last executing test programs: 1.802307435s ago: executing program 1 (id=330): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet6_int(r1, 0x29, 0x8, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='b *:2 m'], 0x9) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x20, 0x2400e044}, 0x20001080) 1.751780368s ago: executing program 1 (id=331): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sync() ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0xe8, 0x7, 0x8, 0x0, "2627ed63eb8c5bbccf123a52067678e587887b9b7d9f56458525bb034ee83d92"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x100, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe0}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0xffffffff}, {}, {0xe, 0x4000000, 0x1}, 0x70bd2b, 0x0, 0x2, 0x3, 0x0, 0x8a}, [@sa_dir={0x5, 0x21, 0x1}, @sa_pcpu={0x8, 0x23, 0x2}]}, 0x100}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0xc, 0x5, 0x2b, 'K3j', 0x58, 0xd}, {@none, 0x0, 0x1, 0x59, "071e6f", 0x6, 0x2}]}}}, 0x22) 1.220143656s ago: executing program 1 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$ext4_procfs(0xffffffffffffff9c, &(0x7f0000000040)={'/proc/fs/ext4/loop', 0x0, 0x2f, 'fc_info\x00'}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000640)={'caif0\x00', 0x2000}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4008, r0}, 0x18) syz_io_uring_setup(0x20, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x442, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sec\x00', &(0x7f00001032c0)='securityfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000103380)='./sec/ima/policy\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r8, &(0x7f00001033c0)={0x2f, 0xffffffffffffffda}, 0x10) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000580)=@IORING_OP_READV_FIXED={0x3c, 0x10, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) sendmsg$nl_route_sched(r2, &(0x7f0000103340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000103300)={&(0x7f0000100700)=@newtfilter={0x2bac, 0x2c, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x5}, {0xfff2}, {0xfff3, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xfff1}}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6075}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5f, 0xc}}, @filter_kind_options=@f_bpf={{0x8}, {0x2638, 0x2, [@TCA_BPF_ACT={0x146c, 0x1, [@m_ife={0x1058, 0x1d, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800, 0x7, 0x8, 0xf3f5, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x8c, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x45, 0x6, "a1819cbfe086e65642c36467a89ddba01abe1d6e67a3b5c4bac33d773f9d1b6005b79406de4ee19198f736d0db074e2e67a23fe29c1da8197d842aa414ee7072a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x124, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x0, 0x3ff, 0x1}}]}, {0xe0, 0x6, "5697e3b43b0012f1fedaa19448cb2a63e448d9c13d2fb326daeebb29cd81ea41bbf407fada403a3099c80f4fdf391e5f146af30bc6d9f6648ada70cd7dd16af961256ed2dbfa9beaa802d66a8932aad385d96799371ecc3d6193572a0697d244f1762dfa8d56e37c586c02ca84f8791be328543d28fef72867431a76f21fd37f4454d0a176ac149e24809c8b95a45bb5dea563ffa01002352559cf077227b4aaae947db3c9dac5ea14cadac1121b61f30f13771d834b1e4f4c6123a095c6b9a17cb38348a6d9570abf7cb1d0c23f943679a851d3db283333e6c7a9c8"}, {0xc, 0x7, {0xc3954e50acd0b28b, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_ife={0x94, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x38d}]}, {0x62, 0x6, "7ab6a5393c54bd390283e714757d890ec79707ff239056ab6cc83dcab0bea2f71e71cd1b177e09b69d4388fd27a6eaaf53a7f023212001449bd048ce25bcd4ce718a1d1327eac2cea7c372300d2a965b0c94e3b461277ac475ad2f8233ad"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xe4, 0xe, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x9, 0x3, 0x3, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5e6, 0x0, 0x10000000, 0x2, 0x9}}]}, {0x87, 0x6, "1b6a6d09c1e39376ecc42df48cf48c77f4aea05cd1efe23970800ac968c33d7087c0266a67140201d9e211bca1dea4085eea4d67a17c64fe083e207ac95618a00b7dca024b410d3721f88c8ccef6f1d5a17b1eb8e1b01a49b395d36ec435e0fb571287c260217febbfb4e91c4c6faf60493419828b61be65d59ed62d95ac4deea2eb86"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xe8, 0xb, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffffff, 0x2, 0x6, 0x401}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcdf}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x823b, 0x9, 0x0, 0x1393, 0x1000}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xbde2, 0x4, 0x5, 0x2, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x484}]}, {0x4f, 0x6, "daa4cfed586901503c2219f2299b7f6c71160af146837fc8469adb9fd76a3b7aee38f8062c98c0290d14b172e51a8990a28b7f7c2187d3a6c41b3a2082dfc4d2609355e153f4e07b956389"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_ACT={0x138, 0x1, [@m_skbedit={0xf8, 0x6, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0xa9, 0x6, "501b6b37426d0ed4aff3f01ad2e2fda5ae1bff4c41e3db77f56abee33ae70ea78e83ff4c8172529f36cd08eaac0e15f81c6a108e7463f33d4c5a86383f8685260065f0ca361b0f734f591e96bfdd8d65ec3d1eba3dca0fe72b68ff753ce85208c2d60b1220b690deedc973f865a281e6f524db99367c150f587405e3b276698decbf2b902116b34cc72c4632812f88db0cd43b48417f3929c0ff3e9bb6acf5edd0bee2c6d6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x3c, 0x19, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x6}]}, {0x9, 0x6, "8f9548363c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xa}}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xffff, 0xae8, 0x5, {0x8, 0x2, 0x9, 0x7, 0x6}, {0x5, 0x0, 0x3889, 0x4, 0x5, 0x7}, 0x3, 0x401, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xd}}, @TCA_BPF_POLICE={0x1024, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x1000, 0xffffff6c, 0xfffffffb, 0x1, 0x3, 0x245f, 0xff, 0xffff0001, 0x6, 0x9, 0x7, 0x3, 0x8, 0x80, 0x7, 0x6, 0x10001, 0x800, 0x7, 0x0, 0xfff, 0x3ff, 0xc7f, 0x7f, 0x3, 0x5, 0x568, 0x7, 0x0, 0x260, 0x7, 0x0, 0x7dc, 0x0, 0x1ff, 0x1, 0x2c38, 0xe57a, 0x0, 0x5, 0x5, 0xfffffffe, 0xc9, 0x8, 0x2, 0x1, 0x7, 0x1, 0x1, 0x1, 0x5, 0x6, 0x0, 0x5, 0xd98f, 0x7f, 0x3, 0x800, 0x3, 0x7ff, 0x7, 0x0, 0x7, 0xb, 0xffffff00, 0xfffffffd, 0x1, 0x28, 0x7, 0x0, 0x461, 0x2, 0x7f, 0x4, 0x7, 0x6, 0x6, 0x60, 0x90, 0x7ff, 0x1ff, 0xffff, 0xac, 0xff, 0x4, 0x9, 0x1, 0x2, 0x8, 0x8, 0x0, 0x7, 0xa, 0x5, 0x5, 0x6, 0xb37a, 0x7, 0x57a, 0x9, 0x8, 0x18000, 0x401, 0x7, 0x5, 0x4, 0x9, 0x7f, 0xfffffffe, 0x3, 0x3ff, 0x9db, 0x5, 0xa4, 0x2, 0x6, 0x5, 0x3, 0x7, 0x800, 0x0, 0x9, 0x2, 0x9, 0xc1, 0xa, 0x59, 0x6, 0x8, 0x6, 0x800, 0x0, 0x5623c7ca, 0x7, 0x81, 0x5, 0x2, 0x94d, 0x10, 0x3, 0xbc44, 0x1, 0x0, 0x100, 0x401, 0xc, 0x8, 0x4, 0x6, 0xd25f, 0x2, 0x17, 0x1, 0x9, 0x8a, 0x8, 0x8, 0x4, 0x2, 0x1e81b85b, 0x8, 0x2a, 0x5, 0x9, 0x8, 0x7, 0x80000001, 0x80, 0xffff, 0x3, 0x9, 0x1, 0xd, 0x0, 0xefb7, 0x4, 0xa, 0x5, 0x4, 0x9, 0x7fffffff, 0x5, 0x7, 0x48a, 0x4, 0x0, 0x2, 0x2, 0x5, 0x4, 0xf, 0xfffffffe, 0x74081c9, 0x1ff, 0x6, 0x9, 0x74a0, 0xac, 0x7, 0x0, 0x7fffffff, 0x0, 0x80000001, 0x5, 0x0, 0x8, 0x6, 0x14b0, 0x453dde06, 0x6, 0x0, 0x2, 0xd5d, 0xf6, 0x4, 0x97, 0x80, 0x72, 0xa324, 0xc119, 0x970c, 0x135, 0xb, 0x1000, 0x40, 0x7, 0x6, 0x80000000, 0x69, 0x3, 0x6, 0xd9, 0x3, 0x3, 0x3, 0x5b687fd8, 0x3, 0x401, 0x8, 0x4, 0x10001, 0x9, 0x4, 0x7fff, 0x401, 0x9, 0x80000000, 0x7, 0xfffffff3, 0x800, 0x4, 0x10001, 0x1000, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0xa, 0x8, 0xb1e, 0x9, 0x0, 0x4, 0x8, 0x3, 0x0, 0x80, 0x4, 0x8, 0x1, 0x1, 0x0, 0x9, 0x0, 0x80, 0x4, 0x83, 0xb4a, 0x9, 0x40, 0x46, 0x1000, 0x6, 0xfffffffd, 0x80000000, 0x4, 0x1, 0x2, 0xad2a, 0x9, 0x0, 0x761d, 0x4, 0x1, 0x5, 0x100, 0x1, 0x5, 0xe, 0x3, 0x7, 0x4, 0x100, 0x6, 0xaab4, 0x80, 0xffff, 0x5, 0x0, 0x4, 0xfffffff7, 0x5a37, 0xc8a, 0x7, 0x4, 0x4, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x7, 0x10000, 0x1, 0xfffffc01, 0x9, 0xfffffff9, 0x7f, 0x5, 0x2, 0x8, 0xff, 0xffffff00, 0x10001, 0x4, 0x7, 0xfa, 0x1, 0x0, 0x58b5, 0x3, 0x8, 0x7, 0x586, 0x5, 0x5db5, 0x800, 0x5, 0x7, 0x26d, 0x6, 0x0, 0x10, 0xf, 0x9, 0xfffffff9, 0xff, 0x5, 0xef42, 0x2, 0x9, 0x7, 0x2, 0x3, 0xffffff9a, 0xe, 0xffffffff, 0x9, 0x3, 0x3, 0x2, 0xe5, 0xffffffff, 0x80, 0x6, 0x7, 0x62b9, 0x1bae, 0x4, 0xffff7785, 0x7fffffff, 0x8d68, 0xfffffff7, 0x5360, 0x5, 0x3c7, 0x100, 0x13, 0x6, 0x5, 0x9, 0x3, 0x7dca, 0xb5fe, 0xd, 0x2, 0x311a4e18, 0x6, 0xbee, 0xe, 0x3, 0x1, 0xc87f, 0x6, 0xc0, 0x82, 0x4, 0x2, 0x5, 0x85f, 0x100, 0x2, 0x9, 0x10000, 0x7, 0xffff, 0x7, 0x7fff, 0xc5, 0x80000001, 0xffffff14, 0x9, 0x7, 0x8, 0x9, 0x3, 0x9, 0x5, 0x0, 0xd6, 0x4, 0x40, 0x1000, 0x2, 0x40, 0x9, 0x84b5, 0x7, 0x8000, 0xffff, 0x0, 0xa, 0x6, 0x3, 0x1, 0x8, 0x50, 0x4, 0x2, 0x4, 0x4, 0x15, 0xf4, 0xe, 0x1, 0x5, 0x81, 0xb601, 0x7, 0xfffffffc, 0x0, 0x4, 0xa000, 0x2, 0x8, 0x6, 0x7, 0xe77e, 0x0, 0x0, 0x7, 0x8, 0x7fff, 0xa44, 0xff, 0x6, 0x6, 0x3, 0x12000, 0x1, 0x0, 0x80000001, 0x80, 0x7f, 0x781d, 0x5, 0xa, 0x3, 0x9, 0xba, 0x10, 0xd, 0x7, 0x2, 0xfffffffd, 0x1, 0x7, 0xe, 0x7fff, 0x8, 0x6, 0x2, 0x5e, 0xffffff01, 0x4, 0x6, 0x6, 0x3, 0xfffffffc, 0x9, 0x401, 0x4, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x57f, 0x401, 0x5, 0xe, 0x698d, 0xf, 0x1, 0x4, 0x6, 0x9, 0x6, 0x8, 0xba8, 0x7, 0xd, 0x5, 0x8, 0x9, 0x67, 0x9, 0x4, 0x8, 0x9, 0x7, 0x4, 0x1, 0x80000000, 0x4, 0xd, 0x1ff, 0x0, 0x8, 0xe9e5, 0xfffffff8, 0x337c2bd3, 0xfffff11d, 0x3, 0xdbb, 0x7, 0x0, 0xf9c, 0x318, 0x6, 0xb, 0x40, 0xd7, 0x6, 0x9, 0x1, 0x2, 0xb96, 0xfffffd67, 0x7, 0x1, 0x0, 0x81, 0x5, 0x7fffffff, 0xa348, 0x99f6, 0x0, 0x10000, 0xffffffc0, 0x8, 0x9, 0x3, 0x7, 0x8, 0x3, 0x7, 0x7fffffff, 0x800, 0x2, 0x0, 0x6, 0x7, 0x6, 0x8, 0x80000001, 0x100, 0x5, 0x7, 0x7, 0x3, 0x3, 0xe021, 0x1, 0x8, 0x3, 0x5, 0x7fff, 0x4, 0x1, 0xe, 0xa, 0x7d, 0x3, 0xd84, 0x100, 0x400, 0xc, 0x4, 0xffffffff, 0x7, 0x3e, 0xe, 0x10000, 0x3664, 0x1, 0x3, 0x9, 0x400, 0x80000000, 0x2, 0x2, 0xf, 0x4, 0x8000, 0x7ff, 0x1, 0x2, 0x4, 0x101, 0x3, 0x1000, 0x2, 0xccc, 0x2, 0x3, 0x5, 0x1, 0x3, 0x1eb, 0xffffffff, 0xff, 0x7, 0x3c7, 0x9, 0x8, 0x1, 0x1, 0x7, 0xe, 0x0, 0x7, 0x4, 0x9, 0x8000, 0xc18, 0x10, 0x100, 0x86, 0x1, 0xb, 0x5, 0x1, 0x9, 0x756, 0x920, 0x0, 0x4, 0x89fa, 0x80000001, 0x8, 0x3, 0x9, 0x8000, 0x7, 0xcef, 0xfffffff7, 0x5, 0xa4, 0x9f, 0x0, 0xffffffff, 0x145, 0x9, 0xe5, 0x5, 0x7, 0x3, 0x1, 0x7, 0x2, 0x4, 0xc, 0x2, 0xfffffffe, 0x8, 0x1, 0x0, 0x914, 0x1, 0x4, 0x8, 0x2, 0x9, 0x3, 0x7, 0x4, 0x0, 0x8e7, 0x40, 0xfffffff9, 0x7f, 0x5, 0x0, 0x4, 0x7, 0xa5d1, 0x5, 0x9, 0x0, 0xffff, 0xfffffff8, 0x6, 0x5, 0x8, 0x40, 0x2, 0x6, 0x0, 0x5, 0xfffffffa, 0x4, 0x7, 0x8, 0x0, 0x80000000, 0x1ff, 0x7, 0xa0000, 0x1ff, 0x8, 0x10000, 0x8, 0x1, 0x2, 0xaf, 0x10, 0x401, 0x8b1, 0x4, 0x8, 0x10001, 0x9, 0x200, 0x2, 0x8, 0x0, 0x0, 0x1, 0x9, 0x5, 0x0, 0xb40b]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3a, 0x5, 0x7fffffff, 0xfffff930, 0x8001, 0x7, 0x9, 0xc83, 0x195d, 0x7, 0x6, 0x8001, 0x7, 0x0, 0x3, 0x1, 0xdf17, 0x4, 0x9, 0x5, 0x3, 0x7f0, 0x6328d9df, 0x3, 0x2, 0x8, 0x2, 0x10000, 0x7c14, 0x7ff, 0x4, 0x6, 0x6, 0x8, 0x4, 0xfffffffa, 0x6, 0x800, 0x3, 0x9, 0xffffffce, 0x7, 0x1, 0x9, 0xdb7a, 0x4, 0x7ff, 0x80000000, 0x101, 0x6d, 0x4, 0x5, 0x7, 0xf9e2, 0x401, 0x0, 0x6, 0x1, 0x4, 0x6, 0x0, 0xfffffff9, 0x3, 0xac, 0xbace, 0x6d001749, 0xa, 0x6, 0x9, 0x6, 0x9, 0x1, 0x9, 0x40, 0x7, 0x1763, 0x4, 0xe, 0x7fffffff, 0x10001, 0x4, 0x7d7d, 0x6, 0x4ad0948a, 0x3, 0x6, 0xffff, 0x9, 0x10, 0x7fffffff, 0xffffff1b, 0x101, 0x5, 0x8, 0xfffffffd, 0x0, 0x400, 0x9, 0x80, 0x3, 0x0, 0x3, 0xffffffc6, 0x2, 0x1, 0x655, 0xa3, 0x4a, 0xbc, 0x3ff, 0x0, 0x4, 0x1, 0x7, 0x2, 0x7049, 0x0, 0x8, 0x3, 0x0, 0x3, 0x6, 0x80000000, 0xffffff01, 0x1000, 0x1, 0x7f, 0x4, 0x3, 0x1, 0xf, 0x6, 0x817, 0x4, 0x8, 0x0, 0x9086, 0x7ff, 0x1, 0xfffffffe, 0x0, 0x2, 0x8, 0x0, 0x7, 0x20, 0x10001, 0x3dd, 0x5, 0xfffffff2, 0x0, 0x2, 0x5, 0x7, 0x3, 0x8001, 0x3c76, 0x7, 0xdf3, 0x3ff, 0x2, 0x8, 0x1, 0x9870, 0x2, 0x7, 0x1ff, 0x3, 0x143c, 0x2, 0x2, 0x1, 0x363e, 0x9, 0x3, 0x6, 0x3dea, 0x8, 0x6, 0x5, 0x0, 0x3, 0xfffffff9, 0x7fffffff, 0xf, 0x8, 0x5, 0x7fffffff, 0x2, 0x4, 0x3, 0x1, 0x6, 0xff, 0x1, 0x8, 0x5, 0x21ad, 0x7, 0x2, 0xff, 0x8, 0x4, 0x1, 0x5, 0x2b94, 0x9d64c56, 0xd, 0x8, 0xb, 0x7, 0x3, 0x7ff, 0xa995, 0x8, 0xad, 0x3, 0x3, 0x9, 0x7, 0x8001, 0xe43f, 0x6, 0x3, 0x1, 0x3, 0x6, 0x9, 0x0, 0x5, 0x6, 0x7fffffff, 0xff, 0x101, 0x32, 0x2, 0x3, 0x8000, 0xfffffff9, 0x5, 0xdd7, 0x7fff, 0x7fff, 0xc, 0xa, 0xe6, 0x8, 0x1, 0xffffffff, 0x0, 0x9, 0xd49, 0x2, 0x7380, 0xa, 0x4]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4f8, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x29, 0x2, 0x1}, {0x9, 0xa, 0x2, "34a06627d7b556bcaf3c"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x80, 0x3, 0xffff}, {0xa08, 0x6, 0x1f, 0x9f}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xfff7, 0x2, 0x3}, {0xa607, 0xa, 0x2, "34c3cebee8cfe491e819"}}}]}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xffff604d}, @TCA_FLOW_POLICE={0x468, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9ee}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x6, 0xfae, 0x0, {0x4, 0x2, 0x0, 0x2, 0x1, 0x195}, {0xd, 0x0, 0x9, 0x0, 0x2, 0xffffdb4b}, 0x3, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x100, 0x180, 0x1, 0x3, 0x5, 0x7, 0x3ff, 0x2c, 0x723, 0x8, 0x7ff, 0x497fac88, 0x200, 0x101, 0x0, 0xfffff800, 0xd, 0x5, 0xb3, 0x18, 0xb, 0x80000001, 0x7f, 0x8, 0x8, 0x100, 0x3, 0xfff, 0xfffffff8, 0x80000001, 0x2, 0x80, 0x0, 0x6, 0x3, 0x8, 0x6, 0x4, 0x8, 0x0, 0x1, 0x1, 0x9, 0x4, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0x101, 0xdc, 0xffffffff, 0x3, 0x6, 0xf, 0x6, 0x2, 0xc, 0xffffff81, 0x1, 0x0, 0x7, 0x5, 0x9, 0x1788f891, 0xf4, 0x2, 0x3, 0x80000000, 0xd63c, 0x7, 0xe2f, 0x7, 0xfffff001, 0x9, 0x238, 0x1, 0x101, 0x80000000, 0x1, 0x4, 0x80000001, 0x10, 0x80000000, 0x5, 0x8, 0x3, 0x3, 0x2, 0x1, 0x9, 0x6, 0x1000, 0x9, 0x2, 0x1ff, 0x3, 0x4, 0x71, 0x6, 0x6, 0x0, 0x0, 0xf2, 0x4, 0xa, 0x7839, 0x9, 0x9, 0x76, 0xfff, 0x8, 0xd7, 0x80, 0xa0000, 0x8, 0x4, 0xe932, 0x1, 0xffffffff, 0x7, 0x3, 0x13, 0x8, 0x23, 0x0, 0x9d, 0x733b, 0x5, 0x1, 0xdf67, 0xd, 0x7, 0x2, 0x3, 0x5, 0x0, 0x9, 0xffb, 0x400, 0x6, 0x1, 0x7e6, 0x80, 0x6, 0x123b, 0x5, 0x0, 0x9, 0x86, 0x7, 0x7, 0xe901, 0xffff, 0x6, 0x1, 0x9, 0x7, 0x7, 0x4, 0x1a, 0x3, 0x1, 0x3, 0x1000, 0x3ff, 0x80000001, 0x10, 0x6, 0xffff, 0xa, 0x6, 0x5, 0x9, 0x6, 0xd342, 