx_packet_sendmsg+0x10/0x10 [ 140.599671][ T8984] ? __pfx___sys_sendto+0x10/0x10 [ 140.599696][ T8984] ? ksys_write+0x1ac/0x250 [ 140.599706][ T8984] ? __pfx_ksys_write+0x10/0x10 [ 140.599717][ T8984] __x64_sys_sendto+0xe0/0x1c0 [ 140.599731][ T8984] ? do_syscall_64+0x95/0xf80 [ 140.599741][ T8984] ? lockdep_hardirqs_on+0x78/0x100 [ 140.599757][ T8984] do_syscall_64+0x106/0xf80 [ 140.599766][ T8984] ? clear_bhb_loop+0x40/0x90 [ 140.599779][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.599790][ T8984] RIP: 0033:0x7f46e099c819 [ 140.599800][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.599810][ T8984] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.599821][ T8984] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 140.599839][ T8984] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 140.599847][ T8984] RBP: 00007f46e183b090 R08: 0000200000000140 R09: 0000000000000014 [ 140.599855][ T8984] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 140.599861][ T8984] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 140.599875][ T8984] [ 140.654090][ T8986] syzkaller0: entered promiscuous mode [ 140.697100][ T8986] syzkaller0: entered allmulticast mode [ 140.703527][ T8986] xt_hashlimit: size too large, truncated to 1048576 [ 141.303695][ T8989] loop7: detected capacity change from 0 to 2640 [ 141.306984][ T8989] ldm_validate_partition_table(): Disk read failed. [ 141.309290][ T8989] Dev loop7: unable to read RDB block 0 [ 141.311721][ T8989] loop7: unable to read partition table [ 141.313986][ T8989] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 141.339873][ T6004] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 141.499690][ T6004] usb 8-1: Using ep0 maxpacket: 16 [ 141.503866][ T6004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.508402][ T6004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33863, setting to 1024 [ 141.515461][ T6004] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 141.519104][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.522550][ T6004] usb 8-1: Product: syz [ 141.524300][ T6004] usb 8-1: Manufacturer: syz [ 141.526256][ T6004] usb 8-1: SerialNumber: syz [ 141.539155][ T6004] usb 8-1: config 0 descriptor?? [ 141.543000][ T6004] hub 8-1:0.0: bad descriptor, ignoring hub [ 141.544934][ T6004] hub 8-1:0.0: probe with driver hub failed with error -5 [ 141.549414][ T6004] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input22 [ 141.613543][ T9003] fuse: Bad value for 'fd' [ 141.710136][ T6004] IPVS: starting estimator thread 0... [ 141.723128][ T9012] IPVS: sh: FWM 3 0x00000003 - no destination available [ 141.799785][ T9018] IPVS: using max 32 ests per chain, 76800 per kthread [ 142.116228][ T60] IPVS: stop unused estimator thread 0... [ 142.169815][ T6004] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 142.329864][ T6004] usb 7-1: Using ep0 maxpacket: 32 [ 142.334127][ T6004] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.337714][ T6004] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.341364][ T6004] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.344370][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.347632][ T6004] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.350809][ T6004] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.355148][ T6004] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.358181][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.362473][ T6004] usb 7-1: config 0 descriptor?? [ 142.552991][ T9043] fuse: Bad value for 'fd' [ 142.572270][ T6004] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 142.582102][ T9045] openvswitch: netlink: IPv4 tun info is not correct [ 142.583888][ T6004] usb 7-1: USB disconnect, device number 26 [ 142.591978][ T6004] usblp0: removed [ 142.773128][ T40] audit: type=1400 audit(1775425891.455:7346): avc: denied { connect } for pid=9059 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.791289][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 142.841840][ T40] audit: type=1400 audit(1775425891.525:7347): avc: denied { setopt } for pid=9055 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.979681][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.009652][ T10] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 143.029662][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 143.131037][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 143.135588][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 143.140858][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.144292][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 57376, setting to 1024 [ 143.149527][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.152957][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.157085][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.160264][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.164417][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.168972][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.173841][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.178094][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.183259][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 143.183498][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 143.191563][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.193772][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 82, changing to 10 [ 143.195817][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.200224][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 143.203080][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.210688][ T24] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 143.212554][ T10] usb 7-1: config 0 descriptor?? [ 143.214539][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.217792][ T9034] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.219463][ T24] usb 6-1: Product: Є [ 143.223637][ T24] usb 6-1: Manufacturer: 绵䋳䲥䄧å¿à¦•璇ආå”ï¨ç©¡ç˜šèšê³ƒì¯¹áŠá§°á¥ë…¦î¹°á±£ã¶”Уî‘翈é¶è›„螸擮剣馘粥ƌ欫鳚ﲮᣇ踶劬〿㟮㚦åªäŸ²àªƒìº‡è©‹Î·â­”㌑엋佂ᚿボ儙젹暈ïºã€‡ëƒ³ã¹‘⇅á©å·’爇ꉟ┆葄퓄蚢닗㻊䓉掺æŽë³¦ê¨£å‹³ç­ºæ„ªèå«”ä²á™²ìª±â¼¡äé©å…“鲂湛鄟࠻ê”ጒ╀浄éœéª‚ï§ê…–ꤢ⎽æ™áµ¸ç¸¦îŠ‘çƒ‡ [ 143.237851][ T24] usb 6-1: SerialNumber: Ђ [ 143.381605][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 143.383427][ T9] usbtmc 5-1:16.0: can't read capabilities [ 143.428112][ T10] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.455831][ T40] audit: type=1400 audit(1775425892.135:7348): avc: denied { setattr } for pid=9059 comm="syz.1.993" path="socket:[32882]" dev="sockfs" ino=32882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.475888][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.522140][ T24] usb 6-1: USB disconnect, device number 13 [ 143.565645][ T8598] udevd[8598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.591165][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.596187][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.601428][ T10] usb 5-1: USB disconnect, device number 6 [ 143.627963][ T9] usb 7-1: USB disconnect, device number 27 [ 143.635873][ T9] usblp1: removed [ 143.647229][ T9062] FAULT_INJECTION: forcing a failure. [ 143.647229][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 143.651554][ T9062] CPU: 3 UID: 0 PID: 9062 Comm: syz.3.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.651572][ T9062] Tainted: [L]=SOFTLOCKUP [ 143.651576][ T9062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.651582][ T9062] Call Trace: [ 143.651586][ T9062] [ 143.651590][ T9062] dump_stack_lvl+0x100/0x190 [ 143.651612][ T9062] should_fail_ex.cold+0x5/0xa [ 143.651628][ T9062] should_failslab+0xc2/0x120 [ 143.651640][ T9062] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 143.651656][ T9062] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 143.651676][ T9062] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 143.651697][ T9062] mmu_topup_memory_caches+0x25/0x170 [ 143.651711][ T9062] kvm_mmu_load+0xd6/0x23e0 [ 143.651722][ T9062] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 143.651737][ T9062] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 143.651759][ T9062] ? __pfx_kvm_mmu_load+0x10/0x10 [ 143.651770][ T9062] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 143.651787][ T9062] ? kvm_check_and_inject_events+0x961/0x10c0 [ 143.651800][ T9062] ? record_steal_time+0x3f0/0xbe0 [ 143.651817][ T9062] vcpu_run+0x39f4/0x5ca0 [ 143.651835][ T9062] ? __pfx_vcpu_run+0x10/0x10 [ 143.651852][ T9062] ? rcu_is_watching+0x12/0xc0 [ 143.651868][ T9062] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 143.651880][ T9062] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 143.651897][ T9062] kvm_vcpu_ioctl+0x730/0x1730 [ 143.651914][ T9062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 143.651930][ T9062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.651947][ T9062] ? do_vfs_ioctl+0x226/0x13e0 [ 143.651964][ T9062] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 143.651980][ T9062] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 143.652002][ T9062] ? __fget_files+0x215/0x3d0 [ 143.652012][ T9062] ? hook_file_ioctl_common+0x146/0x410 [ 143.652027][ T9062] ? selinux_file_ioctl+0x139/0x290 [ 143.652043][ T9062] ? selinux_file_ioctl+0xb4/0x290 [ 143.652059][ T9062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 143.652076][ T9062] __x64_sys_ioctl+0x18e/0x210 [ 143.652093][ T9062] do_syscall_64+0x106/0xf80 [ 143.652103][ T9062] ? clear_bhb_loop+0x40/0x90 [ 143.652117][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.652128][ T9062] RIP: 0033:0x7f6d74f9c819 [ 143.652138][ T9062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.652148][ T9062] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.652159][ T9062] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 143.652165][ T9062] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 143.652171][ T9062] RBP: 00007f6d75f08090 R08: 0000000000000000 R09: 0000000000000000 [ 143.652177][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.652183][ T9062] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 143.652197][ T9062] [ 143.878595][ T9069] program syz.3.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.080207][ T9074] syzkaller0: entered promiscuous mode [ 144.082021][ T9074] syzkaller0: entered allmulticast mode [ 145.295889][ T9098] loop7: detected capacity change from 0 to 2640 [ 145.298335][ T9098] buffer_io_error: 48 callbacks suppressed [ 145.298344][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.302995][ T39] usb 8-1: USB disconnect, device number 13 [ 145.303658][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.308965][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.311786][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.315067][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.317989][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.321256][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.324505][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.327727][ T9098] ldm_validate_partition_table(): Disk read failed. [ 145.330811][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.336194][ T9098] Buffer I/O error on dev loop7, logical block 0, async page read [ 145.339806][ T9098] Dev loop7: unable to read RDB block 0 [ 145.342324][ T9098] loop7: unable to read partition table [ 145.344347][ T9098] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 145.399328][ T40] audit: type=1400 audit(1775425894.075:7349): avc: denied { mount } for pid=9099 comm="syz.0.1007" name="/" dev="hugetlbfs" ino=31642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 145.491082][ T9101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 145.712851][ T40] audit: type=1400 audit(1775425894.395:7350): avc: denied { mounton } for pid=9099 comm="syz.0.1007" path="/bus" dev="hugetlbfs" ino=31643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 145.716856][ T9105] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.723079][ T9105] overlayfs: failed to set xattr on upper [ 145.725030][ T9105] overlayfs: ...falling back to redirect_dir=nofollow. [ 145.727282][ T9105] overlayfs: ...falling back to index=off. [ 145.729148][ T9105] overlayfs: ...falling back to uuid=null. [ 145.731085][ T9105] overlayfs: maximum fs stacking depth exceeded [ 147.180367][ T9084] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.182574][ T9084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.213800][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 147.218829][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.372451][ T9109] FAULT_INJECTION: forcing a failure. [ 147.372451][ T9109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.377175][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.3.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.377192][ T9109] Tainted: [L]=SOFTLOCKUP [ 147.377197][ T9109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.377204][ T9109] Call Trace: [ 147.377251][ T9109] [ 147.377255][ T9109] dump_stack_lvl+0x100/0x190 [ 147.377324][ T9109] should_fail_ex.cold+0x5/0xa [ 147.377336][ T9109] ? prepare_alloc_pages+0x16d/0x5f0 [ 147.377351][ T9109] should_fail_alloc_page+0xeb/0x140 [ 147.377363][ T9109] prepare_alloc_pages+0x1f0/0x5f0 [ 147.377378][ T9109] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 147.377395][ T9109] ? rcu_is_watching+0x12/0xc0 [ 147.377410][ T9109] ? __lock_acquire+0x4a5/0x2630 [ 147.377425][ T9109] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.377442][ T9109] ? do_raw_spin_lock+0x128/0x260 [ 147.377455][ T9109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.377467][ T9109] ? find_held_lock+0x2b/0x80 [ 147.377485][ T9109] ? __lock_acquire+0x4a5/0x2630 [ 147.377495][ T9109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.377512][ T9109] ? policy_nodemask+0xed/0x4f0 [ 147.377524][ T9109] alloc_pages_mpol+0x1fb/0x550 [ 147.377536][ T9109] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 147.377547][ T9109] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 147.377566][ T9109] folio_alloc_mpol_noprof+0x36/0x340 [ 147.377580][ T9109] shmem_alloc_folio+0x135/0x160 [ 147.377595][ T9109] shmem_alloc_and_add_folio+0x371/0xd40 [ 147.377615][ T9109] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 147.377632][ T9109] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 147.377651][ T9109] shmem_get_folio_gfp+0x6ab/0x1900 [ 147.377671][ T9109] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 147.377687][ T9109] ? filemap_map_pages+0xe69/0x2020 [ 147.377705][ T9109] shmem_fault+0x1f9/0xa20 [ 147.377720][ T9109] ? __lock_acquire+0x4a5/0x2630 [ 147.377730][ T9109] ? __pfx_shmem_fault+0x10/0x10 [ 147.377753][ T9109] ? __pfx_filemap_map_pages+0x10/0x10 [ 147.377773][ T9109] __do_fault+0x10d/0x550 [ 147.377784][ T9109] do_fault+0xabb/0x18e0 [ 147.377799][ T9109] __handle_mm_fault+0x1815/0x2b60 [ 147.377817][ T9109] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.377832][ T9109] ? pte_offset_map_lock+0x174/0x320 [ 147.377843][ T9109] ? find_held_lock+0x2b/0x80 [ 147.377861][ T9109] ? follow_page_pte+0x5b3/0x1400 [ 147.377876][ T9109] handle_mm_fault+0x36d/0xa20 [ 147.377893][ T9109] __get_user_pages+0xf9c/0x34d0 [ 147.377910][ T9109] ? __pfx___get_user_pages+0x10/0x10 [ 147.377926][ T9109] populate_vma_page_range+0x267/0x3f0 [ 147.377939][ T9109] ? __pfx_populate_vma_page_range+0x10/0x10 [ 147.377952][ T9109] ? __pfx_find_vma_intersection+0x10/0x10 [ 147.377963][ T9109] ? do_mmap+0x93f/0x12f0 [ 147.377976][ T9109] __mm_populate+0x107/0x3a0 [ 147.377989][ T9109] ? __pfx___mm_populate+0x10/0x10 [ 147.378003][ T9109] ? up_write+0x290/0x4f0 [ 147.378016][ T9109] vm_mmap_pgoff+0x37f/0x470 [ 147.378029][ T9109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 147.378042][ T9109] ? __fget_files+0x215/0x3d0 [ 147.378055][ T9109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.378107][ T9109] ksys_mmap_pgoff+0xe1/0x650 [ 147.378120][ T9109] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 147.378130][ T9109] ? fput+0x79/0x100 [ 147.378142][ T9109] ? ksys_write+0x1ac/0x250 [ 147.378152][ T9109] ? __pfx_ksys_write+0x10/0x10 [ 147.378163][ T9109] __x64_sys_mmap+0x125/0x190 [ 147.378176][ T9109] do_syscall_64+0x106/0xf80 [ 147.378186][ T9109] ? clear_bhb_loop+0x40/0x90 [ 147.378199][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.378210][ T9109] RIP: 0033:0x7f6d74f9c819 [ 147.378220][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.378230][ T9109] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 147.378262][ T9109] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 147.378268][ T9109] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 147.378274][ T9109] RBP: 00007f6d75f08090 R08: ffffffffffffffff R09: 0000000089f9b000 [ 147.378281][ T9109] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 147.378287][ T9109] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 147.378300][ T9109] [ 147.703843][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 147.816270][ T40] audit: type=1400 audit(1775425896.495:7351): avc: denied { bind } for pid=9141 comm="syz.0.