last executing test programs: 1.490749624s ago: executing program 0 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000c00)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @opaque="9441b0fc813fd539494389376b71"}}}}}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r7, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aae7a3978ead0daaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f1903000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d54"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x200000, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x8, 0x6, {0xffffffffffffffff}, {0xee00}, 0x8, 0x100000001}) r10 = syz_open_procfs(r9, &(0x7f0000000280)='net/dev_snmp6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x1, 0x8000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020206425000000001d2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r12 = socket$netlink(0x10, 0x3, 0x15) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r1, 0x105, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "fb390df4c19d6077161ea9ba9f67d39d"}]}, 0x3c}}, 0x0) 1.002317085s ago: executing program 2 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x3}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x8) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', &(0x7f00000000c0)={0x18b500, 0x82, 0x14}, 0x18) openat(r2, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @initial, {0x0, 0x400}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x1}, 0x3, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 920.372537ms ago: executing program 2 (id=475): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) (async, rerun: 64) setns(0xc9, 0x0) (rerun: 64) socket(0x8, 0x5, 0x5) (async) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async, rerun: 32) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x212001, 0x0) (rerun: 32) mmap$panthor(&(0x7f0000cb8000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r0, 0x7fffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200ffffffff0700090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRESDEC=r2], 0x84}}, 0x20080000) 851.486165ms ago: executing program 2 (id=479): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000240)={r0, 0xa, 0x9, "766a788f24d07dfba919bf416adb59826a92c80836fabceef3290b065bb79ac959cfd5dd77de6ca8ca20336642eff83b176b"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 850.879574ms ago: executing program 1 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 850.581645ms ago: executing program 2 (id=481): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0) 791.253055ms ago: executing program 1 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x48, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @initial, {0x0, 0x400}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x1}, 0x3, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) 790.820369ms ago: executing program 2 (id=484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) ptrace$peek(0x4674dd604dc72bd, r2, &(0x7f0000000080)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf6c, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r3}, 0x94) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) r6 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_GETINFO(r6, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRES32=r4, @ANYRESOCT], 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) 790.070362ms ago: executing program 1 (id=486): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r3, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) 671.858437ms ago: executing program 1 (id=489): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c00078018"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 670.39366ms ago: executing program 1 (id=490): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000240)={r0, 0xa, 0x9, "766a788f24d07dfba919bf416adb59826a92c80836fabceef3290b065bb79ac959cfd5dd77de6ca8ca20336642eff83b176b"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 669.710176ms ago: executing program 0 (id=492): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 581.537477ms ago: executing program 0 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x40, 0x49, 0x8, 0x70bd2d, 0x25dfdbf8, {0xa, 0x0, 0x78, 0x0, r1, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x40000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 580.928715ms ago: executing program 1 (id=494): mkdir(&(0x7f0000000000)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(r0, 0x0, 0x8080, 0x2c) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fb1add96e95c4cee3df251747b4c22fa", 0x10}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x24000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b879973a00dc9c280ca5373849cf4c81f213995d9db1b4cf", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25740000000c009900060000003a000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801) recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) write(r2, &(0x7f0000000800)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000a00)='1', 0x1) 580.233439ms ago: executing program 0 (id=495): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(0x0, 0x4242, 0x1df2a23c5997faa6) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1400400d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x4000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 528.222075ms ago: executing program 2 (id=496): semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}, {0x2, 0x2, 0x3000}], 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x4000, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6e, 0x100, @void}}}}}}}}, 0x32) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept$alg(r9, 0x0, 0x0) r11 = accept(r10, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20004010) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="04002abd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 527.716416ms ago: executing program 0 (id=497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xe000, 0x3, 0x8, 0xbfb, 0x0, [{0x8, 0x5, 0xf, '\x00', 0xd}, {0x53, 0xb0, 0x8, '\x00', 0x7}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x22, 0x8, 0x8, '\x00', 0x4}, {0x8, 0xc, 0xda}, {0x9, 0x8, 0x83, '\x00', 0x2}, {0x0, 0x2, 0xa, '\x00', 0xa0}, {0x6, 0x4, 0x81, '\x00', 0x8e}, {0x8, 0x8, 0x0, '\x00', 0xc}, {0x1, 0x40, 0x0, '\x00', 0xce}, {0xf, 0x4, 0x5, '\x00', 0x8}, {0x7f, 0xbf, 0xfd, '\x00', 0x8}, {0x3, 0x5, 0x9, '\x00', 0x81}, {0x9, 0xf9, 0x3, '\x00', 0x8}, {0x8, 0x8, 0xf, '\x00', 0x8}, {0xc, 0x5, 0x3, '\x00', 0x5}, {0xff, 0x85, 0x9, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0x3, 0xea, 0x3, '\x00', 0x6}, {0x7, 0xb, 0x5, '\x00', 0x80}, {0x1, 0x1, 0x4, '\x00', 0xa}, {0x0, 0xa8, 0x8, '\x00', 0x7f}, {0xa, 0xf4, 0x7f, '\x00', 0xf0}, {0x10, 0x4, 0x20, '\x00', 0x1a}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4, 0x22d11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0xc004) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xc, 0x1b}}, [@filter_kind_options=@f_flower={{0x5}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048080}, 0x4804) 392.701725ms ago: executing program 3 (id=501): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 392.362592ms ago: executing program 0 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffe94a}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0x200}, 0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x58, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r6, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10140, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r8, 0x400, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r8, 0x24, &(0x7f0000000600)={0x3, 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) 391.990609ms ago: executing program 3 (id=503): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_io_uring_setup(0x57c4, &(0x7f0000003000)={0x0, 0x5290, 0x10000, 0x2, 0x2db}, &(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000003100), 0x1) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x5b) keyctl$revoke(0x3, r1) read$watch_queue(r2, &(0x7f0000000280)=""/97, 0x61) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 271.73938ms ago: executing program 3 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r1, 0x105, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "fb390df4c19d6077161ea9ba9f67d39d"}]}, 0x3c}}, 0x0) (fail_nth: 7) 201.872954ms ago: executing program 3 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000040)={0x54000, 0x10000}) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={0xb, 0x3, 0x8, 0x8}) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506e500001b0000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) (async) r6 = fcntl$dupfd(r5, 0x0, r5) readv(r6, &(0x7f0000000240)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) (async, rerun: 64) write$evdev(r6, &(0x7f00000004c0)=[{{}, 0x17, 0x8, 0x800}, {{}, 0x17, 0x101, 0x6}], 0x30) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r11 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x0) (rerun: 32) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r11, 0x6f2d, 0xffffffffff60014a) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0xd4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x98, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xe4}, @IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xe}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xfffffff7}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xf7}], @IFLA_VTI_REMOTE={0x14, 0x5, @local}, @IFLA_VTI_LOCAL={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_VTI_LOCAL={0x14, 0x4, @local}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_LINK={0x8, 0x1, r12}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x600}, 0x8084) 2.351636ms ago: executing program 3 (id=506): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(0x0, 0x4242, 0x1df2a23c5997faa6) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1400400d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x4000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=507): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x5, r1, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, &(0x7f0000000140)={0x0, 0x0, @vsb}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x6, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000440)={0x50, 0x0, r9, {0x7, 0x29, 0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r10, 0x40140921, 0x200000000005) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r5, r6, 0x1, 0x0, 0x2}) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r11, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) kernel console output (not intermixed with test programs): [ 37.958295][ T42] audit: type=1400 audit(1785523602.658:114): avc: denied { rlimitinh } for pid=5644 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.966410][ T42] audit: type=1400 audit(1785523602.658:115): avc: denied { siginh } for pid=5644 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:36501' (ED25519) to the list of known hosts. [ 39.925115][ T42] audit: type=1400 audit(1785523604.648:116): avc: denied { name_bind } for pid=5651 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.952828][ T42] audit: type=1400 audit(1785523604.678:117): avc: denied { execute } for pid=5652 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.961010][ T42] audit: type=1400 audit(1785523604.678:118): avc: denied { execute_no_trans } for pid=5652 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.686198][ T42] audit: type=1400 audit(1785523605.408:119): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.749720][ T42] audit: type=1400 audit(1785523605.478:120): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.991788][ T42] audit: type=1400 audit(1785523605.718:121): avc: denied { write } for pid=5661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.035548][ T42] audit: type=1400 audit(1785523605.758:122): avc: denied { write } for pid=5664 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.146077][ T42] audit: type=1400 audit(1785523605.868:123): avc: denied { write } for pid=5667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.215636][ T42] audit: type=1400 audit(1785523605.938:124): avc: denied { write } for pid=5670 