0x800, 0x7, 0x7, 0xcb, 0xd, 0x3, 0x7ff, 0xffaa, 0xd6, 0xfffffff9, 0x9, 0x5, 0x3, 0x8, 0x6, 0x0, 0x9, 0x8, 0xcca3, 0x3, 0x4008, 0x0, 0x3, 0x5373, 0x2f, 0x7, 0x11d, 0x1, 0x4eb, 0xfe, 0x7, 0xffff, 0x2, 0x5, 0x3, 0x7, 0x3ff, 0x3, 0x7f, 0x80000001, 0x6, 0xed, 0x6, 0xa0c5, 0x6, 0x3, 0x2, 0x1, 0xfffffffa, 0x3, 0x9, 0x40, 0x40, 0x7, 0x7f, 0x6, 0x6, 0x80000000, 0x7000000, 0x8, 0xfffffffc, 0x2, 0xffffffff, 0x2, 0x5, 0x5, 0x101, 0x0, 0xc, 0xffff, 0x40, 0xfffffffc, 0x10000, 0x5e3a, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x84}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3ff}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xff}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_XOR={0x8, 0x7, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2bac}, 0x1, 0x0, 0x0, 0x20048800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b70000000000000095000000000000007920fff9000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.150061572s ago: executing program 1 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$nl_netfilter(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./dir0\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000001c80)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000001cc0)={0x2, 0x6bb, @loopback}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000000, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x200, 0x0, 0x3, 0x6c4ba42, 0x0, 0x7, 0x1, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x810000000000000, 0x21d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000000000000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x10000000000, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001]}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000840)={{r4}, "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"}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0xb99bd000) 1.121266898s ago: executing program 1 (id=342): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x1, 0x21c) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x1, 0x21c) write(r1, &(0x7f00000001c0)='A-CONFIG=disabled\n', 0x12) (async) write(r1, &(0x7f00000001c0)='A-CONFIG=disabled\n', 0x12) r2 = syz_clone(0x88002000, &(0x7f0000000200)="0754ff0e098f26c8f5dc4cd2db3fb2bc47a60532af69958a1be1341f93b90744f43cbb6c2628585bb748804ce7d48bd51c00e3cd7a9f2da71fd8c6e9cdd5c866813adc293ad529409de6c25232fd1eacb8083b8aa0dee4c7ba5d183bfc06ec2d9af075948f5fbfa557640b1ff1dbce646ee17b7c4ee8beb0d98470fb50c06e4d40fa38f58992a6d0bc226f1987de4b745daa23f6178a5212c81fc4b20a7f944a49f1139ee46f6ef7c06476ea4c60c1bc613678ad814e17b0961b651f8520ae109c605e79cfb7b9f6531bc2e0293e", 0xce, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="d18449cf227d71568a90e586645f381abb22426f4971ab184ee9a149e38db45d83a4a572fddb5f388bd044b49ba2212f85d533e47c84bfe2cf09cc0f09e4d976bf1b2a494463e6b05aee28f5880d54c5820a91d09dab1580de6b1bb33cd6f598c8b9d3fc5f0144d512f2714c5ce81c41801ef14657487cc6bb3f944a8792751fd10bae4ffd211f12c181fe54f379a507e2e8db013c66dd4f371825f1b21e00cc2adaf793c14cc617dd95163f742d7e9663a4aec08fb97f12a7a0ff527fe50adc16d9b364f5446930e87b19d8c6e88c6da611fe8e8c") recvfrom$l2tp6(r1, &(0x7f00000006c0)=""/59, 0x3b, 0x1, &(0x7f0000000700)={0xa, 0x0, 0x0, @mcast2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket(0x5, 0x1, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0) sendmmsg(r3, &(0x7f00000006c0), 0x4000000000001f2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x70}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x70}}, 0x0) r7 = io_uring_setup(0x1562, 0x0) io_uring_enter(r7, 0x2219, 0x107721, 0x16, 0x0, 0x0) r8 = getpgrp(0x0) setpgid(r2, r8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 970.850826ms ago: executing program 1 (id=348): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002dc0)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (fail_nth: 2) 812.107123ms ago: executing program 3 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4000090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a40)={0x0, 0xffffffffffffff52, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 751.825039ms ago: executing program 3 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/zram0\x00', 0x80002, 0x0) pwrite64(r0, &(0x7f00000007c0)="01", 0x1, 0xc4) 692.028199ms ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='add', 0x3) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='mon_addr\x00', &(0x7f0000000080)='[2].0.0.1:6789\x00', 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000740), 0xc1c3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0xff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}]}, 0x28}}, 0x0) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0xdf) 691.283541ms ago: executing program 3 (id=358): syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfb, 0xf8}}}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 691.130224ms ago: executing program 2 (id=359): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="120000001c0000011411223344556600060101010101010101010101010101010100", 0x22) (fail_nth: 5) 630.631892ms ago: executing program 2 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000300)={0x8, r0, 'id1\x00'}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xd9, 0x7, 0x7ffc0001}]}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x84800) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2d1418, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_fscache}], [{@subj_role={'subj_role', 0x3d, ')^,-^'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r4}}]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x8004, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000700)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000007c0)={[{0x3, 0xf1, 0x4, 0xed, 0x0, 0x1, 0x7f, 0xfa, 0x4, 0x3, 0xe, 0xbb, 0x1}, {0x8, 0x0, 0x3, 0x8, 0xff, 0x8, 0x11, 0x6, 0x80, 0x6, 0x80, 0x43, 0x101}, {0x4, 0xc740, 0x49, 0x4, 0x4, 0xf, 0xd, 0x21, 0x2, 0xd7, 0x9, 0x5, 0x7}], 0x10000}) 630.257906ms ago: executing program 0 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000002c0)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) syz_open_dev$loop(0x0, 0x8001, 0x1a5000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x940, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x910, 0x3, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x284, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "1ee6fae98231cc9f62870b7386bf3b7cae2a759ccae12d03218fb34a87ad18da28c860eb40d3fc3f35a0cd20d7eefbace3778b112bb305af7907def8fddc61d08441f650252683dbd9b2b23f11c06bfab6f6f282f5063263dae71aa7c3222b944cca0939e2defbc3299fa7f17723bf074e95eb5eb9f4d7b4"}, @NFTA_DATA_VALUE={0xc7, 0x1, "ed61044a47a245da2ce6b3c5edb94941f4639c9792db3f8840df9ff9b58fc4d6b6fffd24c35d495c2d007b56a752cb134559e275a7f2584011178780ea418c54638bcefc7b35f9a06f129ad7f5b617ed292484dfb26ef6e0d5213ee7003238bc159988570efb75371b7d9d65823a01c1cf0416499a74504653b7ae853b6ab499d3beb1eda082e28a955f5c87add09fc9632ad87a83307258123979f5c3ea2184db438ee51b36f67664d513323581ab76ffada885da7fc78582400d042388a112bad789"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb10982374e114bc1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c95e8e901bfc54"}, @NFTA_DATA_VALUE={0xab, 0x1, "b389df99d7d1baac248c01686a36f19df63ebebe990bea658be39121355c0caa55fe29c75b40071e0e4259c26a481528bf5b603df824932a98eaa41a70f636b7dff66eb33b74fdd93efc9a476bf7a38bf9da871f59ecf86157b3631da422d50f7dc65eee392694e230134c308a8864272458db71515a4fbc1e5a0c08f1e5055eeb9781d4237c653e506776ae81cdae5b3506d391d100230fdf4af50da2fb41a3c71ba89d83e236"}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x648, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x608, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x604, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9f0}, 0x1, 0x0, 0x0, 0x24008000}, 0x2) 522.380285ms ago: executing program 2 (id=362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@getchain={0x2c, 0x11, 0x200, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff3, 0xa}, {0x4, 0x5}}}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0xb709}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000240)="bf2a7a33e8d7e9ec597b740abf8cac58d3bb9f983bc722615545b41f520ff81d391f43f0339ddcd0339710abdc0e8d7e07fc12ba7c25f9ce1253dbe528ec483696245bb4aac6357dacfdaa67aa94dc2bcbec40d717242ade513581f62551b0878bf85751b92e8abbcc19f64ff01f17ca7c4813a6fb19ae86b5b0dced6ace687b0ed70d81bd3b919542808b65a133a2a6a9d2f8c191740f7545e1d630c9452d3dd4629e4c95388079840c8483515173039f92038c1c741abc8e59f3feb367b407a01c0f33188f9c1366143b3a05f123078ad4d5f736d6198a8e91c5e5bdf8f16a1dce64", 0xe3}, {&(0x7f0000000440)="61cb74ddc1b1295f2c8c4f020d033ebdc98e160e428104d727707f05100253d6cb9f07c9924b9991520ee7ecb497714dbfd2e1f1485575ff2be52d297df77039c9d071ccf87dbb8d54c8c274bd2ee3b47f3cd8e5344830c54db349810799dd7d044dad41df8c", 0x66}], 0x3}}], 0x1, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) 459.056423ms ago: executing program 2 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4000090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a40)={0x0, 0xffffffffffffff52, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 457.94334ms ago: executing program 0 (id=364): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000011c0)={0x1, &(0x7f0000001200)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x20000000000003f) 457.376294ms ago: executing program 2 (id=365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x311) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a00000004100010026bd700000ccd900030100000f00000012000100002802e08a17503ca13e6d3e3627000004000280700003806c00118068001c80620003"], 0xa0}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x200, 0x70bf23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd1ba1095880c105e, 0xfff2}, {0x2, 0xffff}, {0x44e9f4f6f6d4d2eb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x44042) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f00000009c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000a00)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r5, &(0x7f0000000a80)={0x0, 0x33, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf250200000008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60840, 0x8) r8 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x40040) 457.065688ms ago: executing program 0 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) 379.646251ms ago: executing program 0 (id=367): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x19}) getresuid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)=0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000009c0)=@filename='./file0\x00', r1, &(0x7f0000000ac0)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000c40)={0x1, 0x8000}, &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000b40)={r6, 0x64, "e78c95e664473bccb4c9291f771fe6c822d391a7e82773d6ffaa11a500515021fd5faa442b4b8e08741b94eaafad1bc3aba3a68d6b7fba8214f15771bad0abe5b417dfddcffcf6ef96331a08f52d4a6220140c5fd0271e3b873233bf1d67ddfb6b148c82"}, &(0x7f0000000cc0)=0x6c) setsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r5, 0x84, 0x80, &(0x7f0000000c00)={r7, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1c, r9, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080) 379.23987ms ago: executing program 0 (id=368): r0 = syz_open_dev$evdev(&(0x7f0000000780), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000800)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xa6) mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0) mount$9p_unix(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0xb) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xf7, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xdc, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0xfc, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x90, 0x5}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0x2, 0x95, 0x40, 0x1}, 0xa8, &(0x7f0000000080)={0x5, 0xf, 0xa8, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x4, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x8, 0x0, 0x8, [0xff00cf, 0xc0, 0xff00, 0x0]}, @generic={0x80, 0x10, 0x3, "24fe663ddf3826e84c50fa31b2bf5be2d4a98e8f3b2564fa4ebb514b7c20eedb003f50fabd4264dac38f93f5950cf64ca4c3dfcdbe56703f34092adafd12b80c83d77da21648735910dffc8a76f7d72c7b7dc25acd3fc185c76285b09469fb5fb327f5115fc7d68c3804763547915ee5f7b6a1b8c4b4a9699f1a37215e"}]}, 0x7, [{0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "9d4412b7e780b1ae1b717bc47d2dc3cae527aa925ab1b04e8f8b4f331a9067fe342ab6b4265cafc05aabb8a9b0cb9e13e3bbbc9c1982f8307b04ea2fc4b0e14477d71aaae4cd5718683b0760768124a15ea9d558f6c50f42b70b431cd6f0728231b4e3fe7550ece3f0af512df689b232390669a6eef93b9c882c0de34b09665bbf41fd8de0c654ba241fb0dd7fe46171be5e60a766ac88dac48e90dcac68e1ca168de6bef2f8325850355b6cfb9fbdfd30"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "75a018100e6f54cc361b1aff1df510128d849c1239de1746ffa5ebbc65441cf6acc240862f84ac5a593d69abe05b087fdf301a2cab2b168132142affa2691f9c18fec84a7928f7a7e6bc2a73134cf4095704622838fbeb24ae8f65ce820b804bd2da6223ab3f32c4124eff961decdfe2b6c1da9158e522e23c1900f313d30c811b855948eabf280266f09cdc4a00060061b77c35c06e77a860237c48f08c07ca09032380be"}}, {0x7f, &(0x7f0000000340)=@string={0x7f, 0x3, "416193d29e9a535f6eaa09958fb29851ed87fee258af4767234e573a26d6b83e529126c8dd1acb5c83be04da726ba1d6553608c014663291e1289dfbc1c76d3d21b6e8eaf662860734337eb9623f5cf7cc76e2835b79fb2fa266f0e6db3e507e07ba54b6953f5c0ad78a42de9fcecc2d4019655bd4493876d1ec0c6a90"}}, {0x46, &(0x7f00000003c0)=@string={0x46, 0x3, "4bf580425ba710fbd87b00cc49353ea9fbdb194be3b9f4aac0a1c022787eb8edde7028750c5832d1755426095ff34002f1b6623c7db1144225c271e3fbda0be390dcd8c0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x43e}}]}) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 291.637915ms ago: executing program 2 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000003c0)={r2, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24100412", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="1400238006000200840000000600030042000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000380)={0x3, 0x100}) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./debug\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='+ 3 0 0', 0x7) read$FUSE(r4, &(0x7f0000008c00)={0x2020}, 0x2020) 142.068354ms ago: executing program 3 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e25, 0x0, 0x2, 0x20, 0x20, 0xc6}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2, 0x7fff}, {0x3, 0x0, 0x2, 0xfffffffffffffffd}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x201a, 0x0, 0x2, 0xfffffffffffffffa}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="be38", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 357.416µs ago: executing program 3 (id=371): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="121400001c0000011411223344556600060101010101010101010101010101010100", 0x22) 0s ago: executing program 3 (id=372): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80290100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = memfd_create(&(0x7f00000000c0)=':\x00', 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl(r7, 0x40186f40, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r9 = memfd_create(&(0x7f00000001c0)='{*.