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.818967][ T9142] Context (ID=0x1) not attached to queue pair (handle=0x2:0x90000000) [ 147.955537][ T9152] syzkaller0: entered promiscuous mode [ 147.957553][ T9152] syzkaller0: entered allmulticast mode [ 147.967114][ T1329] kernel write not supported for file /audio1 (pid: 1329 comm: kworker/3:2) [ 148.025366][ T9156] syzkaller0: entered promiscuous mode [ 148.027187][ T9156] syzkaller0: entered allmulticast mode [ 148.059272][ T40] audit: type=1400 audit(1775425896.735:7352): avc: denied { lock } for pid=9157 comm="syz.3.1031" path="socket:[35879]" dev="sockfs" ino=35879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 148.069699][ T40] audit: type=1400 audit(1775425896.745:7353): avc: denied { getopt } for pid=9157 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.088361][ T9160] support for cryptoloop has been removed. Use dm-crypt instead. [ 148.126855][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1036'. [ 148.155662][ T9162] FAULT_INJECTION: forcing a failure. [ 148.155662][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.159807][ T9162] CPU: 2 UID: 0 PID: 9162 Comm: syz.3.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.159824][ T9162] Tainted: [L]=SOFTLOCKUP [ 148.159827][ T9162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.159834][ T9162] Call Trace: [ 148.159838][ T9162] [ 148.159842][ T9162] dump_stack_lvl+0x100/0x190 [ 148.159865][ T9162] should_fail_ex.cold+0x5/0xa [ 148.159880][ T9162] _copy_from_user+0x2e/0xd0 [ 148.159903][ T9162] input_event_from_user+0x123/0x310 [ 148.159955][ T9162] ? __pfx_input_event_from_user+0x10/0x10 [ 148.159966][ T9162] ? __pfx___might_resched+0x10/0x10 [ 148.159979][ T9162] ? input_inject_event+0x1c9/0x3b0 [ 148.159998][ T9162] evdev_write+0x342/0x610 [ 148.160011][ T9162] ? __pfx_evdev_write+0x10/0x10 [ 148.160022][ T9162] ? bpf_lsm_file_permission+0x9/0x10 [ 148.160039][ T9162] ? security_file_permission+0x76/0x210 [ 148.160056][ T9162] ? rw_verify_area+0xce/0x6d0 [ 148.160074][ T9162] vfs_write+0x2aa/0x1070 [ 148.160084][ T9162] ? __pfx_evdev_write+0x10/0x10 [ 148.160095][ T9162] ? __pfx_vfs_write+0x10/0x10 [ 148.160103][ T9162] ? find_held_lock+0x2b/0x80 [ 148.160117][ T9162] ? __fget_files+0x215/0x3d0 [ 148.160129][ T9162] ? __fget_files+0x215/0x3d0 [ 148.160143][ T9162] ? __fget_files+0x21f/0x3d0 [ 148.160158][ T9162] ksys_write+0x1f8/0x250 [ 148.160167][ T9162] ? __pfx_ksys_write+0x10/0x10 [ 148.160181][ T9162] do_syscall_64+0x106/0xf80 [ 148.160192][ T9162] ? clear_bhb_loop+0x40/0x90 [ 148.160205][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.160218][ T9162] RIP: 0033:0x7f6d74f9c819 [ 148.160227][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.160237][ T9162] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.160248][ T9162] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 148.160255][ T9162] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 148.160261][ T9162] RBP: 00007f6d75f08090 R08: 0000000000000000 R09: 0000000000000000 [ 148.160267][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.160273][ T9162] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 148.160286][ T9162] [ 148.174914][ T9174] loop7: detected capacity change from 0 to 2640 [ 148.197949][ T9176] nbd: must specify a device to reconfigure [ 148.200009][ T9174] ldm_validate_partition_table(): Disk read failed. [ 148.203092][ T9176] nbd: must specify a device to reconfigure [ 148.204351][ T9174] Dev loop7: unable to read RDB block 0 [ 148.253455][ T9174] loop7: unable to read partition table [ 148.256843][ T9174] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 148.297350][ T40] audit: type=1400 audit(1775425896.975:7354): avc: denied { bind } for pid=9186 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.479970][ T1329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.523366][ T9192] FAULT_INJECTION: forcing a failure. [ 148.523366][ T9192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.528136][ T9192] CPU: 3 UID: 0 PID: 9192 Comm: syz.1.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.528164][ T9192] Tainted: [L]=SOFTLOCKUP [ 148.528171][ T9192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.528182][ T9192] Call Trace: [ 148.528233][ T9192] [ 148.528241][ T9192] dump_stack_lvl+0x100/0x190 [ 148.528308][ T9192] should_fail_ex.cold+0x5/0xa [ 148.528325][ T9192] ? prepare_alloc_pages+0x16d/0x5f0 [ 148.528349][ T9192] should_fail_alloc_page+0xeb/0x140 [ 148.528371][ T9192] prepare_alloc_pages+0x1f0/0x5f0 [ 148.528393][ T9192] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 148.528446][ T9192] ? rcu_is_watching+0x12/0xc0 [ 148.528472][ T9192] ? __lock_acquire+0x4a5/0x2630 [ 148.528497][ T9192] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.528523][ T9192] ? do_raw_spin_lock+0x128/0x260 [ 148.528544][ T9192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 148.528565][ T9192] ? find_held_lock+0x2b/0x80 [ 148.528592][ T9192] ? __lock_acquire+0x4a5/0x2630 [ 148.528612][ T9192] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.528639][ T9192] ? policy_nodemask+0xed/0x4f0 [ 148.528659][ T9192] alloc_pages_mpol+0x1fb/0x550 [ 148.528680][ T9192] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.528699][ T9192] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 148.528730][ T9192] folio_alloc_mpol_noprof+0x36/0x340 [ 148.528753][ T9192] shmem_alloc_folio+0x135/0x160 [ 148.528776][ T9192] shmem_alloc_and_add_folio+0x371/0xd40 [ 148.528806][ T9192] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 148.528834][ T9192] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 148.528864][ T9192] shmem_get_folio_gfp+0x6ab/0x1900 [ 148.528896][ T9192] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 148.528923][ T9192] ? filemap_map_pages+0xe69/0x2020 [ 148.528953][ T9192] shmem_fault+0x1f9/0xa20 [ 148.528978][ T9192] ? __lock_acquire+0x4a5/0x2630 [ 148.528993][ T9192] ? __pfx_shmem_fault+0x10/0x10 [ 148.529022][ T9192] ? __pfx_filemap_map_pages+0x10/0x10 [ 148.529060][ T9192] __do_fault+0x10d/0x550 [ 148.529081][ T9192] do_fault+0xabb/0x18e0 [ 148.529106][ T9192] __handle_mm_fault+0x1815/0x2b60 [ 148.529135][ T9192] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.529159][ T9192] ? pte_offset_map_lock+0x174/0x320 [ 148.529179][ T9192] ? find_held_lock+0x2b/0x80 [ 148.529209][ T9192] ? follow_page_pte+0x5b3/0x1400 [ 148.529236][ T9192] handle_mm_fault+0x36d/0xa20 [ 148.529265][ T9192] __get_user_pages+0xf9c/0x34d0 [ 148.529293][ T9192] ? __pfx___get_user_pages+0x10/0x10 [ 148.529322][ T9192] populate_vma_page_range+0x267/0x3f0 [ 148.529345][ T9192] ? __pfx_populate_vma_page_range+0x10/0x10 [ 148.529366][ T9192] ? __pfx_find_vma_intersection+0x10/0x10 [ 148.529385][ T9192] ? do_mmap+0x93f/0x12f0 [ 148.529406][ T9192] __mm_populate+0x107/0x3a0 [ 148.529425][ T9192] ? __pfx___mm_populate+0x10/0x10 [ 148.529446][ T9192] ? up_write+0x290/0x4f0 [ 148.529460][ T9192] vm_mmap_pgoff+0x37f/0x470 [ 148.529473][ T9192] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 148.529487][ T9192] ? __fget_files+0x215/0x3d0 [ 148.529500][ T9192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.529569][ T9192] ksys_mmap_pgoff+0xe1/0x650 [ 148.529582][ T9192] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 148.529592][ T9192] ? fput+0x79/0x100 [ 148.529605][ T9192] ? ksys_write+0x1ac/0x250 [ 148.529615][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 148.529627][ T9192] __x64_sys_mmap+0x125/0x190 [ 148.529640][ T9192] do_syscall_64+0x106/0xf80 [ 148.529650][ T9192] ? clear_bhb_loop+0x40/0x90 [ 148.529663][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.529674][ T9192] RIP: 0033:0x7f46e099c819 [ 148.529684][ T9192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.529695][ T9192] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.529734][ T9192] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 148.529741][ T9192] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 148.529747][ T9192] RBP: 00007f46e183b090 R08: ffffffffffffffff R09: 0000000089f9b000 [ 148.529753][ T9192] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 148.529759][ T9192] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 148.529773][ T9192] [ 148.685996][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 148.717452][ T9201] fuse: Bad value for 'fd' [ 148.770280][ T1329] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 148.773682][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.776566][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.780011][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.783472][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.786314][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.791503][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.843238][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.846676][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.850161][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.853032][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.856564][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.860072][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.862915][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.866338][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.870097][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.872878][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.875729][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.879118][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.883868][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.887018][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.890811][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.893737][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.896527][ T1329] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.900107][ T1329] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.903816][ T1329] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 148.906668][ T1329] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 148.909277][ T1329] usb 5-1: Product: syz [ 148.910835][ T1329] usb 5-1: Manufacturer: syz [ 148.912422][ T1329] usb 5-1: SerialNumber: syz [ 148.917594][ T1329] usb 5-1: config 0 descriptor?? [ 148.924034][ T1329] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 149.219700][ T5287] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.222248][ T9224] FAULT_INJECTION: forcing a failure. [ 149.222248][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.226261][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.2.1055 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.226278][ T9224] Tainted: [L]=SOFTLOCKUP [ 149.226281][ T9224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.226291][ T9224] Call Trace: [ 149.226298][ T9224] [ 149.226304][ T9224] dump_stack_lvl+0x100/0x190 [ 149.226335][ T9224] should_fail_ex.cold+0x5/0xa [ 149.226358][ T9224] _copy_from_user+0x2e/0xd0 [ 149.226388][ T9224] input_event_from_user+0x123/0x310 [ 149.226407][ T9224] ? __pfx_input_event_from_user+0x10/0x10 [ 149.226424][ T9224] ? __pfx___might_resched+0x10/0x10 [ 149.226444][ T9224] ? input_inject_event+0x1c9/0x3b0 [ 149.226473][ T9224] evdev_write+0x342/0x610 [ 149.226496][ T9224] ? __pfx_evdev_write+0x10/0x10 [ 149.226514][ T9224] ? bpf_lsm_file_permission+0x9/0x10 [ 149.226540][ T9224] ? security_file_permission+0x76/0x210 [ 149.226565][ T9224] ? rw_verify_area+0xce/0x6d0 [ 149.226591][ T9224] vfs_write+0x2aa/0x1070 [ 149.226607][ T9224] ? __pfx_evdev_write+0x10/0x10 [ 149.226623][ T9224] ? __pfx_vfs_write+0x10/0x10 [ 149.226636][ T9224] ? find_held_lock+0x2b/0x80 [ 149.226656][ T9224] ? __fget_files+0x215/0x3d0 [ 149.226674][ T9224] ? __fget_files+0x215/0x3d0 [ 149.226695][ T9224] ? __fget_files+0x21f/0x3d0 [ 149.226718][ T9224] ksys_write+0x1f8/0x250 [ 149.226733][ T9224] ? __pfx_ksys_write+0x10/0x10 [ 149.226755][ T9224] do_syscall_64+0x106/0xf80 [ 149.226776][ T9224] ? clear_bhb_loop+0x40/0x90 [ 149.226796][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.226813][ T9224] RIP: 0033:0x7fb45ad9c819 [ 149.226827][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.226842][ T9224] RSP: 002b:00007fb45bd29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.226858][ T9224] RAX: ffffffffffffffda RBX: 00007fb45b015fa0 RCX: 00007fb45ad9c819 [ 149.226868][ T9224] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 149.226877][ T9224] RBP: 00007fb45bd29090 R08: 0000000000000000 R09: 0000000000000000 [ 149.226886][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.226895][ T9224] R13: 00007fb45b016038 R14: 00007fb45b015fa0 R15: 00007ffd6106bd78 [ 149.226917][ T9224] [ 149.240689][ T40] audit: type=1400 audit(1775425897.925:7355): avc: denied { append } for pid=9183 comm="syz.0.1041" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.271659][ T9229] fuse: Bad value for 'fd' [ 149.349675][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.511167][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 149.521888][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.525762][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.528989][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.534835][ T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 149.537746][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.542913][ T9] usb 6-1: config 0 descriptor?? [ 149.554047][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 149.559240][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.563660][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.567765][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.571068][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.584025][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.587396][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.591397][ T6037] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.599100][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.605635][ T5320] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.804106][ T40] audit: type=1400 audit(1775425898.485:7356): avc: denied { write } for pid=9219 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 149.805810][ T9249] "syz.1.1053" (9249) uses obsolete ecb(arc4) skcipher [ 149.875739][ T9250] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 149.922469][ T40] audit: type=1400 audit(1775425898.605:7357): avc: denied { map } for pid=9251 comm="syz.3.1064" path="socket:[35946]" dev="sockfs" ino=35946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.980971][ T9245] syzkaller0: entered promiscuous mode [ 149.983272][ T9245] syzkaller0: entered allmulticast mode [ 151.461222][ T34] usb 5-1: USB disconnect, device number 7 [ 151.469806][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 152.135355][ T9] usb 6-1: USB disconnect, device number 14 [ 152.286620][ T9269] overlayfs: failed to resolve 'verity=on': -2 [ 152.520495][ T9275] FAULT_INJECTION: forcing a failure. [ 152.520495][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.525649][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.1.