last executing test programs: 7m59.289394908s ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) r2 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0004000000000000ff7f00000000000600000000040000000000000000000800"]) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x3, 0xff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs$userns(r2, &(0x7f00000002c0)) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="8d794131bcc4c12f2a1dd61751a35097a2b8d21b", 0x14, 0x4008004, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) recvfrom(r5, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x1, 0x470bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 7m58.399614353s ago: executing program 3 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b8c94bf3f008bbb1d721c61289e0310"}]}, 0x3c}}, 0x22044804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.empty_time\x00', 0x275a, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r6, @ANYRES32=r0], 0x2c}], 0x46}, 0x0) 7m58.339006533s ago: executing program 3 (id=24): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000df"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000006000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ffffffff3fb5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m58.338719192s ago: executing program 3 (id=25): r0 = inotify_init() r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) (async) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 7m58.290265852s ago: executing program 3 (id=26): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121901, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r3, &(0x7f0000010b40)=[{&(0x7f0000000180)="5abbe3", 0x3}], 0x1) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m58.219665474s ago: executing program 3 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f00000000c0)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818b109000000bc5f6322cbfac4973cf2be3f0632395fd3377dc1ee6daeeae25f6b6a741d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5f8a73daefb822524427882e6a115cd88a243a02b377d0000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0xfffffffffffffdb6}], 0x1, 0x70, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x5, 0x2, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x807, 0x12) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x3, &(0x7f0000000180)=[{0x100, 0x7, 0x4, 0x40}, {0x8, 0x8, 0x6}, {0x6, 0xff, 0x8, 0x6}]}) 7m42.890787402s ago: executing program 32 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f00000000c0)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818b109000000bc5f6322cbfac4973cf2be3f0632395fd3377dc1ee6daeeae25f6b6a741d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5f8a73daefb822524427882e6a115cd88a243a02b377d0000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0xfffffffffffffdb6}], 0x1, 0x70, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x5, 0x2, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x807, 0x12) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000240)={0x3, &(0x7f0000000180)=[{0x100, 0x7, 0x4, 0x40}, {0x8, 0x8, 0x6}, {0x6, 0xff, 0x8, 0x6}]}) 7m34.762408708s ago: executing program 4 (id=450): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r2, r0, 0x80000) 7m34.539916673s ago: executing program 4 (id=462): r0 = epoll_create1(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x4]}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = semget$private(0x0, 0x7, 0x3c0) semop(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4004040) 7m34.408574935s ago: executing program 4 (id=466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x80, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @random="0080ffffffff"}, 0x0, @default, 0xd, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) 7m31.648990895s ago: executing program 4 (id=472): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x22500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(0x0, 0x0) 7m30.818060313s ago: executing program 4 (id=487): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) keyctl$clear(0x7, 0x0) 7m30.277196486s ago: executing program 4 (id=496): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x40, 0x20, 0x2, 0x5f, {{0x1c, 0x4, 0x1, 0x39, 0x70, 0x67, 0x0, 0xa, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x97, 0x3, 0x8, [{@private=0xa010102, 0x5}, {@rand_addr=0x64010102, 0xfffffff9}, {@remote, 0x2}, {@loopback, 0x7}, {@empty, 0xfffffff7}, {@loopback, 0xb6e}]}, @lsrr={0x83, 0x3, 0xfb}, @end, @rr={0x7, 0x13, 0xec, [@broadcast, @local, @local, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x1a, [@multicast1, @multicast1, @loopback]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r1, 0xd400, 0x3, 0x4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r2, 0xc, 0x0, 0x80000001, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x46010}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r6, &(0x7f0000000280)=""/100, 0x64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x10) 7m30.163710856s ago: executing program 33 (id=496): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x40, 0x20, 0x2, 0x5f, {{0x1c, 0x4, 0x1, 0x39, 0x70, 0x67, 0x0, 0xa, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x97, 0x3, 0x8, [{@private=0xa010102, 0x5}, {@rand_addr=0x64010102, 0xfffffff9}, {@remote, 0x2}, {@loopback, 0x7}, {@empty, 0xfffffff7}, {@loopback, 0xb6e}]}, @lsrr={0x83, 0x3, 0xfb}, @end, @rr={0x7, 0x13, 0xec, [@broadcast, @local, @local, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x1a, [@multicast1, @multicast1, @loopback]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r1, 0xd400, 0x3, 0x4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r2, 0xc, 0x0, 0x80000001, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x46010}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r6, &(0x7f0000000280)=""/100, 0x64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x10) 7m16.029447864s ago: executing program 2 (id=759): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x13, r0, 0x8000000) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r1, 0xc0686611, 0x20000081) 7m16.029247254s ago: executing program 2 (id=761): socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 7m15.969978385s ago: executing program 2 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 7m15.048711208s ago: executing program 2 (id=793): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl(0xffffffffffffffff, 0xc138fd06, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) 7m13.153945293s ago: executing program 2 (id=812): syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 7m12.426340454s ago: executing program 2 (id=815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000700)='bus/platform/drivers/i2c_designware/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='se', 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10, 0x8001) 6m56.418990024s ago: executing program 34 (id=815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000700)='bus/platform/drivers/i2c_designware/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='se', 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10, 0x8001) 2m29.511506831s ago: executing program 6 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000418b104621a7088300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) (fail_nth: 2) 2m28.371606642s ago: executing program 6 (id=1458): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket(0x2, 0x80805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m27.072239554s ago: executing program 6 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x22004082}, 0x4040800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000000080)={0x2, 0x13, 0x8, 0x7}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x486d02, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x403}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000814) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x6, 0xb}, {0x99dd291a0f6712, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m23.983059513s ago: executing program 6 (id=1464): r0 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000440)=[0x3], &(0x7f0000000640)=[r3, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) 2m23.11487431s ago: executing program 6 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000a600000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m15.653572824s ago: executing program 6 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x118, 0x228, 0xfeffffff, 0x308, 0x308, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x7, [0x4e21, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e24, 0x4e20, 0x4e24, 0x4e20, 0x4e21, 0x4e22, 0x4e20, 0x4e21, 0x4e21, 0x4e24], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x180f1583}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x2a1, 0xffff, 0x3, 0x0, 0x3, 0x4}, 0xc) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1001}, 0xe) listen(r2, 0x1) syz_emit_vhci(0x0, 0x15) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8000c00080001000201040001104000"], 0x11) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40440c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="03000000000000000000000006006600c78800001c00330008010000ffffffffffff0802110000010802110000000000"], 0x4c}}, 0x800) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000000)=0x3d, 0x4) 2m3.788840916s ago: executing program 35 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x118, 0x228, 0xfeffffff, 0x308, 0x308, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x7, [0x4e21, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e24, 0x4e20, 0x4e24, 0x4e20, 0x4e21, 0x4e22, 0x4e20, 0x4e21, 0x4e21, 0x4e24], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x180f1583}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x2a1, 0xffff, 0x3, 0x0, 0x3, 0x4}, 0xc) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1001}, 0xe) listen(r2, 0x1) syz_emit_vhci(0x0, 0x15) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8000c00080001000201040001104000"], 0x11) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/xfrm_stat\x00') close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40440c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="03000000000000000000000006006600c78800001c00330008010000ffffffffffff0802110000010802110000000000"], 0x4c}}, 0x800) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000000)=0x3d, 0x4) 17.625266034s ago: executing program 0 (id=1628): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/69, 0x45}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x8, 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x81}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000300800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2181bb6d2b66aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) close(r7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}, 0x1c) 15.262190733s ago: executing program 0 (id=1635): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x8040) pipe2$9p(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/tcp_fastopen\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='3', 0x1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "2ada5cdea077365ce0ba0d52cbebf4aaa932a9f905861159f7e2131a0dcaae7a604a6928b967ce7f893dbc48eb14697dd6a760e2d288b343d4c93669b8ae5de7", 0x1a}, 0x48, 0xfffffffffffffffb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) listen(r4, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x4e22, 0x12345678, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a462889b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)="e9fd0d", 0x16}, 0x1, 0x0, 0x0, 0x40000dc}, 0x24004014) recvmmsg(r5, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000000)={0x2, 0x3}) 13.283371268s ago: executing program 0 (id=1640): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00006b4000/0x3000)=nil, 0x1ffc, 0x7}}) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.911784599s ago: executing program 5 (id=1647): r0 = socket(0x2, 0x2, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x80108907, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0xfffffffffffffcd0}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) read(r4, &(0x7f0000000200)=""/200, 0xc8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0800000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="180200120000000000000000000000f5a283b6f73d0018110000", @ANYRES32=r6, @ANYBLOB="000000000000000085000008010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "d88ccefa2033fbda"}}}, 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [{0x8, 0x1}, {0x8, 0x3}, {0x8, 0x2}], {0x10, 0x1}, {0x20, 0x6}}, 0x3c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r12 = openat(r4, &(0x7f0000000640)='./debug\x00', 0x101002, 0x0) ioctl(r12, 0x40104d00, &(0x7f0000000a00)="0000020000000000000002") fanotify_mark(r9, 0x40, 0x40000020, r12, &(0x7f0000000100)='./debug/file0\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 8.254114668s ago: executing program 7 (id=1649): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt(r2, 0x112, 0xf, &(0x7f0000000100)="03", 0x1) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) fcntl$addseals(r1, 0x409, 0x7) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r5, 0x0) 7.461361654s ago: executing program 5 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000200010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 6.65127592s ago: executing program 1 (id=1652): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000540)=0x13) syz_io_uring_setup(0x35fa, &(0x7f0000000200)={0x0, 0x293d, 0x4000, 0x3, 0x27, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f00000004c0)=0x5, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000340)={0x3, 0x0, [{0xb84, 0x0, 0xc}, {0x349, 0x0, 0x7}, {0x8bf, 0x0, 0x4}, {0xa67, 0x0, 0x234c}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000040)="17", &(0x7f0000000180)=""/49}, 0x20) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0200001d0001002dbd7000fbdbdf250a0010"], 0x27c}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4004050) 6.313915591s ago: executing program 7 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) 5.999937495s ago: executing program 5 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="160000b506d0a8c41123ea6c650397ef40f8c30ef044ffce53e3cd6164b1f6b504a6f226cc914361fb8a99d72cb44abf3e9ed1656b82b2be63b2868ce3ff95cd80f70572fe9565fc5b9db3b02876242c4d31dc1595a0faa7e55dc4fbbd2929b5921f5ccab0115e2b98e6286bca14d375"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x1}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) getgroups(0x2, &(0x7f0000000840)=[0xee01, 0xffffffffffffffff]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r4, &(0x7f0000000000)="1b5b3f366e", 0x5) write(r4, &(0x7f0000000040)="1b5b3f36681b5b3f366e", 0xa) getgroups(0x2, &(0x7f00000000c0)=[r3, r3]) setresgid(r3, r3, r5) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x3070c0, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x400000000000000, 0xc0440) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x13, 0x4}) 5.746824077s ago: executing program 1 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25090000003000038008000100010000020800030003000000140002006d6163736563300000000000000000000600040004000000"], 0x44}, 0x1, 0xa7, 0x0, 0x400c085}, 0x0) 5.435936845s ago: executing program 0 (id=1656): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000200)='./dev\x00', 0x80400, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) setxattr$security_capability(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0), &(0x7f00000002c0)=@v3={0x3000000, [{0x805, 0x7ff}, {0x0, 0x2}], r6}, 0x18, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x401, 0x10, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff3, 0x5}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0x8, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x4, 0x2, 0xa5}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat(r1, &(0x7f00000001c0)='.