\x00', 0xa) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000200)=ANY=[@ANYBLOB="d12ef9e904000000", @ANYRES32=r6, @ANYBLOB="0000000000800000000000000010000000000000", @ANYRES32=r7, @ANYBLOB="0000000000100000000000000000000000000100", @ANYRES32=r8, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000100"/20]) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="32000300070000002000000000", 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40508' (ED25519) to the list of known hosts. [ 40.244265][ T44] kauditd_printk_skb: 17 callbacks suppressed [ 40.244278][ T44] audit: type=1400 audit(1794484117.591:138): avc: denied { name_bind } for pid=5767 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.291859][ T44] audit: type=1400 audit(1794484117.641:139): avc: denied { execute } for pid=5768 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.292543][ T44] audit: type=1400 audit(1794484117.641:140): avc: denied { execute_no_trans } for pid=5768 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.629390][ T44] audit: type=1400 audit(1794484119.981:141): avc: denied { mounton } for pid=5768 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.631219][ T44] audit: type=1400 audit(1794484119.981:142): avc: denied { mount } for pid=5768 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.632975][ T5768] cgroup: Unknown subsys name 'net' [ 42.634230][ T44] audit: type=1400 audit(1794484119.981:143): avc: denied { unmount } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.828513][ T5768] cgroup: Unknown subsys name 'cpuset' [ 42.833495][ T5768] cgroup: Unknown subsys name 'rlimit' [ 42.994670][ T44] audit: type=1400 audit(1794484120.341:144): avc: denied { setattr } for pid=5768 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.995619][ T44] audit: type=1400 audit(1794484120.341:145): avc: denied { create } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.995901][ T44] audit: type=1400 audit(1794484120.351:146): avc: denied { write } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.996336][ T44] audit: type=1400 audit(1794484120.351:147): avc: denied { read } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.073803][ T5773] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.943422][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.993449][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 46.993468][ T44] audit: type=1400 audit(1794484124.341:154): avc: denied { execmem } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.198437][ T44] audit: type=1400 audit(1794484124.551:155): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.198851][ T44] audit: type=1400 audit(1794484124.551:156): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.199266][ T44] audit: type=1400 audit(1794484124.551:157): avc: denied { open } for pid=5780 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.199445][ T44] audit: type=1400 audit(1794484124.551:158): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.212257][ T44] audit: type=1400 audit(1794484124.561:159): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[2801]" dev="sockfs" ino=2801 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.238000][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.238966][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.247428][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.247889][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.248181][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.249574][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.249985][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.253919][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.254568][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.255055][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.260374][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.261547][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.262889][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.263756][ T44] audit: type=1400 audit(1794484124.611:160): avc: denied { read } for pid=5780 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.263793][ T44] audit: type=1400 audit(1794484124.611:161): avc: denied { open } for pid=5780 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.263823][ T44] audit: type=1400 audit(1794484124.611:162): avc: denied { mounton } for pid=5780 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.263973][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.264995][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.265141][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.265600][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.266743][ T44] audit: type=1400 audit(1794484124.621:163): avc: denied { module_request } for pid=5780 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.268077][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.270148][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.270327][ T68] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.470769][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.471224][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.471779][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.497159][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.505949][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.507280][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.601544][ T5779] infiniband rxe0: set active [ 47.603575][ T5779] infiniband rxe0: added rxe_eth0 [ 47.603700][ T65] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.616490][ T5779] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.616541][ T5779] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.616573][ T5779] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.631378][ T5779] RDS/IB: rxe0: added [ 47.631575][ T5779] smc: adding ib device rxe0 with port count 1 [ 47.631613][ T5779] smc: ib device rxe0 port 1 has no pnetid [ 47.657315][ T857] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.667417][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.750600][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.836521][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.844912][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.844967][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.845132][ T5780] bridge_slave_0: entered allmulticast mode [ 47.846078][ T5780] bridge_slave_0: entered promiscuous mode [ 47.848575][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848638][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.848690][ T5780] bridge_slave_1: entered allmulticast mode [ 47.849532][ T5780] bridge_slave_1: entered promiscuous mode [ 47.900007][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.906384][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.906468][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.906616][ T5783] bridge_slave_0: entered allmulticast mode [ 47.907393][ T5783] bridge_slave_0: entered promiscuous mode [ 47.913428][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.913979][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.914054][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.914130][ T5783] bridge_slave_1: entered allmulticast mode [ 47.914863][ T5783] bridge_slave_1: entered promiscuous mode [ 47.952284][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.965043][ T5780] team0: Port device team_slave_0 added [ 47.965140][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.965182][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.965334][ T5787] bridge_slave_0: entered allmulticast mode [ 47.966699][ T5787] bridge_slave_0: entered promiscuous mode [ 47.970139][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.981718][ T5780] team0: Port device team_slave_1 added [ 47.987157][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.987281][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.987994][ T5787] bridge_slave_1: entered allmulticast mode [ 47.989215][ T5787] bridge_slave_1: entered promiscuous mode [ 48.020849][ T5783] team0: Port device team_slave_0 added [ 48.040705][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.041133][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.046386][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.047947][ T5783] team0: Port device team_slave_1 added [ 48.059266][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.059280][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.059299][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.084175][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.084189][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.084209][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.093320][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.093336][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.093356][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.106791][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.106805][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.106824][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.108979][ T5787] team0: Port device team_slave_0 added [ 48.111178][ T5787] team0: Port device team_slave_1 added [ 48.152231][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.152247][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.152264][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.172988][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.172998][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.173009][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.177317][ T5780] hsr_slave_0: entered promiscuous mode [ 48.177976][ T5780] hsr_slave_1: entered promiscuous mode [ 48.189242][ T5783] hsr_slave_0: entered promiscuous mode [ 48.189676][ T5783] hsr_slave_1: entered promiscuous mode [ 48.190001][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 48.190010][ T5783] Cannot create hsr debugfs directory [ 48.237271][ T5787] hsr_slave_0: entered promiscuous mode [ 48.237713][ T5787] hsr_slave_1: entered promiscuous mode [ 48.238001][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 48.238009][ T5787] Cannot create hsr debugfs directory [ 48.468718][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.474679][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.492515][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.494669][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.495146][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.500004][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.510333][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.512449][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.541944][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.542033][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.542129][ T5779] bridge_slave_0: entered allmulticast mode [ 48.543342][ T5779] bridge_slave_0: entered promiscuous mode [ 48.551180][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.551260][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.551367][ T5779] bridge_slave_1: entered allmulticast mode [ 48.552073][ T5779] bridge_slave_1: entered promiscuous mode [ 48.589300][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.604367][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.608355][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.608450][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.608956][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.609048][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.624595][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.627478][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.627983][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.633899][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.634729][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.636580][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.649376][ T5779] team0: Port device team_slave_0 added [ 48.661174][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.664087][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.666315][ T5779] team0: Port device team_slave_1 added [ 48.699148][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.699162][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.699177][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.700708][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.700719][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.700731][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.745514][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.746480][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.754087][ T5779] hsr_slave_0: entered promiscuous mode [ 48.754522][ T5779] hsr_slave_1: entered promiscuous mode [ 