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.525667][ T9275] Tainted: [L]=SOFTLOCKUP [ 152.525671][ T9275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.525677][ T9275] Call Trace: [ 152.525682][ T9275] [ 152.525687][ T9275] dump_stack_lvl+0x100/0x190 [ 152.525709][ T9275] should_fail_ex.cold+0x5/0xa [ 152.525724][ T9275] _copy_from_user+0x2e/0xd0 [ 152.525737][ T9275] input_event_from_user+0x123/0x310 [ 152.525749][ T9275] ? __pfx_input_event_from_user+0x10/0x10 [ 152.525763][ T9275] ? __pfx___might_resched+0x10/0x10 [ 152.525777][ T9275] ? input_inject_event+0x1c9/0x3b0 [ 152.525796][ T9275] evdev_write+0x342/0x610 [ 152.525809][ T9275] ? __pfx_evdev_write+0x10/0x10 [ 152.525820][ T9275] ? bpf_lsm_file_permission+0x9/0x10 [ 152.525837][ T9275] ? security_file_permission+0x76/0x210 [ 152.525855][ T9275] ? rw_verify_area+0xce/0x6d0 [ 152.525872][ T9275] vfs_write+0x2aa/0x1070 [ 152.525883][ T9275] ? __pfx_evdev_write+0x10/0x10 [ 152.525894][ T9275] ? __pfx_vfs_write+0x10/0x10 [ 152.525902][ T9275] ? find_held_lock+0x2b/0x80 [ 152.525916][ T9275] ? __fget_files+0x215/0x3d0 [ 152.525928][ T9275] ? __fget_files+0x215/0x3d0 [ 152.525942][ T9275] ? __fget_files+0x21f/0x3d0 [ 152.525957][ T9275] ksys_write+0x1f8/0x250 [ 152.525967][ T9275] ? __pfx_ksys_write+0x10/0x10 [ 152.525981][ T9275] do_syscall_64+0x106/0xf80 [ 152.525991][ T9275] ? clear_bhb_loop+0x40/0x90 [ 152.526004][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.526015][ T9275] RIP: 0033:0x7f46e099c819 [ 152.526026][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.526036][ T9275] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.526047][ T9275] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 152.526054][ T9275] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 152.526060][ T9275] RBP: 00007f46e183b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.526066][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.526072][ T9275] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 152.526086][ T9275] [ 152.985950][ T9283] syzkaller0: entered promiscuous mode [ 152.988242][ T9283] syzkaller0: entered allmulticast mode [ 153.411483][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 154.360147][ T9321] FAULT_INJECTION: forcing a failure. [ 154.360147][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.364907][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.3.1084 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.364925][ T9321] Tainted: [L]=SOFTLOCKUP [ 154.364929][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.364935][ T9321] Call Trace: [ 154.364941][ T9321] [ 154.364947][ T9321] dump_stack_lvl+0x100/0x190 [ 154.364970][ T9321] should_fail_ex.cold+0x5/0xa [ 154.364985][ T9321] _copy_from_user+0x2e/0xd0 [ 154.364998][ T9321] input_event_from_user+0x123/0x310 [ 154.365010][ T9321] ? __pfx_input_event_from_user+0x10/0x10 [ 154.365021][ T9321] ? __pfx___might_resched+0x10/0x10 [ 154.365034][ T9321] ? input_inject_event+0x1c9/0x3b0 [ 154.365053][ T9321] evdev_write+0x342/0x610 [ 154.365066][ T9321] ? __pfx_evdev_write+0x10/0x10 [ 154.365077][ T9321] ? bpf_lsm_file_permission+0x9/0x10 [ 154.365093][ T9321] ? security_file_permission+0x76/0x210 [ 154.365111][ T9321] ? rw_verify_area+0xce/0x6d0 [ 154.365128][ T9321] vfs_write+0x2aa/0x1070 [ 154.365138][ T9321] ? __pfx_evdev_write+0x10/0x10 [ 154.365149][ T9321] ? __pfx_vfs_write+0x10/0x10 [ 154.365157][ T9321] ? find_held_lock+0x2b/0x80 [ 154.365171][ T9321] ? __fget_files+0x215/0x3d0 [ 154.365182][ T9321] ? __fget_files+0x215/0x3d0 [ 154.365196][ T9321] ? __fget_files+0x21f/0x3d0 [ 154.365211][ T9321] ksys_write+0x1f8/0x250 [ 154.365221][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 154.365235][ T9321] do_syscall_64+0x106/0xf80 [ 154.365245][ T9321] ? clear_bhb_loop+0x40/0x90 [ 154.365257][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.365269][ T9321] RIP: 0033:0x7f6d74f9c819 [ 154.365278][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.365288][ T9321] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.365299][ T9321] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 154.365306][ T9321] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.365312][ T9321] RBP: 00007f6d75f08090 R08: 0000000000000000 R09: 0000000000000000 [ 154.365318][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.365324][ T9321] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 154.365338][ T9321] [ 154.445497][ T5991] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 154.485135][ T40] audit: type=1400 audit(1775425903.165:7358): avc: denied { block_suspend } for pid=9325 comm="syz.3.1085" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.490354][ T9328] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1086'. [ 154.531648][ T40] audit: type=1400 audit(1775425903.215:7359): avc: denied { ioctl } for pid=9325 comm="syz.3.1085" path="socket:[33405]" dev="sockfs" ino=33405 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.630411][ T5991] usb 6-1: Using ep0 maxpacket: 32 [ 154.633452][ T5991] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.636419][ T5991] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.639481][ T5991] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.642349][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.645442][ T5991] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.648444][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.652804][ T5991] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.655642][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.660598][ T5991] usb 6-1: config 0 descriptor?? [ 154.819712][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.876405][ T5991] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.881910][ T5991] usb 6-1: USB disconnect, device number 15 [ 154.887372][ T5991] usblp0: removed [ 154.999617][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 155.002762][ T34] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 155.005969][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.010195][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.013114][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.025722][ T34] usbtmc 5-1:16.0: bulk endpoints not found [ 155.075317][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 155.223348][ T40] audit: type=1400 audit(1775425903.905:7360): avc: denied { mounton } for pid=9331 comm="syz.0.1088" path="/292/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.224405][ T9332] overlayfs: workdir and upperdir must reside under the same mount [ 155.233496][ T40] audit: type=1400 audit(1775425903.905:7361): avc: denied { getattr } for pid=9331 comm="syz.0.1088" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.319727][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 155.339826][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 155.471427][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.474916][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.478442][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.482408][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.486250][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.489716][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 155.490316][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.494095][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.497479][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.502054][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.505349][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.509306][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.514915][ T10] usb 6-1: config 0 descriptor?? [ 155.517385][ T24] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 155.522934][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.523120][ T9314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.528547][ T24] usb 8-1: config 0 descriptor?? [ 155.538678][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input25 [ 155.545430][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.550492][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.553542][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.557085][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.570854][ T6037] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.574241][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.577880][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.584966][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.589145][ T5320] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.608070][ T40] audit: type=1400 audit(1775425904.285:7362): avc: denied { setopt } for pid=9331 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.734536][ T9344] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 155.741256][ T24] usb 8-1: USB disconnect, device number 14 [ 155.744536][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.949220][ C0] usblp0: nonzero read bulk status received: -71 [ 155.957182][ T40] audit: type=1400 audit(1775425904.635:7363): avc: denied { map } for pid=9313 comm="syz.1.1081" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 155.964311][ T40] audit: type=1400 audit(1775425904.635:7364): avc: denied { execute } for pid=9313 comm="syz.1.1081" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.027775][ T9314] usblp0: error -71 reading from printer [ 156.030616][ C2] usblp0: nonzero read bulk status received: -71 [ 156.034156][ T10] usb 6-1: USB disconnect, device number 16 [ 156.038521][ T10] usblp0: removed [ 156.323151][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1094'. [ 156.498950][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.502449][ T9353] bridge_slave_1: left allmulticast mode [ 156.504877][ T9353] bridge_slave_1: left promiscuous mode [ 156.506867][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.514011][ T9353] bridge_slave_0: left allmulticast mode [ 156.516453][ T9353] bridge_slave_0: left promiscuous mode [ 156.519094][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.655669][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.658665][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.662086][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.665117][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.668509][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 156.719149][ T40] audit: type=1326 audit(1775425905.395:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.3.1098" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d74f9c819 code=0x0 [ 156.894473][ T9361] tipc: Enabling of bearer rejected, failed to enable media [ 157.510706][ T9365] FAULT_INJECTION: forcing a failure. [ 157.510706][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.516007][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.1.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.516027][ T9365] Tainted: [L]=SOFTLOCKUP [ 157.516030][ T9365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.516038][ T9365] Call Trace: [ 157.516047][ T9365] [ 157.516053][ T9365] dump_stack_lvl+0x100/0x190 [ 157.516075][ T9365] should_fail_ex.cold+0x5/0xa [ 157.516089][ T9365] _copy_from_user+0x2e/0xd0 [ 157.516103][ T9365] input_event_from_user+0x123/0x310 [ 157.516115][ T9365] ? __pfx_input_event_from_user+0x10/0x10 [ 157.516126][ T9365] ? __pfx___might_resched+0x10/0x10 [ 157.516139][ T9365] ? input_inject_event+0x1c9/0x3b0 [ 157.516158][ T9365] evdev_write+0x342/0x610 [ 157.516171][ T9365] ? __pfx_evdev_write+0x10/0x10 [ 157.516182][ T9365] ? bpf_lsm_file_permission+0x9/0x10 [ 157.516198][ T9365] ? security_file_permission+0x76/0x210 [ 157.516216][ T9365] ? rw_verify_area+0xce/0x6d0 [ 157.516234][ T9365] vfs_write+0x2aa/0x1070 [ 157.516244][ T9365] ? __pfx_evdev_write+0x10/0x10 [ 157.516255][ T9365] ? __pfx_vfs_write+0x10/0x10 [ 157.516263][ T9365] ? find_held_lock+0x2b/0x80 [ 157.516277][ T9365] ? __fget_files+0x215/0x3d0 [ 157.516288][ T9365] ? __fget_files+0x215/0x3d0 [ 157.516302][ T9365] ? __fget_files+0x21f/0x3d0 [ 157.516317][ T9365] ksys_write+0x1f8/0x250 [ 157.516327][ T9365] ? __pfx_ksys_write+0x10/0x10 [ 157.516341][ T9365] do_syscall_64+0x106/0xf80 [ 157.516352][ T9365] ? clear_bhb_loop+0x40/0x90 [ 157.516390][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.516404][ T9365] RIP: 0033:0x7f46e099c819 [ 157.516413][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.516424][ T9365] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.516436][ T9365] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 157.516442][ T9365] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 157.516448][ T9365] RBP: 00007f46e183b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.516454][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.516460][ T9365] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 157.516474][ T9365] [ 157.603761][ T34] usb 5-1: USB disconnect, device number 8 [ 157.928206][ T40] audit: type=1400 audit(1775425906.605:7366): avc: denied { mounton } for pid=9373 comm="syz.0.1102" path="/294/bus" dev="tmpfs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 157.929307][ T9374] /dev/nullb0: Can't open blockdev [ 158.105040][ T9389] openvswitch: netlink: Message has 4 unknown bytes. [ 158.107980][ T9389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.223154][ T40] audit: type=1400 audit(1775425906.905:7367): avc: denied { bind } for pid=9391 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.486106][ T9394] __nla_validate_parse: 28 callbacks suppressed [ 158.486120][ T9394] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1109'. [ 159.023513][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 159.112741][ T5287] Bluetooth: hci1: unknown advertising packet type: 0x0f [ 159.112782][ T5287] Bluetooth: hci1: unknown advertising packet type: 0x0f [ 159.116315][ T5287] Bluetooth: hci1: unknown advertising packet type: 0x66 [ 159.189668][ T5991] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 159.359704][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 159.363397][ T5991] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.366068][ T5991] usb 6-1: config 0 has no interface number 0 [ 159.367997][ T5991] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.371794][ T5991] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.375515][ T5991] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.378940][ T5991] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.386768][ T5991] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.389840][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.397815][ T5991] usb 6-1: config 0 descriptor?? [ 159.407352][ T5991] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.488091][ T9422] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 159.516175][ T9422] block nbd2: NBD_DISCONNECT [ 159.520144][ T9424] syzkaller0: entered promiscuous mode [ 159.522032][ T9424] syzkaller0: entered allmulticast mode [ 159.614146][ T9398] loop7: detected capacity change from 0 to 2640 [ 159.617310][ T9398] buffer_io_error: 32 callbacks suppressed [ 159.617319][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.626334][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.629118][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.632609][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.635077][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.637558][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.640090][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.642549][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.645008][ T9398] ldm_validate_partition_table(): Disk read failed. [ 159.647126][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.649631][ T9398] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.652804][ T9398] Dev loop7: unable to read RDB block 0 [ 159.655124][ T9398] loop7: unable to read partition table [ 159.657145][ T9398] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 159.668043][ T9434] /dev/nullb0: Can't open blockdev [ 159.944029][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1125'. [ 160.011015][ T9446] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 160.013505][ T9446] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1125'. [ 160.062618][ T9448] fuse: Unknown parameter ' ' [ 160.154112][ T9451] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 160.172634][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 160.172646][ T40] audit: type=1400 audit(1775425908.855:7371): avc: denied { write } for pid=9450 comm="syz.3.1127" lport=60540 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 160.467619][ T9459] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 160.485127][ T9459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.525603][ T9459] bond4: (slave veth3): Enslaving as an active interface with a down link [ 160.541478][ T9459] bond4: (slave dummy0): making interface the new active one [ 160.545346][ T9459] dummy0: entered promiscuous mode [ 160.547584][ T9459] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 160.552849][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 160.558431][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 160.564502][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 160.581210][ T40] audit: type=1400 audit(1775425909.265:7372): avc: denied { ioctl } for pid=9458 comm="syz.3.1129" path="socket:[36221]" dev="sockfs" ino=36221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.675886][ T9464] syzkaller0: entered promiscuous mode [ 160.677764][ T9464] syzkaller0: entered allmulticast mode [ 160.768261][ T9468] tmpfs: Bad value for 'mpol' [ 160.826827][ T9475] tipc: Started in network mode [ 160.828828][ T9475] tipc: Node identity 8e9bf3664296, cluster identity 4711 [ 160.833072][ T9475] tipc: Enabled bearer , priority 0 [ 160.836122][ T9475] syzkaller0: entered promiscuous mode [ 160.838557][ T9475] syzkaller0: entered allmulticast mode [ 161.178637][ T5287] Bluetooth: hci1: unexpected event 0x1d length: 3 < 5 [ 161.180657][ T9487] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 161.180657][ T9487] program syz.2.1139 not setting count and/or reply_len properly [ 161.187649][ T9487] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.307624][ T9497] loop7: detected capacity change from 0 to 2640 [ 161.311227][ T9497] ldm_validate_partition_table(): Disk read failed. [ 161.313619][ T9497] Dev loop7: unable to read RDB block 0 [ 161.317540][ T9497] loop7: unable to read partition table [ 161.319521][ T9497] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 161.399746][ T9474] tipc: Resetting bearer [ 161.413563][ T9474] tipc: Disabling bearer [ 161.435082][ T9504] netlink: 'syz.2.1143': attribute type 2 has an invalid length. [ 161.438545][ T9504] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 161.442136][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 161.446238][ T40] audit: type=1400 audit(1775425910.125:7373): avc: denied { append } for pid=9503 comm="syz.2.1143" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.455238][ T40] audit: type=1400 audit(1775425910.125:7374): avc: denied { connect } for pid=9503 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.463619][ T40] audit: type=1400 audit(1775425910.125:7375): avc: denied { map } for pid=9503 comm="syz.2.1143" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.463644][ T40] audit: type=1400 audit(1775425910.125:7376): avc: denied { write execute } for pid=9503 comm="syz.2.1143" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.500019][ T9507] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 161.505449][ T9507] block nbd0: NBD_DISCONNECT [ 161.588586][ T9513] block nbd2: NBD_DISCONNECT [ 161.768951][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 