\x00', 0x2, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) socket$unix(0x1, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 5.012862623s ago: executing program 7 (id=1657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffff8, @private1, 0x13, 0xffffffff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002b40)="f7", 0x33}], 0x1}}], 0x1, 0x40408c1) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='6', 0x1) openat$cgroup_ro(r3, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000200), 0x42, 0x39b400) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {}, {0xe, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x360, 0x10000000}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000b90000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000bd4000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x82) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = io_uring_setup(0x7, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8080, 0x0, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.76132835s ago: executing program 5 (id=1658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x9c7cdfad9bb16b7c, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x10, @local, 0x1}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x9c7cdfad9bb16b7c, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x10, @local, 0x1}, 0x20) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) 4.33154295s ago: executing program 1 (id=1659): r0 = socket(0x2, 0x2, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x80108907, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0xfffffffffffffcd0}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) read(r4, &(0x7f0000000200)=""/200, 0xc8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0800000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="180200120000000000000000000000f5a283b6f73d0018110000", @ANYRES32=r6, @ANYBLOB="000000000000000085000008010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "d88ccefa2033fbda"}}}, 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [{0x8, 0x1}, {0x8, 0x3}, {0x8, 0x2}], {0x10, 0x1}, {0x20, 0x6}}, 0x3c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r10 = openat(r4, &(0x7f0000000640)='./debug\x00', 0x101002, 0x0) ioctl(r10, 0x40104d00, &(0x7f0000000a00)="0000020000000000000002") fanotify_mark(r8, 0x40, 0x40000020, r10, &(0x7f0000000100)='./debug/file0\x00') accept4$phonet_pipe(r8, &(0x7f0000000140), &(0x7f0000000340)=0x10, 0x80000) 3.331597738s ago: executing program 5 (id=1660): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1c, 0x1, 0x0, "9611e6d6ffc88885163200050000000000000300000000000000010083df00"}) 3.072532777s ago: executing program 7 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x11, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.836062491s ago: executing program 1 (id=1662): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffce540b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70d4e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}}}}}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000001040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000001080)=0x2c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x2f) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x2, 0x4}}}, 0xfffffffffffffff1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001100)=0x30) openat$uinput(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x29) 2.085763291s ago: executing program 0 (id=1663): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x900, @pix={0x5, 0x8, 0x33424752, 0x3, 0x3, 0x8, 0xc, 0x2000000, 0x1, 0x9, 0x2, 0x5}}) 1.761005936s ago: executing program 1 (id=1664): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB="000000000000000000807e270000000000187afc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000a600000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.428148026s ago: executing program 7 (id=1665): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x8000000000000000, 0x100000001}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r2, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='/'}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xe000, {0xffff, 0xfff1, 0x3502, 0x3}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0x4000010) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="040000001000000034001a800400070028000a80050008000400000014000700fc02000000000000000000000000000005000800050000aa6fa3bc97"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.163390185s ago: executing program 5 (id=1666): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0xa0553f3c5f0f6f1b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xffff}, {0xffff, 0x10}, {0x1, 0x6}}}, 0x24}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newsa={0x14c, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x200, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r13, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002400000008000300", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)='q\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x80) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10001, 0x0) 803.06648ms ago: executing program 0 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25090000003000038008000100010000020800030003000000140002006d6163736563300000000000000000000600040004000000"], 0x44}, 0x1, 0xa7, 0x0, 0x400c085}, 0x0) 169.382163ms ago: executing program 1 (id=1668): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x3, 0x1, 0x3b, 0x719d}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = gettid() capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000140)={0x8, 0x3, 0x8001, 0xfffffff7, 0x7fff, 0x8}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="876326bd7000fcdbdf254a0000008600a800c154988c030c6ced8e88fd76d6892cee6fbc82001b305a593424e66cd30df26735b456c3dfa6bf8efd3efc49d0d15f2ae1a996c1be24212118e682ada1e9fb3f59b7462d7ef9cf516768b5be8945699eca9d83e6008dbd84dd9b1fec4411437ce212ba67a177b3fc1999840356113ed54fe0738feac303c9ea902751835bebc07d6f0000"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x40440c4) 0s ago: executing program 7 (id=1669): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) socket$netlink(0x10, 0x3, 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4c22, 0x8, @loopback, 0x20000005}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000001c0)=0x5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41, 0x0, r3}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="cb46575f3cba29a7d393c0a50e8fbb2d3e968b0fbe439679d7b1ef27ec55a08589fb89d504eab13a8b124d3b7e676e29f5a069fae3ae8321f9034031991c592b1015dd051cd1d4d756cd911dc572c547ce4e207838d197a9a499a9633cfd6227e8ef7c4c494c0d7f4f95dc09f3c8583ab29215762a9f34092562a23c4cef4d197f3e5ecac8cb594db667974162d2c04b7ac374ffd5be4d8c89006b6d213523d0e8168a7824cc3a908459eba4b787f92dc549c36dbdd5ee4ef4337be33eabe578de42ea5d0da9d28a87b8032911b28509078f63072f3f75f8619cf93cdd2f003e376f3ba1bd2c902715cede512f12b696fdc831b8d9382242871d397324f6ceeab306f29ecf8e973cd930d1688bc1e790896387fea6542eb34b6d4010a431d897712527a01e29da2e18ae583b18ebb9988696181accc420ebebe205bee5e61b9b9c5d0ca4963d80287d3cd69c388c9887e2cf126d71c16e233c442067c9c6c5d4cfb4e40b70f38a12c3b06f0d51f7ee38c89e011dee8cf1632811f7b69cd2069e167a7628be4869ea4b099f27b32ed88e47b589ed56d0a32026fcb6dde668612ab5c86afd2f9776ec28a2a7511a1f4c23ccde8d52869a4c2d5e3c66da4ef53c17dd7e99dee0113669bc5a6c8786094af7edc6091bb7635532d8c192dbfe49552a8198bc5e70dc4aaeb842b9c7ec5545edbe2332945541b50a9c42a18e6c9f1b121db63bf72dfb59ba70c5a444ad5adaacec051510650b59d67892914b30d1d1c1efd56902d407b2fbea51ca6d173e5b45ca328b1b0c096e2a00138e2b4a7705e508327ed7591092087446cd43c378021f2b7ff2b830be0babcc0a02a5bfc2af63ce392e4e289b6942b7fdea2ef785f4036b5bc3a24e066c61c4b2d75b63f27c7833517406089fc77c76764d751e0afbfc3e807459d6426962ee8b3b38440d59e8a424bba6be2aa7f9edb81a7b50abaf2f79d540a2cec7401a85d105e44f7c463413492ad79e94199cc33b465aa3a62fefa9f3f5c47d151a5bcb5f97b977d422c9354b91d2e611b10c997002f5aebe94cfeef598911dbe68d3af23b0dbfd10262e04489b56618fd1396388e7581565cce15ce124f9cc1b494eedeca9e3ef92d2b9eed76322b93895e08e7cbba2feb6dad85153dc994149001397e48ea89c177c93b506d349479c3184f8df64be3d010e02ae3aeb57107b521a25aebaf1399162b6251d1ec247c8fbe4db9e728d67a75338c65538d5a3574eb4aff70d8f60cf1c652993fbe2cc293585101cedef461c8a030e4c6c40ca298bb25e7c34325c39a698594b240b97576ae79ec42773c4dc943bb8b6922c672d4de43d0d20e34215807ee35ee0b09659da03cbf4de57dc3eb50fd31566186490f841aebbf2e22ca94446691f1bb30ce70066656a864ae85062697ebf38e7a28932d8084f", 0x3fa}, {&(0x7f0000001340)='Fu=-', 0x4}, {0x0}], 0x3, &(0x7f0000006680)=ANY=[@ANYBLOB="2800000000000000090100008100000010261d354e84082af54969b94ef6caa9c109c21778823100180000000000000014010000100000009778fdc834000000c000000000"], 0x100}}, {{&(0x7f0000001700)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000003780)=[{0x0, 0x1e}, {0x0}], 0x2}}, {{&(0x7f0000003dc0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, 0x0, 0x448}}, {{0x0, 0x0, &(0x7f0000006540)=[{0x0}, {0x0, 0x2e}], 0x2}}], 0x4, 0x4008000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r6, &(0x7f0000000180)="746922689f95bf430b91f073f4d4737851626c01f17099482d5618750ad9c1f1f54d339f106ec5460db2dd5eeb093b1ac7697604bc6838e62ed13b56030638e84abf2bdb6efdd36f9aa487b4ed1c80cd6670b222d2fcc645d2e404a913ebd97e2701375e4c485625869bdaf3c2819d82a2ac0fcb369db185", &(0x7f0000000200)=@udp=r1, 0x2}, 0x20) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0xffffffffffffff2e, &(0x7f0000000100)) ptrace$getenv(0x4201, r0, 0x4, &(0x7f0000000000)) kernel console output (not intermixed with test programs): rface not active [ 81.640251][ T43] audit: type=1400 audit(1790407815.008:630): avc: denied { write } for pid=7324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.641274][ T7251] hsr_slave_0: entered promiscuous mode [ 81.641939][ T7251] hsr_slave_1: entered promiscuous mode [ 81.642465][ T7251] debugfs: 'hsr0' already exists in 'hsr' [ 81.642487][ T7251] Cannot create hsr debugfs directory [ 81.755685][ T5441] 8021q: adding VLAN 0 to HW filter on device eth7 [ 82.011578][ T5441] 8021q: adding VLAN 0 to HW filter on device eth9 [ 82.022787][ T7251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.024814][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.025224][ T7251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.027398][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.027914][ T7251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.030918][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.031398][ T7251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.037869][ T7251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.107296][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.154396][ T7251] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.173011][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.173057][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.189575][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.189621][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.248357][ T7354] netlink: 'syz.0.520': attribute type 6 has an invalid length. [ 82.479843][ T5735] Bluetooth: hci0: command tx timeout [ 82.490075][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.514644][ T7390] FAULT_INJECTION: forcing a failure. [ 82.514644][ T7390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.514667][ T7390] CPU: 0 UID: 0 PID: 7390 Comm: syz.1.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.514683][ T7390] Tainted: [L]=SOFTLOCKUP [ 82.514687][ T7390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.514694][ T7390] Call Trace: [ 82.514698][ T7390] [ 82.514732][ T7390] dump_stack_lvl+0x100/0x190 [ 82.514756][ T7390] should_fail_ex.cold+0x5/0xa [ 82.514778][ T7390] _copy_to_user+0x32/0xd0 [ 82.514794][ T7390] io_query+0x435/0x760 [ 82.514815][ T7390] ? __pfx_io_query+0x10/0x10 [ 82.514838][ T7390] ? ksys_write+0x190/0x250 [ 82.514854][ T7390] __do_sys_io_uring_register+0xab1/0x1bc0 [ 82.514874][ T7390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.514887][ T7390] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 82.514924][ T7390] ? __x64_sys_futex+0x34f/0x4d0 [ 82.514946][ T7390] ? __x64_sys_futex+0x358/0x4d0 [ 82.514981][ T7390] ? xfd_validate_state+0x129/0x190 [ 82.515010][ T7390] do_syscall_64+0x123/0x790 [ 82.515025][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.515044][ T7390] RIP: 0033:0x7f2dc559e159 [ 82.515059][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.515077][ T7390] RSP: 002b:00007f2dc64f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 82.515095][ T7390] RAX: ffffffffffffffda RBX: 00007f2dc5825fa0 RCX: 00007f2dc559e159 [ 82.515107][ T7390] RDX: 0000200000000f40 RSI: 0000000000000023 RDI: ffffffffffffffff [ 82.515119][ T7390] RBP: 00007f2dc563506b R08: 0000000000000000 R09: 0000000000000000 [ 82.515129][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.515139][ T7390] R13: 00007f2dc5826038 R14: 00007f2dc5825fa0 R15: 00007fffcb0de468 [ 82.515164][ T7390] [ 82.591914][ T7401] binder: 7400:7401 ioctl c0306201 200000000080 returned -14 [ 82.694096][ T7251] veth0_vlan: entered promiscuous mode [ 82.705975][ T7251] veth1_vlan: entered promiscuous mode [ 82.720418][ T7417] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 82.752001][ T7251] veth0_macvtap: entered promiscuous mode [ 82.754177][ T7251] veth1_macvtap: entered promiscuous mode [ 82.761294][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.766190][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.772953][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.773088][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.773579][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.812162][ T5782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.861805][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.861820][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.881244][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.881264][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.901615][ T5441] 8021q: adding VLAN 0 to HW filter on device eth8 [ 83.209401][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 83.244012][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.546'. [ 83.244055][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.546'. [ 83.938530][ T7511] FAULT_INJECTION: forcing a failure. [ 83.938530][ T7511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.938552][ T7511] CPU: 3 UID: 0 PID: 7511 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.938569][ T7511] Tainted: [L]=SOFTLOCKUP [ 83.938573][ T7511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.938580][ T7511] Call Trace: [ 83.938584][ T7511] [ 83.938589][ T7511] dump_stack_lvl+0x100/0x190 [ 83.938610][ T7511] should_fail_ex.cold+0x5/0xa [ 83.938627][ T7511] _copy_from_user+0x2e/0xd0 [ 83.938642][ T7511] sctp_getsockopt_paddr_thresholds.isra.0+0xcb/0x500 [ 83.938661][ T7511] ? __pfx_sctp_getsockopt_paddr_thresholds.isra.0+0x10/0x10 [ 83.938677][ T7511] ? finish_task_switch.isra.0+0x149/0x10d0 [ 83.938718][ T7511] ? __local_bh_enable_ip+0xa5/0x120 [ 83.938736][ T7511] sctp_getsockopt+0x1847/0x7110 [ 83.938752][ T7511] ? avc_has_perm_noaudit+0x56/0x470 [ 83.938771][ T7511] ? find_held_lock+0x2b/0x80 [ 83.938787][ T7511] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.938804][ T7511] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.938824][ T7511] ? __pfx_sctp_getsockopt+0x10/0x10 [ 83.938842][ T7511] ? __lock_acquire+0x5c0/0x1f40 [ 83.938855][ T7511] ? avc_has_perm+0x135/0x1e0 [ 83.938871][ T7511] ? __pfx_avc_has_perm+0x10/0x10 [ 83.938890][ T7511] ? lock_acquire+0x1d1/0x380 [ 83.938902][ T7511] ? __might_fault+0xc5/0x140 [ 83.938919][ T7511] ? find_held_lock+0x2b/0x80 [ 83.938935][ T7511] ? __might_fault+0xc5/0x140 [ 83.938951][ T7511] ? __might_fault+0xc5/0x140 [ 83.938980][ T7511] ? _copy_from_user+0x59/0xd0 [ 83.939005][ T7511] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 83.939032][ T7511] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 83.939060][ T7511] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 83.939086][ T7511] do_sock_getsockopt+0x50a/0x6e0 [ 83.939116][ T7511] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 83.939143][ T7511] ? __fget_files+0x34/0x3d0 [ 83.939163][ T7511] ? find_held_lock+0x2b/0x80 [ 83.939193][ T7511] ? __fget_files+0x21f/0x3d0 [ 83.939219][ T7511] __sys_getsockopt+0x148/0x260 [ 83.939251][ T7511] ? __x64_sys_getsockopt+0xbd/0x160 [ 83.939270][ T7511] __x64_sys_getsockopt+0xbd/0x160 [ 83.939289][ T7511] ? do_syscall_64+0xae/0x790 [ 83.939305][ T7511] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.939343][ T7511] do_syscall_64+0x123/0x790 [ 83.939362][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.939379][ T7511] RIP: 0033:0x7f2dc559e159 [ 83.939394][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.939412][ T7511] RSP: 002b:00007f2dc64f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.939430][ T7511] RAX: ffffffffffffffda RBX: 00007f2dc5825fa0 RCX: 00007f2dc559e159 [ 83.939443][ T7511] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000004 [ 83.939453][ T7511] RBP: 00007f2dc563506b R08: 00002000000003c0 R09: 0000000000000000 [ 83.939463][ T7511] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 83.939475][ T7511] R13: 00007f2dc5826038 R14: 00007f2dc5825fa0 R15: 00007fffcb0de468 [ 83.939499][ T7511] [ 84.558267][ T5735] Bluetooth: hci0: command tx timeout [ 84.888193][ T5815] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.099439][ T7549] netlink: 64 bytes leftover after parsing attributes in process `syz.5.579'. [ 85.174501][ T5815] usb 7-1: device descriptor read/64, error -71 [ 85.319773][ T7559] tap0: tun_chr_ioctl cmd 1074025677 [ 85.319882][ T7559] tap0: linktype set to 825 [ 85.428318][ T5815] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 85.519693][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 85.519705][ T43] audit: type=1400 audit(1790407818.888:654): avc: denied { read write } for pid=7572 comm="syz.5.590" name="rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.519731][ T43] audit: type=1400 audit(1790407818.888:655): avc: denied { open } for pid=7572 comm="syz.5.590" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.547426][ T5735] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 85.568123][ T5815] usb 7-1: device descriptor read/64, error -71 [ 85.679853][ T5815] usb usb7-port1: attempt power cycle [ 86.038344][ T5815] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.070267][ T5815] usb 7-1: device descriptor read/8, error -71 [ 86.082567][ T7592] syzkaller0: entered promiscuous mode [ 86.082586][ T7592] syzkaller0: entered allmulticast mode [ 86.135006][ T43] audit: type=1400 audit(1790407819.498:656): avc: denied { recv } for pid=5715 comm="syz-executor" saddr=127.0.0.1 src=35856 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 86.188635][ T43] audit: type=1400 audit(1790407819.558:657): avc: denied { recv } for pid=58 comm="kworker/3:1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=35856 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 86.319555][ T5815] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.339009][ T5815] usb 7-1: device descriptor read/8, error -71 [ 86.454888][ T43] audit: type=1400 audit(1790407819.818:658): avc: denied { mount } for pid=7609 comm="syz.1.607" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.459542][ T5815] usb usb7-port1: unable to enumerate USB device [ 86.478757][ T7615] geneve2: entered promiscuous mode [ 86.643330][ T5735] Bluetooth: hci0: command tx timeout [ 87.463414][ T43] audit: type=1400 audit(1790407820.828:659): avc: denied { egress } for pid=7620 comm="syz.0.612" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 87.463461][ T43] audit: type=1400 audit(1790407820.828:660): avc: denied { sendto } for pid=7620 comm="syz.0.612" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 87.577806][ T7631] syzkaller0: entered promiscuous mode [ 87.577821][ T7631] syzkaller0: entered allmulticast mode [ 87.966404][ T6250] IPVS: starting estimator thread 0... [ 88.046364][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046381][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046390][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046397][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046404][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046413][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046421][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046429][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046437][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046444][ T7664] tc action pedit offset must be on 32 bit boundaries [ 88.046459][ T7664] 0: reclassify loop, rule prio 0, protocol 800 [ 88.070357][ T7657] IPVS: using max 28 ests per chain, 67200 per kthread [ 88.109348][ T7674] netlink: 256 bytes leftover after parsing attributes in process `syz.0.634'. [ 88.718903][ T5735] Bluetooth: hci0: command tx timeout [ 89.128453][ T7712] syzkaller0: entered promiscuous mode [ 89.128468][ T7712] syzkaller0: entered allmulticast mode [ 89.391451][ T43] audit: type=1400 audit(1790407822.758:661): avc: denied { accept } for pid=7719 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.501551][ T7685] Set syz1 is full, maxelem 65536 reached [ 89.592531][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.685787][ T25] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 89.730130][ T43] audit: type=1400 audit(1790407823.098:662): avc: denied { remount } for pid=7750 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.798523][ T7749] fido_id[7749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.140555][ T43] audit: type=1400 audit(1790407823.508:663): avc: denied { append } for pid=7762 comm="syz.5.669" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.226836][ T7766] can0: slcan on pts0. [ 90.309980][ T7765] can0 (unregistered): slcan off pts0. [ 90.397418][ T6250] IPVS: starting estimator thread 0... [ 90.490614][ T7771] IPVS: using max 25 ests per chain, 60000 per kthread [ 90.566336][ T5815] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 90.569739][ T5815] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 90.662275][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 90.662290][ T43] audit: type=1400 audit(1790407824.028:666): avc: denied { search } for pid=7787 comm="syz.0.679" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.662420][ T43] audit: type=1400 audit(1790407824.028:667): avc: denied { search } for pid=7787 comm="syz.0.679" name="events" dev="tracefs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.662704][ T43] audit: type=1400 audit(1790407824.028:668): avc: denied { search } for pid=7787 comm="syz.0.679" name="kvm" dev="tracefs" ino=18760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.663040][ T43] audit: type=1400 audit(1790407824.028:669): avc: denied { search } for pid=7787 comm="syz.0.679" name="kvm_entry" dev="tracefs" ino=18762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.683836][ T43] audit: type=1400 audit(1790407824.048:670): avc: denied { connect } for pid=7789 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.951622][ T7814] ip_tables: iptables: counters copy to user failed while replacing table [ 90.993627][ T7819] block nbd0: not configured, cannot reconfigure [ 91.027503][ T7824] syz.2.690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.326961][ T7837] can: request_module (can-proto-0) failed. [ 91.631141][ T7860] ip_tables: iptables: counters copy to user failed while replacing table [ 91.697398][ T43] audit: type=1400 audit(1790407825.058:671): avc: denied { setopt } for pid=7865 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.792315][ T43] audit: type=1400 audit(1790407825.148:672): avc: denied { mmap_zero } for pid=7873 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 91.795407][ T43] audit: type=1400 audit(1790407825.158:673): avc: denied { ioctl } for pid=7873 comm="syz.2.720" path="socket:[18021]" dev="sockfs" ino=18021 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.005265][ T43] audit: type=1400 audit(1790407825.368:674): avc: denied { setopt } for pid=7890 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.046096][ T43] audit: type=1400 audit(1790407825.408:675): avc: denied { cmd } for pid=7893 comm="syz.0.728" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 92.112292][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 92.118693][ T7901] vlan3: entered allmulticast mode [ 92.118709][ T7901] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 92.121056][ T7901] batman_adv: batadv0: Adding interface: vlan3 [ 92.121066][ T7901] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.121081][ T7901] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 92.158155][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 92.288161][ T10] usb 10-1: device descriptor read/64, error -71 [ 92.678221][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 92.808168][ T10] usb 10-1: device descriptor read/64, error -71 [ 92.920094][ T10] usb usb10-port1: attempt power cycle [ 93.193298][ T7936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.742'. [ 93.258193][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 93.279976][ T10] usb 10-1: device descriptor read/8, error -71 [ 93.447134][ T7959] tipc: Cannot configure node identity twice [ 93.524490][ T7966] netlink: 'syz.1.756': attribute type 12 has an invalid length. [ 93.524505][ T7966] netlink: 'syz.1.756': attribute type 29 has an invalid length. [ 93.524513][ T7966] netlink: 'syz.1.756': attribute type 44 has an invalid length. [ 93.531422][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 93.559114][ T10] usb 10-1: device descriptor read/8, error -71 [ 93.678601][ T10] usb usb10-port1: unable to enumerate USB device [ 93.767818][ T7971] xt_cgroup: invalid path, errno=-2 [ 94.681318][ T8011] lo speed is unknown, defaulting to 1000 [ 94.949612][ T8018] netlink: 'syz.5.772': attribute type 1 has an invalid length. [ 94.949626][ T8018] netlink: 'syz.5.772': attribute type 3 has an invalid length. [ 95.200616][ T5735] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 95.264238][ T8046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.282966][ T8048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.341561][ T8057] fuse: Bad value for 'fd' [ 95.753479][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 95.790908][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 95.871223][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 95.871236][ T43] audit: type=1400 audit(1790407829.238:693): avc: denied { name_bind } for pid=8096 comm="syz.0.805" path="socket:[19559]" dev="sockfs" ino=19559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 95.893750][ T43] audit: type=1400 audit(1790407829.258:694): avc: denied { write } for pid=8091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.963732][ T43] audit: type=1400 audit(1790407829.328:695): avc: denied { write } for pid=8099 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.129932][ C2] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 96.130195][ C2] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 101.588007][ T8132] tipc: Started in network mode [ 101.588751][ T8132] tipc: Node identity ac14140f, cluster identity 4711 [ 101.594067][ T8132] tipc: New replicast peer: 255.255.255.255 [ 101.606123][ T8132] tipc: Enabled bearer , priority 10 [ 102.352340][ T43] audit: type=1400 audit(1790407835.718:696): avc: denied { create } for pid=8135 comm="syz.5.820" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.472733][ T43] audit: type=1400 audit(1790407835.838:697): avc: denied { mounton } for pid=8135 comm="syz.5.820" path="/53/file0" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.601408][ T10] tipc: Node number set to 2886997007 [ 102.799555][ T43] audit: type=1400 audit(1790407836.138:698): avc: denied { unlink } for pid=7251 comm="syz-executor" name="file0" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.883064][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 103.883125][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 104.034653][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 104.034691][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 104.055079][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.056727][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.066589][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.066756][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.705736][ T43] audit: type=1400 audit(1790407839.048:699): avc: denied { create } for pid=8151 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.732814][ T43] audit: type=1400 audit(1790407839.098:700): avc: denied { write } for pid=8151 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.737177][ T8153] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.644941][ T8161] 9p: Bad value for 'rfdno' [ 108.675388][ T43] audit: type=1400 audit(1790407842.028:701): avc: denied { unlink } for pid=8165 comm="syz.0.842" name="#7" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.040584][ T8182] input: syz1 as /devices/virtual/input/input13 [ 111.158802][ T43] audit: type=1400 audit(1790407844.508:702): avc: denied { read } for pid=5124 comm="acpid" name="event4" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.164035][ T43] audit: type=1400 audit(1790407844.528:703): avc: denied { open } for pid=5124 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.174959][ T43] audit: type=1400 audit(1790407844.538:704): avc: denied { ioctl } for pid=5124 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2894 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.902637][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.912817][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.918009][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.934727][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.941516][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.049044][ T5088] Bluetooth: hci4: command tx timeout [ 119.785596][ T8215] overlayfs: failed to clone upperpath [ 120.128956][ T5782] batman_adv: batadv0: Removing interface: vlan3 [ 121.120671][ T5088] Bluetooth: hci4: command tx timeout [ 122.368500][ T8195] lo speed is unknown, defaulting to 1000 [ 122.424506][ T8240] overlayfs: failed to clone upperpath [ 122.673762][ T5782] bridge_slave_1: left allmulticast mode [ 122.673822][ T5782] bridge_slave_1: left promiscuous mode [ 122.680914][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.764199][ T5782] bridge_slave_0: left allmulticast mode [ 122.764251][ T5782] bridge_slave_0: left promiscuous mode [ 122.767062][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.140131][ T8245] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 123.208276][ T5088] Bluetooth: hci4: command tx timeout [ 125.290641][ T5088] Bluetooth: hci4: command tx timeout [ 125.363161][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.391785][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.416052][ T5782] bond0 (unregistering): Released all slaves [ 126.099740][ T5782] tipc: Left network mode [ 126.425582][ T8270] FAULT_INJECTION: forcing a failure. [ 126.425582][ T8270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.425635][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.0.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.425662][ T8270] Tainted: [L]=SOFTLOCKUP [ 126.425677][ T8270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.425695][ T8270] Call Trace: [ 126.425725][ T8270] [ 126.425761][ T8270] dump_stack_lvl+0x100/0x190 [ 126.425822][ T8270] should_fail_ex.cold+0x5/0xa [ 126.425942][ T8270] strncpy_from_user+0x3b/0x2d0 [ 126.426073][ T8270] do_getname+0x78/0x390 [ 126.426171][ T8270] do_sys_openat2+0xc7/0x1e0 [ 126.426255][ T8270] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.426361][ T8270] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 126.426538][ T8270] __x64_sys_openat+0x12d/0x210 [ 126.426656][ T8270] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.426697][ T8270] ? find_held_lock+0x2b/0x80 [ 126.426741][ T8270] ? trace_syscall_enter+0xcc/0x120 [ 126.426940][ T8270] do_syscall_64+0x123/0x790 [ 126.427019][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.427052][ T8270] RIP: 0033:0x7ff27a99e159 [ 126.427103][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.427123][ T8270] RSP: 002b:00007ff27b78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.427154][ T8270] RAX: ffffffffffffffda RBX: 00007ff27ac25fa0 RCX: 00007ff27a99e159 [ 126.427172][ T8270] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 126.427189][ T8270] RBP: 00007ff27aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 126.427206][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.427224][ T8270] R13: 00007ff27ac26038 R14: 00007ff27ac25fa0 R15: 00007ffd819b16e8 [ 126.427481][ T8270] [ 127.419493][ T8275] overlayfs: failed to clone upperpath [ 128.566088][ T43] audit: type=1400 audit(1790407861.928:705): avc: denied { write } for pid=8279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.685797][ T5782] hsr_slave_0: left promiscuous mode [ 128.767752][ T5782] hsr_slave_1: left promiscuous mode [ 128.777541][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.798742][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.757478][ T43] audit: type=1400 audit(1790407863.118:706): avc: denied { write } for pid=8287 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.597933][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.599343][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.062311][ T5441] 8021q: adding VLAN 0 to HW filter on device eth10 [ 135.832868][ T8310] input: syz1 as /devices/virtual/input/input14 [ 137.364683][ T8321] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 137.451814][ T43] audit: type=1400 audit(1790407870.808:707): avc: denied { write } for pid=8317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.124156][ T43] audit: type=1400 audit(1790407872.478:708): avc: denied { write } for pid=8334 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.560447][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.562301][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.564640][ T8195] bridge_slave_0: entered allmulticast mode [ 139.723739][ T8195] bridge_slave_0: entered promiscuous mode [ 139.907789][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.915834][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.925094][ T8195] bridge_slave_1: entered allmulticast mode [ 140.016583][ T8195] bridge_slave_1: entered promiscuous mode [ 141.166501][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.205643][ T5441] 8021q: adding VLAN 0 to HW filter on device eth11 [ 141.313800][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.905999][ T8195] team0: Port device team_slave_0 added [ 142.016548][ T8195] team0: Port device team_slave_1 added [ 142.543934][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.543952][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.543974][ T8195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.615214][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.615233][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.615257][ T8195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.838317][ T8355] syzkaller0: entered promiscuous mode [ 143.838374][ T8355] syzkaller0: entered allmulticast mode [ 144.051429][ T43] audit: type=1400 audit(1790407877.418:709): avc: denied { write } for pid=8360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.343168][ T8195] hsr_slave_0: entered promiscuous mode [ 144.352493][ T8195] hsr_slave_1: entered promiscuous mode [ 144.359839][ T8195] debugfs: 'hsr0' already exists in 'hsr' [ 144.359898][ T8195] Cannot create hsr debugfs directory [ 145.143273][ T43] audit: type=1400 audit(1790407878.508:710): avc: denied { write } for pid=8373 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.954862][ T8381] overlayfs: failed to resolve './bus': -2 [ 146.325249][ T5441] 8021q: adding VLAN 0 to HW filter on device eth12 [ 147.277010][ T8392] overlayfs: failed to resolve './bus': -2 [ 148.773355][ T8195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.912061][ T8195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.942385][ T8195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.958187][ T43] audit: type=1400 audit(1790407882.318:711): avc: denied { write } for pid=8400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.020532][ T8195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.040811][ T8195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.134587][ T8195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.145857][ T8195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.206443][ T8195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.273885][ T43] audit: type=1400 audit(1790407883.638:712): avc: denied { write } for pid=8419 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.413320][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.763473][ T8195] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.910230][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.911089][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.065424][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.066340][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.168406][ T5441] 8021q: adding VLAN 0 to HW filter on device eth13 [ 151.642158][ T8430] overlayfs: failed to resolve './bus': -2 [ 153.287343][ T8442] overlayfs: failed to resolve './bus': -2 [ 159.181326][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.964740][ T8195] veth0_vlan: entered promiscuous mode [ 163.073957][ T8195] veth1_vlan: entered promiscuous mode [ 163.548409][ T43] audit: type=1400 audit(1790407896.908:713): avc: denied { write } for pid=8529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.554496][ T8195] veth0_macvtap: entered promiscuous mode [ 164.722924][ T8195] veth1_macvtap: entered promiscuous mode [ 164.915709][ T43] audit: type=1400 audit(1790407898.278:714): avc: denied { write } for pid=8546 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.152439][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.311807][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.599124][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.599223][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.599365][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.599502][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.292367][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.292403][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.440457][ T43] audit: type=1400 audit(1790407900.808:715): avc: denied { write } for pid=8558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.030039][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.030069][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.371935][ T8570] overlayfs: failed to resolve './bus': -2 [ 168.452547][ T43] audit: type=1400 audit(1790407901.818:716): avc: denied { mounton } for pid=8195 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.848899][ T43] audit: type=1400 audit(1790407902.208:717): avc: denied { module_request } for pid=8572 comm="syz.1.949" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 168.910605][ T43] audit: type=1400 audit(1790407902.268:718): avc: denied { bpf } for pid=8575 comm="syz.0.950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.915319][ T43] audit: type=1400 audit(1790407902.278:719): avc: denied { perfmon } for pid=8575 comm="syz.0.950" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.325248][ T43] audit: type=1400 audit(1790407902.678:720): avc: denied { write } for pid=8574 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.478846][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 170.479795][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 173.431082][ T43] audit: type=1400 audit(1790407906.798:721): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.209734][ T8622] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 175.269630][ T43] audit: type=1400 audit(1790407908.628:722): avc: denied { write } for pid=8620 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.908612][ T8639] overlayfs: failed to clone upperpath [ 179.141317][ T8641] overlayfs: missing 'lowerdir' [ 180.681422][ T43] audit: type=1400 audit(1790407914.038:723): avc: denied { write } for pid=8640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.204890][ T43] audit: type=1400 audit(1790407915.568:724): avc: denied { write } for pid=8661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.299955][ T8675] overlayfs: failed to clone upperpath [ 183.377707][ T8674] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.583395][ T8677] overlayfs: missing 'lowerdir' [ 185.630114][ T8689] syzkaller0: entered promiscuous mode [ 185.630176][ T8689] syzkaller0: entered allmulticast mode [ 188.993059][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.6.992'. [ 191.434976][ T8746] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.539971][ T8754] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 192.694341][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1006'. [ 194.076322][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.076856][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.165457][ T8898] tipc: Can't bind to reserved service type 0 [ 213.639668][ T43] audit: type=1400 audit(1790407946.998:725): avc: denied { ioctl } for pid=8939 comm="syz.0.1063" path="socket:[22006]" dev="sockfs" ino=22006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.568385][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 218.584122][ T8973] netlink: 608 bytes leftover after parsing attributes in process `syz.5.1072'. [ 221.982360][ T8988] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 223.632460][ T8997] netlink: 608 bytes leftover after parsing attributes in process `syz.6.1082'. [ 228.692815][ T9031] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 231.736548][ T43] audit: type=1400 audit(1790407965.098:726): avc: denied { append } for pid=9043 comm="syz.5.1096" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 232.326779][ T9049] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1100'. [ 233.011701][ T9055] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 238.344247][ T9090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1114'. [ 239.947964][ T9103] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 241.158199][ T9110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1120'. [ 242.176418][ T5737] Bluetooth: hci4: command 0x0406 tx timeout [ 243.344729][ T9124] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 245.833907][ T9144] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1133'. [ 246.701684][ T9151] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1135'. [ 248.309151][ T9166] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 249.195208][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1146'. [ 249.414773][ T9182] netlink: 608 bytes leftover after parsing attributes in process `syz.6.1147'. [ 251.081194][ T9198] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 252.309085][ T9207] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1158'. [ 253.388659][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1161'. [ 255.254208][ T9224] netlink: 608 bytes leftover after parsing attributes in process `syz.6.1165'. [ 255.540646][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.541158][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.843813][ T9230] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1168'. [ 261.334102][ T9264] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1178'. [ 262.896374][ T9275] syzkaller0: entered promiscuous mode [ 262.896418][ T9275] syzkaller0: entered allmulticast mode [ 268.793373][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'. [ 272.282740][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 273.354501][ T9366] syzkaller0: entered promiscuous mode [ 273.354538][ T9366] syzkaller0: entered allmulticast mode [ 275.775293][ T9388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1220'. [ 277.273415][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 278.054290][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'. [ 279.903649][ T9409] syzkaller0: entered promiscuous mode [ 279.903710][ T9409] syzkaller0: entered allmulticast mode [ 280.180412][ T9412] input: syz1 as /devices/virtual/input/input15 [ 281.813567][ T9426] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1231'. [ 285.062450][ T9453] input: syz1 as /devices/virtual/input/input16 [ 287.419347][ T9470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1245'. [ 292.597801][ T9510] syz_tun: entered allmulticast mode [ 292.831120][ T9509] syz_tun: left allmulticast mode [ 293.602747][ T9516] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 294.313273][ T43] audit: type=1400 audit(1790408027.678:727): avc: denied { setopt } for pid=9520 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 295.590888][ T9532] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 295.590927][ T9532] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 296.102065][ T9537] syzkaller0: entered promiscuous mode [ 296.102092][ T9537] syzkaller0: entered allmulticast mode [ 300.445834][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'. [ 302.747733][ T9578] syzkaller0: entered promiscuous mode [ 302.747835][ T9578] syzkaller0: entered allmulticast mode [ 303.057637][ T9583] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 303.057708][ T9583] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 304.099236][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1290'. [ 304.819336][ T9598] FAULT_INJECTION: forcing a failure. [ 304.819336][ T9598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 304.819385][ T9598] CPU: 2 UID: 0 PID: 9598 Comm: syz.0.1293 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.819412][ T9598] Tainted: [L]=SOFTLOCKUP [ 304.819425][ T9598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.819442][ T9598] Call Trace: [ 304.819467][ T9598] [ 304.819496][ T9598] dump_stack_lvl+0x100/0x190 [ 304.819619][ T9598] should_fail_ex.cold+0x5/0xa [ 304.819701][ T9598] get_futex_key+0x1d0/0x14f0 [ 304.819869][ T9598] ? __pfx_get_futex_key+0x10/0x10 [ 304.820097][ T9598] futex_wake+0xf4/0x5e0 [ 304.820224][ T9598] ? __pfx_futex_wake+0x10/0x10 [ 304.820280][ T9598] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 304.820427][ T9598] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 304.820560][ T9598] do_futex+0x2b2/0x440 [ 304.820663][ T9598] ? __pfx_do_futex+0x10/0x10 [ 304.820756][ T9598] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 304.820808][ T9598] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 304.820898][ T9598] __x64_sys_futex+0x34f/0x4d0 [ 304.821063][ T9598] ? __pfx___x64_sys_futex+0x10/0x10 [ 304.821087][ T9598] ? find_held_lock+0x2b/0x80 [ 304.821119][ T9598] ? trace_syscall_enter+0xcc/0x120 [ 304.821154][ T9598] ? trace_syscall_enter+0xcc/0x120 [ 304.821370][ T9598] do_syscall_64+0x123/0x790 [ 304.821434][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.821467][ T9598] RIP: 0033:0x7ff27a99e159 [ 304.821519][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.821541][ T9598] RSP: 002b:00007ff27b78e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 304.821573][ T9598] RAX: ffffffffffffffda RBX: 00007ff27ac25fa8 RCX: 00007ff27a99e159 [ 304.821592][ T9598] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff27ac25fac [ 304.821610][ T9598] RBP: 00007ff27ac25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 304.821628][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.821647][ T9598] R13: 00007ff27ac26038 R14: 00007ffd819b1600 R15: 00007ffd819b16e8 [ 304.821934][ T9598] [ 308.656173][ T59] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 308.799470][ T9631] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 308.888441][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 308.897252][ T59] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.980789][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.980931][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.047779][ T59] usb 11-1: config 0 descriptor?? [ 309.430475][ T59] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 309.638178][ T1040] usb 11-1: USB disconnect, device number 2 [ 311.594953][ T9645] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1309'. [ 312.469433][ T9647] syz_tun: entered allmulticast mode [ 313.417933][ T9654] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1315'. [ 314.550638][ T9658] syzkaller0: entered promiscuous mode [ 314.550683][ T9658] syzkaller0: entered allmulticast mode [ 314.645500][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1319'. [ 314.678982][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.075070][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075118][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075161][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075206][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075254][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075304][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075337][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075360][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075386][ T1357] wiimote 0005:057E:0330.0004: unknown main item tag 0x0 [ 315.075419][ T1357] wiimote 0005:057E:0330.0004: unbalanced collection at end of report description [ 315.094561][ T1357] wiimote 0005:057E:0330.0004: HID parse failed [ 315.108458][ T1357] wiimote 0005:057E:0330.0004: probe with driver wiimote failed with error -22 [ 315.111012][ T9664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.911473][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.911916][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.825590][ T9690] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1329'. [ 320.733513][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1331'. [ 320.751420][ T9702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.905553][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.635563][ T43] audit: type=1400 audit(1790408055.988:728): avc: denied { create } for pid=9711 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 329.101022][ T9746] FAULT_INJECTION: forcing a failure. [ 329.101022][ T9746] name fail_futex, interval 1, probability 0, space 0, times 0 [ 329.101078][ T9746] CPU: 1 UID: 0 PID: 9746 Comm: syz.6.1350 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.101104][ T9746] Tainted: [L]=SOFTLOCKUP [ 329.101119][ T9746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.101137][ T9746] Call Trace: [ 329.101168][ T9746] [ 329.101204][ T9746] dump_stack_lvl+0x100/0x190 [ 329.101285][ T9746] should_fail_ex.cold+0x5/0xa [ 329.101405][ T9746] get_futex_key+0x1d0/0x14f0 [ 329.101586][ T9746] ? __pfx_get_futex_key+0x10/0x10 [ 329.101850][ T9746] futex_wake+0xf4/0x5e0 [ 329.101945][ T9746] ? __pfx_futex_wake+0x10/0x10 [ 329.102012][ T9746] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 329.102134][ T9746] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 329.102272][ T9746] do_futex+0x2b2/0x440 [ 329.102420][ T9746] ? __pfx_do_futex+0x10/0x10 [ 329.102468][ T9746] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 329.102519][ T9746] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 329.102635][ T9746] __x64_sys_futex+0x34f/0x4d0 [ 329.102759][ T9746] ? __pfx___x64_sys_futex+0x10/0x10 [ 329.102788][ T9746] ? find_held_lock+0x2b/0x80 [ 329.102829][ T9746] ? trace_syscall_enter+0xcc/0x120 [ 329.102872][ T9746] ? trace_syscall_enter+0xcc/0x120 [ 329.103063][ T9746] do_syscall_64+0x123/0x790 [ 329.103151][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.103192][ T9746] RIP: 0033:0x7f8a0339e159 [ 329.103267][ T9746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.103292][ T9746] RSP: 002b:00007f8a015f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 329.103329][ T9746] RAX: ffffffffffffffda RBX: 00007f8a03625fa8 RCX: 00007f8a0339e159 [ 329.103344][ T9746] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8a03625fac [ 329.103356][ T9746] RBP: 00007f8a03625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 329.103367][ T9746] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 329.103378][ T9746] R13: 00007f8a03626038 R14: 00007fff9dd9d620 R15: 00007fff9dd9d708 [ 329.103625][ T9746] [ 333.834118][ T9777] FAULT_INJECTION: forcing a failure. [ 333.834118][ T9777] name fail_futex, interval 1, probability 0, space 0, times 0 [ 333.834175][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.6.