48.754823][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 48.754831][ T5779] Cannot create hsr debugfs directory [ 48.773440][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.775309][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.795884][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.799721][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.800447][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.803423][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.823546][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.828819][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.918373][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.941404][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.964482][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.966782][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.966865][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.985139][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.985224][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.997562][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.001066][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.001641][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.004016][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.006928][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.010641][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.017536][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.018630][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.022138][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.034049][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.034128][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.050349][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.050402][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.063588][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.088960][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.103399][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.103445][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.114658][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.114703][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.143813][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.172505][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.181621][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.181669][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.191545][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.191593][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.287375][ T68] Bluetooth: hci1: command tx timeout [ 49.287543][ T68] Bluetooth: hci0: command tx timeout [ 49.287629][ T68] Bluetooth: hci2: command tx timeout [ 49.350735][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.365997][ T68] Bluetooth: hci3: command tx timeout [ 49.367931][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.390616][ T5780] veth0_vlan: entered promiscuous mode [ 49.401119][ T5780] veth1_vlan: entered promiscuous mode [ 49.418962][ T5783] veth0_vlan: entered promiscuous mode [ 49.422848][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.430630][ T5783] veth1_vlan: entered promiscuous mode [ 49.435422][ T5780] veth0_macvtap: entered promiscuous mode [ 49.439063][ T5780] veth1_macvtap: entered promiscuous mode [ 49.468013][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.474944][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.479471][ T5783] veth0_macvtap: entered promiscuous mode [ 49.484213][ T5787] veth0_vlan: entered promiscuous mode [ 49.489190][ T5783] veth1_macvtap: entered promiscuous mode [ 49.500079][ T5787] veth1_vlan: entered promiscuous mode [ 49.506450][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.521295][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.531800][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.568244][ T5787] veth0_macvtap: entered promiscuous mode [ 49.583291][ T5787] veth1_macvtap: entered promiscuous mode [ 49.593149][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.593163][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.593907][ T5779] veth0_vlan: entered promiscuous mode [ 49.619493][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.619512][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.621914][ T5779] veth1_vlan: entered promiscuous mode [ 49.629450][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.644527][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.669398][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.669412][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.701368][ T5779] veth0_macvtap: entered promiscuous mode [ 49.709506][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.709519][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.715496][ T5779] veth1_macvtap: entered promiscuous mode [ 49.719043][ T5780] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.746362][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.756642][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.764863][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.767054][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.796651][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797241][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797519][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797782][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.798274][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.798284][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.817455][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817642][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817675][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817704][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.835685][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.836851][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.836867][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.864138][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.864152][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.890946][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.890959][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.896039][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896426][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896781][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896817][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896845][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.119338][ T5956] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 50.206952][ T5959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.268775][ T5959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.321329][ T5959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.374520][ T5964] tipc: Can't bind to reserved service type 1 [ 50.695585][ T857] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.845900][ T857] usb 8-1: Using ep0 maxpacket: 32 [ 50.848965][ T857] usb 8-1: unable to get BOS descriptor or descriptor too short [ 50.848991][ T857] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 50.852826][ T857] usb 8-1: string descriptor 0 read error: -22 [ 50.852883][ T857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.859314][ T857] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 50.859334][ T857] dw2102: su3000_power_ctrl: 1, initialized 0 [ 50.859516][ T857] dvb-usb: bulk message failed: -22 (2/0) [ 50.863794][ T857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 50.865235][ T857] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 50.865259][ T857] usb 8-1: media controller created [ 50.866150][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866159][ T857] dw2102: i2c transfer failed. [ 50.866174][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866179][ T857] dw2102: i2c transfer failed. [ 50.866185][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866190][ T857] dw2102: i2c transfer failed. [ 50.866195][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866200][ T857] dw2102: i2c transfer failed. [ 50.866205][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866211][ T857] dw2102: i2c transfer failed. [ 50.866215][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 50.866221][ T857] dw2102: i2c transfer failed. [ 50.866224][ T857] dvb-usb: MAC address: 02:02:02:02:02:02 [ 50.875683][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 50.893696][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 50.893706][ T857] dw2102: command 0x0e transfer failed. [ 50.893710][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 50.893715][ T857] dw2102: command 0x0e transfer failed. [ 50.997715][ T5979] FAULT_INJECTION: forcing a failure. [ 50.997715][ T5979] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.997734][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 50.997746][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.997751][ T5979] Call Trace: [ 50.997755][ T5979] [ 50.997759][ T5979] dump_stack_lvl+0x100/0x190 [ 50.997781][ T5979] should_fail_ex.cold+0x5/0xa [ 50.997798][ T5979] _copy_from_iter+0x1f4/0x16c0 [ 50.997816][ T5979] ? __pfx__copy_from_iter+0x10/0x10 [ 50.997829][ T5979] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.997844][ T5979] ? lock_acquire+0x1d1/0x380 [ 50.997863][ T5979] copy_page_from_iter+0x238/0x300 [ 50.997877][ T5979] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 50.997898][ T5979] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 50.997913][ T5979] ? unwind_get_return_address+0x59/0xa0 [ 50.997925][ T5979] ? arch_stack_walk+0xa6/0xf0 [ 50.997947][ T5979] ? _kstrtoull+0x144/0x200 [ 50.997962][ T5979] ? __pfx__kstrtoull+0x10/0x10 [ 50.997978][ T5979] tun_get_user+0x1763/0x3ee0 [ 50.997997][ T5979] ? __lock_acquire+0x5c0/0x1f40 [ 50.998011][ T5979] ? __pfx_tun_get_user+0x10/0x10 [ 50.998029][ T5979] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 50.998048][ T5979] ? find_held_lock+0x2b/0x80 [ 50.998080][ T5979] ? tun_get+0x191/0x370 [ 50.998098][ T5979] ? tun_get+0x191/0x370 [ 50.998124][ T5979] tun_chr_write_iter+0xdc/0x200 [ 50.998149][ T5979] vfs_write+0x6af/0x1040 [ 50.998167][ T5979] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 50.998192][ T5979] ? __pfx_vfs_write+0x10/0x10 [ 50.998207][ T5979] ? find_held_lock+0x2b/0x80 [ 50.998239][ T5979] ksys_write+0x12a/0x250 [ 50.998255][ T5979] ? __pfx_ksys_write+0x10/0x10 [ 50.998279][ T5979] do_syscall_64+0x123/0x7b0 [ 50.998325][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.998341][ T5979] RIP: 0033:0x7efccc569d0e [ 50.998354][ T5979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.998368][ T5979] RSP: 002b:00007efccd546fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.998384][ T5979] RAX: ffffffffffffffda RBX: 00007efccd5476c0 RCX: 00007efccc569d0e [ 50.998394][ T5979] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 00000000000000c8 [ 50.998403][ T5979] RBP: 00007efccd547090 R08: 0000000000000000 R09: 0000000000000000 [ 50.998412][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.998421][ T5979] R13: 00007efccc826038 R14: 00007efccc825fa0 R15: 00007ffe6d54bad8 [ 50.998444][ T5979] [ 51.117220][ T5985] SELinux: DCCP has been removed, pid=5985 comm=syz.3.8 [ 51.197002][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 51.197043][ T857] dw2102: command 0x0e transfer failed. [ 51.197048][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 51.197055][ T857] dw2102: command 0x0e transfer failed. [ 51.197058][ T857] dvb-usb: bulk message failed: -22 (1/0) [ 51.197064][ T857] dw2102: command 0x51 transfer failed. [ 51.197630][ T5966] dvb-usb: bulk message failed: -22 (5/0) [ 51.197641][ T5966] dw2102: i2c transfer failed. [ 51.228166][ T857] DVB: Unable to find symbol ds3000_attach() [ 51.228176][ T857] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 51.265532][ T857] rc_core: IR keymap rc-su3000 not found [ 51.265547][ T857] Registered IR keymap rc-empty [ 51.268741][ T857] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 51.270513][ T857] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input5 [ 51.274244][ T857] dvb-usb: schedule remote query interval to 150 msecs. [ 51.274262][ T857] dw2102: su3000_power_ctrl: 0, initialized 1 [ 51.274273][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 51.283288][ T857] usb 8-1: USB disconnect, device number 2 [ 51.326099][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 51.351210][ T5989] Bluetooth: ISO socket layer initialized [ 51.375751][ T5781] Bluetooth: hci2: command tx timeout [ 51.375773][ T5781] Bluetooth: hci0: command tx timeout [ 51.375785][ T5781] Bluetooth: hci1: command tx timeout [ 51.445884][ T5781] Bluetooth: hci3: command tx timeout [ 51.477261][ T5959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.507550][ T5996] jffs2: notice: (5996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.711960][ T6001] ip6t_frag: unknown flags 6 [ 51.725420][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 51.822361][ T6005] atomic_op ffff88805748c9e0 conn xmit_atomic 0000000000000000 [ 51.931275][ T6016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6016 comm=syz.0.22 [ 51.965838][ T68] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 52.346796][ T44] kauditd_printk_skb: 92 callbacks suppressed [ 52.346809][ T44] audit: type=1400 audit(1794484129.701:256): avc: denied { setopt } for pid=6024 comm="syz.3.26" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.375213][ T6029] atomic_op ffff888057a1f9e0 conn xmit_atomic 0000000000000000 [ 52.385933][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28'. [ 52.396680][ T6031] ip_tables: iptables: counters copy to user failed while replacing table [ 52.402950][ T6031] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 52.466187][ T44] audit: type=1326 audit(1794484129.821:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.3.32" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f023a7a94d9 code=0x0 [ 52.547555][ T44] audit: type=1400 audit(1794484129.901:258): avc: denied { setopt } for pid=6048 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.591167][ T44] audit: type=1400 audit(1794484129.941:259): avc: denied { create } for pid=6052 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.591939][ T44] audit: type=1400 audit(1794484129.941:260): avc: denied { write } for pid=6052 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.592146][ T44] audit: type=1400 audit(1794484129.941:261): avc: denied { nlmsg_write } for pid=6052 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.701061][ T6070] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 52.736542][ T5865] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 52.759041][ T6070] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 52.806574][ T6075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6075 comm=syz.0.42 [ 52.830670][ T68] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 53.067548][ T44] audit: type=1326 audit(1794484130.421:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.1.43" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17563a94d9 code=0x0 [ 53.117120][ T44] audit: type=1400 audit(1794484130.471:263): avc: denied { write } for pid=6077 comm="syz.1.43" name="loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.120909][ T6079] loop7: detected capacity change from 0 to 7 [ 53.159041][ T6079] Dev loop7: unable to read RDB block 7 [ 53.159063][ T6079] loop7: unable to read partition table [ 53.159164][ T6079] loop7: partition table beyond EOD, truncated [ 53.159195][ T6079] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 53.163478][ T6079] jffs2: notice: (6079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 53.165523][ T44] audit: type=1400 audit(1794484130.511:264): avc: denied { write } for pid=6077 comm="syz.1.43" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.380174][ T44] audit: type=1400 audit(1794484130.731:265): avc: denied { connect } for pid=6090 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.447051][ T68] Bluetooth: hci0: command 0x040f tx timeout [ 53.447086][ T68] Bluetooth: hci1: command tx timeout [ 53.466142][ T6094] overlayfs: missing 'workdir' [ 53.492023][ T6098] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 53.505377][ T5865] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 53.520976][ T6098] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 53.526026][ T5781] Bluetooth: hci3: command tx timeout [ 54.207446][ T6118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6118 comm=syz.2.57 [ 54.234013][ T68] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 54.298545][ T6123] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 54.312101][ T5865] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 54.327989][ T6123] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 54.912178][ T6141] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 55.001541][ T6147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.026917][ T6149] ceph: No source [ 55.070703][ T6147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.168360][ T6147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.205755][ T6162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6162 comm=syz.0.74 [ 55.231442][ T6147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.246632][ T5796] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 55.525549][ T5796] Bluetooth: hci0: command 0x040f tx timeout [ 55.605569][ T5781] Bluetooth: hci3: command tx timeout [ 55.794134][ T6170] FAULT_INJECTION: forcing a failure. [ 55.794134][ T6170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.794164][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) [ 55.794176][ T6170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.794182][ T6170] Call Trace: [ 55.794191][ T6170] [ 55.794195][ T6170] dump_stack_lvl+0x100/0x190 [ 55.794298][ T6170] should_fail_ex.cold+0x5/0xa [ 55.794323][ T6170] _copy_to_user+0x32/0xd0 [ 55.794369][ T6170] simple_read_from_buffer+0xcb/0x170 [ 55.794405][ T6170] proc_fail_nth_read+0x1af/0x230 [ 55.794441][ T6170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.794456][ T6170] ? rw_verify_area+0xce/0x6d0 [ 55.794480][ T6170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.794494][ T6170] vfs_read+0x1e4/0xb30 [ 55.794505][ T6170] ? lock_acquire+0x1d1/0x380 [ 55.794538][ T6170] ? __fget_files+0x34/0x3d0 [ 55.794559][ T6170] ? __pfx_vfs_read+0x10/0x10 [ 55.794568][ T6170] ? find_held_lock+0x2b/0x80 [ 55.794580][ T6170] ? __fget_files+0x215/0x3d0 [ 55.794595][ T6170] ? __fget_files+0x21f/0x3d0 [ 55.794612][ T6170] ksys_read+0x12a/0x250 [ 55.794622][ T6170] ? __pfx_ksys_read+0x10/0x10 [ 55.794637][ T6170] do_syscall_64+0x123/0x7b0 [ 55.794686][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.794698][ T6170] RIP: 0033:0x7efccc569d0e [ 55.794715][ T6170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.794724][ T6170] RSP: 002b:00007efccd546fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.794735][ T6170] RAX: ffffffffffffffda RBX: 00007efccd5476c0 RCX: 00007efccc569d0e [ 55.794741][ T6170] RDX: 000000000000000f RSI: 00007efccd5470a0 RDI: 0000000000000004 [ 55.794747][ T6170] RBP: 00007efccd547090 R08: 0000000000000000 R09: 0000000000000000 [ 55.794753][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.794759][ T6170] R13: 00007efccc826038 R14: 00007efccc825fa0 R15: 00007ffe6d54bad8 [ 55.794772][ T6170] [ 55.844843][ T6178] netlink: 'syz.0.81': attribute type 11 has an invalid length. [ 55.851627][ T6179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 55.948816][ T6187] kvm: Disabled LAPIC found during irq injection [ 55.985987][ T6192] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 56.044567][ T6197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6197 comm=syz.1.87 [ 56.077822][ T6198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.078354][ T5781] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 56.078373][ T5781] Bluetooth: hci3: unexpected event for opcode 0x042f [ 56.331129][ T6198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.438971][ T6198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.547890][ T6198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.806929][ T6214] loop0: detected capacity change from 0 to 4096 [ 56.814368][ T6214] ======================================================= [ 56.814368][ T6214] WARNING: The mand mount option has been deprecated and [ 56.814368][ T6214] and is ignored by this kernel. Remove the mand [ 56.814368][ T6214] option from the mount to silence this warning. [ 56.814368][ T6214] ======================================================= [ 56.929544][ T6224] No source specified [ 56.969391][ T6226] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=3537391390 (14149565560 ns) > initial count (1640997352 ns). Using initial count to start timer. [ 57.041017][ T6232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6232 comm=syz.3.100 [ 57.086558][ T5781] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 57.086625][ T5781] Bluetooth: hci0: unexpected event for opcode 0x042f [ 57.147274][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 57.979669][ T6263] Cannot find add_set index 65532 as target [ 58.056867][ T5781] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 58.056889][ T5781] Bluetooth: hci0: unexpected event for opcode 0x042f [ 58.128757][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 58.128769][ T44] audit: type=1326 audit(1794484135.481:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.2.114" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efccc5a94d9 code=0x0 [ 58.186482][ T6273] No source specified [ 58.352250][ T44] audit: type=1400 audit(1794484135.701:295): avc: denied { mount } for pid=6277 comm="syz.0.117" name="/" dev="autofs" ino=14477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 58.390986][ T44] audit: type=1400 audit(1794484135.741:296): avc: denied { read append } for pid=6279 comm="syz.0.118" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.418275][ T44] audit: type=1400 audit(1794484135.771:297): avc: denied { read write } for pid=6279 comm="syz.0.118" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.418322][ T44] audit: type=1400 audit(1794484135.771:298): avc: denied { open } for pid=6279 comm="syz.0.118" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.490643][ T44] audit: type=1400 audit(1794484135.841:299): avc: denied { write } for pid=6282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.543699][ T44] audit: type=1400 audit(1794484135.891:300): avc: denied { write } for pid=6285 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.569381][ T44] audit: type=1400 audit(1794484135.921:301): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.624267][ T44] audit: type=1400 audit(1794484135.971:302): avc: denied { write } for pid=6289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.686908][ T44] audit: type=1400 audit(1794484136.041:303): avc: denied { write } for pid=6293 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.829112][ T6310] FAULT_INJECTION: forcing a failure. [ 58.829112][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 58.829144][ T6310] CPU: 1 UID: 0 PID: 6310 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 58.829156][ T6310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.829162][ T6310] Call Trace: [ 58.829170][ T6310] [ 58.829174][ T6310] dump_stack_lvl+0x100/0x190 [ 58.829265][ T6310] should_fail_ex.cold+0x5/0xa [ 58.829300][ T6310] should_failslab+0xc2/0x120 [ 58.829349][ T6310] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.829375][ T6310] ? netlink_deliver_tap+0x103/0xb50 [ 58.829421][ T6310] ? skb_clone+0x187/0x3f0 [ 58.829444][ T6310] skb_clone+0x187/0x3f0 [ 58.829457][ T6310] netlink_deliver_tap+0x82f/0xb50 [ 58.829473][ T6310] netlink_unicast+0x708/0x950 [ 58.829490][ T6310] ? __pfx_netlink_unicast+0x10/0x10 [ 58.829507][ T6310] netlink_sendmsg+0x9ac/0x10c0 [ 58.829523][ T6310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.829540][ T6310] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.829586][ T6310] ? ____sys_sendmsg+0xa99/0xc30 [ 58.829602][ T6310] ____sys_sendmsg+0xa99/0xc30 [ 58.829616][ T6310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.829631][ T6310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.829649][ T6310] ? lock_acquire+0x1d1/0x380 [ 58.829682][ T6310] ? get_pid_task+0x2a/0x250 [ 58.829699][ T6310] ___sys_sendmsg+0x190/0x1e0 [ 58.829716][ T6310] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.829748][ T6310] ? get_pid_task+0x106/0x250 [ 58.829763][ T6310] ? find_held_lock+0x2b/0x80 [ 58.829783][ T6310] __sys_sendmsg+0x160/0x210 [ 58.829796][ T6310] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.829817][ T6310] do_syscall_64+0x123/0x7b0 [ 58.829867][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.829879][ T6310] RIP: 0033:0x7f17563a94d9 [ 58.829896][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.829905][ T6310] RSP: 002b:00007f17572a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.829916][ T6310] RAX: ffffffffffffffda RBX: 00007f1756625fa0 RCX: 00007f17563a94d9 [ 58.829923][ T6310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 58.829929][ T6310] RBP: 00007f17572a9090 R08: 0000000000000000 R09: 0000000000000000 [ 58.829939][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.829945][ T6310] R13: 00007f1756626038 R14: 00007f1756625fa0 R15: 00007fff0aa26468 [ 58.829959][ T6310] [ 58.891600][ T6316] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 58.926505][ T5781] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 58.926524][ T5781] Bluetooth: hci3: unexpected event for opcode 0x042f [ 59.635898][ T6343] netlink: 'syz.1.139': attribute type 39 has an invalid length. [ 59.666813][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.818432][ T6354] No source specified [ 59.908367][ T6333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.908424][ T6333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.912011][ T6333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.913499][ T6333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.913529][ T6333] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.916534][ T6333] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.921991][ T6333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.922036][ T6333] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.927175][ T6333] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.935254][ T6333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.935288][ T6333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.939467][ T6333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.034344][ T6364] FAULT_INJECTION: forcing a failure. [ 60.034344][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 60.034362][ T6364] CPU: 2 UID: 0 PID: 6364 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(full) [ 60.034375][ T6364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.034381][ T6364] Call Trace: [ 60.034385][ T6364] [ 60.034390][ T6364] dump_stack_lvl+0x100/0x190 [ 60.034412][ T6364] should_fail_ex.cold+0x5/0xa [ 60.034430][ T6364] should_failslab+0xc2/0x120 [ 60.034444][ T6364] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.034460][ T6364] ? __kasan_kmalloc+0xaa/0xb0 [ 60.034470][ T6364] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 60.034512][ T6364] __v4l2_subdev_state_alloc+0x53/0x410 [ 60.034526][ T6364] subdev_open+0xa6/0x510 [ 60.034538][ T6364] v4l2_open+0x1d2/0x490 [ 60.034560][ T6364] ? __pfx_v4l2_open+0x10/0x10 [ 60.034574][ T6364] chrdev_open+0x234/0x6a0 [ 60.034595][ T6364] ? __pfx_chrdev_open+0x10/0x10 [ 60.034608][ T6364] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 60.034639][ T6364] do_dentry_open+0x674/0x1470 [ 60.034652][ T6364] ? __pfx_chrdev_open+0x10/0x10 [ 60.034668][ T6364] vfs_open_consume+0xcc/0x460 [ 60.034685][ T6364] path_openat+0x1547/0x23f0 [ 60.034700][ T6364] ? __pfx_path_openat+0x10/0x10 [ 60.034716][ T6364] do_file_open+0x20e/0x430 [ 60.034730][ T6364] ? __pfx_do_file_open+0x10/0x10 [ 60.034752][ T6364] ? _raw_spin_unlock+0x28/0x50 [ 60.034763][ T6364] ? alloc_fd+0x471/0x7a0 [ 60.034788][ T6364] do_sys_openat2+0x163/0x1d0 [ 60.034802][ T6364] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.034815][ T6364] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 60.034841][ T6364] __x64_sys_openat+0x12d/0x210 [ 60.034856][ T6364] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.034875][ T6364] do_syscall_64+0x123/0x7b0 [ 60.034889][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.034901][ T6364] RIP: 0033:0x7f023a769d0e [ 60.034910][ T6364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.034920][ T6364] RSP: 002b:00007f023b6afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.034937][ T6364] RAX: ffffffffffffffda RBX: 00007f023b6b06c0 RCX: 00007f023a769d0e [ 60.034944][ T6364] RDX: 0000000000101000 RSI: 00007f023b6afc00 RDI: ffffffffffffff9c [ 60.034951][ T6364] RBP: 00007f023b6afc00 R08: 0000000000000000 R09: 0000000000000000 [ 60.034957][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 60.034963][ T6364] R13: 00007f023aa26038 R14: 00007f023aa25fa0 R15: 00007ffc0c9fa288 [ 60.034978][ T6364] [ 60.038355][ T6364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.082989][ T68] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 60.083021][ T68] Bluetooth: hci2: unexpected event for opcode 0x042f [ 60.085630][ T6357] FAULT_INJECTION: forcing a failure. [ 60.085630][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.085645][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 60.085656][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.085662][ T6357] Call Trace: [ 60.085666][ T6357] [ 60.085670][ T6357] dump_stack_lvl+0x100/0x190 [ 60.085691][ T6357] should_fail_ex.cold+0x5/0xa [ 60.085707][ T6357] _copy_to_user+0x32/0xd0 [ 60.085737][ T6357] syslog_print+0x35b/0x610 [ 60.085753][ T6357] ? __pfx_syslog_print+0x10/0x10 [ 60.085777][ T6357] ? avc_has_perm_noaudit+0x145/0x470 [ 60.085792][ T6357] ? __pfx_autoremove_wake_function+0x10/0x10 [ 60.085806][ T6357] ? __pfx_avc_has_perm+0x10/0x10 [ 60.085824][ T6357] do_syslog+0x5bd/0x6d0 [ 60.085834][ T6357] ? __pfx_do_syslog+0x10/0x10 [ 60.085843][ T6357] ? __fget_files+0x21f/0x3d0 [ 60.085860][ T6357] ? ksys_write+0x1ac/0x250 [ 60.085870][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 60.085885][ T6357] __x64_sys_syslog+0x74/0xb0 [ 60.085894][ T6357] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.085907][ T6357] do_syscall_64+0x123/0x7b0 [ 60.085920][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.085931][ T6357] RIP: 0033:0x7efccc5a94d9 [ 60.085940][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.085949][ T6357] RSP: 002b:00007efccd547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 60.085959][ T6357] RAX: ffffffffffffffda RBX: 00007efccc825fa0 RCX: 00007efccc5a94d9 [ 60.085965][ T6357] RDX: 00000000000000dc RSI: 0000200000000440 RDI: 0000000000000002 [ 60.085971][ T6357] RBP: 00007efccd547090 R08: 0000000000000000 R09: 0000000000000000 [ 60.085977][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.085982][ T6357] R13: 00007efccc826038 R14: 00007efccc825fa0 R15: 00007ffe6d54bad8 [ 60.085995][ T6357] [ 60.213604][ T6376] kAFS: unparsable volume name [ 60.246230][ T6378] bond0: entered allmulticast mode [ 60.246266][ T6378] bond_slave_0: entered allmulticast mode [ 60.246275][ T6378] bond_slave_1: entered allmulticast mode [ 61.074633][ T6378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.074883][ T6378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.075037][ T6378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.075176][ T6378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.105776][ T6402] FAULT_INJECTION: forcing a failure. [ 61.105776][ T6402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.105794][ T6402] CPU: 2 UID: 0 PID: 6402 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT(full) [ 61.105806][ T6402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.105811][ T6402] Call Trace: [ 61.105815][ T6402] [ 61.105819][ T6402] dump_stack_lvl+0x100/0x190 [ 61.105840][ T6402] should_fail_ex.cold+0x5/0xa [ 61.105856][ T6402] _copy_from_user+0x2e/0xd0 [ 61.105870][ T6402] memdup_user_nul+0x6c/0x120 [ 61.105884][ T6402] nvmf_dev_write+0x6d/0xb60 [ 61.105937][ T6402] ? rw_verify_area+0xce/0x6d0 [ 61.105954][ T6402] vfs_write+0x2aa/0x1040 [ 61.105965][ T6402] ? __pfx_nvmf_dev_write+0x10/0x10 [ 61.105981][ T6402] ? lock_acquire+0x1d1/0x380 [ 61.105995][ T6402] ? __fget_files+0x34/0x3d0 [ 61.106024][ T6402] ? __pfx_vfs_write+0x10/0x10 [ 61.106033][ T6402] ? find_held_lock+0x2b/0x80 [ 61.106044][ T6402] ? __fget_files+0x215/0x3d0 [ 61.106057][ T6402] ? __fget_files+0x215/0x3d0 [ 61.106071][ T6402] ? __fget_files+0x21f/0x3d0 [ 61.106088][ T6402] ksys_write+0x12a/0x250 [ 61.106099][ T6402] ? __pfx_ksys_write+0x10/0x10 [ 61.106113][ T6402] do_syscall_64+0x123/0x7b0 [ 61.106127][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.106138][ T6402] RIP: 0033:0x7f023a7a94d9 [ 61.106146][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.106156][ T6402] RSP: 002b:00007f023b6b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.106166][ T6402] RAX: ffffffffffffffda RBX: 00007f023aa25fa0 RCX: 00007f023a7a94d9 [ 61.106172][ T6402] RDX: 000000000000004b RSI: 00002000000001c0 RDI: 0000000000000003 [ 61.106178][ T6402] RBP: 00007f023b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 61.106184][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.106189][ T6402] R13: 00007f023aa26038 R14: 00007f023aa25fa0 R15: 00007ffc0c9fa288 [ 61.106202][ T6402] [ 61.135040][ T6409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6409 comm=syz.3.162 [ 61.196380][ T6416] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 61.196735][ T68] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 61.196755][ T68] Bluetooth: hci0: unexpected event for opcode 0x042f [ 61.322434][ T6427] jffs2: notice: (6427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 61.783244][ T6447] FAULT_INJECTION: forcing a failure. [ 61.783244][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 61.783262][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.3.175 Not tainted syzkaller #0 PREEMPT(full) [ 61.783273][ T6447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.783280][ T6447] Call Trace: [ 61.783283][ T6447] [ 61.783287][ T6447] dump_stack_lvl+0x100/0x190 [ 61.783308][ T6447] should_fail_ex.cold+0x5/0xa [ 61.783325][ T6447] should_failslab+0xc2/0x120 [ 61.783338][ T6447] __kmalloc_noprof+0xfc/0x840 [ 61.783349][ T6447] ? tomoyo_encode2+0xfb/0x3c0 [ 61.783374][ T6447] tomoyo_encode2+0xfb/0x3c0 [ 61.783387][ T6447] tomoyo_encode+0x29/0x50 [ 61.783397][ T6447] tomoyo_realpath_from_path+0x18c/0x690 [ 61.783412][ T6447] tomoyo_path_number_perm+0x23c/0x580 [ 61.783429][ T6447] ? tomoyo_path_number_perm+0x22e/0x580 [ 61.783445][ T6447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 61.783466][ T6447] ? __lock_acquire+0x5c0/0x1f40 [ 61.783488][ T6447] ? __fget_files+0x34/0x3d0 [ 61.783501][ T6447] ? find_held_lock+0x2b/0x80 [ 61.783512][ T6447] ? hook_file_ioctl_common+0x140/0x440 [ 61.783529][ T6447] ? __fget_files+0x21f/0x3d0 [ 61.783544][ T6447] security_file_ioctl+0xd3/0x230 [ 61.783561][ T6447] __x64_sys_ioctl+0xb7/0x210 [ 61.783579][ T6447] do_syscall_64+0x123/0x7b0 [ 61.783600][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.783617][ T6447] RIP: 0033:0x7f023a7a94d9 [ 61.783632][ T6447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.783647][ T6447] RSP: 002b:00007f023b6b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.783664][ T6447] RAX: ffffffffffffffda RBX: 00007f023aa25fa0 RCX: 00007f023a7a94d9 [ 61.783675][ T6447] RDX: 0000000000000000 RSI: 000000000000079f RDI: 0000000000000003 [ 61.783686][ T6447] RBP: 00007f023b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 61.783695][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.783703][ T6447] R13: 00007f023aa26038 R14: 00007f023aa25fa0 R15: 00007ffc0c9fa288 [ 61.783716][ T6447] [ 61.783726][ T6447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.784482][ T6446] FAULT_INJECTION: forcing a failure. [ 61.784482][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.784497][ T6446] CPU: 3 UID: 0 PID: 6446 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT(full) [ 61.784508][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.784513][ T6446] Call Trace: [ 61.784517][ T6446] [ 61.784521][ T6446] dump_stack_lvl+0x100/0x190 [ 61.784540][ T6446] should_fail_ex.cold+0x5/0xa [ 61.784556][ T6446] strncpy_from_user+0x3b/0x2d0 [ 61.784585][ T6446] do_getname+0x78/0x390 [ 61.784602][ T6446] do_sys_openat2+0xc3/0x1d0 [ 61.784617][ T6446] ? __pfx_do_sys_openat2+0x10/0x10 [ 61.784631][ T6446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.784645][ T6446] ? __fget_files+0x21f/0x3d0 [ 61.784660][ T6446] __x64_sys_openat+0x12d/0x210 [ 61.784675][ T6446] ? __pfx___x64_sys_openat+0x10/0x10 [ 61.784689][ T6446] ? ksys_write+0x1ac/0x250 [ 61.784705][ T6446] do_syscall_64+0x123/0x7b0 [ 61.784718][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.784729][ T6446] RIP: 0033:0x7fd492fa94d9 [ 61.784737][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.784746][ T6446] RSP: 002b:00007fd493e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.784757][ T6446] RAX: ffffffffffffffda RBX: 00007fd493226090 RCX: 00007fd492fa94d9 [ 61.784763][ T6446] RDX: 0000000000000042 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 61.784769][ T6446] RBP: 00007fd493e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.784775][ T6446] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 61.784786][ T6446] R13: 00007fd493226128 R14: 00007fd493226090 R15: 00007ffc94a6c888 [ 61.784799][ T6446] [ 61.814889][ T6449] usb 1-1: USB disconnect, device number 2 [ 62.203819][ T6467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6467 comm=syz.1.183 [ 62.222297][ T68] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 62.222341][ T68] Bluetooth: hci3: unexpected event for opcode 0x042f [ 62.883437][ T6490] IPVS: persistence engine module ip_vs_pe_À not found [ 63.092177][ T6509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6509 comm=syz.1.199 [ 63.125819][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.125891][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.143527][ T68] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 63.143567][ T68] Bluetooth: hci3: unexpected event for opcode 0x042f [ 63.183175][ T6526] ip_tables: iptables: counters copy to user failed while replacing table [ 63.231990][ T44] kauditd_printk_skb: 59 callbacks suppressed [ 63.232005][ T44] audit: type=1400 audit(1794484140.581:363): avc: denied { create } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.232909][ T44] audit: type=1400 audit(1794484140.581:364): avc: denied { bind } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.234149][ T44] audit: type=1400 audit(1794484140.581:365): avc: denied { listen } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.234718][ T44] audit: type=1400 audit(1794484140.581:366): avc: denied { read write } for pid=6530 comm="syz.2.207" name="vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.235056][ T44] audit: type=1400 audit(1794484140.581:367): avc: denied { open } for pid=6530 comm="syz.2.207" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.235575][ T44] audit: type=1400 audit(1794484140.581:368): avc: denied { ioctl } for pid=6530 comm="syz.2.207" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.242737][ T44] audit: type=1400 audit(1794484140.591:369): avc: denied { accept } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.243213][ T44] audit: type=1400 audit(1794484140.591:370): avc: denied { read } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.243886][ T44] audit: type=1400 audit(1794484140.591:371): avc: denied { write } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.245155][ T44] audit: type=1400 audit(1794484140.591:372): avc: denied { setopt } for pid=6530 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.466392][ T80] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.568368][ T6541] FAULT_INJECTION: forcing a failure. [ 63.568368][ T6541] name fail_futex, interval 1, probability 0, space 0, times 1 [ 63.568400][ T6541] CPU: 2 UID: 0 PID: 6541 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(full) [ 63.568412][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.568419][ T6541] Call Trace: [ 63.568432][ T6541] [ 63.568438][ T6541] dump_stack_lvl+0x100/0x190 [ 63.568526][ T6541] should_fail_ex.cold+0x5/0xa [ 63.568552][ T6541] get_futex_key+0x1c9/0x13e0 [ 63.568596][ T6541] ? __pfx_get_futex_key+0x10/0x10 [ 63.568610][ T6541] ? ___sys_sendmsg+0x127/0x1e0 [ 63.568667][ T6541] futex_wake+0xf4/0x5e0 [ 63.568684][ T6541] ? futex_wait+0x11e/0x370 [ 63.568710][ T6541] ? __pfx_futex_wake+0x10/0x10 [ 63.568727][ T6541] ? find_held_lock+0x2b/0x80 [ 63.568751][ T6541] do_futex+0x2b2/0x440 [ 63.568765][ T6541] ? __pfx_do_futex+0x10/0x10 [ 63.568781][ T6541] ? fput+0x7c/0x100 [ 63.568812][ T6541] __x64_sys_futex+0x34f/0x4d0 [ 63.568830][ T6541] ? __pfx___x64_sys_futex+0x10/0x10 [ 63.568851][ T6541] do_syscall_64+0x123/0x7b0 [ 63.568990][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.569004][ T6541] RIP: 0033:0x7f023a7a94d9 [ 63.569023][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.569035][ T6541] RSP: 002b:00007f023b6b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.569048][ T6541] RAX: ffffffffffffffda RBX: 00007f023aa25fa8 RCX: 00007f023a7a94d9 [ 63.569056][ T6541] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f023aa25fac [ 63.569063][ T6541] RBP: 00007f023aa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 63.569070][ T6541] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000000 [ 63.569077][ T6541] R13: 00007f023aa26038 R14: 00007ffc0c9fa1a0 