161.769469][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 161.825098][ T9535] loop7: detected capacity change from 0 to 2640 [ 161.834447][ T6383] ldm_validate_partition_table(): Disk read failed. [ 161.837181][ T6383] Dev loop7: unable to read RDB block 0 [ 161.839693][ T6383] loop7: unable to read partition table [ 161.851939][ T9535] ldm_validate_partition_table(): Disk read failed. [ 161.854636][ T9535] Dev loop7: unable to read RDB block 0 [ 161.856862][ T9535] loop7: unable to read partition table [ 161.859241][ T9535] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 161.951976][ T1329] usb 6-1: USB disconnect, device number 17 [ 161.961307][ T1329] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 162.037405][ T9553] xt_CT: No such helper "pptp" [ 162.048287][ T9554] xt_CT: No such helper "pptp" [ 162.187886][ T9555] erspan2: entered promiscuous mode [ 162.506364][ T9589] fuse: Bad value for 'fd' [ 162.624725][ T9597] loop7: detected capacity change from 0 to 2640 [ 162.627696][ T6383] ldm_validate_partition_table(): Disk read failed. [ 162.630269][ T6383] Dev loop7: unable to read RDB block 0 [ 162.632511][ T6383] loop7: unable to read partition table [ 162.639521][ T9597] ldm_validate_partition_table(): Disk read failed. [ 162.642356][ T9597] Dev loop7: unable to read RDB block 0 [ 162.644516][ T9597] loop7: unable to read partition table [ 162.646827][ T9597] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 162.716686][ T40] audit: type=1400 audit(1775425911.395:7377): avc: denied { create } for pid=9607 comm="syz.2.1167" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.725210][ T40] audit: type=1400 audit(1775425911.395:7378): avc: denied { link } for pid=9607 comm="syz.2.1167" name="#f" dev="tmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.734064][ T40] audit: type=1400 audit(1775425911.395:7379): avc: denied { rename } for pid=9607 comm="syz.2.1167" name="#10" dev="tmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.794417][ T9616] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 162.797489][ T9616] pim6reg0: linktype set to 778 [ 163.090931][ T9642] loop7: detected capacity change from 0 to 2640 [ 163.094006][ T9642] ldm_validate_partition_table(): Disk read failed. [ 163.096147][ T9642] Dev loop7: unable to read RDB block 0 [ 163.097973][ T9642] loop7: unable to read partition table [ 163.106527][ T40] audit: type=1400 audit(1775425911.785:7380): avc: denied { setattr } for pid=9639 comm="syz.1.1176" name="TIPC" dev="sockfs" ino=39100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.112467][ T9642] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 163.159674][ T1329] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.309644][ T1329] usb 5-1: Using ep0 maxpacket: 32 [ 163.318341][ T1329] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.322132][ T1329] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.325693][ T1329] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.329504][ T1329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.333540][ T1329] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.337639][ T1329] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.343210][ T1329] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.346993][ T1329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.349664][ T9643] nbd0: detected capacity change from 0 to 128 [ 163.357490][ T1329] usb 5-1: config 0 descriptor?? [ 163.571046][ T1329] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.582343][ T1329] usb 5-1: USB disconnect, device number 9 [ 163.586097][ T1329] usblp0: removed [ 163.805317][ T9656] hub 8-0:1.0: USB hub found [ 163.807329][ T9656] hub 8-0:1.0: 1 port detected [ 163.870261][ T5940] block nbd0: Receive control failed (result -104) [ 163.870266][ T5287] block nbd0: Receive control failed (result -32) [ 164.059674][ T5991] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 164.199721][ T5991] usb 5-1: device descriptor read/64, error -71 [ 164.451082][ T5991] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 164.589671][ T5991] usb 5-1: device descriptor read/64, error -71 [ 164.621012][ T9666] __nla_validate_parse: 4 callbacks suppressed [ 164.621029][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1185'. [ 164.716262][ T5991] usb usb5-port1: attempt power cycle [ 164.853389][ T9668] loop7: detected capacity change from 0 to 2640 [ 164.859797][ T9668] buffer_io_error: 127 callbacks suppressed [ 164.859809][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.864433][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.867087][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.880564][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.882982][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.885548][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.888133][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.890930][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.893552][ T9668] ldm_validate_partition_table(): Disk read failed. [ 164.895771][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.898379][ T9668] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.901048][ T9668] Dev loop7: unable to read RDB block 0 [ 164.903021][ T9668] loop7: unable to read partition table [ 164.904528][ T9671] ip6gre1: entered promiscuous mode [ 164.905133][ T9668] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 164.907742][ T9671] ip6gre1: entered allmulticast mode [ 165.049651][ T5991] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 165.074554][ T5991] usb 5-1: device descriptor read/8, error -71 [ 165.194210][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 165.198136][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1189'. [ 165.202517][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 165.202640][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 165.202652][ T40] audit: type=1400 audit(1775425913.885:7382): avc: denied { write } for pid=9683 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.206318][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 165.291788][ T40] audit: type=1400 audit(1775425913.975:7383): avc: denied { getopt } for pid=9691 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.313450][ T5991] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 165.325566][ T9697] fuse: Unknown parameter 'grou00000000000000000000' [ 165.336647][ T5991] usb 5-1: device descriptor read/8, error -71 [ 165.380314][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 165.440058][ T5991] usb usb5-port1: unable to enumerate USB device [ 165.549810][ T40] audit: type=1400 audit(1775425914.225:7384): avc: denied { load_policy } for pid=9703 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 165.555370][ T9704] SELinux: failed to load policy [ 165.698594][ T9709] loop7: detected capacity change from 0 to 2640 [ 165.702268][ T9709] ldm_validate_partition_table(): Disk read failed. [ 165.714322][ T9709] Dev loop7: unable to read RDB block 0 [ 165.716118][ T9709] loop7: unable to read partition table [ 165.717950][ T9709] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 165.857023][ T9723] syzkaller0: entered promiscuous mode [ 165.858809][ T9723] syzkaller0: entered allmulticast mode [ 165.899170][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1204'. [ 166.782203][ T9749] fuse: Unknown parameter 'grou00000000000000000000' [ 166.852429][ T9739] syzkaller0: entered promiscuous mode [ 166.854226][ T9739] syzkaller0: entered allmulticast mode [ 166.981460][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 167.973816][ T9785] fuse: Unknown parameter 'group_i00000000000000000000' [ 167.979992][ T40] audit: type=1400 audit(1775425916.665:7385): avc: denied { listen } for pid=9784 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.996287][ T9786] bridge2: entered allmulticast mode [ 168.066294][ T9788] syzkaller0: entered promiscuous mode [ 168.068033][ T9788] syzkaller0: entered allmulticast mode [ 169.158803][ T9808] syzkaller0: entered promiscuous mode [ 169.160662][ T9808] syzkaller0: entered allmulticast mode [ 169.272137][ T40] audit: type=1400 audit(1775425917.955:7386): avc: denied { ioctl } for pid=9820 comm="syz.0.1226" path="socket:[38443]" dev="sockfs" ino=38443 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.342352][ T9823] fuse: Unknown parameter 'group_i00000000000000000000' [ 169.924604][ T9838] kvm: pic: non byte write [ 170.408236][ T9846] loop7: detected capacity change from 0 to 2640 [ 170.414447][ T6037] buffer_io_error: 32 callbacks suppressed [ 170.414458][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.418802][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.420173][ T5991] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 170.422534][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.427583][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.433356][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.435958][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.438777][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.442170][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.445227][ T9848] syzkaller0: entered promiscuous mode [ 170.445350][ T6037] ldm_validate_partition_table(): Disk read failed. [ 170.447093][ T9848] syzkaller0: entered allmulticast mode [ 170.449618][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.454602][ T6037] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.457040][ T6037] Dev loop7: unable to read RDB block 0 [ 170.458906][ T6037] loop7: unable to read partition table [ 170.463215][ T9846] ldm_validate_partition_table(): Disk read failed. [ 170.466187][ T9846] Dev loop7: unable to read RDB block 0 [ 170.469716][ T9846] loop7: unable to read partition table [ 170.471572][ T9846] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 170.489158][ T5335] ldm_validate_partition_table(): Disk read failed. [ 170.492708][ T5335] Dev loop7: unable to read RDB block 0 [ 170.495293][ T5335] loop7: unable to read partition table [ 170.551084][ T40] audit: type=1400 audit(1775425919.235:7387): avc: denied { setopt } for pid=9851 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.579652][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 170.582668][ T5991] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.585759][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.588735][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.591607][ T9854] Invalid logical block size (536872960) [ 170.595684][ T5991] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.599888][ T5991] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.602585][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.634622][ T9856] fuse: Unknown parameter 'group_id00000000000000000000' [ 170.809202][ T5991] usb 7-1: GET_CAPABILITIES returned 0 [ 170.811763][ T5991] usbtmc 7-1:16.0: can't read capabilities [ 171.012521][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.018592][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.024153][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.035333][ T9] usb 7-1: USB disconnect, device number 28 [ 171.652009][ T9874] syzkaller0: entered promiscuous mode [ 171.654316][ T9874] syzkaller0: entered allmulticast mode [ 171.719363][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 171.801699][ T40] audit: type=1400 audit(1775425920.485:7388): avc: denied { setopt } for pid=9893 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 172.806020][ T40] audit: type=1400 audit(1775425921.485:7389): avc: denied { append } for pid=9897 comm="syz.0.1246" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.833959][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 172.950103][ T12] dummy0: left promiscuous mode [ 172.971229][ T9904] nbd: must specify a device to reconfigure [ 173.042414][ T9909] fuse: Unknown parameter 'group_id00000000000000000000' [ 173.125075][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 173.162000][ T40] audit: type=1400 audit(1775425921.845:7390): avc: denied { accept } for pid=9920 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.195553][ T9912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.209053][ T9912] batadv_slave_0: entered promiscuous mode [ 173.451416][ T9940] fuse: Bad value for 'user_id' [ 173.453528][ T9940] fuse: Bad value for 'user_id' [ 173.705318][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 173.745595][ T9951] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 173.756079][ T9953] syzkaller0: entered promiscuous mode [ 173.758002][ T9953] syzkaller0: entered allmulticast mode [ 173.893396][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.896632][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.899489][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.902715][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.905552][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.908839][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.912964][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.916989][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.922336][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.925881][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.929000][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.932860][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.935811][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.939241][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.943315][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.946469][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.949378][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.952638][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.955561][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.958414][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.962516][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.965474][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.968232][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.972333][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.978084][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.982051][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.985455][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.989064][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.993709][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 173.997383][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 174.001191][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 174.004829][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 174.008360][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 174.042740][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 174.183706][ T9970] usb usb8: usbfs: process 9970 (syz.2.1272) did not claim interface 0 before use [ 174.778934][ T9960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.783179][ T9960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.785192][ T9960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.845893][ T9988] syzkaller0: entered promiscuous mode [ 174.848372][ T9988] syzkaller0: entered allmulticast mode [ 174.895622][ T40] audit: type=1400 audit(1775425923.575:7391): avc: denied { read } for pid=9991 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.936610][ T9995] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.016246][T10003] Can't find a SQUASHFS superblock on nullb0 [ 175.353695][T10026] kvm: faulting far call emulation tainted memory [ 175.390163][T10028] syzkaller0: entered promiscuous mode [ 175.392209][T10028] syzkaller0: entered allmulticast mode [ 175.464180][T10031] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1293'. [ 175.517816][ T40] audit: type=1400 audit(1775425924.195:7392): avc: denied { map } for pid=10035 comm="syz.0.1296" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 175.535732][T10040] netlink: 'syz.2.1297': attribute type 64 has an invalid length. [ 175.538546][T10040] netlink: 'syz.2.1297': attribute type 4 has an invalid length. [ 175.541855][T10040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1297'. [ 175.545295][T10040] bpq0: entered promiscuous mode [ 175.612406][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 175.703055][ T40] audit: type=1401 audit(1775425924.385:7393): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 175.874417][T10062] 9p: Bad value for 'wfdno' [ 175.966202][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1307'. [ 175.970191][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1307'. [ 175.991190][T10069] syzkaller0: entered promiscuous mode [ 175.993126][T10069] syzkaller0: entered allmulticast mode [ 176.091699][ T5287] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.162705][ T40] audit: type=1400 audit(1775425924.845:7394): avc: denied { bind } for pid=10074 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.225095][T10084] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 176.585472][T10094] netlink: 'syz.3.1313': attribute type 8 has an invalid length. [ 176.614263][T10092] (syz.3.1313,10092,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 176.618701][T10092] (syz.3.1313,10092,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 176.809691][ T5287] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.211274][T10084] workqueue: Failed to create a rescuer kthread for wq "bond67": -EINTR [ 177.288981][T10102] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 177.296130][T10102] bond2 (unregistering): Released all slaves [ 177.323043][T10103] syzkaller0: entered promiscuous mode [ 177.325435][T10103] syzkaller0: entered allmulticast mode [ 177.383131][T10109] __nla_validate_parse: 1 callbacks suppressed [ 177.383142][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 177.394765][T10109] virtiofs: Unknown parameter 'discard' [ 177.431610][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 177.465101][T10116] fuse: Bad value for 'fd' [ 177.758379][T10132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1326'. [ 177.918172][ T40] audit: type=1400 audit(1775425926.595:7395): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 177.947511][T10140] binder: 10139:10140 ioctl c0306201 2000000003c0 returned -14 [ 177.950833][ T40] audit: type=1400 audit(1775425926.635:7396): avc: denied { call } for pid=10139 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.958273][ T40] audit: type=1400 audit(1775425926.635:7397): avc: denied { transfer } for pid=10139 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 178.048512][T10140] kvm: pic: non byte write [ 178.686583][T10159] syz.3.1333 (10159): /proc/10157/oom_adj is deprecated, please use /proc/10157/oom_score_adj instead. [ 178.769140][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 178.835632][T10169] syzkaller0: entered promiscuous mode [ 178.838017][T10169] syzkaller0: entered allmulticast mode [ 178.890131][ T5287] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.943068][ T40] audit: type=1400 audit(1775425927.625:7398): avc: denied { setattr } for pid=10172 comm="syz.1.1338" name="/" dev="9p" ino=79691949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.049705][T10177] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 179.071451][T10177] bond5 (unregistering): Released all slaves [ 179.182439][ T40] audit: type=1400 audit(1775425927.865:7399): avc: denied { append } for pid=10180 comm="syz.1.1339" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 179.562968][ T40] audit: type=1400 audit(1775425928.245:7400): avc: denied { connect } for pid=10191 comm="syz.1.