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.834197][ T9777] Tainted: [L]=SOFTLOCKUP [ 333.834206][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.834217][ T9777] Call Trace: [ 333.834237][ T9777] [ 333.834254][ T9777] dump_stack_lvl+0x100/0x190 [ 333.834348][ T9777] should_fail_ex.cold+0x5/0xa [ 333.834521][ T9777] get_futex_key+0x1d0/0x14f0 [ 333.834617][ T9777] ? __pfx_get_futex_key+0x10/0x10 [ 333.834863][ T9777] futex_wake+0xf4/0x5e0 [ 333.835008][ T9777] ? __pfx_futex_wake+0x10/0x10 [ 333.835083][ T9777] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 333.835158][ T9777] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 333.835354][ T9777] do_futex+0x2b2/0x440 [ 333.835419][ T9777] ? __pfx_do_futex+0x10/0x10 [ 333.835479][ T9777] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 333.835551][ T9777] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 333.835676][ T9777] __x64_sys_futex+0x34f/0x4d0 [ 333.835775][ T9777] ? __pfx___x64_sys_futex+0x10/0x10 [ 333.835812][ T9777] ? find_held_lock+0x2b/0x80 [ 333.835864][ T9777] ? trace_syscall_enter+0xcc/0x120 [ 333.835919][ T9777] ? trace_syscall_enter+0xcc/0x120 [ 333.836081][ T9777] do_syscall_64+0x123/0x790 [ 333.836206][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.836264][ T9777] RIP: 0033:0x7f8a0339e159 [ 333.836294][ T9777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.836311][ T9777] RSP: 002b:00007f8a015f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 333.836335][ T9777] RAX: ffffffffffffffda RBX: 00007f8a03625fa8 RCX: 00007f8a0339e159 [ 333.836349][ T9777] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8a03625fac [ 333.836362][ T9777] RBP: 00007f8a03625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 333.836376][ T9777] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 333.836390][ T9777] R13: 00007f8a03626038 R14: 00007fff9dd9d620 R15: 00007fff9dd9d708 [ 333.836637][ T9777] [ 335.664513][ T9793] netlink: 608 bytes leftover after parsing attributes in process `syz.0.1366'. [ 340.038829][ T9821] FAULT_INJECTION: forcing a failure. [ 340.038829][ T9821] name fail_futex, interval 1, probability 0, space 0, times 0 [ 340.038881][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.6.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.038907][ T9821] Tainted: [L]=SOFTLOCKUP [ 340.038921][ T9821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.038938][ T9821] Call Trace: [ 340.038966][ T9821] [ 340.038999][ T9821] dump_stack_lvl+0x100/0x190 [ 340.039095][ T9821] should_fail_ex.cold+0x5/0xa [ 340.039202][ T9821] get_futex_key+0x1d0/0x14f0 [ 340.039358][ T9821] ? __pfx_get_futex_key+0x10/0x10 [ 340.039663][ T9821] futex_wake+0xf4/0x5e0 [ 340.039767][ T9821] ? __pfx_futex_wake+0x10/0x10 [ 340.039829][ T9821] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 340.039969][ T9821] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 340.040104][ T9821] do_futex+0x2b2/0x440 [ 340.040228][ T9821] ? __pfx_do_futex+0x10/0x10 [ 340.040301][ T9821] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 340.040345][ T9821] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 340.040449][ T9821] __x64_sys_futex+0x34f/0x4d0 [ 340.040587][ T9821] ? __pfx___x64_sys_futex+0x10/0x10 [ 340.040613][ T9821] ? find_held_lock+0x2b/0x80 [ 340.040649][ T9821] ? trace_syscall_enter+0xcc/0x120 [ 340.040689][ T9821] ? trace_syscall_enter+0xcc/0x120 [ 340.040888][ T9821] do_syscall_64+0x123/0x790 [ 340.040968][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.041006][ T9821] RIP: 0033:0x7f8a0339e159 [ 340.041065][ T9821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.041094][ T9821] RSP: 002b:00007f8a015f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.041129][ T9821] RAX: ffffffffffffffda RBX: 00007f8a03625fa8 RCX: 00007f8a0339e159 [ 340.041149][ T9821] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8a03625fac [ 340.041168][ T9821] RBP: 00007f8a03625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 340.041183][ T9821] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 340.041193][ T9821] R13: 00007f8a03626038 R14: 00007fff9dd9d620 R15: 00007fff9dd9d708 [ 340.041443][ T9821] [ 340.334920][ T43] audit: type=1400 audit(1790408073.698:729): avc: denied { setopt } for pid=9824 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 341.613232][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 343.685863][ T9850] syzkaller0: entered promiscuous mode [ 343.685930][ T9850] syzkaller0: entered allmulticast mode [ 346.186334][ T9864] FAULT_INJECTION: forcing a failure. [ 346.186334][ T9864] name fail_futex, interval 1, probability 0, space 0, times 0 [ 346.186375][ T9864] CPU: 2 UID: 0 PID: 9864 Comm: syz.0.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.186396][ T9864] Tainted: [L]=SOFTLOCKUP [ 346.186404][ T9864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.186416][ T9864] Call Trace: [ 346.186431][ T9864] [ 346.186449][ T9864] dump_stack_lvl+0x100/0x190 [ 346.186541][ T9864] should_fail_ex.cold+0x5/0xa [ 346.186584][ T9864] ? rb_commit+0x129/0x9d0 [ 346.186690][ T9864] get_futex_key+0xf72/0x14f0 [ 346.186787][ T9864] ? __pfx_get_futex_key+0x10/0x10 [ 346.186873][ T9864] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 346.187033][ T9864] futex_wake+0xf4/0x5e0 [ 346.187080][ T9864] ? trace_event_buffer_commit+0x20a/0xa80 [ 346.187222][ T9864] ? __pfx_futex_wake+0x10/0x10 [ 346.187264][ T9864] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 346.187318][ T9864] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 346.187508][ T9864] do_futex+0x2b2/0x440 [ 346.187580][ T9864] ? __pfx_do_futex+0x10/0x10 [ 346.187613][ T9864] ? __might_fault+0xc5/0x140 [ 346.187801][ T9864] mm_exit_exec_release+0x256/0x2f0 [ 346.187879][ T9864] do_exit+0x707/0x2ae0 [ 346.187944][ T9864] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 346.188073][ T9864] ? __pfx_do_exit+0x10/0x10 [ 346.188121][ T9864] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 346.188189][ T9864] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 346.188385][ T9864] do_group_exit+0xd5/0x2a0 [ 346.188498][ T9864] get_signal+0x1ec7/0x21e0 [ 346.188864][ T9864] ? __pfx_get_signal+0x10/0x10 [ 346.188939][ T9864] ? trace_event_buffer_commit+0x20a/0xa80 [ 346.189211][ T9864] arch_do_signal_or_restart+0x91/0x7e0 [ 346.189263][ T9864] ? trace_event_raw_event_preemptirq_template+0x13f/0x1d0 [ 346.189327][ T9864] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.189687][ T9864] ? exit_to_user_mode_loop+0x57/0x700 [ 346.189840][ T9864] exit_to_user_mode_loop+0x139/0x700 [ 346.189916][ T9864] ? rcu_is_watching+0x13/0xc0 [ 346.190097][ T9864] do_syscall_64+0x661/0x790 [ 346.190203][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.190251][ T9864] RIP: 0033:0x7ff27a99e159 [ 346.190334][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.190360][ T9864] RSP: 002b:00007ff278bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.190410][ T9864] RAX: fffffffffffffe00 RBX: 00007ff27ac26098 RCX: 00007ff27a99e159 [ 346.190438][ T9864] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff27ac26098 [ 346.190457][ T9864] RBP: 00007ff27ac26090 R08: 0000000000000000 R09: 0000000000000000 [ 346.190475][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.190493][ T9864] R13: 00007ff27ac26128 R14: 00007ffd819b1600 R15: 00007ffd819b16e8 [ 346.190740][ T9864] [ 348.233826][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'. [ 348.477917][ T9877] syzkaller0: entered promiscuous mode [ 348.486287][ T9877] syzkaller0: entered allmulticast mode [ 349.805767][ T9892] gadgetfs: bound to dummy_udc driver [ 354.220204][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 354.221001][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.503348][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.309098][ T9961] FAULT_INJECTION: forcing a failure. [ 362.309098][ T9961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.309150][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.6.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.309176][ T9961] Tainted: [L]=SOFTLOCKUP [ 362.309191][ T9961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.309209][ T9961] Call Trace: [ 362.309239][ T9961] [ 362.309271][ T9961] dump_stack_lvl+0x100/0x190 [ 362.309340][ T9961] should_fail_ex.cold+0x5/0xa [ 362.309468][ T9961] _copy_from_iter+0x1f4/0x1690 [ 362.309630][ T9961] ? __pfx__copy_from_iter+0x10/0x10 [ 362.309909][ T9961] tun_get_user+0x265/0x3cc0 [ 362.310096][ T9961] ? trace_event_buffer_commit+0x20a/0xa80 [ 362.310202][ T9961] ? __pfx_tun_get_user+0x10/0x10 [ 362.310295][ T9961] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 362.310334][ T9961] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 362.310516][ T9961] ? find_held_lock+0x2b/0x80 [ 362.310567][ T9961] ? tun_get+0x191/0x370 [ 362.310618][ T9961] ? tun_get+0x191/0x370 [ 362.310782][ T9961] tun_chr_write_iter+0xdc/0x200 [ 362.310921][ T9961] vfs_write+0x6af/0x1050 [ 362.310986][ T9961] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 362.311068][ T9961] ? __pfx_vfs_write+0x10/0x10 [ 362.311099][ T9961] ? find_held_lock+0x2b/0x80 [ 362.311472][ T9961] ksys_write+0x12a/0x250 [ 362.311505][ T9961] ? __pfx_ksys_write+0x10/0x10 [ 362.311528][ T9961] ? trace_syscall_enter+0xcc/0x120 [ 362.311726][ T9961] do_syscall_64+0x123/0x790 [ 362.311796][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.311827][ T9961] RIP: 0033:0x7f8a0339e159 [ 362.311875][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.311895][ T9961] RSP: 002b:00007f8a015f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.311926][ T9961] RAX: ffffffffffffffda RBX: 00007f8a03625fa0 RCX: 00007f8a0339e159 [ 362.311943][ T9961] RDX: 0000000000000097 RSI: 00002000000003c0 RDI: 0000000000000003 [ 362.311963][ T9961] RBP: 00007f8a015f6090 R08: 0000000000000000 R09: 0000000000000000 [ 362.311980][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.311997][ T9961] R13: 00007f8a03626038 R14: 00007f8a03625fa0 R15: 00007fff9dd9d708 [ 362.312248][ T9961] [ 364.116774][ T43] audit: type=1400 audit(1790408097.468:730): avc: denied { set_context_mgr } for pid=9963 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 364.148180][ T9969] binder: 9963:9969 ioctl c0306201 200000000080 returned -14 [ 365.883846][ T43] audit: type=1400 audit(1790408099.228:731): avc: denied { create } for pid=9975 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 365.905670][ T43] audit: type=1400 audit(1790408099.268:732): avc: denied { write } for pid=9975 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 369.022053][ T43] audit: type=1400 audit(1790408102.378:733): avc: denied { write } for pid=9984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.152805][ T43] audit: type=1400 audit(1790408104.518:734): avc: denied { write } for pid=9999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.946681][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 373.289216][T10008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.511864][ T43] audit: type=1400 audit(1790408106.878:735): avc: denied { write } for pid=10013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.083831][ T43] audit: type=1400 audit(1790408108.438:736): avc: denied { read write } for pid=10025 comm="syz.6.1437" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 375.111104][ T43] audit: type=1400 audit(1790408108.448:737): avc: denied { open } for pid=10025 comm="syz.6.1437" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 375.122886][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1437'. [ 375.594261][ T43] audit: type=1400 audit(1790408108.958:738): avc: denied { write } for pid=10028 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.216918][ T43] audit: type=1400 audit(1790408110.578:739): avc: denied { write } for pid=10041 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.193662][T10047] FAULT_INJECTION: forcing a failure. [ 378.193662][T10047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.193698][T10047] CPU: 3 UID: 0 PID: 10047 Comm: syz.0.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.193718][T10047] Tainted: [L]=SOFTLOCKUP [ 378.193728][T10047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.193740][T10047] Call Trace: [ 378.193757][T10047] [ 378.193777][T10047] dump_stack_lvl+0x100/0x190 [ 378.193878][T10047] should_fail_ex.cold+0x5/0xa [ 378.193994][T10047] _copy_from_user+0x2e/0xd0 [ 378.194055][T10047] copy_msghdr_from_user+0x9f/0x4c0 [ 378.194125][T10047] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 378.194393][T10047] ___sys_recvmsg+0xdd/0x1a0 [ 378.194493][T10047] ? __pfx____sys_recvmsg+0x10/0x10 [ 378.194530][T10047] ? lock_acquire+0x1d1/0x380 [ 378.194935][T10047] do_recvmmsg+0x2f3/0x740 [ 378.195056][T10047] ? __pfx_do_recvmmsg+0x10/0x10 [ 378.195500][T10047] __x64_sys_recvmmsg+0x22a/0x280 [ 378.195564][T10047] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 378.195597][T10047] ? trace_syscall_enter+0xcc/0x120 [ 378.195785][T10047] do_syscall_64+0x123/0x790 [ 378.195868][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.195906][T10047] RIP: 0033:0x7ff27a99e159 [ 378.195970][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.195992][T10047] RSP: 002b:00007ff27b78e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 378.196027][T10047] RAX: ffffffffffffffda RBX: 00007ff27ac25fa0 RCX: 00007ff27a99e159 [ 378.196045][T10047] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 378.196055][T10047] RBP: 00007ff27b78e090 R08: 0000000000000000 R09: 0000000000000000 [ 378.196065][T10047] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 378.196076][T10047] R13: 00007ff27ac26038 R14: 00007ff27ac25fa0 R15: 00007ffd819b16e8 [ 378.196313][T10047] [ 378.355266][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.355622][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.454655][ T43] audit: type=1400 audit(1790408111.798:740): avc: denied { mounton } for pid=10049 comm="syz.5.1446" path="/204/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 378.756044][ T43] audit: type=1400 audit(1790408112.118:741): avc: denied { read } for pid=10045 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 378.812001][ T43] audit: type=1400 audit(1790408112.178:742): avc: denied { listen } for pid=10045 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 379.051916][T10060] FAULT_INJECTION: forcing a failure. [ 379.051916][T10060] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 379.051971][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.0.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.051998][T10060] Tainted: [L]=SOFTLOCKUP [ 379.052014][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.052033][T10060] Call Trace: [ 379.052063][T10060] [ 379.052075][T10060] dump_stack_lvl+0x100/0x190 [ 379.052145][T10060] should_fail_ex.cold+0x5/0xa [ 379.052181][T10060] ? prepare_alloc_pages+0x16d/0x5b0 [ 379.052307][T10060] should_fail_alloc_page+0xeb/0x140 [ 379.052394][T10060] prepare_alloc_pages+0x1f0/0x5b0 [ 379.052507][T10060] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 379.052654][T10060] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 379.052763][T10060] ? check_buffer+0x13f/0x820 [ 379.052825][T10060] ? __pfx_trace_clock_local+0x10/0x10 [ 379.052958][T10060] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.053066][T10060] ? __pfx_trace_clock_local+0x10/0x10 [ 379.053198][T10060] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 379.053420][T10060] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 379.053526][T10060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.053596][T10060] ? policy_nodemask+0xed/0x4f0 [ 379.053725][T10060] alloc_pages_mpol+0x201/0x550 [ 379.053811][T10060] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.053864][T10060] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 379.054049][T10060] folio_alloc_mpol_noprof+0x36/0x260 [ 379.054122][T10060] vma_alloc_folio_noprof+0xed/0x1d0 [ 379.054176][T10060] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 379.054392][T10060] do_anonymous_page+0xac9/0x2050 [ 379.054605][T10060] ? __pfx_do_anonymous_page+0x10/0x10 [ 379.054653][T10060] ? rcu_read_unlock+0x2d/0xb0 [ 379.054684][T10060] ? rcu_read_unlock+0x2d/0xb0 [ 379.054726][T10060] ? __pte_offset_map+0x179/0x310 [ 379.054856][T10060] __handle_mm_fault+0x1ff3/0x2f60 [ 379.055019][T10060] ? __pfx___handle_mm_fault+0x10/0x10 [ 379.055052][T10060] ? __pfx_mt_find+0x10/0x10 [ 379.055400][T10060] ? find_vma+0xbf/0x140 [ 379.055471][T10060] ? __pfx_find_vma+0x10/0x10 [ 379.055573][T10060] handle_mm_fault+0x363/0xa20 [ 379.055754][T10060] do_user_addr_fault+0x745/0x12f0 [ 379.055944][T10060] exc_page_fault+0x6f/0xd0 [ 379.056050][T10060] asm_exc_page_fault+0x26/0x30 [ 379.056099][T10060] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 379.056142][T10060] Code: 89 ee 48 89 ef e8 b1 d0 e0 fc 4d 85 ff 75 26 e8 c7 d6 e0 fc 89 de 4c 89 e7 e8 bd 46 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 a1 d6 e0 fc 48 89 d8 5b 5d 41 [ 379.056158][T10060] RSP: 0018:ffffc90023c77c28 EFLAGS: 00050246 [ 379.056176][T10060] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 [ 379.056188][T10060] RDX: 0000000000000001 RSI: ffff8880482cc00e RDI: 0000200000004600 [ 379.056200][T10060] RBP: 0000200000004600 R08: 0000000000000000 R09: ffffed1009059801 [ 379.056213][T10060] R10: ffff8880482cc00e R11: 0000000000000001 R12: ffff8880482cc00e [ 379.056226][T10060] R13: 0000200000004601 R14: 00007ffffffff000 R15: 0000000000000000 [ 379.056456][T10060] ? _copy_to_user+0x93/0xd0 [ 379.056545][T10060] tomoyo_flush+0x161/0x520 [ 379.056721][T10060] tomoyo_read_control+0x123/0x540 [ 