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.315496][ T42] audit: type=1400 audit(1785523606.038:125): avc: denied { write } for pid=5673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.839241][ T5652] cgroup: Unknown subsys name 'net' [ 43.033161][ T5652] cgroup: Unknown subsys name 'cpuset' [ 43.037284][ T5652] cgroup: Unknown subsys name 'rlimit' [ 43.289334][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.220503][ T5652] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.086420][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 48.086435][ T42] audit: type=1400 audit(1785523612.808:161): avc: denied { execmem } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.274815][ T42] audit: type=1400 audit(1785523612.998:162): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.284551][ T42] audit: type=1400 audit(1785523612.998:163): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.293103][ T42] audit: type=1400 audit(1785523612.998:164): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.300793][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.304050][ T42] audit: type=1400 audit(1785523613.008:165): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[6574]" dev="sockfs" ino=6574 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.305483][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.310829][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.326183][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.326646][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.330270][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.333436][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.334923][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.338914][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.338999][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.339502][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.341003][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.341805][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.341903][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.342823][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.343025][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.345921][ T42] audit: type=1400 audit(1785523613.068:166): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.349123][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.354022][ T42] audit: type=1400 audit(1785523613.068:167): avc: denied { open } for pid=5746 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.358042][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.358603][ T42] audit: type=1400 audit(1785523613.078:168): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.363512][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.381445][ T42] audit: type=1400 audit(1785523613.078:169): avc: denied { module_request } for pid=5746 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.383404][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.403975][ T42] audit: type=1400 audit(1785523613.118:170): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.070082][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.074130][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.077447][ T5738] bridge_slave_0: entered allmulticast mode [ 49.081774][ T5738] bridge_slave_0: entered promiscuous mode [ 49.091964][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.094997][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.098074][ T5747] bridge_slave_0: entered allmulticast mode [ 49.102446][ T5747] bridge_slave_0: entered promiscuous mode [ 49.116325][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.119455][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.121796][ T5747] bridge_slave_1: entered allmulticast mode [ 49.124493][ T5747] bridge_slave_1: entered promiscuous mode [ 49.134729][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.137140][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.139795][ T5738] bridge_slave_1: entered allmulticast mode [ 49.143097][ T5738] bridge_slave_1: entered promiscuous mode [ 49.167654][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.170161][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.172476][ T5739] bridge_slave_0: entered allmulticast mode [ 49.175268][ T5739] bridge_slave_0: entered promiscuous mode [ 49.203531][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.206100][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.208519][ T5739] bridge_slave_1: entered allmulticast mode [ 49.211232][ T5739] bridge_slave_1: entered promiscuous mode [ 49.216327][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.221068][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.239802][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.244260][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.247649][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.250558][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.252958][ T5746] bridge_slave_0: entered allmulticast mode [ 49.255613][ T5746] bridge_slave_0: entered promiscuous mode [ 49.301155][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.304098][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.307031][ T5746] bridge_slave_1: entered allmulticast mode [ 49.310565][ T5746] bridge_slave_1: entered promiscuous mode [ 49.314505][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.329415][ T5738] team0: Port device team_slave_0 added [ 49.343846][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.359060][ T5747] team0: Port device team_slave_0 added [ 49.362482][ T5738] team0: Port device team_slave_1 added [ 49.379092][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.394254][ T5747] team0: Port device team_slave_1 added [ 49.414602][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.419576][ T5739] team0: Port device team_slave_0 added [ 49.432076][ T5739] team0: Port device team_slave_1 added [ 49.450350][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.453058][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.461730][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.466532][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.469721][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.479119][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.489883][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.492322][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.501228][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.515813][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.518443][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.528235][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.543787][ T5746] team0: Port device team_slave_0 added [ 49.548679][ T5746] team0: Port device team_slave_1 added [ 49.574069][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.576311][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.584438][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.589423][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.591658][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.599579][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.608485][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.610772][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.620294][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.649171][ T5738] hsr_slave_0: entered promiscuous mode [ 49.652527][ T5738] hsr_slave_1: entered promiscuous mode [ 49.656436][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.658966][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.667218][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.718162][ T5739] hsr_slave_0: entered promiscuous mode [ 49.721676][ T5739] hsr_slave_1: entered promiscuous mode [ 49.725771][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 49.728426][ T5739] Cannot create hsr debugfs directory [ 49.741596][ T5747] hsr_slave_0: entered promiscuous mode [ 49.743938][ T5747] hsr_slave_1: entered promiscuous mode [ 49.746172][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 49.748006][ T5747] Cannot create hsr debugfs directory [ 49.771666][ T5746] hsr_slave_0: entered promiscuous mode [ 49.774536][ T5746] hsr_slave_1: entered promiscuous mode [ 49.776728][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 49.778890][ T5746] Cannot create hsr debugfs directory [ 50.097912][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.107722][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.111295][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.115968][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.119711][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.124484][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.127781][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.135489][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.189217][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.194314][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.197239][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.201305][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.203934][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.209797][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.215443][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.223602][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.303439][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.310389][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.314727][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.321585][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.327576][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.335709][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.347406][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.354189][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.393786][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.409229][ T5741] Bluetooth: hci2: command tx timeout [ 50.409254][ T5754] Bluetooth: hci1: command tx timeout [ 50.418783][ T5754] Bluetooth: hci0: command tx timeout [ 50.426895][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.442285][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.448892][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.452406][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.459596][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.466255][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.469615][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.478967][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.484104][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.489264][ T5754] Bluetooth: hci3: command tx timeout [ 50.493088][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.499493][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.506969][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.510094][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.567486][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.610425][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.628160][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.630511][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.644098][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.646486][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.661617][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.699320][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.709868][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.712976][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.724603][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.726864][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.739116][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.766511][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.787455][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.790161][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.801411][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.803686][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.906829][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.956112][ T5738] veth0_vlan: entered promiscuous mode [ 50.965583][ T5738] veth1_vlan: entered promiscuous mode [ 50.992944][ T5738] veth0_macvtap: entered promiscuous mode [ 51.000707][ T5738] veth1_macvtap: entered promiscuous mode [ 51.014761][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.028780][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.047267][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.097331][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.162726][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.169138][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.191557][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.200224][ T5747] veth0_vlan: entered promiscuous mode [ 51.213505][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.217061][ T5746] veth0_vlan: entered promiscuous mode [ 51.217141][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.229492][ T5746] veth1_vlan: entered promiscuous mode [ 51.232934][ T5747] veth1_vlan: entered promiscuous mode [ 51.239489][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.259184][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.264540][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.284571][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.299807][ T5747] veth0_macvtap: entered promiscuous mode [ 51.303834][ T5747] veth1_macvtap: entered promiscuous mode [ 51.306347][ T5739] veth0_vlan: entered promiscuous mode [ 51.316817][ T5739] veth1_vlan: entered promiscuous mode [ 51.320583][ T5746] veth0_macvtap: entered promiscuous mode [ 51.329153][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.337732][ T5746] veth1_macvtap: entered promiscuous mode [ 51.349311][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.361040][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.382990][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.399967][ T5739] veth0_macvtap: entered promiscuous mode [ 51.408056][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.434374][ T5739] veth1_macvtap: entered promiscuous mode [ 51.500022][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.567729][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.601801][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.611102][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.622499][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.640425][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.644387][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.648160][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.716490][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.723057][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.726956][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.731349][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.732146][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.832652][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.844002][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.926814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.939680][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.947951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.039605][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.043340][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.046620][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.052334][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.055808][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.059064][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.062420][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.066142][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.085511][ T5896] Zero length message leads to an empty skb [ 52.123847][ T5754] Bluetooth: Wrong link type (-57) [ 52.366185][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 52.374307][ T5911] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 52.393148][ T5905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.483210][ T5920] Config c/1 of g1 needs at least one function. [ 52.487635][ T5920] udc usbip-vudc.0: failed to start g1: -22 [ 52.488850][ T5754] Bluetooth: hci0: command tx timeout [ 52.492465][ T5741] Bluetooth: hci2: command tx timeout [ 52.492505][ T5749] Bluetooth: hci1: command tx timeout [ 52.501210][ T5920] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 52.514274][ T5920] UDC core: g1: couldn't find an available UDC or it's busy [ 52.538241][ T5749] Bluetooth: Wrong link type (-57) [ 52.569010][ T5749] Bluetooth: hci3: command tx timeout [ 52.572463][ T5927] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.760876][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.362316][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 53.362333][ T42] audit: type=1400 audit(1785523618.088:260): avc: denied { read write } for pid=5967 comm="syz.0.29" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.468619][ T42] audit: type=1400 audit(1785523618.098:261): avc: denied { open } for pid=5967 comm="syz.0.29" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.476992][ T42] audit: type=1400 audit(1785523618.098:262): avc: denied { write } for pid=5967 comm="syz.0.29" name="rt6_stats" dev="proc" ino=4026533381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.488420][ T42] audit: type=1400 audit(1785523618.158:263): avc: denied { read write } for pid=5967 comm="syz.0.29" name="vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.496833][ T42] audit: type=1400 audit(1785523618.158:264): avc: denied { open } for pid=5967 comm="syz.0.29" path="/dev/vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.508051][ T42] audit: type=1400 audit(1785523618.168:265): avc: denied { ioctl } for pid=5967 comm="syz.0.29" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.517508][ T42] audit: type=1400 audit(1785523618.188:266): avc: denied { create } for pid=5967 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.525357][ T42] audit: type=1400 audit(1785523618.188:267): avc: denied { setopt } for pid=5967 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.270431][ T42] audit: type=1400 audit(1785523618.998:268): avc: denied { read } for pid=5973 comm="syz.0.31" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.277785][ T42] audit: type=1400 audit(1785523618.998:269): avc: denied { open } for pid=5973 comm="syz.0.31" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.336921][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 54.568600][ T5749] Bluetooth: hci1: command tx timeout [ 54.581761][ T5754] Bluetooth: hci2: command tx timeout [ 54.581773][ T5749] Bluetooth: hci0: command tx timeout [ 54.649550][ T5749] Bluetooth: hci3: command tx timeout [ 55.010350][ T5989] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 55.195918][ T5990] mmap: syz.2.37 (5990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.675737][ T5945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.723328][ T5997] netlink: 256 bytes leftover after parsing attributes in process `syz.3.39'. [ 55.728526][ T5997] netlink: 80 bytes leftover after parsing attributes in process `syz.3.39'. [ 55.879603][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 56.438833][ T5850] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.524334][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888013446000: rx timeout, send abort [ 56.531108][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 56.649801][ T5749] Bluetooth: hci2: command tx timeout [ 56.649927][ T5754] Bluetooth: hci1: command tx timeout [ 56.660306][ T5754] Bluetooth: hci0: command tx timeout [ 56.662983][ T5850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.675368][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.680777][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.683977][ T5850] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.693660][ T5850] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 56.696588][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.700050][ T5850] usb 7-1: SerialNumber: syz [ 56.731991][ T5754] Bluetooth: hci3: command tx timeout [ 56.754878][ T5850] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 56.802084][ T5850] usb-storage 7-1:1.0: USB Mass Storage device detected [ 56.837589][ T5850] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 57.027912][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888013446000: abort rx timeout. Force session deactivation [ 58.052639][ T1481] IPVS: starting estimator thread 0... [ 58.158488][ T6059] IPVS: using max 46 ests per chain, 110400 per kthread [ 58.537381][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 58.603474][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 58.603491][ T42] audit: type=1400 audit(1785523623.328:316): avc: denied { create } for pid=6066 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.925969][ T29] usb 7-1: USB disconnect, device number 2 [ 59.011448][ T42] audit: type=1400 audit(1785523623.738:317): avc: denied { shutdown } for pid=6070 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.018955][ T42] audit: type=1400 audit(1785523623.748:318): avc: denied { getopt } for pid=6070 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.028721][ T42] audit: type=1400 audit(1785523623.748:319): avc: denied { read write } for pid=6070 comm="syz.2.64" name="radio0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.036183][ T42] audit: type=1400 audit(1785523623.748:320): avc: denied { open } for pid=6070 comm="syz.2.64" path="/dev/radio0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.044025][ T42] audit: type=1400 audit(1785523623.748:321): avc: denied { ioctl } for pid=6070 comm="syz.2.64" path="/dev/radio0" dev="devtmpfs" ino=981 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.103655][ T42] audit: type=1400 audit(1785523623.828:322): avc: denied { create } for pid=6073 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.113617][ T42] audit: type=1400 audit(1785523623.838:323): avc: denied { write } for pid=6073 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.438055][ T6027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.505173][ T42] audit: type=1400 audit(1785523624.228:324): avc: denied { setopt } for pid=6079 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.637680][ T42] audit: type=1400 audit(1785523624.338:325): avc: denied { create } for pid=6075 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.084600][ T6096] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 60.088700][ T6096] udc dummy_udc.0: failed to start g1: -19 [ 60.100045][ T6096] UDC core: g1: couldn't find an available UDC or it's busy [ 60.498281][ T6107] Bluetooth: MGMT ver 1.23 [ 60.898273][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 60.912857][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 61.332451][ T6129] xt_hashlimit: size too large, truncated to 1048576 [ 61.540681][ T6136] openvswitch: netlink: Flow key attr not present in new flow. [ 61.788461][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.951758][ T5820] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 61.956028][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.960405][ T5820] usb 6-1: Product: syz [ 61.963012][ T5820] usb 6-1: Manufacturer: syz [ 61.965010][ T5820] usb 6-1: SerialNumber: syz [ 62.585121][ T5820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 62.592052][ T5820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 62.599007][ T5820] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 62.636817][ T5820] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 62.978201][ T6178] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 62.992544][ T6177] IPVS: stopping backup sync thread 6178 ... [ 63.601223][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 64.232668][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 64.232681][ T42] audit: type=1400 audit(1785523628.958:351): avc: denied { read } for pid=6198 comm="syz.3.106" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.243422][ T42] audit: type=1400 audit(1785523628.958:352): avc: denied { open } for pid=6198 comm="syz.3.106" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.254687][ T42] audit: type=1400 audit(1785523628.958:353): avc: denied { ioctl } for pid=6198 comm="syz.3.106" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.302285][ T42] audit: type=1400 audit(1785523629.028:354): avc: denied { mount } for pid=6198 comm="syz.3.106" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.304605][ T6200] uhci_hcd 0000:00:1d.0: remove, state 4 [ 64.313314][ T6200] usb usb1: USB disconnect, device number 1 [ 64.330010][ T6200] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 64.750840][ T5846] usb 6-1: USB disconnect, device number 2 [ 66.520040][ T6185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.543585][ T42] audit: type=1400 audit(1785523631.268:355): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.570737][ T42] audit: type=1400 audit(1785523631.298:356): avc: denied { read write } for pid=6211 comm="syz.0.112" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.580635][ T42] audit: type=1400 audit(1785523631.298:357): avc: denied { open } for pid=6211 comm="syz.0.112" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.588185][ T42] audit: type=1400 audit(1785523631.308:358): avc: denied { map } for pid=6211 comm="syz.0.112" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.607705][ T42] audit: type=1400 audit(1785523631.328:359): avc: denied { kexec_image_load } for pid=6216 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 66.612735][ T6217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.618560][ T42] audit: type=1400 audit(1785523631.338:360): avc: denied { create } for pid=6216 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.651243][ T6212] can0: slcan on ttynull. [ 66.774883][ T6211] can0 (unregistered): slcan off ttynull. [ 67.313624][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 67.323678][ T6243] loop5: detected capacity change from 0 to 7 [ 67.332820][ T6243] Dev loop5: unable to read RDB block 7 [ 67.335818][ T6243] loop5: AHDI p2 [ 67.337510][ T6243] loop5: partition table partially beyond EOD, truncated [ 67.772801][ T6252] syzkaller0: entered promiscuous mode [ 67.774583][ T6252] syzkaller0: entered allmulticast mode [ 67.790123][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 67.793530][ T6278] block nbd0: Unsupported socket: should be TCP or UNIX. [ 67.827577][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 69.014577][ T6300] dummy0: entered allmulticast mode [ 69.143066][ T6310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 69.146892][ T6310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.150104][ T6310] IPv6: NLM_F_CREATE should be set when creating new route [ 69.244599][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 71.301526][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.304560][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.174830][ T6315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.250869][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 72.250885][ T42] audit: type=1400 audit(1785523636.978:381): avc: denied { name_bind } for pid=6346 comm="syz.3.155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.360628][ T42] audit: type=1400 audit(1785523637.088:382): avc: denied { ioctl } for pid=6360 comm="syz.3.160" path="socket:[10152]" dev="sockfs" ino=10152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.360823][ T42] audit: type=1400 audit(1785523637.088:383): avc: denied { connect } for pid=6360 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.362586][ T6361] netlink: 'syz.3.160': attribute type 5 has an invalid length. [ 72.457903][ T42] audit: type=1400 audit(1785523637.178:384): avc: denied { read write } for pid=6374 comm="syz.3.164" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.466204][ T42] audit: type=1400 audit(1785523637.188:385): avc: denied { open } for pid=6374 comm="syz.3.164" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.466250][ T42] audit: type=1400 audit(1785523637.188:386): avc: denied { ioctl } for pid=6374 comm="syz.3.164" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.521666][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 75.460642][ T6375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.556901][ T6406] bridge1: entered allmulticast mode [ 75.680281][ T42] audit: type=1400 audit(1785523640.398:387): avc: denied { write } for pid=6426 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.687594][ T42] audit: type=1400 audit(1785523640.408:388): avc: denied { read } for pid=6426 comm="syz.1.182" lport=32450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.725544][ T42] audit: type=1400 audit(1785523640.448:389): avc: denied { mount } for pid=6440 comm="syz.2.187" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.732622][ T42] audit: type=1400 audit(1785523640.448:390): avc: denied { search } for pid=6440 comm="syz.2.187" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.733863][ T6441] process 'syz.2.187' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 75.750743][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 76.130554][ T6457] overlayfs: missing 'workdir' [ 78.673466][ T6430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.679791][ T6442] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 78.683343][ T6442] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 78.686774][ T6442] netlink: 224 bytes leftover after parsing attributes in process `syz.1.182'. [ 78.690589][ T6442] NCSI netlink: No device for ifindex 0 [ 78.739470][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 78.739522][ T42] audit: type=1400 audit(1785523643.468:413): avc: denied { append } for pid=6465 comm="syz.0.195" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.757661][ T42] audit: type=1400 audit(1785523643.478:414): avc: denied { mounton } for pid=6465 comm="syz.0.195" path="/53/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 78.777064][ T42] audit: type=1400 audit(1785523643.478:415): avc: denied { block_suspend } for pid=6465 comm="syz.0.195" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.793977][ T42] audit: type=1400 audit(1785523643.518:416): avc: denied { read } for pid=6473 comm="syz.2.198" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.804683][ T42] audit: type=1400 audit(1785523643.518:417): avc: denied { open } for pid=6473 comm="syz.2.198" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.809116][ T6474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.825119][ T42] audit: type=1400 audit(1785523643.548:418): avc: denied { ioctl } for pid=6473 comm="syz.2.198" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.847913][ T42] audit: type=1400 audit(1785523643.568:419): avc: denied { set_context_mgr } for pid=6473 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.861813][ T6474] : renamed from bond0 (while UP) [ 78.864017][ T42] audit: type=1400 audit(1785523643.588:420): avc: denied { ioctl } for pid=6473 comm="syz.2.198" path="socket:[11779]" dev="sockfs" ino=11779 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.891582][ T42] audit: type=1400 audit(1785523643.618:421): avc: denied { append } for pid=6480 comm="syz.0.201" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.947811][ T42] audit: type=1400 audit(1785523643.668:422): avc: denied { write } for pid=6486 comm="syz.2.203" name="/" dev="9p" ino=78395253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.967812][ T6488] netfs: Duplicate cookie detected [ 78.971975][ T6488] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 78.974778][ T6488] netfs: O-cookie V=00000001 [9p,syz,] [ 78.976536][ T6488] netfs: O-key=[8] '4f38ac0400000000' [ 78.978436][ T6488] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 78.980437][ T6488] netfs: N-cookie V=00000001 [9p,syz,] [ 78.982338][ T6488] netfs: N-key=[8] '4f38ac0400000000' [ 78.986014][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 79.264763][ T6494] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 79.290355][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.540251][ T984] cfg80211: failed to load regulatory.db [ 81.901938][ T6483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.995396][ T6520] overlayfs: missing 'lowerdir' [ 82.014465][ T6526] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 82.041043][ T6528] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 82.368457][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.270958][ T6547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.345606][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 85.345619][ T42] audit: type=1400 audit(1785523650.068:441): avc: denied { create } for pid=6585 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.347437][ T6586] syz.3.232: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 85.350163][ T42] audit: type=1400 audit(1785523650.068:442): avc: denied { setopt } for pid=6585 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.354562][ T6586] ,cpuset=/,mems_allowed=0-1 [ 85.372607][ T6586] CPU: 3 UID: 0 PID: 6586 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 85.372623][ T6586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.372631][ T6586] Call Trace: [ 85.372646][ T6586] [ 85.372651][ T6586] dump_stack_lvl+0x100/0x190 [ 85.372711][ T6586] warn_alloc.cold+0x94/0xa8 [ 85.372727][ T6586] ? __pfx_warn_alloc+0x10/0x10 [ 85.372748][ T6586] ? kasan_save_stack+0x3f/0x50 [ 85.372763][ T6586] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 85.372782][ T6586] ? xskq_create+0x52/0x1d0 [ 85.372814][ T6586] ? xsk_setsockopt+0x743/0xab0 [ 85.372833][ T6586] ? do_sock_setsockopt+0xf3/0x1d0 [ 85.372863][ T6586] ? __sys_setsockopt+0x195/0x220 [ 85.372876][ T6586] ? __x64_sys_setsockopt+0xbd/0x160 [ 85.372888][ T6586] ? do_syscall_64+0x115/0x870 [ 85.372902][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.372919][ T6586] ? xskq_create+0xfb/0x1d0 [ 85.372931][ T6586] __vmalloc_node_range_noprof+0x136c/0x1630 [ 85.372955][ T6586] ? xskq_create+0xfb/0x1d0 [ 85.372971][ T6586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.372993][ T6586] ? kasan_save_track+0x14/0x30 [ 85.373006][ T6586] ? __kasan_kmalloc+0xaa/0xb0 [ 85.373019][ T6586] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 85.373037][ T6586] ? xskq_create+0xfb/0x1d0 [ 85.373047][ T6586] vmalloc_user_noprof+0x9e/0xe0 [ 85.373063][ T6586] ? xskq_create+0xfb/0x1d0 [ 85.373073][ T6586] xskq_create+0xfb/0x1d0 [ 85.373085][ T6586] xsk_setsockopt+0x743/0xab0 [ 85.373102][ T6586] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.373119][ T6586] ? find_held_lock+0x2b/0x80 [ 85.373136][ T6586] ? __fget_files+0x215/0x3d0 [ 85.373176][ T6586] ? selinux_socket_setsockopt+0x6a/0x80 [ 85.373202][ T6586] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.373222][ T6586] do_sock_setsockopt+0xf3/0x1d0 [ 85.373248][ T6586] __sys_setsockopt+0x195/0x220 [ 85.373266][ T6586] __x64_sys_setsockopt+0xbd/0x160 [ 85.373279][ T6586] ? do_syscall_64+0x90/0x870 [ 85.373294][ T6586] ? lockdep_hardirqs_on+0x78/0x100 [ 85.373308][ T6586] do_syscall_64+0x115/0x870 [ 85.373322][ T6586] ? clear_bhb_loop+0x40/0x90 [ 85.373338][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.373351][ T6586] RIP: 0033:0x7ffba8f9e019 [ 85.373363][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.373373][ T6586] RSP: 002b:00007ffba9d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.373392][ T6586] RAX: ffffffffffffffda RBX: 00007ffba9225fa0 RCX: 00007ffba8f9e019 [ 85.373400][ T6586] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 85.373407][ T6586] RBP: 00007ffba903500c R08: 0000000000000029 R09: 0000000000000000 [ 85.373415][ T6586] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.373422][ T6586] R13: 00007ffba9226038 R14: 00007ffba9225fa0 R15: 00007fffa24b8d98 [ 85.373438][ T6586] [ 85.373457][ T6586] Mem-Info: [ 85.467384][ T6586] active_anon:9263 inactive_anon:0 isolated_anon:0 [ 85.467384][ T6586] active_file:0 inactive_file:61200 isolated_file:0 [ 85.467384][ T6586] unevictable:1768 dirty:29 writeback:0 [ 85.467384][ T6586] slab_reclaimable:11519 slab_unreclaimable:68236 [ 85.467384][ T6586] mapped:24631 shmem:2320 pagetables:1165 [ 85.467384][ T6586] sec_pagetables:297 bounce:0 [ 85.467384][ T6586] kernel_misc_reclaimable:0 [ 85.467384][ T6586] free:451288 free_pcp:13554 free_cma:0 [ 85.482341][ T6586] Node 0 active_anon:37052kB inactive_anon:0kB active_file:0kB inactive_file:244596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98524kB dirty:112kB writeback:0kB shmem:5744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13248kB