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.565034][T10192] overlayfs: missing 'lowerdir' [ 179.602949][ C2] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 179.607326][ C2] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 179.859668][ T5991] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 180.009694][ T5991] usb 8-1: Using ep0 maxpacket: 32 [ 180.013969][ T5991] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.017238][ T5991] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.020882][ T5991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.024380][ T5991] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.028108][ T5991] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.032632][ T5991] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.037573][ T5991] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.041330][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.047165][ T5991] usb 8-1: config 0 descriptor?? [ 180.267155][ T5991] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.275002][ T5991] usb 8-1: USB disconnect, device number 15 [ 180.279242][ T5991] usblp0: removed [ 180.487577][ T40] audit: type=1400 audit(1775425929.165:7401): avc: denied { watch_sb } for pid=10207 comm="syz.2.1351" path="/342" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.582766][T10214] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.585364][T10213] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.659656][ T40] audit: type=1400 audit(1775425929.335:7402): avc: denied { map } for pid=10218 comm="syz.2.1353" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.789669][ T5991] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 180.942836][ T5991] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.948235][ T5991] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.952528][ T5991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.956370][ T5991] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.962250][ T5991] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 180.966801][ T5991] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.972225][ T5991] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.975919][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.983451][ T5991] usb 8-1: config 0 descriptor?? [ 180.986502][T10194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.092738][ T40] audit: type=1400 audit(1775425929.775:7403): avc: denied { execute } for pid=10234 comm="syz.1.1360" path="/file1" dev="ramfs" ino=40479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 181.174811][T10243] FAULT_INJECTION: forcing a failure. [ 181.174811][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.174835][T10243] CPU: 3 UID: 0 PID: 10243 Comm: syz.1.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.174856][T10243] Tainted: [L]=SOFTLOCKUP [ 181.174860][T10243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.174867][T10243] Call Trace: [ 181.174911][T10243] [ 181.174917][T10243] dump_stack_lvl+0x100/0x190 [ 181.175290][T10243] should_fail_ex.cold+0x5/0xa [ 181.175306][T10243] _copy_from_user+0x2e/0xd0 [ 181.175359][T10243] move_addr_to_kernel+0x65/0x170 [ 181.175476][T10243] __sys_sendto+0x1c9/0x4b0 [ 181.175490][T10243] ? __pfx___sys_sendto+0x10/0x10 [ 181.175516][T10243] ? ksys_write+0x1ac/0x250 [ 181.175558][T10243] ? __pfx_ksys_write+0x10/0x10 [ 181.175569][T10243] __x64_sys_sendto+0xe0/0x1c0 [ 181.175583][T10243] ? do_syscall_64+0x95/0xf80 [ 181.175708][T10243] ? lockdep_hardirqs_on+0x78/0x100 [ 181.175725][T10243] do_syscall_64+0x106/0xf80 [ 181.175734][T10243] ? clear_bhb_loop+0x40/0x90 [ 181.175748][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.175759][T10243] RIP: 0033:0x7f46e099c819 [ 181.175769][T10243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.175779][T10243] RSP: 002b:00007f46e183b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 181.175814][T10243] RAX: ffffffffffffffda RBX: 00007f46e0c15fa0 RCX: 00007f46e099c819 [ 181.175821][T10243] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 181.175827][T10243] RBP: 00007f46e183b090 R08: 0000200000000140 R09: 0000000000000014 [ 181.175833][T10243] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 181.175839][T10243] R13: 00007f46e0c16038 R14: 00007f46e0c15fa0 R15: 00007ffc08050b08 [ 181.175858][T10243] [ 181.215337][ T5991] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.412221][ C0] usblp0: nonzero read bulk status received: -71 [ 181.413442][T10194] usblp0: error -71 reading from printer [ 181.417244][ C0] usblp0: nonzero read bulk status received: -71 [ 181.418135][ T10] usb 8-1: USB disconnect, device number 16 [ 181.426423][ T10] usblp0: removed [ 181.960374][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1365'. [ 181.960513][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 181.960534][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 182.000487][T10255] binder: 10254:10255 ioctl 6 0 returned -22 [ 182.152282][T10269] syzkaller0: entered promiscuous mode [ 182.154616][T10269] syzkaller0: entered allmulticast mode [ 182.699661][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 182.869695][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 182.873663][ T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.876874][ T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.880311][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.883370][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.887196][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.901499][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.906867][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.910593][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.916162][ T24] usb 7-1: config 0 descriptor?? [ 183.125614][ T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.133238][ T24] usb 7-1: USB disconnect, device number 29 [ 183.140705][ T24] usblp0: removed [ 183.188369][ T40] audit: type=1400 audit(1775425931.865:7404): avc: denied { ioctl } for pid=10286 comm="syz.1.1380" path="socket:[41261]" dev="sockfs" ino=41261 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.325050][T10278] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 183.649701][ T1329] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 183.819971][ T1329] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 183.825397][ T1329] usb 7-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 183.828295][ T1329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.831056][ T1329] usb 7-1: Product: syz [ 183.832431][ T1329] usb 7-1: Manufacturer: syz [ 183.833931][ T1329] usb 7-1: SerialNumber: syz [ 183.946714][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 184.056235][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.066339][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.071097][ T40] audit: type=1400 audit(1775425932.755:7405): avc: denied { bind } for pid=10277 comm="syz.2.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.082447][ T1329] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 184.111522][T10320] lo speed is unknown, defaulting to 1000 [ 184.117398][T10320] lo speed is unknown, defaulting to 1000 [ 184.123229][T10320] lo speed is unknown, defaulting to 1000 [ 184.123559][ T1329] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.131965][ T1329] usb 7-1: USB disconnect, device number 30 [ 184.139778][T10322] fuse: Unknown parameter 'user_id00000000000000000000' [ 184.188550][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.269378][T10320] infiniband lyz2: set active [ 184.271136][T10320] infiniband lyz2: added lo [ 184.313814][T10320] RDS/IB: lyz2: added [ 184.316106][ T5991] lo speed is unknown, defaulting to 1000 [ 184.319474][T10320] smc: adding ib device lyz2 with port count 1 [ 184.321827][T10320] smc: ib device lyz2 port 1 has no pnetid [ 184.374979][ T5991] lo speed is unknown, defaulting to 1000 [ 184.381628][T10320] lo speed is unknown, defaulting to 1000 [ 184.524093][T10320] lo speed is unknown, defaulting to 1000 [ 184.587911][T10330] syzkaller0: entered promiscuous mode [ 184.589760][T10330] syzkaller0: entered allmulticast mode [ 184.625497][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 184.660867][T10320] lo speed is unknown, defaulting to 1000 [ 184.685663][T10336] netlink: 'syz.2.1398': attribute type 6 has an invalid length. [ 184.778169][T10340] fuse: Unknown parameter 'user_id00000000000000000000' [ 184.824999][ T40] audit: type=1400 audit(1775425933.505:7406): avc: denied { lock } for pid=10343 comm="syz.1.1402" path="socket:[43054]" dev="sockfs" ino=43054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 184.831616][T10320] lo speed is unknown, defaulting to 1000 [ 184.865151][T10347] xt_connbytes: Forcing CT accounting to be enabled [ 184.869800][T10347] set match dimension is over the limit! [ 184.989126][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 184.995488][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.005526][T10358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.020346][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.025076][T10358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.027895][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.031951][T10358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.037771][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'. [ 185.983221][T10392] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 186.133203][T10395] lo speed is unknown, defaulting to 1000 [ 186.159438][ T10] IPVS: starting estimator thread 0... [ 186.164963][T10400] macsec0: entered promiscuous mode [ 186.166757][T10400] macsec0: entered allmulticast mode [ 186.168509][T10400] veth1_macvtap: entered allmulticast mode [ 186.256306][ T5991] IPVS: starting estimator thread 0... [ 186.259690][T10401] IPVS: using max 44 ests per chain, 105600 per kthread [ 186.328823][ T40] audit: type=1400 audit(1775425935.005:7407): avc: denied { mount } for pid=10413 comm="syz.1.1429" name="/" dev="configfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 186.339966][T10409] IPVS: using max 44 ests per chain, 105600 per kthread [ 186.343932][T10416] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 186.415026][T10421] lo speed is unknown, defaulting to 1000 [ 186.941261][T10437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10437 comm=syz.3.1436 [ 187.023361][ T40] audit: type=1326 audit(1775425935.705:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.1.1438" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46e099c819 code=0x0 [ 187.049651][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.393286][T10456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10456 comm=syz.3.1441 [ 187.664713][T10479] FAULT_INJECTION: forcing a failure. [ 187.664713][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.668798][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.3.1448 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.668815][T10479] Tainted: [L]=SOFTLOCKUP [ 187.668819][T10479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.668826][T10479] Call Trace: [ 187.668874][T10479] [ 187.668879][T10479] dump_stack_lvl+0x100/0x190 [ 187.669125][T10479] should_fail_ex.cold+0x5/0xa [ 187.669140][T10479] _copy_from_iter+0x1f4/0x1690 [ 187.669198][T10479] ? _copy_from_iter+0x350/0x1690 [ 187.669210][T10479] ? _copy_from_iter+0x270/0x1690 [ 187.669221][T10479] ? __pfx__copy_from_iter+0x10/0x10 [ 187.669235][T10479] ? __pfx__copy_from_iter+0x10/0x10 [ 187.669246][T10479] ? _copy_from_iter+0x270/0x1690 [ 187.669260][T10479] copy_page_from_iter+0xde/0x180 [ 187.669274][T10479] skb_copy_datagram_from_iter+0x399/0x720 [ 187.669400][T10479] packet_sendmsg+0x2476/0x53c0 [ 187.669578][T10479] ? avc_has_perm+0xaa/0x1e0 [ 187.669654][T10479] ? sock_has_perm+0x258/0x2f0 [ 187.669676][T10479] ? __pfx_sock_has_perm+0x10/0x10 [ 187.669699][T10479] ? __pfx_packet_sendmsg+0x10/0x10 [ 187.669730][T10479] __sys_sendto+0x468/0x4b0 [ 187.669745][T10479] ? __pfx_packet_sendmsg+0x10/0x10 [ 187.669758][T10479] ? __pfx___sys_sendto+0x10/0x10 [ 187.669783][T10479] ? ksys_write+0x1ac/0x250 [ 187.669830][T10479] ? __pfx_ksys_write+0x10/0x10 [ 187.669844][T10479] __x64_sys_sendto+0xe0/0x1c0 [ 187.669858][T10479] ? do_syscall_64+0x95/0xf80 [ 187.669928][T10479] ? lockdep_hardirqs_on+0x78/0x100 [ 187.669945][T10479] do_syscall_64+0x106/0xf80 [ 187.669954][T10479] ? clear_bhb_loop+0x40/0x90 [ 187.669968][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.669979][T10479] RIP: 0033:0x7f6d74f9c819 [ 187.669989][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.669999][T10479] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.670038][T10479] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 187.670045][T10479] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 187.670051][T10479] RBP: 00007f6d75f08090 R08: 0000200000000140 R09: 0000000000000014 [ 187.670057][T10479] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 187.670063][T10479] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 187.670077][T10479] [ 187.787819][T10481] netlink: 'syz.3.1449': attribute type 64 has an invalid length. [ 187.797422][ T10] lo speed is unknown, defaulting to 1000 [ 187.844060][T10483] syzkaller0: entered promiscuous mode [ 187.846477][T10483] syzkaller0: entered allmulticast mode [ 188.028245][T10494] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 188.094688][T10510] i2c i2c-1: dtv_property_process_set: SET cmd 0x2f74656e undefined [ 188.165477][T10526] fuse: Bad value for 'fd' [ 188.282708][T10533] ip6t_srh: unknown srh match flags 4015 [ 188.285910][T10533] netlink: 'syz.3.1462': attribute type 10 has an invalid length. [ 188.292032][T10533] veth1_macvtap: left promiscuous mode [ 188.302264][T10530] syzkaller0: entered promiscuous mode [ 188.304668][T10530] syzkaller0: entered allmulticast mode [ 188.306169][T10533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=10533 comm=syz.3.1462 [ 188.646937][T10541] kvm: pic: non byte write [ 189.060923][T10574] syzkaller0: entered promiscuous mode [ 189.062793][T10574] syzkaller0: entered allmulticast mode [ 189.161200][T10580] __nla_validate_parse: 10 callbacks suppressed [ 189.161213][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 189.325374][T10582] 9p: Could not find request transport: virti2 {QÁvÆ–cQ [ 189.329233][ T40] audit: type=1400 audit(1775425938.005:7409): avc: denied { shutdown } for pid=10594 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.372663][ T40] audit: type=1400 audit(1775425938.055:7410): avc: denied { create } for pid=10594 comm="syz.3.