379.056755][T10060] ? tomoyo_read_control+0x115/0x540 [ 379.056848][T10060] ? __pfx_tomoyo_read+0x10/0x10 [ 379.056946][T10060] vfs_read+0x1e4/0xb40 [ 379.057029][T10060] ? lock_acquire+0x1d1/0x380 [ 379.057060][T10060] ? __fget_files+0x34/0x3d0 [ 379.057106][T10060] ? __pfx_vfs_read+0x10/0x10 [ 379.057135][T10060] ? find_held_lock+0x2b/0x80 [ 379.057209][T10060] ? __fget_files+0x215/0x3d0 [ 379.057383][T10060] ? __fget_files+0x21f/0x3d0 [ 379.057594][T10060] ksys_read+0x12a/0x250 [ 379.057649][T10060] ? __pfx_ksys_read+0x10/0x10 [ 379.057671][T10060] ? trace_syscall_enter+0xcc/0x120 [ 379.057859][T10060] do_syscall_64+0x123/0x790 [ 379.057949][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.057978][T10060] RIP: 0033:0x7ff27a99e159 [ 379.058023][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.058042][T10060] RSP: 002b:00007ff27b78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.058070][T10060] RAX: ffffffffffffffda RBX: 00007ff27ac25fa0 RCX: 00007ff27a99e159 [ 379.058087][T10060] RDX: 000000000000206a RSI: 0000200000004600 RDI: 0000000000000003 [ 379.058104][T10060] RBP: 00007ff27b78e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.058120][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.058137][T10060] R13: 00007ff27ac26038 R14: 00007ff27ac25fa0 R15: 00007ffd819b16e8 [ 379.058397][T10060] [ 380.387426][T10071] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1451'. [ 381.226204][T10076] Bluetooth: MGMT ver 1.23 [ 381.551207][T10080] FAULT_INJECTION: forcing a failure. [ 381.551207][T10080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.551267][T10080] CPU: 3 UID: 0 PID: 10080 Comm: syz.6.1455 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.551291][T10080] Tainted: [L]=SOFTLOCKUP [ 381.551298][T10080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.551309][T10080] Call Trace: [ 381.551323][T10080] [ 381.551338][T10080] dump_stack_lvl+0x100/0x190 [ 381.551423][T10080] should_fail_ex.cold+0x5/0xa [ 381.551568][T10080] _copy_from_iter+0x1f4/0x1690 [ 381.551644][T10080] ? __asan_memset+0x23/0x50 [ 381.551714][T10080] ? __pfx__copy_from_iter+0x10/0x10 [ 381.551775][T10080] ? __pfx___alloc_skb+0x10/0x10 [ 381.552008][T10080] netlink_sendmsg+0x808/0xda0 [ 381.552162][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.552263][T10080] ? selinux_socket_sendmsg+0x198/0x2f0 [ 381.552415][T10080] ____sys_sendmsg+0xa4d/0xbe0 [ 381.552442][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.552535][T10080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.552686][T10080] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 381.552829][T10080] ___sys_sendmsg+0x190/0x1e0 [ 381.552954][T10080] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.552989][T10080] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 381.553238][T10080] ? find_held_lock+0x2b/0x80 [ 381.553593][T10080] __sys_sendmsg+0x160/0x210 [ 381.553707][T10080] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.554010][T10080] do_syscall_64+0x123/0x790 [ 381.554088][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.554125][T10080] RIP: 0033:0x7f8a0339e159 [ 381.554183][T10080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.554205][T10080] RSP: 002b:00007f8a015f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.554240][T10080] RAX: ffffffffffffffda RBX: 00007f8a03625fa0 RCX: 00007f8a0339e159 [ 381.554259][T10080] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 381.554278][T10080] RBP: 00007f8a015f6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.554289][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.554299][T10080] R13: 00007f8a03626038 R14: 00007f8a03625fa0 R15: 00007fff9dd9d708 [ 381.554542][T10080] [ 382.757340][T10091] ip6t_REJECT: ECHOREPLY is not supported [ 384.553860][T10104] cgroup: none used incorrectly [ 387.339852][T10123] No control pipe specified [ 387.357840][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 387.408381][ T43] audit: type=1400 audit(1790408120.768:743): avc: denied { map } for pid=10124 comm="syz.0.1466" path="/dev/video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 390.509080][ T1040] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 390.747537][ T43] audit: type=1400 audit(1790408124.098:744): avc: denied { setopt } for pid=10140 comm="syz.6.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.816436][ T1040] usb 5-1: not running at top speed; connect to a high speed hub [ 390.816578][ T1040] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 390.895836][ T1040] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.895944][ T1040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.897762][ T43] audit: type=1400 audit(1790408124.258:745): avc: denied { listen } for pid=10140 comm="syz.6.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.920857][ T5088] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 390.983384][ T43] audit: type=1400 audit(1790408124.348:746): avc: denied { bind } for pid=10140 comm="syz.6.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 391.350129][ T1040] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 391.533962][T10142] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1471'. [ 391.893949][ T1040] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 393.096242][ T1357] usb 5-1: USB disconnect, device number 4 [ 393.476059][ T1357] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 393.565490][ T1357] cyberjack 5-1:1.0: device disconnected [ 394.873867][ T43] audit: type=1400 audit(1790408128.228:747): avc: denied { accept } for pid=10153 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.854029][T10197] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.862630][T10197] FAULT_INJECTION: forcing a failure. [ 403.862630][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.862679][T10197] CPU: 2 UID: 0 PID: 10197 Comm: syz.0.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.862707][T10197] Tainted: [L]=SOFTLOCKUP [ 403.862722][T10197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.862740][T10197] Call Trace: [ 403.862770][T10197] [ 403.862802][T10197] dump_stack_lvl+0x100/0x190 [ 403.862902][T10197] should_fail_ex.cold+0x5/0xa [ 403.863005][T10197] _copy_to_user+0x32/0xd0 [ 403.863140][T10197] simple_read_from_buffer+0xcb/0x170 [ 403.863231][T10197] proc_fail_nth_read+0x1af/0x230 [ 403.863327][T10197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.863497][T10197] ? rw_verify_area+0xce/0x6d0 [ 403.863544][T10197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.863606][T10197] vfs_read+0x1e4/0xb40 [ 403.863694][T10197] ? lock_acquire+0x1d1/0x380 [ 403.863748][T10197] ? __fget_files+0x34/0x3d0 [ 403.863828][T10197] ? __pfx_vfs_read+0x10/0x10 [ 403.863867][T10197] ? find_held_lock+0x2b/0x80 [ 403.863913][T10197] ? __fget_files+0x215/0x3d0 [ 403.864083][T10197] ? __fget_files+0x21f/0x3d0 [ 403.864285][T10197] ksys_read+0x12a/0x250 [ 403.864351][T10197] ? __pfx_ksys_read+0x10/0x10 [ 403.864403][T10197] ? trace_syscall_enter+0xcc/0x120 [ 403.864701][T10197] do_syscall_64+0x123/0x790 [ 403.864842][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.864893][T10197] RIP: 0033:0x7ff27a95e98e [ 403.864967][T10197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.864984][T10197] RSP: 002b:00007ff27b78dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.865006][T10197] RAX: ffffffffffffffda RBX: 00007ff27b78e6c0 RCX: 00007ff27a95e98e [ 403.865020][T10197] RDX: 000000000000000f RSI: 00007ff27b78e0a0 RDI: 0000000000000004 [ 403.865033][T10197] RBP: 00007ff27b78e090 R08: 0000000000000000 R09: 0000000000000000 [ 403.865046][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.865060][T10197] R13: 00007ff27ac26038 R14: 00007ff27ac25fa0 R15: 00007ffd819b16e8 [ 403.865346][T10197] qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 409.536343][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.545947][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.554602][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.579589][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.592274][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.760566][ T5088] Bluetooth: hci2: command tx timeout [ 413.839235][ T5088] Bluetooth: hci2: command tx timeout [ 415.394490][T10236] netlink: 608 bytes leftover after parsing attributes in process `syz.0.1494'. [ 415.918418][ T5088] Bluetooth: hci2: command tx timeout [ 418.002434][ T5088] Bluetooth: hci2: command tx timeout [ 418.353557][T10214] lo speed is unknown, defaulting to 1000 [ 418.516023][ T5088] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 419.407125][T10252] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.906906][ T43] audit: type=1400 audit(1790408153.268:748): avc: denied { accept } for pid=10253 comm="syz.1.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.198211][T10276] FAULT_INJECTION: forcing a failure. [ 423.198211][T10276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.198265][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.5.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.198288][T10276] Tainted: [L]=SOFTLOCKUP [ 423.198296][T10276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.198306][T10276] Call Trace: [ 423.198320][T10276] [ 423.198336][T10276] dump_stack_lvl+0x100/0x190 [ 423.198418][T10276] should_fail_ex.cold+0x5/0xa [ 423.198557][T10276] _copy_from_user+0x2e/0xd0 [ 423.198609][T10276] copy_msghdr_from_user+0x9f/0x4c0 [ 423.198671][T10276] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.198866][T10276] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 423.198957][T10276] ___sys_sendmsg+0x106/0x1e0 [ 423.199083][T10276] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.199324][T10276] ? __fget_files+0x34/0x3d0 [ 423.199584][T10276] ? __pfx___might_resched+0x10/0x10 [ 423.199697][T10276] __sys_sendmmsg+0x20c/0x440 [ 423.199848][T10276] ? __pfx___sys_sendmmsg+0x10/0x10 [ 423.200284][T10276] ? find_held_lock+0x2b/0x80 [ 423.200343][T10276] ? trace_syscall_enter+0xcc/0x120 [ 423.200386][T10276] ? trace_syscall_enter+0xcc/0x120 [ 423.200481][T10276] __x64_sys_sendmmsg+0x9c/0x100 [ 423.200522][T10276] ? trace_syscall_enter+0xd6/0x120 [ 423.200598][T10276] do_syscall_64+0x123/0x790 [ 423.200696][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.200724][T10276] RIP: 0033:0x7f38f619e159 [ 423.200766][T10276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.200785][T10276] RSP: 002b:00007f38f7086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.200813][T10276] RAX: ffffffffffffffda RBX: 00007f38f6425fa0 RCX: 00007f38f619e159 [ 423.200829][T10276] RDX: 0000000000000007 RSI: 0000200000001340 RDI: 0000000000000003 [ 423.200844][T10276] RBP: 00007f38f7086090 R08: 0000000000000000 R09: 0000000000000000 [ 423.200860][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.200876][T10276] R13: 00007f38f6426038 R14: 00007f38f6425fa0 R15: 00007ffdaafb5ba8 [ 423.201160][T10276] [ 425.428832][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.430512][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.431661][T10214] bridge_slave_0: entered allmulticast mode [ 425.452064][T10214] bridge_slave_0: entered promiscuous mode [ 425.512262][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.523150][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.524326][T10214] bridge_slave_1: entered allmulticast mode [ 425.588250][T10214] bridge_slave_1: entered promiscuous mode [ 426.323983][ T43] audit: type=1400 audit(1790408159.688:749): avc: denied { getopt } for pid=10288 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.519564][T10299] binder: 10290:10299 ioctl 400c620e 200000000480 returned -22 [ 426.893674][T10300] FAULT_INJECTION: forcing a failure. [ 426.893674][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.893732][T10300] CPU: 2 UID: 0 PID: 10300 Comm: syz.5.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.893768][T10300] Tainted: [L]=SOFTLOCKUP [ 426.893786][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.893806][T10300] Call Trace: [ 426.893841][T10300] [ 426.893874][T10300] dump_stack_lvl+0x100/0x190 [ 426.893956][T10300] should_fail_ex.cold+0x5/0xa [ 426.894084][T10300] _copy_to_user+0x32/0xd0 [ 426.894200][T10300] io_uring_setup.cold+0x14b9/0x1cde [ 426.894306][T10300] ? __pfx_io_uring_setup+0x10/0x10 [ 426.894343][T10300] ? find_held_lock+0x2b/0x80 [ 426.894763][T10300] ? find_held_lock+0x2b/0x80 [ 426.894805][T10300] ? trace_syscall_enter+0xcc/0x120 [ 426.894849][T10300] ? trace_syscall_enter+0xcc/0x120 [ 426.895030][T10300] __x64_sys_io_uring_setup+0xc2/0x170 [ 426.895074][T10300] do_syscall_64+0x123/0x790 [ 426.895163][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.895206][T10300] RIP: 0033:0x7f38f619e159 [ 426.895270][T10300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.895293][T10300] RSP: 002b:00007f38f7043fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 426.895329][T10300] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f38f619e159 [ 426.895340][T10300] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000f00 [ 426.895350][T10300] RBP: 00007f38f623506b R08: 0000000000000000 R09: 00007f38f70449c8 [ 426.895363][T10300] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000140 [ 426.895375][T10300] R13: 0000200000000180 R14: 0000200000000100 R15: 00007ffdaafb5ba8 [ 426.895622][T10300] [ 427.063251][T10299] geneve1: entered allmulticast mode [ 427.280001][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.309004][ T5088] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 427.493587][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.502526][T10214] team0: Port device team_slave_0 added [ 428.558409][T10214] team0: Port device team_slave_1 added [ 429.113479][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.113513][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.113537][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.135505][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.135523][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.135546][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.449008][ T43] audit: type=1400 audit(1790408162.778:750): avc: denied { write } for pid=10305 comm="syz.5.1512" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 430.043986][T10326] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 430.211057][T10214] hsr_slave_0: entered promiscuous mode [ 430.223120][T10214] hsr_slave_1: entered promiscuous mode [ 430.243916][T10214] debugfs: 'hsr0' already exists in 'hsr' [ 430.244013][T10214] Cannot create hsr debugfs directory [ 431.817630][ T43] audit: type=1400 audit(1790408165.178:751): avc: denied { bind } for pid=10329 comm="syz.5.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 431.883483][ T43] audit: type=1400 audit(1790408165.248:752): avc: denied { map } for pid=10329 comm="syz.5.1517" path="socket:[26106]" dev="sockfs" ino=26106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 431.921325][ T43] audit: type=1400 audit(1790408165.268:753): avc: denied { read write } for pid=10329 comm="syz.5.1517" path="socket:[26106]" dev="sockfs" ino=26106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 432.799121][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1519'. [ 434.276076][T10349] 9p: Bad value for 'rfdno' [ 434.343988][T10355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1521'. [ 435.159442][ T43] audit: type=1400 audit(1790408168.518:754): avc: denied { write } for pid=10352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.151883][T10214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.332093][T10214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.395142][T10214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.523337][T10214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.534384][T10214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.540287][ T5738] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 436.603055][T10214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.615921][T10214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.706411][T10214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.765536][ T5738] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 436.813878][ T5738] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.814109][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 436.814133][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 436.814157][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 436.814182][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 436.814207][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 436.814233][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 436.814260][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 436.814289][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 436.814318][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 436.814347][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 436.814378][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 436.814410][ T5738] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.814430][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.814447][ T5738] usb 10-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 436.937618][ T5738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.937650][ T5738] usb 10-1: Product: syz [ 436.937671][ T5738] usb 10-1: Manufacturer: syz [ 436.937698][ T5738] usb 10-1: SerialNumber: syz [ 437.026332][ T43] audit: type=1400 audit(1790408170.388:755): avc: denied { write } for pid=10367 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.129625][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.149504][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.150876][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.189494][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.214628][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.215963][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.217334][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.232944][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.234195][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.235021][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.236231][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 437.346338][ T5738] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 437.447950][ T5738] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 437.605161][ T5738] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 437.634946][ T5738] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 437.711595][ T5738] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 438.672327][T10365] bridge_slave_0: invalid flags given to default FDB implementation [ 439.797001][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797389][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.570446][ T5738] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 440.738199][ T43] audit: type=1400 audit(1790408174.098:756): avc: denied { write } for pid=10390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.793965][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 440.822585][ T5738] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 440.886289][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 440.991568][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 440.991592][ T5738] usb 5-1: Product: syz [ 440.991606][ T5738] usb 5-1: Manufacturer: syz [ 440.991621][ T5738] usb 5-1: SerialNumber: syz [ 441.176147][ T5738] usb 5-1: config 0 descriptor?? [ 441.227160][T10395] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 441.267068][ T1040] usb 10-1: USB disconnect, device number 6 [ 441.424730][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.481253][ T5738] hub 5-1:0.0: bad descriptor, ignoring hub [ 441.481386][ T5738] hub 5-1:0.0: probe with driver hub failed with error -5 [ 442.202838][ T43] audit: type=1400 audit(1790408175.558:757): avc: denied { listen } for pid=10394 comm="syz.0.1527" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 442.389872][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.823985][ T1040] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 442.838188][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.839087][T10409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.025740][ T43] audit: type=1400 audit(1790408176.388:758): avc: denied { recv } for pid=5974 comm="kworker/u33:26" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 443.079406][ T1040] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 443.158682][ T1040] keyspan 10-1:1.0: device disconnected [ 443.326653][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.329669][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.297082][ T6843] usb 5-1: USB disconnect, device number 5 [ 444.389956][ T43] audit: type=1400 audit(1790408177.748:759): avc: denied { write } for pid=10411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.758876][T10427] tipc: New replicast peer: 127.0.0.1 [ 445.781454][T10427] tipc: Enabled bearer , priority 10 [ 447.422132][T10440] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.023137][ T43] audit: type=1400 audit(1790408181.388:760): avc: denied { write } for pid=10437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.535329][T10448] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1535'. [ 449.302544][ T43] audit: type=1400 audit(1790408182.668:761): avc: denied { connect } for pid=10451 comm="syz.0.1536" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 449.711539][ T43] audit: type=1400 audit(1790408183.068:762): avc: denied { write } for pid=10459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.850297][T10468] can0: slcan on ttyS3. [ 451.313262][T10470] can0 (unregistered): slcan off ttyS3. [ 452.566813][ T43] audit: type=1400 audit(1790408185.918:763): avc: denied { mounton } for pid=10482 comm="syz.5.1543" path="/232/tracefs_dir" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 452.954231][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.939750][ T5815] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 454.175817][ T5815] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 454.265863][ T5815] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.265924][ T5815] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.266145][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.400950][ T5815] usb 10-1: config 0 descriptor?? [ 454.981285][ T5815] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 454.984231][ T5815] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 454.994876][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'. [ 455.123694][ T5815] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.0005/input/input17 [ 455.666666][ T5815] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 456.489586][ T6843] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 457.003309][T10214] veth0_vlan: entered promiscuous mode [ 457.009137][ T43] audit: type=1400 audit(1790408190.348:764): avc: denied { setattr } for pid=10510 comm="syz.0.1547" name="NETLINK" dev="sockfs" ino=27829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.416722][T10214] veth1_vlan: entered promiscuous mode [ 458.299302][T10214] veth0_macvtap: entered promiscuous mode [ 458.523268][T10214] veth1_macvtap: entered promiscuous mode [ 458.542690][ T5877] usb 10-1: USB disconnect, device number 7 [ 458.834715][T10214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.143704][T10214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.479902][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.480110][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.480341][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.480492][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.970092][T10409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.970145][T10409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.612075][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.612099][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.199064][T10541] netlink: 'syz.0.1556': attribute type 2 has an invalid length. [ 463.639937][ T43] audit: type=1400 audit(1790408197.008:765): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 464.206474][ T43] audit: type=1400 audit(1790408197.568:766): avc: denied { ioctl } for pid=10548 comm="syz.0.1559" path="socket:[26316]" dev="sockfs" ino=26316 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 464.225995][T10546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10546 comm=syz.1.1558 [ 465.569704][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 465.569938][ T43] audit: type=1400 audit(1790408198.928:767): avc: denied { name_bind } for pid=10555 comm="syz.7.1562" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 465.805732][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 465.852259][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.852499][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 465.852532][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 465.852565][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 465.852582][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 465.852600][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 465.852619][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 465.852638][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 465.852659][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 465.852681][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 465.852703][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 465.852726][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 465.852750][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.852773][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.852799][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 465.944549][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.944589][ T10] usb 5-1: Product: syz [ 465.944622][ T10] usb 5-1: Manufacturer: syz [ 465.944649][ T10] usb 5-1: SerialNumber: syz [ 466.118874][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.130936][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.139194][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.141021][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.142886][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.144233][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.182737][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.183670][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.184453][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.185301][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.186142][T10554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.247154][ T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 466.454475][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 466.557610][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 466.698835][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 466.845605][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 467.443837][T10554] bridge_slave_0: invalid flags given to default FDB implementation [ 467.687576][ T10] usb 5-1: USB disconnect, device number 6 [ 468.527578][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 468.692567][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 468.729832][ T10] keyspan 5-1:1.0: device disconnected [ 471.572993][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1572'. [ 472.643089][T10604] fuse: fd is not a fuse device [ 474.008649][ T25] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 474.185201][ T25] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 474.207779][ T25] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.209333][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 474.209357][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 474.209379][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 474.209401][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 474.209424][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 474.209448][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 474.209473][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 474.209499][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 474.209525][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 474.209553][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 474.209581][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 474.209610][ T25] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.209639][ T25] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.209670][ T25] usb 12-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 474.311269][ T25] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.311323][ T25] usb 12-1: Product: syz [ 474.311359][ T25] usb 12-1: Manufacturer: syz [ 474.311380][ T25] usb 12-1: SerialNumber: syz [ 474.411218][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.412127][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.413062][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.413784][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.414557][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.415301][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.416049][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.416808][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.417622][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.447974][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.454340][T10615] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 474.484110][ T25] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 474.499605][ T25] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 7 [ 474.569139][ T25] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 474.667098][ T25] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 474.702198][ T25] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 475.678639][T10615] bridge_slave_0: invalid flags given to default FDB implementation [ 475.698792][ T1040] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 475.918898][ T1040] usb 5-1: Using ep0 maxpacket: 32 [ 476.024535][ T1040] usb 5-1: unable to get BOS descriptor or descriptor too short [ 476.025124][ T1040] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 476.049918][ T1040] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 476.049988][ T1040] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 476.050014][ T1040] usb 5-1: config 14 has no interface number 0 [ 476.050038][ T1040] usb 5-1: config 14 has no interface number 1 [ 476.050879][ T1040] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 476.050912][ T1040] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 476.050952][ T1040] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 476.050989][ T1040] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 476.051028][ T1040] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 476.051067][ T1040] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.051109][ T1040] usb 5-1: config 14 interface 57 has no altsetting 0 [ 476.051146][ T1040] usb 5-1: config 14 interface 228 has no altsetting 0 [ 476.136999][ T1040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.137061][ T1040] usb 5-1: Product: syz [ 476.137110][ T1040] usb 5-1: Manufacturer: syz [ 476.137157][ T1040] usb 5-1: SerialNumber: syz [ 476.974882][ T1040] legousbtower 5-1:14.57: interrupt endpoints not found [ 477.247666][ T10] usb 12-1: USB disconnect, device number 2 [ 477.454371][ T1040] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 477.521543][ T1040] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 477.844447][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 477.941444][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 478.011002][ T10] keyspan 12-1:1.0: device disconnected [ 479.644677][ T1040] usb 5-1: USB disconnect, device number 7 [ 479.989643][ T1040] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 482.629698][ T5877] wiimote 0005:057E:0330.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 482.670172][ T5877] wiimote 0005:057E:0330.0006: New device registered [ 482.688490][ T1040] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 482.729812][T10669] wiimote 0005:057E:0330.0006: Device removed [ 482.894526][ T1040] usb 12-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 483.003134][ T1040] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.003364][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 483.003389][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 483.003415][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 483.003441][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 483.003467][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 483.003495][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 483.003524][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 483.003553][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 483.003583][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 483.003614][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 483.003641][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 483.003660][ T1040] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.003678][ T1040] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.003696][ T1040] usb 12-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 483.136650][ T1040] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.136677][ T1040] usb 12-1: Product: syz [ 483.136694][ T1040] usb 12-1: Manufacturer: syz [ 483.136713][ T1040] usb 12-1: SerialNumber: syz [ 483.151678][T10668] can0: slcan on pts0. [ 483.353544][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.357245][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.389017][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.406697][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.417541][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.489812][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.490609][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.491371][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.538590][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.546391][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.553162][T10664] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 483.664371][ T1040] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 483.749039][ T1040] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 7 [ 483.768875][T10515] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 484.043877][T10667] can0 (unregistered): slcan off pts0. [ 484.101377][ T1040] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 