pagetables:4468kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.493874][ T6586] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.505588][ T6586] Node 0 DMA free:15060kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:60kB free_cma:0kB [ 85.515454][ T6586] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 85.517300][ T6586] Node 0 DMA32 free:140008kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37052kB inactive_anon:0kB active_file:0kB inactive_file:244596kB unevictable:3536kB writepending:112kB zspages:0kB present:2080628kB managed:1255196kB mlocked:0kB bounce:0kB free_pcp:50352kB local_pcp:8340kB free_cma:0kB [ 85.527295][ T6586] lowmem_reserve[]: 0 0 0 0 0 [ 85.529236][ T6586] Node 1 Normal free:1648348kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4544kB local_pcp:2224kB free_cma:0kB [ 85.539066][ T6586] lowmem_reserve[]: 0 0 0 0 0 [ 85.540575][ T6586] Node 0 DMA: 11*4kB (U) 13*8kB (UM) 10*16kB (UM) 1*32kB (U) 0*64kB 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 3*4096kB (M) = 15060kB [ 85.545288][ T6586] Node 0 DMA32: 119*4kB (UME) 535*8kB (UM) 557*16kB (UME) 257*32kB (UME) 113*64kB (UME) 55*128kB (UME) 33*256kB (UME) 24*512kB (UM) 21*1024kB (UME) 10*2048kB (UME) 10*4096kB (M) = 139844kB [ 85.551276][ T6586] Node 1 Normal: 3*4kB (M) 2*8kB (U) 12*16kB (UM) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (U) 3*512kB (M) 0*1024kB 3*2048kB (UM) 400*4096kB (M) = 1648348kB [ 85.556281][ T6586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.559303][ T6586] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.562131][ T6586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.565040][ T6586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.567911][ T6586] 63518 total pagecache pages [ 85.569475][ T6586] 0 pages in swap cache [ 85.570814][ T6586] Free swap = 124996kB [ 85.572157][ T6586] Total swap = 124996kB [ 85.573475][ T6586] 1048443 pages RAM [ 85.574729][ T6586] 0 pages HighMem/MovableOnly [ 85.576214][ T6586] 285333 pages reserved [ 85.577519][ T6586] 0 pages cma reserved [ 85.638549][ T984] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 85.697348][ T42] audit: type=1400 audit(1785523650.418:443): avc: denied { create } for pid=6596 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.705274][ T42] audit: type=1400 audit(1785523650.418:444): avc: denied { write } for pid=6596 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.723139][ T42] audit: type=1400 audit(1785523650.448:445): avc: denied { read write } for pid=5746 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.731274][ T42] audit: type=1400 audit(1785523650.448:446): avc: denied { open } for pid=5746 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.738809][ T42] audit: type=1400 audit(1785523650.448:447): avc: denied { ioctl } for pid=5746 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.746621][ T42] audit: type=1400 audit(1785523650.468:448): avc: denied { write } for pid=6599 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.798429][ T984] usb 8-1: Using ep0 maxpacket: 8 [ 85.802788][ T984] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.807393][ T984] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.811471][ T984] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.814336][ T984] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.818099][ T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.837826][ T984] usb 8-1: config 0 descriptor?? [ 85.872559][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 86.255503][ T984] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 86.258632][ T984] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 86.261763][ T984] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 86.263988][ T984] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 86.266190][ T984] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 86.269067][ T984] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 86.277748][ T6617] FAULT_INJECTION: forcing a failure. [ 86.277748][ T6617] name failslab, interval 1, probability 0, space 0, times 1 [ 86.283197][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(full) [ 86.283218][ T6617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.283227][ T6617] Call Trace: [ 86.283234][ T6617] [ 86.283240][ T6617] dump_stack_lvl+0x100/0x190 [ 86.283269][ T6617] should_fail_ex.cold+0x5/0xa [ 86.283292][ T6617] should_failslab+0xc2/0x120 [ 86.283314][ T6617] __kmalloc_noprof+0xfc/0x820 [ 86.283332][ T6617] ? rcu_is_watching+0x12/0xc0 [ 86.283358][ T6617] ? tomoyo_realpath_from_path+0xb6/0x690 [ 86.283381][ T6617] tomoyo_realpath_from_path+0xb6/0x690 [ 86.283401][ T6617] tomoyo_path_number_perm+0x23c/0x580 [ 86.283422][ T6617] ? tomoyo_path_number_perm+0x22e/0x580 [ 86.283446][ T6617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.283489][ T6617] ? find_held_lock+0x2b/0x80 [ 86.283505][ T6617] ? __fget_files+0x215/0x3d0 [ 86.283521][ T6617] ? hook_file_ioctl_common+0x140/0x440 [ 86.283538][ T6617] ? __fget_files+0x215/0x3d0 [ 86.283558][ T6617] ? __fget_files+0x21f/0x3d0 [ 86.283578][ T6617] security_file_ioctl+0xd3/0x230 [ 86.283603][ T6617] __x64_sys_ioctl+0xb7/0x210 [ 86.283628][ T6617] do_syscall_64+0x115/0x870 [ 86.283648][ T6617] ? clear_bhb_loop+0x40/0x90 [ 86.283669][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.283684][ T6617] RIP: 0033:0x7f1ba539e019 [ 86.283698][ T6617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.283714][ T6617] RSP: 002b:00007f1ba61af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.283730][ T6617] RAX: ffffffffffffffda RBX: 00007f1ba5625fa0 RCX: 00007f1ba539e019 [ 86.283741][ T6617] RDX: 0000200000005fc0 RSI: 000000000000890c RDI: 0000000000000003 [ 86.283750][ T6617] RBP: 00007f1ba61af090 R08: 0000000000000000 R09: 0000000000000000 [ 86.283760][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.283768][ T6617] R13: 00007f1ba5626038 R14: 00007f1ba5625fa0 R15: 00007ffdab2921e8 [ 86.283791][ T6617] [ 86.283798][ T6617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.557375][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.562720][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.412877][ T984] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 88.802023][ T6606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.807048][ T6588] tipc: Started in network mode [ 88.810229][ T6588] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 88.814201][ T6588] tipc: Enabled bearer , priority 10 [ 88.851882][ T42] audit: type=1400 audit(1785523653.578:449): avc: denied { allowed } for pid=6622 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.911387][ T42] audit: type=1400 audit(1785523653.638:450): avc: denied { create } for pid=6632 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 88.953979][ T6639] sg_write: data in/out 39264/136 bytes for SCSI command 0x0-- guessing data in; [ 88.953979][ T6639] program syz.0.256 not setting count and/or reply_len properly [ 89.000670][ T6648] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 89.010440][ T5754] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 89.056930][ T1046] libceph: mon0 (1)[c::]:6789 socket error on read [ 89.061507][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 89.320951][ T1481] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 89.614507][ T5832] usb 8-1: USB disconnect, device number 2 [ 89.829575][ T5832] libceph: mon0 (1)[c::]:6789 socket error on write [ 89.858006][ T6652] ceph: No mds server is up or the cluster is laggy [ 89.930206][ T5832] tipc: Node number set to 43690 [ 91.994129][ T6646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.082733][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 92.082743][ T42] audit: type=1400 audit(1785523656.808:461): avc: denied { connect } for pid=6684 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.213280][ T5817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 92.229804][ T42] audit: type=1400 audit(1785523656.958:462): avc: denied { ioctl } for pid=6710 comm="syz.0.279" path="socket:[13073]" dev="sockfs" ino=13073 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.239981][ T42] audit: type=1400 audit(1785523656.958:463): avc: denied { read write } for pid=6710 comm="syz.0.279" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.250246][ T42] audit: type=1400 audit(1785523656.958:464): avc: denied { open } for pid=6710 comm="syz.0.279" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.269915][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 92.341592][ T6719] FAULT_INJECTION: forcing a failure. [ 92.341592][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 92.346821][ T6719] CPU: 3 UID: 0 PID: 6719 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 92.346846][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.346856][ T6719] Call Trace: [ 92.346863][ T6719] [ 92.346870][ T6719] dump_stack_lvl+0x100/0x190 [ 92.346900][ T6719] should_fail_ex.cold+0x5/0xa [ 92.346924][ T6719] should_failslab+0xc2/0x120 [ 92.346949][ T6719] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.346971][ T6719] ? __alloc_skb+0x5b7/0x710 [ 92.346992][ T6719] ? __alloc_skb+0x140/0x710 [ 92.347015][ T6719] __alloc_skb+0x140/0x710 [ 92.347032][ T6719] ? __alloc_skb+0x5b7/0x710 [ 92.347051][ T6719] ? __pfx___alloc_skb+0x10/0x10 [ 92.347077][ T6719] netlink_alloc_large_skb+0x69/0x150 [ 92.347100][ T6719] netlink_sendmsg+0x680/0xda0 [ 92.347128][ T6719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.347149][ T6719] ? selinux_socket_sendmsg+0x198/0x2f0 [ 92.347182][ T6719] ____sys_sendmsg+0xa4d/0xbe0 [ 92.347207][ T6719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.347227][ T6719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.347265][ T6719] ___sys_sendmsg+0x190/0x1e0 [ 92.347294][ T6719] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.347320][ T6719] ? __lock_acquire+0x49f/0x1a40 [ 92.347343][ T6719] ? get_pid_task+0x106/0x250 [ 92.347390][ T6719] __sys_sendmsg+0x160/0x210 [ 92.347412][ T6719] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.347448][ T6719] do_syscall_64+0x115/0x870 [ 92.347470][ T6719] ? clear_bhb_loop+0x40/0x90 [ 92.347492][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.347509][ T6719] RIP: 0033:0x7f2e0739e019 [ 92.347525][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.347541][ T6719] RSP: 002b:00007f2e08237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.347558][ T6719] RAX: ffffffffffffffda RBX: 00007f2e07626090 RCX: 00007f2e0739e019 [ 92.347570][ T6719] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 92.347580][ T6719] RBP: 00007f2e08237090 R08: 0000000000000000 R09: 0000000000000000 [ 92.347590][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.347600][ T6719] R13: 00007f2e07626128 R14: 00007f2e07626090 R15: 00007fff040a6ae8 [ 92.347623][ T6719] [ 92.409792][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 92.776969][ T6734] trusted_key: syz.3.287 sent an empty control message without MSG_MORE. [ 95.160227][ T6701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.235846][ T42] audit: type=1400 audit(1785523659.958:465): avc: denied { ioctl } for pid=6744 comm="syz.2.289" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13098 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.317810][ T6758] tipc: Started in network mode [ 95.319467][ T6758] tipc: Node identity , cluster identity 4711 [ 95.322117][ T6758] tipc: Failed to set node id, please configure manually [ 95.324407][ T6758] tipc: Enabling of bearer rejected, failed to enable media [ 95.327292][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6758 comm=syz.2.295 [ 95.337775][ T42] audit: type=1400 audit(1785523660.058:466): avc: denied { create } for pid=6759 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.349613][ T42] audit: type=1400 audit(1785523660.068:467): avc: denied { connect } for pid=6759 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.356489][ T42] audit: type=1400 audit(1785523660.068:468): avc: denied { shutdown } for pid=6759 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.362846][ T42] audit: type=1400 audit(1785523660.068:469): avc: denied { ioctl } for pid=6759 comm="syz.3.296" path="socket:[13833]" dev="sockfs" ino=13833 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.394733][ T42] audit: type=1400 audit(1785523660.118:470): avc: denied { read write } for pid=6769 comm="syz.3.300" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.468493][ T984] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.486819][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 95.542755][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.545942][ T6792] batadv_slave_1: entered promiscuous mode [ 95.567792][ T6797] 9p: Bad value for 'msize' [ 95.572610][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'. [ 95.616458][ T6801] FAULT_INJECTION: forcing a failure. [ 95.616458][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 95.621189][ T6801] CPU: 1 UID: 0 PID: 6801 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 95.621230][ T6801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.621251][ T6801] Call Trace: [ 95.621270][ T6801] [ 95.621277][ T6801] dump_stack_lvl+0x100/0x190 [ 95.621350][ T6801] should_fail_ex.cold+0x5/0xa [ 95.621369][ T6801] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 95.621406][ T6801] should_failslab+0xc2/0x120 [ 95.621435][ T6801] kmem_cache_alloc_noprof+0x91/0x6a0 [ 95.621458][ T6801] ? skb_clone+0x190/0x400 [ 95.621497][ T6801] skb_clone+0x190/0x400 [ 95.621518][ T6801] netlink_deliver_tap+0xaed/0xcc0 [ 95.621552][ T6801] netlink_unicast+0x62b/0x850 [ 95.621567][ T6801] ? __pfx_netlink_unicast+0x10/0x10 [ 95.621582][ T6801] netlink_sendmsg+0x8b0/0xda0 [ 95.621594][ T6801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.621606][ T6801] ? selinux_socket_sendmsg+0x198/0x2f0 [ 95.621632][ T6801] ____sys_sendmsg+0xa4d/0xbe0 [ 95.621647][ T6801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.621659][ T6801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.621681][ T6801] ___sys_sendmsg+0x190/0x1e0 [ 95.621699][ T6801] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.621714][ T6801] ? __lock_acquire+0x49f/0x1a40 [ 95.621734][ T6801] ? get_pid_task+0x106/0x250 [ 95.621761][ T6801] __sys_sendmsg+0x160/0x210 [ 95.621774][ T6801] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.621791][ T6801] ? llist_reverse_order+0x4c/0x70 [ 95.621811][ T6801] do_syscall_64+0x115/0x870 [ 95.621839][ T6801] ? clear_bhb_loop+0x40/0x90 [ 95.621852][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.621863][ T6801] RIP: 0033:0x7ffba8f9e019 [ 95.621874][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.621884][ T6801] RSP: 002b:00007ffba9d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.621900][ T6801] RAX: ffffffffffffffda RBX: 00007ffba9225fa0 RCX: 00007ffba8f9e019 [ 95.621906][ T6801] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 95.621912][ T6801] RBP: 00007ffba9d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.621918][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.621924][ T6801] R13: 00007ffba9226038 R14: 00007ffba9225fa0 R15: 00007fffa24b8d98 [ 95.621938][ T6801] [ 95.726141][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 95.740598][ T984] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 95.744354][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.747598][ T984] usb 6-1: Product: syz [ 95.749606][ T984] usb 6-1: Manufacturer: syz [ 95.751487][ T984] usb 6-1: SerialNumber: syz [ 96.032635][ T984] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 96.051837][ T984] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.055253][ T984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 96.057933][ T984] usb 6-1: media controller created [ 96.099979][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.112040][ T984] zl10353_read_register: readreg error (reg=127, ret==-71) [ 96.128777][ T984] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 96.133643][ T984] usb 6-1: USB disconnect, device number 3 [ 96.430883][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.330'. [ 96.435216][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.330'. [ 96.470601][ T6861] netlink: 'syz.0.332': attribute type 8 has an invalid length. [ 96.473581][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 96.887398][ T6912] netlink: 100 bytes leftover after parsing attributes in process `syz.1.351'. [ 96.891468][ T6912] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 96.916919][ T6914] fuse: Bad value for 'fd' [ 96.937209][ T6908] netlink: 'syz.2.350': attribute type 21 has an invalid length. [ 96.949989][ T6917] ======================================================= [ 96.949989][ T6917] WARNING: The mand mount option has been deprecated and [ 96.949989][ T6917] and is ignored by this kernel. Remove the mand [ 96.949989][ T6917] option from the mount to silence this warning. [ 96.949989][ T6917] ======================================================= [ 97.132479][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 97.132496][ T42] audit: type=1400 audit(1785523661.858:499): avc: denied { read } for pid=6935 comm="syz.0.361" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 97.153819][ T6945] IPv6: Can't replace route, no match found [ 97.175744][ T42] audit: type=1400 audit(1785523661.898:500): avc: denied { bind } for pid=6938 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.233509][ T42] audit: type=1400 audit(1785523661.958:501): avc: denied { ioctl } for pid=6954 comm="syz.0.365" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x556b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.252726][ T6955] input: syz0 as /devices/virtual/input/input5 [ 97.267653][ T42] audit: type=1400 audit(1785523661.988:502): avc: denied { read } for pid=6956 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.326094][ T6963] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 97.340470][ T6963] CIFS: Attempting to mount //127.0.0.1/share [ 97.404258][ T42] audit: type=1400 audit(1785523662.128:503): avc: denied { create } for pid=6976 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.410822][ T42] audit: type=1400 audit(1785523662.128:504): avc: denied { write } for pid=6976 comm="syz.0.372" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.480703][ T6992] xt_ipcomp: unknown flags 1D [ 97.482932][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 97.485862][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 97.509985][ T42] audit: type=1400 audit(1785523662.238:505): avc: denied { create } for pid=6993 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.516320][ T42] audit: type=1400 audit(1785523662.238:506): avc: denied { write } for pid=6993 comm="syz.2.377" path="socket:[14172]" dev="sockfs" ino=14172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.522361][ T6995] netlink: 596 bytes leftover after parsing attributes in process `syz.2.377'. [ 97.524127][ T42] audit: type=1400 audit(1785523662.238:507): avc: denied { read } for pid=6993 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.534086][ T42] audit: type=1400 audit(1785523662.248:508): avc: denied { read } for pid=6993 comm="syz.2.377" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.535254][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.546759][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.550186][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.555864][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.560366][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 97.706140][ T6999] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 97.748451][ T5850] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 97.902614][ T5850] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.906128][ T5850] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.913274][ T5850] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 97.916431][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.919300][ T5850] usb 8-1: Product: syz [ 97.920700][ T5850] usb 8-1: Manufacturer: syz [ 97.922327][ T5850] usb 8-1: SerialNumber: syz [ 97.927593][ T5850] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 97.933743][ T5850] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 98.114850][ T6963] CIFS: VFS: Error connecting to socket. Aborting operation. [ 98.117331][ T6963] CIFS: VFS: cifs_mount failed w/return code = -4 [ 98.371385][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.373557][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.375542][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.377541][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.379800][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.381837][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.383871][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.385863][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.387853][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.390003][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.391996][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.394046][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.396077][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.398068][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.401330][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.403540][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.405531][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.407514][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.409805][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.411997][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.415541][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.417543][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.419604][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.421594][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.423712][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.425720][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.427739][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.429881][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.431875][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.433932][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.436332][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.438417][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.440405][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.468715][ T7034] netlink: 'syz.2.389': attribute type 4 has an invalid length. [ 98.486848][ T50] usb 8-1: USB disconnect, device number 3 [ 98.499458][ T50] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 98.502943][ T50] kl5kusb105 8-1:1.0: device disconnected [ 98.718460][ T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 98.793346][ T7051] loop2: detected capacity change from 0 to 7 [ 98.800158][ T7051] Dev loop2: unable to read RDB block 7 [ 98.801978][ T7051] loop2: AHDI p1 p2 p3 [ 98.803356][ T7051] loop2: partition table partially beyond EOD, truncated [ 98.806620][ T7051] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.809176][ T7051] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.870934][ T34] usb 7-1: config 0 has no interfaces? [ 98.872737][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.875614][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.880121][ T34] usb 7-1: config 0 descriptor?? [ 98.919974][ T7057] overlayfs: missing 'workdir' [ 98.923669][ T7057] overlayfs: overlapping lowerdir path [ 99.078478][ T5850] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.087084][ T7068] netlink: 'syz.2.389': attribute type 4 has an invalid length. [ 99.099675][ T1046] usb 7-1: USB disconnect, device number 4 [ 99.176585][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 99.188955][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.216006][ T7084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.407'. [ 99.238548][ T5850] usb 6-1: Using ep0 maxpacket: 8 [ 99.244451][ T5850] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 99.248268][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.263616][ T5850] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 99.275428][ T5850] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 99.296267][ T7092] loop5: detected capacity change from 0 to 7 [ 99.351832][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.355020][ T5846] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.358029][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.364475][ T5846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 99.367476][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 99.370246][ T5846] usb 5-1: Product: syz [ 99.371677][ T5846] usb 5-1: Manufacturer: syz [ 99.373202][ T5846] usb 5-1: SerialNumber: syz [ 99.406355][ T7099] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 99.409088][ T984] bond_slave_0: entered promiscuous mode [ 99.411563][ T984] bond_slave_1: entered promiscuous mode [ 99.428607][ T7092] Dev loop5: unable to read RDB block 7 [ 99.430445][ T7092] loop5: unable to read partition table [ 99.431669][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 99.432423][ T7092] loop5: partition table beyond EOD, truncated [ 99.435476][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 99.437456][ T7092] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 99.565127][ T7102] vivid-003: ================= START STATUS ================= [ 99.568559][ T7102] vivid-003: RDS Tx I/O Mode: Controls [ 99.571739][ T7102] vivid-003: RDS Program ID: 32904 [ 99.573510][ T7102] vivid-003: RDS Program Type: 3 [ 99.575245][ T7102] vivid-003: RDS PS Name: VIVID-TX [ 99.576981][ T7102] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 99.581610][ T7102] vivid-003: RDS Stereo: true [ 99.583547][ T7102] vivid-003: RDS Artificial Head: false [ 99.585380][ T7102] vivid-003: RDS Compressed: false [ 99.587176][ T7102] vivid-003: RDS Dynamic PTY: false [ 99.588972][ T7102] vivid-003: RDS Traffic Announcement: false [ 99.592494][ T7102] vivid-003: RDS Traffic Program: true [ 99.595008][ T7102] vivid-003: RDS Music: true [ 99.598047][ T7102] vivid-003: ================== END STATUS ================== [ 99.599679][ T5846] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.788552][ T984] usb 5-1: USB disconnect, device number 2 [ 99.796596][ T984] usblp0: removed [ 99.987397][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.991050][ T7118] batadv_slave_0: entered allmulticast mode [ 100.026994][ T5850] usb 6-1: USB disconnect, device number 4 [ 100.036896][ T5850] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 100.040462][ T5850] kobil_sct 6-1:1.0: device disconnected [ 100.049807][ T7125] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 100.180064][ T7130] MTD: Couldn't look up '/dev/sg0': -15 [ 100.181880][ T7130] /dev/sg0: Can't lookup blockdev [ 100.223973][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7135 comm=syz.3.425 [ 100.228109][ T7135] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 100.322896][ T7144] macsec0: entered promiscuous mode [ 100.324788][ T7144] macsec0: entered allmulticast mode [ 100.326496][ T7144] veth1_macvtap: entered allmulticast mode [ 100.374765][ T7148] hpfs: hpfs_map_sector(): read error [ 100.478554][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 100.638408][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 100.642284][ T34] usb 7-1: config 2 has an invalid interface number: 194 but max is 0 [ 100.645861][ T34] usb 7-1: config 2 has no interface number 0 [ 100.647994][ T34] usb 7-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 100.650209][ T7177] netlink: 'syz.3.442': attribute type 32 has an invalid length. [ 100.651998][ T34] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 100.657508][ T34] usb 7-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 100.662719][ T34] usb 7-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 100.666094][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.672291][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.674722][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.831550][ T5754] Bluetooth: Unexpected continuation frame (len 18) [ 100.884537][ T34] usb 7-1: string descriptor 0 read error: -71 [ 100.884839][ T7207] usb usb8: usbfs: process 7207 (syz.1.452) did not claim interface 0 before use [ 100.891149][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.972089][ T34] usb 7-1: USB disconnect, device number 5 [ 101.105931][ T7237] syzkaller1: entered promiscuous mode [ 101.107760][ T7237] syzkaller1: entered allmulticast mode [ 101.383180][ T7253] binder: 7252:7253 ioctl 4048587b 200000000b40 returned -22 [ 101.420801][ T7255] /dev/sg0: Can't lookup blockdev [ 101.627073][ T7279] netlink: 'syz.2.475': attribute type 9 has an invalid length. [ 101.763019][ T7299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.796565][ T7304] all: renamed from macvtap0 (while UP) [ 101.854368][ T7305] "syz.2.484" (7305) uses obsolete ecb(arc4) skcipher [ 101.972211][ T7328] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 102.202407][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 102.202419][ T42] audit: type=1400 audit(1785523666.928:562): avc: denied { write } for pid=7352 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.216124][ T7342] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 102.223247][ T42] audit: type=1400 audit(1785523666.948:563): avc: denied { ioctl } for pid=7350 comm="syz.0.502" path="socket:[17028]" dev="sockfs" ino=17028 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 102.257720][ T7342] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 102.268984][ T7342] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 102.279036][ T7342] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 102.282997][ T42] audit: type=1400 audit(1785523667.008:564): avc: denied { read } for pid=7350 comm="syz.0.502" laddr=fe80::5004:10ff:fe7c:6fd0 lport=50595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.284979][ T7342] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 102.297356][ T7342] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 102.297714][ T7356] FAULT_INJECTION: forcing a failure. [ 102.297714][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 102.308779][ T7356] CPU: 1 UID: 0 PID: 7356 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 102.308794][ T7356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.308816][ T7356] Call Trace: [ 102.308854][ T7356] [ 102.308859][ T7356] dump_stack_lvl+0x100/0x190 [ 102.309003][ T7356] should_fail_ex.cold+0x5/0xa [ 102.309034][ T7356] should_failslab+0xc2/0x120 [ 102.309075][ T7356] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 102.309090][ T7356] ? __alloc_skb+0x140/0x710 [ 102.309157][ T7356] __alloc_skb+0x140/0x710 [ 102.309168][ T7356] ? __alloc_skb+0x5b7/0x710 [ 102.309179][ T7356] ? __pfx___alloc_skb+0x10/0x10 [ 102.309191][ T7356] ? genl_rcv_msg+0x4be/0x800 [ 102.309222][ T7356] netlink_ack+0x117/0xb80 [ 102.309237][ T7356] netlink_rcv_skb+0x333/0x420 [ 102.309247][ T7356] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.309259][ T7356] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.309275][ T7356] ? netlink_deliver_tap+0x1ae/0xcc0 [ 102.309294][ T7356] genl_rcv+0x28/0x40 [ 102.309304][ T7356] netlink_unicast+0x585/0x850 [ 102.309317][ T7356] ? __pfx_netlink_unicast+0x10/0x10 [ 102.309331][ T7356] netlink_sendmsg+0x8b0/0xda0 [ 102.309343][ T7356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.309355][ T7356] ? selinux_socket_sendmsg+0x198/0x2f0 [ 102.309417][ T7356] ____sys_sendmsg+0xa4d/0xbe0 [ 102.309434][ T7356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.309445][ T7356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.309467][ T7356] ___sys_sendmsg+0x190/0x1e0 [ 102.309484][ T7356] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.309500][ T7356] ? __lock_acquire+0x49f/0x1a40 [ 102.309527][ T7356] ? get_pid_task+0x106/0x250 [ 102.309553][ T7356] __sys_sendmsg+0x160/0x210 [ 102.309567][ T7356] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.309587][ T7356] do_syscall_64+0x115/0x870 [ 102.309663][ T7356] ? clear_bhb_loop+0x40/0x90 [ 102.309676][ T7356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.309687][ T7356] RIP: 0033:0x7ffba8f9e019 [ 102.309698][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.309708][ T7356] RSP: 002b:00007ffba9d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.309748][ T7356] RAX: ffffffffffffffda RBX: 00007ffba9225fa0 RCX: 00007ffba8f9e019 [ 102.309755][ T7356] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 102.309761][ T7356] RBP: 00007ffba9d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 102.309767][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.309773][ T7356] R13: 00007ffba9226038 R14: 00007ffba9225fa0 R15: 00007fffa24b8d98 [ 102.309797][ T7356] [ 102.316053][ T7342] pci 0000:00:01.0: Adding to iommu group 1 [ 102.440072][ T7342] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 102.442351][ T7342] pci 0000:00:01.0: vgaarb: bridge control possible [ 102.444440][ T7342] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 102.458520][ T7342] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 102.469149][ T7342] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 102.477304][ T7342] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 102.548147][ T7342] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 102.551404][ T7342] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 102.558155][ T7342] [drm] features: -virgl +edid -resource_blob -host_visible [ 102.558167][ T7342] [drm] features: -context_init -blob_alignment [ 102.575168][ T7342] ------------[ cut here ]------------ [ 102.577206][ T7342] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 102.580064][ T7342] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#3: syz.1.494/7342 [ 102.583479][ T7342] Modules linked in: [ 102.584956][ T7342] CPU: 3 UID: 0 PID: 7342 Comm: syz.1.494 Not tainted syzkaller #0 PREEMPT(full) [ 102.587832][ T7342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.591224][ T7342] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 102.593222][ T7342] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 32 5e 09 85 c0 75 e0 48 8d 3d da 33 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 34 5e 09 48 85 c0 0f [ 102.599353][ T7342] RSP: 0018:ffffc9000ee76f58 EFLAGS: 00010246 [ 102.601501][ T7342] RAX: 0000000000000000 RBX: ffff888100ef9680 RCX: fffff52001dcedc6 [ 102.604061][ T7342] RDX: 0000000000000000 RSI: ffffffff8c6f8b40 RDI: ffffffff912757c0 [ 102.606520][ T7342] RBP: ffffffff8c6f8b40 R08: 0000000000000000 R09: fffffbfff224501a [ 102.609064][ T7342] R10: ffffc9000ee76f58 R11: 0000000000000000 R12: 0000000000000000 [ 102.611780][ T7342] R13: ffffc9000ee76fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 102.614442][ T7342] FS: 00007fd53d18f6c0(0000) GS:ffff8880d60da000(0000) knlGS:0000000000000000 [ 102.617272][ T7342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.619426][ T7342] CR2: 00007f2d3186c600 CR3: 000000004a496000 CR4: 0000000000352ef0 [ 102.621919][ T7342] Call Trace: [ 102.622990][ T7342] [ 102.623989][ T7342] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 102.625733][ T7342] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.627599][ T7342] ? vp_modern_set_queue_enable+0x43/0x90 [ 102.629557][ T7342] ? iowrite16+0x33/0xb0 [ 102.630957][ T7342] ? vp_modern_find_vqs+0xd2/0x100 [ 102.632590][ T7342] virtio_gpu_init.cold+0x51c/0x126e [ 102.634270][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 102.636009][ T7342] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.637684][ T7342] ? console_unlock+0x1c9/0x260 [ 102.639331][ T7342] ? __pfx_console_unlock+0x10/0x10 [ 102.640990][ T7342] ? con_is_bound+0x141/0x190 [ 102.642495][ T7342] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.644301][ T7342] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.646153][ T7342] ? vga_remove_vgacon+0x21/0x30 [ 102.647735][ T7342] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 102.651759][ T7342] virtio_gpu_probe+0x21c/0x360 [ 102.653359][ T7342] virtio_dev_probe+0x6a2/0xbe0 [ 102.655021][ T7342] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.656769][ T7342] ? kernfs_create_link+0x1bd/0x240 [ 102.671191][ T7342] ? kernfs_put+0x3f/0x60 [ 102.672690][ T7342] ? sysfs_do_create_link_sd+0xbb/0x140 [ 102.674546][ T7342] ? sysfs_create_link+0x68/0xc0 [ 102.676163][ T7342] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.678030][ T7342] really_probe+0x241/0xa60 [ 102.679597][ T7342] __driver_probe_device+0x20e/0x450 [ 102.681364][ T7342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.683295][ T7342] driver_probe_device+0x4a/0x140 [ 102.685036][ T7342] __device_attach_driver+0x1df/0x320 [ 102.686776][ T7342] ? __pfx___device_attach_driver+0x10/0x10 [ 102.689079][ T7342] bus_for_each_drv+0x159/0x1e0 [ 102.691049][ T7342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.692801][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 102.694559][ T7342] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.696475][ T7342] __device_attach+0x1e4/0x4d0 [ 102.698115][ T7342] ? __pfx___device_attach+0x10/0x10 [ 102.699935][ T7342] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.701687][ T7342] device_initial_probe+0xaf/0xd0 [ 102.703329][ T7342] bus_probe_device+0x64/0x160 [ 102.705011][ T7342] device_add+0x121d/0x1970 [ 102.706510][ T7342] ? __pfx_device_add+0x10/0x10 [ 102.708140][ T7342] ? __pfx___might_resched+0x10/0x10 [ 102.708853][ T7335] syz.2.496 (7335): drop_caches: 2 [ 102.710979][ T7342] ? __init_waitqueue_head+0xca/0x150 [ 102.713824][ T7342] ? ioread8+0x8f/0xd0 [ 102.715192][ T7342] register_virtio_device+0x4f0/0x5d0 [ 102.716989][ T7342] ? __pfx_register_virtio_device+0x10/0x10 [ 102.719507][ T7342] ? __pfx_pcibios_set_master+0x10/0x10 [ 102.721306][ T7342] ? __raw_spin_lock_init+0x3a/0x110 [ 102.723083][ T7342] ? __pfx_virtio_pci_probe+0x10/0x10 [ 102.724861][ T7342] virtio_pci_probe+0x255/0x410 [ 102.726491][ T7342] local_pci_probe+0xdd/0x1b0 [ 102.728188][ T7342] pci_call_probe+0x176/0x800 [ 102.730470][ T7342] ? __pfx_pci_call_probe+0x10/0x10 [ 102.732694][ T7342] ? find_held_lock+0x2b/0x80 [ 102.734519][ T7342] ? pci_match_device+0x450/0x5f0 [ 102.736324][ T7342] ? pci_match_device+0x450/0x5f0 [ 102.738221][ T7342] ? pci_match_id+0x34d/0x3f0 [ 102.740334][ T7342] ? pci_match_device+0xb4/0x5f0 [ 102.742411][ T7342] pci_device_probe+0x1cd/0x370 [ 102.744474][ T7342] ? __pfx_pci_device_probe+0x10/0x10 [ 102.746709][ T7342] really_probe+0x241/0xa60 [ 102.748747][ T7342] __driver_probe_device+0x20e/0x450 [ 102.750975][ T7342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.753454][ T7342] driver_probe_device+0x4a/0x140 [ 102.755574][ T7342] __device_attach_driver+0x1df/0x320 [ 102.757824][ T7342] ? __pfx___device_attach_driver+0x10/0x10 [ 102.760443][ T7342] bus_for_each_drv+0x159/0x1e0 [ 102.762233][ T7342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.764206][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 102.766183][ T7342] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.768377][ T7342] __device_attach+0x1e4/0x4d0 [ 102.770087][ T7342] ? __pfx___device_attach+0x10/0x10 [ 102.772243][ T7342] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.774074][ T7342] device_initial_probe+0xaf/0xd0 [ 102.775779][ T7342] pci_bus_add_device+0xc5/0x100 [ 102.777534][ T7342] pci_bus_add_devices+0x9a/0x1f0 [ 102.779730][ T7342] pci_rescan_bus+0x2a/0x40 [ 102.781665][ T7342] rescan_store+0xfb/0x130 [ 102.783533][ T7342] ? __pfx_rescan_store+0x10/0x10 [ 102.785641][ T7342] ? sysfs_file_kobj+0xe4/0x290 [ 102.787690][ T7342] ? __pfx_rescan_store+0x10/0x10 [ 102.789964][ T7342] bus_attr_store+0x74/0xb0 [ 102.791914][ T7342] ? __pfx_bus_attr_store+0x10/0x10 [ 102.793811][ T7342] sysfs_kf_write+0xf2/0x150 [ 102.795377][ T7342] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.797289][ T7342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.799253][ T7342] vfs_write+0x6ac/0x1050 [ 102.800922][ T7342] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.803307][ T7342] ? __pfx_vfs_write+0x10/0x10 [ 102.805156][ T7342] ksys_write+0x12a/0x250 [ 102.806979][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 102.809219][ T7342] do_syscall_64+0x115/0x870 [ 102.811275][ T7342] ? clear_bhb_loop+0x40/0x90 [ 102.813328][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.815866][ T7342] RIP: 0033:0x7fd53c39e019 [ 102.817418][ T7342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.824272][ T7342] RSP: 002b:00007fd53d18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.827696][ T7342] RAX: ffffffffffffffda RBX: 00007fd53c626090 RCX: 00007fd53c39e019 [ 102.831093][ T7342] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000a [ 102.834395][ T7342] RBP: 00007fd53c43500c R08: 0000000000000000 R09: 0000000000000000 [ 102.837674][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.841081][ T7342] R13: 00007fd53c626128 R14: 00007fd53c626090 R15: 00007ffd7a0da068 [ 102.844387][ T7342] [ 102.845702][ T7342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.848709][ T7342] CPU: 3 UID: 0 PID: 7342 Comm: syz.1.494 Not tainted syzkaller #0 PREEMPT(full) [ 102.852465][ T7342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.856665][ T7342] Call Trace: [ 102.858072][ T7342] [ 102.859340][ T7342] dump_stack_lvl+0x100/0x190 [ 102.861353][ T7342] vpanic+0x552/0x970 [ 102.863019][ T7342] ? __pfx_vpanic+0x10/0x10 [ 102.864955][ T7342] panic+0xd1/0xe0 [ 102.866541][ T7342] ? __pfx_panic+0x10/0x10 [ 102.868447][ T7342] check_panic_on_warn.cold+0x19/0x34 [ 102.870694][ T7342] ? __kmem_cache_create_args+0xa6/0x420 [ 102.873044][ T7342] __warn.cold+0x191/0x318 [ 102.874948][ T7342] __report_bug+0x30f/0x440 [ 102.876889][ T7342] ? __kmem_cache_create_args+0xa6/0x420 [ 102.879237][ T7342] ? __pfx___report_bug+0x10/0x10 [ 102.881355][ T7342] ? __mutex_lock+0x26d/0x1bd0 [ 102.883347][ T7342] ? __kmem_cache_create_args+0x44/0x420 [ 102.885706][ T7342] report_bug_entry+0xe1/0x290 [ 102.887722][ T7342] ? __kmem_cache_create_args+0xa9/0x420 [ 102.890083][ T7342] handle_bug+0x1cd/0x2a0 [ 102.891913][ T7342] exc_invalid_op+0x17/0x50 [ 102.893836][ T7342] asm_exc_invalid_op+0x1a/0x20 [ 102.895863][ T7342] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 102.898497][ T7342] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 32 5e 09 85 c0 75 e0 48 8d 3d da 33 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 34 5e 09 48 85 c0 0f [ 102.906409][ T7342] RSP: 0018:ffffc9000ee76f58 EFLAGS: 00010246 [ 102.908925][ T7342] RAX: 0000000000000000 RBX: ffff888100ef9680 RCX: fffff52001dcedc6 [ 102.912219][ T7342] RDX: 0000000000000000 RSI: ffffffff8c6f8b40 RDI: ffffffff912757c0 [ 102.915482][ T7342] RBP: ffffffff8c6f8b40 R08: 0000000000000000 R09: fffffbfff224501a [ 102.918752][ T7342] R10: ffffc9000ee76f58 R11: 0000000000000000 R12: 0000000000000000 [ 102.922025][ T7342] R13: ffffc9000ee76fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 102.925348][ T7342] ? __kmem_cache_create_args+0x9b/0x420 [ 102.927700][ T7342] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 102.929949][ T7342] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 102.932442][ T7342] ? vp_modern_set_queue_enable+0x43/0x90 [ 102.934344][ T7342] ? iowrite16+0x33/0xb0 [ 102.935824][ T7342] ? vp_modern_find_vqs+0xd2/0x100 [ 102.937463][ T7342] virtio_gpu_init.cold+0x51c/0x126e [ 102.939121][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 102.940734][ T7342] ? __pfx_virtio_gpu_init+0x10/0x10 [ 102.942399][ T7342] ? console_unlock+0x1c9/0x260 [ 102.944117][ T7342] ? __pfx_console_unlock+0x10/0x10 [ 102.946267][ T7342] ? con_is_bound+0x141/0x190 [ 102.948209][ T7342] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 102.950006][ T7342] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 102.951844][ T7342] ? vga_remove_vgacon+0x21/0x30 [ 102.953455][ T7342] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 102.956023][ T7342] virtio_gpu_probe+0x21c/0x360 [ 102.958101][ T7342] virtio_dev_probe+0x6a2/0xbe0 [ 102.960206][ T7342] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.962464][ T7342] ? kernfs_create_link+0x1bd/0x240 [ 102.964694][ T7342] ? kernfs_put+0x3f/0x60 [ 102.966538][ T7342] ? sysfs_do_create_link_sd+0xbb/0x140 [ 102.968868][ T7342] ? sysfs_create_link+0x68/0xc0 [ 102.970858][ T7342] ? __pfx_virtio_dev_probe+0x10/0x10 [ 102.973024][ T7342] really_probe+0x241/0xa60 [ 102.974689][ T7342] __driver_probe_device+0x20e/0x450 [ 102.976458][ T7342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.978313][ T7342] driver_probe_device+0x4a/0x140 [ 102.979942][ T7342] __device_attach_driver+0x1df/0x320 [ 102.982097][ T7342] ? __pfx___device_attach_driver+0x10/0x10 [ 102.984018][ T7342] bus_for_each_drv+0x159/0x1e0 [ 102.985665][ T7342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.987396][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 102.989062][ T7342] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.991353][ T7342] __device_attach+0x1e4/0x4d0 [ 102.993285][ T7342] ? __pfx___device_attach+0x10/0x10 [ 102.995321][ T7342] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.997414][ T7342] device_initial_probe+0xaf/0xd0 [ 102.999493][ T7342] bus_probe_device+0x64/0x160 [ 103.001445][ T7342] device_add+0x121d/0x1970 [ 103.003218][ T7342] ? __pfx_device_add+0x10/0x10 [ 103.005109][ T7342] ? __pfx___might_resched+0x10/0x10 [ 103.007268][ T7342] ? __init_waitqueue_head+0xca/0x150 [ 103.009446][ T7342] ? ioread8+0x8f/0xd0 [ 103.011065][ T7342] register_virtio_device+0x4f0/0x5d0 [ 103.013191][ T7342] ? __pfx_register_virtio_device+0x10/0x10 [ 103.015670][ T7342] ? __pfx_pcibios_set_master+0x10/0x10 [ 103.017685][ T7342] ? __raw_spin_lock_init+0x3a/0x110 [ 103.019451][ T7342] ? __pfx_virtio_pci_probe+0x10/0x10 [ 103.021287][ T7342] virtio_pci_probe+0x255/0x410 [ 103.022850][ T7342] local_pci_probe+0xdd/0x1b0 [ 103.024410][ T7342] pci_call_probe+0x176/0x800 [ 103.025927][ T7342] ? __pfx_pci_call_probe+0x10/0x10 [ 103.027615][ T7342] ? find_held_lock+0x2b/0x80 [ 103.029112][ T7342] ? pci_match_device+0x450/0x5f0 [ 103.030717][ T7342] ? pci_match_device+0x450/0x5f0 [ 103.032311][ T7342] ? pci_match_id+0x34d/0x3f0 [ 103.033791][ T7342] ? pci_match_device+0xb4/0x5f0 [ 103.035396][ T7342] pci_device_probe+0x1cd/0x370 [ 103.036942][ T7342] ? __pfx_pci_device_probe+0x10/0x10 [ 103.038633][ T7342] really_probe+0x241/0xa60 [ 103.040088][ T7342] __driver_probe_device+0x20e/0x450 [ 103.041785][ T7342] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.043669][ T7342] driver_probe_device+0x4a/0x140 [ 103.045412][ T7342] __device_attach_driver+0x1df/0x320 [ 103.047102][ T7342] ? __pfx___device_attach_driver+0x10/0x10 [ 103.048974][ T7342] bus_for_each_drv+0x159/0x1e0 [ 103.050532][ T7342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.052236][ T7342] ? lockdep_hardirqs_on+0x78/0x100 [ 103.053928][ T7342] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.055798][ T7342] __device_attach+0x1e4/0x4d0 [ 103.057341][ T7342] ? __pfx___device_attach+0x10/0x10 [ 103.059211][ T7342] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.060890][ T7342] device_initial_probe+0xaf/0xd0 [ 103.062502][ T7342] pci_bus_add_device+0xc5/0x100 [ 103.064117][ T7342] pci_bus_add_devices+0x9a/0x1f0 [ 103.065848][ T7342] pci_rescan_bus+0x2a/0x40 [ 103.067290][ T7342] rescan_store+0xfb/0x130 [ 103.068738][ T7342] ? __pfx_rescan_store+0x10/0x10 [ 103.070337][ T7342] ? sysfs_file_kobj+0xe4/0x290 [ 103.072168][ T7342] ? __pfx_rescan_store+0x10/0x10 [ 103.073789][ T7342] bus_attr_store+0x74/0xb0 [ 103.075550][ T7342] ? __pfx_bus_attr_store+0x10/0x10 [ 103.077757][ T7342] sysfs_kf_write+0xf2/0x150 [ 103.079686][ T7342] kernfs_fop_write_iter+0x3e0/0x5f0 [ 103.081930][ T7342] ? __pfx_sysfs_kf_write+0x10/0x10 [ 103.083777][ T7342] vfs_write+0x6ac/0x1050 [ 103.085353][ T7342] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 103.087194][ T7342] ? __pfx_vfs_write+0x10/0x10 [ 103.088750][ T7342] ksys_write+0x12a/0x250 [ 103.090132][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 103.091672][ T7342] do_syscall_64+0x115/0x870 [ 103.093162][ T7342] ? clear_bhb_loop+0x40/0x90 [ 103.094702][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.096573][ T7342] RIP: 0033:0x7fd53c39e019 [ 103.097990][ T7342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.104011][ T7342] RSP: 002b:00007fd53d18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.106636][ T7342] RAX: ffffffffffffffda RBX: 00007fd53c626090 RCX: 00007fd53c39e019 [ 103.109147][ T7342] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000a [ 103.111862][ T7342] RBP: 00007fd53c43500c R08: 0000000000000000 R09: 0000000000000000 [ 103.114393][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.116865][ T7342] R13: 00007fd53c626128 R14: 00007fd53c626090 R15: 00007ffd7a0da068 [ 103.119366][ T7342] [ 103.120985][ T7342] Kernel Offset: disabled [ 103.122354][ T7342] Rebooting in 86400 seconds..