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 189.588777][T10602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10602 comm=syz.1.1486 [ 189.593887][T10602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10602 comm=syz.1.1486 [ 189.826513][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 189.886773][T10620] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 190.292304][T10632] kvm: pic: non byte write [ 190.422928][ T40] audit: type=1400 audit(1775425939.105:7411): avc: denied { getopt } for pid=10639 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.439696][ T40] audit: type=1400 audit(1775425939.105:7412): avc: denied { ioctl } for pid=10639 comm="syz.3.1498" path="socket:[43472]" dev="sockfs" ino=43472 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.521037][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 190.655867][ T40] audit: type=1400 audit(1775425939.335:7413): avc: denied { ioctl } for pid=10648 comm="syz.3.1501" path="socket:[41873]" dev="sockfs" ino=41873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.989821][T10660] program syz.3.1503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.995103][T10660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41744 sclass=netlink_route_socket pid=10660 comm=syz.3.1503 [ 191.386875][ T40] audit: type=1400 audit(1775425940.065:7414): avc: denied { getopt } for pid=10613 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.488388][T10674] syzkaller0: entered promiscuous mode [ 191.490271][T10674] syzkaller0: entered allmulticast mode [ 191.893593][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 192.219897][T10667] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 192.267336][T10690] openvswitch: netlink: Tunnel attr 16 has unexpected len 667 expected 0 [ 192.344088][T10688] kvm: pic: non byte write [ 192.501337][T10695] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 192.504385][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 192.531391][T10695] team0: Port device team_slave_0 removed [ 192.758425][ T40] audit: type=1400 audit(1775425941.435:7415): avc: denied { wake_alarm } for pid=10703 comm="syz.2.1519" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.760882][T10704] program syz.2.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.768218][T10704] ata1.00: invalid transfer count 0 [ 192.817088][T10708] syzkaller0: entered promiscuous mode [ 192.819534][T10708] syzkaller0: entered allmulticast mode [ 193.027714][T10712] nbd: must specify at least one socket [ 193.524689][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.528348][T10727] bond0: (slave wlan1): Opening slave failed [ 193.531762][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.534873][T10727] bond0: (slave wlan1): Opening slave failed [ 193.537383][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.541053][T10727] bond0: (slave wlan1): Opening slave failed [ 193.543824][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.547182][T10727] bond0: (slave wlan1): Opening slave failed [ 193.549777][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.552716][T10727] bond0: (slave wlan1): Opening slave failed [ 193.555456][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.558462][T10727] bond0: (slave wlan1): Opening slave failed [ 193.561942][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.565368][T10727] bond0: (slave wlan1): Opening slave failed [ 193.567927][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.571101][T10727] bond0: (slave wlan1): Opening slave failed [ 193.573689][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.577088][T10727] bond0: (slave wlan1): Opening slave failed [ 193.579715][T10727] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 193.582825][T10727] bond0: (slave wlan1): Opening slave failed [ 193.701956][ T1284] block nbd0: Connection timed out, retrying (0/2 alive) [ 193.706806][ T1284] block nbd0: Dead connection, failed to find a fallback [ 193.710552][ T1284] block nbd0: shutting down sockets [ 193.713161][ T1284] blk_print_req_error: 10 callbacks suppressed [ 193.713175][ T1284] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.720467][ T1284] buffer_io_error: 43 callbacks suppressed [ 193.720481][ T1284] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.729352][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.734454][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.737540][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.741676][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.744872][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.747807][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.750894][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.753947][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.755215][ T40] audit: type=1400 audit(1775425942.435:7416): avc: denied { execute } for pid=10736 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 193.756370][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.768774][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.771589][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.775163][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.777983][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.781931][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.784680][ T6383] ldm_validate_partition_table(): Disk read failed. [ 193.785234][ T40] audit: type=1400 audit(1775425942.465:7417): avc: denied { execute_no_trans } for pid=10736 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 193.786935][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.797698][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.800348][ T6383] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.803473][ T6383] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.806036][ T6383] Dev nbd0: unable to read RDB block 0 [ 193.808092][ T6383] nbd0: unable to read partition table [ 193.820371][ T6383] ldm_validate_partition_table(): Disk read failed. [ 193.823116][ T6383] Dev nbd0: unable to read RDB block 0 [ 193.825383][ T6383] nbd0: unable to read partition table [ 193.831123][T10165] ldm_validate_partition_table(): Disk read failed. [ 193.833810][T10165] Dev nbd0: unable to read RDB block 0 [ 193.836036][T10165] nbd0: unable to read partition table [ 193.840743][T10167] ldm_validate_partition_table(): Disk read failed. [ 193.843306][T10167] Dev nbd0: unable to read RDB block 0 [ 193.845241][T10167] nbd0: unable to read partition table [ 193.907222][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.913303][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.916313][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.919408][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.922376][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.939368][ T40] audit: type=1400 audit(1775425942.615:7418): avc: denied { mounton } for pid=10743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 193.973913][ T40] audit: type=1400 audit(1775425942.655:7419): avc: denied { bind } for pid=10745 comm="syz.2.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.975583][T10743] lo speed is unknown, defaulting to 1000 [ 193.985456][T10746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1534'. [ 194.011205][T10746] bond67: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 194.031022][T10746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1534'. [ 194.034056][T10746] bond67: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 194.050009][T10749] syzkaller0: entered promiscuous mode [ 194.051909][T10749] syzkaller0: entered allmulticast mode [ 194.090207][T10753] vlan3: entered promiscuous mode [ 194.092391][T10753] bridge0: entered promiscuous mode [ 194.096731][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 194.101605][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 194.130294][T10753] veth1_macvtap (unregistering): left allmulticast mode [ 194.311559][T10743] chnl_net:caif_netlink_parms(): no params data found [ 194.376598][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.378971][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.380780][T10773] ALSA: seq fatal error: cannot create timer (-22) [ 194.381636][T10743] bridge_slave_0: entered allmulticast mode [ 194.386603][T10743] bridge_slave_0: entered promiscuous mode [ 194.390167][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.392486][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.395321][T10743] bridge_slave_1: entered allmulticast mode [ 194.398154][T10743] bridge_slave_1: entered promiscuous mode [ 194.416959][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.421731][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.437721][T10743] team0: Port device team_slave_0 added [ 194.441368][T10743] team0: Port device team_slave_1 added [ 194.456434][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.458703][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.467005][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.471631][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.473936][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.482125][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.510835][T10743] hsr_slave_0: entered promiscuous mode [ 194.513271][T10743] hsr_slave_1: entered promiscuous mode [ 194.515592][T10743] debugfs: 'hsr0' already exists in 'hsr' [ 194.517450][T10743] Cannot create hsr debugfs directory [ 194.583257][T10776] syzkaller0: entered promiscuous mode [ 194.585073][T10776] syzkaller0: entered allmulticast mode [ 194.714775][T10743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.726694][T10743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.732916][T10743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.739453][T10743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.760783][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.763342][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.766040][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.768305][T10743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.813222][T10788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1543'. [ 194.814273][T10743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.822901][T10788] .`: renamed from bond0 (while UP) [ 194.836623][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.840644][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.856319][T10743] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.864559][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.866930][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.872419][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.874868][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.950547][T10797] syzkaller0: entered promiscuous mode [ 194.952949][T10797] syzkaller0: entered allmulticast mode [ 195.001611][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.108070][T10809] lo speed is unknown, defaulting to 1000 [ 195.149424][T10743] veth0_vlan: entered promiscuous mode [ 195.155922][T10743] veth1_vlan: entered promiscuous mode [ 195.177687][T10743] veth0_macvtap: entered promiscuous mode [ 195.184586][T10743] veth1_macvtap: entered promiscuous mode [ 195.205013][T10743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.211102][T10743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.219490][ T1191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.224837][ T1191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.228702][ T1191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.232604][ T1191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.274232][T10509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.277641][T10509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.329844][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.332630][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.352381][ T40] audit: type=1400 audit(1775425944.035:7420): avc: denied { mounton } for pid=10743 comm="syz-executor" path="/syzkaller.LfmBXj/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 195.366605][ T40] audit: type=1400 audit(1775425944.035:7421): avc: denied { mounton } for pid=10743 comm="syz-executor" path="/syzkaller.LfmBXj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 195.379005][ T59] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 195.382547][ T40] audit: type=1400 audit(1775425944.045:7422): avc: denied { mounton } for pid=10743 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 195.399009][ T40] audit: type=1400 audit(1775425944.045:7423): avc: denied { mounton } for pid=10743 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 195.467787][ T1147] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.541724][ T59] usb 7-1: config 0 has no interfaces? [ 195.545612][ T59] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 195.548492][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.551345][ T59] usb 7-1: Product: syz [ 195.552680][ T59] usb 7-1: Manufacturer: syz [ 195.554171][ T59] usb 7-1: SerialNumber: syz [ 195.558451][ T59] usb 7-1: config 0 descriptor?? [ 195.738320][T10836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 195.787168][T10809] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.872740][ T39] usb 7-1: USB disconnect, device number 31 [ 195.907051][T10841] syzkaller0: entered promiscuous mode [ 195.908945][T10841] syzkaller0: entered allmulticast mode [ 195.993799][T10843] bridge_slave_1: left allmulticast mode [ 195.995760][T10843] bridge_slave_1: left promiscuous mode [ 195.997807][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.003894][T10843] bridge_slave_0: left allmulticast mode [ 196.006123][T10843] bridge_slave_0: left promiscuous mode [ 196.008229][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.009739][ T5287] Bluetooth: hci4: command tx timeout [ 196.063407][T10846] overlayfs: failed to resolve './file1': -2 [ 196.525698][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 196.525710][ T40] audit: type=1400 audit(1775425945.205:7427): avc: denied { listen } for pid=10883 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.535223][ T40] audit: type=1400 audit(1775425945.205:7428): avc: denied { accept } for pid=10883 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.069715][ T59] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 197.226151][ T59] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.234050][ T59] usb 8-1: config 1 interface 0 has no altsetting 0 [ 197.239469][ T59] usb 8-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 197.244568][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.248338][ T59] usb 8-1: Product: syz [ 197.250758][ T59] usb 8-1: Manufacturer: syz [ 197.252979][ T59] usb 8-1: SerialNumber: syz [ 197.421618][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 197.529763][ T5940] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 197.530135][ T5287] Bluetooth: hci0: command 0xfc11 tx timeout [ 197.607027][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 197.614083][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 197.618294][ T40] audit: type=1400 audit(1775425946.295:7429): avc: denied { map } for pid=10923 comm="syz.1.1581" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.628732][ T40] audit: type=1400 audit(1775425946.295:7430): avc: denied { execute } for pid=10923 comm="syz.1.1581" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.646496][T10920] overlay: filesystem on ./bus not supported as upperdir [ 197.736247][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 197.813832][T10936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3170034004 (101441088128 ns) > initial count (92024169792 ns). Using initial count to start timer. [ 198.047236][T10946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1592'. [ 198.090921][ T5940] Bluetooth: hci4: command tx timeout [ 198.100072][T10953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10953 comm=syz.4.1594 [ 198.289620][ T40] audit: type=1400 audit(1775425946.965:7431): avc: denied { read write } for pid=10956 comm="syz.4.1595" name="file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.297216][ T40] audit: type=1400 audit(1775425946.965:7432): avc: denied { open } for pid=10956 comm="syz.4.1595" path="/20/file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.364282][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 198.742588][T10983] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1604'. [ 199.012394][T10994] misc userio: The device must be registered before sending interrupts [ 199.021046][T10994] random: crng reseeded on system resumption [ 199.038069][ T40] audit: type=1400 audit(1775425947.715:7433): avc: denied { firmware_load } for pid=10993 comm="syz.1.1607" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 199.182499][T10998] /dev/nullb0: Can't open blockdev [ 199.364799][T11004] tmpfs: Bad value for 'mpol' [ 199.453121][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.698464][ T59] usbhid 8-1:1.0: can't add hid device: -71 [ 199.703121][ T59] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 199.715612][ T59] usb 8-1: USB disconnect, device number 17 [ 199.873544][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 199.881789][T10495] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.886059][T10495] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.888810][T10495] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.893735][T10495] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.910017][T11012] syzkaller0: entered promiscuous mode [ 199.911787][T11012] syzkaller0: entered allmulticast mode [ 199.959795][ T40] audit: type=1400 audit(1775425948.645:7434): avc: denied { setopt } for pid=11013 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.055488][T11019] program syz.3.