484.277024][ T1040] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 484.413760][ T1040] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 484.531352][T10674] fido_id[10674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 484.622209][T10515] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input19 [ 484.654855][T10664] bridge_slave_0: invalid flags given to default FDB implementation [ 484.739282][T10515] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input20 [ 484.859938][T10515] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input18 [ 485.041561][ T43] audit: type=1400 audit(1790408218.398:768): avc: denied { create } for pid=10677 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 485.230580][T10685] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 487.649822][T10701] ceph: No mds server is up or the cluster is laggy [ 487.751247][T10689] bridge1: entered promiscuous mode [ 488.111773][T10689] bond2: (slave bridge1): making interface the new active one [ 488.187891][T10689] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 488.683170][ T1357] usb 12-1: USB disconnect, device number 3 [ 489.434154][ T1357] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 489.600549][ T1357] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 489.661705][ T1357] keyspan 12-1:1.0: device disconnected [ 489.702833][T10711] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1600'. [ 491.883242][ T43] audit: type=1400 audit(1790408225.248:769): avc: denied { read } for pid=10719 comm="syz.5.1604" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 491.914598][ T43] audit: type=1400 audit(1790408225.268:770): avc: denied { open } for pid=10719 comm="syz.5.1604" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 491.953718][ T43] audit: type=1400 audit(1790408225.318:771): avc: denied { ioctl } for pid=10719 comm="syz.5.1604" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 495.689993][T10731] bridge_slave_0: invalid flags given to default FDB implementation [ 497.113235][ T43] audit: type=1400 audit(1790408230.468:772): avc: denied { write } for pid=10737 comm="syz.0.1611" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 497.758497][ T5737] Bluetooth: hci0: command 0x0406 tx timeout [ 501.250537][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.251795][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.032193][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 506.455653][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1621'. [ 506.509444][ T43] audit: type=1400 audit(1790408239.868:773): avc: denied { mounton } for pid=10772 comm="syz.5.1623" path="/254/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 507.547536][ T43] audit: type=1400 audit(1790408240.908:774): avc: denied { connect } for pid=10780 comm="syz.7.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.906267][ T43] audit: type=1400 audit(1790408241.268:775): avc: denied { getopt } for pid=10782 comm="syz.0.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 508.446367][ T10] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 508.598741][ T10] usb 12-1: device descriptor read/64, error -71 [ 508.908353][ T10] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 509.068572][ T10] usb 12-1: device descriptor read/64, error -71 [ 509.182807][ T10] usb usb12-port1: attempt power cycle [ 509.568738][ T10] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 509.712966][ T10] usb 12-1: device descriptor read/8, error -71 [ 509.979053][ T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 510.059882][ T10] usb 12-1: device descriptor read/8, error -71 [ 510.178173][ T10] usb usb12-port1: unable to enumerate USB device [ 514.742401][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'. [ 515.277468][ T43] audit: type=1400 audit(1790408248.638:776): avc: denied { checkpoint_restore } for pid=10806 comm="syz.5.1633" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.481427][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1634'. [ 515.485637][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.485816][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.485913][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.486052][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.466280][T10821] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.309418][T10840] overlayfs: failed to clone upperpath [ 519.453700][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'. [ 521.439851][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1645'. [ 523.353684][T10865] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 524.489568][T10874] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1652'. [ 526.049452][ T5815] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 526.150090][T10885] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 526.270302][ T5815] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 526.284905][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.285156][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 526.285181][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 526.285206][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 526.285231][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 526.285257][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 526.285284][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 526.285312][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 526.285341][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 526.285371][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 526.285402][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 526.285434][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 526.285458][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.285474][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.285492][ T5815] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 526.310891][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.310930][ T5815] usb 5-1: Product: syz [ 526.310958][ T5815] usb 5-1: Manufacturer: syz [ 526.310986][ T5815] usb 5-1: SerialNumber: syz [ 526.455506][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.456421][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.457184][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.476448][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.477235][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.478202][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.494413][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.495177][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.495943][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.507934][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.518798][T10882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.569371][ T5815] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 526.587056][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 526.637887][ T5815] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 526.683841][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 526.719281][ T5815] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 526.842152][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1659'. [ 527.196561][ T5815] usb 5-1: USB disconnect, device number 8 [ 527.715858][ T5815] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 527.916849][ T5815] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 528.022795][ T5815] keyspan 5-1:1.0: device disconnected [ 530.060396][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1665'. [ 530.060452][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1665'. [ 530.865241][T10924] ------------[ cut here ]------------ [ 530.865273][T10924] current_phy->suspended [ 530.865304][T10924] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0xcbf/0x1540, CPU#0: syz.5.1666/10924 [ 530.873820][T10924] Modules linked in: [ 530.875165][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.5.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.878672][T10924] Tainted: [L]=SOFTLOCKUP [ 530.880068][T10924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.883385][T10924] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 530.885298][T10924] Code: 48 c7 c2 c0 4a c0 8c be 52 03 00 00 48 c7 c7 20 4b c0 8c c6 05 90 8d c5 09 01 e8 3c 6e 7f fa e9 c6 f8 ff ff e8 d2 ad a4 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 c4 ad a4 fa e8 df 5c 88 fa 31 ff 89 c5 [ 530.891854][T10924] RSP: 0018:ffffc9000394f530 EFLAGS: 00010283 [ 530.893849][T10924] RAX: 0000000000010513 RBX: ffff88802b36cd20 RCX: ffffc90025c46000 [ 530.896542][T10924] RDX: 0000000000080000 RSI: ffffffff876784de RDI: ffff8880248fcb00 [ 530.900026][T10924] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 530.903337][T10924] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff87677820 [ 530.906644][T10924] R13: 1ffff92000729eb0 R14: ffff88802b36c720 R15: 0000000000000005 [ 530.911390][T10924] FS: 00007f38f70446c0(0000) GS:ffff8880d5b52000(0000) knlGS:0000000000000000 [ 530.915466][T10924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.918575][T10924] CR2: 00007f38f7043ff8 CR3: 00000000001ef000 CR4: 0000000000352ef0 [ 530.921931][T10924] Call Trace: [ 530.923403][T10924] [ 530.924877][T10924] ? trace_event_raw_event_preemptirq_template+0x13f/0x1d0 [ 530.928107][T10924] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 530.931428][T10924] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 530.933698][T10924] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 530.936595][T10924] ? mark_held_locks+0x40/0x70 [ 530.939356][T10924] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 530.942516][T10924] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 530.944933][T10924] ieee802154_tx.isra.0+0x29f/0x570 [ 530.947285][T10924] ieee802154_subif_start_xmit+0xc8/0xf0 [ 530.949704][T10924] dev_hard_start_xmit+0x121/0x760 [ 530.952045][T10924] sch_direct_xmit+0x1b2/0xc70 [ 530.954149][T10924] ? lock_acquire+0x1d1/0x380 [ 530.956207][T10924] ? __pfx_sch_direct_xmit+0x10/0x10 [ 530.958580][T10924] ? do_raw_spin_lock+0x1f0/0x260 [ 530.960785][T10924] __dev_queue_xmit+0x27ac/0x4970 [ 530.963087][T10924] ? lock_acquire+0x1d1/0x380 [ 530.965238][T10924] ? __pfx___dev_queue_xmit+0x10/0x10 [ 530.967255][T10924] ? __might_fault+0xc5/0x140 [ 530.969471][T10924] ? __might_fault+0xc5/0x140 [ 530.971811][T10924] ? _copy_from_iter+0x270/0x1690 [ 530.973903][T10924] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 530.977321][T10924] ? __local_bh_enable_ip+0xa5/0x120 [ 530.979849][T10924] ? __local_bh_enable_ip+0xa5/0x120 [ 530.982264][T10924] raw_sendmsg+0x5b6/0x880 [ 530.984320][T10924] ? __pfx_raw_sendmsg+0x10/0x10 [ 530.986621][T10924] ? selinux_socket_sendmsg+0x198/0x2f0 [ 530.989315][T10924] ____sys_sendmsg+0xa4d/0xbe0 [ 530.991433][T10924] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 530.994247][T10924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.996881][T10924] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 531.000087][T10924] ___sys_sendmsg+0x190/0x1e0 [ 531.002184][T10924] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.004471][T10924] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 531.007433][T10924] ? find_held_lock+0x2b/0x80 [ 531.010583][T10924] __sys_sendmsg+0x160/0x210 [ 531.012499][T10924] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.015328][T10924] do_syscall_64+0x123/0x790 [ 531.017568][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.020168][T10924] RIP: 0033:0x7f38f619e159 [ 531.021930][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.030131][T10924] RSP: 002b:00007f38f7044028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.033691][T10924] RAX: ffffffffffffffda RBX: 00007f38f6426180 RCX: 00007f38f619e159 [ 531.037073][T10924] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000004 [ 531.040701][T10924] RBP: 00007f38f623506b R08: 0000000000000000 R09: 0000000000000000 [ 531.044346][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.048269][T10924] R13: 00007f38f6426218 R14: 00007f38f6426180 R15: 00007ffdaafb5ba8 [ 531.051894][T10924] [ 531.053255][T10924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 531.056305][T10924] CPU: 0 UID: 0 PID: 10924 Comm: syz.5.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.060829][T10924] Tainted: [L]=SOFTLOCKUP [ 531.062744][T10924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.067021][T10924] Call Trace: [ 531.068441][T10924] [ 531.069597][T10924] dump_stack_lvl+0x100/0x190 [ 531.071516][T10924] vpanic+0x553/0x970 [ 531.073103][T10924] ? __pfx_vpanic+0x10/0x10 [ 531.074891][T10924] panic+0xd1/0xe0 [ 531.076184][T10924] ? __pfx_panic+0x10/0x10 [ 531.077862][T10924] check_panic_on_warn.cold+0x19/0x34 [ 531.079577][T10924] ? hwsim_hw_xmit+0xcbf/0x1540 [ 531.081250][T10924] __warn.cold+0x191/0x318 [ 531.083027][T10924] __report_bug+0x30f/0x440 [ 531.084521][T10924] ? hwsim_hw_xmit+0xcbf/0x1540 [ 531.086331][T10924] ? __pfx___report_bug+0x10/0x10 [ 531.088095][T10924] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 531.090133][T10924] ? rb_commit+0x129/0x9d0 [ 531.091699][T10924] ? hwsim_hw_xmit+0xcbf/0x1540 [ 531.093390][T10924] report_bug+0xb3/0x220 [ 531.094887][T10924] ? hwsim_hw_xmit+0xcbf/0x1540 [ 531.096485][T10924] handle_bug+0x16a/0x2a0 [ 531.098033][T10924] exc_invalid_op+0x17/0x50 [ 531.099571][T10924] asm_exc_invalid_op+0x1a/0x20 [ 531.101391][T10924] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 531.103445][T10924] Code: 48 c7 c2 c0 4a c0 8c be 52 03 00 00 48 c7 c7 20 4b c0 8c c6 05 90 8d c5 09 01 e8 3c 6e 7f fa e9 c6 f8 ff ff e8 d2 ad a4 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 c4 ad a4 fa e8 df 5c 88 fa 31 ff 89 c5 [ 531.109909][T10924] RSP: 0018:ffffc9000394f530 EFLAGS: 00010283 [ 531.111822][T10924] RAX: 0000000000010513 RBX: ffff88802b36cd20 RCX: ffffc90025c46000 [ 531.114430][T10924] RDX: 0000000000080000 RSI: ffffffff876784de RDI: ffff8880248fcb00 [ 531.116937][T10924] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 531.119417][T10924] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff87677820 [ 531.121931][T10924] R13: 1ffff92000729eb0 R14: ffff88802b36c720 R15: 0000000000000005 [ 531.124443][T10924] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 531.126175][T10924] ? hwsim_hw_xmit+0xcbe/0x1540 [ 531.127874][T10924] ? trace_event_raw_event_preemptirq_template+0x13f/0x1d0 [ 531.130300][T10924] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 531.132773][T10924] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 531.134438][T10924] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 531.136712][T10924] ? mark_held_locks+0x40/0x70 [ 531.138318][T10924] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 531.140181][T10924] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 531.141900][T10924] ieee802154_tx.isra.0+0x29f/0x570 [ 531.143761][T10924] ieee802154_subif_start_xmit+0xc8/0xf0 [ 531.145970][T10924] dev_hard_start_xmit+0x121/0x760 [ 531.148083][T10924] sch_direct_xmit+0x1b2/0xc70 [ 531.149843][T10924] ? lock_acquire+0x1d1/0x380 [ 531.151365][T10924] ? __pfx_sch_direct_xmit+0x10/0x10 [ 531.153152][T10924] ? do_raw_spin_lock+0x1f0/0x260 [ 531.155196][T10924] __dev_queue_xmit+0x27ac/0x4970 [ 531.157124][T10924] ? lock_acquire+0x1d1/0x380 [ 531.159158][T10924] ? __pfx___dev_queue_xmit+0x10/0x10 [ 531.161543][T10924] ? __might_fault+0xc5/0x140 [ 531.163768][T10924] ? __might_fault+0xc5/0x140 [ 531.166254][T10924] ? _copy_from_iter+0x270/0x1690 [ 531.168458][T10924] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 531.171822][T10924] ? __local_bh_enable_ip+0xa5/0x120 [ 531.174068][T10924] ? __local_bh_enable_ip+0xa5/0x120 [ 531.176413][T10924] raw_sendmsg+0x5b6/0x880 [ 531.178357][T10924] ? __pfx_raw_sendmsg+0x10/0x10 [ 531.180679][T10924] ? selinux_socket_sendmsg+0x198/0x2f0 [ 531.183672][T10924] ____sys_sendmsg+0xa4d/0xbe0 [ 531.186075][T10924] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 531.188573][T10924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.190688][T10924] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 531.192993][T10924] ___sys_sendmsg+0x190/0x1e0 [ 531.194590][T10924] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.196315][T10924] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 531.198450][T10924] ? find_held_lock+0x2b/0x80 [ 531.200337][T10924] __sys_sendmsg+0x160/0x210 [ 531.201946][T10924] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.203920][T10924] do_syscall_64+0x123/0x790 [ 531.205650][T10924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.207557][T10924] RIP: 0033:0x7f38f619e159 [ 531.209018][T10924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.215176][T10924] RSP: 002b:00007f38f7044028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.217893][T10924] RAX: ffffffffffffffda RBX: 00007f38f6426180 RCX: 00007f38f619e159 [ 531.220382][T10924] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000004 [ 531.222878][T10924] RBP: 00007f38f623506b R08: 0000000000000000 R09: 0000000000000000 [ 531.225354][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.227839][T10924] R13: 00007f38f6426218 R14: 00007f38f6426180 R15: 00007ffdaafb5ba8 [ 531.230558][T10924] [ 531.232339][T10924] Kernel Offset: disabled [ 531.233727][T10924] Rebooting in 86400 seconds..