R15: 00007ffc0c9fa288 [ 63.569093][ T6541] [ 63.634112][ T80] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 63.634916][ T80] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 63.634943][ T80] usb 5-1: can't read configurations, error -71 [ 64.089732][ T6570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6570 comm=syz.2.220 [ 64.124383][ T68] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7 [ 64.124404][ T68] Bluetooth: hci1: unexpected event for opcode 0x042f [ 64.208761][ T6579] FAULT_INJECTION: forcing a failure. [ 64.208761][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.208781][ T6579] CPU: 3 UID: 0 PID: 6579 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 64.208792][ T6579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.208798][ T6579] Call Trace: [ 64.208802][ T6579] [ 64.208806][ T6579] dump_stack_lvl+0x100/0x190 [ 64.208829][ T6579] should_fail_ex.cold+0x5/0xa [ 64.208848][ T6579] _copy_from_user+0x2e/0xd0 [ 64.208902][ T6579] kstrtouint_from_user+0xd6/0x1d0 [ 64.208918][ T6579] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 64.208937][ T6579] ? lock_acquire+0x1d1/0x380 [ 64.208961][ T6579] proc_fail_nth_write+0x83/0x220 [ 64.209001][ T6579] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.209019][ T6579] vfs_write+0x2aa/0x1040 [ 64.209031][ T6579] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.209045][ T6579] ? lock_acquire+0x1d1/0x380 [ 64.209058][ T6579] ? __fget_files+0x34/0x3d0 [ 64.209081][ T6579] ? __pfx_vfs_write+0x10/0x10 [ 64.209090][ T6579] ? find_held_lock+0x2b/0x80 [ 64.209102][ T6579] ? __fget_files+0x215/0x3d0 [ 64.209117][ T6579] ? __fget_files+0x21f/0x3d0 [ 64.209133][ T6579] ksys_write+0x12a/0x250 [ 64.209144][ T6579] ? __pfx_ksys_write+0x10/0x10 [ 64.209159][ T6579] do_syscall_64+0x123/0x7b0 [ 64.209173][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.209184][ T6579] RIP: 0033:0x7fd492f69d0e [ 64.209193][ T6579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.209203][ T6579] RSP: 002b:00007fd493e7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.209213][ T6579] RAX: ffffffffffffffda RBX: 00007fd493e7f6c0 RCX: 00007fd492f69d0e [ 64.209220][ T6579] RDX: 0000000000000001 RSI: 00007fd493e7f0a0 RDI: 0000000000000003 [ 64.209226][ T6579] RBP: 00007fd493e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.209231][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.209250][ T6579] R13: 00007fd493226038 R14: 00007fd493225fa0 R15: 00007ffc94a6c888 [ 64.209264][ T6579] [ 64.242589][ T6581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.247655][ T6581] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 65.115534][ T5862] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 65.205581][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.266644][ T6599] FAULT_INJECTION: forcing a failure. [ 65.266644][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 65.266665][ T6599] CPU: 2 UID: 0 PID: 6599 Comm: syz.3.234 Not tainted syzkaller #0 PREEMPT(full) [ 65.266676][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.266693][ T6599] Call Trace: [ 65.266698][ T6599] [ 65.266703][ T6599] dump_stack_lvl+0x100/0x190 [ 65.266726][ T6599] should_fail_ex.cold+0x5/0xa [ 65.266743][ T6599] should_failslab+0xc2/0x120 [ 65.266770][ T6599] __kmalloc_noprof+0xfc/0x840 [ 65.266790][ T6599] ? tomoyo_encode2+0xfb/0x3c0 [ 65.266812][ T6599] tomoyo_encode2+0xfb/0x3c0 [ 65.266825][ T6599] tomoyo_encode+0x29/0x50 [ 65.266835][ T6599] tomoyo_realpath_from_path+0x18c/0x690 [ 65.266850][ T6599] tomoyo_path_number_perm+0x23c/0x580 [ 65.266865][ T6599] ? tomoyo_path_number_perm+0x22e/0x580 [ 65.266881][ T6599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.266902][ T6599] ? __lock_acquire+0x5c0/0x1f40 [ 65.266923][ T6599] ? __fget_files+0x34/0x3d0 [ 65.266937][ T6599] ? find_held_lock+0x2b/0x80 [ 65.266948][ T6599] ? hook_file_ioctl_common+0x140/0x440 [ 65.266964][ T6599] ? __fget_files+0x21f/0x3d0 [ 65.266979][ T6599] security_file_ioctl+0xd3/0x230 [ 65.267004][ T6599] __x64_sys_ioctl+0xb7/0x210 [ 65.267016][ T6599] do_syscall_64+0x123/0x7b0 [ 65.267030][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.267041][ T6599] RIP: 0033:0x7f023a7a94d9 [ 65.267051][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.267060][ T6599] RSP: 002b:00007f023b6b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.267070][ T6599] RAX: ffffffffffffffda RBX: 00007f023aa25fa0 RCX: 00007f023a7a94d9 [ 65.267077][ T6599] RDX: 0000000000000000 RSI: 000000004004550f RDI: 0000000000000003 [ 65.267082][ T6599] RBP: 00007f023b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 65.267088][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.267094][ T6599] R13: 00007f023aa26038 R14: 00007f023aa25fa0 R15: 00007ffc0c9fa288 [ 65.267108][ T6599] [ 65.267154][ T6599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.270456][ T5862] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 65.271689][ T5862] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 65.271706][ T5862] usb 8-1: can't read configurations, error -71 [ 65.568542][ T68] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 65.726486][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 65.763749][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6621 comm=syz.0.243 [ 65.801472][ T68] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 65.801503][ T68] Bluetooth: hci2: unexpected event for opcode 0x042f [ 66.266722][ T6644] SELinux: syz.2.251 (6644) wrote to user. This is no longer supported. [ 66.325792][ T6644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.325896][ T6644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.325966][ T6644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.326027][ T6644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.694625][ T6658] cgroup: fork rejected by pids controller in /syz2 [ 67.264806][ T6731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6731 comm=syz.0.262 [ 67.299792][ T5781] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 67.299823][ T5781] Bluetooth: hci2: unexpected event for opcode 0x042f [ 67.439976][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.265'. [ 67.944795][ T6759] SELinux: policydb magic number 0x6c6c6562 does not match expected magic number 0xf97cff8c [ 67.944933][ T6759] SELinux: failed to load policy [ 67.957638][ T6759] netlink: 52 bytes leftover after parsing attributes in process `syz.0.272'. [ 67.966268][ T6763] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 67.966306][ T6763] SELinux: failed to load policy [ 67.966806][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.053878][ T6770] netlink: 76 bytes leftover after parsing attributes in process `syz.1.274'. [ 68.124505][ T6776] atomic_op ffff88805725c9e0 conn xmit_atomic 0000000000000000 [ 68.153650][ T6778] netlink: 379 bytes leftover after parsing attributes in process `syz.1.278'. [ 68.213969][ T5781] Bluetooth: hci3: unexpected cc 0x042f length: 9 > 7 [ 68.213992][ T5781] Bluetooth: hci3: unexpected event for opcode 0x042f [ 68.305647][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.415613][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.415650][ T5781] Bluetooth: hci0: command 0x040f tx timeout [ 68.421973][ T6784] jffs2: notice: (6784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 68.426339][ T44] kauditd_printk_skb: 40 callbacks suppressed [ 68.426354][ T44] audit: type=1400 audit(1794484145.771:413): avc: denied { write } for pid=6783 comm="syz.3.281" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.475611][ T6787] sctp: [Deprecated]: syz.3.282 (pid 6787) Use of int in max_burst socket option. [ 68.475611][ T6787] Use struct sctp_assoc_value instead [ 68.489357][ T5862] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.491109][ T5862] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 68.491146][ T5862] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 68.491164][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.493036][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.493055][ T5862] usb 5-1: Product: syz [ 68.493067][ T5862] usb 5-1: Manufacturer: syz [ 68.493079][ T5862] usb 5-1: SerialNumber: syz [ 68.497422][ T5862] usb 5-1: config 0 descriptor?? [ 68.501212][ T5862] hub 5-1:0.0: bad descriptor, ignoring hub [ 68.501232][ T5862] hub 5-1:0.0: probe with driver hub failed with error -5 [ 68.505378][ T5862] usb 5-1: selecting invalid altsetting 0 [ 68.686846][ T44] audit: type=1400 audit(1794484146.041:414): avc: denied { map } for pid=6796 comm="syz.2.286" path="socket:[16470]" dev="sockfs" ino=16470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.687017][ T44] audit: type=1400 audit(1794484146.041:415): avc: denied { read } for pid=6796 comm="syz.2.286" path="socket:[16470]" dev="sockfs" ino=16470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.815821][ T5872] usb 5-1: USB disconnect, device number 4 [ 68.832602][ T44] audit: type=1400 audit(1794484146.181:416): avc: denied { read write } for pid=6803 comm="syz.1.289" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.835679][ T44] audit: type=1400 audit(1794484146.181:417): avc: denied { open } for pid=6803 comm="syz.1.289" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.927156][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 68.930593][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.933751][ T44] audit: type=1400 audit(1794484146.281:418): avc: denied { listen } for pid=6767 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.030609][ T44] audit: type=1326 audit(1794484146.381:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.291" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f023a7a94d9 code=0x0 [ 69.098446][ T6818] jffs2: notice: (6818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.105098][ T44] audit: type=1400 audit(1794484146.451:420): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.152546][ T44] audit: type=1400 audit(1794484146.501:421): avc: denied { create } for pid=6820 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.153204][ T44] audit: type=1400 audit(1794484146.501:422): avc: denied { bind } for pid=6820 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.916122][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.916434][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.917157][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.992225][ T5781] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 69.992252][ T5781] Bluetooth: hci2: unexpected event for opcode 0x042f [ 70.495607][ T5781] Bluetooth: hci0: command 0x040f tx timeout [ 70.495628][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.716993][ T6851] netlink: 72 bytes leftover after parsing attributes in process `syz.0.304'. [ 70.914497][ T6864] fuse: Unknown parameter '184467440737095516150x00000000000000030177777777777777777777700000000000000000004' [ 71.108858][ T5781] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 71.108879][ T5781] Bluetooth: hci0: unexpected event for opcode 0x042f [ 71.287981][ T1451] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288017][ T1451] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.700436][ T234] IPVS: starting estimator thread 0... ¸[ 71.786369][ T6877] IPVS: using max 45 ests per chain, 108000 per kthread [ 71.915596][ T80] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.925693][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 71.927365][ T68] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.067981][ T80] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 72.068004][ T80] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 72.069625][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.069647][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.069659][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.070474][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.070493][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.070505][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.071474][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.071493][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.071505][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.072974][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.072994][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.073005][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.073863][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.073896][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.073915][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.075148][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.075169][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.075181][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.077170][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.077190][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.077202][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.078028][ T80] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.078056][ T80] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.078073][ T80] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.080374][ T80] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 72.080387][ T80] usb 6-1: Product: syz [ 72.080394][ T80] usb 6-1: Manufacturer: syz [ 72.080401][ T80] usb 6-1: SerialNumber: syz [ 72.081688][ T80] usb 6-1: config 0 descriptor?? [ 72.102971][ T80] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 72.167464][ T6893] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 72.289121][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.289444][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.293927][ T42] usb 6-1: USB disconnect, device number 2 [ 72.303757][ T42] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 72.372525][ T6906] jffs2: notice: (6906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 72.725420][ T6909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6909 comm=syz.3.323 [ 72.750257][ T68] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 72.750288][ T68] Bluetooth: hci0: unexpected event for opcode 0x042f [ 72.827732][ T6913] xt_IDLETIMER: timeout value is zero [ 72.906928][ T6921] Bluetooth: MGMT ver 1.23 [ 72.958554][ T6921] kvm [6914]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 73.463224][ T6941] FAULT_INJECTION: forcing a failure. [ 73.463224][ T6941] name failslab, interval 1, probability 0, space 0, times 0 [ 73.463294][ T6941] CPU: 2 UID: 0 PID: 6941 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(full) [ 73.463316][ T6941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.463328][ T6941] Call Trace: [ 73.463341][ T6941] [ 73.463349][ T6941] dump_stack_lvl+0x100/0x190 [ 73.463451][ T6941] should_fail_ex.cold+0x5/0xa [ 73.463491][ T6941] should_failslab+0xc2/0x120 [ 73.463541][ T6941] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 73.463580][ T6941] ? alloc_inode+0x183/0x250 [ 73.463612][ T6941] alloc_inode+0x183/0x250 [ 73.463630][ T6941] alloc_anon_inode+0x28/0x3b0 [ 73.463657][ T6941] anon_inode_make_secure_inode+0x2f/0x140 [ 73.463691][ T6941] __anon_inode_getfile+0x1cf/0x280 [ 73.463710][ T6941] ? _copy_to_user+0xaf/0xd0 [ 73.463768][ T6941] io_uring_setup.cold+0x197d/0x1c7e [ 73.463797][ T6941] ? __pfx_io_uring_setup+0x10/0x10 [ 73.463831][ T6941] ? find_held_lock+0x2b/0x80 [ 73.463889][ T6941] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.463938][ T6941] ? ksys_write+0x1ac/0x250 [ 73.463968][ T6941] ? __pfx_ksys_write+0x10/0x10 [ 73.463993][ T6941] __x64_sys_io_uring_setup+0xc2/0x170 [ 73.464018][ T6941] do_syscall_64+0x123/0x7b0 [ 73.464091][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.464113][ T6941] RIP: 0033:0x7f023a7a94d9 [ 73.464139][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.464157][ T6941] RSP: 002b:00007f023b6affb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 73.464177][ T6941] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f023a7a94d9 [ 73.464189][ T6941] RDX: 0000200000002d80 RSI: 0000000000000000 RDI: 0000000000006fac [ 73.464201][ T6941] RBP: 00007f023a83804e R08: 0000000000000000 R09: 0000000000000000 [ 73.464213][ T6941] R10: 0000200000002dc0 R11: 0000000000000206 R12: 0000200000002d80 [ 73.464224][ T6941] R13: 0000200000002dc0 R14: 0000000000000000 R15: 00007ffc0c9fa288 [ 73.464248][ T6941] [ 73.541118][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 73.541133][ T44] audit: type=1400 audit(1794484150.891:443): avc: denied { ioctl } for pid=6944 comm="syz.3.338" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.543603][ T6946] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294967068 [ 73.588969][ T44] audit: type=1400 audit(1794484150.941:444): avc: denied { write } for pid=6950 comm="syz.3.339" path="socket:[15955]" dev="sockfs" ino=15955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.622409][ T44] audit: type=1400 audit(1794484150.971:445): avc: denied { mount } for pid=6952 comm="syz.1.340" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 73.623600][ T6953] ima: Unable to open file: / (-22) [ 73.627469][ T6952] ima: policy update failed [ 73.627557][ T44] audit: type=1802 audit(1794484150.981:446): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.340" res=0 errno=-22 [ 73.637220][ T44] audit: type=1400 audit(1794484150.991:447): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 73.666416][ T6956] ip_tables: iptables: counters copy to user failed while replacing table [ 73.667055][ T6956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 73.674150][ T44] audit: type=1400 audit(1794484151.021:448): avc: denied { ioctl } for pid=6955 comm="syz.1.341" path="socket:[18724]" dev="sockfs" ino=18724 ioctlcmd=0x50009401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.674772][ T44] audit: type=1400 audit(1794484151.021:449): avc: denied { read } for pid=6955 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.675987][ T44] audit: type=1400 audit(1794484151.031:450): avc: denied { map } for pid=6955 comm="syz.1.341" path="socket:[17771]" dev="sockfs" ino=17771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 73.728068][ T44] audit: type=1400 audit(1794484151.081:451): avc: denied { mounton } for pid=6957 comm="syz.1.342" path="/86/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 73.758466][ T44] audit: type=1400 audit(1794484151.111:452): avc: denied { create } for pid=6957 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 73.785057][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 73.808112][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 73.808507][ T6970] FAULT_INJECTION: forcing a failure. [ 73.808507][ T6970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.808521][ T6970] CPU: 2 UID: 0 PID: 6970 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 73.808532][ T6970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.808538][ T6970] Call Trace: [ 73.808541][ T6970] [ 73.808546][ T6970] dump_stack_lvl+0x100/0x190 [ 73.808567][ T6970] should_fail_ex.cold+0x5/0xa [ 73.808585][ T6970] _copy_from_user+0x2e/0xd0 [ 73.808598][ T6970] copy_msghdr_from_user+0x9f/0x4c0 [ 73.808674][ T6970] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.808693][ T6970] ? _kstrtoull+0x144/0x200 [ 73.808707][ T6970] ? __pfx__kstrtoull+0x10/0x10 [ 73.808724][ T6970] ___sys_sendmsg+0x106/0x1e0 [ 73.808740][ T6970] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.808765][ T6970] ? __fget_files+0x34/0x3d0 [ 73.808788][ T6970] __sys_sendmmsg+0x20c/0x440 [ 73.808803][ T6970] ? __pfx___sys_sendmmsg+0x10/0x10 [ 73.808815][ T6970] ? ksys_write+0x190/0x250 [ 73.808836][ T6970] ? fput+0x7c/0x100 [ 73.808848][ T6970] ? ksys_write+0x1ac/0x250 [ 73.808858][ T6970] ? __pfx_ksys_write+0x10/0x10 [ 73.808871][ T6970] __x64_sys_sendmmsg+0x9c/0x100 [ 73.808883][ T6970] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.808896][ T6970] do_syscall_64+0x123/0x7b0 [ 73.808909][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.808920][ T6970] RIP: 0033:0x7f023a7a94d9 [ 73.808929][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.808938][ T6970] RSP: 002b:00007f023b6b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.808948][ T6970] RAX: ffffffffffffffda RBX: 00007f023aa25fa0 RCX: 00007f023a7a94d9 [ 73.808954][ T6970] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 73.808960][ T6970] RBP: 00007f023b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 73.808966][ T6970] R10: 0000000020084058 R11: 0000000000000246 R12: 0000000000000001 [ 73.808971][ T6970] R13: 00007f023aa26038 R14: 00007f023aa25fa0 R15: 00007ffc0c9fa288 [ 73.808985][ T6970] [ 74.113035][ T6994] netlink: 'syz.2.357': attribute type 15 has an invalid length. [ 74.113079][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 74.121302][ T6994] netlink: 'syz.2.357': attribute type 15 has an invalid length. [ 74.121315][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 74.121435][ T6994] Zero length message leads to an empty skb [ 74.143889][ T6996] libceph: resolve '2' (ret=-3): failed [ 74.146690][ T7001] Bluetooth: hci0: load_link_keys: too big key_count value 5121 [ 74.195399][ T7003] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 74.379778][ T7017] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 74.384529][ T7017] xt_hashlimit: size too large, truncated to 1048576 [ 74.422691][ T7022] ip6t_frag: unknown flags 6 [ 74.443902][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 74.930316][ T7035] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 74.933503][ T7034] ubi0: attaching mtd0 [ 74.934690][ T7034] ubi0: scanning is finished [ 74.934715][ T7034] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 74.984053][ T7035] ------------[ cut here ]------------ [ 74.984062][ T7035] !(flags & __GFP_NOWARN) [ 74.984067][ T7035] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#2: syz.3.372/7035 [ 74.991685][ T7035] Modules linked in: [ 74.993271][ T7035] CPU: 2 UID: 0 PID: 7035 Comm: syz.3.372 Not tainted syzkaller #0 PREEMPT(full) [ 74.996325][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.999684][ T7035] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 75.001749][ T7035] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 75.008200][ T7035] RSP: 0018:ffffc900057d7b78 EFLAGS: 00010246 [ 75.010194][ T7035] RAX: 0000000000000001 RBX: 0000008000000008 RCX: 0000010000000000 [ 75.012839][ T7035] RDX: 0000000000000000 RSI: ffffffff8c834e00 RDI: ffffffff8e8f8930 [ 75.015496][ T7035] RBP: 0000000008000000 R08: 00000000000028c0 R09: 00000000ffffffff [ 75.018001][ T7035] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 75.020654][ T7035] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 75.023220][ T7035] FS: 00007f023b68f6c0(0000) GS:ffff8880d4673000(0000) knlGS:0000000000000000 [ 75.026140][ T7035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.028232][ T7035] CR2: 00007f023b68eff8 CR3: 000000006103c000 CR4: 0000000000352ef0 [ 75.030938][ T7035] Call Trace: [ 75.032083][ T7035] [ 75.033122][ T7035] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 75.035021][ T7035] ? udmabuf_create+0x2e5/0x10c0 [ 75.036787][ T7035] udmabuf_create+0x2e5/0x10c0 [ 75.036814][ T7036] Bluetooth: MGMT ver 1.23 [ 75.039725][ T7035] ? lock_acquire+0x1d1/0x380 [ 75.041381][ T7035] ? __might_fault+0xc5/0x140 [ 75.042976][ T7035] ? __pfx_udmabuf_create+0x10/0x10 [ 75.044683][ T7035] ? __might_fault+0xc5/0x140 [ 75.046338][ T7035] ? __might_fault+0xc5/0x140 [ 75.048007][ T7035] ? _copy_from_user+0x59/0xd0 [ 75.049609][ T7035] udmabuf_ioctl+0x2b2/0x300 [ 75.051192][ T7035] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.052897][ T7035] ? selinux_file_ioctl+0x1e0/0x290 [ 75.054617][ T7035] ? selinux_file_ioctl+0x1e7/0x290 [ 75.056439][ T7035] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.058130][ T7035] __x64_sys_ioctl+0x18e/0x210 [ 75.059774][ T7035] do_syscall_64+0x123/0x7b0 [ 75.061391][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.063535][ T7035] RIP: 0033:0x7f023a7a94d9 [ 75.077902][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.084115][ T7035] RSP: 002b:00007f023b68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.086926][ T7035] RAX: ffffffffffffffda RBX: 00007f023aa26090 RCX: 00007f023a7a94d9 [ 75.089544][ T7035] RDX: 0000200000000200 RSI: 0000000040087543 RDI: 0000000000000007 [ 75.092126][ T7035] RBP: 00007f023a83804e R08: 0000000000000000 R09: 0000000000000000 [ 75.094717][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.097389][ T7035] R13: 00007f023aa26128 R14: 00007f023aa26090 R15: 00007ffc0c9fa288 [ 75.099985][ T7035] [ 75.100984][ T7035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.103387][ T7035] CPU: 2 UID: 0 PID: 7035 Comm: syz.3.372 Not tainted syzkaller #0 PREEMPT(full) [ 75.106443][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.109752][ T7035] Call Trace: [ 75.110838][ T7035] [ 75.111852][ T7035] dump_stack_lvl+0x100/0x190 [ 75.113446][ T7035] vpanic+0x2dc/0x6f8 [ 75.114809][ T7035] panic+0xd1/0xe0 [ 75.116065][ T7035] ? __pfx_panic+0x10/0x10 [ 75.117542][ T7035] check_panic_on_warn.cold+0x19/0x34 [ 75.119360][ T7035] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 75.121169][ T7035] __warn.cold+0x191/0x321 [ 75.122658][ T7035] __report_bug+0x30f/0x440 [ 75.124213][ T7035] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 75.125992][ T7035] ? __pfx___report_bug+0x10/0x10 [ 75.127677][ T7035] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 75.129433][ T7035] report_bug+0xb3/0x220 [ 75.130815][ T7035] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 75.132557][ T7035] handle_bug+0x16a/0x2a0 [ 75.134010][ T7035] exc_invalid_op+0x17/0x50 [ 75.135517][ T7035] asm_exc_invalid_op+0x1a/0x20 [ 75.137112][ T7035] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 75.139175][ T7035] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 75.145267][ T7035] RSP: 0018:ffffc900057d7b78 EFLAGS: 00010246 [ 75.147246][ T7035] RAX: 0000000000000001 RBX: 0000008000000008 RCX: 0000010000000000 [ 75.149656][ T7035] RDX: 0000000000000000 RSI: ffffffff8c834e00 RDI: ffffffff8e8f8930 [ 75.152164][ T7035] RBP: 0000000008000000 R08: 00000000000028c0 R09: 00000000ffffffff [ 75.154722][ T7035] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 75.157188][ T7035] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 75.159856][ T7035] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 75.161582][ T7035] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 75.163349][ T7035] ? udmabuf_create+0x2e5/0x10c0 [ 75.164944][ T7035] udmabuf_create+0x2e5/0x10c0 [ 75.166553][ T7035] ? lock_acquire+0x1d1/0x380 [ 75.168058][ T7035] ? __might_fault+0xc5/0x140 [ 75.169537][ T7035] ? __pfx_udmabuf_create+0x10/0x10 [ 75.171203][ T7035] ? __might_fault+0xc5/0x140 [ 75.172717][ T7035] ? __might_fault+0xc5/0x140 [ 75.174237][ T7035] ? _copy_from_user+0x59/0xd0 [ 75.175774][ T7035] udmabuf_ioctl+0x2b2/0x300 [ 75.177254][ T7035] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.178850][ T7035] ? selinux_file_ioctl+0x1e0/0x290 [ 75.180550][ T7035] ? selinux_file_ioctl+0x1e7/0x290 [ 75.182168][ T7035] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.183853][ T7035] __x64_sys_ioctl+0x18e/0x210 [ 75.185414][ T7035] do_syscall_64+0x123/0x7b0 [ 75.186971][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.188937][ T7035] RIP: 0033:0x7f023a7a94d9 [ 75.190407][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.196574][ T7035] RSP: 002b:00007f023b68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.199277][ T7035] RAX: ffffffffffffffda RBX: 00007f023aa26090 RCX: 00007f023a7a94d9 [ 75.201843][ T7035] RDX: 0000200000000200 RSI: 0000000040087543 RDI: 0000000000000007 [ 75.204421][ T7035] RBP: 00007f023a83804e R08: 0000000000000000 R09: 0000000000000000 [ 75.207010][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.209607][ T7035] R13: 00007f023aa26128 R14: 00007f023aa26090 R15: 00007ffc0c9fa288 [ 75.212134][ T7035] [ 75.213874][ T7035] Kernel Offset: disabled [ 75.215302][ T7035] Rebooting in 86400 seconds..