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.086613][T11024] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1617'. [ 200.164130][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 200.182954][ T5940] Bluetooth: hci4: command tx timeout [ 200.527261][ T59] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 200.681290][ T59] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.685042][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.689119][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.697614][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.707373][ T59] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.711781][ T59] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.714572][ T59] usb 7-1: Product: syz [ 200.716067][ T59] usb 7-1: Manufacturer: syz [ 200.722739][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 200.724463][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 200.730273][ T59] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 200.732218][ T59] cdc_wdm 7-1:1.0: Unknown control protocol [ 200.854491][T11058] FAULT_INJECTION: forcing a failure. [ 200.854491][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 200.859126][T11058] CPU: 3 UID: 0 PID: 11058 Comm: syz.3.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.859143][T11058] Tainted: [L]=SOFTLOCKUP [ 200.859146][T11058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.859153][T11058] Call Trace: [ 200.859203][T11058] [ 200.859207][T11058] dump_stack_lvl+0x100/0x190 [ 200.859229][T11058] should_fail_ex.cold+0x5/0xa [ 200.859243][T11058] ? tomoyo_realpath_from_path+0xb6/0x690 [ 200.859261][T11058] should_failslab+0xc2/0x120 [ 200.859272][T11058] __kmalloc_noprof+0xe0/0x850 [ 200.859291][T11058] tomoyo_realpath_from_path+0xb6/0x690 [ 200.859311][T11058] tomoyo_path_number_perm+0x23c/0x580 [ 200.859324][T11058] ? tomoyo_path_number_perm+0x22e/0x580 [ 200.859340][T11058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.859368][T11058] ? find_held_lock+0x2b/0x80 [ 200.859382][T11058] ? __fget_files+0x215/0x3d0 [ 200.859393][T11058] ? hook_file_ioctl_common+0x146/0x410 [ 200.859407][T11058] ? __fget_files+0x21f/0x3d0 [ 200.859420][T11058] security_file_ioctl+0xd3/0x230 [ 200.859437][T11058] __x64_sys_ioctl+0xb7/0x210 [ 200.859454][T11058] do_syscall_64+0x106/0xf80 [ 200.859465][T11058] ? clear_bhb_loop+0x40/0x90 [ 200.859478][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.859489][T11058] RIP: 0033:0x7f6d74f9c819 [ 200.859499][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.859509][T11058] RSP: 002b:00007f6d75f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.859570][T11058] RAX: ffffffffffffffda RBX: 00007f6d75215fa0 RCX: 00007f6d74f9c819 [ 200.859576][T11058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 200.859582][T11058] RBP: 00007f6d75f08090 R08: 0000000000000000 R09: 0000000000000000 [ 200.859589][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.859595][T11058] R13: 00007f6d75216038 R14: 00007f6d75215fa0 R15: 00007ffe5372f988 [ 200.859609][T11058] [ 200.923464][ T40] audit: type=1400 audit(1775425949.605:7435): avc: denied { read write } for pid=11037 comm="syz.2.1623" name="cdc-wdm0" dev="devtmpfs" ino=3240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 200.924058][T11058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.936408][ T40] audit: type=1400 audit(1775425949.605:7436): avc: denied { open } for pid=11037 comm="syz.2.1623" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 201.648111][T11073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8913 sclass=netlink_route_socket pid=11073 comm=syz.1.1636 [ 201.720096][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 201.720108][ T40] audit: type=1400 audit(1775425950.405:7438): avc: denied { read } for pid=11079 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.728437][ T40] audit: type=1400 audit(1775425950.405:7439): avc: denied { ioctl } for pid=11079 comm="syz.1.1638" path="socket:[47405]" dev="sockfs" ino=47405 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.756107][ T40] audit: type=1400 audit(1775425950.435:7440): avc: denied { read } for pid=11084 comm="syz.1.1639" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.758853][T11085] smc: net device bond0 applied user defined pnetid SYZ2 [ 201.765390][T11085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=11085 comm=syz.1.1639 [ 201.935047][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 201.939136][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 201.941542][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 201.946799][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 202.012954][T11103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11103 comm=syz.1.1641 [ 202.249862][ T5940] Bluetooth: hci4: command tx timeout [ 202.319675][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 202.372404][T11107] FAULT_INJECTION: forcing a failure. [ 202.372404][T11107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.376488][T11107] CPU: 3 UID: 0 PID: 11107 Comm: syz.4.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.376505][T11107] Tainted: [L]=SOFTLOCKUP [ 202.376509][T11107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.376515][T11107] Call Trace: [ 202.376520][T11107] [ 202.376524][T11107] dump_stack_lvl+0x100/0x190 [ 202.376548][T11107] should_fail_ex.cold+0x5/0xa [ 202.376563][T11107] _copy_to_user+0x32/0xd0 [ 202.376576][T11107] simple_read_from_buffer+0xcb/0x170 [ 202.376590][T11107] proc_fail_nth_read+0x1af/0x230 [ 202.376607][T11107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.376624][T11107] ? rw_verify_area+0xce/0x6d0 [ 202.376639][T11107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.376654][T11107] vfs_read+0x1e4/0xb30 [ 202.376666][T11107] ? __pfx_vfs_read+0x10/0x10 [ 202.376675][T11107] ? __fget_files+0x215/0x3d0 [ 202.376689][T11107] ? __fget_files+0x21f/0x3d0 [ 202.376704][T11107] ksys_read+0x12a/0x250 [ 202.376714][T11107] ? __pfx_ksys_read+0x10/0x10 [ 202.376727][T11107] do_syscall_64+0x106/0xf80 [ 202.376737][T11107] ? clear_bhb_loop+0x40/0x90 [ 202.376750][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.376761][T11107] RIP: 0033:0x7f586cb5d04e [ 202.376771][T11107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.376781][T11107] RSP: 002b:00007f586d986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.376795][T11107] RAX: ffffffffffffffda RBX: 00007f586d9876c0 RCX: 00007f586cb5d04e [ 202.376802][T11107] RDX: 000000000000000f RSI: 00007f586d9870a0 RDI: 0000000000000006 [ 202.376808][T11107] RBP: 00007f586d987090 R08: 0000000000000000 R09: 0000000000000000 [ 202.376814][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.376819][T11107] R13: 00007f586ce16038 R14: 00007f586ce15fa0 R15: 00007ffde08a5798 [ 202.376833][T11107] [ 202.449645][ T24] usb 8-1: device descriptor read/64, error -71 [ 202.690251][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 202.819702][ T24] usb 8-1: device descriptor read/64, error -71 [ 202.930038][ T24] usb usb8-port1: attempt power cycle [ 203.270552][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 203.290810][ T24] usb 8-1: device descriptor read/8, error -71 [ 203.300759][ T5927] usb 7-1: USB disconnect, device number 32 [ 203.471409][T11119] kvm: pic: non byte write [ 203.529987][ T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 203.550709][ T24] usb 8-1: device descriptor read/8, error -71 [ 203.666937][ T24] usb usb8-port1: unable to enumerate USB device [ 204.467835][T11136] syzkaller0: entered promiscuous mode [ 204.470468][T11136] syzkaller0: entered allmulticast mode [ 204.580783][T11140] binder_alloc: 11139: pid 11139 spamming oneway? 1 buffers allocated for a total size of 4096 [ 204.585233][T11140] binder_alloc: 11139: pid 11139 spamming oneway? 2 buffers allocated for a total size of 5120 [ 204.612436][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 205.187920][ T40] audit: type=1400 audit(1775425953.865:7441): avc: denied { compute_member } for pid=11166 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 205.302143][ T40] audit: type=1400 audit(1775425953.985:7442): avc: denied { read write } for pid=11169 comm="syz.3.1668" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.314452][ T40] audit: type=1400 audit(1775425953.985:7443): avc: denied { open } for pid=11169 comm="syz.3.1668" path="/458/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.455108][ T40] audit: type=1400 audit(1775425954.135:7444): avc: denied { ioctl } for pid=11182 comm="syz.1.1673" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.664128][T11204] syzkaller0: entered promiscuous mode [ 205.666018][T11204] syzkaller0: entered allmulticast mode [ 205.898963][T11214] validate_nla: 1 callbacks suppressed [ 205.898978][T11214] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 205.916437][T11214] bond0: entered promiscuous mode [ 205.918462][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.921761][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 205.924972][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 205.934651][T11215] 9pnet_virtio: no channels available for device syz [ 205.941274][T11215] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1684'. [ 205.960677][T11215] bond0: (slave bridge2): making interface the new active one [ 205.965386][T11215] bridge2: entered promiscuous mode [ 205.969216][T11215] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 205.973444][T11213] [U]  [ 206.071125][ T40] audit: type=1400 audit(1775425954.755:7445): avc: denied { setopt } for pid=11224 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.071129][T11225] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 206.086426][T11225] ªªªªªª: renamed from vlan0 (while UP) [ 206.091247][ T40] audit: type=1400 audit(1775425954.775:7446): avc: denied { accept } for pid=11224 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.138992][T11227] syzkaller0: entered promiscuous mode [ 206.141244][T11227] syzkaller0: entered allmulticast mode [ 206.259667][T11233] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.333986][ T40] audit: type=1400 audit(1775425955.015:7447): avc: denied { listen } for pid=11239 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.411866][T11244] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 206.415283][T11244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1695'. [ 206.609923][ T59] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 206.653776][T11268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.662186][T11268] CIFS mount error: No usable UNC path provided in device string! [ 206.662186][T11268] [ 206.665550][T11268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.678257][T11268] /dev/nullb0: Can't open blockdev [ 206.681825][T11268] /dev/nullb0: Can't open blockdev [ 206.781287][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.785972][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.790956][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.794836][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.812739][T11240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.822464][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.927167][ T40] audit: type=1400 audit(1775425955.605:7448): avc: denied { accept } for pid=11275 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.934389][T11276] usb 8-1: USB disconnect, device number 22 [ 207.005548][T11281] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.009308][T11276] netlink: 'syz.4.1703': attribute type 3 has an invalid length. [ 207.011904][T11276] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 207.014743][T11276] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1703'. [ 207.036062][T11240] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 207.195423][T11292] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.198456][T11294] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.469980][ T5927] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 207.620828][ T5927] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 207.623762][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.627953][ T5927] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.632733][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.636222][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.640598][ T5927] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 207.643503][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.646839][ T5927] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.650603][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.654310][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.658491][ T5927] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 207.661023][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.664799][ T5927] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.668434][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.671889][ T5927] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 207.677548][ T5927] usb 9-1: string descriptor 0 read error: -22 [ 207.679636][ T5927] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 207.682430][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.694404][ T5927] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 208.352007][T11303] geneve2: entered promiscuous mode [ 208.353987][T11303] geneve2: entered allmulticast mode [ 208.544972][ T40] audit: type=1400 audit(1775425957.225:7449): avc: denied { ioctl } for pid=11305 comm="syz.1.1713" path="socket:[47772]" dev="sockfs" ino=47772 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.352976][ T40] audit: type=1400 audit(1775425958.035:7450): avc: denied { setopt } for pid=11332 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.666881][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 209.670372][T11339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 209.776491][T11342] hfs: can't find a HFS filesystem on dev sr0 [ 209.943220][ T5927] usb 9-1: USB disconnect, device number 2 [ 210.119702][ T34] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 210.281287][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.289623][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.292954][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 210.297019][ T34] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.301423][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.311315][T11345] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 210.318143][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 210.322855][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 210.330035][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 210.332298][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 210.339766][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 210.342507][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 210.357006][T11351] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1728'. [ 210.364910][T11351] netlink: 'syz.4.1728': attribute type 4 has an invalid length. [ 210.370541][T11353] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1728'. [ 210.373825][T11351] netlink: 'syz.4.1728': attribute type 4 has an invalid length. [ 210.410364][ T40] audit: type=1400 audit(1775425959.085:7451): avc: denied { bind } for pid=11354 comm="syz.4.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.421211][T11355] netlink: 'syz.4.1729': attribute type 2 has an invalid length. [ 210.423662][T11355] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1729'. [ 210.595321][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 210.598405][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 210.601885][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 210.607867][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.720014][ T59] usb 6-1: USB disconnect, device number 18 [ 210.822450][T11372] ip6t_REJECT: ECHOREPLY is not supported [ 210.885927][T11378] syzkaller0: entered promiscuous mode [ 210.887886][T11378] syzkaller0: entered allmulticast mode [ 211.034082][T11387] netlink: 'syz.3.1740': attribute type 19 has an invalid length. [ 211.160631][T11391] /dev/sr0: Can't open blockdev [ 211.404948][T11413] syzkaller0: entered promiscuous mode [ 211.406781][T11413] syzkaller0: entered allmulticast mode [ 211.649817][ T40] audit: type=1400 audit(1775425960.325:7452): avc: denied { getopt } for pid=11415 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.701556][ T40] audit: type=1400 audit(1775425960.385:7453): avc: denied { write } for pid=11422 comm="syz.1.1751" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 211.746031][T11428] __nla_validate_parse: 1 callbacks suppressed [ 211.746044][T11428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1753'. [ 211.983330][T11433] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.289087][T11449] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 212.610961][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 213.179649][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 213.331846][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.335541][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.338929][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.342134][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.346222][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.349045][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.355561][ T24] usb 9-1: config 0 descriptor?? [ 213.721415][T11483] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 213.726086][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 213.729032][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 213.764946][ T24] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 213.777712][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.892367][T11488] geneve2: entered promiscuous mode [ 213.894108][T11488] geneve2: entered allmulticast mode [ 213.975628][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 214.762127][T11498] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 214.766396][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.774457][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.778449][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.783387][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.787536][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.794550][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.804375][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.815514][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.822944][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.829255][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.834395][T11501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11501 comm=syz.2.1779 [ 214.838828][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 214.839408][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.848040][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.848894][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 214.857347][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.861833][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.865884][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.874385][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.882369][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.888141][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.895411][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.901504][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.905867][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.911028][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.917642][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.921504][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.927802][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.935470][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.942891][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.946702][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.956693][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.968903][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.978441][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.983479][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.991812][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 214.997986][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.003204][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.008436][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.019965][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.026344][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.030757][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.036317][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.044897][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.052278][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.060714][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.068746][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.077471][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.082470][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.087265][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.094783][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.099930][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.116806][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.127719][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.140578][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.150955][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.164273][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.175334][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.181185][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.186944][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.193961][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.202077][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.211484][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.219097][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.226047][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.238022][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.247669][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.258260][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 215.298712][ T40] audit: type=1400 audit(1775425963.975:7454): avc: denied { getopt } for pid=11507 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.328150][T11510] syzkaller0: entered promiscuous mode [ 215.330959][T11510] syzkaller0: entered allmulticast mode [ 215.487334][T11518] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1787'. [ 215.643486][ T40] audit: type=1404 audit(1775425964.325:7455): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 215.649962][ T40] audit: type=1400 audit(1775425964.335:7456): avc: denied { create } for pid=11526 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 215.657543][ T40] audit: type=1400 audit(1775425964.335:7457): avc: denied { read } for pid=11526 comm="syz.4.1791" dev="nsfs" ino=4026533641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 215.667759][ T40] audit: type=1400 audit(1775425964.335:7458): avc: denied { create } for pid=11526 comm="syz.4.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.674983][ T40] audit: type=1400 audit(1775425964.345:7459): avc: denied { read write } for pid=10743 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.675108][T11527] kernel profiling enabled (shift: 5) [ 215.683560][ T40] audit: type=1400 audit(1775425964.355:7460): avc: denied { name_bind } for pid=11523 comm="syz.3.1790" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 215.693627][ T40] audit: type=1400 audit(1775425964.355:7461): avc: denied { accept } for pid=11523 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 215.702441][ T40] audit: type=1400 audit(1775425964.355:7462): avc: denied { read } for pid=11523 comm="syz.3.1790" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 215.711959][ T40] audit: type=1400 audit(1775425964.355:7463): avc: denied { create } for pid=11523 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 215.725315][T11532] syzkaller0: entered promiscuous mode [ 215.727282][T11532] syzkaller0: entered allmulticast mode [ 215.870362][ T59] usb 9-1: USB disconnect, device number 3 [ 216.290280][T11550] netlink: 'syz.3.1800': attribute type 10 has an invalid length. [ 216.307694][T11550] team0: Port device netdevsim0 added [ 216.366595][ T1191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.646657][ T1191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.794543][ T1191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.021599][ T1191] geneve2: left allmulticast mode [ 217.023695][ T1191] geneve2: left promiscuous mode [ 217.027936][ T1191] bridge0: port 3(geneve2) entered disabled state [ 217.033508][ T1191] bridge_slave_1: left allmulticast mode [ 217.035933][ T1191] bridge_slave_1: left promiscuous mode [ 217.038517][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.047721][ T1191] bridge_slave_0: left allmulticast mode [ 217.050110][ T1191] bridge_slave_0: left promiscuous mode [ 217.052392][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.302707][ T1191] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 217.305745][ T1191] bridge2 (unregistering): left promiscuous mode [ 217.399964][ T1191] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.404847][ T1191] .` (unregistering): Released all slaves [ 217.410525][ T1191] bond1 (unregistering): Released all slaves [ 217.418367][ T1191] bond2 (unregistering): Released all slaves [ 217.426315][ T1191] bond3 (unregistering): Released all slaves [ 217.433465][ T1191] bond4 (unregistering): Released all slaves [ 217.442853][ T1191] bond5 (unregistering): Released all slaves [ 217.452573][ T1191] bond6 (unregistering): Released all slaves [ 217.460661][ T1191] bond7 (unregistering): Released all slaves [ 217.468958][ T1191] bond8 (unregistering): Released all slaves [ 217.478670][ T1191] bond9 (unregistering): Released all slaves [ 217.491745][ T1191] bond10 (unregistering): Released all slaves [ 217.498800][ T1191] bond11 (unregistering): Released all slaves [ 217.512858][ T1191] bond12 (unregistering): Released all slaves [ 217.520158][ T1191] bond13 (unregistering): Released all slaves [ 217.527304][ T1191] bond14 (unregistering): Released all slaves [ 217.535767][ T1191] bond15 (unregistering): Released all slaves [ 217.542892][ T1191] bond16 (unregistering): Released all slaves [ 217.551737][ T1191] bond17 (unregistering): Released all slaves [ 217.559508][ T1191] bond18 (unregistering): Released all slaves [ 217.568807][ T1191] bond19 (unregistering): Released all slaves [ 217.575441][ T1191] bond20 (unregistering): Released all slaves [ 217.583784][ T1191] bond21 (unregistering): Released all slaves [ 217.596181][ T1191] bond22 (unregistering): Released all slaves [ 217.606220][ T1191] bond23 (unregistering): Released all slaves [ 217.619850][ T1191] bond24 (unregistering): Released all slaves [ 217.626497][ T1191] bond25 (unregistering): Released all slaves [ 217.633207][ T1191] bond26 (unregistering): Released all slaves [ 217.644577][ T1191] bond27 (unregistering): Released all slaves [ 217.651168][ T1191] bond28 (unregistering): Released all slaves [ 217.657779][ T1191] bond29 (unregistering): Released all slaves [ 217.669430][ T1191] bond30 (unregistering): Released all slaves [ 217.681468][ T1191] bond31 (unregistering): Released all slaves [ 217.692830][ T1191] bond32 (unregistering): Released all slaves [ 217.707252][ T1191] bond33 (unregistering): Released all slaves [ 217.715371][ T1191] bond34 (unregistering): Released all slaves [ 217.726246][ T1191] bond35 (unregistering): Released all slaves [ 217.733006][ T1191] bond36 (unregistering): Released all slaves [ 217.739837][ T1191] bond37 (unregistering): Released all slaves [ 217.746490][ T1191] bond38 (unregistering): Released all slaves [ 217.758261][ T1191] bond39 (unregistering): Released all slaves [ 217.765396][ T1191] bond40 (unregistering): Released all slaves [ 217.777166][ T1191] bond41 (unregistering): Released all slaves [ 217.784242][ T1191] bond42 (unregistering): Released all slaves [ 217.794253][ T1191] bond43 (unregistering): Released all slaves [ 217.801308][ T1191] bond44 (unregistering): Released all slaves [ 217.809012][ T1191] bond45 (unregistering): Released all slaves [ 217.815532][ T1191] bond46 (unregistering): Released all slaves [ 217.823952][ T1191] bond47 (unregistering): Released all slaves [ 217.832850][ T1191] bond48 (unregistering): Released all slaves [ 217.841337][ T1191] bond49 (unregistering): Released all slaves [ 217.849438][ T1191] bond50 (unregistering): Released all slaves [ 217.857580][ T1191] bond51 (unregistering): Released all slaves [ 217.864899][ T1191] bond52 (unregistering): Released all slaves [ 217.877461][ T1191] bond53 (unregistering): Released all slaves [ 217.884238][ T1191] bond54 (unregistering): Released all slaves [ 217.893194][ T1191] bond55 (unregistering): Released all slaves [ 217.900867][ T1191] bond56 (unregistering): Released all slaves [ 217.910998][ T1191] bond57 (unregistering): Released all slaves [ 217.973533][ T1191] bond58 (unregistering): Released all slaves [ 217.980242][ T1191] bond59 (unregistering): Released all slaves [ 217.986778][ T1191] bond60 (unregistering): Released all slaves [ 217.995574][ T1191] bond61 (unregistering): Released all slaves [ 218.003972][ T1191] bond62 (unregistering): Released all slaves [ 218.016937][ T1191] bond63 (unregistering): Released all slaves [ 218.025829][ T1191] bond64 (unregistering): Released all slaves [ 218.034140][ T1191] bond65 (unregistering): Released all slaves [ 218.041172][ T1191] bond66 (unregistering): Released all slaves [ 218.047865][ T1191] bond67 (unregistering): Released all slaves [ 218.059667][ T1191] bond0 (unregistering): Released all slaves [ 218.608029][ T1191] tipc: Left network mode [ 218.756823][ T1191] IPVS: stopping backup sync thread 8627 ... [ 219.052281][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.055045][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.058573][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.061664][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.081625][ T1191] veth1_vlan: left promiscuous mode [ 219.084163][ T1191] veth0_vlan: left promiscuous mode [ 219.249333][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 219.715107][ T1191] IPVS: stop unused estimator thread 0... [ 220.299644][ T40] kauditd_printk_skb: 22163 callbacks suppressed [ 220.299662][ T40] audit: type=1400 audit(1775425968.975:29429): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.305828][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.311072][ T40] audit: type=1400 audit(1775425968.985:29430): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.312955][ T5637] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 220.321462][ T40] audit: type=1400 audit(1775425968.985:29431): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.323828][ T5637] audit: backlog limit exceeded [ 220.324139][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.332557][ T40] audit: type=1400 audit(1775425968.985:29432): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.334080][ T5637] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 220.336873][ T40] audit: type=1400 audit(1775425968.985:29433): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.309770][ T40] kauditd_printk_skb: 41296 callbacks suppressed [ 225.309789][ T40] audit: type=1400 audit(1775425973.995:69580): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.318259][ T40] audit: type=1400 audit(1775425973.995:69581): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.324185][ T40] audit: type=1400 audit(1775425973.995:69582): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.327131][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.331624][ T40] audit: type=1400 audit(1775425973.995:69583): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.333607][ T5637] audit: audit_lost=452 audit_rate_limit=0 audit_backlog_limit=64 [ 225.340356][ T40] audit: type=1400 audit(1775425973.995:69584): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.342710][ T5637] audit: backlog limit exceeded [ 225.349748][ T40] audit: type=1400 audit(1775425973.995:69585): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.351593][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.319664][ T40] kauditd_printk_skb: 38437 callbacks suppressed [ 230.319679][ T40] audit: type=1400 audit(1775425978.995:108021): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.325636][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.328341][ T40] audit: type=1400 audit(1775425979.005:108022): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.330465][ T5637] audit: audit_lost=454 audit_rate_limit=0 audit_backlog_limit=64 [ 230.337091][ T40] audit: type=1400 audit(1775425979.005:108023): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.339512][ T5637] audit: backlog limit exceeded [ 230.346237][ T40] audit: type=1400 audit(1775425979.005:108024): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.348144][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.354395][ T40] audit: type=1400 audit(1775425979.005:108025): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.356434][ T5637] audit: audit_lost=455 audit_rate_limit=0 audit_backlog_limit=64 [ 235.330002][ T40] kauditd_printk_skb: 44749 callbacks suppressed [ 235.330022][ T40] audit: type=1400 audit(1775425984.015:152774): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.338739][ T40] audit: type=1400 audit(1775425984.015:152775): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.345546][ T40] audit: type=1400 audit(1775425984.015:152776): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.345693][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.352475][ T40] audit: type=1400 audit(1775425984.015:152777): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.354347][ T5637] audit: audit_lost=456 audit_rate_limit=0 audit_backlog_limit=64 [ 235.362482][ T40] audit: type=1400 audit(1775425984.015:152778): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.364693][ T5637] audit: backlog limit exceeded [ 235.364987][ T5637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.372584][ T40] audit: type=1400 audit(1775425984.015:152779): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0